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The  source  code  and  other  tools  contained  in  this  five-volume  set,  Pretty  Good  Privacy  5.CP^  — Platform 
Independent  Source  Code,  are  needed  to  build  PGP  for  Personal  Privacy,  Version  5.0  on  all  platforms.  In  order  to 
build  a release  quality  PGP  5.0  for  MacOS  or  32-bit  Windows,  you  will  need  the  Macintosh-  or  Windows-specific 
source  code  set  in  addition  to  this  one.  Also  included  in  this  set  is  the  source  code  needed  to  build  an  alpha  quality 
Unix  version  of  PGP  5.0  for  most  Unix  platforms. 


About  These  Books 

These  books  contain  the  source  code  and  other  tools  that  make  up  a software  package  called  Pretty  Good  Privacy,  or  PGP  for 
Personal  Privacy,  Version  5.0.  PGP  is  a high  security  cryptographic  software  application  for  Unix,  Windows  and  Macintosh 
platforms.  Since  its  initial  release  by  Philip  Zimmermann  as  freeware  in  1 991 , PGP  has  become  the  worldwide  defacto 
standard  for  email  encryption.  PGP  is  based  on  public  key  cryptography,  and  allows  people  to  exchange  files  or  messages 
with  privacy,  authentication,  and  convenience. 

Cryptography  software  involves  trust — trust  in  the  algorithms,  trust  in  the  protocols,  trust  in  the  way  that  keys  are  managed, 
trust  in  the  integrity  of  the  implementor.  Somehow,  PGP  has  become  widely  trusted  by  PGP  users.  Part  of  the  reason  is  that 
Phil,  right  from  the  beginning,  published  the  source  code  to  PGP  so  that  people  can  inspect  it  for  "back  doors",  themselves. 
The  books  you  bold  in  your  hand  extend  that  tradition  of  source  code  publication  for  peer  review.  We  hope  they  will  extend 
and  expand  the  trust  of  PGP  by  the  user  and  developer  communities. 

Because  these  books  went  to  print  a short  time  before  the  official  release  date  of  PGP  5.0,  there  may  be  some  minor  bug 
fixes  and  changes  between  the  code  in  these  books  and  PGP,  Inc.'s  official  release.  Documentation  for  these  changes  will 
be  made  available  soon. 

In  order  to  provide  a way  to  check  on  the  accuracy  of  the  code  printed  in  these  books,  each  page  contains  a line  of  checksum 
information  at  the  bottom.  These  checksums  can  be  used  to  verify  file  integrity  and  quickly  find  which  line  was  scanned 
incorrectly.  In  addition,  we  have  done  a simple  character  substitution  to  eliminate  confusion  between  the  tab  characters  and 
multiple  spaces.  The  first  space  of  each  expanded  tab  is  converted  to:  "a" 

A perl  script  ("unmunge")  is  included  in  Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  which  translates 
(reconstructs)  the  printed  form  of  each  file  into  the  original  source  code  file.  It  also  detects  errors  using  the  imbedded 
checksums,  and  can  usually  tell  you  exactly  which  line  the  error  is  on. 

Finally,  each  of  the  three  sets  of  volumes  has  its  own  file  consisting  of  SHA  hashes  for  each  reconstructed  source  code  file. 
We've  also  included  a file  of  MD5  hashes  for  each  set,  because  of  the  easy  availability  of  MD5  checking  software.  The 
files  of  assembled  hashes  have  been  digitally  signed  with  a PGP  corporate  key,  ultimately  ensuring  the  authenticity  of  the 
contents  of  each  set. 
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June,  1 997 


Dear  PGP  User: 

Well,  finally.  After  more  than  three  years,  we  finally  have  the  long-awaited  PGP  Version  5.0  ready  for 
release  (formerly  known  as  Version  3.0).  You  hold  in  your  hand  one  of  1 2 volumes  (over  6000  pages!) 
of  the  printed  copy  of  the  complete  source  code  to  PGP  for  Personal  Privacy,  Version  5.0.  In  keeping 
with  my  own  long-standing  tradition  from  the  days  before  I started  this  company,  our  source  code  is 
being  openly  published  to  facilitate  peer  review.  This  allows  everyone  to  assure  themselves  that  there 
are  no  hidden  back  doors  that  might  compromise  security. 

We  are  pleased  to  be  able  to  publish  these  books  without  having  to  fight  an  extensive  legal  battle.  As 
you  may  know,  while  a printed  book  or  other  printed  material  setting  forth  encryption  source  code  is  not 
itself  subject  to  U.S.  Export  Administration  Regulations,  (see  EAR  §734. 3(b)(2)),  the  U.S.  government 
says  it  is  considering  whether  and  to  what  extent  scannable  encryption  source  or  object  code  in  printed 
form  should  be  subject  to  the  regulations.  We  think  this  is  rather  remarkable  in  light  of  the  ruling  by  U.S. 
District  Court  Judge  Marilyn  Hall  Patel  who  said,  "Source  code... is  speech  afforded  the  full  protection 
of  the  First  Amendment."  Bernstein  v.  United  States  Dept,  of  State,  922  F.  Supp.  1426,  1428-30 
(N.D.Cal.  1 996).  In  any  event,  according  to  both  the  export  regulations  and  the  court,  the  publication 
of  this  book  is  perfectly  legal. 

It's  taken  longer  than  expected  to  produce  this  code  and  these  books,  for  a variety  of  reasons,  not  the 
least  of  which  was  the  three-year  criminal  investigation  I was  under  from  the  US  government.  That 
really  slowed  things  down.  It  cut  off  nearly  all  access  to  my  volunteer  labor  force  that  had  been  so 
instrumental  in  the  development  of  PGP  versions  2.0  and  above.  For  those  of  you  unfamiliar  with 
the  case,  the  US  government  was  taking  the  position  that  encryption  software  should  not  be  exported 
without  a license  from  the  State  Department.  Since  PGP  was  published  for  free  on  the  Internet  in  1991 
and  subsequently  spread  all  around  the  world,  the  government  assumed  that  the  law  must  have  been 
broken.  That  triggered  the  creation  of  a mostly  pro-bono  legal  defense  team,  a legal  defense  fund,  and 
three  years  of  almost  daily  press  interviews.  The  press  was  overwhelmingly  against  prosecuting  and 
the  cryptographic  policy  issue  was  drawing  the  wrath  of  the  whole  computer  industry. 

However,  the  investigation  was  closed  without  indictments  in  January  1 996.  Shortly  after  that,  I started 
my  own  company,  PGP,  Incorporated.  We  hired  a team  of  full-time  engineers  to  develop  products  like 
this  new  product,  PGP  for  Personal  Privacy,  Version  5.0. 

This  new  version  has  a lot  of  cool  new  features.  The  older  version  of  PGP  (Version  2.6.2,  released 
through  MIT)  was  only  for  MS-DOS  and  Unix™.  This  new  version  was  designed  from  scratch  to  provide 
a graphical  user  interface  (GUI)  environment.  These  volumes  contain  source  code  and  tools  that  can 
be  used  to  build  versions  that  run  under  Windows  95  and  Windows  NT,  as  well  as  a version  for  the 
Apple  Macintosh.  We  also  have  a non-GUI  version  for  Unix,  starting  with  the  Linux  platform.  The  GUI 
really  makes  using  the  product  a breeze,  with  seamless  integration  into  email  packages,  starting  with 
Qualcomm's  popular  Eudora,  Microsoft's  Exchange,  and  Microsoft  Outlook.  Now  using  PGP  to  encrypt 
or  decrypt  your  email  is  just  a couple  of  mouse  clicks  away. 

The  new  code  also  adds  some  new  encryption  algorithms.  Probably  the  most  exciting  is  the  introduction 
of  new  public  key  algorithms  that  will  serve  as  an  alternative  to  the  RSA  algorithm.  The  Diffie-Hellman 
and  Hellman-Merkle  patents  expire  this  year,  opening  the  door  to  royalty-free  use  of  public  key 
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algorithms.  Everyone  will  benefit  from  this,  because  the  whole  computer  industry  has  been  forced  to 
work  with  a public  key  patent  monopoly  that  stifled  the  use  of  public  key  algorithms  for  many  years. 
Now  the  field  is  opening  up.  PGP  offers  Diffie-Hellman  (the  ElGamal  variant  of  Diffie-Hellman)  keys, 
and  the  NIST  Digital  Signature  Standard  (DSS)  keys.  With  these  new  keys  comes  a range  of  new 
features,  including  improved  speed  and  security.  Also,  there  are  now  two  separate  key  pairs  for  each 
user,  one  pair  for  encrypting/decrypting  (Diffie-Hellman),  and  one  pair  for  signing/verifying  (DSS). 
Today  these  are  presented  to  the  user  as  if  they  were  a single  key  pair.  In  later  releases  we  will  give 
the  user  the  capability  to  change  his  DH  key  without  changing  his  DSS  key.  To  get  the  full  range  of 
benefits,  it  would  be  helpful  if  as  much  of  the  PGP  community  as  possible  participates  in  this  migration 
to  the  new  public  key  algorithms. 

Our  new  code  also  implements  new  block  ciphers  for  bulk  encryption,  offering  triple-DES  and  CAST 
as  options,  as  well  as  continuing  to  support  the  IDEA  cipher  from  earlier  versions  of  PGP.  We  also  offer 
a new  signature  hash  algorithm,  SHA-1,  for  computing  digital  signatures.  The  old  hash  algorithm, 
MD5,  developed  by  RSA  Data  Security  Inc,  has  been  discovered  to  have  serious  weaknesses  and  is  no 
longer  recommended  to  make  digital  signatures.  To  use  the  new  SHA  hash  algorithm,  users  will  have 
to  use  DSS  as  their  signature  algorithm,  because  PGP's  RSA  signatures  continue  to  use  the  MD5  hash 
for  backward-compatibility  reasons. 

A particularly  exciting  new  feature  is  the  integration  with  public  key  servers.  Now  PGP  will  look  up 
public  keys  on  a remote  key  server  on  the  Internet,  such  as  the  one  at  MIT.  When  you  generate  a new 
public  key,  PGP  will  offer  to  upload  it  to  the  remote  key  server.  Anyone  will  be  able  to  get  anyone 
else's  public  key  whenever  they  need  it.  This  will  tie  all  PGP  users  everywhere  together  into  a global 
community,  with  a nationwide  public  key  infrastructure  that  no  other  encryption  product  can  offer.  This 
infrastructure  will  grow  organically,  like  the  Internet  did. 

I hope  that  you  will  agree  that  this  new  release  of  PGP  was  worth  the  wait. 

Sincerely, 

Philip  Zimmermann 

Chief  Technology  Officer,  Pretty  Good  Privacy,  Inc. 
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ASCII  character  set 


|0|1 |2|3|4|5|6|7|8|9|A|B|C|D|E| F| 

2i  i!i"i#i$i%i&i'i(ni*i  + M-  i-  i/  i 

3|0|1|2|3|4|5|6|7|8|9|:|;|<|=|>|?| 
4|al|A|B|C|D|E|F|G|H|I|J|K|L|M|N|0| 
5|P|Q|R|S|T|U|V|W|X|Y|Z|[|\|:r  |_| 
6r|a|b|c|d|e|f|g|h|i|j|k|L|m|n|o| 
7|p|q|r|s|t|u|v|w|x|y|z|{|||>|~|  | 
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ft  ! /usr/bi  n/per  L 
ft 

ft  unmunge 
ft 

ft  Copyright  (C)  1 997  Pretty  Good  Privacy,  Inc. 
ft 


AIL  rights  reserved. 


Sdocksum  = "docksum"; 


$f i Le  = SARGVCe:; 

$out  File  = SARGVCI 1; 

StabChar  = "\244'';  ft  Character  value  for  printable  tab  character 

StabWidth  = i n t ( $ A RG V C 2 D ) ; 
if  (StabWidth  <=  0) 

{ 

StabWidth  = 4; 

> 


SquotedOutFi Le 
SquotedOutFi Le 
SquotedOutFi  L e 


SoutFi Le; 
s/'/W'/g; 
s/\\/\\\\/g; 


S n umB L a n k L i n e s = 0; 
open  (SCANNED,  "<SfiLe")  ||  die; 
open  (OUT,  ">SoutFiLe")  ||  die; 
while  (<SCANNED>) 

{ 

s/\s  + S//;  ft  Strip  trailing  whitespace 

if  (/''S/J 
{ 

SnumBLankLines++; 

> 

eLsif  (/^\s*\C\CCHK: ( C 0-9a - f D + ) \ D \ D S / ) 

{ 

if  ( Sn umB L a n k L i ne s < 1) 

{ 

print  STDERR  "WARNING:  Checksum  Line  found  without  ", 

" proceeding  blank  Line"; 

> 

else 

{ 

SnumBLankLines — ; 

> 

> 

else 

{ 

while  (SnumBLankLines  > 0) 

C 

print  OUT  "\n"; 

SnumBLankLines  — ; 

> 

s/StabChar(  *)/"\t".("  " x (Length(SI)  - StabWidth  + Length(S') 

% S t a b W i d t h + 1 ) ) / e g ; 

print  OUT  "S_\n"; 

> 

> 

close  (SCANNED)  ||  die; 
close  (OUT)  II  die; 
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open  (DOCKSUM,  "Sdocksum  -58  'SquotedOutFiLe'  |")  ||  die; 

<D0CKSUM>; 

open  (SCANNED,  "<$file")  ||  die; 

$page  = 0; 
while  (<SCANNED>) 

{ 

s/\s  + $//;  tt  Strip  trailing  whitespace 

if  (/^\s*\c\:cHK:(i:0-9a-f:  + )\:\:$/) 

{ 

$page++; 

Sactual  = $1; 

ScksumLine  = <D0CKSUM>; 

die  unless  (ScksumLine  =~  / * ( C 0-9a -f ] + ) \ s+Pa g e \ s+ ( \ d+ ) \ s *$ / 
and  $2  ==  Spage); 

Sexpected  = $1; 
if  (Sactual  ne  Sexpected) 

{ 

print  STDERR  " Actual:  $actual\nExpected:  $expected\n"; 

$ I i n e = 1 ; 

while  ((Sactual  ! " /^$/)  S&  (Sexpected  !”  /*S/)) 

{ 

Sactual  =■  /''(.)/; 

Sa  = S1; 

Sexpected  =~  /■'(.)/; 

Se  = SI ; 

last  unless  (Sa  eq  Se); 

Sactual  =~  s/^(.)//; 

Sexpected  =~  s/''(.)//; 

Sline++; 

} 

print  STDERR  "ERROR:  Sfile  on  or  before  page  Spage  line  SlineXn"; 
e X i t ( 1 ) ; 

} 

} 

> 

if  (Spage  ==  0) 

{ 

print  STDERR  "ERROR:  No  checksum  information  found  in  SfileXn"; 
exit(1  ); 

} 

elsif  (<D0CKSUH>  !"  /‘'S/) 

print  STDERR  "ERROR:  Sfile  missing  checksums  after  page  SpageXn"; 
exit(1  ); 

} 

close  (SCANNED)  | | die; 
close  ( DOCKSUM)  ; 

exit(0); 
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/* 

★ 

★ 

* 

* 

*/ 


docksum  - The  program  used  to  generate  the  checksums  found  at  the 
bottom  of  each  page  in  the  source  code  books. 

Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 


#incLude  <stdio.h> 
#incLude  <stdLib.h> 


typedef  unsigned  Long  word32; 
static  word32  c r c t a b L e C 2 5 6 3 = {0,>; 

#define  POLY  0xedb88320  /*  Standard  CRC-32  poLynomiaL  */ 


static  void 
crctabLe_init(void) 

{ 

word32  crc  = 1; 
int  i = 128,  j; 


do  { 

crc  = (crc  >>  1)  ^ CCcrc  & 1)  ? POLY  : 0); 
for  Cj  = 0;  j < 256;  j +=  2*i) 

crctabLeCi+j3  = crctabLeCjD  * crc; 
> whiLe  (i  >>=  1); 


struct  { 


} const 


char 

curstate; 

char 

hashfLag;  /*  0,  1 or  char 

t 0 

hash  * / 

char 

nextstate; 

char 

const  *chars; 

ptabLeC] 

= { 

/*  State 

0:  normaL  processing  * 

/ 

{ 0, 

1, 

0,  NULL  >, 

/* 

DefauLt  */ 

{ 0, 

1 1 

/ 

1,  " \t\v\n\r\f"  >, 

/* 

Compress  ws  to  one 

bLank 

{ 0, 

2,  "/"  }, 

/* 

PossibLe  comment  Leader 

{ 0, 

-1, 

8,  >, 

/* 

String  start  */ 

{ 0, 

1, 

10,  >, 

/* 

Char  constant  start 

*/ 

/*  State 

1:  whitespace  */ 

{ K 

1, 

0,  NULL  }, 

< 1, 

0, 

1,  " \t\v\n\r\f"  >, 

{ 1, 

2,  "/"  }, 

{ 1, 

8,  >, 

{ 1, 

1, 

10,  >, 

/*  State 

2:  Seen  first  sLash  of 

a 

possibLe  comment  */ 

{ 2, 

1, 

0,  NULL  >, 

< 2, 

1 1 

/ 

1,  " \t\v\n\r\f"  >, 

/* 

Compress  ws  to  one 

bLank 

i 2, 

3,  "/"  >, 

/* 

End-of-Line  comment 

*/ 

C 2, 

1, 

5,  }, 

/* 

Go  to  in-comment  */ 

/*  State 

3:  end-of-Line  comment 

*/ 

{ 3, 

1, 

3,  NULL  }, 

{ 4, 

1 1 

4,  " \t\v\r\f"  >, 

/* 

Compress  to  one  bLank  */ 

{ 3, 

1 I 

1,  "\n"  >, 

/* 

End  of  Line  */ 

/*  State 

4:  end-of-Line  comment 

bLank  compression  */ 

{ 4, 

1, 

3,  NULL  >, 

i 4, 

0, 

4,  " \t\v\r\f"  >, 
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i 4, 

1 1 

, 1 , " \n"  >, 

/ * State 

5:  in  comment  (ignore  string  boundaries)  */ 

< 5, 

1, 

5,  NULL  }, 

{ 5, 

1 1 

, 6,  " \t\v\n\r\f"  >, 

/* 

Compress  to  one  blank 

*/ 

{ 5, 

1, 

/* 

Possible  end  of  comment  */ 

/*  State 

6:  in  comment  blank 

comp  ression  */ 

{ 6, 

1, 

5,  NULL  }, 

{ 6, 

0, 

6,  " \t\v\n\r\f"  }, 

{ 6, 

1, 

7 " * " > 

/ * State 

7:  possible  end  of  comment 

*/ 

{ 7, 

1, 

5,  NULL  >, 

{ 7, 

1 1 

, 6,  " \t\v\n\r\f"  }, 

/* 

Compress  to  one  blank 

*/ 

<■  7, 

1, 

0,  "/"  >, 

/* 

End  of  comment  */ 

/*  State 

8:  in  string  (don't 

compress  blanks  in  strings) 

*/ 

00 

N 

8,  NULL  >, 

< 8, 

1, 

0,  }, 

/* 

End  of  string  */ 

{ 8, 

1, 

9,  "W"  >, 

/* 

Deal  with  backslashes 

*/ 

/*  State 

9:  in  string  after  backslash  */ 

{ 9, 

1, 

8,  NULL  }, 

/ * State 

10:  in  char  constant 

( don  ' 

t compress  blanks)  */ 

(10, 

1, 

10,  NULL  >, 

{10, 

0,  >, 

/* 

End  of  constant  */ 

{10, 

1, 

11,  "W"  }, 

/* 

Deal  with  backslashes 

*/ 

/*  State 

11:  in  char  constant 

after 

backslash  */ 

{11, 

1, 

10,  NULL  >, 

>; 

#define  NR_STATES  12 

#define  eLemsofCarray)  (sizeof(array)/sizeof(*(array))) 

/* 

* The  format  of  a stateTabLe  entry  has  (starting  from  the  L ea s t - s i g n i f i c a n t 

* byte),  8 bits  of  character  to  hash,  1 bit  of  flag  whether  to  hash  at  all, 

* and  then  the  next  state  to  transition  to.  this  is  fuLLy  expanded  for 

* rapid  access. 

*/ 

//define  PARS  E_H  AS  H F LAG  256 
//define  P A R S E_N  E XT  S H I F T 9 

static  unsigned  short  stateTabLeCNR_STATESDC256D; 
static  void 

s t a t eTa b L e_ i n i t En t ry ( c ha r c,  int  curstate,  char  hashfLag,  int  nextstate) 

{ 

int  parse  = hashfLag  S 255; 

if  (parse)  { 

if  (parse  ==  1) 

parse  = c & 255; 
parse  +=  P A R S E_ H A S H F L AG ; 

> 

stateTabLeCcurstateHCc  S 2553  = parse  + (nextstate  <<  PARSE_NEXTSHIFT); 

} 

static  void 
stateTabLe_init(void) 

{ 

int  i , j; 
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char  const  *p; 


for  (i  = 0;  i < (int)eLemsof(ptabLe);  i++)  { 
p = ptabLeCiD. chars; 
if  ( p ) { 

while  (*p)  { 

stateTabLe_initEntry(*p++,  ptabLeCiD.curstate, 
ptableCiD.hashflag,  ptabLeCiD.nextstate); 

> 

> else  { 

for  Cj  = 0;  j < 256;  j++)  f 

stateTabLe_initEntry(j,  ptabLeCiD.curstate, 

ptableCiD.hashflag,  ptableCiJ.nextstate); 


struct  Context  { 

uord32  crc; 
int  state; 

unsigned  pos.  Line,  page; 
unsigned  Lpp,  Lpp2; 

#if  ONE_PER_LINE 

char  *ptr;  /*  Into  buf  */ 

char  bufC1024D; 

# e nd i f 

>; 


static  void 

pa r s e I n i t ( s t r u c t Context  *ctx) 
{ 


ctx->crc  = 
ctx->state 
ctx->pos  = 
ctx->Lpp  = 
#if  ONE  PER  LINE 


(word32)-1 ; 

= 0; 

ctx->Line  = ctx->page  = 0; 
c t x->  L pp2  = 0; 


ctx->ptr  = ctx->buf; 

If  end  i f 

> 


/* 

* Now,  all  of  the  work  that  we  did  above  is  to  make  this,  the  main  loop, 

* as  simple  as  possible. 

* 

* (For  the  interested,  if  we  had  more  states,  it  would  have  been  better 

* to  map  the  characters  into  classes  and  then  have  a NR_STATEX  x NR_CLASSES 

* array,  to  avoid  thrashing  the  cache.) 

*/ 


static  void 

pa r s eBu f ( s t r u c t Context  *ctx,  char  const  *line,  size_t  len) 
{ 


int  state  = ctx-> state; 
word32  crc  = ctx->crc; 
size_t  Lflen  = Len  + ctx->pos; 
#if  ONE_PER_LINE 

char  *p  = ctx->ptr; 

#end i f 
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int  c,  parse; 


while  (Len — ) { 

c = *Line++  & 


#if  ONE_PER_LINE 

* p + + 


#endi f 


c; 


255; 


parse  = s t a t eTa b L e C s t a t e ] C c ] ; 
if  (parse  & P AR S E_H A S H F L AG ) 

crc  = (crc  >>  8)  * c r c t a b L e C ( c r c ^ parse)  & 255]; 
state  = parse  >>  P AR S E_N E XT S H I FT ; 
if  ( c ==  ' \n ' ) { 


#if  ONE  PER  LINE 


#if  0 


Lflen  = len; 

p r i n t f ("/*/(  0 2 X */ \ t " , ( u n s i g n ed  ) ( c r c >>  24)); 
f w r i t e ( c t x->bu f , 1,  (size_t)(p  - ctx->buf),  stdout); 
p = ctx->buf; 

+ + c t x->  I i ne ; 

if  (ctx->line  ==  ctx->lpp)  { 

printf("/*%08lx*/\f",  (unsigned  long)crc); 
ctx->line  = 0; 

} 


#end  i f 
#e  I se 


#endi  f 


c = " 0 1 234 56789a b c d e f "[ c r c >>  28]; 
putchar(c); 

if  (++ctx->line  ==  ctx->lpp)  { 
if  (ctx->lpp2) 

ctx->lpp  = ctx->lpp2; 
ctx->line  = 0; 
printf("%07lx  Page  %u\n", 

(unsigned  long)crc  S 0xfffffff, 
+ + C t x->pa  ge ) ; 
ctx->crc  = (word32)-1; 

> 


> 


} 


ctx->state  = state; 
ctx->crc  = crc; 
ctx->pos  = ( u n s i g n e d ) I f I e n ; 
#if  ONE_PER_LINE 

c t x->pt  r = p; 

#endi  f 
} 


static  void 

pa r s e F i n i s h ( s t r u c t Context  *ctx) 

{ 

#if  ONE_PER_LINE 

if  (ctx->ptr  !=  ctx->buf)  f 

p r i n t f ( " / *%02x*/ \ t " , ( un s i g n e d ) ( c t x-> c r c >>  24)); 
f wri te( ctx->buf , 1,  ( s i ze_t ) ( c t x->pt r - ctx->buf),  stdout); 
p r i n t f ( " / *% 08  I X NOTE:  Last  line  missing  newline.  */\n", 
ctx->crc); 

} else  { 


printf("/*%08lx*/\n",  ctx->crc); 
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# e L s e 


} 

i n t c ; 


Send i f 

> 


i f 


> 


(ctx->pos  I I ctx->Line)  { 
if  (ctx->pos)  { 

c = " 0 1 2 34 5 6789a b c d e f " C c t x-> c r c >>  28D; 
putchar(c); 

> 

p r i n t f ( " %07 L X Page  %u\n",  (unsigned  L o ng ) c t x-> c r c & 0xfffffff, 
++ctx->page); 


i nt 

mainCint  argc,  char  **argv) 
{ 

FILE  *f; 

struct  Context  ctx; 
char  bufC1024Il; 
s i ze_t  I en; 
unsi gned  (pp  = 0; 
unsigned  Lpp2  = 0; 
unsigned  Long  uL; 
char  * p ; 
char  c h ; 


i f 


> 


(argc  < 2)  { 

fprintf(stderr,  "Usage: 

argvC0D); 
return  -1; 


%s  C-Lines_per_page]  fiLe.c  C...D\n", 


crctabLe_init(); 

stateTabLe_init(); 


while  ( — argc)  { 

ch  = ( *++a rg V ) C03 ; 

if  (ch  ==  II  ch  ==  ■+' ) { 

uL  = strtouL(*argv+1,  6p,  0); 
if  (!*p  &&  p !=  *argv+1  &S  uL  == 
if  (ch  ==  '+' ) 

Lpp2  = (unsigned)uL; 

e L s e 

Lpp  = ( u n s i g ned  ) u L ; 
continue; 

} 


} 

f = fopen(*argv,  "r"); 
if  ( ! f ) { 


perror(*argv); 
return  1; 

} 

Sif  ONE_PER_LINE 

printf("===  %s  ===\n",  *argv); 


#e  L s e 


(unsigned)uL) 


{ 


printf("%s:\n",  *argv); 
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# e n d i f 


parselnitC&ctx); 
ctx.Lpp  = Lpp; 
ctx.LppZ  = Lpp2; 
for  (;;)  { 

Len  = freadCbuf,  1,  sizeof(buf), 
if  ( ! L e n ) 

break; 

pa r s e Bu f ( 8 c t X , buf,  Len); 

> 

parseFinishCSctx); 


#if  ONE_PER_LINE 

printfC"===  END  ===\n"); 


#end i f 

> 


return 
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BEGIN  PGP  SIGNED  MESSAGE 

Hash:  SHA1 


S H A ( L i b / Ha ke f i L e . i n ) = 


5259be11  128d61d6 

S H A ( L i b /ma ke f i L e . ms c ) = 

28223394 

ef 1 8b525 

5044b39a 

065ace94  6f8a3573 

S H A ( L i b / bn / Ha ke f i L e . i n ) = 

365ebf 08 

b87f f 894 

abd8faca 

41a51093  1815536c 

SHA( Lib/bn/makefi Le.msc) 

59d257c1 

eb0dce8c 

c616ee86 

e769eddf  7efce765 

S H A ( L i b / bn / bn . c ) = 

526c2bb7 

db598f 9b 

661 7f 88c 

68853201  1444a780 

S H A ( L i b / bn / bn  . h ) = 

91 048833 

f ed00dec 

81 d1 a81 1 

3741fec2  e8b9625b 

S H A ( L i b / bn / bn 00 . c ) = 

382ce6af 

0dcdb1 d7 

9b3eb367 

55d72c77  14fa400e 

S H A ( L i b / bn / bn  1 6 . c ) = 

9a250a8f 

0a58da23 

59c63edc 

678ea6e7  33280541 

SHA(Lib/bn/bn16.h)  = 

6b422780 

eaeaaead 

a9030203 

4c82c997  0742bd73 

S H A ( L i b / bn / bn68000 . c ) = 

bbf 3007a 

7b3575f a 

f 681 561 8 

b1aeeb95  c530b372 

S H A C L i b / bn / bn 8086 . c ) = 

de041 f c5 

91 2a4f 29 

b8d2ae02 

353fe226  9325ff53 

S H A ( L i b / bn  / bnd  s a p r i me  . c ) 

4b363ca4 

4952cc6e 

c5ee0e4c 

6579e195  5a782a06 
S H A ( L i b / bn / bnd s a p r i me . h ) 

db310a56 

6f 72eadf 

0C01 3cf 7 

2aecb6b9  54848ad3 

S H A ( L i b / bn / bng e rma i n . c ) = 

048672a3 

677e71 56 

ef 84e724 

ee7897ab  338eb40f 
S H A ( L i b /bn /bnge rma i n . h ) = 

750a4955 

274d24bc 

2a0be32a 

6b931d1a  531a36cc 

S H A ( L i b / bn / bn i . h ) = 

d6f24cad 

68e90d40 

d97f 7f f d 

b59a46f3  68327710 

SHA( L i b/bn/bni 00 . c ) = 

4deb9fbc 

8df dda59 

41 55ba9e 

22bfaa43  cf74da6f 

S H A ( L i b / bn / bn i 1 6 . c ) = 

bc0a6a  c9 

979868b4 

6f b4f 76c 

45c9a1f7  ea97883e 

S H A ( L i b / bn / bn i 1 6 . h ) = 

b03e26f 1 

2b2d5e7b 

52c48bd7 

baade571  55b3c2ba 

S H A ( L 1 b / bn / bn  1 68000 . c ) = 

75228280 

aa8ee4c2 

61 eee845 

a7eb496b  720f9a53 

SHA(Lib/bn/bni68000.h)  = 

3920d858 

731 c21 0e 

6b9b32b0 

f3a6d736  18ef36a8 

S H A ( L i b /bn /bn i 68020 . c ) = 

eaa93442 

38354a9b 

8740af 60 

27ea20c2  84f3fae1 

S H A C L i b / bn / bn i 6802 0 . h ) = 

b9d068e2 

f af 2aa0e 

eb94709d 

2b3b3883  85fc2814 

S H A ( L i b / bn / bn i 80386 . a sm ) 

652b3ef 7 

f b603f f 5 

cd2d89b0 

d1e50107  ef3e0706 

S H A ( L i b / bn / bn i 80386  . h ) = 

ce279b42 

eb2de1 85 

23321363 

92b5956a  1226da35 

S H A ( 1 i b / bn / bn i 80386  . s ) = 

b804302c 

84d81 4b2 

8e3bf 7af 

eef21ec4  34eca5c3 

S H A ( L i b / bn / bn i 80386 c . c ) = 

b85206c1 

5af30c70 

44b3ce99 

5cf04a75  afa9770e 

S H A ( L i b / bn / bn i 80386 c . h ) = 

18c7cbcf 

34a1 0365 

15619544 
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3315703e  a29d26fc 

ce51 4f d0 

1 b21 c557 

a cee687f 

S H A ( L i b / b n / bn i 8086 . a sm ) = 

93ac0fcd  6b086594 

af ea8275 

e4d9c1 62 

89eabbf b 

SHA(Mb/bn/bm'8086.h)  = 

e330e0d1  57d363fe 

1 el 6b596 

cadc2c1 a 

32eec480 

S H A ( L i b / b n / bn i 960 j X . s ) = 

46cd4262  d710392c 

f 571 f 775 

278cab79 

32bbc6dd 

S H A ( L i b / bn  / bn  i a L p h a . h ) = 

f1468fb4  17131b4e 

63083452 

b67b536e 

53626038 

S H A ( L i b / bn / b n i a L p h a . s ) = 

68f014b8  4db39c13 

9cdc2ddf 

f1 el  8939 

aa4bd41  3 

S H A ( L i b / b n / bn i mem . c ) = 

d3451083  8892591a 

a2ba0261 

81 261472 

f 3561 aad 

S H A ( L i b / bn / bn i mem . h ) = 

dccd8ef6  ee28a946 

c32a31 0f 

980368f d 

94cae794 

S H A ( L i b / bn / bn i n i 1 1 6 . c ) = 

113d345f  ecdde38a 

dba9b49a 

8f 889d51 

9f 70b73a 

S H A ( L i b / b n / bn i p p c . c ) = 

d5f8c7fc  35200568 

9c76d092 

261 755cc 

955843dd 

S H A ( L i b / bn / b n i pp c . h ) = 

11cf9bf6  c5c48150 

f 6a8c9b8 

f 2742e46 

49a8e7b9 

S H A ( 1 i b / b n / bn  j a c 0 b i . c ) = 

2fd6c53b  a19b20dd 

cf678350 

41 439e6c 

6b0907e4 

S H A ( L i b / b n / bn j a c 0 b i . h ) = 

5d85fd04  203c8105 

5f 3af 822 

edc9db35 

95c40c0e 

S H A ( L i b / bn / b n k L ud g e . h ) = 

a775a093  020f1e27 

21a4c68f 

33a68ad2 

afl 50889 

S H A ( L i b / b n / bn  1 eg  a L . c ) = 

1033a994  0c03ffd1 

884ad454 

8a749a0c 

3dcef 9d3 

S H A ( L i b / bn / bn L e g a L . h ) = 

85362609  9c84f4c8 

458f 3d8b 

d4e4e8b7 

ee536e07 

S H A C L i b / bn / bn pp c a s m . h ) = 

5c29bfd8  9d43c55b 

44503d20 

e293e307 

2d957744 

S H A ( L i b / b n / bn p r i me . c ) = 

192accbd  0b80c982 

e26b2bb1 

b7878007 

e4c6a0a3 

S H A ( L i b / bn / bnp r 1 me  . h ) = 

0e9cd547  97fe2165 

4ce02c88 

6aba0a83 

dda02e7f 

S H A ( L i b / bn / bn p r i n t . c ) = 

ae33b7e6  7d7da5cc 

e536180f 

430381 fc 

9132920c 

S H A ( 1 i b / b n / bn p r i n t . h ) = 

0122a76d  3c4dc699 

3699c1 c8 

8706cf 98 

b6d0f 3c1 

S H A ( L i b / bn / bn s i e V e . c ) = 

ca9fca17  87710678 

95aba1 71 

d2aba05e 

076a9b1 a 

S H A C L i b / bn / bn s i e ve . h ) = 

83cb0778  14ed397f 

9d95c19d 

3deebd6c 

381 6c 1 ca 

S H A ( L 1 b / bn / bn s i z e 00 . h ) = 

d131b3ee  d0c3be23 

1937f7b5 

a8acd826 

48bb1 3aa 

S H A ( L i b / b n / L b n00  . c ) = 

979019db  725f1daf 

f 8494582 

c6be0a3a 

45f 7d1 58 

S H A ( L i b / pg  p / Ma  ke  f i L e . i n ) 

ad31ef4c  893fec24 

2d05d887 

20170325 

el  1 f 50-f  6 

SHA(Mb/pgp/makefi  Le.msc) 

614d09c1  653ca099 

4557c93a 

470f c4a9 

a42a0835 

SHA(  Mb/pgp/cipher/Makefi  1 

86749214  20b61d09 

. e . i n ) = 

7071 3f 65 

81 c077e8 

785c7af 5 

SHA(lib/pgp/cipher/makefiLe.msc)  = 

b8b37b29  3b951dab  004ca2f8 

33af c8c7 

deb98eb2 

S H A ( L i b / pg p / c i p h e r / pg  p C A S T 5 . c ) = 
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70502df8  0a5031de  4256daf7  492dc80e  62609e96 
S H A ( L i b / pg p / c i ph e r / pg p C AST 5 . h ) = 

81305a46  097b4ff1  346deab8  9c5e4550  dd6c849f 


SHA(Lib/pgp/cipher/pgpCASTBox5.h)  = 

a6819cc8  f8a4c4ed  63102684  1f7f7f46  2ad7f93c 
S H A ( L i b / pg p / c i ph  e r / pg p C FB  . c ) = 

54ee9312  c4272d1f  fedbdelS  def61d4d  56a3bccb 
S H A ( L i b / pg  p / c i p h e r / pg  p C F B . h ) = 

b2c5db12  94136ecb  8d03ecae  3547b743  64dc73a6 
SHA(lib/pgp/cipher/pgpCipher.c)  = 

4e00d6ed  4791382c  847ba7a9  7613b46f  1ef9ad31 
SHA(Lib/pgp/cipher/pgpCipher.h)  = 

b442e685  fb52ad49  f7e09703  38eafe08  52fd4c00 
S H A C L i b / pg p / c i p h e r / pg  p D E S 3 . c ) = 

f18fdec4  c30a7518  4a5ba5fa  6032a836  c7a38366 
SH A ( I i b/ pgp/ c i ph e r / pgp D E S3  . h ) = 

694a41e4  e146155d  546c1293  9bab3cdf  2c5db442 
SHA(Lib/pgp/cipher/pgpDES3_68K.c)  = 

50928621  f4b7b10e  b6690186  9f792d69  3e862ec4 
S H A ( L i b / pg  p / c i p h e r / pg  p I D E A . c ) = 

6410c1cb  e68b17ed  c1a44ac1  df4a17b1  f04125ae 
S H A ( 1 1 b / pg p / c i ph e r / pg p I D E A . h ) = 

ca68907a  bd8768b6  a9d49dc2  68169485  64f548d4 
SHA(Lib/pgp/compress/Makefi  Le.in)  = 

40e05e32  de93a509  72a75d6d  2ef45a99  5c66f350 
SHACLib/pgp/compress/makefi  le.msc)  = 

e1a852d0  fb0d6ae7  73da1b40  9177eded  224aead6 
SHACLib/pgp/compress/pgpCompress.h)  = 

00b824b6  352a56a8  3c2fc5ad  8add5ff8  281bf498 
SHAClib/pgp/compress/pgpZInfLate.c)  = 

bca20eaf  9b40ead8  f2e6a1eb  0d73ea58  35e33021 
SHA(Lib/pgp/conipress/pgpZInfLate.h)  = 

88ea6770  f96824b7  98e1db51  a3ddc33b  71eee120 
S H A ( I i b / pg p / h a s h / Ha  ke  f i I e . 1 n ) = 

dccf91cd  3337c836  e422e10a  38b86b9c  d285c976 
SH A ( L i b/ pgp/ha sh /ma kef i L e . ms c ) = 

162432a9  273dca70  0b947e43  d41f1dcb  063e0e07 
S H A ( L i b / pg p / h a s h / pg  pHa  s h . c ) = 

7992c705  66675ec7  C0e787a5  117aaec3  374397d9 
S H A ( L i b / pg p / h a s h / pg pHa s h . h } = 

ef553e06  2bbc230e  eef1397b  87066609  54844768 
S H A ( L i b / pg p / ha s h / pg pH D 5 . c ) = 

f54a07f0  b09895d6  91fb0ac7  0ba1e5bf  3ed20924 
S H A ( L i b / pg p / ha s h / pg pH D 5 . h ) = 

a91d4f88  ff73b223  71d56ef3  e92009c2  223ba8f3 
SHA(Lib/pgp/hash/pgpRIPEHD160.c)  = 

fb8ccb76  a61a3a05  c8f3ae74  5f3fee9b  f690eedb 
SHA(lib/pgp/hash/pgpRIPEHD160.h)  = 

b7b0f043  e7a0c138  9701a832  6dc357a5  f20b17a9 
SH A ( I i b/ pgp/ ha sh /pgpSH A . c ) = 

cf676854  b3ac9516  5c7ede17  9110ab77  319894c7 
S H A ( L i b / pg p / h a s h / pg pS H A . h ) = 

7b60221e  1cbdb2d8  7c72d379  bcd502ce  a6c14c64 
SHA(Lib/pgp/heLper/HakefiLe.in)  = 

d6ec5a02  175aac4a  7933836f  004f0c01  4db6d2b7 
SHA(Lib/pgp/heLper/makefiLe.msc)  = 

a1699f1a  38da6239  8322acb4  226ecee1  6e272822 
SHA( Lib/pgp/heLper/pgpAnnotate  . c)  = 
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6a0876aa  021967bc  92893882  4f5d8ebc  72ef7719 
SHACLib/pgp/heLper/pgpByteFIFO.c)  = 

204eece4  1d09e2c5  d7f4133c  9dcc1911  e3ab2b10 


SHA(Lib/pgp/heLper/pgpByteFIFO.h)  = 

491ecafe  6861a6d4  316f1628  d55eaa27  7babd332 
SHA( Lib/pgp/heLper/pgpCharMap. c)  = 

4e77daea  9cf9c458  02d74a5d  416615d9  927505ce 
SHA(Lib/pgp/heLper/pgpCharMap.h)  = 

3ac5a058  a882c0c0  7e7097d9  8e456853  190a8386 
S H A ( L i b / pg  p / he  L pe  r / pg  p Debug  . c ) = 

99c759a9  ee880e7b  91bea828  0a4628c3  757dc27f 
S H A ( I i b / pg p / h e L p e r / pg p D e bu g . h ) = 

664f8194  30342f75  e3383cff  09099aa6  0e358365 
S H A ( L i b / pg p / h e L p e r / pg  p E r r . c ) = 

6174889c  d6b0dfb8  796083d2  7f243a29  6a98aabd 
S H A ( L i b / pg p / h e L p e r / pg  p F I F 0 . c ) = 

16357f08  3b9074b9  61bb44bb  a68af4fa  8a1d4a4f 
S H A ( L i b / pg  p / h e L p e r / p g p F I F 0 . h ) = 

2C042665  d7408cdf  f4c89e44  d73bb38c  82cf67d8 
S H A ( I i b / pg p / h e L pe r / pg p F i L e . c ) = 

3130a655  234a5007  af351e39  c1e7f66c  9354be5a 
S H A ( L i b / pg p / h e L p e r / pg  p F i L e . h ) = 

d26244b1  6be27f7f  c409c8bf  e6cc489c  155982de 
SHACLib/pgp/heLper/pgpFi LeFIFO.c)  = 

98f480a1  851030e7  873299b7  c0547e12  c483f8c8 
SHA(Lib/pgp/heLper/pgpFi LeNames.c)  = 

9cd3b72b  81bcd895  2a0fbab8  16c060d4  26a142aa 
SHA(Lib/pgp/heLper/pgpFi LeNames.h)  = 

0a0757fa  25215b80  c818045d  c0d79fcf  def26035 
SHA(Lib/pgp/heLper/pgpFi LeRef.c)  = 

72fc40d2  67f287df  210ae1b3  95aafbd8  84009292 
SHACLib/pgp/heLper/pgpFileRef.h)  = 

4f2fe780  84396552  b94e7699  b392a282  b9183e78 
SHA( Lib/pgp/heLper/pgpFLexFIFO. c)  = 

61f71904  976f8048  9b54e778  43ea704d  548927c9 
SHA(Lib/pgp/heLper/pgpGLobaLs.c)  = 

7fbcb140  29ca322f  711ffdd2  6c7adff7  66204ff6 
SH A ( L i b / pgp /he L pe r / pgp Lea ks . c ) = 

503efff8  3c7be113  0776b31c  6d46dfc1  d8794ecf 
S H A ( L i b / pg p / h e L pe r / pg p Le a ks . h ) = 

68e4c7ba  82fead7a  1abc5d30  a78d996a  c34b8461 
SHA(Lib/pgp/heLper/pgpMacFi Le.c)  = 

355af1d3  8af5f833  38b27d34  14f1cbb3  c92d8374 
SHACLib/pgp/heLper/pgpMacFi Le.h)  = 

5ac85206  888f5a2b  0397ecd6  c73161c1  c7b768e0 
SHA(Lib/pgp/heLper/pgpHacUtiLs.c)  = 

206dba04  cf623c08  645f0f9b  17be84ec  f1b9e41f 
SHA(Lib/pgp/heLper/pgpMacUti Ls.h)  = 

62f80b4e  52775aa0  44a7cad6  04b11690  04afae20 
S H A C L 1 b / pg p / h e L pe r / pg pM em  . c ) = 

32400f50  f82174ab  7ec68515  3ed3d20e  8e97a7f9 
S H A ( L i b / pg p / h e L p e r / pg pH em . h ) = 

ad73a435  50b8c3a4  5eaaec10  d21415b1  4aacd661 
SHA(Lib/pgp/heLper/pgpMemFi Le.c)  = 

84b80a3b  76ed82f3  dcf1d4fe  f0c84702  490e962f 
S H A ( L i b / pg p / h e L p e r / pg  p H s g . c ) = 

6eecb8e2  c0d5c769  575c6e42  d06dcd07  8e64fc9b 
SHACLib/pgp/heLper/pgpPassCach.c)  = 
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47d356cb  074f72ec  b804f6dd  ae129a45  18b62141 


SHA(Lib/pgp/heLper/pgpPassCach.h)  = 

f5ac76c4  7acceee6  bd6474d7  0ace9ef0  ce8a82be 
SHAC  Li b/pgp/helper/pgpPipeFi Le. c)  = 

faf4a504  725eae28  05f5c19b  096333b0  f9ce43db 
SHA(Lib/pgp/heLper/pgpStr2Key.c)  = 

af29aa43  c688433c  6518371e  bc3993ec  ce0a4b76 
SHAC  Lib/pgp/heLper/pgpStr2Key.h)  = 

0a0eb139  37373512  357aa2d7  f32d7db5  e6923095 
SHAC  Lib/pgp/heLper/pgpTimeDate.c)  = 

fdd132ad  c9bf88b7  e1b685ba  23bff597  faf284d7 
SHACLib/pgp/heLper/pgpTimeDate.h)  = 

1f58e10d  029a82cb  339ad24b  5ff1595f  ddb0eec8 
S H A C L i b / pg p / h e L pe  r / pg  pTy  pe  s . h ) = 

3a7d0e35  8e7774ec  38f10961  5a31c85a  3e7def9a 
SHAC  Lib/pgp/incLude/Makefi Le.in)  = 

ee467844  2da45ce8  c9e3fbb1  69eeea82  8935b3b7 
SHACLib/pgp/incLude/makefi Le.msc)  = 

f014f407  2a21032b  fef21d86  b3c49a2b  3f6fbd72 
SHACLib/pgp/incLude/pgpAnnotate.h)  = 

b40b0395  b085f83d  8fde3c7d  ea977bb7  3939a8f4 
SHACLib/pgp/incLude/pgpConvKey.h)  = 

bf559b58  e8da9fcc  50a6d0cb  59f6e914  82545961 
S H A C L i b/ pgp/ i nc L ude / pgpE r r . h ) = 

e075bbac  b5ffa754  c7be4414  771254de  6b0439ab 
SHAC  Lib/pgp/incLude/pgpKLudge.h)  = 

2d8e459b  7a31b062  8e473d0b  b615cc47  82dda252 
S H A C L i b / pgp / i nc L ude / pgpHsg . h ) = 

35d83119  fe013795  e585c55a  26736300  c1166b36 
SHAC  Lib/pgp/incLude/pgpPktByte.h)  = 

9fb1b684  e6d4fa8f  f80580f9  7963e51d  373cc6f6 
S H A C L i b / pgp/ i n c L ude /pgpUI . h ) = 

cda43cb0  dc62bf44  8f48a040  ed92253a  b54c85d0 
SHAC  Lib/pgp/incLude/pgpUsuaLs.h)  = 

673b343b  c4bb7976  2f69ef6e  33f314c8  aa08038c 
S H A C L i b / pg p / key db / Ma ke f i L e . i n ) = 

08ec0fb3  8a4e9dff  e4cf6914  a39d3e99  e5b1479a 
SHAC  Lib/pgp/keydb/pgpDearmor.c)  = 

16eb4a8f  3a7f4fcf  d6e31573  54d96c07  2ed318ae 
S H A C L i b / pgp/ keydb/ pgp F 1 L e DB . c ) = 

029e10cb  c79f4086  351ad25c  9759f6fd  8d1a60be 
SHACLib/pgp/keydb/pgpFi LteredSet.c)  = 

73384d21  6dea5b80  139b7e6f  c91666b0  49fd14d9 
S H A C L i b / pg p / key d b / pg pKDB i n t . h ) = 

a3e74129  c6d3242b  11547be4  30d8a9f9  4fd9c59b 
S HA C L i b / pgp / keydb / pg pKeyDB . h ) = 

973ea6a1  0fc75942  275e050c  19151a8f  de2aa11e 
SHACLib/pgp/keydb/pgpKeylter.c)  = 

ec4f3db4  78898457  45b99b00  2522b237  decc69fd 
S H A C L i b / pg p / key db / pg pKey Li b . c ) = 

5869ddbf  a88de989  90e56fd9  4f1cc998  fd67b527 
S H A C L i b / pg p / key d b / pg pKey Ma n . c ) = 

b389e5bc  d7a40baf  cf00b7a8  de95dae0  73dc26cb 
S H A C L i b / pg p / key d b / pg pKey S e t . c ) = 

fb89e99b  bclealcb  676149ac  74e35446  ffd69de0 
S H A C L i b / pg p / key d b / pg pKey Upd  . c ) = 

39dfed09  3c20a39d  35637361  d12e9acd  766d13b0 
S H A C L i b / pg p / key d b / p g p MemDB . c ) = 

CCCHK:528ac263a9c1230fb572baca20f510a543bb1ca82cadc5a640a4956ad19b04001D] 
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77664C02  0be785b3  270aba00 

5205a6f 5 

6e0c461 e 

SHA( Lib/pgp/keydb/pgpPrefMac. c)  = 

8894b913  19bcda76  ea250dde 

ce031 be9 

5f 745a1 7 

SHA(Lib/pgp/keydb/pgpPrefUnix.c)  = 

e8da4238  b8f02744  d6392c0b 

CC694273 

1 c8639c9 

SHA(Mb/pgp/keydb/pgpPrefUnix.h)  = 

10d707a7  b55bb3ae  15263c4b 

a9e9f d21 

65ab04c3 

SHA(Lib/pgp/keydb/pgpPrefWin32.c) 

454a0001  9bb7e5be  0525ecf0 

edc506a7 

59e97931 

S H A ( L i b / pg p / key d b / pg p P r e f s . c ) = 

8bde5a27  5fab9e0e  9dc9ad74 

83b31 ca5 

959d67d8 

SHAC  lib/pgp/keydb/pgpPrefsInt  . h)  = 
20c0f2a5  ad81a94c  ae3e2ce1 

ecc07585 

822f 4f 75 

SHACLib/pgp/keydb/pgpUnionDB.c)  = 

0b4b778d  8783f4cb  788c1a2d 

7b1 d6bca 

491 5222e 

S H A ( L i b / pg p / key  s / Ma  ke  f i L e . i n ) = 

b4db5c3a  68f49156  6f2a0f02 

c0abf921 

b5204080 

S H A ( L i b / pg p / key s / ma ke f i L e . ms c ) = 

6b375fe8  0bd5d402  b648b53c 

bc504830 

02609337 

S H A ( M b / pg  p / ke y s / Te s t . c ) = 

57a1ce64  92bdb668  03312034 

0eb6a801 

52f 97cf f 

S H A ( L i b / pg p / key s /Te s t G e n . c ) = 

b37e0e07  4443c696  853c82ac 

7d73c875 

d6f 9809d 

S H A ( L i b / pg p / key s / pg p MemPoo L . c ) = 

1740206d  9918af29  262dee49 

2aa288f 2 

7ad94999 

S H A ( L i b /pgp/ key s / pgpHemPoo L . h ) = 

3284c6bf  cea62504  facc6f08 

03b1 b956 

114d51d3 

SHA(Mb/pgp/keys/pgpRngFi  Le.c)  = 

2588b72b  e4f197bf  16db7de7 

dcf 01 64a 

3557272f 

S H A ( L i b / pg p / key s / pg p Rng Hn t . c ) = 

e25cbbb7  45249b5e  c9cd019b 

db23c60c 

e5a61136 

S H A ( L i b / pg p / key s / pg p Rn g Mn t . h ) = 

4542d5ac  173b5a86  be3c8ffd 

dcdl f 522 

51 0af 27f 

S H A ( L i b / pg p / key s / pg pRn g Pa r s . c ) = 

35746907  6a5e9fd8  8ebc7207 

860d419f 

877de3cc 

S H A ( L 1 b / pg p / key s / pg p R ng Pa r s . h ) = 

4c20d4e6  bd700a9c  9d83d32f 

94c56f 01 

1420183c 

S H A ( L i b / pg p / key  s / pg p Rng  P k t . c ) = 

252590af  17930b6c  2b976e65 

4f 3f edc8 

772e48bd 

S H A ( L i b / pg p / key  s / pg p Rng  P k t . h ) = 

aeb37888  aec72c04  f-f0866b8 

a c653d0f 

f348c8f8 

S H A ( L i b / pg p / key  s / pg p Rng  P r i V . c ) = 

1d25e221  92bebcaf  82a8ca59 

35e13416 

c3bb92f 5 

S H A ( L i b/ pgp / key s /pgpRng P r i V . h ) = 

c60e8d83  9a3cbd27  be9eed0b 

28a400c7 

96f 2c53f 

S H A ( L i b / pg p / key s / pg pRn g Pu b . c ) = 

f6d5d449  aa912d15  52ffa8af 

5eb88f ea 

2181 f 0e3 

S H A ( L i b / pg p / key s / pg pR ng Pu b . h ) = 

a54a4483  e3e7323d  b91ff641 

4b80a933 

4dc88cbe 

S H A ( L i b / pg p / key s / pg p R ng Re  a d . c ) = 

a7386e53  82394ae8  6f8a8dc7 

beb44224 

edb72cb5 

SH A ( L i b /pgp / key s / pgpRng Rea d . h ) = 

319cae0a  4c6d8f2b  8059d054 

a94002be 

98249561 

S H A ( L i b / pg  p / key  s / pg p R ng  V i e w . c ) = 

4556f449  4288e021  1d26a155 

2e3f 2043 

272c98b3 

S HA ( L i b / pg p / key s / pgpRng W r i t . c ) = 

da83e148  186179d6  595a57df 

f 5e20ef 8 

1 db4c988 

S H A ( L i b / pg p / key  s / pg pT  r s t P k t . c ) = 

[:CCHK:a19cecA640c0d09aca9468ec329da3a55f1 35307 f3d9359aacaccd537e37b8f8a3] 
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9bc5c8dc  27b9e76c  291176bd  cb4fafa0  705b3d06 
S H A ( L i b / pg p / k ey s / pg pT r s t P k t . h ) = 

994dd4e1  6e419b34  646eb335  5bd409ba  3d6265ff 
S H A ( L i b / pg p / ke y s / pg pT  r u s t . c ) = 

26e56f04  2786f034  e23ddc2e  7feb8227  53f67f88 
S H A ( L i b / pg p / key  s / pg pT  r u s t . h ) = 

e3f05a22  9de410d5  478c4cf2  e9b13817  f5a6ef10 
S H A C L i b / pg p / p 1 pe  / Ma  ke  f i I e . i n ) = 

900ee8a2  60acc45b  83fe72ff  e1a12ae2  781c17b0 
S H A C 1 1 b / pg p / p i pe /ma  ke  f i L e . ms  c ) = 

b11fd342  d19514cc  3cd1a1e7  826fe9cf  15ebe07a 
SHA(Lib/pgp/pipe/crypt/Makefi Le.in)  = 

03222abe  485050ec  ac1e9130  5b4bb2b2  1fd3ebe6 
SHAC  Lib/pgp/pi pe/crypt/makefi Le.msc)  = 

b90f0ad4  659e64a6  7d5c64b7  b2352979  39e81f0d 
SHA(Lib/pgp/pipe/crypt/pgpCiphrHod.c)  = 

21f0f9ce  1e79bcb9  840b72f5  1af55f7c  5ce46e5f 
SHA(Lib/pgp/pipe/crypt/pgpCiphrMod.h)  = 

a4b64000  1c8354c4  173bc8ca  6f2b84d5  d82561c1 
SHA(Lib/pgp/pipe/crypt/pgpConvMod.c)  = 

b861c3ed  f473ffac  ff0459ac  d6759200  8d3f71b5 
SHA(Lib/pgp/pipe/crypt/pgpConvMod.h)  = 

16574406  17f56b7e  d1234f6b  91fbea3c  df3dd723 
SHA( Lib/pgp/pipe/crypt/pgpMakePKE.c)  = 

67fd0b50  6a059d0e  480a6c62  baafda72  a92e29ef 
SHA(Lib/pgp/pipe/crypt/pgpHakePKE.h)  = 

6399060b  fe64a933  7bb6531 c ee205688  c8a2f2ae 
SHAC  Lib/pgp/pipe/ crypt/pgpPKEMod. c)  = 

bf789a4b  35699cd8  8af6b39a  05f508a7  89e0e673 
SHACLib/pgp/pipe/crypt/pgpPKEMod.h)  = 

6518d9ba  737e4a89  d304c8f8  ea2062e2  2f6e9d9b 
SHACLib/pgp/pipe/fiLe/HakefiLe.in)  = 

9f4c4e14  0f9a177e  ef19e8ec  5a34494e  7749d0fb 
SHAC  Lib/pgp/pipe/fi Le/makefi Le.msc)  = 

2e50c1b0  1e99b09f  ec0655f7  87015382  1b17ab9e 
SHAC  Lib/pgp/pipe/fi Le/pgpArmor. c)  = 

cced1c14  df1118b9  ff8f27b6  904e1fba  e27eebca 
SHACLib/pgp/pipe/fi Le/pgpArmor.h)  = 

d79533fd  7da7505d  f7e99987  a3c36eb1  7faadc75 
SHACLib/pgp/pipe/fi Le/pgpArmrFi L.c)  = 

f2f3e7ea  37b3e64b  222867ee  7e36842c  5e778eac 
SHACLib/pgp/pipe/fi Le/pgpArmrFi L.h)  = 

8b85a62c  cfc6a419  f2805b38  a0f9b793  9e2f9a5e 
SHACLib/pgp/pipe/fi Le/pgpCRC.c)  = 

052c86b2  29b988c1  ccf47c31  24d2e074  c1e1aa88 
SHACLib/pgp/pipe/fi Le/pgpCRC.h)  = 

4ec010d9  481e434a  6bbb01c0  9686c02d  cd025dfe 
SHACLib/pgp/pipe/fi Le/pgpFi LeHod.c)  = 

364a5634  906f55f9  f1f7e142  1fe79cac  e2d32f1c 
SHACLib/pgp/pipe/fi Le/pgpFi LeMod.h)  = 

cf7d5c96  7aae7400  04a72239  da5cbfd7  3390428a 
SHACLib/pgp/pipe/fi Le/pgpHeader.c)  = 

5e326d7f  4cb15fe0  373ad907  4d9e0c55  c0c27fa7 
SHACLib/pgp/pipe/fi Le/pgpHeader.h)  = 

abbe3696  40336731  5a771c57  fcc96a3c  0a8b61ec 
SHACLib/pgp/pipe/fi Le/pgpPrsAsc.c)  = 

0ce4c9bd  f5b81013  56e7798b  8f169fbb  b5bf2f5e 
SHACLib/pgp/pipe/fi Le/pgpPrsAsc.h)  = 

CCCHK:04740738bb1354e529c7c685df8270d9e4ab7993aeb936ebccfd8d0226745cd68:] 
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e898f069  4e2bf0c9  6e733078  df64f685 
SHA(Lib/pgp/pipe/fi Le/pgpRadix64.c)  = 

5ea4c315  3fa85a95  4b343eda  b9f80273 
SHA(Lib/pgp/pipe/fi Le/pgpRadix64.h)  = 

709928d7  45922f87  f6dbf2c4  571f3673 
SHA(lib/pgp/pipe/parser/Makefi  Le.in)  = 

2557ed9b  fe46950e  08b0ddcd  e8594a42 
SHA(Lib/pgp/pipe/parser/makefi  Le.msc)  = 

dd8d1d9c  054943fe  a3c29a2a  7d4a1d8a 
SHA(Lib/pgp/pipe/parser/pgpPrsBin.c)  = 

4e34c0a7  cd78fd46  d6712ba2  a2797b55 
SHA(Lib/pgp/pipe/parser/pgpPrsBin.h)  = 

450ae38b  7e79626a  3f62b511  03644635 
SHAC  Lib/pgp/pipe/parser/pgpReadAnn. c)  = 

68d9a106  28f1efbe  fbdb6212  eeb3bafa 


SHA(Lib/pgp/pipe/parser/pgpReadAnn.h)  = 

869d3128  5a721125  494a03dd  53fd317f 
SHA(Lib/pgp/pipe/parser/pgpVerifyRa.c)  = 

ab3a5a08  bScdcldl  e7cd4960  b2b312bc 
SHA(Lib/pgp/pipe/parser/pgpVerifyRa.h)  = 

4f63bbe4  af0007b5  d9e4284d  590bbef7 
SHA(Lib/pgp/pipe/parser/pgpVrfySig.c)  = 

3573a873  725df3dc  fad9c874  797f348f 
SHACLib/pgp/pipe/parser/pgpVrfySig.h)  = 

8d729024  8a8eb91d  ba4dc928  802234f5 
SHA(Lib/pgp/pipe/sig/Makefi Le.in)  = 

f8096168  53cb2f3b  160503af  1dae86a0 
SHA(Lib/pgp/pipe/sig/makefi Le.msc)  = 

e72a1fef  d9ac7eac  f53a0ebb  d7a87cde 
SHAC  Lib/pgp/pi pe/sig/pgpHashMod. c)  = 

71747d53  238e9ba9  66b08e8e  99fb9b15 
SHACLib/pgp/pipe/sig/pgpHashHod.h)  = 

64545594  b8ff245b  e63b6779  7bd7bc5e 
SHACLib/pgp/pipe/sig/pgpSigMod.c)  = 

dbaf6a09  830e18d3  fd150556  8dbe03c8 
SHACLib/pgp/pipe/sig/pgpSigMod.h)  = 

77dd8511  6e421bbd  20794afb  a12fe667 
SHA(Lib/pgp/pipe/text/Makefi Le.in)  = 

9dddc691  eeed838e  f552afd7  b2a3639d 
SHAC  Lib/pgp/pipe/text/makefi Le.msc)  = 

c9b6f495  57198713  604c9422  8cf445ed 
SHAC  Li b/pgp/pipe/text/pgpCompMod. c)  = 

efc290f9  4d393f26  857501a0  e746c9a7 


SHACLib/pgp/pipe/text/pgpCompHod.h)  = 

cf56c874  d30b7d76  c6148ec1  a85cf869 
SHACLib/pgp/pipe/text/pgpDefHod.c)  = 

83174349  33b04e83  20bea4d0  ff88e07a 


SHACLib/pgp/pipe/text/pgpDefMod.h)  = 

26bde95c  c45ff191  185fc4d6  15496c2f 
SHAC  Li b/pgp/pipe/text/pgpInfHod. c)  = 

55524741  0d90eb28  4895d123  b831293c 


SHACLib/pgp/pipe/text/pgpInfHod.h)  = 

797f2383  78a1f14d  402a179f  124e931d 


SHACLib/pgp/pipe/text/pgpLiteraL.c)  = 

0573912f  e225aa0b  8600c8df  c2d7f888 


SHACLib/pgp/pipe/text/pgpLiteraL.h)  = 

86d6abeb  ad1c06b5  5a16e4cd  a6723b4e 


SHACLib/pgp/pipe/text/pgpTextFi Lt.c)  = 


a9259ecb 
13175468 
095f 75e8 
39a729ac 

a7960bd7 

4c2d3568 

1 1882571 
1b956c66 

0da1 6542 
5e42cc22 

c8a6f d74 
248d1 el  3 
085374a5 
8308e5f 6 
b0f30db4 
cl 392c0c 
9cf 43d8b 

39081 ebl 
f6506a5d 
263c593c 
54a61 2ce 
81 1 ba8d2 
3d0486a9 
fe7b9c02 
41 7df de7 
1 f 453db7 
abea  5 5a 1 
06f 63d53 
b6e9f 2a1 


[[CHK:a3e760b7b16b05bc94d1ac85530c59649b7b90356ae68de1ff27c010d5355038c:: 
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a0a5ccb5  8107fede  12397610  b0ff2e7e 
SHA(Lib/pgp/pipe/text/pgpTextFi Lt.h)  = 

f669f508  1ef48859  a6f8ab41  76bd5d33 
SHA(Lib/pgp/pipe/text/pgpZBits.c)  = 

7d8c464a  a9a736f3  e1e7405e  9874ff7f 
SHACLib/pgp/pipe/text/pgpZDefLate.c)  = 

2c750bc5  f285ae61  34320c2f  543dc350 
SHA(lib/pgp/pipe/text/pgpZMatch.asm)  = 

7d827a93  aa5940bb  b7c8eda9  2c713658 
SHA(Lib/pgp/pipe/text/pgpZTai Lor.h)  = 

473fd56c  226a9e79  f3c708d5  341e2c8b 
SHA(lib/pgp/pipe/text/pgpZTrees.c)  = 

a3594886  5133758a  f81f9bd9  b662f260 
SHA(Lib/pgp/pipe/text/pgpZip.h)  = 

c7a4082b  b41158e2  99c6beab  8924d38a 
SHA(Lib/pgp/pipe/uti Ls/Hakefi Le.in)  = 

3f9751a0  0ae75b7d  4a7d85bb  70927c06 
SHA(Lib/pgp/pipe/uti Ls/makefi Le.msc)  = 

0fc08a3d  40428461  631d483e  b4b2b0bf 
SHA(Lib/pgp/pipe/uti Ls/pgpAddHdr.c)  = 

a8574055  0b102e2d  754e88d4  0ad590b3 
SHA(Lib/pgp/pipe/uti Ls/pgpAddHdr.h)  = 

3d51f8f4  01a1a53c  7a0cefb2  79474f1a 
SHA( Lib/pgp/pipe/uti Ls/pgpBufMod. c)  = 

335c33bf  2b779c45  de34192b  048921d7 
SHA(lib/pgp/pipe/uti Ls/pgpBufHod.h)  = 

fbb02278  69bfbe44  22eb631d  25ac6eda 
SHA(Lib/pgp/pipe/uti Ls/pgpCopyMod.c)  = 

ddd26d1a  7972f9c1  2a25daf4  eceeedfb 
SHA(Lib/pgp/pipe/uti Ls/pgpCopyMod.h)  = 

a3e8e413  8a49e645  5f8181c0  29306e0b 
SHA(Lib/pgp/pipe/uti Is/pgpDevNuLL.c)  = 

f1ba02db  e5df0180  463dfeaf  18b0be7a 
SHA( Lib/pgp/pipe/uti Ls/pgpDevNuL  L .h)  = 

c40f707e  e1af119e  6caf11b0  f61897c3 
SHA(Lib/pgp/pipe/uti Ls/pgpJoin.c)  = 

2b0bd0e0  4ff5998c  2dfcd227  4767fd8a 
SHAClib/pgp/pipe/uti Ls/pgpJoin.h)  = 

181c1648  2874270f  2a365259  5610e026 
SHA(Lib/pgp/pipe/uti Ls/pgpMemMod.c)  = 

a7c547b7  b47adda6  4eebf2a8  0842c06e 
SHA(Lib/pgp/pipe/uti Ls/pgpMemMod.h)  = 

6f12c037  9450dcbc  5bbe7828  f75af093 
SHA(Lib/pgp/pipe/uti Ls/pgpPipeLine.h)  = 

87ee56ec  43c7d896  6c8277bb  b285a387 
SHA(Lib/pgp/pipe/uti Ls/pgpProtoMod.c)  = 

21f5ef79  a9072778  1c4d8745  245cb0ac 
SHAClib/pgp/pipe/uti Ls/pgpRot13Mod.c)  = 

aa4238ef  636ac917  c4d10633  4d03a503 
SHAClib/pgp/pipe/uti Ls/pgpRot13Mod.h)  = 

3e9ac56d  d1bf17a5  2163e639  a6a3170c 
SHAClib/pgp/pipe/uti Is/pgpSpLit.c)  = 

4bcfedeb  a277f90f  0789858e  1966c7be 
SHAClib/pgp/pipe/uti Is/pgpSpLit.h)  = 

7f7dbaf0  01908035  748ab613  daaa6009 
SHAC  Lib/pgp/pubkey/Makefi Le. in)  = 

60c97b62  12514365  35aa1055  82003165 
SHAClib/pgp/pubkey/makefi Le.msc)  = 


201 4adc4 

b554bd61 

f02cbef3 
a1 a54972 

80f 33edd 
d5ee25b9 
9f b9c1 5f 

06c661 48 
2be6831 4 

6cf 72cd5 
3831 e46c 
928cc200 
6f 662c8c 
7823a25f 

51 45cda3 
71 9cb3cc 
574d3d87 

1001 c340 
6f b462c8 

1 e5f 249a 
c51 651 c6 

61 77a6c8 
8bd256e3 

699e5685 
f a5a34d6 
5bf bd024 
755097c4 
6f4a28c0 
1 8dc2f f 9 
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26e78882  26f7cbb8  ed1e6770  b8f6b3fc  cd001b53 
SHACLib/pgp/pubkey/pgpALtRSAGLu.c)  = 

b0acc0bf  50c632de  ecdb6d3b  e23633ce  887173fd 
SHA( Li b/pgp/pubkey/pgpDSAKey. c)  = 

36ecfc50  955a9f0c  681eab06  15213f2c  b7c1ff0e 
SHA( Lib/pgp/pubkey/pgpDSAKey. h)  = 

209e043f  ffda622c  bb38ceed  36389bd2  33e0affd 
S H A ( L i b / pg  p / p u b ke y / pg  p E S K . c ) = 

79070d5a  292e2e03  e0261b43  a31ccbe8  6dce51af 
S H A ( L i b / pgp / pub  key / pgp E S K . h ) = 

1e146d34  da386e70  2199780c  87883c97  0965c3fe 
SHA( Li b/pgp/pubkey/pgpELGKey. c)  = 

20944ab8  ea79b776  4b10f51c  def46fd9  5b8a45cc 
SHACLib/pgp/pubkey/pgpELGKey.h)  = 

166271dc  94a86cd6  de5cd1e4  2793b438  779d900f 
SHACLib/pgp/pubkey/pgpFixedKey.c)  = 

29ae6484  f6a2a3ba  0908df61  62f4ad5f  1791e74f 
SHA( Lib/pgp/pubkey/pgpFixedKey. h)  = 

b3b14579  60717243  539fc5cb  C0b6624a  66c3a41e 
SHACLib/pgp/pubkey/pgpKeyMisc.c)  = 

4b7249a0  6917f22d  7b37b3a7  af9cd952  bfe74258 
SHA(Lib/pgp/pubkey/pgpKeyMisc.h)  = 

bf83b3a7  C'f5dae05  a2cfb405  6d797c56  33483276 
SHA( Lib/pgp/pubkey/pgpKeySpec . c)  = 

ddc28a1b  7705b3e0  584112e8  9ed1b3f3  41232dd0 
SHACLib/pgp/pubkey/pgpKeySpec.h)  = 

5dfee4a0  095c4eb0  65936097  7030438e  e244ff8e 
SHA( Lib/pgp/pubkey/pgpMakeSig. c)  = 

3ae34b54  83da99aa  b4b70c53  7dedb764  6a51e461 
SHACLib/pgp/pubkey/pgpMakeSig.h)  = 

2762cd46  8fb4262b  62a66cfa  51ea382a  d19a91ae 
SHA(Lib/pgp/pubkey/pgpPktList.c)  = 

e966d0c7  9437b2a3  a3090fbc  d46ade08  06ef1cb7 
SHA(Lib/pgp/pubkey/pgpPktList.h)  = 

28f21da3  177f6f8d  6cc97140  fb06eafa  d57ebcfb 
SHA( Lib/pgp/pubkey/pgpPubKey. c)  = 

f258526c  952c9714  dd0a50cd  94c95295  5ea050a3 
SHAC  Li b/pgp/pubkey/pgpPubKey. h)  = 

e4662921  d287dd1e  fce38d50  fa5a8692  d12ac58e 
SHA( Li b/pgp/pubkey/pgpRSAKey. c)  = 

edae5c89  61793623  a011cc16  c38ea598  97172bfb 
SHACLib/pgp/pubkey/pgpRSAGLue.h)  = 

9cd6d8d2  26d752b1  7328ed5c  b247a17c  ade8a020 
SHA(Lib/pgp/pubkey/pgpRSAGLue1  .c)  = 

d39a142b  b94694ce  0fe75193  c41997c1  e263349a 
SHAC  Lib/pgp/pubkey/pgpRSAGLue2.  c)  = 

b3fb9568  4c0de5cb  02533c3a  0cf0de28  2162e4b0 
SHACLib/pgp/pubkey/pgpRSAKey.h)  = 

00b537ae  8ed913ad  186eb130  75912515  7187c918 
SHACLib/pgp/pubkey/pgpRSAKeyGen.c)  = 

16553424  98d2c587  66a82508  3b1b659b  4c5c6786 
S H A ( L i b / pg p / pu b key / pg p S i g . c ) = 

f1746b20  a63ae621  80555817  44b836db  1193a16c 
S H A ( L i b / pg p / p u b ke y / pg  p S i g . h ) = 

ba07505b  ee91 c4b5  70283582  69b766b0  7a2dbd27 
SHACLib/pgp/random/Makefi Le.in)  = 

b0d87f94  23a72781  0ec344f5  337f868f  21b1392f 


SHA(Lib/pgp/random/makefi Le.msc)  = 
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e63d413d  c494e151  ae689cad  bb87bcc4 
S H A ( L i b / pg p / ra n d om / pg p R nd . h ) = 

6414d8c4  e-fa93080  feedSeda  39bf832c 
SHA( Lib/pgp/random/pgpRndEvnt  . c)  = 

0d6296f9  ef2db49a  c6c97b73  2b9e94e8 
SHA(Lib/pgp/random/pgpRndMSDOS.c)  = 

113b8cac  e2a6ea37  61f67d9c  34f66b5f 
SHA(Lib/pgp/random/pgpRndMac.c)  = 

cfa6e209  a9df29a2  1a3bebf8  859051ab 
SHA( Lib/pgp/random/pgpRndPooL . c)  = 

ae153465  4a25fc01  443cac30  b46db613 
SHA( Lib/pgp/random/pgpRndPooL . h)  = 

b542f944  6f07bf93  2ea4dbca  2940d8b5 
SHA(  lib/pgp/random/ pgpRndSeed.  c)  = 

b4a8519c  4fd013df  ce2d32c8  e359df10 
SHA(lib/pgp/random/pgpRndSeed.h)  = 

f9c49e3a  51176b36  86eefeb2  1ddca31f 
SHA( Lib/pgp/random/pgpRndUnix. c)  = 

d3bec9af  a4db5a09  be5495eb  98f222b2 
SHA( Lib/pgp/random/pgpRndVMS  . c)  = 

e9ab3c73  e13f78ef  0e8c667c  40aca124 
SHAC  Lib/pgp/random/pgpRndWin32 . c)  = 

2d4f588d  142b8081  02ad58-f4  a07adb11 
SH A ( L i b /pgp / ra ndom/ pg pRndom . c ) = 

95815339  d9f27fff  6ab5a3ce  95ec5dc1 
SH A C L i b/ pgp / random/ pg pRndom . h ) = 

7618d18e  a6b16a67  23591037  27faa493 
S H A C L i b / pg p / u t i L s / Ma  ke f 1 L e . i n ) = 

eb93ed86  234d6865  494173d5  3adcd7e2 
SHA(Lib/pgp/uti Ls/makefi Le.msc)  = 

1e6ca660  c12f7155  224398a3  35780761 
S H A C L i b / pg p / u t i L s / pg p C on f . c ) = 

a7ad130b  53c63c45  4b76b95d  1b5800f2 
S H A ( L 1 b / pg p / u t i L s / pg p C on f . h ) = 

68eab40b  6ced2100  426671fa  0668d41a 
SHACLib/pgp/utiLs/pgpDecPipe.c)  = 

40be2880  92c662d5  ac2f0359  8a7b8db8 
SHACLib/pgp/utn  Ls/pgpDecPipe.h)  = 

d24df2b9  a8053892  5b2ee347  92d3f5a8 
SHACLib/pgp/utiLs/pgpEncPipe.c)  = 

1436fd43  459e8abe  a4c5d5fe  7096796d 
SHAC  Lib/pgp/uti Ls/pgpEncPipe.h)  = 

d0dd47a0  692409af  e1490a09  19ee0047 
SH A ( L i b /pgp/ut i L s / pg pEnv . c ) = 

6cf676c1  85260C59  5f311800  d6d4a877 
S H A C L i b / pg p / u t i L s / pg p E n V . h ) = 

66e57ab2  df998134  d7348a0d  1d02bfa0 
SHACLib/pgp/utiLs/pgpFiLeType.c)  = 

082c8709  2dec4a5f  b5a8553c  34a54c68 
SHACLib/pgp/utiLs/pgpFiLeType.h)  = 

0b294e7a  81379ee2  adb48b97  2a8fd71f 
SHACLib/pgp/utiLs/pgpSigPipe.c)  = 

10f14df3  9d8898cf  e2366d65  b3d19d5d 
SHAClib/pgp/utiLs/pgpSigPipe.h)  = 

f7fc779a  29694a89  2195c345  ef4695d8 
SHACLib/pgp/utiLs/pgpSigSpec.c)  = 

ca46f628  b332e893  70dace18  d752232b 
SHA(Lib/pgp/utiLs/pgpSigSpec.h)  = 


1 e271 f a3 
745f 8ab4 
5af af d30 
1 8db1 4f 4 

c7a1 b926 
39373d2a 

d0b6e2e0 
d71 82b99 

1 89ebf el 
7c1 63b65 
40f a642b 
b6807f e2 
f 1 1 c9b13 
b631029f 
b6dcf84a 
4361 831b 
ba6c8690 
5d2df cf b 

1 1 5ad2de 
9040dcd6 

5af3a170 
b7c01781 
83f 892da 
fb68aa12 
52c87c1 5 
f 2286ac8 
50881 dc6 
2d6dca32 
38581 6f 3 
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831d7fea  a473aa30  IbcldcSa  e591af46  2f25ba29 
SH  A ( L i b / s i mp  L e /Ma  kef  i I e . i n ) = 

969953C0  Cde9d8a9  7828077b  5e8a4ff6  e33bb93a 
S H A ( I i b / s i mp  L e / s p g p . h ) = 

07e4bbf2  5f9e6443  634d8cd4  03dde7e6  487645c2 
S H A ( L i b / s i mp L e / s pg p ABu f . c ) = 

234a87a3  13a263ed  9f93d06d  da23f387  3018cf39 
S H A ( L i b / s 1 mp L e / s pg p A F i L e . c ) = 

87eaf97f  5731d66e  9e49c312  547ddbd4  3a2bd88e 
S H A ( L i b / s i mp L e / spg p AddK . c ) = 

53fbde79  84b851d2  3ce49948  48de9828  83856f8c 
S H A ( L i b / s i mp  L e / s pg p C h k R . c ) = 

5f8d34ad  dfaffbae  edd9b900  f91a2683  b45ce846 
S H A ( L i b / s i mp L e / s pg p E Bu f . c ) = 

03acafef  ce27ecd7  9640a44d  f1c18239  a3928895 
S H A ( I i b / s i mp L e / spgp E F i L e . c ) = 

2b82882f  69ddffdf  894fc889  34ca6e95  dd200f7c 
S H A ( L i b / s i mp L e / s pg p E X t K . c ) = 

8ca87ee4  15ccb8f1  cc6381d4  54c1b00a  dISadIde 
S H A C I i b / s i mp  L e / s pg  p N Key  . c ) = 

44a515de  7e254fa2  02cb191d  941ec982  fdaaa4c6 
S H A ( L i b / s i mp L e / spgpRBu f . c ) = 

28a8936e  e6cfa355  3adc03d9  75bd0cc8  2d96a917 
S H A { L i b / s i mp L e / s pg p R F i L e . c ) = 

8cb34d7b  25585f4d  bb883565  07d66bb3  986917c7 
S H A ( L i b / s i mp L e / s pg p R N G . c ) = 

600efdb4  7ae11c73  7ad7285b  1e2261f0  6dfafdc7 
S H A ( L i b / s i mp L e / s pg p S Bu f . c ) = 

3b00dc22  b4f6c8e2  d8db5eb5  387a38ae  b20f97a3 
S H A ( L i b / s i mp L e / s pg p S F i L e . c ) = 

50d7f0f8  b344fcf0  6af48451  8668492a  e67cec08 
SH A ( L i b / s i mp L e / spgpVBu f . c ) = 

a1aa3a5f  a41e2b0b  994956d8  dcb61214  08f742cf 
SHA(lib/simpLe/spgpVFiLe.c)  = 

53ad454f  dea1a79d  67e4a94b  b0df064f  053ced59 
S H A ( L i b / s i mp L e / s pg pb u f . c ) = 

12aa67a9  462b6e9b  6e2a6111  df1ef6a8  4db278db 
S H A ( L i b / s 1 mp L e / s pg p c a L L ba c k . c ) = 

c3589c40  9182ce86  d415b73d  35f171c2  060db847 
S H A ( L i b/ s i mp L e / spgpdea rmo r . c ) = 

c362adc9  9cea0cc4  051b5a1d  aea4e95c  455a1c13 
S H A ( L i b / s i mp L e / s pg pde c ry p t . c ) = 

8c645bef  e842aec0  e384f365  4a45524b  80b3fc9b 
SHACLib/simpLe/spgpinit.c)  = 

ee3777b8  1cb624a8  57b8f093  86f632c1  9c760e5f 
S H A ( I i b / s i mp  L e / spg  p i n t . h ) = 

d1cf8cfa  86f89534  88a74c4f  39c49283  ea3503ee 
S H A ( L i b / s i mp L e / spgp r i ng  . c ) = 

00b685d2  bec316d7  c6e71106  f10a1be1  2f601afc 
S H A ( L i b / s i mp  L e / s pg  p kc  h e c k . c ) = 

ab9141a6  d050457b  661845e3  5b87068c  cc64078a 
S H A ( L i b / s i mp  L e / s pg pna me  i d 8 . c ) = 

22a2e708  a9c227e0  5a75147a  4669fb52  44415012 
SHACLib/simpLe/spgprecList.c)  = 

d2ef3438  432260b7  70633173  c86ec3a5  11914ab6 
S H A ( L i b / s i mp L e / s pg p s i g n e r . c ) = 

d6ea687a  56d62947  0d9e9393  9ee498d4  b5713a57 
S H A ( L i b / s i mp L e / s pg p t e X t . c ) = 
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4d0e356a  d0d616f5  24506a31  2ffb3cde  e529b803 
S H A ( L i b / s i mp L e / 1 e s t . c ) = 

3028a197  dedce139  109f8df2  b97cf42a  3be54877 
S H A ( L i b / 1 1 y u i / Ma ke f i L e . i n ) = 

8585c896  6232a16a  0c3c7ea9  bd4a6317  0e9b8533 
S H A ( L i b / 1 1 y u i / ma ke f 1 I e . ms c ) = 

4deae75d  673f330e  d00acd37  e8f94b49  d2b7c7ab 
S H A ( L i b/ 1 1 yu i /pgpKB  . h ) = 

9aeab72b  fbbe6834  b37866a2  85cadb53  012b0979 
S H A ( L i b / 1 1 y u i / pg pKBMS D 0 S . c ) = 

f3a0b38a  154e175b  afb8f5b9  ff3a0185  338bff0b 
S H A ( L i b / 1 1 y u i / pg pKBMa c . c ) = 

25534a7b  3373a1ac  7ee45aad  e8652abb  de2aa899 
S H A ( L i b / 1 1 y u i / pg pKBU n i X . c ) = 

b06b65dd  0c2336ca  88f5106b  0eac273c  099f2646 
S H A ( L i b / 1 1 y u i / pg pMo r e Mod . c ) = 

0019C016  5c9adabc  d348ec7c  beb904d5  a06114f2 
S H A ( M b/ t t yu i /pgpMo reHod . h ) = 

910773c9  9b431a41  5c5cf1b5  f7b42bbd  55b1cf01 
S H A C L i b/ 1 1 y u i /pgpPOS I X . h ) = 

5c0b3634  4274917a  47772cce  7ff9fe2b  996f3614 
S H A ( L i b / 1 1 y u i / pg p R i ng U I . c ) = 

bdd4208f  8b2b6018  441895de  eaed7754  7bf34fc5 
S H A ( L i b / 1 1 y u i / pg p R i ng U I . h ) = 

00-fb2f46  27f2a670  5a3a9914  c9d2abea  b869b9be 
S H A C L i b / 1 1 y u i / pg  p S c r MS  DO  S . c ) = 

10c8e6c4  d4d1bf16  cef792bf  0c2af2b5  b9efe96f 
S H A ( I i b/ 1 ty u i /pgpS c rMa c . c ) = 

3f71cb59  03835b63  8097db86  93fc6821  b1d4a0cf 
S H A ( L i b / 1 1 y u i / pg p S c rUn  i X . c ) = 

C1015683  6789fb9e  5ab62ec2  bf7f8312  26905cd6 
S H A C L i b / 1 1 y u i / pg p S c re e n . h ) = 

71cb517b  7b30d6d7  12121857  e6e0b513  870dd694 
S H A C L i b / 1 1 y u i / pg pU s e r 1 0 . c ) = 

c7fab8c9  4044b840  84566467  a5efbbcf  22cf157d 


S H A ( L 1 b / 1 1 y u i / pg pU s e r 1 0 . h ) = 


7ceeddd6  1aeb137d 
SHACREADHE)  = 

b17bdfce  23162dcf 
SHA(TODO)  = 

ad68a39d  ed9a7bb1 
SHA(buiLd.bat)  = 

408e01c6  16dae249 
SHA(cLean.bat)  = 

49b616cf  b4994872 
S H A ( m khd  r s . ba  t ) = 

6c9bb227  dc781982 
SHA(reLease.bat)  = 

a8548fc8  c8bcc044 
S H A ( ma ke-m khd r s . p I ) = 

ee9d05f9  40d38e09 
S H A ( L i bbu i L d . ba t ) = 

841ae280  390b18e6 
S H A C Ma ke f i I e . i n ) = 

4d186d13  e3a8c8e0 
SHA(acLocaL.m4}  = 

3bdaf386  eae965b6 
SHA(config.h.in)  = 


676507e1 

7e2264e5 

d56ec54a 

709dece5 

68e32c64 

40db784d 

14cc3481 

8e3de09b 

ebcfbd0b 

ce2434b8 

cd507  f 6a 

8825bc9f 

634314d1 

01 d80c66 

def da698 

0c1d1fc8 

d380c230 

57cd83f 5 

4b6cc6e6 

9ca07f 63 

097add7f 

a7cc6dd7 

bf 8381 32 

89eb8990 

d1b6a103 

03603b26 

dd92beb2 

1 c91 cabf 

6039e4a  f 

34c44cd2 

bcf 2889d 

931 ef 742 

67b3744c 
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1120765b  65232233  a0de38b9  e584498c  c6725479 
S H A ( c o n f i g _u i n 3 2 . h ) = 

a2920063  82522de9  73e09234  f53d5596  79502c1f 
S H A ( c on f i g u r e . i n ) = 

04e35133  bbc49750  def7bdf6  a4fead04  d6dd48db 
S H A ( ma  ke f 1 L e . m s c ) = 

c276d369  dcf5d871  7bc4e89d  17269969  61388696 
SH A ( conf i g / conf i g . gu e s s ) = 

cefb15bf  66796163  ffec0a2a  1140e75f  e43fb6ce 
SH A ( conf H g / conf i g . sub  ) = 

f79cc19c  762be4f4  73f409f2  643f139c  1af006be 
S H A ( c o n f i g / i n s t a L L - s h ) = 

ef402f16  36605664  56666356  e297f0e2  a389234e 
S H A ( c o n f i g / po s t . 1 n ) = 

3d9eacbe  842e9d52  d76b6dbb  67210611  35501370 
S H A C c o n f i g / p r e . i n ) = 

92f6172c  1ee464b6  308a5f1d  d045cdeb  48891def 
S H A ( a pps / common /Ma kef i L e . i n ) = 

f980519f  4f781e8a  638a68c6  42f3fc32  44fedd20 
S H A ( a p p s / c ommon / ma ke f i L e . ms c ) = 

3d7f3597  efba5348  15274162  6f1fb473  1b917bca 
S H A ( a pps / common / pg p App F i L e . c ) = 

3a644154  e9596c80  77699a17  684ce741  f8184b5e 
S H A ( a pp s / c ommon / pg p Ap p F i L e . h ) = 

8511fac4  e3ae144b  cad18e11  b78129ac  6f8cf071 
S H A ( a pp s / c ommon / pg p E X i t . c ) = 

e106048f  13ac6f74  7a4aa932  ce07c098  8146e9dc 
S H A ( a pp s / common / pg p E X i t . h ) = 

6671c47b  c704d7d1  dc0617f3  be67d6cc  34de2c68 
S H A ( a p p s / c ommon / pg p I n i t A p p . c ) = 

d0b2deac  0a767e7c  9af833dc  eaff117b  ef36b0b5 
S H A ( a pps / common / pg p I n i t App . h ) = 

ce606d9b  b94451a5  7dc210ba  22e4c977  ebbda4cb 
S H A ( a pp s / c ommon / pg p Key R i n g s . c ) = 

56867883  7e1166c3  4c6e0f73  43af455b  95676817 
S H A ( a pps / common / pg pKey R i ng s . h ) = 

7895baf9  46967670  54576639  bdbc1b87  434df6e8 
S H A ( a pp s / c ommon / pg pO p t . c ) = 

b08c414b  dfdbb31c  3d48c9db  80251c11  a1d75ab5 
S HA ( apps / common /pg pOp t . h ) = 

10e0d01c  72396860  8866a9a0  e29cf616  08f994f5 
S H A ( a pp s / Ma ke f i L e . i n ) = 

10afc088  c330c8be  906f5fd2  5c88e642  20c2fa73 
S H A ( a pp s / ma ke f i L e . ms c ) = 

61566242  50ea20ef  da9729f6  934a8b3e  9f97dd0f 
SH  A ( a pp  s / pg  p /Ma  ke  f i L e . i n ) = 

ceb31e2a  139fab08  55966630  cbfb5a1d  5f02225f 
SH  A ( a pps  / pgp /pa  r s ea  rg  . c ) = 

b0d2cadd  53569363  7979b4c3  e495edf5  dfbe4253 
SH  A ( a pps  / pg  p /pa  r sea  rg  . h ) = 

9f458801  8bb1355a  72f3c700  2d543c93  a3833389 


S H A ( a pp  s / pg  p / pa  s s . h ) = 

40d4a2a1  35bebe16  3d52a1cc  a0590557  d130ca6f 
S H A ( a p p s / pg p / pg p . c ) = 

3e9520cd  88a830ef  b58b4aee  d7da1362  75efe125 
SH A ( a pp s / pg p k/Ma ke f i L e . i n ) = 

08ecddc0  90a38acb  484b487c  713606de  ce014510 
S H A ( a pps / pgp k / key s e r ve r . c ) = 

[CCHK:41dd333f65b57906fc0d5f69bbd2cafcb72da59bbfba0b3359cf28338f844c95a:: 
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fcbe7ffe  eff66471 

SHACapps/pgpk/keyserver.h) 

8c870f e3 

acl 5f 242 

a799dcd8 

725c62d4  bfcf8981 

S H A ( a pp s / pg  p k / pa  s s . h ) = 

347c087e 

6e1 f 36b6 

3a2cb2a2 

9c714157  9430b905 

S H A ( a pp  s / pg  p k / pg  p k . c ) = 

235462cd 

f f 464b21 

b7ab1 5e2 

c37aa066  cb59ba5a 
SHACapps/pgpk/pgpkExi t . c) 

d50cbe21 

844ebd4d 

8bbf 3b0d 

dd22a9d0  19f11700 
SHACapps/ pgpk/pgpkExi t . h ) 

7bb1 8f d0 

71  cl c69a 

7374a096 

b20b37a4  a9489a97 
SHACapps/pgpk/pgpkIni t . c) 

8e9f 2f eb 

3e991 566 

bd2e0fac 

cebb45a4  5c81da91 

SHACapps/pgpk/pgpklnit.h) 

7df e7c71 

c3f f b657 

7a687a0a 

2d8d1e51  ef806ed4 

SHA(apps/pgpk/pgpkKeyGen.c 

83db1 886 

) = 

09ba98b7 

623c1 537 

017dc17b  654eff36  98eb6228 

S H A ( a pps / pg pk/ pg p kKeyGen . h ) = 

86eb3ce1 

85de4c3f 

bf5f0a24  e1666952 

S H A ( a pp s / pg p k / pg p kU I . c ) = 

a6e891 db 

1 f 4042aa 

65d998a3 

5bddd762  95e443ea 

S H A ( apps / pgpk/ pgpkU I . h ) = 

2bb6f 78c 

9f b71 01 c 

7b1 5db80 

0462ae65  b518b7f1 

S H A C a pp s / pg p k / u r L . c ) = 

9f da31 c8 

3dda757d 

b9b521 a5 

69405d5b  498dbdce 

S H A ( a pps / pgpk/ u r L . h ) = 

d7404f 1 5 

906b8f c0 

20ea1 a3f 

0a5fec2d  7c2f24b5 
SHACapps/pgpk.oLd/Hakefi Le 

ca7d671 c 

-in)  = 

0e1 f 8393 

826ba63a 

f4ef2154  b43795c1 

SHACapps/pgpk.old/makefi Le 

b2a2baf6 

. ms  c ) = 

3f 9a1 8df 

3c9963f 9 

042fcdc4  21264149 

SHACapps/pgpk.oLd/pgpk.c) 

ed81 e83e 

922265e8 

b3a84a38 

f0e9a69f  f464d700 

S H A C ma n / Ha  ke f i L e . i n ) = 

acc33c91 

e75d8933 

1 2c3bf 56 

4dadcf20  72370f84 

SHACman/pgp.l)  = 

41 5f 44eb 

7e7d09e9 

78e298f2 

988474c8  f74cdb0e 

S H A ( man / pgp . cf g . 5 ) = 

38a86cc1 

el  51 ec37 

dd58ad37 

cb423e9f  0aa9ccc1 

S H A ( ma n / pg pe  . 1 ) = 

f 776edcc 

f 9565705 

a5eaa27c 

70634d18  3f1e2198 

SHACman/pgpk.l)  = 

7b76cbad 

011 1 474a 

087f 4332 

e8ae0a6d  b69f35f0 

S H A ( ma n / pg p s . 1 ) = 

b21 69a2d 

3bade7ec 

7b1 1 7ddc 

7bdd3766  3ba521f5 

S H A ( ma n / pg p V . 1 ) = 

4d076a 1 c 

23e01 81 0 

c8c0347a 

376a67e7  aa83dfdc 

S H A ( b i n a r i e s . uu e ) = 

95f 5e420 

34df 9403 

d0f3a52b 

a36afc8e  9c6e5071  21c1f282  216709b7 

HD5  ( L i b / Ma ke f i L e . i n ) = 

d105ec86f10bf1b899cffe12d2cb06d7 

MD5  ( L i b / ma ke f i L e . ms c ) = 

1be6d093be3c0cc3c084eb2ad3247f05 

HD5  ( L i b / b n / Ma ke f i L e . i n ) = 

75f 56eac31 ab33e280641 96b8c27f 5ca 

31 256f e4 

MD5  ( L i b / bn /ma ke f i L e . ms c ) = 

1b06d76809e8a786cb01773ff7c31a4d 
MD5  (Lib/bn/bn. c)  = 


CnCHK:908308a8a441fc6fdb81fc7de0997824f69a25fbf85e336ec0680e221f7cd00d8:: 


Pretty  Good  Privacy  5.0’^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Gcxsd  Privacy,  Inc. 


xli 


3f7598698afa620516d335c26a81136e 
MD5  (Lib/bn/bn. h)  = 

b23e8bc32b04461b958e57a49d963c28 
MD5  ( L i b / bn / b n00 . c ) = 

e4827bf0ba9934bd75d77138d3bbf48b 
MD5  ( Lib/bn/bn16. c)  = 

5d0ceb4d19ec6f942a0ec48b5aa705b6 
HD5  (Lib/bn/bn16.h)  = 

0aa783b39cae07f3107424ea09ace39b 
MD5  ( L i b/bn/bn68000  . c ) = 

152a7facacdd33e548cc0124ab90e705 
MD5  ( L i b / bn / bn8 086 . c ) = 

76da2da5dceb42a0b40cbc4449ebe871 
MD5  ( L i b / b n / bn d s a p r i me  . c ) = 

2a387a751be116863f338534b351171c 
MD5  ( L i b / bn / b nd s a p r i me . h ) = 

b85804bdfa3ee4203b2340a744d57b9e 
MD5  ( L i b / b n / bn g e rma  i n . c ) = 

75a64ee600e9f28c12683cb40a1b10f8 
MD5  ( I i b / bn / bng e rma i n . h ) = 

3c79f561d44da5425b2057403e6ea69f 
MD5  ( L i b / b n / bn i . h ) = 

9491b16560dc0aba9e846b24e6b7a331 
HD5  ( L i b / b n / bn i 00  . c ) = 

0a8bef890cbf84a0089b26f77ed299ff 
MD5  ( L i b / bn / bn i 1 6 . c ) = 

de68ef027d1c1dbe6980811e68593a45 
MD5  ( L i b/bn/bni 1 6 . h ) = 

6acd6815fb4efdb4de499f2f41b6e6d0 
MD5  ( L i b / bn / b n i 68 000 . c ) = 

c94d2a1290ccf0ce7c1346f4420155be 
MD5  ( L i b / bn / bn i 68000  . h ) = 

0c68af569514781bdf202367da6c96e0 
HD5  ( L i b / bn / bn i 6802 0 . c ) = 

959ae5099de650bd635b31a87bbaea86 
HD5  ( L i b / bn / bn i 68020  . h ) = 

1250846fb4607ce962ad6a6e6409e76a 
HD5  ( L i b / bn / bn i 80386 . a sm ) = 

79df 21 cf 92e1 f 563603ba7b63c0907c3 
MD5  (lib/bn/bni 80386. h)  = 

9f5bb184e2c70164ba1592bfef8b7fdd 
HD5  ( L i b / bn / bn i 80386 . s ) = 

14741 5d9cd986eb02301 da9c06671 a1 7 
HD5  ( L i b/bn/bni 80386c . c ) = 

6eb8001513f802f64877dd27cdde8a7f 
MDS  (Lib/bn/bni80386c.h)  = 

7d63d45efcfc636c73e916393f892fa5 
MD5  ( L i b / bn / b n i 8086 . a sm ) = 

871 185dd8b6ad85676c2051b9b1 74471 
MD5  C L i b / b n / bn i 8086  . h ) = 

e365ed869ae31228f91c14889aa61ea0 
MD5  ( L i b / bn / b n i 960 j X . s ) = 

89ac2c3dcbf026e8eb62a9ed85d14e9c 
MD5  ( L i b / b n / bn  i a L p h a . h ) = 

51e1979a4a426d7966f7f5e84819de5a 
MD5  ( L i b / b n / bn  i a L p h a . s ) = 

e57b830bef4542a9922b7efb8ba5af87 
MD5  ( L i b / b n / bn i me m . c ) = 

CCCHK:2b616d24944e01a83e8408812a43fcf8a5386d938e7f4d3a9179ea10b720b01a6:: 
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fd9f4216a0d524a28f60903cf6'f2ad0f 
MD5  ( L i b/bn/bni mem . h ) = 

40e959f9c95dbf472f70c133f31ab015 
MD5  ( L i b / bn / bn i n i 1 1 6 . c ) = 

6ac3dc14fa0cacb762e92b28ff0e67cd 
HD5  C L i b / bn / bn i pp c . c ) = 

3999ae3045b7fa84e654f6db2e00f28d 
MD5  ( L i b / bn / bn i p p c . h ) = 

ed98042a858dc146e56d2a9378fc053f 
HD5  ( L i b / bn / bn j a c o b i . c ) = 

1fb88cd9c9212560673089897fd063a5 
HD5  ( L i b / bn / bn j a c o b i . h ) = 

d32efb2d99324a73ce4c07f824ced7cc 
MD5  ( L i b / bn / bn k L ud g e . h ) = 

8be361d642bbca3fc181c096090ec26a 
HD5  ( I i b / bn / bn L e g a L . c ) = 

415afe4aaec9b5c3da6d93b671314995 
MD5  ( L i b / bn / bn  I e g a L . h ) = 

c3b1fc577d4c01f52de4edd71867abcc 
MD5  ( L i b / bn / bnpp c a s m . h ) = 

4d8d8c7b3d01c86058687d492edaa693 
HD5  C L i b / bn / bn p r i me . c ) = 

2b6bfef810d2d06c054c609d3f9b6378 
MD5  ( L i b / bn / bn p r i me . h ) = 

C650f0dc479156fb54e95d8f4b61a138 
MD5  ( L i b / bn / bnp r i n t . c ) = 

d5bf30fd865666d77b3e2772b437d4d3 
MD5  ( L i b / bn / bnp r i n t . h ) = 

22fee8109b9d7ac324a0dec04116c81e 
MD5  ( L i b / bn / bn s i e ve . c ) = 

bb741 f10f 32445045752 c92f1dd6ed9c 
HD5  ( L i b / bn / bn s i e V e . h ) = 

083c04d97c0d1ac1 41 56069d856263e3 
HD5  C L i b / bn / bn s i z 600 . h ) = 

42ead4823bf 748169a21 6636799e26f 9 
MD5  ( L i b / bn / L bn00 . c ) = 

6b89c1825d02fa95c656b4e2451e815c 
MD5  ( L i b / pg p / Ma ke f i L e . i n ) = 

13a86e595874e285acb8bc693f532cb2 
HD5  ( L i b / pg p /ma ke f i L e . ms c ) = 

1c0331e1afb3845563f0f2e42c17c65e 
MD5  ( L i b /pgp / c i ph e r /Ha  kef i L e . i n ) = 

6946f a671 cdfa339f3cebbf7f5ff7a85 
MD5  ( L i b / pg p / c i p h e r / ma ke f i I e . ms c ) = 

81752fbd213e26bf8d78e29ba7e26142 
HD5  ( L i b / pg p / c i p h e r / pg pC  A S T 5 . c ) = 

bf 57d74020325cd08f 2b5923b449701 f 
HD5  ( L i b / pg p / c i p h e r / pg p C A S T 5 . h ) = 

1cc1a8ed8ed54ed8e8fd5a238d3f4cb7 
HD5  ( L i b / pg p / c i p h e r / pg p C A S TBox 5 . h ) = 

96ecfafb40691477caeaaec00fbcd98c 
MD5  C L i b / pg p / c i ph e r / pg p C FB  . c ) = 

9a4346f5355859e78c3caf0e3ba3b329 
MD5  ( L i b / pg p / c i ph e r / pg p C FB . h ) = 

4e2e9bf20e46e407bb852cc2976dfcd4 
MD5  ( L i b / pg p / c i ph  e r / pg p C i p h e r . c ) = 

4c168ea93562f86197db22fa3bfc2c64 
MD5  ( L i b / pg p / c 1 p h e r / pg p C i ph e r . h ) = 

C[CHK:b90d26c7ef190c3dd9dc02766e708668467c0aff11fa437e8dc2b7429b667e6d2]] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


xliii 


dea525d7618b31d4a96f115016ab74e8 
MD5  ( L i b /pgp / c i p h e r /pg p D ES3 . c ) = 

a5a6678ca63df1ce0e8535bfe51a924c 
MD5  ( L i b / pg  p / c 1 p h e r / pg p D E S 3 . h ) = 

db7d696926b6f2a4e8f15bce3a7fcab9 
MD5  ( L i b / pgp/ c i ph e r / pgpD ES3_68K . c ) = 

b31a829a5be8771826a6591d53834ede 
MD5  ( L i b / pg p / c i ph e r / pg p I D E A . c ) = 

409e7481e468bb8b20f863356bb0dfbe 
MD5  ( L i b / pg p / c i ph e r / pgpl D E A . h ) = 

7a07fdefc707097050bd675f7392a820 
HD5  ( M b / pg p / comp r e s s / Ma ke f i L e . i n ) = 

d7f08a73e8342e82489d839aaf6698a8 
MD5  ( L i b / p g p / c omp r e s s / ma ke f i L e . ms c ) = 

95281 200f3da441ed27b3c8a9ff150d4 
MD5  ( L i b / pg p / c omp r e s s / pg p C omp r e s s . h ) = 

da7cd1d4662103f1a96849d1cc0edf24 
HD5  ( L i b / pgp/ comp r e s s / pgpZ I n f L a t e . c ) = 

4764e53160c4e6daf70e7caca5193190 
MD5  C L i b /pgp / comp  re s s / pgpZ I nf L a t e . h ) = 

171e1fd9101a00a437fdf9f2e51498ca 
MD5  ( L i b / pg p / h a s h / Ma ke f i L e . i n ) = 

fb42b9910f3f94acf2370d587be14892 
MD5  ( L i b / pg p / h a s h / ma  ke  f i L e . ms  c ) = 

a1f44f79196ef3e947e796e63970782c 
MD5  ( L i b / pg p / h a s h / p g p H a s h . c ) = 

9149c511b8101ba0b2b2d6d57b846640 
MD5  ( L i b/pgp/hash/pgpHash . h ) = 

c424eff1 1 d2e5708ab4de41 1 a7cb05e3 
MD5  ( L i b / pgp/ ha s h / pg pHD 5 . c ) = 

50babd87a3d726aa5b0de15ef6aab86d 
MD5  ( L i b / pg p / h a s h / pg pM D 5 . h ) = 

2f2c6d9fedc183ed4550e0840058ec41 
HD5  ( L i b / pg p / h a s h / pg p R I PEM D 1 60 . c ) = 

b1d483cfce49fced82bbe2edb9877b10 
MD5  ( L i b/ pgp/ ha s h / pgpRI PEMD1 60 . h ) = 

b2cae2a517a8e0a45ba95643eeae047c 
MD5  ( L i b / pg p / h a s h / pg p S H A . c ) = 

acd6c1f458c51d4aa6a6a5f92bf77b2c 
MD5  ( L i b / pg p / h a s h / pg p S H A . h ) = 

535eab355bc0aebd8831efe45e9a3983 
MD5  ( L i b/ pgp/ he L pe r /Ma ke f i L e . i n ) = 

fa925e6bb60ffb9f6ddcfa1b70f06d1a 
HD5  ( I i b / pg p / h e L p e r / ma ke f i L e . ms c ) = 

86afac96822ed6ed59e4da31f561aa34 
MD5  ( L i b /pgp  / h e L pe r /pgpAnno t a t e . c ) = 

6eb3c4cbd6b21ce3b7b4bb460aa59b03 
MD5  C L i b / pg  p / h e L pe  r / pg  pBy  t e F I F 0 . c ) = 

9c21626daab37d4846405b626deb6f82 
MD5  ( L i b / pg p / h e L pe  r / pg pBy  t e F I F 0 . h ) = 

a0c6cdbf6a248a07d23c2a18a0b4cb51 
MD5  ( L i b / pg p / h e L p e r / pg p C h a rMa p . c ) = 

fc053bc7cf36604b2c2c9e2c2667b80a 
MD5  ( L i b / pg p / h e L p e r / pg  p C h a r M a p . h ) = 

d1 09051 1ce45fc0d6326405288db4dcf 
MD5  < L i b / pg p / h e L p e r / pg p D e b u g . c ) = 

24f06f1 e489ade04ea1 734791 cf351 73 
MD5  ( L i b / p g p / h e L p e r / pg p D e b u g . h ) = 

[:i:CHK:24c23ef5ae2055f341  6434b451  845297d85984666f822fd2b2e9e1d199a280e3a:3 
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a97ee826ca60fc8c8a68e88fc9c15f8b 
HDS  ( L i b / pg p / h e L p e r / pg p E r r . c ) = 

70c79263f90820a959c3398902eb0575 
HD5  ( L i b / pgp / h e L pe r / pgp F I FO . c ) = 

62c0e477239cd8d32c410c32295549a9 
HD5  ( I i b / pg p / h e L p e r / pg p F I F 0 . h ) = 

51 92977051 d873f92d1 481 2d37be29dc 
MD5  ( L i b / pg p / h e L pe r / pg p F i L e . c ) = 

f949ac38596ac67ec8e2f786a4bcfb11 
MD5  ( L i b / pg p / h e L p e r / pg p F i L e . h ) = 

90931 41 e0ac9a95629d2eec1663b5 94b 
MD5  ( L i b / pg p / h e L p e r / pg p F 1 L e F I F 0 . c ) = 

a931a8cbf3acd7a38b272b3f2e513b0b 
MD5  ( L i b / pg p / h e L pe r / pg p F i L eName s . c ) = 

f7e8f8c9cf420aee0e4c913e0e330334 
MD5  ( L i b / pg p / h e L p e r / pg p F i L eNa me s . h ) = 

3505ba06084fca2c95fac50b3cae9d18 
MD5  ( L i b / pg p / h e L p e r / pg p F i I e Re f . c ) = 

31a03f60bbb74251f5d3eef41c900638 
HD5  ( M b / pg p / h e L pe r / pg p F i L e Re f . h ) = 

879d7d99b4cb8f 0383edca3e88b0628a 
MD5  ( L 1 b / pg p / h e L pe r / pg p F L ex F I F 0 . c ) = 

204f599da84923f70e85876d5dd4b49d 
MD5  ( L i b / pg p / h e L p e r / pg pG L oba L s . c ) = 

a8301a881574f019deb4afc391 96323d 
HD5  ( L i b/pgp / he L pe r / pgpLea ks . c ) = 

8f8dd401706a516fbee1c443c7389efd 
MD5  ( L i b / pg p / h e L pe r / pg p Le a ks . h ) = 

6f671c5fb941efebc64c9bcaff3d496a 
HD5  ( L i b /pgp/ he L pe r /pg pHa c F i L e . c ) = 

16db08a69d3185805a9a47188e72070e 
MD5  C L i b / pg p / h e L pe r / pg pHa c F i I e . h ) = 

e61ba24919f520f8a9a8f3c4ca6efe7a 
HD5  C L i b / pg p / h e L pe r / pg pMa c U t i L s . c ) = 

94e8dfc11e2ded7a49c7ecde0716b465 
MD5  ( L i b/pgp/ he L pe r / pgpHa cut i L s . h ) = 

e3f756536c2428b257ab1815d456db0c 
HD5  ( L i b / pg p / h e L pe r / pg pMem . c ) = 

26d4b0eec21bcadd9bd44d5a0731d56a 
f1D5  ( L i b / pg p / h e I p e r / pg pHem  . h ) = 

4a4cb3a604e83596b6f 03733e2f cc263 
MD5  ( L 1 b /pgp / he L pe r / pgpHemF i L e . c ) = 

971 b9a81f27838bf88288765a272 538b 
HD5  ( L i b / pg p / h e L pe r / pg pMsg . c ) = 

7c1d3e08d4688f9f4bb0f7a82b5feb79 
nD5  ( L i b/pgp/ he L pe r / pgpPa s s Ca c h . c ) = 

a64a67eb0b45c2e024f9fa6b2354d656 
MD5  ( L i b / pg p / h e L pe r / pg p Pa s s C a c h . h ) = 

1fccf89bd96d6fb63a925923daa74e5f 
MD5  ( L i b / pg p / h e L pe r / pg p P i p e F i L e . c ) = 

f77fd975ea35f102414b4889eb6ba36a 
MD5  ( L i b / pg p / h e L pe r / pg p S t r2 Key . c ) = 

4d9e0d8d316bf71965674da14d0a91fa 
MD5  ( L i b / pg p / h e L pe r / pg p S t r 2 Key . h ) = 

743597d4538ba4b4283a61 1044378d0e 
MD5  C L i b / pg p / h e L p e r / pg pT i me D a t e . c ) = 

78b4a9d9fbe0b280cf4e75804a4437d2 
MD5  ( L i b / pg p / h e L p e r / pg pT i me D a t e . h ) = 

C:CHK:f98c3dbd88211eda86a8454efbace06a05c5ab0d66a9720b02800193639baa09i:] 
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51ab97a91d5d0203dc2acabcef377096 
MD5  ( L i b / p g p / h e L p e r / pg pTy p e s . h ) = 

0c489d0b678bb5f1e4ee5bf6c81f3dc0 
MD5  ( L i b / pg p / i n c I ud e / Ha ke f i L e . i n ) = 

8394b05676f84c9cdf1407925e26998d 
MD5  ( L i b / pg p / i n c L ud e /ma k e f i L e . ms c ) = 

187151e06aef6ff9d7ddd87af0b5bd5c 
MD5  ( L i b / pg p / i n c L u d e / pg p A n no t a t e . h ) = 

db6fea4d150436e5f364563c821386e8 
HD5  ( I i b / pg p / i n c I u d e / pg p C o n vKe y . h ) = 

f30401f9459f385048c7c54151e991f9 
HD5  ( L i b / pg p / i n c L ud e / pg p E r r . h ) = 

fe1a2306a59e92c449e31011a9b376be 
MD5  C L i b / pg p / i n c L ud e / pg pK L ud g e . h ) = 

58a013524b73d9b6fe3209c77ab144af 
MD5  ( L i b / pg p / i n c L u d e / pg pH s g . h ) = 

d650101ca2a6dfd5223a03b684c82e1d 
HD5  ( L i b / pg p / i n c L ud e / pg p P k t By t e . h ) = 

4811beea336f96b28ed8b34267913ed5 
HD5  C L i b / pg p / i n c L ud e / pg pU I . h ) = 

C04d54ff3571dcaa827b5e7006023e34 
MD5  ( L i b / pgp / i n c L ude / pgpU s ua L s . h ) = 

2ec0738536ce48f76146275f7da66047 
MD5  ( L i b / pg  p / key d b / H a ke f i L e . 1 n ) = 

3e6e7e3f218689d64d11d28ef429bc3a 
HD5  ( I i b/ pgp/ keydb /pg p Dea rmo r . c ) = 

113322fadc29e1a36669011c6be0899a 
MD5  ( L i b / pg p / key db / pg p F 1 L e DB . c ) = 

ce6a869858575e7e83463bb856faeb1f 
MD5  ( L i b / pg p / keydb/ pgp F i L t e reds e t . c ) = 

096  2 6609091  e774 c 93 2 1 b906d63470 be 
HD5  ( L i b / pg p / key db / pg pKDB i n t . h ) = 

1f8f42a9421  76651  097c73e1  2383b7d1 
HD5  ( I i b / pg p / key d b / pg p Key D B . h ) = 

b2ecfb9f42c637a80d5e010c000c0034 
HD5  ( L i b /pgp / key db/pgpKey 1 1 e r . c ) = 

be377a292dce79088387afc586c8f326 
MD5  ( L i b / pg p / key db / pg pKey L i b . c ) = 

1bfbd45c324897ebd9f1c065ebb2aae2 
HD5  ( L i b/ pgp/ keydb/ pgpKey Ha n . c ) = 

ab6316f8ef76e48d579b3a0c95ef1ea1 
HD5  ( L i b / pg p / key d b / pg pKey S e t . c ) = 

3a8cef46559ce4773d63aab5ae2200bc 
HD5  ( L i b/pgp / keydb /pgpKeyUpd . c ) = 

072efebc9b9a6bd3c6a81757db4927e3 
HD5  ( L i b / pg p / key d b / pg pHem D B . c ) = 

d8aa0cb3f49e62c8430a023756ecdcae 
HD5  ( L i b / pg p / key db / pg p P r e f Ha c . c ) = 

df 61  bdl  1d45660f a3dd6d4a58c1 2de61 
HD5  ( 1 1 b / pg p / key db / pg pP r e f U n i X . c ) = 

6e916d4c1c5423835321fd429a624bc2 
HD5  ( L i b / pg p / key d b / pg p P r e f U n i X . h ) = 

33629bf398fbf2da44e21d5204857edf 
HD5  ( L i b / pg p / key d b / pg p P r e f W i n32 . c ) = 

b05919419e00afcd8faabcd8b25db04b 
HD5  ( L i b / pg p / key d b / pg p P r e f s . c ) = 

8c1a1d11c8e9fa6e662d745e53354482 
HD5  ( L 1 b / pg p / key d b / pg p P r e f s I n t . h ) = 
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3c57459fe46671c011949a801be39ea4 
MD5  ( I i b / pg p / key d b / pg pU n i o n DB  . c ) = 

f15e3872684e8eaef885b6caae6d4d6d 
HD5  ( L i b /pgp/ key s /Ma kef i L e . i n ) = 

981e6c907f50c3d2ef6a973458cf2c4c 
MD5  ( L i b / pg p / key s / ma ke f i L e . ms c ) = 

415a0a771ab446050a77cce0542badad 
HD5  ( L i b / pg p / key s / T e s t . c ) = 

0ede10d55047c884d22113244b3c1e81 
MD5  ( L i b /pgp/ key s /Tes t Gen  . c ) = 

d9eb09b2270e8b3f cb31a3948641 5bdf 
MD5  ( L i b / pg p / key s / pg pMemPoo L . c ) = 

4cb3d1 df7e352d74fa 67261 63701 fc31 
MD5  ( L i b / pg p / key s / pg pMemPoo L . h ) = 

fdaedbca3f24c7440dd62a9944567163 
MD5  ( L i b /pgp/ key s / pgpRng F i L e . c ) = 

a0827cf 5c8e4f c5221 b6d736c2cd51 8d 
MD5  ( L 1 b / pg p / key s / pg pR ngMn t . c ) = 

481 1033d6e23eb7e0f 2ba853bd98201  b 
MD5  ( L i b/pgp / key s / pgpRngHn t . h ) = 

2278d7f877b4d58141ad8d48877a6340 
MD5  ( I i b / pgp / key s / pg p Rn g Pa r s . c ) = 

519739b02146e2189d8dd656e2b4beae 
MD5  ( L i b / pg p / key s / pg p Rn g Pa r s . h ) = 

5827bba7e2a783fd4883e98a32a66e05 
MD5  ( I i b /pgp/ key s / pgpRngPkt . c ) = 

e0ba55c9220d01af729bebb24421cb4e 
MD5  ( L i b / pg p / key s / pg pRng P k t . h ) = 

b36794af cc394588a836cc963957f c2c 
MD5  ( L i b /pgp/ key s / pg pRngP r 1 V . c ) = 

79d44f bf 2082f el bb31 5c1 39ca37e8a7 
MD5  ( M b / pg p / key s / pg p Rng P r i V . h ) = 

a850d3ee64d554785c4354be0835b5c7 
MD5  ( L i b / pgp/ key s / pgpRng Pub . c ) = 

e0abdc9fb46889a7252bd749ab15aaec 
MD5  ( L i b/pgp / key s / pgpRng Pub  . h ) = 

f a56d83944e5d502aaea9435be5866c9 
HD5  ( L i b / pgp / key s / pg p Rn g Rea d . c ) = 

ee48234e155ea250ce11997de59fdfb9 
MD5  ( I i b / pgp / key s / pg pRng Rea d . h ) = 

933a6baf 5d8a667848232ef af ecf edbf 
HD5  ( L i b /pgp / key s / pgpRng V i ew . c ) = 

f4db18ea0cb619c5d727f2d83ffc0481 
HDS  ( L 1 b / pg p / ke y s / pg pR ng W r i t . c ) = 

9bfe3046ffba0cce0b4fb0f29f826940 
MD5  ( L i b /pgp/ key s /pgpT r s t Pkt . c ) = 

464674733a20ec1 1 1d35efda110cb19a 
HD5  C L i b /pgp/ key s / pgpT rs t Pkt . h ) = 

f352f2a1c75e8de2cd1a4c5b0bb0bcbe 
HD5  ( L i b / pg p / key s / pg pT ru s t . c ) = 

a3a79ce6a2bbfdd67af98cf57308b4e9 
MD5  ( L i b / pg p / key s / pg pT r u s t . h ) = 

79d49692d1 267ebf 0ec8f b238b62691 5 
MD5  ( L i b / pg p / p 1 pe / Ma ke f i L e . i n ) = 

20823b4ec66628c7027ba376c74cf0f3 
MD5  ( L i b / pg p / p i pe / ma ke f i L e . ms c ) = 

5819711fc62e684f0c077221f14cb4cc 
MD5  ( L 1 b / pg p / p i pe / c r y p t / Ma ke f i L e . i n ) = 
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934b38048776e873101177ac4519a26a 
MD5  ( L i b / pg p / p i pe / c ry p t /ma ke f i L e . ms c ) = 

9eecb11c77c52a60ba810de925d14c19 
MD5  ( L i b/ pg  p /p  i pe  / c ry  p t / pg  pC  i ph  rHod  . c ) = 

9d4b556a9354a1f7f06e869b924b1b51 
HD5  ( L i b / pg p / p i pe / c ry p t / pg p C i p h r Hod . h ) = 
b36e06ec536cc17c144470dffce06ab6 
HD5  ( L i b / pgp / p i pe / c r y p t / pg pCon vMod . c ) = 

2d49b736c0a9af6a09a76847dd039cc2 
MD5  ( L i b / pg p / p i p e / c r y p t / pg p C o n vMo d . h ) = 

34fd7a04e75d01558a4407683398be4d 
MD5  ( I i b / pgp / p i pe / c ry p t / pg pMa ke PKE . c ) = 
ef9d015bee3ad9be447fc3835d32535b 
MD5  C L i b / pg  p / p i p e / c r y p t / pg  pHa  ke  PKE  . h ) = 

8132dce9da7e2c37bac461b6f0ab562d 
HD5  ( L i b / pg p / p i pe  / c r y p t / p g p PKEMod  . c ) = 

4d950a491b64d73cb9ed14769cfd78f6 
MD5  ( L i b /pgp/ p i pe  / c ry p t / pg pPKEHod  . h ) = 

4835c0b6d1d9557c9f7d0be307772a44 
MD5  ( L i b / pg  p / p i p e / f i L e / Ha  k e f i L e . i n ) = 

493d170399e45dd4294aad6c7e8ceb10 
HD5  ( L i b / pg p / p i pe / f i L e / ma ke f i L e . ms c ) = 

b0e55184e9d4b03d71a0e9a40d20cf43 
HD5  ( L i b / pg p / p i pe  / f i L e / pg p A r mo r . c ) = 

66bce7f330a801caf9f2f8e07469cef4 
HD5  ( L i b / pg  p / p 1 p e / f i L e / pg p A r mo  r . h ) = 

26395 b656cacc7fc454ca3a6fe5 43085 
HD5  (Lib/pgp/pipe/fiLe/pgpArmrFiL.c)  = 

61 662cf08a1a27759fa60132f01 1885b 
HD5  ( L i b / pg  p / p i p e / f i L e / p g p A r m r F i L . h ) = 

f3fbec8675823f9fa7538c9190f9bfe1 
HD5  ( L i b / pg p / p i p e / f i L e / pg p C R C . c ) = 

80d4f0b3bd29f0fecaa0fcbd81e4c4c7 
HD5  ( L i b /pgp/ p i pe / f i L e / pg pC RC  . h ) = 

857aee566bf70b3a65d5f65256a1912e 
HD5  ( L i b/ pgp /p  i pe  / f i L e / pg  p F i L eHod  . c ) = 

be04309f22f528a40a8b2994de6f02f3 
HD5  ( L 1 b / pgp /p i pe / f i L e / pgp F i L eHod . h ) = 

276994247385ee40e29ceea1 1 06aeb1 5 
HD5  ( L i b / pg p / p i pe / f i L e / pg p H e a de r . c ) = 

b15bd863dc49782f94d41fb85509d784 
HD5  ( L i b/ pgp/ p i pe / f i L e /pgpHea de r . h ) = 

1aeb8a0f5386d2d1d5540aca2667f74a 
HD5  ( L i b / pg p / p i p e / f i L e / pg p P r s A s c . c ) = 

d73e4e5d54c95e5150b870edd45886ac 
HD5  ( L i b / pg p / p i pe  / f i L e / pg p P r s A s c . h ) = 

4749dbc5f772d26f2722477c0493a8b6 
HD5  ( I i b / pg p / p i pe / f i L e / pg p Ra d i x64 . c ) = 

1cd15c73133cdc96c6c9483d2ef32726 
HD5  ( L i b / pg p / p i pe / f i L e / pg p Ra d i x64  . h ) = 

842bf69552e3cea7306462bafb0489b3 
HD5  ( L 1 b / pg  p / p i p e / p a r s e r / Ha  ke f i L e . i n ) = 
d0fe5df55ac78a093980e0b4dfdf73f5 
HD5  ( L i b / pg p / p i pe / p a r s e r / ma ke f i L e . ms c ) = 
a6adfbebb094fae2563c027d10e851fd 
HD5  ( L i b / pg p / p i pe  / p a r s e r / pg p P r s B i n . c ) = 

61e427ce0c3a738d4b638cf38a4af17a 
HD5  ( L i b / pg  p / p 1 p e / p a r s e r / pg  p P r s B i n . h ) = 

i;[:CHK:96afc7ed9ae02edfb71ed6df9a2c75b405d6a145cf01ec2b8d1f38a61b78c0a33:] 
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5d761acda35b6b38c9b36d53c8df2854 
HD5  ( L i b / pg p / p i p e / pa  r s e r / pg p R ea  d An n . c ) = 
c3eedf14d7ec4d8537b42c249296c62a 
HD5  ( L i b / pg  p / p i p e / pa  r s e r / pg p R e a d An n . h ) = 

061821dc4528a56897392a2ec744e660 
MD5  (lib/pgp/pipe/parser/pgpVerifyRa.c)  = 

9974d0ee5dd1 1f4bfa5718be52ce7947 
HD5  ( L i b / pg p / p i p e / pa r s e r / pg p Ve r i f y Ra  . h ) = 

2b711e705db82d4acde50ef230d11187 
HD5  ( I i b / pgp/p  i pe  / pa  rs  e r / pg  pV  rf  y S i g . c ) = 

75ce7072b1f4da419e07f0c5ae2b368e 
HD5  ( L i b / pg p / p i p e / p a r s e r / pg p V r f y S i g . h ) = 

6cfcdc75e8a70185e24a803d9e51a603 
MD5  ( L i b /pgp / p i pe / s i g / Ma ke f i L e . i n ) = 

54dc014fc75bf7a08f3c424f16ff2de2 
MD5  ( Li b / pg p / p i pe / s i g / ma ke f i L e . ms c ) = 

b45261ab2b763de75b1ee663cffefffb 
MD5  ( L i b / pgp / p i p e / s i g / pg p H a s h Mod  . c ) = 

d7e23d3a60f63fdf9bddb6399307c9f1 
MD5  ( L i b /pgp/ p i pe / s i g / pg pHa s hMod . h ) = 

53662e19a30e89b02eb241061b2fa3b0 
MD5  ( I i b / pg p / p i pe / s i g / pg p S i g Mod  . c ) = 

186d1b5062f 863d6f 1 335bc1 6f 03C062 
MD5  ( L i b/pgp/pi pe / s i g /pgpS i gMod  . h ) = 

1 4562  7791  2ac461b3feb880f91  8047c5 
MD5  ( L i b / pg p / p i pe  / t e X t / Ma  ke f i L e . i n ) = 

ba57ca51fda313622c310be1fbe23113 
MD5  ( L i b / pg p / p i pe  / t e X t / ma  ke f i I e . ms  c ) = 

c82a5da5adf54cb46b8b3c4429fa2cc3 
MD5  ( L i b / pg p / p i pe / 1 e X t / pg p C ompHod  . c ) = 

88a189f a1  e5f  1 b65  56f 8f 4bb5dd08f 95 
MD5  ( I i b /pgp/pi  pe / 1 ex t / pgpCompMod . h ) = 

0d924fbb77bc928fb52d535094ea2866 
MD5  ( L i b / pgp / p i pe / t e X t / pg p D e f Mod . c ) = 

a2a943cf b6f 37ce6f 9106ed8d6921 d9a 
MD5  ( L i b/pgp /p i pe / t ex t /pgpDef Hod  . h ) = 

24201  5d11e061b6e465201  2bf714d1 09 
HD5  ( L i b / pg p / p i pe / 1 ex t / pg p I n f Hod . c ) = 

09 5 d59 f4d54b4dd 9 f093b75 06749609c 
MD5  ( L 1 b / pg p / p i pe / 1 ex t / pg p I n f Mod . h ) = 

e758569f4282824e61b291d3e80fc7ef 
MD5  ( I i b / pg p / p i pe / 1 e X t / pg p L i t e ra L . c ) = 

ca66739c1 f 2025336f 389be0f 06da8f 9 
MD5  ( L i b / pg p / p i pe / 1 e X t / pg p L i t e ra L . h ) = 

2a22899b6004724ecdcccc659209c16c 
HD5  ( L i b/pgp /pi pe / 1 ex t / pgpTex t F i L t . c ) = 
e6703f4e2f012187c31f7e9ad634e3e0 
HD5  ( L i b / pg p / p i p e / t e X t / pg pTex t F i L t . h ) = 

338d0032e981383d2d25b6b90083e944 
MD5  ( L i b / pg p / p i p e / t e X t / pg pZ B i t s . c ) = 

c cl  942989043a bbcl ddl ef 7640597002 
MD5  ( L i b / pg p / p i pe  / 1 e X t / pg p Z De  f L a t e . c ) = 

948d09d1 5539e9c21 85aa462078dbe05 
MD5  ( I i b / pg p / p i pe / 1 e X t / pg p Z Ma t c h . a sm ) = 
b5dc1b289852b0cc2181bdf0eb5c65f0 
MD5  ( L i b / pg p / p i pe  / 1 e X t / pg p ZTa  i L o r . h ) = 

abb267eb9362bed8511e00a003836229 
HD5  ( L i b / pg p / p i p e / t e X t / pg p ZT r e e s . c ) = 
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e23c0a31c3a27b33e57bc6d3b35c02b3 
MD5  ( L i b / pg p / p i pe / 1 ex t / pgpZ i p . h ) = 

a0e9b3a839d39d1a25c25fc4179a5eef 
MD5  ( L 1 b / p g p / p 1 p e / u t i L s / Ma  ke  f i L e . i n ) = 

794e9364d6c54856a665bec6ff001aaf 
MD5  ( L i b / pg p / p i p e / u t i L s / ma  k e f i L e . ms  c ) = 
ead03138a4f9ca17f6252a29ede3ecbe 
MD5  ( L i b / pg p / p i p e / u t i L s / pg p Add H d r . c ) = 

0ef0b6da9f098e42165fe920f40b32bc 
HD5  ( L i b / pg p / p i pe / u t i L s / pg p Ad d H d r . h ) = 

7be033484ae8c9792779207bec4fab4d 
MD5  ( L i b / pg p / p i p e / u t i L s / p g pBu f Mod  . c ) = 

78cbdb768f69df148cb5192f6327e636 
MD5  ( L 1 b / pg p / p i p e / u t i L s / pg p Bu f Mod  . h ) = 

8698a46b1d79e4016d955fc74af2a8e1 
MD5  ( L i b / pgp/ p i pe  / u t i L s / pg  pCopy  Mod  . c ) = 

Cl77f83c130b462e6de2529598606f94 
MD5  C L i b / pg p / p i pe  / u t i L s / p g p C o py Mod  . h ) = 
f6620abfd34304752a8ad6044049c1aa 
MD5  ( L i b / pg p / p i p e / u t i L s / pg p D e V N u I L . c ) = 

477a621b64b13ae26caa610a3a8df94c 
MD5  (Lib/pgp/pipe/utiLs/pgpDevNuLL.h)  = 

2052e4adc931f20e655034ac6028d8e0 
MD5  ( L i b / pg p / p i pe / u t i L s /pg p J o i n . c ) = 

bc31229d0b112f7c081a1d9abd04afd6 
MD5  ( L i b / pg p / p i p e / u t i L s / pg p J o i n . h ) = 

989949ea8bf283fda1b7f492b06d1f26 
MD5  ( L i b / pgp / p i pe / u t i L s / pg pMemMod  . c ) = 

27c42f9b7af37f5702cda692106ab33d 
HD5  ( L i b / pg p / p i pe / u t i L s / pg pM emMod . h ) = 

50f2698a7a2e6042f69c35d5df70f541 
MD5  ( L i b/pgp / p i pe / u t i L s / pgp P i pe L i ne . h ) = 
e779c54cc62d8dcf33dac37fb11eeca5 
MD5  ( L i b / pg p / p i pe  / u t i L s / pg p P r o t oMod  . c ) = 

9bd710c28ff1ab176c17b4acb148950f 
MD5  ( L i b / pg p / p i pe  / u 1 1 L s / pg  p Ro 1 1 3Hod  . c ) = 
f525dbaf5982c57ef48b311a5b221e18 
MD5  ( L i b /pg  p /p  i pe  / u t i L s /pg  pRot  1 3Mod  . h ) = 

Cbca4378f429fe366a1c9b9224d68195 
MD5  ( L i b / pg p / p i pe / u t i L s / pg p S p L i t . c ) = 

98818af45a3375c651ea9db13d5e3a50 
MD5  ( L i b / pg p / p i pe / u t i L s / pg p S p L i t . h ) = 

78740ce4d645e2975dd692a3245316d1 
HD5  ( L i b /pg p /pub key /Ma kef i L e . i n ) = 

aa0f707ef72a3c99dac49426d752b72b 
MD5  ( L i b / pg p / pub  key /ma ke f i L e . m s c ) = 

2afab063ae9859d7f851f4a35c70c4b6 
MD5  ( L i b / pg p / pu b ke y / pg p A L t R S AG L u . c ) = 

42f63c68e810de5ebc9cef9a9ae9bc4b 
MD5  ( L i b / pg p / p u b key / pg p D S AKey . c ) = 

f91e8634d6de202901 58651 1d061a8dc 
MD5  ( L i b / pg p / p u b k ey / pg p D S A Key  . h ) = 

6cee9dad6b86af928c13e7d472aed25d 
MD5  ( I i b / pg p / pub  key / pg p E S K . c ) = 

3ae3183e6da632dcc94b911d96e7aa94 
MD5  ( L i b / pgp / pub  key / pg p E S K . h ) = 

e0f0e635ad94f20ae6c4208daa825eca 
MD5  ( L i b / pg p / pu b key  / pg p E L G Key  . c ) = 

Ci:CHK:47bb94392469e29d4ecbd81fcdfab6e9907b9be2683405079a07f2f10b27fe5cf:: 
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521d26375270c6e1c6ce56140121afb1 
MD5  ( L i b /pgp/pub key / pgpE L GKey . h ) = 

54c5a98d199a809c1f5fb6083932ee03 
HD5  (Lib/pgp/pubkey/pgpFixedKey.c)  = 

fbc2d926a02f0c3593314d26a7d39274 
MD5  ( L i b / pg p / pu b ke y / pg p F i X ed Key . h ) = 

1850de44f3064872080aef888ffc0089 
MD5  ( I i b / pg p / pub ke y / pg pKey H i s c . c ) = 

98f0e29f56d84fa6f81542e67436337e 
MD5  ( L i b / pg p / p u b key / p g p Key H i s c . h ) = 

64eb3483397d121191d31628ab3809c5 
MD5  ( L i b / pg p / pub ke y / pg pKey S pe c . c ) = 

3faf28b1d2843b2cffedecc4236de3f1 
MD5  ( L i b/pgp/pubkey/pgpKeySpec . h ) = 

bd3e3c751 866731 7624e222a3ba62831 
MD5  ( L i b / pg p / p u b key / pg pMa ke S i g . c ) = 

995464c5f6f5de86849cc8f433bb7c75 
MD5  C L i b / pg p / p u b key / pg pHa ke S i g . h ) = 

1c57b5ec6bdeb61d413aeee1e02a6844 
MD5  (Lib/pgp/pubkey/pgpPktList.c)  = 

96789ed17ebb5032023c1fb24b380db1 
HDS  ( L i b / pg p / pu b key / pg p P k t L i s t . h ) = 

e48b0e1b4974cb8e5caacbf451724b6b 
MD5  ( L i b/pgp/pubkey/pgpPubKey . c ) = 

16320df48254183ff264380c80acb42c 
MD5  ( L 1 b /pgp/ pub  key / pgpPubKey . h ) = 

e29b6dba90a0bdfc00bbf1bbd92b07ed 
MD5  ( L i b / pg p / pub ke y / pg p RS AKey . c ) = 

dcff2c5b8efce3891500963a848d2e95 
HD5  C L i b / pg p / pu b key  / pg  pRS  AG  L u e . h ) = 

7eb004590d95e1f59fa914bf1b4ae2c2 
MD5  ( L i b / pg p / pu b key / pg pR S AG L u e 1 . c ) = 

53894c e2 c81 e9d274f4e7a0ab61 83744 
MD5  C L i b/pgp/pub key /pgpRS AG L ue2 . c ) = 

0f3cdcecfd11967a9e855a61064a9f48 
HD5  ( L i b /pgp/pub key /pgpRS AKey . h ) = 

e24648ed3c4f d737b59dbb0be0e4d870 
MD5  ( L i b / pg p / pu b key / pg p R S AKey Ge n . c ) = 

0a1fefcf639f499bedb45c7ed21288fa 
HD5  ( L i b/pgp/pubkey/pgpSi g . c ) = 

b130c71216bba5fc61a38f91ab49ee5d 
MD5  ( L i b / pg p / pub  key / pg pS i g . h ) = 

7e28422d3a5b12f9d0d6fc143142b6f1 
HD5  (Lib/pgp/random/HakefiLe.in)  = 

ffdbcc1a08ef2a1a98f3299c6be450dc 
HD5  C I i b / pgp / ra ndom/ma kef i L e . ms c ) = 

573ad68da4930375a5bbde4c133765b8 
HD5  ( L i b / pg p / ra ndom/ pg p Rnd . h ) = 

69022fe4d5b1be4c9e481cd82a29a53b 
MD5  C L i b / pg p / ra ndom/ pg p Rn d E vn t . c ) = 

ead123b2db9f21675a9e4b9015fae52f 
MD5  ( L i b / pg p / r a ndom / pg p RndM S D 0 S . c ) = 

69766d2457f664667ce6974f0f683586 
MD5  ( I i b / pg p / r a n d om / pg pRndHa c . c ) = 

b064907dfe4d1a31aba2224bd44f8efd 
MD5  ( L i b / pg p / r a n d om / pg pR nd Poo L . c ) = 

2a39eda9040660fb938cdb794abdf1c5 
HD5  ( L i b / pg p / r a n d om / pg p Rnd Po o L . h ) = 

CCCHK:8403c07aa04c142afe5b2556f97d1c1ac488d9ea1313eee4892c3f5992f9b6ff2:] 
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bc9b0624cff99af5a06e9d29f86176be 
MD5  ( L i b / pg p / ra nd om / pg pRnd S e e d . c ) = 

bcee1435f647b92a61cfc9fa09ad4999 
MD5  ( L i b / pg  p / r a ndorn / pg p Rnd S e ed  . h ) = 

505775bed6b746d9b62991d97c8a34d5 
MD5  ( L i b / pg p / ra nd om/ pg p Rnd Un i X . c ) = 

9c655e7392aff575f051e114b0dc6ff5 
MD5  ( L i b / pg p / r a n d om / pg pRndVM S . c ) = 

ea2e5f999a2d6127fe923c6321be7399 
MD5  ( L i b / pg p / r a n dom / pg p R n d W i n3 2 . c ) = 

737b3f59d2649f2b71ed943cfc9073c6 
MD5  ( L i b / pg p / ra ndorn/ pg p Rndom . c ) = 

e428080cef627115a7ddf9f87e275f78 
MD5  ( L i b / pg p / r a n d om / pg pRnd om . h ) = 

f027789e1efad0fe0b6018fa2b3634ae 
MD5  ( I i b / p g p / u t i L s / Ma ke f i L e . i n ) = 

b262a8a628e2d1  1 1 29651  892692f7e01 
MD5  ( L i b / pg p /u t i L s /ma ke f i L e . ms c ) = 

4d6d2505b9dfd19a72c430b19fd6ea89 
MD5  ( L i b / pg p / u t i L s / pg p Con f . c ) = 

2077421  1 46 bec7f6bf 30 12ea3753b710 
MD5  ( L i b / pg p / u t i L s / pg p C on f . h ) = 

40068cb51c3490b8eb768b5997ad2a72 
MD5  ( I i b /pg p /u t i L s / pg pDec Pi  pe  . c ) = 

2ffa98ec4e21dff45a4b7ab56c526bb7 
MD5  ( L i b / pg p / u t i L s / pg p D e c P i pe . h ) = 

cd961eb26f07e53ecfdecd5733e60030 
HD5  ( L i b / pgp/ u t i L s /pgpEn c Pi pe  . c ) = 

1108928fcdfcfa66fba26a457891762b 
MD5  ( L i b / pg  p / u t i L s / pg  p En  c P i p e . h ) = 

ade9439767b45b57f698fb04b2a39667 
MD5  ( L i b /pgp  / u t i L s / pgpEnv . c ) = 

daf 8d8aef 0f 3e086a578ab89085b42ac 
MD5  ( L i b / pg p / u t i L s / pg pE n V . h ) = 

3c88cef75355ea834169219c6c7ea8e1 
MD5  ( L i b/ pgp/ u t i L s /pgp F i L eTy pe . c ) = 

dacd5c4024a6cdae2095cfaf6b8cfc6f 
MD5  ( L i b / pg p / u t i L s / pgp F i I eTy pe . h ) = 

35b221387270582f5a8f703a609e5d51 
MD5  CLib/pgp/utiLs/pgpSigPipe.c)  = 

674c76255ab0cf cf 98b961 4b78b8d2de 
HD5  ( L i b / pg p / u t i L s / pg p S i g P i pe . h ) = 

71f07571  e-f1e93da2  3991  10da96901  51 
MD5  ( L i b/ pgp/ u t i L s /pgpS i g Spe c . c ) = 

428b70e13144539f915982beadd0bbc6 
MD5  ( L i b / pg p / u t i L s / pg p S i g S p e c . h ) = 

d240d9609c2271b9d6e0a6449b7e5574 
MD5  ( L i b / s i mp L e / Ma ke f i L e . i n ) = 

1cf7f6415e30ae52a641d643fb4962e4 
MD5  ( L i b / s i mp L e / s pg p . h ) = 

2f50bbabfc95b15a1fa066271693fe02 
MD5  ( L i b / s i mp I e / s pg p ABu f . c ) = 

d07332f41a0311d8fea1e6a31ab18e08 
MD5  ( L i b / s i mp L e / s pg p A F i L e . c ) = 

8a8c53df8de103e7d641ab93c674cdee 
MD5  ( I i b / s i mp L e / s pg p Add K . c ) = 

a1e603ef9bbce6681ec097397030b9fc 
MD5  ( L i b / s i mp  L e / s pg pC h kR  . c ) = 

n[CHK:9336df3b7aac1b46b5483d72dae30656082a1b4578724e3d10c8047f42733f63i:: 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2dbddac37a7cf7afb5c404c31a6ee6f4 
MD5  ( L i b/ s i mp L e / s pgp EBuf  . c ) = 

d215fda1efb845ae99dc211dff41a294 
MD5  ( L i b / s i mp L e / spgpE F i I e . c ) = 

0c05882e9f6c51a1d65210445b77c597 
MD5  ( L i b / s i mp I e / s pg p Ex t K . c ) = 

f127817b753c76902e896792c8b06acf 
MD5  ( L i b / s i mp I e / s pgpNKey . c ) = 

2f299aaef056800cc330e183dbc06d59 
MD5  (Lib/simpLe/spgpRBuf.c)  = 

59ff9669b9f8da1524fdbcfab27e0241 
MD5  ( L i b / s i mp L e / s pg pR F i I e . c ) = 

979b585e488d1 0368a06b8bf 84b68f 81 
MD5  ( L i b / s i mp L e / s pg p RN G . c ) = 

477ecdaaccc88af0f1adefa7ca2bef74 
MD5  ( L i b / s i mp L e / s pg p S Bu f . c ) = 

5be674466987752333d052f df 48acce1 
HD5  ( L i b / s i mp L e / s pg p S F i L e . c ) = 

924b61ba1cb00229f18ffa2ed4f0121d 
MD5  ( L i b / s i mp L e / s pg p VBu f . c ) = 

ee90936962c46d0ee453ba61 ee7c41 29 
MD5  ( L i b / s i mp L e / s pg p V F i L e . c ) = 

2a7cf 97af c7799a47e439286e1 3ac54d 
MD5  ( L i b / s i mp L e / s pg p bu f . c ) = 

f8ebbfe93602f55e41aecdfafb2385d5 
HD5  ( L i b / s i mp L e / s pg p c a L L ba c k . c ) = 

c85758bcb09de7a36cb7488b55a69cf0 
HD5  ( L i b / s i mp L e / s pg pd ea rmo r . c ) = 

ee44866db6d186af 62422d7acec0622a 
MD5  ( L i b / s i mp L e / s pg pd e c ry p t . c ) = 

f 1 b37d63005b4ef e6ec24f d2aa69f 3bf 
HD5  ( L i b / s 1 mp L e / spgpi n i t . c ) = 

2d9d41d715311ddc18ce776100919132 
MD5  ( L i b / s i mp L e / s pg p i n t . h ) = 

306ed1 8 cdl 30709a 8891 ca681572ec34 
MD5  ( I i b/ s i mp I e / spgp r i ng . c ) = 

C7b746d3837559e1de81d12f372fa74e 
MD5  ( L i b/ s i mp I e / s pgp kche c k . c ) = 

0aace06c806418a6b8cece8fd8b44d0c 
MD5  ( L 1 b / s i mp L e / s pg pn a me i d8 . c ) = 

81 e57a6220103026608ba01 1 9357cc1 3 
HD5  ( L i b / s i mp L e / s pg p r e c L 1 s t . c ) = 

23dbdeeb76df3adcc6c4f3d2cc414ce2 
MD5  ( L i b / s i mp L e / s pg p s 1 g n e r . c ) = 

76118fafe8dac079701f31315b0717f4 
HD5  ( L i b / s i mp L e / spgp t ex t . c ) = 

6a651 105347cd7069aef f 6538e84934c 
MD5  (Lib/simpLe/test.c)  = 

eb4f0743608242d4f9857de8fe561898 
HD5  ( L i b / 1 1 y u i / Ma ke f i L e . i n ) = 

51886c1423d49ff4e891d747ee6fe74f 
M05  ( L i b / 1 1 y u i / ma ke f i L e . ms c ) = 

93a 67a fbb66fc 646971 728e388159b95 
MD5  ( I i b / t t y u i / pg p KB . h ) = 

aab34b700b0cd67e8ae3c5c5980f4abd 
MD5  ( L i b/t tyui /pgpKBMSDOS . c ) = 

f671d85f54459b1fb0d14ae1 2021 8779 
MD5  ( L 1 b / 1 1 y u i / pg pKBMa c . c ) = 

CCCHK:32c17668f17cf4055d64c82a009884f0a330febcbfcd514b7242cf9d8840978aeD] 
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MD5 

MD5 

MD5 

HD5 

MD5 

MD5 

MD5 

MD5 

MD5 

MD5 

MD5 

MD5 

MD5 

HD5 

MD5 

MD5 

MD5 

HD5 


fc9ea041ea57fa4d17702a7169b76b4b 
( L i b / t t y u i / pgpKBUn i X . c ) = 

8041 000031 23f3d7c603923da654a1 10 
( L i b / 1 1 y u i / pg pMo r eMod . c ) = 

fa67470a7b2faca9e4f8e1b34febfaed 
( L i b / 1 1 yu i / pgpMo reMod . h ) = 

9862e09986488601dc82796e842dfbbe 
( L i b / 1 1 y u i / pg p POS I X . h ) = 

ec17a89e799e965a47fd8bde8912a22b 
( L i b / 1 1 y u 1 / pgpR i ng UI . c ) = 

a3f23c66e7053467b8375a2703e87dfc 
( L i b / 1 1 y u i / pg p R i ng U I . h ) = 

4d3593184c22d82fdc1e883048fbe97c 
( L 1 b / 1 1 y u i / pg p S c rM S D 0 S . c ) = 

efc4ff9ad3ae4042aa9ec19a46416f52 
( L i b / 1 1 y u i / pg  p S c rHa  c . c ) = 

53dcbab34734fc5993bb248c97825ef4 
( L i b / 1 1 y u i / pg p S c r U n i X . c ) = 

a4616b684c8a1e04406568435b84698c 
(Lib/ttyui/pgpScreen.h)  = 

dbb4c22122ec544ff0a8cfcbeac188f4 


( L i b / 1 1 y u i / pg  pU  s e r 1 0 . c ) = 

4848b9966caab82c7442824e9e4ce4c9 


( L i b / 1 1 y u i / pg p U s e r 1 0 . h ) = 

02dfe90c8efda7b86877f6cd2b6cfc8a 
(README)  = 

98512e6215510c58cca416ccb98d519c 
(TODO)  = 

14d93570773aaf9204bebab62ab6030e 
(buiLd.bat)  = 

4b41d418aead0c5a5af7f955b9e1ed6b 
(cLean.bat)  = 

77fae840383069cb07a9c9ac384a154f 
(mkhdrs.bat)  = 

f31d6e2252744212e47761 33461 eb8bf 
(reLease.bat)  = 

134bcc9d961673b30c52ebb949d34064 


MD5  ( ma ke-m khd r s . p L ) = 

5e8fb9f3a5a0f377459762578755eec9 
MD5  (Li bbui Ld . bat ) = 

1 c5bf1 b30d07d46db324b80af 6379821 
HD5  (Makefile. in)  = 

cedcf29175df0bdab7cad224cf681aa4 
MD5  (acLocaL.m4)  = 

5cc5dcc774d6018f1600ab6314f5dc7c 
MD5  (config.h.in)  = 

Ca8307a6b353c57471386a4a0a606e85 
MD5  ( c on f i g _ w i n32 . h ) = 

a15a48d9a0cd9169dbb4592c2717b3ba 
MD5  ( conf i gu re  . i n ) = 

723fc029df80bdac46e2b5278a1a7302 
MD5  ( ma  ke f i L e . ms  c ) = 

b761a73aefb26d588b921ac0f61dc6b1 
MD5  ( c on f i g / c on f i g . g u e s s ) = 

805f7716d506388d8d7d0982ab9365b9 
MD5  ( c o n f i g / c 0 n f i g . s u b ) = 

73f3f01efa8befcd5a511dca3e8bac60 
MD5  ( c on f i g / i n s t a L L - s h ) = 

[CCHK:598de53921586c482961a399e2c80029e0a5a623efd5fc9a38475d3f018b5e82f]] 
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7eb52b130235a5f8bd9949632a62ae3c 
MD5  ( conf i g / pos t . i n ) = 

0a02dfe3d463830a09f58c9f27d8aa43 
MD5  ( c on f i g / p r e . i n ) = 

89e8641d7f5fffcab3857683354dd428 
MD5  ( a pp s / commo n / Ma ke f i L e . 1 n ) = 

d5d7a59ca10a139c5c892c4b8a2ddc06 
MD5  ( a pp s / c ommon / ma ke f 1 L e . ms c ) = 

3a8b82fb46dd3ef585b5d9cc558dcdb8 
HD5  C a pp s / c ommon / pg p A p p F i L e . c ) = 

f2b15ee0a33a4db75f1783346cc32911 
MD5  ( a p p s / commo n / pg p App F i L e . h } = 

61eaaa6609ac57655c23391a2fc480eb 
HD5  ( a pp s / c ommon / pg p E X i t . c } = 

1cc07f2111f67614182c69172cf3917f 
MD5  ( a pp s / c ommon / pg p Ex i t . h ) = 

237ace0607530e308787fdb80213ca9f 
MD5  ( a pps / common /pgpl n i t App  . c ) = 

652df8cc7b7b18e743fa154019f2c807 
HD5  ( a p p s / commo n / pg p 1 n i t App . h ) = 

f5a0b5074b27a2e6c34bdac0f3c1de74 
HD5  ( a pps / common / pg pKeyR i ng s . c ) = 

382d13a3d5eb01ad508a7c80f16588b0 
MD5  ( a pp s / c ommon / pg p Key R 1 ng s . h ) = 

76b35544b3fb5dc984487bd9037989bf 
MD5  ( a pp s / common / pg pO p t . c } = 

39241  d356230461  2cbce15a91  94078a0 
HD5  ( a pp s / commo n / pg pOp t . h ) = 

eff67799004e57b0ea21aa798fa4d5bb 
HD5  ( a pp s /Ha  kef  1 L e . i n ) = 

1d6e4c868e648c8bfa4b690daa3a4f7b 
MD5  Capps/ ma kef iLe.msc)  = 

66e5fb773e6ee92a11494e1dfc06c2a2 
MD5  ( a pp s / pg p / Ha ke f i L e . i n ) = 

e4654296f4b5f 8c1 8567a37a41 f 37360 
HD5  ( apps /pgp / pa rs ea rg . c ) = 

40dc8f77c2ffbeabfd5a70938a48bd85 
HD5  ( a pps / pg p / pa r s ea rg . h } = 

777da1 dbd57037ce508b8e37cdf 502c9 
HD5  ( a pps /pgp/pa s s . h ) = 

78c5c5c46f C0876aeb42ca3b496b67cf 
HD5  ( a pp s / pg p / pg p . c } = 

1 e74892  65c89bbedf 07bf f e049f ae75  3 
HD5  ( a pps /pgpk/Ha kef i L e . i n ) = 

2c87b32d7424659df be4b808b1 f bf d34 
HD5  ( a pp s / pg p k / key s e r ve r . c ) = 

01620a89823afa2bc3c3af7806e98d4f 
HD5  C a pp s / pg p k/ key s e r V e r . h ) = 

84659b8642b467f 99c945d33b6e70ae7 
HD5  (apps/pgpk/pass  . h } = 

7d5542f 3aeee3b4351 3b9f bb3bd3c730 
HD5  (apps/pgpk/pgpk . c } = 

Cfba80d0eabb7f9e8718b4788b0b7076 
HD5  ( a pp s / pg p k / pg p kE X 1 t . c ) = 

a6a4c35b47a6469dedadada26c1c638f 
HD5  ( a pp s / pg p k / pg p k E X 1 t . h ) = 

317f365dbd6f8e923a7f3adad81a1597 
HD5  ( a pp s / pg p k / pg p k I n 1 t . c ) = 

i:CCHK:e9ee80a6832343df6a63fbecfa08c2ecc3c5a408927fae7e432fb93d3176aa6fd]: 
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1ffb1a58f3b8a2dc51e4323dcb9f2df1 
MD5  ( a pps / pgp k/ pg p kl n i t . h ) = 

5df584b454746e3a063f481b32b4ec8e 
MD5  ( a pp s / pg p k / pg p kKey G e n . c ) = 

ef68de989a6250b2bb513668a4fe8edd 
MD5  ( a pps / pg p k /pg p kKey Gen  . h ) = 

b4086ccfca65ce63e4ec847ff93cda0e 
MD5  ( a p p s / pg p k / pg p k U I . c ) = 

5f4eead2f5fdee74ce80a817e33b3998 
MD5  ( a pp s / pgp k/ pg p kU I . h ) = 

ba870890c355ce956d5b1aadb866e093 
MD5  ( a pp s / pg p k / u r L . c ) = 

3a17f08264d64a80145a28dde592c10b 
MD5  ( a p p s / pg p k / u r L . h ) = 

00f5e3bcac55d5ee171208d4c0c9c00d 
MD5  ( a p p s / pg p k . o L d / Ma ke f i L e . i n ) = 

43e544c85511790e208e3e83c49d0161 
HD5  ( a p p s / pg p k . o L d / ma ke f i I e . ms c ) = 

4c6b1 1 cc781 5e25dc33a853fb8cfaade 
HD5  ( a pp s /pgp k . o L d / pgp k . c ) = 

9e3ca5eefebceb27c65e36955fb44df6 
MD5  ( ma n / Ma ke f i L e . i n ) = 

6814b0a74a5b91d9fa56707afbf7bcab 
MD5  (man/pgp.1)  = 

14010a4ddc68143883668c78c1caeb1e 
HD5  ( ma n / pg p . c f g . 5 ) = 

1bccded63227db9f2b59e1f6f907d647 
HD5  (man/pgpe.1)  = 

a5cfd5b47bcd6a949844bd08a8030614 
MD5  (man/pgpk.l)  = 

4797f8581e4047d7e1d96533b54e7f72 
HD5  (man/pgps.l)  = 

d4461f1b780c3d7c5db8726c7201c17b 
HD5  (man/pgpv.1)  = 

b27af677d86eff75df35ecf43c09e105 
HD5  ( b i na r i es  . uue  ) = 

8dff7f9eedce098963de0d5ee765fa0c 

BEGIN  PGP  SIGNATURE 

Version:  PGP  for  Personal  Privacy  5.0 
Charset : noconv 

iQA/AwUBM6IxRxe2aTaFJUGbE9KykwCgrxMUZgFw+SxCA5W03teKi3JIgOYAn3JB 
t1vA6Ur5TV+2QbyS8Lcfx737 
= r YZ2 

END  PGP  SIGNATURE 


CCCHK:4a156c365ef67df10ca366b6ba8ec36ed17255e0bb75699c7996i:: 
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The  source  code  and  other  tools  contained  in  this  five-volume  set.  Pretty  Good  Privacy  5.0^^  — Platform 
Independent  Source  Code,  are  needed  to  build  PGP  for  Personal  Privacy,  Version  5.0  on  all  platforms.  In  order  to 
build  a release  quality  PGP  5.0  for  MacOS  or  32-bit  Windows,  you  will  need  the  Macintosh-  or  Windows-specific 
source  code  set  in  addition  to  this  one.  Also  included  in  this  set  is  the  source  code  needed  to  build  an  alpha  quality 
Unix  version  of  PGP  5.0  for  most  Unix  platforms. 


About  These  Books 

These  books  contain  the  source  code  and  other  tools  that  make  up  a software  package  called  Pretty  Good  Privacy,  or  PGP  for 
Personal  Privacy,  Version  5.0.  PGP  is  a high  security  cryptographic  software  application  for  Unix,  Windows  and  Macintosh 
platforms.  Since  its  initial  release  by  Philip  Zimmermann  as  freeware  in  1 991 , PGP  has  become  the  worldwide  defacto 
standard  for  email  encryption.  PGP  is  based  on  public  key  cryptography,  and  allows  people  to  exchange  files  or  messages 
with  privacy,  authentication,  and  convenience. 

Cryptography  software  involves  trust — trust  in  the  algorithms,  trust  in  the  protocols,  trust  in  the  way  that  keys  are  managed, 
trust  in  the  integrity  of  the  implementor.  Somehow,  PGP  has  become  widely  trusted  by  PGP  users.  Part  of  the  reason  is  that 
Phil,  right  from  the  beginning,  published  the  source  code  to  PGP  so  that  people  can  inspect  it  for  "back  doors",  themselves. 
The  books  you  hold  in  your  hand  extend  that  tradition  of  source  code  publication  for  peer  review.  We  hope  they  will  extend 
and  expand  the  trust  of  PGP  by  the  user  and  developer  communities. 

Because  these  books  went  to  print  a short  time  before  the  official  release  date  of  PGP  5.0,  there  may  be  some  minor  bug 
fixes  and  changes  between  the  code  in  these  books  and  PGP,  Inc.'s  official  release.  Documentation  for  these  changes  will 
be  made  available  soon. 

In  order  to  provide  a way  to  check  on  the  accuracy  of  the  code  printed  in  these  books,  each  page  contains  a line  of  checksum 
information  at  the  bottom.  These  checksums  can  be  used  to  verify  file  integrity  and  quickly  find  which  line  was  scanned 
incorrectly.  In  addition,  we  have  done  a simple  character  substitution  to  eliminate  confusion  between  the  tab  characters  and 
multiple  spaces.  The  first  space  of  each  expanded  tab  is  converted  to:  "n" 

A perl  script  ("unmunge")  is  included  in  Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  which  translates 
(reconstructs)  the  printed  form  of  each  file  into  the  original  source  code  file.  It  also  detects  errors  using  the  imbedded 
checksums,  and  can  usually  tell  you  exactly  which  line  the  error  is  on. 

Finally,  each  of  the  three  sets  of  volumes  has  its  own  file  consisting  of  SHA  hashes  for  each  reconstructed  source  code  file. 
We've  also  included  a file  of  MD5  hashes  for  each  set,  because  of  the  easy  availability  of  MD5  checking  software.  The 
files  of  assembled  hashes  have  been  digitally  signed  with  a PGP  corporate  key,  ultimately  ensuring  the  authenticity  of  the 
contents  of  each  set. 
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Dear  PGP  User: 

Well,  finally.  After  more  than  three  years,  we  finally  have  the  long-awaited  PGP  Version  5.0  ready  for 
release  (formerly  known  as  Version  3.0).  You  hold  in  your  hand  one  of  1 2 volumes  (over  6000  pages!) 
of  the  printed  copy  of  the  complete  source  code  to  PGP  for  Personal  Privacy,  Version  5.0.  In  keeping 
with  my  own  long-standing  tradition  from  the  days  before  I started  this  company,  our  source  code  is 
being  openly  published  to  facilitate  peer  review.  This  allows  everyone  to  assure  themselves  that  there 
are  no  hidden  back  doors  that  might  compromise  security. 

We  are  pleased  to  be  able  to  publish  these  books  without  having  to  fight  an  extensive  legal  battle.  As 
you  may  know,  while  a printed  book  or  other  printed  material  setting  forth  encryption  source  code  is  not 
itself  subject  to  U.S.  Export  Administration  Regulations,  (see  EAR  §734. 3(b)(2)),  the  U.S.  government 
says  it  is  considering  whether  and  to  what  extent  scannable  encryption  source  or  object  code  in  printed 
form  should  be  subject  to  the  regulations.  We  think  this  is  rather  remarkable  in  light  of  the  ruling  by  U.S. 
District  Court  Judge  Marilyn  Hall  Patel  who  said,  "Source  code... is  speech  afforded  the  full  protection 
of  the  First  Amendment."  Bernstein  v.  United  States  Dept,  of  State,  922  F.  Supp.  1426,  1428-30 
(N.D.Cal.  1 996).  In  any  event,  according  to  both  the  export  regulations  and  the  court,  the  publication 
of  this  book  is  perfectly  legal. 

It's  taken  longer  than  expected  to  produce  this  code  and  these  books,  for  a variety  of  reasons,  not  the 
least  of  which  was  the  three-year  criminal  investigation  I was  under  from  the  US  government.  That 
really  slowed  things  down.  It  cut  off  nearly  all  access  to  my  volunteer  labor  force  that  had  been  so 
instrumental  in  the  development  of  PGP  versions  2.0  and  above.  For  those  of  you  unfamiliar  with 
the  case,  the  US  government  was  taking  the  position  that  encryption  software  should  not  be  exported 
without  a license  from  the  State  Department.  Since  PGP  was  published  for  free  on  the  Internet  in  1 991 
and  subsequently  spread  all  around  the  world,  the  government  assumed  that  the  law  must  have  been 
broken.  That  triggered  the  creation  of  a mostly  pro-bono  legal  defense  team,  a legal  defense  fund,  and 
three  years  of  almost  daily  press  interviews.  The  press  was  overwhelmingly  against  prosecuting  and 
the  cryptographic  policy  issue  was  drawing  the  wrath  of  the  whole  computer  industry. 

However,  the  investigation  was  closed  without  indictments  in  January  1 996.  Shortly  after  that,  I started 
my  own  company,  PGP,  Incorporated.  We  hired  a team  of  full-time  engineers  to  develop  products  like 
this  new  product,  PGP  for  Personal  Privacy,  Version  5.0. 

This  new  version  has  a lot  of  cool  new  features.  The  older  version  of  PGP  (Version  2.6.2,  released 
through  MIT)  was  only  for  MS-DOS  and  Unix^'^.  This  new  version  was  designed  from  scratch  to  provide 
a graphical  user  interface  (GUI)  environment.  These  volumes  contain  source  code  and  tools  that  can 
be  used  to  build  versions  that  run  under  Windows  95  and  Windows  NT,  as  well  as  a version  for  the 
Apple  Macintosh.  We  also  have  a non-GUI  version  for  Unix,  starting  with  the  Linux  platform.  The  GUI 
really  makes  using  the  product  a breeze,  with  seamless  integration  into  email  packages,  starting  with 
Qualcomm's  popular  Eudora,  Microsoft's  Exchange,  and  Microsoft  Outlook.  Now  using  PGP  to  encrypt 
or  decrypt  your  email  is  just  a couple  of  mouse  clicks  away. 

The  new  code  also  adds  some  new  encryption  algorithms.  Probably  the  most  exciting  is  the  introduction 
of  new  public  key  algorithms  that  will  serve  as  an  alternative  to  the  RSA  algorithm.  The  Diffie-Hellman 
and  Hellman-Merkle  patents  expire  this  year,  opening  the  door  to  royalty-free  use  of  public  key 
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algorithms.  Everyone  will  benefit  from  this,  because  the  whole  computer  industry  has  been  forced  to 
work  with  a public  key  patent  monopoly  that  stifled  the  use  of  public  key  algorithms  for  many  years. 
Now  the  field  is  opening  up.  PGP  offers  Diffie-Hellman  (the  ElGamal  variant  of  Diffie-Hellman)  keys, 
and  the  NIST  Digital  Signature  Standard  (DSS)  keys.  With  these  new  keys  comes  a range  of  new 
features,  including  improved  speed  and  security.  Also,  there  are  now  two  separate  key  pairs  for  each 
user,  one  pair  for  encrypting/decrypting  (Diffie-Hellman),  and  one  pair  for  signing/verifying  (DSS). 
Today  these  are  presented  to  the  user  as  if  they  were  a single  key  pair.  In  later  releases  we  will  give 
the  user  the  capability  to  change  his  DH  key  without  changing  his  DSS  key.  To  get  the  full  range  of 
benefits,  it  would  be  helpful  if  as  much  of  the  PGP  community  as  possible  participates  in  this  migration 
to  the  new  public  key  algorithms. 

Our  new  code  also  implements  new  block  ciphers  for  bulk  encryption,  offering  triple-DES  and  CAST 
as  options,  as  well  as  continuing  to  support  the  IDEA  cipher  from  earlier  versions  of  PGP.  We  also  offer 
a new  signature  hash  algorithm,  SHA-1,  for  computing  digital  signatures.  The  old  hash  algorithm, 
MD5,  developed  by  RSA  Data  Security  Inc,  has  been  discovered  to  have  serious  weaknesses  and  is  no 
longer  recommended  to  make  digital  signatures.  To  use  the  new  SHA  hash  algorithm,  users  will  have 
to  use  DSS  as  their  signature  algorithm,  because  PGP's  RSA  signatures  continue  to  use  the  MD5  hash 
for  backward-compatibility  reasons. 

A particularly  exciting  new  feature  is  the  integration  with  public  key  servers.  Now  PGP  will  look  up 
public  keys  on  a remote  key  server  on  the  Internet,  such  as  the  one  at  MIT.  When  you  generate  a new 
public  key,  PGP  will  offer  to  upload  it  to  the  remote  key  server.  Anyone  will  be  able  to  get  anyone 
else's  public  key  whenever  they  need  it.  This  will  tie  all  PGP  users  everywhere  together  into  a global 
community,  with  a nationwide  public  key  infrastructure  that  no  other  encryption  product  can  offer.  This 
infrastructure  will  grow  organically,  like  the  Internet  did. 

I hope  that  you  will  agree  that  this  new  release  of  PGP  was  worth  the  wait. 

Sincerely, 

Philip  Zimmermann 

Chief  Technology  Officer,  Pretty  Good  Privacy,  Inc. 
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ASCII  character  set 


|0|1  |2|3|4|5|6|7|8|9|A|B|C|D|E|  F| 

2|  |!|"l#|5|%l&l'|(|)|*l+l,|-|-|/| 
3|0|1 |2|3|4|5|6|7|8|9| : |;|<|=|>|?| 
4|a|A|B|C|D|E|F|G|H|I|J|K|L|M|N|0| 
5|P|Q|R|S|T|U|V|W|X|Y|Z|C|\|:|^|_| 
6|'|a|b|c|d|e|f|g|h|i|j|k|l|m|n|o| 
7|p|q|r|s|t|u|v|w|x|y|2|{|||>|"|  | 

“ + - + + - + - + - + - + - + - + - + + - + - + - + - + - + 
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#!/usr/bin/perl 

n 

It  unmunge 
# 

# Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 


Sdocksum  = "docksum"; 

$f  i Le  = $ARGVi;0]; 

$0UtFiLe  = SARGVCID; 

StabChar  = "\244";  H Character  vaLue  for  printabLe  tab  character 

$tabWidth  = i n t ( $ A RG V C 2 D ) ; 
if  (StabWidth  <=  0) 

{ 

StabWidth  = 4; 

> 


SquotedOutFiLe  = SoutFiLe; 

$q u o t e do u t F i L e =~  s/'/\\'/g; 
SquotedOutFiLe  ="  s/\\/\\\\/g; 


S n umB L a n k L i ne s = 0; 
open  (SCANNED,  "<SfiLe")  ||  die; 
open  (OUT,  ">SoutFiLe")  ||  die; 
whiLe  (<SCANNED>) 

{ 

s/\s+S//;  # Strip  traiLing  whitespace 

if  (/''S/) 

{ 

SnumBLankLines++; 

} 

eLsif  (/*\s*\[;\:CHK:(C0-9a-f:  + )\:\:S/) 

{ 

if  ( SnumB L a n kLi nes  < 1) 

{ 

print  STDERR  "WARNING:  Checksum  Line  found  without  ", 
"proceeding  bLank  Line"; 

> 

e L s e 
{ 

SnumBLankLines--; 

} 

} 

e L s e 

whiLe  (SnumBLankLines  > 0) 

{ 

print  OUT  "\n"; 

SnumBLankLines--; 

> 

s/StabChar(  *)/"\t".("  " x (Length(SI)  - StabWidth  + Length(S') 

% StabWi dth+1) ) /eg; 

print  OUT  "S_\n"; 

} 

> 

cLose  (SCANNED)  ||  die; 
cLose  (OUT)  ||  die; 
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open  (DOCKSUH,  "Sdocksum  -58  'SquotedOutFiLe'  |")  ||  die; 

<D0CKSUM>; 

open  (SCANNED,  "<$fiLe")  ||  die; 

$page  = 0; 
while  (<SCANNED>) 

{ 

s/\s  + $/  /;  ft  Strip  trailing  whitespace 
if  (/*\s*\:\CCHK:([0-9a-fD+)\]\:$/) 

{ 

$page++; 

Sactual  = $1; 

ScksumLine  = <D0CKSUM>; 

die  unless  (ScksumLine  =~  / '' ( C 0-9a  - f 3 + ) \ s + Pa  g e \ s + ( \ d + ) \ s *$  / 
and  $2  ==  Spage); 

Sexpected  = $1 ; 
if  (Sactual  ne  Sexpected) 

( 

print  STDERR  " Actual:  SactualXnExpected:  SexpectedXn"; 

Sline  = 1; 

while  ((Sactual  !~  /''S/)  SS  (Sexpected  !~  /^S/)) 

{ 

Sactual  =~  /''(.)/; 

Sa  = SI; 

Sexpected  =~  /*(.)/; 

Se  = SI ; 

last  unless  (Sa  eq  Se); 

Sactual  =■  s/''(.)//; 

Sexpected  =“  s/*(.)//; 

S I i ne++; 

} 

print  STDERR  "ERROR:  Sfile  on  or  before  page  Spage  line  SlineXn"; 
exit(1); 

> 

} 

} 

if  (Spage  ==  0) 

{ 

print  STDERR  "ERROR:  No  checksum  information  found  in  SfileXn"; 
exit(1 ); 

} 

elsif  (<D0CKSUM>  !"  /*S/) 

{ 

print  STDERR  "ERROR:  Sfile  missing  checksums  after  page  SpageXn"; 
exit(1); 

} 

close  (SCANNED ) | 1 die; 

close  (DOCKSUM); 

ex i t ( 0 ) ; 


CCCHK:ee43f17664d8a0aa02ddc226b45e570bcf053e915b827325cae6b34903] 


xx 


Pretty  Good  Privacy  5.0^"  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


/* 

* 

* 

* 

* 

*/ 


docksum  - The  program  used  to  generate  the  checksums  found  at  the 
bottom  of  each  page  in  the  source  code  books. 

Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 


#incLude  <stdio.h> 

#incLude  <stdLib.h> 

typedef  unsigned  Long  word32; 

static  word32  crctabLeC256D  = {0,>; 

#define  POLY  0xedb88320  /*  Standard  CRC-32  poLynomiaL  */ 

static  void 
crctabLe_init(void) 

{ 

uord32  crc  = 1; 
int  i = 128,  j; 

do  { 

crc  = (crc  >>  1)  ''  ((crc  8 1)?  POLY  : 0); 
for  (j  = 0;  j < 256;  j +=  2*i  ) 

c r c t a b L e C i + j D = crctabLeCj]  ''  crc; 
> white  (i  >>=  1 ) ; 

} 

struct  { 

char  curstate; 

char  hashfLag;  /*  0,  1 or  char  to  hash  */ 
char  nextstate; 
char  const  *chars; 

> const  ptabLeC]  = { 

/*  State  0:  normaL  processing  */ 


{ 

0, 

1, 

0, 

NULL  >, 

/* 

DefauLt  */ 

{ 

0, 

1 t 

1, 

" \t\v\n\r\f" 

>, 

/* 

Compress  ws  to  one  bLank  */ 

{ 

0, 

2, 

"/"  }, 

/* 

PossibLe  comment  Leader  */ 

{ 

0, 

1, 

8, 

/* 

String  start  */ 

{ 

0, 

1, 

10, 

>, 

/* 

Char  constant  start  */ 

/* 

state 

1 : 

whitespace  */ 

{ 

1, 

1, 

0, 

NULL  >, 

i 

0r 

1, 

" \t\v\n\r\f" 

>, 

{ 

2, 

"/"  }, 

{ 

1, 

8, 

>, 

{ 

1, 

10, 

>, 

/* 

State 

2 : 

Seen  first  sLash  of 

a 

possibLe  comment  */ 

{ 

2, 

1, 

0, 

NULL  >, 

{ 

2, 

t 1 

/ 

1, 

" \t\v\n\r\f" 

>, 

/* 

Compress  ws  to  one  bLank  */ 

{ 

2, 

1, 

3, 

"/"  >, 

/* 

End-of-Line  comment  */ 

( 

2, 

1, 

5, 

>, 

/* 

Go  to  in-comment  */ 

/* 

State 

3: 

end-of-Line  comment 

*/ 

{ 

3, 

1, 

3, 

NULL  }, 

{ 

4, 

1 1 

/ 

4, 

" \t\v\r\f"  }, 

/* 

Compress  to  one  bLank  */ 

{ 

3, 

1 1 

/ 

1, 

"\n"  }, 

/* 

End  of  Line  */ 

/* 

State 

4 : 

end-of-Line  comment 

bLank  compression  */ 

{ 

4, 

1, 

3, 

NULL  }, 

{ 

4, 

0, 

4, 

" \t\v\r\f"  ), 
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<■ 

1 1 

, 1, 

"\n"  }, 

/ * state 

5 : 

in  comment  (ignore  string  boundaries)  */ 

{ 5, 

1, 

5, 

NULL  >, 

{ 5, 

1 1 

, 6, 

" \t\v\n\r\f"  }, 

/*  Compress 

to  one  blank 

*/ 

{ 5, 

1, 

7, 

'■*"  >, 

/*  Possible 

end  of  comment 

/ * State 

6 : 

in  comment  blank 

compression  */ 

{ 6, 

1, 

5, 

NULL  >, 

<■  6, 

0, 

6, 

" \t\v\n\r\f"  >, 

{ 6, 

U 

7, 

/*  State 

7 : 

possible  end  of  comment  */ 

{ 7, 

1, 

5, 

NULL  >, 

{ 7, 

1 1 

, 6, 

" \t\v\n\r\f"  }, 

/*  Compress 

to  one  blank 

*/ 

{ 7, 

1, 

0, 

"/"  >, 

/*  End  of  comment  */ 

/*  State 

8: 

in  string  (don't 

comp  re  s s blanks 

in  strings) 

*/ 

{ 8, 

1, 

8, 

NULL  >, 

{ 8, 

0, 

>, 

/*  End  of  string  * / 

V 

00 

1, 

9, 

"W"  >, 

/ * Deal  with 

backslashes 

*/ 

/ * state 

9 : 

in  string  after  backslash  */ 

< 9, 

1, 

8, 

NULL  >, 

/*  State 

10: 

in  char  constant 

(don't  compress  blanks)  */ 

(10, 

1, 

10, 

NULL  >, 

(10, 

1, 

0, 

>, 

/*  End  of  constant  */ 

(10, 

1, 

11, 

"W"  >, 

/*  Deal  with 

backslashes 

*/ 

/ * State 

1 1 : 

in  char  constant 

after  backslash  */ 

(11, 

1, 

10, 

NULL  >, 

>; 

^define  NR_STATES  12 

Sdefine  e L ems o f ( a r r a y ) ( s i z e of ( a r r a y ) / s i z eo f ( * ( a r r a y ) ) ) 

/* 

* The  format  of  a stateTabLe  entry  has  (starting  from  the  L e a s t - s i g n i f i ca n t 

* byte),  8 bits  of  character  to  hash,  1 bit  of  flag  whether  to  hash  at  all, 

* and  then  the  next  state  to  transition  to.  this  is  fully  expanded  for 

* rapid  access. 

*/ 

#define  P A R S E_ H A S H F L AG  256 
^define  P A R S E_N EXT S H I FT  9 

static  unsigned  short  s t a t eTa b I e C N R_S T AT E S D C 2 5 6 D ; 
static  void 

s t a t eTab I e_i n i t En t ry ( c ha r c,  int  curstate,  char  hashflag,  int  nextstate) 

{ 

int  parse  = hashflag  & 255; 

if  (parse)  { 

if  (parse  ==  1) 

parse  = c S 255; 
parse  +=  P A R S E_ H A S H F L AG ; 

} 

stateTableCcurstate3Cc  & 2553  = parse  + (nextstate  <<  PARSE_NEXTSHIFT); 

> 

static  void 
stateTable_init(void) 

{ 

int  i , j; 
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char  const  *p; 


for  (i  = 0;  i < (int)eLemsof(ptabLe);  i++)  { 
p = p t a b L e C i D . c h a r s ; 
if  (p)  { 

while  (*p)  { 

stateTabLe_initEntry(*p++,  ptableCiD.curstate, 
ptableCiD.hashflag,  ptableCiD.nextstate); 

> 

> else  { 

for  (j  = 0;  j < 256;  j++)  f 

stateTabLe_initEntry(j,  ptabLeCiD.curstate, 

ptabLeCiD.hashfLag,  ptabLeCiD.nextstate); 


struct  Context  { 

word32  crc; 
int  state; 

unsigned  pos.  Line,  page; 
unsigned  Lpp,  Lpp2; 

#if  ONE_PER_LINE 

char  *ptr;  /*  Into  buf  */ 

char  bufC1024]; 

#endi f 

>; 


static  void 

pa r se I n i t ( s t ru c t Context  *ctx) 
{ 


ctx->crc  = 
ctx->state 
ctx->pos  = 
ctx->Lpp  = 
#if  ONE_PER_LINE 

ctx->ptr  = 

^endi f 


(word32)-1 ; 

= 0; 

ctx->Line  = ctx->page 
ctx->Lpp2  = 0; 

ctx->buf ; 


> 


0; 


/* 

* Now,  all  of  the  work  that  we  did  above  is  to  make  this,  the  main  Loop, 

* as  simple  as  possible. 

* 


* (For  the  interested,  if  we  had  more  states,  it  would  have  been  better 

* to  map  the  characters  into  classes  and  then  have  a NR_STATEX  x NR_CLASSES 

* array,  to  avoid  thrashing  the  cache.) 

*/ 


static  void 

pa rseBuf ( St ruct  Context  *ctx,  char  const  *line,  size_t  Len) 
{ 


int  state  = ctx -> state; 
word32  crc  = ctx->crc; 
size_t  Lflen  = Len  + ctx->pos; 
Xi-f  ONE_PER_LINE 

char  *p  = ctx->ptr; 

# e nd i f 
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int  c , parse; 


while  (len--)  { 

c = *line++  S 255; 


#if  ONE  PER  LINE 


# e n d i f 


kp++  = c; 


parse  = s t a t eTa b L e C s t a t e D C c 3 ; 
if  (parse  S P A R S E_ H A S H F L AG ) 

crc  = (crc  >>  8)  * c r c t a b L e C ( c r c ^ parse)  S 2553; 
state  = parse  >>  P AR S E_N E XTS H I FT ; 
if  ( c ==  ' \n  ' ) { 


#if  ONE  PER  LINE 


#if  0 


#endi  f 
#e  L se 


#end i f 


> 


Lflen  = Len; 

printf("/*%02x*/\t",  (unsigned)(crc  >>  24)); 
f w r i t e ( c t x->b u f , 1,  (size_t)(p  - ctx->buf),  stdout); 
p = ctx->buf; 

++ctx->Line; 

if  (ctx->Line  ==  ctx->Lpp)  { 

printf("/*%08Lx*/\f",  (unsigned  Long)crc); 
ctx->Line  = 0; 

> 


c = " 0 1 2 34 5 6789a b c de f " C c r c >>  283; 
putchar(c); 

if  (++ctx->Line  ==  ctx->Lpp)  { 
if  (ctx->Lpp2) 

ctx->Lpp  = ctx->Lpp2; 
ctx->Line  = 0; 
p r i n t f ( " %07  I X Page  %u\n", 

(unsigned  Long)crc  & 0xfffffff, 
++ctx->page ) ; 
ctx->crc  = (word32)-1; 

} 


} 


ctx->state  = state; 
ctx->crc  = crc; 
ctx->pos  = ( u n s i g n e d ) L f L e n ; 
#if  ONE_PER_LINE 

ctx->ptr  = p; 

#end i f 
} 


static  void 

pa r s e F i n i s h ( s t r u c t Context  *ctx) 
{ 

#if  ONE  PER  LINE 


if  (ctx->ptr  !=  ctx->buf)  t 

p r i n t f ( " / *%02x* / \ t " , ( u n s i g ne d ) ( c t x-> c r c >>  24)); 
f w r i t e ( c t x->b u f , 1,  ( s i z e_ t ) ( c t x->p t r - ctx->buf),  stdout); 

printf("/*%08Lx  NOTE:  Last  Line  missing  newline.  */\n", 
ctx->c  rc  ) ; 


} else  { 


printf("/*%08Lx*/\n",  ctx->crc) ; 
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#e  L s e 


> 

i nt  c; 


# e n d i f 
> 


i f 


> 


(ctx->pos  I I ctx->Line)  { 
if  ( ctx->pos ) { 

c = " 0 1 2 34 5 6789a b c d e f " C c t x-> c r c >>  28D; 
putchar(c); 

> 

printf("%07Lx  Page  %u\n",  (unsigned  Long)ctx->crc  S 0xfffffff, 
++ctx->page) ; 


i nt 

mainCint  argc,  char  **argv) 

{ 

FILE  *f; 

struct  Context  ctx; 
char  bufC10243; 
size_t  Len; 
unsigned  Lpp  = 0; 
unsigned  Lpp2  = 0; 
unsigned  Long  ul; 
char  *p ; 
char  c h ; 

if  (argc  < 2)  { 

fprintfCstderr,  "Usage:  %s  C-lines_per_pageD  fiLe.c  C...]\n", 
argvC0]); 
return  -1; 

> 


crctabLe_init(); 

stateTabLe_init(); 


while  ( — argc)  { 

ch  = ( * + + a r g V ) C 0 ] ; 

if  (ch  ==  II  ch  ==  '+' ) { 

uL  = strtouL(*argv+1,  &p,  0); 

if  ( ! *p  &&  p !=  *argv+1  &S  uL  ==  ( u n s i g n e d ) u L ) { 
if  (ch  ==  '+' ) 

Lpp2  = ( uns i gned  ) u L ; 

else 

Lpp  = (unsigned)uL; 
continue; 

> 

} 

f = fopen(*argv,  "r"); 
if  ( ! f ) { 


> 

#if  ONE  PER  LINE 


perror(*argv) ; 
return  1; 


# e L s e 


printf("===  %s  ===\n",  *argv); 


printf("%s:\n",  *argv); 
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# e nd i f 


parselnitC&ctx); 
ctx.Lpp  = Lpp; 
ctx.Lpp2  = Lpp2; 
for  (;;)  { 

Len  = freadCbuf,  1,  sizeof(buf),  f); 
if  ( ! L e n ) 

break; 

p a r s e B u f ( & c t X , buf,  Len); 

} 

parseFinish(8ctx); 


//if  ONE_PER_LINE 

printf("===  END  ===\n"); 


#end  i f 

> 


return  0; 
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BEGIN  PGP  SIGNED  MESSAGE 

Hash:  SHA1 


SH A ( L i b/Ha kef i L e . i n ) = 


5259be11  128d61d6 

S H A ( L i b /ma ke f i L e . ms c ) = 

28223394 

ef 1 8b525 

5044b39a 

065ace94  6f8a3573 

S H A ( M b / bn  / Ma  ke f i L e . i n ) = 

365ebf 08 

b87f f 894 

abd8faca 

41a51093  1815536c 

SHA(lib/bn/makefi Le.msc) 

59d257c1 

eb0dce8c 

c616ee86 

e769eddf  7efce765 

SHA(Lib/bn/bn.c)  = 

526c2bb7 

db598f 9b 

661 7f 88c 

68853201  1444a780 

S H A ( 1 1 b / bn / bn . h ) = 

91048833 

f ed00dec 

81 d1 a81 1 

3741fec2  e8b9625b 

S H A ( L i b / bn / bn00 . c ) = 

382ce6af 

0dcdb1 d7 

9b3eb367 

55d72c77  14fa400e 

S H A ( L i b / bn / bn  1 6 . c ) = 

9a250a8f 

0a58da23 

59c63edc 

678ea6e7  33280541 

SHA(Lib/bn/bn16.h)  = 

6b422780 

eaeaaead 

a9030203 

4c82c997  0742bd73 

S H A ( L i b / bn / bn68000 . c ) = 

bbf3007a 

7b3575f a 

f 681 561 8 

b1aeeb95  c530b372 

S H A C L i b / bn / bn8086 . c ) = 

de041 f c5 

91 2a4f 29 

b8d2ae02 

353fe226  9325ff53 

S H A ( L i b / bn  / bnd s a p r i me  . c ) 

4b363ca4 

4952cc6e 

c5ee0e4c 

6579e195  5a782a06 
S H A ( 1 i b / bn / bnd s a p r 1 me . h ) 

db31 0a56 

6f 72eadf 

0C01 3cf 7 

2aecb6b9  54848ad3 
S H A C L 1 b / bn / bng e rma i n . c ) = 

048672a3 

677e71 56 

ef 84e724 

ee7897ab  338eb40f 

S H A ( L i b / bn / bnge rma i n . h ) = 

750a4955 

274d24bc 

2a0be32a 

6b931d1a  531a36cc 

S H A ( L i b / bn / bn i . h ) = 

d6f 24cad 

68e90d40 

d97f 7f f d 

b59a46f3  68327710 

S H A ( L 1 b / bn / bn  1 00 . c ) = 

4deb9fbc 

8df dda59 

41 55ba9e 

22bfaa43  cf74da6f 

S H A ( L i b / bn / bn i 1 6 . c ) = 

bc0a6ac9 

979868b4 

6f b4f 76c 

45c9a1f7  ea97883e 

S H A ( L i b / bn / bn i 1 6 . h ) = 

b03e26f 1 

2b2d5e7b 

52c48bd7 

baade571  55b3c2ba 

SHACLib/bn/bni68000.c)  = 

75228280 

aa8ee4c2 

61 eee845 

a7eb496b  720f9a53 

SHA(Lib/bn/bni68000.h)  = 

3920d858 

731 c210e 

6b9b32b0 

f3a6d736  18ef36a8 

SHA( L i b/bn/bni 68020  . c ) = 

eaa93442 

38354a9b 

8740af 60 

27ea20c2  84f3fae1 

S H A ( L i b / bn / bn  1 680 2 0 . h ) = 

b9d068e2 

faf2aa0e 

eb94709d 

2b3b3883  85fc2814 

S H A ( L t b / b n / b n i 8 0 3 8 6 . a s m ) 

652b3ef 7 

f b603f f 5 

cd2d89b0 

d1e50107  ef3e0706 

S H A ( L i b / bn / bn i 80386 . h ) = 

ce279b42 

eb2de185 

23321363 

92b5956a  1226da35 

S H A ( L i b / bn / bn i 803 86 . s ) = 

b804302c 

84d814b2 

8e3bf 7af 

eef21ec4  34eca5c3 

S H A ( 1 i b / bn / bn i 803 8 6 c . c ) = 

b85206c1 

5af 30c70 

44b3ce99 

5cf04a75  afa9770e 

S H A ( L i b / bn / bn i 80 38 6 c . h ) = 

18c7cbcf 

34a1 0365 

15619544 
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SHA(  I i 
SHA( L i 
SHA( L i 
SHAC  Li 

SHA( Li 

SHAC  L i 
SHAC  L i 
SHAC  L i 
SHAC  L i 
SHAC  L i 

SHAC  Li 
SHAC  Li 

SHAC  Li 

SHAC  L i 
SHAC  L i 
SHAC  Li 
SHAC  L i 

SHAC  L i 
SHAC  L i 

SHAC  L i 

SHAC  L i 
SHAC  Li 
SHAC  Li 
SHAC  Li 
SHAC  Li 
SHAC  Li 
SHAC  Li 

SHAC  L i 

SHAC  L i 

CCCHK: 


3315703e  a29d26fc 

ce51 4f d0 

1 b21 c557 

a cee687 f 

b/bn/bni 8086 . asm)  = 

93ac0fcd  6b086594 

afea8275 

e4d9c1 62 

89eabbf b 

b / bn / b n i 8 086  . h ) = 

e330e0d1  57d363fe 

1 el 6b596 

cadc2c1a 

32eec480 

b / bn / b n i 960 j X . s ) = 
46cd4262  d710392c 

f 571 f 775 

278cab79 

32bbc6dd 

b / b n / b n i a L p h a . h ) = 

f1468fb4  17131b4e 

63083452 

b67b536e 

53626038 

b / b n / b n i a L p h a . s ) = 

68f014b8  4db39c13 

9cdc2ddf 

f1 el  8939 

aa4bd41 3 

b/bn/bnimem.c)  = 

d3451083  8892591a 

a2ba0261 

81 261472 

f 3561 aad 

b/bn/bnimem.h)  = 

dccd8ef6  ee28a946 

c32a31 0f 

980368f d 

94cae794 

b/bn/bninit16.c)  = 

113d345f  ecdde38a 

dba9b49a 

8f 889d51 

9f 70b73a 

b/bn/bnippc.c)  = 

d5f8c7fc  35200568 

9c76d092 

261 755cc 

955843dd 

b/bn/bnippc.h)  = 

11cf9bf6  c5c48150 

f 6a8c9b8 

f 2742e46 

49a8e7b9 

b/bn/bn j acobi . c ) = 
2fd6c53b  a19b20dd 

cf 678350 

41 439e6c 

6b0907e4 

b / b n / bn j a c 0 b i . h ) = 

5d85fd04  203c8105 

5f 3af 822 

edc9db35 

95c40c0e 

b / bn  / bn  k L u dg  e . h ) = 
a775a093  020f1e27 

21 a4c68f 

33a68ad2 

afl 50889 

b/bn/bn  Lega  L . c ) = 
1033a994  0c03ffd1 

884ad454 

8a749a0c 

3dcef 9d3 

b/bn/bnLegaL.h)  = 

85362609  9c84f4c8 

458f 3d8b 

d4e4e8b7 

ee536e07 

b /bn / bnppca sm . h ) = 

5c29bfd8  9d43c55b 

44503d20 

e293e307 

2d957744 

b / bn / bn p r i me . c ) = 

192accbd  0b80c982 

e26b2bb1 

67878007 

e4c6a0a3 

b/bn/bnprime.h)  = 
0e9cd547  97fe2165 

4ce02c88 

6aba0a83 

dda02e7  f 

b/bn/bnprint.c)  = 

ae33b7e6  7d7da5cc 

e5361 80f 

430381 fc 

9132920c 

b / bn / bn p r i n t . h ) = 
0122a76d  3c4dc699 

3699c1 c8 

8706cf 98 

b6d0f 3c1 

b / bn / b n s i e ve . c ) = 

ca9fca17  87710678 

95aba171 

d2aba05e 

076a9b1 a 

b / bn / bn s i e V e . h ) = 

83cb0778  14ed397f 

9d95c1 9d 

3deebd6c 

381 6c1 ca 

b / bn / b n s i z 600 . h ) = 

d131b3ee  d0c3be23 

1 937f 7b5 

a8acd826 

48bb1 3aa 

b/bn/Lbn00.c)  = 

979019db  725f1daf 

f 8494582 

c6be0a3a 

45f 7d1 58 

b / pg  p / Ma  ke  f i L e . i n ) 
ad31ef4c  893fec24 

2d05d887 

20170325 

el  1 f 50f 6 

b/pgp/makefi Le.msc) 
614d09c1  653ca099 

4557c93a 

470fc4a9 

a42a0835 

b/pgp/ ci pher/Makefi 

86749214  20b61d09 

L e . i n ) = 

7071 3f 65 

81 c077e8 

785c7af 5 

b/ pgp/ ci pher/makefi 

b8b37b29  3b951dab 

Le.msc)  = 

004ca2f 8 

33af c8c7 

deb98eb2 

b / pg p / c i p h e r / pg  p C A S T 5 . c ) = 

Ce679f3f48e9f67a252d60f0d0886460a07bbf69d54a2d991c6c4eeda5eeb912c:: 
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70502df8  0a5031de  4256daf7 
S H A ( Li b/ pgp / c i phe r /pgpC AST5 . h ) = 

81305a46  097b4ff1  346deab8 
SHACLib/pgp/cipher/pgpCASTBox5.h) 
a6819cc8  f8a4c4ed  63102684 
S H A ( L i b/ pgp/ c i ph e r / pg pC FB . c ) = 

54ee9312  c4272d1f  fedbde15 
S H A ( L i b / pg p / c i p h e r / pg p C F B . h ) = 

b2c5db12  94136ecb  8d03ecae 
SHA(Lib/pgp/cipher/pgpCipher.c)  = 
4e00d6ed  4791382c  847ba7a9 
SFIA(Lib/pgp/cipher/pgpCipher.h)  = 
b442e685  fb52ad49  f7e09703 
S H A ( L i b / pg  p / c i p h e r / pg p D E S 3 . c ) = 

f18fdec4  c30a7518  4a5ba5fa 
S H A ( L i b / pg p / c i p h e r / pg  p D E S 3 . h ) = 

694a41e4  e146155d  546c1293 
SHA(Lib/pgp/cipher/pgpDES3_68K.c)  = 
50928621  f4b7b10e  b6690186 
S H A ( L i b / pg p / c i p h e r / pg p I D E A . c ) = 

6410c1cb  e68b17ed  c1a44ac1 
S H A ( L i b / pg p / c i p h e r / pg  p I D E A . h ) = 

ca68907a  bd8768b6  a9d49dc2 
SHA(  lib/pgp/ compress/Hakefi  Le.  in)  = 
40e05e32  de93a509  72a75d6d 
SHA(Lib/pgp/compress/makefiLe.msc) 
e1a852d0  fb0d6ae7  73da1b40 
SHAC  Li b/pgp/compress/pgpCompress  . h) 
00b824b6  352a56a8  3c2fc5ad 
SHA(Lib/pgp/compress/pgpZlnfLate.c) 
bca20eaf  9b40ead8  f2e6a1eb 
SHA(Lib/pgp/compress/pgpZInfLate.h) 
88ea6770  f96824b7  98e1db51 
S H A ( L i b / pg p / h a s h / Ha ke f i L e . i n ) = 

dccf91cd  3337c836  e422e10a 
S H A ( L i b / pgp/ ha s h /ma kef i L e . ms c ) = 

162432a9  273dca70  0b947e43 
S H A ( L i b / pg p / ha  s h / pg p Ha  s h . c ) = 

7992c705  66675ec7  c0e787a5 
SH A ( L i b/pgp/ha s h /pgpHa s h . h ) = 

ef553e06  2bbc230e  eef1397b 
S H A ( L i b / pg p / ha s h / pg pH D 5 . c ) = 

f54a07f0  b09895d6  91fb0ac7 
S H A C L i b/ pgp/ha s h / pg pHD5 . h ) = 

a91d4f88  ff73b223  71d56ef3 
SHA(Lib/pgp/hash/pgpRlPEMD160.c)  = 
fb8ccb76  a61a3a05  c8f3ae74 
SHA(Lib/pgp/hash/pgpRIPEHD160.h)  = 
b7b0f043  e7a0c138  9701a832 
S H A ( L i b / pg p / ha  s h / pg p S H A . c ) = 

cf676854  b3ac9516  5c7ede17 
S H A ( L i b / pg p / ha s h / pg p S H A . h ) = 

7b60221e  1cbdb2d8  7c72d379 
SHA(Lib/pgp/heLper/Makefi Le.in)  = 
d6ec5a02  175aac4a  7933836f 
SHA(Lib/pgp/heLper/makefi Le.msc)  = 
a1699f1a  38da6239  8322acb4 
SHACLib/pgp/heLper/pgpAnnotate.c)  = 


492dc80e 

62609e96 

9c5e4550 

dd6c849f 

1 f 7f 7f 46 

2ad7f 93c 

def 61 d4d 

56a3bccb 

3547b743 

64dc73a6 

761 3b46f 

1 ef 9ad31 

38eaf 608 

52f d4c00 

6032a836 

c7a38366 

9bab3cdf 

2c5db442 

9f 792d69 

3e862ec4 

df 4a1 7b1 

f 041 25ae 

68169485 

64f 548d4 

2ef 45a99 

5c66f 350 

91 77eded 

224aead6 

8add5f f 8 

281 bf 498 

0d73ea  58 

35e33021 

a3ddc33b 

71 eeel 20 

38b86b9c 

d285c976 

d41 f Idcb 

063e0e07 

1 1 7aaec3 

374397d9 

87066609 

54844768 

0ba1e5bf 

3ed20924 

e92009c2 

223ba8f 3 

5f 3f ee9b 

f690eedb 

6dc357a5 

f 20b1 7a9 

91 1 0ab77 

31 9894c7 

bcd502ce 

a6c14c64 

004f 0C01 

4db6d2b7 

226ecee1 

6e272822 
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6a0876aa  021967bc  92893882  4f5d8ebc 
SHA(Lib/pgp/heLper/pgpByteFIFO.c)  = 

204eece4  1d09e2c5  d7f4133c  9dcc1911 
SHA(Lib/pgp/heLper/pgpByteFIFO.h)  = 

491ecafe  6861a6d4  316f1628  d55eaa27 
SHA( Li b/pgp/heLper/pgpCharMap. c)  = 

4e77daea  9cf9c458  02d74a5d  416615d9 
SHA(Lib/pgp/heLper/pgpCharMap.h)  = 

3ac5a058  a882c0c0  7e7097d9  8e456853 
S H A ( L i b / pgp / he L pe r / pgpDebug . c ) = 

99c759a9  ee880e7b  91bea828  0a4628c3 
S H A ( L i b / pg p / h e L pe  r / p g p D e bu g . h ) = 

664f8194  30342f75  e3383cff  09099aa6 
S FI  A ( L i b / pg  p / h e L pe  r / pg  p E r r . c ) = 

6174889c  d6b0dfb8  796083d2  7f243a29 
S FI  A ( L i b / pg  p / h e L pe  r / pg  p F I F 0 . c ) = 

16357f08  3b9074b9  61bb44bb  a68af4fa 
S FI  A ( L i b / pgp  / h e L pe  r / pg  p F I FO  . h ) = 

2C042665  d7408cdf  f4c89e44  d73bb38c 
S FI  A ( L i b / pg  p / h e L p e r / pg  p F i L e . c ) = 

3130a655  234a5007  af351e39  c1e7f66c 
S FI  A ( L i b / pg  p / h e L pe  r / pg  p F i L e . h ) = 

d26244b1  6be27f7f  c409c8bf  e6cc489c 
SFIA(Lib/pgp/heLper/pgpFi  LeFIFO.c)  = 

98f480a1  851030e7  873299b7  c0547e12 
SFIA(Lib/pgp/heLper/pgpFiLeNames.c)  = 

9cd3b72b  81bcd895  2a0fbab8  16c060d4 
SHA(Lib/pgp/heLper/pgpFi LeNames.h)  = 

0a0757fa  25215b80  c818045d  c0d79fcf 
SFIA(Lib/pgp/heLper/pgpFi  LeRef.c)  = 

72fc40d2  67f287df  210ae1b3  95aafbd8 
SFIAClib/pgp/heLper/pgpFi  LeRef.h)  = 

4f2fe780  84396552  b94e7699  b392a282 
SFIA(lib/pgp/heLper/pgpFLexFIFO.c)  = 

61f71904  976f8048  9b54e778  43ea704d 
SFIA(Lib/pgp/heLper/pgpGLobaLs.c)  = 

7fbcb140  29ca322f  711ffdd2  6c7adff7 
S H A ( L i b / pg p / h e L pe  r / pg  p Lea  k s . c ) = 

503efff8  3c7be113  0776b31 c 6d46dfc1 
S H A ( L i b / pgp / he L pe r / pg pLea ks . h ) = 

68e4c7ba  82fead7a  1abc5d30  a78d996a 
SFIA(Lib/pgp/heLper/pgpHacFi  Le.c)  = 

355af1d3  8af5f833  38b27d34  14f1cbb3 
SHACLib/pgp/heLper/pgpMacFi Le.h)  = 

5ac85206  888f5a2b  0397ecd6  c73161c1 
SHA(Lib/pgp/heLper/pgpMacUti Ls.c)  = 

206dba04  cf623c08  645f0f9b  17be84ec 
SFIAC  Li  b/pgp/heLper/pgpHacUti  Ls.h)  = 

62f80b4e  52775aa0  44a7cad6  04b11690 
S FI  A ( L i b / pg  p / h e L pe  r / pg  pMem  . c ) = 

32400f50  f82174ab  7ec68515  3ed3d20e 
S FI  A ( L i b / pg  p / h e L pe  r / pg  pMem  . h ) = 

ad73a435  50b8c3a4  5eaaec10  d21415b1 
SFIA(Lib/pgp/helper/pgpMemFi  Le.c)  = 

84b80a3b  76ed82f3  dcf1d4fe  f0c84702 


S H A ( L i b / pg p / h e L pe  r / pg pM s g . c ) = 

6eecb8e2  c0d5c769  575c6e42  d06dcd07 
SFIA(Lib/pgp/heLper/pgpPassCach.c)  = 


72ef 771 9 
e3ab2b1 0 
7babd332 
927505ce 
1 90a8386 
757dc27f 
0e358365 
6a98aabd 
8a1 d4a4f 

82cf 67d8 
9354be5a 
1 55982de 

c483f 8c8 

26a1 42aa 
def26035 
84009292 
b91 83e78 

548927c9 
66204f f 6 
d8794ecf 
c34b8461 
c92d8374 
c7b768e0 
f 1 b9e41 f 
04afae20 
8e97a7f 9 
4aacd661 
490e962f 
8e64f c9b 
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47d356cb  074f72ec  b804f6dd  ae129a45  18b62141 
SHA(lib/pgp/heLper/pgpPassCach.h)  = 

f5ac76c4  7acceee6  bd6474d7  0ace9ef0  ce8a82be 
SHA( Lib/pgp/heLper/pgpPipeFi le. c)  = 

faf4a504  725eae28  05f5c19b  096333b0  f9ce43db 
SHACLib/pgp/heLper/pgpStr2Key.c)  = 

af29aa43  c688433c  6518371e  bc3993ec  ce0a4b76 
SHA(Lib/pgp/heLper/pgpStr2Key.h)  = 

0a0eb139  37373512  357aa2d7  f32d7db5  e6923095 
SHA(Lib/pgp/heLper/pgpTimeDate.c)  = 

fdd132ad  c9bf88b7  e1b685ba  23bff597  faf284d7 
SHA(Lib/pgp/heLper/pgpTimeDate.h)  = 

1f58e10d  029a82cb  339ad24b  5ff1595f  ddb0eec8 
S H A ( L i b / pgp / h e L pe r / pg pTy pe s . h ) = 

3a7d0e35  8e7774ec  38f10961  5a31c85a  3e7def9a 
SHA(Lib/pgp/incLude/MakefiLe.in)  = 

ee467844  2da45ce8  c9e3fbb1  69eeea82  8935b3b7 
SHA( lib/pgp/incLude/makefi le.msc)  = 

f014f407  2a21032b  fef21d86  b3c49a2b  3f6fbd72 
SHA(Lib/pgp/incLude/pgpAnnotate.h)  = 

b40b0395  b085f83d  8fde3c7d  ea977bb7  3939a8f4 
SHA(Lib/pgp/incLude/pgpConvKey.h)  = 

bf559b58  e8da9fcc  50a6d0cb  59f6e914  82545961 
S H A C L i b / pg p / 1 n c L ud e / pg p E r r . h ) = 

e075bbac  b5ffa754  c7be4414  771254de  6b0439ab 
SHA(  L-ib/pgp/incLude/pgpKLudge.h)  = 

2d8e459b  7a31b062  8e473d0b  b615cc47  82dda252 
S H A ( L i b/ pgp/ i nc L ude /pgpMsg . h ) = 

35d83119  fe013795  e585c55a  26736300  c1166b36 
SHA(Lib/pgp/incLude/pgpPktByte.h)  = 

9fb1b684  e6d4fa8f  f80580f9  7963e51d  373cc6f6 
S H A ( I i b / pg p / i n c L ude / pg pU I . h ) = 

cda43cb0  dc62bf44  8f48a040  ed92253a  b54c85d0 
SHA(lib/pgp/incLude/pgpUsuaLs.h)  = 

673b343b  c4bb7976  2f69ef6e  33f314c8  aa08038c 
S H A ( L i b / pg p / key d b /Ha ke f 1 L e . 1 n ) = 

08ec0fb3  8a4e9dff  e4cf6914  a39d3e99  e5b1479a 
SHACLib/pgp/keydb/pgpDearmor.c)  = 

16eb4a8f  3a7f4fcf  d6e31573  54d96c07  2ed318ae 
S H A ( L i b / pg p / key db / pg p F i L e DB . c ) = 

029e10cb  c79f4086  351ad25c  9759f6fd  8d1a60be 
SHA(lib/pgp/keydb/pgpFiLteredSet.c)  = 

73384d21  6dea5b80  139b7e6f  c91666b0  49fd14d9 
S H A ( L i b / pg p / key d b / pg pKDB i n t . h ) = 

a3e74129  c6d3242b  11547be4  30d8a9f9  4fd9c59b 
SH A ( L i b/ pgp/ keydb / pgpKey DB . h ) = 

973ea6a1  0fc75942  275e050c  19151a8f  de2aa11e 
SHA(Lib/pgp/keydb/pgpKeyIter.c)  = 

ec4f3db4  78898457  45b99b00  2522b237  decc69fd 
SHA( I i b/pgp/keydb/pgpKeyLi b . c ) = 

5869ddbf  a88de989  90e56fd9  4f1cc998  fd67b527 
S HA ( L i b/ pgp/ keydb / pgpKeyHan . c ) = 

b389e5bc  d7a40baf  cf00b7a8  de95dae0  73dc26cb 
S H A ( L 1 b / pg p / key d b / pg pKey S e t . c ) = 

fb89e99b  bclealcb  676149ac  74e35446  ffd69de0 
S HA ( L i b / pgp/ keydb/ pg pKeyUpd . c ) = 

39dfed09  3c20a39d  35637361  d12e9acd  766d13b0 
S H A ( I i b / pg p / key d b / pg pMemDB . c ) = 
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77664C02  0be785b3  270aba00 

5205a6f 5 

6e0c461e 

SHACLib/pgp/keydb/pgpPrefMac.c)  = 
8894b913  19bcda76  ea250dde 

ce031be9 

5f 745a1 7 

SHA(Lib/pgp/keydb/pgpPrefUnix.c)  = 
e8da4238  b8f02744  d6392c0b 

CC694273 

1 c8639c9 

SHA(lib/pgp/keydb/pgpPrefUnix.h)  = 

10d707a7  b55bb3ae  15263c4b 

a9e9f d21 

65ab04c3 

SHA( Lib/pgp/keydb/pgpPrefWin32 . c) 
454a0001  9bb7e5be  0525ecf0 

edc506a7 

59e97931 

S H A ( L i b / pg p / key d b / pg p P r e f s . c ) = 

8bde5a27  5fab9e0e  9dc9ad74 

83b31 ca5 

959d67d8 

SHA(Lib/pgp/keydb/pgpPrefsInt.h)  = 

20c0f2a5  ad81a94c  ae3e2ce1 

ecc07585 

822f 4f 75 

SHA(Lib/pgp/keydb/pgpUnionDB.c)  = 

0b4b778d  8783f4cb  788c1a2d 

7b1 d6bca 

491 5222e 

S H A ( 1 i b / p g p / key s / Ma k e f i L e . i n ) = 

b4db5c3a  68f49156  6f2a0f02 

c0abf 921 

b5204080 

S H A ( L i b / pgp / key s /ma ke f i L e . ms c ) = 

6b375fe8  0bd5d402  b648b53c 

bc504830 

02e09337 

S H A ( L i b / pg  p / key  s / T e s t . c ) = 

57a1ce64  92bdb668  03312034 

0eb6a801 

52f 97cf f 

S H A ( L i b / pg p / key  s / T e s t G en  . c ) = 

b37e0e07  4443c696  853c82ac 

7d73c875 

d6f 9809d 

SH A ( L i b / pgp / key s / pgpHemPoo L . c ) = 

1740206d  9918af29  262dee49 

2aa288f 2 

7ad94999 

S H A ( L i b / pg p / key s / pg pM emPoo L . h ) = 

3284c6bf  cea62504  facc6f08 

03b1 b956 

1 1 4d51 d3 

S H A ( L i b / pg p / key s / pg p Rn g F i L e . c ) = 

2588b72b  e4f197bf  16db7de7 

dcf0164a 

3557272f 

S H A ( L i b / pg p / key s / pg p Rng Mn t . c ) = 

e25cbbb7  45249b5e  c9cd019b 

db23c60c 

e5a61 1 36 

S H A C L i b / pg p / key s / pg pR ng Mn t . h ) = 

4542d5ac  173b5a86  be3c8ffd 

dcdl f 522 

51  Oaf 27f 

SH A ( L i b / pgp/ key s / pgpRng Pa r s . c ) = 

35746907  6a5e9fd8  8ebc7207 

860d41 9f 

877de3cc 

S H A ( L i b / pg p / key s / pg p R ng Pa r s . h ) = 

4c20d4e6  bd700a9c  9d83d32f 

94c56f 01 

1420183c 

SH A ( L i b/pgp/ key s / pg pRngPkt  . c ) = 

252590af  17930b6c  2b976e65 

4f 3f edc8 

772e48bd 

S H A ( L i b / pgp / key s / pg pRngPkt . h ) = 

aeb37888  aec72c04  ff0866b8 

a c653d0f 

f348c8f 8 

S H A ( L i b / pg p / key s / pg p Rng P r i V . c ) = 

1d25e221  92bebcaf  82a8ca59 

35e1 341 6 

c3bb92f 5 

S H A ( L 1 b / pg p / key  s / pg  p Rng  P r i V . h ) = 

c60e8d83  9a3cbd27  be9eed0b 

28a400c7 

96f 2c53f 

SH A ( L i b / pgp/ key s / pgpRng Pub . c ) = 

f6d5d449  aa912d15  52ffa8af 

5eb88f ea 

21 81 f 0e3 

S HA ( 1 i b / pgp/ key s / pgpRng Pub . h ) = 

a54a4483  e3e7323d  b91ff641 

4b80a933 

4dc88cbe 

S H A ( L i b / pg p / key s / pg p Rng Re  a d . c ) = 

a7386e53  82394ae8  6f8a8dc7 

beb44224 

edb72cb5 

S H A ( 1 i b / pg p / key s / pg p R ng R e a d . h ) = 

319cae0a  4c6d8f2b  8059d054 

a94002be 

98249561 

S H A ( L i b / pg p / key s / pg p R ng V i e w . c ) = 

4556f449  4288e021  1d26a155 

2e3f 2043 

272c98b3 

S H A ( L 1 b / pg p / key s / pg pRng W r i t . c ) = 

da83e148  186179d6  595a57df 

f 5e20ef 8 

1 db4c988 

S H A ( I i b / pgp/ key s / pgpT r s t P k t . c ) = 
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9bc5c8dc  27b9e76c  291176bd  cb4fafa0  705b3d06 
S H A ( L i b / pg p / key  s / pg pT  r s t P k t . h ) = 

994dd4e1  6e419b34  646eb335  5bd409ba  3d6265ff 
S H A ( L 1 b / pg p / key s / pg pT r u s t . c ) = 

26e56f04  2786f034  e23ddc2e  7feb8227  53f67f88 
S H A ( L i b / pg p / key s / pg pT r u s t . h ) = 

e3f05a22  9de410d5  478c4cf2  e9b13817  f5a6ef10 
S H A C L i b / pg p / p i p e / Ma  ke f i L e . 1 n ) = 

900ee8a2  60acc45b  83fe72ff  e1a12ae2  781c17b0 
S H A C L i b / pg p / p i pe / ma ke f i L e . ms c ) = 

b11fd342  d19514cc  3cd1a1e7  826fe9cf  15ebe07a 
SHA(Lib/pgp/pipe/crypt/Makefi Le.in)  = 

03222abe  485050ec  ac1e9130  5b4bb2b2  1fd3ebe6 
SHA(Lib/pgp/pipe/crypt/makefi Le.msc)  = 

b90f0ad4  659e64a6  7d5c64b7  b2352979  39e81f0d 
SHA(Lib/pgp/pipe/crypt/pgpCiphrHod.c)  = 

21f0f9ce  1e79bcb9  840b72f5  1af55f7c  5ce46e5f 
SHA(Lib/pgp/pipe/crypt/pgpCiphrMod.h)  = 

a4b64000  1c8354c4  173bc8ca  6f2b84d5  d82561c1 
SHA( Lib/pgp/pipe/ crypt/pgpConvMod.  c)  = 

b861c3ed  f473ffac  ff0459ac  d6759200  8d3f71b5 
SHA(Lib/pgp/pipe/crypt/pgpConvHod.h)  = 

16574406  17f56b7e  d1234f6b  91fbea3c  df3dd723 
SHA( Lib/pgp/pipe/crypt/pgpMakePKE. c)  = 

67fd0b50  6a059d0e  480a6c62  baafda72  a92e29ef 
SHA(Lib/pgp/pipe/crypt/pgpMakePKE.h)  = 

6399060b  fe64a933  7bb6531 c ee205688  c8a2f2ae 
SHA( Lib/pgp/pipe/crypt/pgpPKEHod. c)  = 

bf789a4b  35699cd8  8af6b39a  05f508a7  89e0e673 
SHACLib/pgp/pipe/crypt/pgpPKEMod.h)  = 

6518d9ba  737e4a89  d304c8f8  ea2062e2  2f6e9d9b 
SHA(Lib/pgp/pipe/fi le/Makefi le. in)  = 

9f4c4e14  0f9a177e  ef19e8ec  5a34494e  7749d0fb 
SHA(Mb/pgp/pipe/fi  Le/makefi  Le.msc)  = 

2e50c1b0  1e99b09f  ec0655f7  87015382  1b17ab9e 
SHA( Lib/pgp/pipe/fi Le/pgpArmor. c)  = 

cced1c14  df1118b9  ff8f27b6  904e1fba  e27eebca 


SHAC  Lib/pgp/pipe/fi Le/pgpArmor.  h)  = 

d79533fd  7da7505d  f7e99987  a3c36eb1  7faadc75 
SHAC  Lib/pgp/pipe/fi Le/pgpArmrFi L . c)  = 

f2f3e7ea  37b3e64b  222867ee  7e36842c  5e778eac 
SHACLib/pgp/pipe/fiLe/pgpArmrFiL.h)  = 

8b85a62c  cfc6a419  f2805b38  a0f9b793  9e2f9a5e 
SHACLib/pgp/pipe/fiLe/pgpCRC.c)  = 

052c86b2  29b988c1  ccf47c31  24d2e074  c1e1aa88 
SHA(Lib/pgp/pipe/fi Le/pgpCRC.h)  = 

4ec010d9  481e434a  6bbb01c0  9686c02d  cd025dfe 
SHA(Lib/pgp/pipe/fiLe/pgpFiLeMod.c)  = 

364a5634  906f55f9  f1f7e142  1fe79cac  e2d32f1c 
SHAC  Lib/pgp/pipe/fi Le/pgpFi LeMod. h)  = 

cf7d5c96  7aae7400  04a72239  da5cbfd7  3390428a 
SHAC  Lib/pgp/pipe/fi Le/pgpHeader.  c)  = 

5e326d7f  4cb15fe0  373ad907  4d9e0c55  C0c27fa7 
SHAC  Lib/pgp/pipe/fi Le/pgpHeader.  h)  = 

abbe3696  40336731  5a771c57  fcc96a3c  0a8b61ec 
SHACLib/pgp/pipe/fi Le/pgpPrsAsc.c)  = 

0ce4c9bd  f5b81013  56e7798b  8f169fbb  b5bf2f5e 
SHACLib/pgp/pipe/fiLe/pgpPrsAsc.h)  = 
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e898f069  4e2bf0c9  6e733078  df64f685 
SHA( Lib/pgp/pipe/fi Le/pgpRadix64. c)  = 

5ea4c315  3fa85a95  4b343eda  b9f80273 
SHA(lib/pgp/pipe/fi Le/pgpRadix64.h)  = 

709928d7  45922f87  f6dbf2c4  571f3673 
SHA(Lib/pgp/pipe/parser/Hakefi Le.in)  = 

2557ed9b  fe46950e  08b0ddcd  e8594a42 
SHA(Lib/pgp/pipe/parser/makefi Le.msc)  = 

dd8d1d9c  054943fe  a3c29a2a  7d4a1d8a 
SHA(Lib/pgp/pipe/parser/pgpPrsBin.c)  = 

4e34c0a7  cd78fd46  d6712ba2  a2797b55 
SHA(Lib/pgp/pipe/parser/pgpPrsBin.h)  = 

450ae38b  7e79626a  3f62b511  03644635 
SHA(Lib/pgp/pipe/parser/pgpReadAnn.c)  = 

68d9a106  28f1efbe  fbdb6212  eeb3bafa 
SHA(Lib/pgp/pipe/parser/pgpReadAnn.h)  = 

869d3128  5a721125  494a03dd  53fd317f 
SHA(Lib/pgp/pipe/parser/pgpVerifyRa.c)  = 

ab3a5a08  bScdcldl  e7cd4960  b2b312bc 
SHA(Lib/pgp/pipe/parser/pgpVerifyRa.h)  = 

4f63bbe4  af0007b5  d9e4284d  590bbef7 
SHA(Mb/pgp/pipe/parser/pgpVrfySig.c)  = 

3573a873  725df3dc  fad9c874  797f348f 
SHA(lib/pgp/pipe/parser/pgpVrfySig.h)  = 

8d729024  8a8eb91d  ba4dc928  802234f5 
SHA(Lib/pgp/pipe/sig/Makefi Le.in)  = 

f8096168  53cb2f3b  160503af  1dae86a0 
SHA(Lib/pgp/pipe/sig/makefi Le.msc)  = 

e72a1fef  d9ac7eac  f53a0ebb  d7a87cde 
SHA(Lib/pgp/pipe/sig/pgpHashHod.c)  = 

71747d53  238e9ba9  66b08e8e  99fb9b15 
SHA(Lib/pgp/pipe/sig/pgpHashMod.h)  = 

64545594  b8ff245b  e63b6779  7bd7bc5e 
SHA(Lib/pgp/pipe/sig/pgpSigMod.c)  = 

dbaf6a09  830e18d3  fd150556  8dbe03c8 
SHA(Lib/pgp/pipe/sig/pgpSigMod.h)  = 

77dd8511  6e421bbd  20794afb  a12fe667 
SHA(Lib/pgp/pipe/text/Makefi Le.in)  = 

9dddc691  eeed838e  f552afd7  b2a3639d 
SHA(Lib/pgp/pipe/text/makefi Le.msc)  = 

c9b6f495  57198713  604c9422  8cf445ed 
SHAC  Lib/pgp/pipe/text/pgpCompHod. c)  = 

efc290f9  4d393f26  857501a0  e746c9a7 
SHA(Lib/pgp/pipe/text/pgpCompHod.h)  = 

cf56c874  d30b7d76  c6148ec1  a85cf869 
SHA(Lib/pgp/pipe/text/pgpDefMod.c)  = 

83174349  33b04e83  20bea4d0  ff88e07a 
SHA(Lib/pgp/pipe/text/pgpDefMod.h)  = 

26bde95c  c45ff191  185fc4d6  15496c2f 
SHA(Lib/pgp/pipe/text/pgpInfHod.c)  = 

55524741  0d90eb28  4895d123  b831293c 
SHA(Lib/pgp/pipe/text/pgpInfMod.h)  = 

797f2383  78a1f14d  402a179f  124e931d 
SHAC  Li b/pgp/pipe/text/pgpLi teraL . c)  = 

0573912f  e225aa0b  8600c8df  c2d7f888 
SHA(Lib/pgp/pipe/text/pgpLiteraL.h)  = 

86d6abeb  ad1c06b5  5a16e4cd  a6723b4e 
SHACLib/pgp/pipe/text/pgpTextFi Lt.c)  = 


a9259ecb 

13175468 

095f 75e8 
39a729ac 
a7960bd7 
4c2d3568 
1 1 882571 

1 b956c66 
0da1 6542 
5e42cc22 
c8a6f d74 
248d1 el  3 
085374a5 
8308e5f 6 
b0f 30db4 
c1392c0c 
9cf 43d8b 
39081 ebl 
f 6506a5d 
263c593c 
54a61 2ce 

81 1 ba8d2 
3d0486a9 
fe7b9c02 
41 7df de7 
1 f 453db7 
abea55a1 
06f 63d53 
b6e9f 2a1 
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a0a5ccb5  8107fede  12397610  b0ff2e7e 
SHA(Lib/pgp/pipe/text/pgpTextFi Lt.h)  = 

f669f508  1ef48859  a6f8ab41  76bd5d33 
SHA( Lib/pgp/pipe/text/pgpZBi ts. c)  = 

7d8c464a  a9a736f3  e1e7405e  9874ff7f 
SHAC  Lib/pgp/pipe/text/pgpZDefLate  . c)  = 

2c750bc5  f285ae61  34320c2f  543dc350 
SHA( Lib/pgp/pipe/text/pgpZHatch.asm)  = 

7d827a93  aa5940bb  b7c8eda9  2c713658 
SHAClib/pgp/pipe/text/pgpZTai Lor.h)  = 

473fd56c  226a9e79  f3c708d5  341e2c8b 
SHAC  Lib/pgp/pipe/text/pgpZT rees. c)  = 

a3594886  5133758a  f81f9bd9  b662f260 
SHA(lib/pgp/pipe/text/pgpZip.h)  = 

c7a4082b  b41158e2  99c6beab  8924d38a 
SHAC  Li b/pgp/pipe/uti Ls/Makefi Le.  in)  = 

3f9751a0  0ae75b7d  4a7d85bb  70927c06 
SHACLib/pgp/pipe/utiLs/makefiLe.msc)  = 

0fc08a3d  40428461  631d483e  b4b2b0bf 
SHAC  Lib/pgp/pipe/uti Ls/pgpAddHdr.  c)  = 

a8574055  0b102e2d  754e88d4  0ad590b3 
SHACLib/pgp/pipe/uti Ls/pgpAddHdr.h)  = 

3d51f8f4  01a1a53c  7a0cefb2  79474f1a 
SHAC  Lib/pgp/pipe/uti Ls/pgpBufMod.  c)  = 

335c33bf  2b779c45  de34192b  048921d7 
SHAC  Lib/pgp/pipe/uti Ls/pgpBufMod. h)  = 

fbb02278  69bfbe44  22eb631d  25ac6eda 
SHAC  Lib/pgp/pipe/uti Ls/pgpCopyMod. c)  = 

ddd26d1a  7972f9c1  2a25daf4  eceeedfb 
SHACLib/pgp/pipe/uti Ls/pgpCopyMod.h)  = 

a3e8e413  8a49e645  5f8181c0  29306e0b 
SHACLib/pgp/pipe/uti Ls/pgpDevNuLL.c)  = 

f1ba02db  e5df0180  463dfeaf  18b0be7a 
SHACLib/pgp/pipe/utiLs/pgpDevNuLL.h)  = 

c40f707e  e1af119e  6caf11b0  f61897c3 
SHAC  Lib/pgp/pipe/uti Ls/pgpJoin. c)  = 

2b0bd0e0  4ff5998c  2dfcd227  4767fd8a 
SHACLib/pgp/pipe/uti Ls/pgpJoin.h)  = 

181c1648  2874270f  2a365259  5610e026 
SHAC  Lib/pgp/pipe/uti Ls/pgpMemMod. c)  = 

a7c547b7  b47adda6  4eebf2a8  0842c06e 
SHAC  Lib/pgp/pipe/uti Ls/pgpMemHod. h)  = 

6f12c037  9450dcbc  5bbe7828  f75af093 
SHACLib/pgp/pipe/utiLs/pgpPipeLine.h)  = 

87ee56ec  43c7d896  6c8277bb  b285a387 
SHAC  Lib/pgp/pipe/uti Ls/pgpProtoHod. c)  = 

21f5ef79  a9072778  1 c4d8745  245cb0ac 
SHACLib/pgp/pipe/uti Ls/pgpRot13Mod.c)  = 

aa4238ef  636ac917  c4d10633  4d03a503 
SHACLib/pgp/pipe/utiLs/pgpRot13Hod.h)  = 

3e9ac56d  d1bf17a5  2163e639  a6a3170c 
SHACLib/pgp/pipe/uti Ls/pgpSpLit.c)  = 

4bcfedeb  a277f90f  0789858e  1966c7be 
SHACLib/pgp/pipe/uti Ls/pgpSpLit.h)  = 

7f7dbaf0  01908035  748ab613  daaa6009 
SHACLib/pgp/pubkey/Makefi Le.in)  = 

60c97b62  12514365  35aa1055  82003165 
SHACLib/pgp/pubkey/makefi Le.msc)  = 


201 4adc4 
b554bd61 
f02cbef3 

a1 a54972 

80f 33edd 
d5ee25b9 

9f b9c1 5f 
06c66148 
2be6831 4 
6cf 72cd5 
3831 e46c 
928cc200 
6f 662c8c 
7823a25f 

51 45cda3 
71 9cb3cc 
574d3d87 
1 001 c340 
6f b462c8 
1 e5f 249a 

c51 651 c6 

6177a6c8 

8bd256e3 

699e5685 
fa5a34d6 
5bf bd024 
755097c4 
6f4a28c0 
1 8dc2f f 9 
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26e78882  26f7cbb8  ed1e6770 
SHA( L i b/pgp/pubkey/pgpALtRSAGLu. c) 
b0acc0bf  50c632de  ecdb6d3b 
SHACLib/pgp/pubkey/pgpDSAKey.c)  = 
36ecfc50  955a9f0c  681eab06 
SHA(Lib/pgp/pubkey/pgpDSAKey.h)  = 
209e043f  ffda622c  bb38ceed 
S H A ( L i b / pg p / pub ke y / pg p E S K . c ) = 

79070d5a  292e2e03  e0261b43 
S H A ( L i b / pg  p / pu b k ey  / pg  p E S K . h ) = 

1e146d34  da386e70  2199780c 
SHA(Lib/pgp/pubkey/pgpELGKey.c)  = 
20944ab8  ea79b776  4b10f51c 
SHA( Lib/pgp/pubkey/pgpELGKey.h)  = 
166271dc  94a86cd6  de5cd1e4 
SHA( Li b/pgp/pubkey/pgpFixedKey. c)  = 
29ae6484  f6a2a3ba  0908df61 
SHA(Lib/pgp/pubkey/pgpFixedKey.h)  = 
b3b14579  60717243  539fc5cb 
SHA(Lib/pgp/pubkey/pgpKeyHisc.c)  = 
4b7249a0  6917f22d  7b37b3a7 
SHA( Lib/pgp/pubkey/pgpKeyMi sc.h)  = 
bf83b3a7  cf5dae05  a2cfb405 
SHAC  Lib/pgp/pubkey/pgpKeySpec. c)  = 
ddc28a1b  7705b3e0  584112e8 
SHA(Lib/pgp/pubkey/pgpKeySpec.h)  = 
5dfee4a0  095c4eb0  d5936097 
SHA(Lib/pgp/pubkey/pgpHakeSig.c)  = 
3ae34b54  83da99aa  b4b70c53 
SHA(Lib/pgp/pubkey/pgpHakeSig.h)  = 
2762cd46  8fb4262b  62a66cfa 
SHACLib/pgp/pubkey/pgpPktList.c)  = 
e966d0c7  9437b2a3  a3090fbc 
SHAC  Lib/pgp/pubkey/pgpPktLi st .h)  = 
28f21da3  177f6f8d  6cc97140 
SHACLib/pgp/pubkey/pgpPubKey.c)  = 
f258526c  952c9714  dd0a50cd 
SHACLib/pgp/pubkey/pgpPubKey.h)  = 
e4662921  d287dd1e  fce38d50 
SHACLib/pgp/pubkey/pgpRSAKey.c)  = 
edae5c89  d1793623  a011cc16 
SHA(Lib/pgp/pubkey/pgpRSAGLue.h)  = 
9cd6d8d2  26d752b1  7328ed5c 
SHACLib/pgp/pubkey/pgpRSAGLuel .c)  = 
d39a142b  b94694ce  0fe75193 
SHACLib/pgp/pubkey/pgpRSAGLue2.c)  = 
b3fb9568  4c0de5cb  02533c3a 
SHACLib/pgp/pubkey/pgpRSAKey.h)  = 
00b537ae  8ed913ad  186eb130 
SHAC  Li b/pgp/pubkey/pgpRSAKeyGen. c) 
1d553424  98d2c587  66a82508 
S H A C L i b /pgp/ pub  key / pgpS i g . c ) = 

f1746b20  a63ae621  80555817 
S H A C L i b /pgp/ pub  key / pgpS i g . h ) = 

ba07505b  ee91c4b5  70283582 
SHACLib/pgp/random/MakefiLe.in)  = 
b0d87f94  23a72781  0ec344f5 
SHACLib/pgp/random/makefi Le.msc)  = 


b8f 6b3f c 

cd001 b53 

e23633ce 

8871 73fd 

1 521 3f 2c 

b7c1 f f 0e 

36389bd2 

33e0af f d 

a31 ccbe8 

6dce51 af 

87883c97 

0965c3f e 

def 46f d9 

5b8a45cc 

2793b438 

779d900f 

62f 4ad5f 

1 791 e74f 

C0b6624a 

66c3a41 e 

af 9cd952 

bf e74258 

6d797c56 

33483276 

9ed1 b3f 3 

41 232dd0 

7030438e 

e244f f 8e 

7dedb764 

6a51 e461 

51ea382a 

d19a91ae 

d46ade08 

06ef1 cb7 

fb06eafa 

d57ebcf b 

94c95295 

5ea050a3 

f a5a8692 

d1 2ac58e 

c38ea598 

971 72bf b 

b247a1 7c 

ade8a020 

c41 997c1 

e263349a 

0cf0de28 

21 62e4b0 

75912515 

71 87c91 8 

3b1 b659b 

4c5c6786 

44b836db 

1 1 93a1 6c 

69b766b0 

7a2dbd27 

337f 868f 

21 b1 392f 
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e63d413d  c494e151  ae689cad  bb87bcc4  1e271fa3 
S H A ( L i b/ pgp/ ra ndom/ pgpRnd  . h ) = 

6414d8c4  efa93080  feedSeda  39bf832c  745f8ab4 
SHA( Lib/pgp/random/pgpRndEvnt. c)  = 

0d6296f9  e-f2db49a  c6c97b73  2b9e94e8  5afafd30 
SHA( Lib/pgp/random/pgpRndHSDOS.c)  = 

113b8cac  e2a6ea37  61f67d9c  34f66b5f  18db14f4 
SHA(Lib/pgp/random/pgpRndHac.c)  = 

cfa6e209  a9df29a2  1a3bebf8  859051ab  c7a1b926 
SHACLib/pgp/random/pgpRndPooL.c)  = 

ae153465  4a25fc01  443cac30  b46db613  39373d2a 
SHA(Lib/pgp/random/pgpRndPool.h)  = 

b542f944  6f07bf93  2ea4dbca  2940d8b5  d0b6e2e0 
SHA( Lib/pgp/random/pgpRndSeed.c)  = 

b4a8519c  4fd013df  ce2d32c8  e359df10  d7182b99 
SHAC  Lib/pgp/ random/pgpRndSeed. h)  = 

f9c49e3a  51176b36  86eefeb2  1ddca31f  189ebfe1 
SHACLib/pgp/random/pgpRndUnix.c)  = 

d3bec9af  a4db5a09  be5495eb  98f222b2  7c163b65 
SHAC  Lib/pgp/random/pgpRndVMS.c)  = 

e9ab3c73  e13f78ef  0e8c667c  40aca124  40fa642b 
SHAC  Lib/pgp/ random/pgpRndWin32 . c)  = 

2d4f588d  142b8081  02ad58f4  a07adb11  b6807fe2 
S H A C L i b /pgp / ra ndom/pg pRndom . c ) = 

95815339  d9f27fff  6ab5a3ce  95ec5dc1  f11c9b13 
S H A C L i b/ pgp / ra ndom/ pgpRndom . h ) = 

7618d18e  a6b16a67  23591037  27faa493  b631029f 
S H A C L i b / pg p / u 1 1 L s / Ma  ke f i L e . i n ) = 

eb93ed86  234d6865  494173d5  3adcd7e2  b6dcf84a 
SHAC  Lib/pgp/uti Ls/makefi Le.msc)  = 

1e6ca660  c12f7155  224398a3  35780761  4361831b 
S H A C L i b / pg p / u 1 1 L s / pg p C on f . c ) = 

a7ad130b  53c63c45  4b76b95d  1b5800f2  ba6c8690 
S H A C L i b / pgp/u t i I s / pg pConf . h ) = 

68eab40b  6ced2100  426671fa  0668d41a  5d2dfcfb 
SHAC  Lib/pgp/uti Ls/pgpDecPipe.c)  = 

40be2880  92c662d5  ac2f0359  8a7b8db8  115ad2de 
SHAC  Lib/pgp/uti Ls/pgpDecPipe.h)  = 

d24df2b9  a8053892  5b2ee347  92d3f5a8  9040dcd6 
SHAC  Lib/pgp/uti Ls/pgpEncPipe.c)  = 

1436fd43  459e8abe  a4c5d5fe  7096796d  5af3a170 
SHACLib/pgp/uti Ls/pgpEncPipe.h)  = 

d0dd47a0  692409af  e1490a09  19ee0047  b7c01781 
S HA C L i b / pgp/u t i L s / pg pEnv . c ) = 

6cf676c1  85260C59  5f311800  d6d4a877  83f892da 
S H A C L i b / pg p / u t i L s / pg p En V . h ) = 

66e57ab2  df998134  d7348a0d  1d02bfa0  fb68aa12 
SHACLib/pgp/uti Ls/pgpFi LeType.c)  = 

082c8709  2dec4a5f  b5a8553c  34a54c68  52c87c15 
SHAC  Lib/pgp/uti Ls/pgpFi LeType.h)  = 

0b294e7a  81379ee2  adb48b97  2a8fd71f  f2286ac8 
SHAC  Lib/pgp/uti Ls/pgpSigPipe.c)  = 

10f14df3  9d8898cf  e2366d65  b3d19d5d  50881dc6 
SHACLib/pgp/utiLs/pgpSigPipe.h)  = 

f7fc779a  29694a89  2195c345  ef4695d8  2d6dca32 
SHACLib/pgp/uti Ls/pgpSigSpec.c)  = 

ca46f628  b332e893  70dace18  d752232b  385816f3 
SHACLib/pgp/uti Ls/pgpSigSpec.h)  = 
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831d7fea  a473aa30  1bc1dc8a 

e591 af 46 

2f 25ba29 

S H A ( L 1 b / s i mp L e / Ma ke f i L e . i n ) = 

969953C0  cde9d8a9  7828077b 

5e8a4f f 6 

e33bb93a 

S H A ( L i b / s i mp L e / s pg p . h ) = 

07e4bbf2  5f9e6443  634d8cd4 

03dde7  e6 

487645c2 

S H A ( L i b / s i mp 1 e / s p g p ABu f . c ) = 

234a87a3  13a263ed  9f93d06d 

da23f 387 

301 8cf 39 

S H A { L i b / s 1 mp L e / spg p A F i L e . c ) = 

87eaf97f  5731d66e  9e49c312 

547ddbd4 

3a2bd88e 

S H A ( L i b / s i mp L e / s pg p Add K . c ) = 

53fbde79  84b851d2  3ce49948 

48de9828 

83856f 8c 

S H A ( L i b / s i mp L e / s pg pC h kR . c ) = 

5f8d34ad  dfaffbae  edd9b900 

f 91 a2683 

b45ce846 

S H A ( L i b / s i mp L e / s pg p EBu f . c ) = 

03acafef  ce27ecd7  9640a44d 

f 1 cl  8239 

a3928895 

S H A ( L i b / s i mp L e / s pg p E F i L e . c ) = 

2b82882f  69ddffdf  894fc889 

34ca6e95 

dd200f 7c 

S H A ( L i b / s i mp L e / s pg p Ex t K . c ) = 

8ca87ee4  15ccb8f1  cc6381d4 

54c1b00a 

d1 Sadi de 

S H A ( L i b / s i mp 1 e / s p g p N Key . c ) = 

44a515de  7e254fa2  02cb191d 

941 ec982 

f daaa4c6 

SHA( L i b/si mpLe/spgpRBuf . c ) = 

28a8936e  e6cfa355  3adc03d9 

75bd0cc8 

2d96a91 7 

S H A ( L i b / s i mp L e / s pg p R F i L e . c ) = 

8cb34d7b  25585f4d  bb883565 

07d66bb3 

98691 7c7 

S H A ( L i b / s i mp L e / s pg p R NG  . c ) = 

600efdb4  7ae11c73  7ad7285b 

1 e2261 f 0 

6df af dc7 

SH A ( L i b / s i mp 1 e / spgpSBu f . c ) = 

3b00dc22  b4f6c8e2  d8db5eb5 

387a38ae 

b20f 97a3 

SH A ( L i b/ s i mp L e / spg pS F i L e . c ) = 

50d7f0f8  b344fcf0  6af48451 

8668492a 

e67cec08 

S H A ( L i b / s i mp L e / s pg pVBu f . c ) = 

a1aa3a5f  a41e2b0b  994956d8 

dcb61 21 4 

08f 742cf 

S H A ( L i b / s i mp L e / s pg p V F i L e . c ) = 

53ad454f  dea1a79d  67e4a94b 

b0df 064f 

053ced59 

S H A ( L i b / s i mp L e / s pg p b u f . c ) = 

12aa67a9  462b6e9b  6e2a6111 

df 1 ef 6a8 

4db278db 

S H A ( L i b / s i mp L e / s pg p c a L L ba c k . c ) = 

c3589c40  9182ce86  d415b73d 

35f 171 c2 

060db847 

S H A ( L i b / s i mp L e / s pg pd ea rmo r . c ) = 

c362adc9  9cea0cc4  051b5a1d 

aea4e95c 

455a1 cl  3 

S H A ( L i b / s i mp  L e / s pg  pd  e c ry  p t . c ) = 

8c645bef  e842aec0  e384f365 

4a45524b 

80b3f c9b 

S H A ( L i b / s i mp L e / s pg p i n i t . c ) = 

ee3777b8  1cb624a8  57b8f093 

86f 632c1 

9c760e5f 

S H A ( L i b / s i mp L e / s pgp i n t . h ) = 

d1cf8cfa  86f89534  88a74c4f 

39c49283 

ea3503ee 

S H A ( L i b / s i mp 1 e / s pg p r i n g . c ) = 

00b685d2  bec316d7  c6e71106 

f 1 0a1 bel 

2f601af c 

S H A ( L i b / s i mp  1 e / s pg p k c h e c k . c ) = 

ab9141a6  d050457b  661845e3 

5b87068c 

cc64078a 

S H A ( L i b / s i mp L e / s pg pna me i d 8 . c ) = 

22a2e708  a9c227e0  5a75147a 

4669f b52 

4441501 2 

S H A ( L 1 b / s i mp L e / s pg p r e c L i s t . c ) = 

d2ef3438  432260b7  70633173 

c86ec3a5 

1 1 91 4ab6 

S H A ( L i b / s i mp L e / spg ps i g ne r . c ) = 

d6ea687a  56d62947  0d9e9393 

9ee498d4 

b571 3a57 

S H A ( L i b / s i mp L e / s pg p t ex t . c ) = 

n[;CHK:9aad99c1b62363457ff072501d4fab2873b5a4dcd726Adf610b35188b604a323e]] 


xxxviii  Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


4d0e356a  d0d616f5  24506a31  2ffb3cde  e529b803 
S H A ( L i b / s i mp L e / t e s t . c ) = 

3028a197  dedce139  109f8df2  b97cf42a  3be54877 
S H A ( L i b / 1 1 y u i / Ma  ke  f 1 L e . i n ) = 

8585c896  6232a16a  0c3c7ea9  bd4a6317  0e9b8533 
S H A ( L i b / 1 1 y u i /ma  ke  f i L e . ms  c ) = 

4deae75d  673f330e  d00acd37  e8f94b49  d2b7c7ab 
S H A ( L i b / 1 1 y u i / pg p KB  . h ) = 

9aeab72b  fbbe6834  b37866a2  85cadb53  012b0979 
SHA( Lib/ttyui /pgpKBMSDOS. c)  = 

f3a0b38a  154e175b  afb8f5b9  ff3a0185  338bff0b 
S H A ( I i b / 1 1 y u i / pg p KBHa c . c ) = 

25534a7b  3373a1ac  7ee45aad  e8652abb  de2aa899 
S H A ( L i b / t t y u 1 / pg pKBU n i X . c ) = 

b06b65dd  0c2336ca  88f5106b  0eac273c  099f2646 
S H A ( I i b / 1 1 y u i / pg pMo r eM od  . c ) = 

0019C016  5c9adabc  d348ec7c  beb904d5  a06114f2 
S H A ( L i b / 1 1 y u i / pg pHo r e Mod . h ) = 

910773c9  9b431a41  5c5cf1b5  f7b42bbd  55b1cf01 
S H A ( L i b / 1 1 y u i / pg p PO S I X . h ) = 

5c0b3634  4274917a  47772cce  7ff9fe2b  996f3614 
S H A ( I i b / 1 1 y u i / pg pR i n g U I . c ) = 

bdd4208f  8b2b6018  441895de  eaed7754  7bf34fc5 
S H A ( I i b / 1 1 y u i /pg pR i ngU I . h ) = 

00fb2f46  27f2a670  5a3a9914  c9d2abea  b869b9be 


S H A { L i b / 1 1 y u i / pg p S c rM S DOS  . c ) = 

10c8e6c4  d4d1bf16  cef792bf  0c2af2b5  b9efe96f 
S H A ( L i b / 1 1 y u i / pg  p S c rHa  c . c ) = 

3f71cb59  03835b63  8097db86  93fc6821  b1d4a0cf 
S H A ( L i b / 1 1 y u i / pg p S c r Un  i X . c ) = 

C1015683  6789fb9e  5ab62ec2  bf7f8312  26905cd6 
S H A ( L i b / 1 1 y u i / pg p S c r e en  . h ) = 

71cb517b  7b30d6d7  12121857  e6e0b513  870dd694 
SH A ( L i b/ 1 1 yu 1 /pgpU s e r 1 0 . c ) = 

c7fab8c9  4044b840  84566467  a5efbbcf  22cf157d 
S H A ( I i b / 1 1 y u i / pg pU s e r 1 0 . h ) = 


7 ceeddd6 

1aeb137d 

676507e1 

7e2264e5 

d56ec54a 

SHA(README)  = 

b17bdf ce 

231 62dcf 

709dece5 

68e32c64 

40db784d 

SHA(TODO)  = 

ad68a39d 

ed9a7bb1 

14cc3481 

8e3de09b 

ebcf bd0b 

SHA(build.bat)  = 

408e01 c6 

1 6dae249 

ce2434b8 

cd507f6a 

8825bc9f 

SHA(cLean.bat)  = 

49b616cf 

b4994872 

63431 4d1 

01d80c66 

def da698 

SHA(mkhdrs.bat)  = 

6c9bb227 

dc781982 

0c1 d1 f c8 

d380c230 

57cd83f 5 

SHA(reLease.bat) 

= 

a8548f c8 

c8bcc044 

4b6c  c6e6 

9ca07f 63 

097add7f 

S H A ( ma ke-mkhd r s . p L ) = 

609605^9 

40d38e09 

a7cc6dd7 

bf 8381 32 

89eb8990 

SHACLibbuild.bat) 

= 

841 ae280 

390b1 8e6 

d1 b6a1 03 

03603b26 

dd92beb2 

SHA(MakefiLe.in) 

= 

4d1 86d1 3 

e3a8c8e0 

1 c91 cabf 

6039e4a  f 

34c44cd2 

SHA(acLocal.m4)  = 

3bdaf 386 

eae965b6 

bcf 2889d 

931 ef 742 

67b3744c 

SHA(config.h.in) 

= 

IIIICHK:  71  a5b50cef6a2220b1  71  dab17b16cdef1978a743d3d217c9fd0ef25871  1 586699:: 
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1120765b  65232233  a0de38b9 
S H A ( c o n f i g_ w i n 32 . h ) = 

a2920063  82522de9  73e09234 
S H A ( con f i gu re . i n ) = 

04e35133  bbc49750  def7bdf6 
S H A ( ma ke f i L e . m s c ) = 

c276d369  dcf5d871  7bc4e89d 
SH A ( conf i g / conf i g . gue s s ) = 

cefb15bf  dd7961b3  ffec0a2a 
S H A ( c o n f i g / c on f i g . s u b ) = 

f79cc19c  762be4f4  73f409f2 
S H A C c o n f i g / i n s t a L L - s h ) = 

ef402f16  3d6056d4  566bd35d 
S H A ( c on f i g / p o s t . i n ) = 

3d9eacbe  842e9d52  d76b6dbb 
S H A ( c on f i g / p r e . i n ) = 

92f6172c  1ee464b6  308a5f1d 
S H A ( a pps / common / Ma kef i L e . i n ) = 

f980519f  4f781e8a  638a68c6 
S H A ( a pp s / c ommo n / ma ke f i L e . ms c ) = 

3d7f3597  efba5348  152741b2 
S H A ( a pps / common / pgp App F i L e . c ) = 

3a644154  e9596c80  77699a17 
S H A ( a p p s / c ommon / pg p Ap p F i L e . h ) = 

8511fac4  e3ae144b  cad18e11 
S H A ( a pp s / c ommon / pg p E X i t . c ) = 

e106048f  13ac6f74  7a4aa932 
SH A ( apps / common / pg p Ex i t . h ) = 

6671c47b  c704d7d1  dc0617f3 
S H A ( a pp s / c ommo n / p g p I n i t App  . c ) = 

d0b2deac  0a767e7c  9af833dc 
SHACapps/common/pgpIni t App . h ) = 

ce606d9b  b94451a5  7dc210ba 
S H A ( a pp s / c ommo n / p g pKey R i n g s . c ) = 

5b8b7883  7e1166c3  4c6e0f73 
S H A ( a p p s / c ommo n / p g pKey R i ng s . h ) = 

7895baf9  4d9d7d70  5457dd39 
S H A ( a pps / common / pgpOp t . c ) = 

b08c414b  dfdbb31c  3d48c9db 
S H A ( a pp s / common / pg pOp t . h ) = 

10e0d01c  7239d8d0  8866a9a0 
S H A ( apps /Ma kef i L e . i n ) = 

10afc088  c330c8be  906f5fd2 
S H A ( apps /ma kef i I e . ms c ) = 

b15d6242  50ea20ef  da9729f6 
S H A ( a pp s / pg p / Ma k e f i L e . i n ) = 

ceb31e2a  139fab08  5596bd30 
S H A ( apps / pg p / pa r s ea rg  . c ) = 

b0d2cadd  535b9363  7979b4c3 
SH A ( a pps / pg p / pa r sea rg  . h ) = 

9f458801  8bb1355a  72f3c700 
SH A ( a pps / pg p / pa s s . h ) = 

40d4a2a1  35bebe16  3d52a1cc 
S H A ( a pp s / pg p / p g p . c ) = 

3e9520cd  88a830ef  b58b4aee 
S H A ( a pps / pg p k/ Ma ke f i L e . i n ) = 

08ecddc0  90a38acb  484b487c 
S H A ( a pps / pgp k / key s e r ve r . c ) = 

[[CHK:41dd333f65b57906fc0d5f69bbd2 


e584498c  c6725479 
f53d5596  79502c1f 
a4fead04  d6dd48db 
17269969  61388696 
1140e75f  e43fb6ce 
643f139c  1af006be 
e297f0e2  a389234e 
d7210b11  35501370 
d045cdeb  48891def 
42f3fc32  44fedd20 
6f1fb473  1b917bca 
684ce741  f8184b5e 
b78129ac  6f8cf071 
ce07c098  8146e9dc 
be67d6cc  34de2c68 
eaff117b  ef36b0b5 
22e4c977  ebbda4cb 
43af455b  95d7b817 
bdbc1b87  434df6e8 
80251c11  a1d75ab5 
e29cf616  08f994f5 
5c88e642  20c2fa73 
934a8b3e  9f97dd0f 
cbfb5a1d  5f02225f 
e495edf5  dfbe4253 
2d543c93  a3833389 
a0590557  d130ca6f 
d7da1362  75efe125 
713606de  ce014510 

afcb72da59bbfba0b3359cf28338f844c95a]] 
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fcbe7ffe  eff66471  8c870fe3 


S H A ( a pp s / pg p k / key s e r V e r . h ) = 

725c62d4  bfcf8981  347c087e 
S H A ( apps /pgpk/ pa s s . h ) = 

9c714157  9430b905  235462cd 
SH A ( a pps / pgp k/pg pk . c ) = 

c37aa066  cb59ba5a  d50cbe21 
SHA(apps/pgpk/pgpkExi t . c ) = 

dd22a9d0  19f11700  7bb18fd0 
S H A ( a pp  s / pg  p k / pg  p kEx  i t . h ) = 

b20b37a4  a9489a97  8e9f2feb 
S H A ( a pp  s / pg  p k / pg  p k I n i t . c ) = 

cebb45a4  5c81da91  7dfe7c71 


SH A ( a pps / pgp k/pg p kl n i t . h ) = 

2d8d1e51  ef806ed4  83db1886 
S HA ( apps /pgpk/ pgp kKeyGen . c ) = 

017dc17b  654eff36  98eb6228 


S H A ( a pp s / pgp k / pg p kKey G e n . h ) = 

bf5f0a24  e1666952  a6e891db 


SH A ( a pps /pgp k /pgp kU I . c ) = 

5bddd762  95e443ea  2bb6f78c 


S H A ( a pps  / pg  p k / pg  p kU  1 . h ) = 

0462ae65  b518b7f1  9fda31c8 
S H A ( a pp s / pgp k / u r L . c ) = 

69405d5b  498dbdce  d7404f15 
SH A ( a pps /pgpk/u r L . h ) = 

0a5fec2d  7c2f24b5  ca7d671c 


S H A ( a pp  s / pg  p k . o L d / Ma  ke  f i L e . i n ) = 

f4ef2154  b43795c1  b2a2baf6 


ac15f242  a799dcd8 
6e1f36b6  3a2cb2a2 
ff464b21  b7abl5e2 
844ebd4d  8bbf3b0d 
71c1c69a  7374a096 
3e991566  bd2e0fac 
c3ffb657  7a687a0a 
09ba98b7  623c1537 
86eb3ce1  85de4c3f 
1f4042aa  65d998a3 
9fb7101c  7b15db80 
3dda757d  b9b521a5 
906b8fc0  20ea1a3f 
0e1f8393  826ba63a 
3f9a18df  3c9963f9 


SHACapps/pgpk.old/makefi  le.msc)  = 

042fcdc4  21264149  ed81e83e  922265e8  b3a84a38 
S H A ( a pp  s / pg  p k . o L d / pg  p k . c ) = 

f0e9a69f  f464d700  acc33c91  e75d8933  12c3bf56 
S H A ( ma n/Ha kef i L e . i n ) = 

4dadcf20  72370f84  415f44eb  7e7d09e9  78e298f2 
SHACman/pgp.l)  = 

988474c8  f74cdb0e  38a86cc1  e151ec37  dd58ad37 
S H A ( ma n / pg p . c f g . 5 ) = 

cb423e9f  0aa9ccc1  f776edcc  f9565705  a5eaa27c 
SHACman/ pgpe . 1 ) = 

70634d18  3f1e2198  7b76cbad  0111474a  087f4332 
SHACman/pgpk.l)  = 

e8ae0a6d  b69f35f0  b2169a2d  3bade7ec  7b117ddc 
SHA(man/pgps  . 1 ) = 

7bdd3766  3ba521f5  4d076a1c  23e01810  c8c0347a 
SHACman/pgpv.l)  = 

376a67e7  aa83dfdc  95f5e420  34df9403  d0f3a52b 
S H A ( b i na  r i e s . u u e ) = 

a36afc8e  9c6e5071  21c1f282  216709b7  31256fe4 
MD5  ( I i b / Ma  ke  f i L e . i n ) = 

d105ec86f10bf1b899cffe12d2cb06d7 
MD5  ( L i b /ma ke f i L e . ms c ) = 

1be6d093be3c0cc3c084eb2ad3247f05 
MD5  ( L i b / bn / Ha ke f i L e . i n ) = 

75f56eac31ab33e28064196b8c27f5ca 
HD5  ( I i b / bn /ma ke f i L e . ms c ) = 

1b06d76809e8a786cb01773ff7c31a4d 
MD5  (lib/bn/bn. c)  = 

Ci:CHK:908308a8a441fc6fdb81fc7de0997824f69a25fbf85e336ec0680e221f7cd00d8]] 
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3f7598698afa620516d335c26a81136e 
MD5  (Li b/bn/bn . h ) = 

b23e8bc32b04461b958e57a49d963c28 
MD5  ( L i b / bn / bn 00 . c ) = 

e4827bf0ba9934bd75d77138d3bbf48b 
MD5  C Lib/bn/bn16. c)  = 

5d0ceb4d19ec6f942a0ec48b5aa705b6 
MD5  (Lib/bn/bn16.h)  = 

0aa783b39cae07f3107424ea09ace39b 
MD5  ( L i b / bn / bn 680 00 . c ) = 

152a7facacdd33e548cc0124ab90e705 
MD5  ( L i b/bn/bn8086 . c ) = 

76da2da5dceb42a0b40cbc4449ebe871 
MD5  ( L i b / b n / bn d s a p r i me . c ) = 

2a387a751be116863f338534b351171c 
MD5  ( L i b /bn /bnd s a p r i me . h ) = 

b85804bdfa3ee4203b2340a744d57b9e 
MD5  ( L i b / bn /bnge rma i n . c ) = 

75a64ee600e9f28c12683cb40a1b10f8 
MD5  ( I i b / bn / b ng e r ma i n . h ) = 

3c79f561d44da5425b2057403e6ea69f 
MDS  ( L i b / bn / bn i . h ) = 

9491b16560dc0aba9e846b24e6b7a331 
HD5  ( L i b / bn / bn i 00 . c ) = 

0a8bef890cbf84a0089b26f77ed299ff 
MD5  ( L i b / b n / bn  i 1 6 . c ) = 

de68ef027d1c1dbe6980811e68593a45 
MD5  ( L i b/bn/bni 1 6 . h)  = 

6acd6815fb4efdb4de499f2f41b6e6d0 
MD5  ( L i b / bn / bn i 6 80 0 0 . c ) = 

c94d2a1290ccf0ce7c1346f4420155be 
MD5  ( L i b / bn / bn i 6800 0 . h ) = 

0c68af569514781bdf202367da6c96e0 
M05  ( L i b / bn / bn i 680 2 0 . c ) = 

959ae5099de650bd635b31a87bbaea86 
MD5  (Lib/bn/bni68020.h)  = 

1250846fb4607ce962ad6a6e6409e76a 
MD5  ( L i b / bn / bn i 80386 . a sm ) = 

79df21cf92e1f563603ba7b63c0907c3 
MD5  ( L i b / bn / b n i 80386 . h ) = 

9f5bb184e2c70164ba1592bfef8b7fdd 
MD5  ( L i b / bn / bn i 80386 . s ) = 

147415d9cd986eb02301da9c06671a17 
MD5  ( L i b / bn / bn i 80386 c . c ) = 

6eb8001513f802f64877dd27cdde8a7f 
HD5  (Lib/bn/bni80386c.h)  = 

7d63d45efcfc636c73e916393f892fa5 
HD5  ( L i b / bn / b n i 8086 . a sm ) = 

871 185dd8b6ad85676c2051b9b1 74471 
HD5  ( L i b / bn / b n i 8086  . h ) = 

e365ed869ae31228f91c14889aa61ea0 
MD5  ( L i b / bn / b n i 960 j X . s ) = 

89ac2c3dcbf026e8eb62a9ed85d14e9c 
MD5  ( I i b / bn / b n i a L p h a . h ) = 

51e1979a4a426d7966f7f5e84819de5a 
MD5  ( L i b / bn / bn i a L pha  . s ) = 

e57b830bef4542a9922b7efb8ba5af87 
MD5  ( L i b / bn  / bn i mem . c ) = 

i:i:CHK:2b616d24944e01a83e840881  2a43fcf8a5386d938e7f4d3a9179ea10b720b01a6:: 
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fd9f4216a0d524a28f60903cf6f2ad0f 
MD5  ( L i b/bn / bn i mem . h ) = 

40e959f9c95dbf472f70c133f31ab015 
MD5  C L i b / bn / bn i n i 1 1 6 . c ) = 

6ac3dc14fa0cacb762e92b28ff0e67cd 
MD5  ( L i b / bn / bn i p p c . c ) = 

3999ae3045b7fa84e654f6db2e00f28d 
MD5  ( L i b / bn / bn i pp c . h ) = 

ed98042a858dc146e56d2a9378fc053f 
MD5  C L i b / bn / bn j a c ob i . c ) = 

1fb88cd9c9212560673089897fd063a5 
HD5  ( L i b / bn / b n j a c o b i . h ) = 

d32efb2d99324a73ce4c07f824ced7cc 
MD5  ( L i b / bn / bn k L ud g e . h ) = 

8be361d642bbca3fc181c096090ec26a 
MD5  ( L i b / bn / bn L e g a I . c ) = 

415afe4aaec9b5c3da6d93b671314995 
M05  ( L i b / bn / b n L e g a L . h ) = 

c3b1fc577d4c01f52de4edd71867abcc 
MD5  ( L i b / bn / bn p p c a s m . h ) = 

4d8d8c7b3d01 c 860 5 8687d492 edaa 693 
MD5  ( L i b / bn / b n p r i me . c ) = 

2b6bfef810d2d06c054c609d3f9b6378 
MD5  ( L i b / bn / bn p r i me . h ) = 

C650f0dc479156fb54e95d8f4b61a138 
MD5  ( L i b / bn / bnp r i n t . c ) = 

d5bf30fd865666d77b3e2772b437d4d3 
MD5  ( L i b / bn / b n p r i n t . h ) = 

22fee8109b9d7ac324a0dec04116c81e 
HD5  ( L i b / bn /bn s i e ve . c ) = 

bb741f10f32445045752c92f1dd6ed9c 
MD5  C L i b / bn / bn s i e V e . h ) = 

083c04d97c0d1ac14156069d856263e3 
HD5  ( L i b/bn/bn s i ze00 . h ) = 

42ead4823bf748169a216636799e26f9 
HD5  ( L 1 b / bn / I bn00 . c ) = 

6b89c1825d02f a95c656b4e2451 e81 5c 
MD5  ( I i b / pgp / Ma ke f i L e . i n ) = 

13a86e595874e285acb8bc693f532cb2 
MD5  ( L i b /pgp /ma kef i L e . ms c ) = 

1c0331e1afb3845563f0f2e42c17c65e 
HD5  ( L i b / pg p / c 1 ph e r / Ma ke f 1 L e . i n ) = 

6946f a671 c d f a 339f 3 c e bb f 7f 5 f f 7a 8 5 
HD5  ( Li b/ pgp/ c i phe r /ma kef i L e . ms c ) = 

81752fbd213e26bf8d78e29ba7e26142 
HD5  ( L i b /pgp/ c i phe r / pg pC AST5 . c ) = 

bf 57d74020325cd08f 2b5923b449701 f 
HD5  ( L i b /pgp / c i phe r / pgpC AST5  . h ) = 

1cc1a8ed8ed54ed8e8fd5a238d3f4cb7 
HD5  ( L i b / pg p / c i p h e r / pg p C A STBoxS . h ) = 

96ecfafb40691477caeaaec00fbcd98c 
MD5  ( L i b / pgp / c i p h e r / pg p C F B . c ) = 

9a4346f5355859e78c3caf0e3ba3b329 
HD5  ( L i b / pg p / c i p h e r / pg p C F B . h ) = 

4e2e9bf20e46e407bb852cc2976dfcd4 
MD5  ( L i b / pg p / c i p h e r / pg p C i p h e r . c ) = 

4c168ea93562f86197db22fa3bfc2c64 
MD5  ( L i b / pg p / c 1 p h e r / p g p C i p h e r . h ) = 

CCCHK:b90d26c7ef190c3dd9dc02766e708668467c0aff11fa437e8dc2b7429b667e6d2]: 
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dea525d7618b31d4a96f115016ab74e8 
MD5  ( L i b / pg p / c i p h e r / pg p D E S 3 . c ) = 

a5a6678ca63df 1 ce0e8535bf e51 a924c 
MD5  ( L i b / pg p / c i p h e r / pg p D E S 3 . h ) = 

db7d696926b6f2a4e8f15bce3a7fcab9 
MD5  ( L i b / pg p / c i p h e r / pg p D E S 3_68K . c ) = 

b31a829a5be8771826a6591d53834ede 
MD5  C L i b / pg p / c 1 p h e r / pg p I D E A . c ) = 

409e7481e468bb8b20f863356bb0dfbe 
MD5  ( L i b / pg p / c i p h e r / pg p I D E A . h ) = 

7a07fdefc707097050bd675f7392a820 
MD5  ( L i b / pg p / c omp re s s / Ma ke f i L e . 1 n ) = 

d7f08a73e8342e82489d839aaf6698a8 
MD5  C L 1 b / pg p / c omp r e s s /ma ke f i L e . ms c ) = 

95281 200f3da441ed27b3c8a9ff150d4 
HD5  ( L i b / pg p / c omp r e s s / pg p C omp r e s s . h ) = 

da7cd1d4662103f1a96849d1cc0edf24 
MD5  ( L i b / pg p / c omp r e s s / pg p Z I n f L a t e . c ) = 

4764e53160c4e6daf70e7caca5193190 
MD5  ( L i b / pg p / c omp r e s s / pg p Z I n f L a t e . h ) = 

171e1fd9101a00a437fdf9f2e51498ca 
MD5  ( L i b / pg p / h a s h / Ha ke f i L e . 1 n ) = 

fb42b9910f3f94acf2370d587be14892 
MD5  ( L i b / pg p / h a s h / ma ke f i L e . ms c ) = 

a1f44f79196ef3e947e796e63970782c 
HD5  ( L i b / pg p / h a s h / pg pH  a s h . c ) = 

9149c511b8101ba0b2b2d6d57b846640 
HD5  ( L i b / pg p / ha s h / pg p H a s h . h ) = 

C424eff11d2e5708ab4de411a7cb05e3 
MD5  ( L i b / pg p / h a s h / pg pH D 5 . c ) = 

50babd87a3d726aa5b0de15ef6aab86d 
MD5  C L i b / pgp / ha s h / pg pH D 5 . h ) = 

2f2c6d9fedc183ed4550e0840058ec41 
HD5  ( L 1 b / pgp/ ha sh /pgpRI PEHD 1 60 . c ) = 

b1d483cfce49fced82bbe2edb9877b10 
HD5  ( L i b / pgp / h a s h / pg p R I P EH D 1 60 . h ) = 

b2cae2a517a8e0a45ba95643eeae047c 
HD5  ( L i b / pg p / ha s h / pg p S H A . c ) = 

acd6c1f458c51d4aa6a6a5f92bf77b2c 
HD5  ( L 1 b/pgp/hash/pgpSHA . h ) = 

535eab355bc0aebd8831efe45e9a3983 
HD5  ( L i b / pg p / h e L pe r / Ha ke f i L e . i n ) = 

fa925e6bb60ffb9f6ddcfa1b70f06d1a 
HD5  ( L i b / pg p / h e L p e r /ma ke f i L e . ms c ) = 

86afac96822ed6ed59e4da31f561aa34 
HD5  C L i b / pg p / h e L p e r / pg p An n o t a t e . c ) = 

6eb3c4cbd6b21ce3b7b4bb460aa59b03 
HD5  ( L i b / pg p / h e L pe r / pg pBy t e F I F 0 . c ) = 

9c21626daab37d4846405b626deb6f82 
HD5  C L i b / pg p / h e I pe r / pg pBy t e F I F 0 . h ) = 

a0c6cdbf6a248a07d23c2a18a0b4cb51 
HD5  ( L i b / pg p / h e L pe r / pg p C h a rHa p . c ) = 

fc053bc7cf36604b2c2c9e2c2667b80a 
HD5  ( 1 1 b / pg p / h e L pe r / pg p C h a rHa p . h ) = 

d1 09051 1ce45fc0d6326405288db4dcf 
HD5  ( L i b / pgp / he L pe r /pg pDebug . c ) = 

24f06f1 e489ade04ea1 734791 cf351 73 
HD5  ( L i b / pg p / h e L pe r / pg p D e b u g . h ) = 
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a97ee826ca60fc8c8a68e88fc9c15f8b 
MD5  ( L i b /pgp / he L pe r /pgpE r r . c ) = 

70c79263f90820a959c3398902eb0575 
HD5  ( L i b/pgp/ he L pe r / pgp F I FO . c ) = 

62c0e477239cd8d32c410c32295549a9 
MD5  ( L 1 b / pgp/ he L pe r /pg p F I FO . h ) = 

51  92977051  d873f92d1 481 2d37be29dc 
MD5  ( L i b / pg p / h e L p e r / pg p F i L e . c ) = 

f949ac38596ac67ec8e2f786a4bcfb11 
MD5  ( L i b / pg p / h e L pe r / pg p F i L e . h ) = 

90931 41 e0ac9a95629d2eec1663b594b 
MD5  ( L i b/pgp/ he  I pe  r / pg  p F i I e F I FO  . c ) = 

a931a8cbf3acd7a38b272b3f2e513b0b 
HD5  ( L i b / pgp / h e L pe r / pg p F i L e Na me s . c ) = 

f7e8f8c9cf420aee0e4c913e0e330334 
HD5  ( L i b / pg p / h e L pe r / pg p F i L e Name s . h ) = 

3505ba06084fca2c95fac50b3cae9d18 
MD5  ( L i b / pg p / h e I p e r / pg p F i I e R e f . c ) = 

31  a03f 60bbb74251  f 5d3eef 41 c 9 00638 
HD5  ( L i b / pg p / h e L pe r / pg p F i L e Re f . h ) = 

879d7d99b4cb8f 0383edca3e88b0628a 
MD5  ( L i b / pg p / h e L pe r / pg p F L ex F I F 0 . c ) = 

204f599da84923f70e85876d5dd4b49d 
MD5  ( L i b / pg p / h e I p e r / pg pG L oba L s . c ) = 

a8301a881574f019deb4afc391 96323d 
HD5  ( L i b / pg p / h e L pe r / pg p Lea k s . c } = 

8f 8dd40 1706a 51 6f bee  1 c 443  c 7389efd 
MD5  ( L i b / pg p / h e L pe r / pg p Lea k s . h ) = 

6f671c5fb941efebc64c9bcaff3d496a 
MD5  ( L i b / pg p / he L pe r / pg pMa c F i L e . c ) = 

16db08a69d31 85805a9a471 88e72070e 
MD5  ( L i b/ pgp/ he L pe r / pgpHa c F i L e . h ) = 

e61ba24919f520f8a9a8f3c4ca6efe7a 
f1D5  ( L i b / pg p / h e L pe  r / pg pMa  c U t i L s . c ) = 

94e8dfc11e2ded7a49c7ecde0716b465 
HD5  ( L i b /pgp/ he L pe r / pgpna cU t i L s . h ) = 

e3f756536c2428b257ab1815d456db0c 
MD5  ( L i b / pg p / h e L pe r / pg pHem . c ) = 

26d4b0eec21 bcadd9bd44d5a0731 d56a 
MD5  ( L i b/pgp/he L pe r /pg pHem . h ) = 

4a4cb3a604e83596b6f 03733e2f cc263 
MD5  ( L i b / pg p / he  I p e r / pg pHem F i L e . c ) = 

971 b9a81 f27838bf 88288765a 272 538b 
MD5  ( L i b / pg p / h e I pe r / pg pH sg  . c ) = 

7c1d3e08d4688f9f4bb0f7a82b5feb79 
HD5  ( L i b /pgp / he L pe r / pgpPa s 5 Ca c h . c ) = 

a64a67eb0b45c2e024f9fa6b2354d656 
HD5  ( L 1 b / pg p / h e I pe r / pg pPa s s C a c h . h ) = 

1fccf89bd96d6fb63a925923daa74e5f 
HD5  ( L i b / pg p / he L pe r / pg p P i pe F i L e . c ) = 

f77fd975ea35f102414b4889eb6ba36a 
HD5  ( I i b / pg p / he L p e r / pg p S t r 2 Key . c ) = 

4d9e0d8d31  6bf 71  965674da1 4d0a91 fa 
HD5  ( L i b / pg p / h e L pe r / pg p S t r 2 Key . h ) = 

743597d4538ba4b4283a611044378d0e 
HD5  ( L i b / pg p / h e L pe r / pg pT i me  Da t e . c ) = 

78b4a9d9fbe0b280cf4e75804a4437d2 
H05  ( L i b / pg p / h e L p e r / pg pT i me D a t e . h ) = 
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51ab97a91d5d0203dc2acabcef377096 
HD5  ( L 1 b / pg p / h e L pe  r / pg pTy p e s . h ) = 

0c489d0b678bb5f1e4ee5bf6c81f3dc0 
HD5  ( L i b / pg p / i n c L ud e / Ma ke f i L e . i n ) = 

8394b05676f84c9cdf1407925e26998d 
MD5  ( L i b / pg p / i n c L u d e /ma  ke  f i L e . m s c ) = 

187151e06aef6ff9d7ddd87af0b5bd5c 
MD5  ( L i b / pg p / i n c L u d e / pg p A n no t a t e . h ) = 

db6fea4d150436e5f364563c821386e8 
MD5  ( M b / pg p / i n c L ud e / pg p C on vKey . h ) = 

f30401f9459f385048c7c54151e991f9 
MD5  ( I i b / pgp / i n c L ude /pg p E r r . h ) = 

fe1a2306a59e92c449e31011a9b376be 
MD5  ( L i b / pg p / 1 n c L u d e / pg pK L udg e . h ) = 

58a013524b73d9b6fe3209c77ab144af 
MD5  ( L i b / p g p / i n c L ud e / p g pM s g . h ) = 

d650101ca2a6dfd5223a03b684c82e1d 
MD5  { L i b / pg p / i n c L ude / pgpP kt By t e . h ) = 

4811beea336f96b28ed8b34267913ed5 
MD5  ( L i b / pg p / i n c L u d e / pg  pU  I . h ) = 

C04d54ff3571dcaa827b5e7006023e34 
MD5  ( L i b/pgp/i nc Lude/pgpUsua  Is  . h ) = 

2ec0738536ce48f76146275f7da66047 
MD5  ( L i b / pg  p / keydb /Ma  ke  f i L e . i n ) = 

3e6e7e3f218689d64d11d28ef429bc3a 
MD5  ( L i b / pg p / ke y db / pg p D ea rmo r . c ) = 

113322fadc29e1 33666901 1c6be0899a 
MD5  ( L i b / pg p / key d b / pg p F 1 L e DB  . c ) = 

ce6a869858575e7e83463bb856faeb1f 
MD5  C L 1 b / pg p / key d b / pg p F i L t e r ed S e t . c ) = 

09626609091 e774c9321b906d63470be 
MD5  ( L i b / pg p / key db / pg p KDB 1 n t . h ) = 

1f8f42a9421 76651 097c 73e12383b7d1 
MD5  ( I i b / pg p / key d b / pg pKey DB  . h ) = 

b2ecfb9f42c637a80d5e010c000c0034 
MD5  ( L i b/ pgp/ keydb/ pgpKey 1 1 e r . c ) = 

be377a292dce79088387af c586c8f 326 
HD5  ( L i b / pg p / key d b / pg p Key L i b . c ) = 

1bfbd45c324897ebd9f1c065ebb2aae2 
MD5  ( L i b / pg p / key db / pg pKey Ha n . c ) = 

ab6316f8ef76e48d579b3a0c95ef1ea1 
MD5  ( L i b / pgp/ key db /pgpKey Se t . c ) = 

3a8cef46559ce4773d63aab5ae2200bc 
HD5  ( L i b/ pgp/ key db/ pgpKey Upd  . c ) = 

072efebc9b9a6bd3c6a81757db4927e3 
MD5  ( L i b / pg p / key d b / pg pM emDB . c } = 

d8aa0cb3f49e62c8430a023756ecdcae 
MD5  (Lib/pgp/keydb/pgpPrefMac.c)  = 

df61bd11d45660fa3dd6d4a58c12de61 
MD5  ( L i b / pg p / key db / pg p P r e f U n i X . c ) = 

6e916d4c1c5423835321fd429a624bc2 
MD5  ( L i b / pg p / key d b / pg p P r e f U n i X . h ) = 

33629bf398fbf2da44e21d5204857edf 
MD5  ( L i b / pg p / key d b / pg p P r e f W i n32  . c ) = 

b05919419e00afcd8faabcd8b25db04b 
MD5  ( L i b/pgp/keydb/pgpPref s . c ) = 

8c1a1d11c8e9fa6e662d745e53354482 
MD5  ( L i b / pg p / key db / pgpP r e f s I n t . h ) = 

[[CHK:85912790518d2364137bb987ccc46650bac4cf8f7b319c85e5caad6c5ec5b3a78IlII 
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3c57459fe46671c011949a801be39ea4 
HD5  ( L i b / pg p / key d b / p g pU n i on DB . c ) = 

f15e3872684e8eaef885b6caae6d4d6d 
MD5  ( L i b / pgp / key s /Ha  kef i L e . i n ) = 

981e6c907f50c3d2ef6a973458cf2c4c 
HD5  C I i b/ pg p/ key s /ma  ke f 1 L e . ms  c ) = 

415a0a771ab446050a77cce0542badad 
MD5  C L i b / pg p / key s / T e s t . c ) = 

0ede10d55047c884d22113244b3c1e81 
HD5  ( L i b / pg p / key s / T e s t Gen  . c ) = 

d9eb09b2270e8b3f cb31 a3948641 5bdf 
MD5  ( L 1 b / pgp / key s / pgpHemPoo L . c ) = 

4cb3d1df7e352d74fa67261 63701 fc31 
MD5  ( I i b / pgp/ key s / pg pMemPoo L . h ) = 

fdaedbca3f24c7440dd62a9944567163 
M05  C L i b / pg p / key  s / pg p R ng  F i L e . c ) = 

a0827cf5c8e4fc5221b6d736c2cd518d 
MD5  (Lib/pgp/keys/pgpRngHnt.c)  = 

4811033d6e23eb7e0f2ba853bd98201b 
MD5  ( I i b/pg p/ key s / pgpRngHn t . h ) = 

2278d7f 877b4d58141 ad8d48877a6340 
MD5  C L i b / pg p / key s / p g p R ng Pa r s . c ) = 

519739b021 46e21 89d8dd656e2b4beae 
HD5  ( L i b / pg p / key s / pg p Rng Pa r s . h ) = 

5827bba7e2a783fd4883e98a32a66e05 
HD5  ( L 1 b/ pgp/ key s / pgpRng Pkt . c ) = 

e0ba55c9220d01af729bebb24421cb4e 
MD5  ( L i b / pg p / key s / pg p Rng P k t . h ) = 

b36794af cc394588a836cc963957f c2c 
HD5  ( L i b/pgp / key s / pg pRng Pr i V . c ) = 

79d44fbf2082fe1bb315c139ca37e8a7 
MD5  ( L i b / pgp / key s / pg p Rn g P r i V . h ) = 

a850d3ee64d554785c4354be0835b5c7 
HD5  ( L i b / pg p / key s / pg p Rng Pub  . c ) = 

e0abdc9fb46889a7252bd749ab15aaec 
HD5  ( L i b /pgp / key s /pg pRngPub . h ) = 

f a56d83944e5d502aaea9435be5866c9 
MD5  ( L i b / pg p / key s / pg p Rng Read . c } = 

ee48234e155ea250ce11997de59fdfb9 
HD5  ( L i b/ pgp/ key s / pgpRng Read . h ) = 

933a6baf5d8a667848232efafecfedbf 
HD5  ( L i b / pg p / key s / pg p Rng V i e w . c ) = 

f4db18ea0cb619c5d727f2d83ffc0481 
HD5  ( L i b / pg p / key s / pg p Rng W r i t . c ) = 

9bfe3046ffba0cce0b4fb0f29f826940 
HD5  ( I i b/pgp/ key s / pg pT rs t Pk t . c ) = 

464674733a20ec1 1 1d35efda110cb19a 
HD5  ( I i b / pg p / key  s / pg pT  r s t P k t . h ) = 

f352f2a1c75e8de2cd1a4c5b0bb0bcbe 
MD5  ( M b / pg p / key s / pg pT r u s t . c ) = 

a3a79ce6a2bbf dd67af 98cf 57308b4e9 
MD5  ( L i b / pg p / key s / pg pT ru s t . h ) = 

79d49692d1267ebf0ec8fb238b626915 
HD5  ( L i b / pg p / p i pe  / Ma  ke f i L e . i n ) = 

20823b4ec66628c7027ba376c74cf0f3 
HD5  ( L i b / pg p / p i pe  / ma  ke f i 1. e . ms  c ) = 

5819711fc62e684f0c077221f14cb4cc 
MD5  ( L i b / pg p / p i p e / c ry  p t / Ma  ke  f i L e . i n ) = 

n:CHK:d435fa5b00caa4d4aec30d2d8b9123054078a3bcb42c6c39a09de6a45498bed40]] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


xlvii 


HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( Li 

HD5 

( L 1 

HD5 

( L i 

HD5 

( L i 

HD5 

C L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

(Li 

HD5 

( L i 

HD5 

(Li 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

(Li 

HD5 

( Li 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

( L i 

HD5 

(Li 

HD5 

( L i 

934b38048776e873101177ac4519a26a 
b / pgp / p i pe / c ryp t /ma ke f i L e . ms c ) = 
9eecb11c77c52a60ba810de925d14c19 
b/pgp/pipe/crypt/pgpCiphrHod.c)  = 
9d4b556a9354a1f7f06e869b924b1b51 
b/pgp/pipe/crypt/pgpCiphrMod.h)  = 
b36e06ec536cc17c144470dffce06ab6 
b / pg p / p i p e / c ry p t / pg p C o n vMod  . c ) = 
2d49b736c0a9af6a09a76847dd039cc2 
b / pg p / p i pe / c ry p t / pg p C o n vMod . h ) = 
34fd7a04e75d01558a4407683398be4d 
b / pgp /p i pe / c ry pt / pg pMa kePKE . c ) = 
ef9d015bee3ad9be447fc3835d32535b 
b / pg p / p i p e / c r y p t / pg pMa ke PKE . h ) = 
8132dce9da7e2c37bac461b6f0ab562d 
b / pg  p / p i p e / c r y p t / pg p PKEHod  . c ) = 
4d950a491b64d73cb9ed14769cfd78f6 
b / pgp / p 1 pe / c ry p t / pgpPKEMod . h ) = 
4835c0b6d1d9557c9f7d0be307772a44 
b / pg p / p i pe / f i L e / Ha ke f i L e . i n ) = 
493d170399e45dd4294aad6c7e8ceb10 
b / pg p / p i p e / f i L e /ma  k e f i L e . ms  c ) = 
b0e55184e9d4b03d71a0e9a40d20cf43 
b / pg p / p i p e / f i L e / pg p A r mo r . c ) = 
66bce7f330a801caf9f2f8e07469cef4 
b / pg p / p i pe / f i L e / pg p A r mo r . h ) = 
26395b656cacc7fc454ca3a6fe5 43085 
b / pgp / p i pe / f i I e / pgpA rm r F i L . c ) = 

61 662cf08a1a27759fa60132f01 1885b 
b / pg p / p i p e / f 1 L e / pg p A r m r F i L . h ) = 
f3fbec8675823f9fa7538c9190f9bfe1 
b / pg p / p i p e / f i L e / pg  p C R C . c ) = 
80d4f0b3bd29f0fecaa0fcbd81e4c4c7 
b / pg p / p i p e / f i I e / pg p C R C . h ) = 
857aee566bf70b3a65d5f65256a1912e 
b / pgp/ p i pe / f i L e / pgp F i L eHod . c ) = 
be04309f22f528a40a8b2994de6f02f3 
b / pg  p / p i pe  / f i L e / pg p F i L eHod  . h ) = 

2 76994247385 ee40e29ceea1 1 06aeb1 5 
b / pg p / p i pe / f i L e / pg pH ea de r . c ) = 
b15bd863dc49782f94d41fb85509d784 
b / pgp / p i pe / f i I e / pgpHeade r . h ) = 
1aeb8a0f5386d2d1d5540aca2667f74a 
b / pg p / p i p e / f i L e / pg pP r s A s c . c ) = 
d73e4e5d54c95e5150b870edd45886ac 
b / pg p / p i p e / f 1 L e / pg pP r s A s c . h ) = 
4749dbc5f772d26f2722477c0493a8b6 
b / pg p / p i p e / f i L e / pg pRa d i x64  . c ) = 
1cd15c73133cdc96c6c9483d2ef32726 
b / pgp/p  i pe / f i L e /pg pRad i x64 . h ) = 
842bf69552e3cea7306462bafb0489b3 
b / pgp/p  i pe / pa r s e r /Ha ke f i L e . i n ) = 
d0fe5df55ac78a093980e0b4dfdf73f5 
b/pgp/pipe/parser/makefi Le.msc)  = 
a6adfbebb094fae2563c027d10e851fd 
b / pgp/ p i pe / pa r s e r / pg pP r sBi n . c ) = 
61e427ce0c3a738d4b638cf38a4af17a 
b / pg p / p i p e / pa  r s e r / pg  p P r s B i n . h ) = 
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5d761acda35b6b38c9b36d53c8df2854 
HD5  ( L i b / pg  p / p i p e / pa  r s e r / pg  p Re  a d Ann  . c ) = 

C3eedf14d7ec4d8537b42c249296c62a 
MD5  ( L i b / pgp / pi pe / pa r s e r / pgpRea d Ann  . h ) = 

061821dc4528a56897392a2ec744e660 
MD5  ( L i b /pgp/p i pe / pa rs e r /pgpVe r i f y Ra  . c ) = 
9974d0ee5dd11f4bfa5718be52ce7947 
MD5  ( I i b / pg p / p i pe / pa r s e r / pg p Ve r i f y Ra . h ) = 
2b711e705db82d4acde50ef230d11187 
MD5  ( L i b /pgp/ p i pe / pa  r s e r /pgpV r f y S i g . c ) = 

75ce7072b1f4da419e07f0c5ae2b368e 
HD5  ( L i b / pg p / p i pe / pa r s e r / pg p V r f y S i g . h ) = 

6cfcdc75e8a70185e24a803d9e51a603 
MD5  (Lib/pgp/pipe/sig/HakefiLe.in)  = 

54dc014fc75bf7a08f3c424f16ff2de2 
M05  C L i b / pg p / p i pe / s i g / ma ke f i L e . ms c ) = 

b45261ab2b763de75b1ee663cffefffb 
MD5  ( L i b / pg p / p i p e / s i g / pg p Ha s h Mod  . c ) = 

d7e23d3a60f63fdf9bddb6399307c9f1 
HD5  ( L i b / pg p / p i p e / s i g / pg p H a s h Mod  . h ) = 

53662e1 9a30e89b02eb241 061 b2f a3b0 
MD5  ( L i b / pg p / p i pe / s i g / pg pS i g Mod  . c ) = 

186d1b5062f863d6f1335bc16f03c062 
MD5  ( L i b / pg p / p i pe / s i g / pg p S i g Mo d . h ) = 

1 45627791 2ac461b3feb880f918047c5 
MD5  ( I i b/pgp /p i pe / t ex t / Ma kef i L e . i n ) = 

ba57ca51fda313622c310be1fbe23113 
MD5  ( L i b / pg p / p i pe  / 1 e X t / ma  ke f i L e . ms  c ) = 

C82a5da5adf54cb46b8b3c4429fa2cc3 
MD5  ( L i b / pgp / p i pe / t ex t / pgpCompMod . c ) = 

88a189fa1e5f1b6556f8f4bb5dd08f95 
MD5  ( I i b / pg p / p i p e / t ex t / pg p C ompMod  . h ) = 

0d924fbb77bc928fb52d535094ea2866 
MD5  ( L i b/pgp/pi pe/ text /pgpDef Mod  . c ) = 

a2a943cfb6f37ce6f9106ed8d6921d9a 
MD5  ( L i b / pg p / p i pe / 1 e X t / pg p De f Mod . h ) = 

24201  5d11e061b6e465201  2bf714d 109 
MD5  ( L i b/pgp/ p i pe / 1 ex t / pgpl nf Mod  . c ) = 

095d59f 4d 5 4b4dd9f 093 b75 06749609c 
MD5  C L i b / pg p / p i pe / t e X t / pg p I n f Mod  . h ) = 

e758569f4282824e61b291d3e80fc7ef 
MD5  ( L i b/pgp/p i pe / t ex t /pgpLi t e ra L . c ) = 

Ca66739c1f2025336f389be0f06da8f9 
MD5  ( L i b / pg p / p i pe / 1 e X t / pg p L i t e ra L . h ) = 

2a22899b6004724ecdcccc659209c16c 
MD5  ( L i b /pgp/ p i pe / 1 ex t / pgpTex t F i 1 1 . c ) = 
e6703f 4e2f 01 21 87c31 f 7e9ad634e3e0 
MD5  ( L i b / pg p / p i pe / t e X t / pg pTex t F i L t . h ) = 

338d0032e981383d2d25b6b90083e944 
MD5  ( L i b/pgp /p i pe / 1 ex t / pgpZB i t s . c ) = 

cc1942989043abbc1dd1ef7640597002 
MD5  ( L i b/pgp/p i pe / 1 ex t / pgpZ De f L a t e . c ) = 

948d09d15539e9c2185aa462078dbe05 
MD5  ( L i b /pgp/ p i pe / 1 ex t / pgpZMa t c h . a sm ) = 
b5dc1b289852b0cc2181bdf0eb5c65f0 
MD5  ( L i b / pgp / p i pe / t ex t / pg pZTa i L o r . h ) = 

abb267eb9362bed8511e00a003836229 
HD5  ( L i b/ pgp / p i pe / t ex t / pgpZT r ee s . c ) = 
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e23c0a31c3a27b33e57bc6d3b35c02b3 
MD5  ( L i b / pgp /p i pe / t ex t / pg p Z i p . h ) = 

a0e9b3a839d39d1a25c25fc4179a5eef 
MD5  ( L i b / pg p / p i p e / u t i L s / Ma ke f i L e . i n ) = 

794e9364d6c54856a665bec6ff001aaf 
MD5  (Lib/pgp/pipe/utils/makefiLe.msc)  = 
ead03138a4f9ca17f6252a29ede3ecbe 
MD5  ( L i b / pg p / p i pe  / u t i L s / pg p Ad d Hd  r . c ) = 

0ef0b6da9f098e42165fe920f40b32bc 
MD5  ( L i b / pgp / p i pe / u t i L s / pg p AddHd r . h ) = 

7be033484ae8c9792779207bec4fab4d 
MD5  ( L i b / pg p / p i p e / u t i L s / pg pBu f Mod  . c ) = 

78cbdb768f69df148cb5192f6327e636 
MD5  C L 1 b / pg p / p i p e / u t i I s / pg pBu f Mod . h ) = 

8698a46b1d79e4016d955fc74af2a8e1 
MD5  ( L i b / pgp / p i pe / u t i L s /pgpCopyMod  . c ) = 

Cl77f83c130b462e6de2529598606f94 
MD5  ( L i b / pg p / p i pe / u t i L s / p g p C opy Mod . h ) = 
f6620abfd34304752a8ad6044049c1aa 
MD5  ( L i b / pgp /p i pe / u t i L s /pg pDe vNu L I . c ) = 

477a621b64b13ae26caa610a3a8df94c 
MD5  ( I i b / pgp / p i pe / u t i I s /pgpDe vNu L L . h ) = 

2052e4adc931 f20e65 5034a c6028d8e0 
MD5  ( I i b / pg p / p 1 pe  / u t i L s / pg p J o i n . c ) = 

bc31229d0b112f7c081a1d9abd04afd6 
MD5  ( L i b / pgp/ p i pe / u t i L s / pgp J o i n . h ) = 

989949ea8bf283fda1b7f492b06d1f26 
MD5  ( L i b / pgp / p i pe / u t i L s / pg pMemHod . c ) = 

27c42f9b7af37f5702cda692106ab33d 
MD5  ( L i b / pg p /pi pe  / u t i L s / pg pMemMod . h ) = 

50f2698a7a2e6042f69c35d5df70f541 
MD5  ( L i b / pg p / p i p e / u t i L s / pg p P i pe L i n e . h ) = 
e779c54cc62d8dcf 33dac37f b1 1 eecaS 
MD5  ( L i b / pg p / p i pe / u t i L s / pg p P ro t oMod . c ) = 

9bd710c28ff1ab176c17b4acb148950f 
MD5  ( L i b / pgp/ p i pe / u t i L s / pgpRo 1 1 3Mod . c ) = 
f525dbaf5982c57ef48b311a5b221e18 
MD5  ( L i b / pg p / p i pe  / u t i L s / pg pRo  1 1 3Mod  . h ) = 

Cbca4378f429fe366a1c9b9224d68195 
MD5  (Lib/pgp/pipe/utiLs/pgpSpLit.c)  = 

98818af45a3375c651ea9db13d5e3a50 
MD5  ( L i b / pgp /p i pe / u t i L s /pg pSp L i t . h ) = 

78740ce4d645e2975dd692a3245316d1 
MD5  ( L i b / pg  p / pu b key  / Ha  ke f i L e . i n ) = 

aa0f707ef72a3c99dac49426d752b72b 
HD5  ( L 1 b /pg  p / pub  key /ma  kef  i L e . ms  c ) = 

2af ab063ae9859d7f 851 f 4a35c70c4b6 
MD5  ( L i b / pg p / pu b k ey  / pg  p A L t R S AG  L u . c ) = 

42f63c68e810de5ebc9cef9a9ae9bc4b 
MD5  ( L i b / pg p / p u b key / pg p D S AKey . c ) = 

f91e8634d6de202901 58651 1d061a8dc 
MD5  ( L i b / pg p / p u b key / pg p D S AKey . h ) = 

6cee9dad6b86af928c13e7d472aed25d 
MD5  ( L i b / pgp / pub  key / pgpE SK . c ) = 

3ae3183e6da632dcc94b911d96e7aa94 
MD5  ( L i b / pgp/ pub  key / pgpE SK . h ) = 

e0f0e635ad94f20ae6c4208daa825eca 
MD5  ( L i b / pg p / pub  key  / pg p E L GKey . c ) = 
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521d26375270c6e1c6ce56140121afb1 
MD5  ( L i b / pg p / p ub key / pg p E L GKey . h ) = 

54c5a98d199a809c1f5fb6083932ee03 
MD5  ( L i b / pg p / pu b key / pg p F 1 X ed Key . c ) = 

fbc2d926a02f0c3593314d26a7d39274 
MD5  ( L i b / pg p / p ub key / pg p F i xedKe y . h ) = 

1850de44f3064872080aef888ffc0089 
MD5  ( L i b/pgp/pubkey/pgpKeyMi sc . c ) = 

98f0e29f56d84fa6f81542e67436337e 
MD5  ( L i b / pg p / pub ke y / pg pKey M i s c . h ) = 

64eb3483397d121191d31628ab3809c5 
MD5  ( L i b / pg p / p ub key / pg pKey S pe c . c ) = 

3faf28b1d2843b2cffedecc4236de3f1 
MD5  ( L i b / pg p / pu b key / pg pKey S pe c . h ) = 

bd3e3c7518667317624e222a3ba62831 
MD5  ( L i b /pgp /pubkey / pgpMa keS i g . c ) = 

995464c5f 6f 5de86849cc8f 433bb7c75 
MD5  ( I i b / pg p / p ub key / pg pMa ke S i g . h ) = 

1c57b5ec6bdeb61d413aeee1e02a6844 
MD5  ( L 1 b / pg p / pub  key / pg pP k t L i s t . c ) = 

96789ed17ebb5032023c1fb24b380db1 
MD5  ( L i b /pgp /pub  key /pgpPk t Li s t . h ) = 

e48b0e1b4974cb8e5caacbf451724b6b 
MD5  ( L i b / pg p / pu b key / pg p Pu bKey . c ) = 

16320df48254183ff264380c80acb42c 
HD5  ( L i b / pg p / p ub key / pg p Pu bKey . h ) = 

e29b6dba90a0bdfc00bbf1bbd92b07ed 
HD5  ( L i b/ pgp / pub  key / pgpRS AKey . c ) = 

dcff2c5b8efce3891500963a848d2e95 
MD5  ( L i b / pg p / pu b key / pg pR S AG L ue . h ) = 

7eb004590d95e1f59fa914bf1b4ae2c2 
MD5  ( L i b /pgp /pubkey / pgpRS AG L uel . c ) = 

53894ce2c81 e9d274f4e7a 0a b61 83744 
MD5  ( L i b / pg p / pub  key / pg pR S AG L ue 2 . c ) = 

0f3cdcecfd11967a9e855a61064a9f48 
MD5  ( Li b / pg p / pub ke y / pg p R S AKey . h ) = 

e24648ed3c4fd737b59dbb0be0e4d870 
HD5  ( L i b / pgp / pub  key / pg pRS AKey Ge n . c ) = 

0a1fefcf639f499bedb45c7ed21288fa 
HD5  ( L i b / pg p / pub  key / pg p S i g . c ) = 

b130c71216bba5fc61a38f91ab49ee5d 
HD5  ( L i b / pg p / pu b key / pg pS i g . h ) = 

7e28422d3a5b12f9d0d6fc143142b6f1 
MD5  ( L i b/pgp/ ra ndom/Ma kef i L e . i n ) = 

ffdbcc1a08ef2a1a98f3299c6be450dc 
MD5  ( L i b / pg p / ra n dom / ma ke f i L e . ms c ) = 

5 73a d68da 493037 5a 5bbde4 cl  33765 b8 
HD5  ( L i b / pg p / ra ndom / pg pRnd . h ) = 

69022f e4d5b1 be4c9e481cd82a29a53b 
HD5  C L i b / pgp / r a ndom / pg pRnd E vn t . c ) = 

ead123b2db9f21675a9e4b9015fae52f 
MD5  ( L i b / pg p / r a nd om / pg pR ndMS DO S . c ) = 

69766d2457f664667ce6974f0f683586 
MD5  ( L i b / pg p / r a ndom/ pg pRndMa c . c ) = 

b064907dfe4d1a31aba2224bd44f8efd 
MD5  ( L i b / pg p / r a ndom / pg p Rnd Poo L . c ) = 

2a39eda9040660f b938cdb794abdf 1 c5 
MD5  ( L i b / pg p / r a n dom / pg p Rnd Poo L . h ) = 
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bc9b0624cff99af5a06e9d29f86176be 
MD5  ( L i b / pg p / r a n dom / p g pR nd S e e d . c ) = 

bcee1435f647b92a61cfc9fa09ad4999 
MD5  ( L i b / pg p / ra nd om / pg p Rn d S e e d . h ) = 

505775bed6b746d9b62991d97c8a34d5 
MD5  ( L i b / p g p / r a n dom / pg p R nd U n i X . c ) = 

9c655e7392aff575f051e114b0dc6ff5 
MD5  ( L i b / pg p / r a n d om/ pg p Rn dVM S . c ) = 

ea2e5f999a2d6127fe923c6321be7399 
MD5  ( I i b / pg p / ra nd om / pg p Rn d W i n 3 2 . c ) = 

737b3f59d2649f2b71ed943cfc9073c6 
MD5  ( L i b / pg p / r a n dom / pg p R nd om . c ) = 

e428080cef627115a7ddf9f87e275f78 
MD5  ( L i b / pgp/ ra ndom/pg pRndom . h ) = 

f027789e1efad0fe0b6018fa2b3634ae 
MD5  ( I i b / pg p / u t i L s / Ma  ke  f i L e . i n ) = 

b262a8a628e2d1 11 29651 892692f7e01 
MD5  ( L i b / pg  p / u t i L s /ma  ke  f i L e . ms  c ) = 

4d6d2505b9dfd19a72c430b19fd6ea89 
MD5  ( L i b / pg p / u t i L s / pg p C on f . c ) = 

2077421 146bec7f6bf3012ea3753b710 
MD5  C L i b / pg p / u t i L s / p g p C on f . h ) = 

40068cb51c3490b8eb768b5997ad2a72 
MD5  ( L 1 b/pgp/ut i L s /pgpDecPi pe . c ) = 

2ffa98ec4e21dff45a4b7ab56c526bb7 
MD5  ( L i b / pg p / u t i L s / pg p D e c P i pe  . h ) = 

cd961eb26f07e53ecfdecd5733e60030 
HD5  ( L i b/ pgp/u t i L s / pgp En c Pi pe  . c ) = 

1108928fcdfcfa66fba26a457891762b 
MD5  ( L i b / pg  p / u t i L s / pg p E n c P i p e . h ) = 

ade9439767b45b57f698fb04b2a39667 
MD5  ( L i b / pg p / u 1 1 L s / pg p E n V . c ) = 

daf8d8aef0f3e086a578ab89085b42ac 
HD5  ( L i b /pgp/u t i L s / pg p Env  . h ) = 

3c88cef75355ea834169219c6c7ea8e1 
MD5  ( L i b / pg p / u t i L s / pg p F i L eTy pe  . c ) = 

dacd5c4024a6cdae2095cfaf6b8cfc6f 
M05  ( I i b / pg  p / u t i L s / p g p F 1 L eTy  pe  . h ) = 

35b221387270582f5a8f703a609e5d51 
MD5  ( L i b / pgp/u t i L s / pg pS i g Pi pe . c ) = 

674c76255ab0cfcf98b9614b78b8d2de 
MD5  C L i b / pgp/u t i L s / pg pS  i g P i pe  . h ) = 

71f07571ef1e93da2399110da9690151 
MD5  ( L i b / pgp /u t i L s / pg pS  i g Spe c . c ) = 

428b70e13144539f915982beadd0bbc6 
MD5  ( I i b / pgp /u t i L s / pgpS i g Spe c . h ) = 

d240d9609c2271b9d6e0a6449b7e5574 
MD5  ( L i b / s i mp  I e / Ma  ke f i L e . i n ) = 

1cf7f6415e30ae52a641d643fb4962e4 
MD5  ( L i b / s i mp  L e / s pg p . h ) = 

2f50bbabfc95b15a1fa066271693fe02 
MD5  { L i b / s i mp L e / s pg p ABu f . c ) = 

d07332f41a0311d8fea1e6a31ab18e08 
MD5  ( L i b / s i mp L e / s pg p A F i L e . c ) = 

8a8c53df8de103e7d641ab93c674cdee 
MD5  ( I i b / s i mp L e / spgp AddK . c ) = 

a1e603ef9bbce6681ec097397030b9fc 
MD5  ( L i b / s i mp L e / s p g p C h k R . c ) = 
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2dbddac37a7cf7afb5c404c31a6ee6f4 
MD5  ( L i b / s i mp L e / s pg p E B u f . c ) = 

d215fda1efb845ae99dc211dff41a294 
MD5  ( L i b / s i mp L e / s pgp E F i L e . c ) = 

0c05882e9-f6c51a1d6521  0445b77c597 
MD5  ( L i b / s i mp L e / s pg p E X t K . c ) = 

f127817b753c76902e896792c8b06acf 
MD5  ( L i b / s i mp L e / s pg p N Key . c ) = 

2f299aaef056800cc330e183dbc06d59 
MD5  ( L i b / s i mp I e / spg pRBuf . c ) = 

59f f 9669b9f 8da1 524f dbcf ab27e0241 
MD5  C L i b / s i mp L e / s pg p R F i L e . c ) = 

979b585e488d1 0368a06b8bf 84b68f 81 
HD5  (Lib/simpLe/spgpRNG.c)  = 

477ecdaaccc88af0f1adefa7ca2bef74 
MD5  ( L i b / s i mp L e / s pg p S Bu f . c ) = 

5be674466987752333d052fdf48acce1 
MD5  ( L i b / s i mp  I e / s pg p S F i L e . c ) = 

924b61ba1cb00229f18ffa2ed4f0121d 
HD5  ( L i b / s i mp L e / s pgp VBu f . c ) = 

ee90936962c46d0ee453ba61ee7c4129 
MD5  ( L i b / s i mp L e / s pg p V F i L e . c ) = 

2a7cf97afc7799a47e439286e13ac54d 
MD5  ( L i b / s i mp I e / s pg pbu f . c ) = 

f8ebbfe93602f55e41aecdfafb2385d5 
MD5  ( I i b / s i mp  L e / spgpca  L t.  ba c k . c ) = 

C85758bcb09de7a36cb7488b55a69cf0 
HD5  C L i b / s i mp L e / s pg pd ea rmo r . c ) = 

ee44866db6d186af62422d7acec0622a 
HD5  ( L i b / s i mp L e / s pg pde c ryp t . c ) = 

f1b37d63005b4efe6ec24fd2aa69f3bf 
HD5  ( L i b / s i mp L e / s pg p i n i t . c ) = 

2d9d41d715311ddc18ce776100919132 
MD5  ( L i b/ s i mp I e / spgp i n t . h ) = 

306ed18cd130709a8891ca681572ec34 
MD5  ( I i b / s i mp L e / s pg p r i ng  . c ) = 

C7b746d3837559e1de81 d1 2f 372f a74e 
MD5  ( L i b / s i mp L e / s pg p k c h e c k . c } = 

0aace06c806418a6b8cece8fd8b44d0c 
HD5  ( L i b / s i mp L e / s pgpname 1 d8 . c ) = 

81  e57a6220103026608ba01  19357cc1 3 
MD5  C L i b / s i mp L e / s pg p re c I i s t . c ) = 

23dbdeeb76df3adcc6c4f3d2cc414ce2 
MD5  ( L i b/ s i mp L e / spgps i gne r . c ) = 

76118fafe8dac079701f31315b0717f4 
MD5  ( L 1 b / s i mp I e / s pg p t ex t . c ) = 

6a651  1 05347cd7069aef f 6538e84934c 
HD5  ( L i b / s i mp L e / 1 e s t . c ) = 

eb4f 0743608242d4f 9857de8f e561 898 
HD5  ( L i b / 1 1 y u i / Ma ke f i L e . i n ) = 

51886c1423d49ff4e891d747ee6fe74f 
MD5  ( L i b / 1 1 y u i / ma ke f i L e . ms c ) = 

93a67afbb66fc646971728e388159b95 
MD5  ( L i b / 1 1 y u i / pg p KB . h ) = 

aab34b700b0cd67e8ae3c5c5980f4abd 
MD5  ( L i b / 1 1 y u i / pg p KBM S 0 0 S . c ) = 

f671d85f54459b1fb0d14ae1  2021  8779 
MD5  ( I i b / 1 1 y u 1 / pg pKBMa c . c ) = 
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fc9ea041ea57fa4d17702a7169b76b4b 
HD5  ( L i b / t t y u i / p g p KBU n i X . c ) = 

8041 000031 23f3d7c603923da654a1 10 
MD5  ( L i b/ttyui /pgpMoreMod . c ) = 

fa67470a7b2faca9e4f8e1b34febfaed 
MD5  ( L i b / 1 1 y u i / pg pMo r e Mod  . h ) = 

9862e09986488601dc82796e842dfbbe 
MD5  ( I i b / 1 1 y u i / pg p PO S I X . h ) = 

ec17a89e799e965a47fd8bde8912a22b 
MD5  ( L i b/ttyui /pgpRi ngUI . c ) = 

a3f23c66e7053467b8375a2703e87dfc 
MD5  ( L i b / 1 1 y u i / pg p R i ng U I . h ) = 

4d3593184c22d82fdc1e883048fbe97c 
MD5  ( L i b / 1 1 y u i / pg pS c rHS DOS . c ) = 

efc4ff9ad3ae4042aa9ec19a46416f52 
MD5  ( I i b / 1 1 y u i / pg p S c r Ma c . c ) = 

53dcbab34734fc5993bb248c97825ef4 
MD5  ( L i b / 1 1 y u i / pg p S c r U n i X . c ) = 

a4616b684c8a1e04406568435b84698c 
MD5  ( L i b/ 1 1 y u i / pg pS c reen . h ) = 

dbb4c22122ec544ff0a8cfcbeac188f4 
MD5  ( L i b / 1 1 y u i / pg pU s e r 1 0 . c ) = 

4848b9966caab82c7442824e9e4ce4c9 
MD5  ( L i b / 1 1 y u i / pgpUse r I 0 . h ) = 

02dfe90c8efda7b86877f6cd2b6cfc8a 
MD5  (README)  = 

98512e6215510c58cca416ccb98d519c 
MD5  CTODO)  = 

14d93570773aaf9204bebab62ab6030e 
MD5  (buiLd.bat)  = 

4b41d418aead0c5a5af7f955b9e1ed6b 
MD5  (cLean.bat)  = 

77fae840383069cb07a9c9ac384a154f 
MD5  ( mkhd rs . ba t ) = 

f31d6e2252744212e47761 33461 eb8bf 
MD5  (reLease.bat)  = 

1 34bcc9d961 673b30c52ebb949d34064 
MD5  ( ma ke-mkh d r s . p L ) = 

5e8fb9f3a5a0f377459762578755eec9 
MD5  ClibbuiLd.bat)  = 

1c5bf1b30d07d46db324b80afe379821 
MD5  ( Ma ke f i L e . i n ) = 

cedcf29175df0bdab7cad224cf681aa4 
MD5  (acLocal.m4)  = 

5cc5dcc774d6018f1600ab6314f5dc7c 
MD5  (config.h.in)  = 

Ca8307a6b353c57471386a4a0a606e85 
MD5  ( c on f i g_ w i n3 2 . h ) = 

a15a48d9a0cd9169dbb4592c2717b3ba 
MD5  C conf i gu re . i n ) = 

723fc029df80bdac46e2b5278a1a7302 
MD5  ( ma kef i L e . ms c ) = 

b761a73aefb26d588b921ac0f61dc6b1 
MD5  ( c o n f i g / c on f i g . g u e s s ) = 

805f7716d506388d8d7d0982ab9365b9 
MD5  ( c onf i g / c onf i g . su b ) = 

73f3f01  efa8befcd5a51 1 dca3e8bac60 
MD5  ( conf i g / i n s t a L L -s h ) = 

[:CHK:598de53921586c482961a399e2c80029e0a5a623efd5fc9a38475d3f018b5e82f:] 
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7eb52b130235a5f8bd9949632a62ae3c 
MD5  ( conf i g /pos t . i n ) = 

0a02dfe3d463830a09f58c9f27d8aa43 
HD5  ( corrf  i g / p re  . i n ) = 

89e8641d7f5fffcab3857683354dd428 
MD5  ( a pp s / c ommon / Ma ke f i L e . i n ) = 

d5d7a59ca10a139c5c892c4b8a2ddc06 
HD5  ( a pp s / c ommon / ma ke f i L e . ms c ) = 

3a8b82fb46dd3ef585b5d9cc558dcdb8 
MD5  ( a p p s / c ommo n / pg p App F i L e . c } = 

f2b15ee0a33a4db75f1783346cc32911 
MD5  ( a pp s / c ommon / pg p App F i L e . h ) = 

61eaaa6609ac57655c23391a2fc480eb 
HD5  ( a pp s / c ommon / pg p E X i t . c ) = 

1cc07f2111f67614182c69172cf3917f 
HD5  ( a p p s / c ommo n / pg p Ex i t . h ) = 

237ace0607530e308787fdb80213ca9f 
MD5  ( a pp s / c ommon / pg p 1 n i t App . c > = 

652df8cc7b7b18e743fa1 5401 9f2c 807 
HD5  ( a pps / common / pgp I n i t App . h ) = 

f5a0b5074b27a2e6c34bdac0f3c1de74 
HD5  ( a p p s / c ommo n / pg pKey R i ng s . c ) = 

382d13a3d5eb01ad508a7c80f16588b0 
MD5  ( a p p s / c ommo n / pg pKey R i n g s . h ) = 

76b35544b3f b5dc984487bd9037989bf 
MD5  ( a pp s / c ommon / pg pOp t . c } = 

39241 d3562304612cbce15a9194078a0 
MD5  ( a pp s / c ommon / pg pOp t . h ) = 

ef f 67799004e57b0ea21 aa798f a4d5bb 
MD5  ( a pp s / Ha ke f i L e . i n ) = 

1d6e4c868e648c8bfa4b690daa3a4f7b 
HD5  C a pp s /ma kef i L e . ms c ) = 

66e5f b773e6ee92a1 1 494e1dfc06c2a2 
HD5  C a pp s / pg p / Ma ke f i L e . i n ) = 

e4654296f 4b5f 8c18567a37a41 f 37360 
MD5  ( a pps /pgp/ pa rs ea rg . c ) = 

40dc8f77c2ffbeabfd5a 70938a 48bd85 
HD5  ( a pps / pgp / pa r sea rg . h ) = 

777da1dbd57037ce508b8e37cdf 502c9 
MD5  ( a pp s / pg p / pa s s . h ) = 

78c5c5c46fc0876aeb42ca3b496b67cf 
HD5  ( a pps /pgp / pgp . c > = 

1e7489265c89bbedf07bffe049fae753 
HD5  ( a pp s / pg p k / Ha ke f i L e . i n ) = 

2c87b32d7424659dfbe4b808b1 f bf d34 
MD5  Capps/pgpk/keyserver  . c)  = 

01620a89823afa2bc3c3af7806e98d4f 
MD5  ( a pp s / pg p k / key s e r ve r . h ) = 

84659b8642b467f 99c945d33b6e70ae7 
HD5  ( a pps / pgp k/ pa s s . h } = 

7d5542f 3aeee3b4351 3b9f bb3bd3c730 
HD5  ( a pps / pgp k/ pgp k . c ) = 

Cfba80d0eabb7f9e8718b4788b0b7076 
MD5  ( a pp s /pgp k/ pgp kEx i t . c } = 

a6a4c35b47a6469dedadada26c1c638f 
MD5  ( a pps /pgpk/pgp kEx i t . h ) = 

317f365dbd6f8e923a7f3adad81a1597 
M05  ( a pps / pgp k/ pgp kl n i t . c ) = 

[;CCHK:e9ee80a6832343df6a63fbecfa08c2ecc3c5a408927fae7e432fb93d3176aa6fd]: 
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1ffb1a58f3b8a2dc51e4323dcb9f2df1 
MD5  ( a pps /pg p k/pgpkl n i t . h ) = 

5df584b454746e3a063f481b32b4ec8e 
MD5  ( a pp s / pg p k / pg p kKey Ge n . c ) = 

ef68de989a6250b2bb513668a4fe8edd 
MD5  ( apps/pgpk/pgpkKeyGen . h ) = 

b4086ccfca65ce63e4ec847ff93cda0e 
MD5  ( a pp s / pg p k / pg p kU I . c ) = 

5f4eead2f5fdee74ce80a817e33b3998 
MD5  ( a pps / pgp k / pgp kU I . h ) = 

ba870890c355ce956d5b1aadb866e093 
MD5  ( a p p s / pg p k / u r L . c ) = 

3a17f08264d64a80145a28dde592c10b 
HD5  ( a pp s / pg p k / u r L . h ) = 

00f5e3bcac55d5ee171208d4c0c9c00d 
MD5  ( a pps / pgp k . 0 I d /Ha ke f i L e . i n ) = 

43e544c85511790e208e3e83c49d0161 
MD5  ( a pps /pgp k . o L d /ma ke f i L e . ms c ) = 

4c6b11cc7815e25dc33a853fb8cfaade 
MD5  ( a pp s / pg p k . o I d / pg p k . c ) = 

9e3ca5eefebceb27c65e36955fb44df6 
HD5  ( ma n / Ma ke f i L e . i n ) = 

6814b0a74a5b91d9fa56707afbf7bcab 
MD5  (man/pgp.1)  = 

1 401 0a4ddc681 43883668c78c1 caeb1 e 
MD5  ( ma n / pgp . c f g . 5 ) = 

1bccded63227db9f2b59e1f6f907d647 
MD5  (man/pgpe.1)  = 

a5cfd5b47bcd6a949844bd08a8030614 
MD5  Cman/pgpk.1)  = 

4797f8581e4047d7e1d96533b54e7f72 
MD5  Cman/pgps.1)  = 

d4461f1b780c3d7c5db8726c7201c17b 
MD5  (man/pgpv.1)  = 

b27af677d86eff75df35ecf43c09e105 
HD5  ( b i n a r i e s . u u e ) = 

8dff7f9eedce098963de0d5ee765fa0c 

BEGIN  PGP  SIGNATURE 

Version:  PGP  for  Personal  Privacy  5.0 
Charset : noconv 

iQA/AwUBM6IxRxe2aTQFJUGbEaKykwCgrxnUZgFu+SxCA5W03teKi3JIgOYAn3JB 
t1vA6Ur5TV+2QbyS8Lcfx737 
= r YZ2 

END  PGP  SIGNATURE 


IICCHK:4a156c365ef67df10ca366b6ba8ec36ed17255e0bb75699c79961D3 
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Makefile.in 


U 

U L i b/Makef i Le  . i n 

Inc.  AIL  rights  reserved. 
22  mhu  Exp  $ 

SUBDIRS=bn  pgp  ttyui  simple 


c 


# Copyright  (C)  1996,1997  Pretty  Good  Privacy, 

U 

U $Id:  Makef i Le. in,v  1.22.4.2  1997/06/07  09:49: 
ft 


CCCHK:348ea8cc012af8673D 
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makefile. msc 


# 

# Lib/makefile.msc 
ft 

ft  Copyright  (C)  1 996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

ft  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2.1  1 997/06/07  09:49:24  mhw  Exp  $ 
ft 

lincLude  " ma ke f i L e . i n " 

aLL  check  cLean  depend  headers  instaLL  very-cLean:: 
n for  %d  in  ( SCSUBDIRS)  ) do  \ 

n cd  %d  &S  $(MAKE)  / $ ( H A KE F L AG S ) /f  makefiLe.msc  $a  &S  cd  .. 

c L ean  : : 

n de  L * . L i b 


C[CHK:3369b9ee440f99e05aea3f93] 
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Makefile,  in 


n 

# L i b / bn / Ma k e f i L e . i n 

n 

# Copyright  CC)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

# $Id:  Makef i Le. in,v  1.25.2.3  1997/06/07  09:49:25  mhw  Exp  $ 

# 

# Ignore  po s t -p r o c e s s e d dependencies  here 
DEPEND= : 

# The  BigNum  Library  in  various  word  sizes 

BN160BJS  = bn16.o  bni16.o  bninit16.o 

BN320BJS  = bn32.o  bni32.o  bninit32.o 

BN640BJS  = bn64.o  bni64.o  bninit64.o 

# This  one  auto-detects 

BN00OBJS  = bn00.o  bn i 00.0 

# If  you  don't  know  what  size  to  use,  use  BN00OBJS. 

BNOBJS  = $(BN00OBJS) 

# S i z e- i nd e pe n d e n t auxiliary  fiLes. 

BNAUXOBJS  = bn.o  bnimem.o  bnsieve.o  bnprime.o  bngermain.o  bnjacobi.o  \ 
n bnprint.o  bnLegaL.o 

# Auto-generated  aux  sources 

BNSOURCES  = bni32.c  bni32.h  bn32.c  bn32.h  bninit32.c  \ 
n bni64.c  bni64.h  bn64.c  bn64.h  bninit64.c 

LOCALINCLUDES  = -I. 

OBJS  = $(BNAUXOBJS)  $(BNOBJS)  $COBJS_EXT) 

# The  interfaces  exported  from  this  Library 
SHAREDHDRS  = bn.h  bnprime.h  bngermain.h 

INSTALLLIBS  = $(BNLIB) 

LIBTARGET  = $(BNLIB) 

LIBTDEPS  = DONE 

a L L : : $(BNLIB) 

c L e a n : : 

n $(RH)  $(OBJS)  $(BN00OBJS)  $(BN160BJS)  $(BN320BJS)  $(BN640BJS) 

very-cLean::  cLean 

n $(RH)  ../SCBNLIB)  $(BNLIB) 

depend::  bnsources 

###  Some  manuaL  dependencies  needed  by  the  bignum  Library 

ft  The  bignum  Library  is  avaiLabLe  in  three  sizes  - 16,  32  and  64-bit 

# words  - which  are  generated  from  the  16-bit  version  using  sed. 
bni00.o:  bni16.c  bni32.c  bni64.c  bnLegaL.h 

bn00.o:  bn16.c  bn16.h  bni16.h  bn32.c  bn32 . h bni32.h  bn64.c  bn64.h  bni64.h  \ 
n bninit16.c  bninit32.c  bninit64.c 

bni32.c:  bni16.c  bni32.h 

i:[CHK:3f282011655e39da99f8e1f6b32242fc479beea42a70edb699ca12b012ffc5f21]] 
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n test  ! -f  $eD  -o  -w  $3  | | (chmod  u + w $3  &&  test  -u  $3)  | | rm  -f  $3 

n sed  -e  s/32/64/g  -e  s/16/32/g  $ ( s r c d i r ) / b n i 1 6 . c > $3 

n chmod  a-w  $3 

bni64.c:  bni16.c  bni64.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  SS  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/128/g  -e  s/16/64/g  $ ( s r c d i r ) / bn i 1 6 . c > $3 

n chmod  a-w  $3 


bni32.h:  bni16.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  &&  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/64/g  -e  s/16/32/g  $ ( s r c d i r ) / b n i 1 6 . h > $3 

o chmod  a-w  $3 


bni64.h:  bni16.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  SS  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/1  28/g  -e  s/16/64/g  $ ( s r c d i r ) / b n i 1 6 . h > $3 

a chmod  a-w  $3 


bn32.c:  bn16.c  bn32.h  bni32.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u + w $3  &&  test  -w  $3)  | | 

n sed  -e  s/32/64/g  -e  s/16/32/g  $ ( s r c d i r ) / bn  1 6 . c > $3 

n chmod  a-w  $3 


rm  -f  $3 


bn64.c:  bn16.c  bn64.h  bni64.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  &S  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/128/g  -e  s/16/64/g  $ ( s r c d i r ) / b n 1 6 . c > $3 

n chmod  a-w  $3 


bn32.h:  bn16.h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  S&  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/64/g  -e  s/16/32/g  $ ( s r c d i r ) / bn  1 6 . h > $3 

Q chmod  a-w  $3 


bn64  . h : bn1 6 . h 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  &&  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/128/g  -e  s/16/64/g  $ ( s r c d i r ) / b n 1 6 . h > $3 

n chmod  a-w  $3 

bninit32.c:  bninit16.c 

n test  ! -f  $3  -o  -w  $3  { | (chmod  u+w  $3  S&  test  -w  $3)  { | rm  -f  $3 

n sed  -e  s/32/64/g  -e  s/16/32/g  $ ( s r cd i r ) / b n i n i 1 1 6 . c > $3 

n chmod  a-w  $3 

bninit64.c:  bninit16.c 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  SS  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/32/128/g  -e  s/16/64/g  $ ( s r c d i r ) / bn i n i t 1 6 . c > $3 

n chmod  a-w  $3 

bntest32.c:  bntest16.c 

n test  ! -f  $3  -o  -w  $3  | | (chmod  u+w  $3  SS  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/16/32/g  $ ( s r c d i r ) / bn t e s 1 1 6 . c > $3 

n chmod  a-w  $3 

bntest64.c;  bntest16.c 

n test  ! -f  $3  -o  -w  $3  { | (chmod  u+w  $3  SS  test  -w  $3)  | | rm  -f  $3 

n sed  -e  s/16/64/g  $ ( s r c d i r ) / bn t e s 1 1 6 . c > $3 

n chmod  a-w  $3 

lICCHK: 639b00af 988d0f bc8f 7cab229f 0e1 f 2344bf d6e3ec4f 8261 b971 86700bd47c113:: 
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Makefile,  in 


U An  explicit  target  that  can  be  made  before  distribution  for 

# machines  that  don't  have  sed. 
bnsources:  SCBNSOURCES) 

##  Dependencies  ttU 

UUU  Bignum  Library  dependencies 

# The  bignum  Library  does  a Lot  of  preprocessor  trickery  with 

tt  <Limits.h>  and  conditional  ^^incLudes.  Here  are  aLL  the  dependencies 

# that  might  happen,  even  though  only  some  of  them  wiLL  be  used  on  any 
U given  platform. 

bni16.o:  bni.h  bni16.h  bnimem.h  bnlegal.h 

bni32.o:  bni.h  bni32.h  bnimem.h  bnlegal.h 

bni64.o:  bni.h  bni64.h  bnimem.h  bnlegal.h 

bninit16.o:  bn.h  bn16.h 
bninit32.o:  bn.h  bn32.h 
bninit64.o:  bn.h  bn64.h 

bn16.o:  bni.h  bnimem.h  bn.h  bni16.h  bn16.h 
bn32.o:  bni.h  bnimem.h  bn.h  bni32.h  bn32.h 
bn64.o:  bni.h  bnimem.h  bn.h  bni64.h  bn64.h 
bnsieve.o:  bn.h  bnsieve.h 
bnprime.o:  bnprime.h  bn.h  bnsieve.h 


[[CHK:6144492c9ac8b7e1eaad2fbc3d179]: 
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makefile.msc 


n 

ft  L i b / bn  / ma  ke  f 1 L e . ms  c 
It 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

U $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1997/06/07  09:49:43  mhw  Exp  $ 

U 

PGPLIB=  . . \bn  L i b . L i b 

CFLAGS=-I . . \ . . -DHAVE_C0NFIG_H=1  SCDEBUG) 

Rri  = n deL 

a L L : : n n Lib 


BNLIB=n  DONE 

headers:n  incL 


!incLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$CSHAREDHDRS)"==""  \ 

n n for  %f  in  ( $ ( S H AR E D H D R S ) ) do  copy  %f  . . \ . . \ i n c L ud e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  ..\incLude 


D0S0BJSX  = n $ ( OB J S : . o= . o b j ) 

DOSOBJS=n  $ ( DOSOB J SX : un i x=msdos ) 

Lib:n  SCDOSOBJS) 


. c . ob  j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 

Ua  Lib  /out  : $( PGPLIB)  SCPGPLIB)  $*.obj 


c L ea n : : 

n deL*.obj 

DONE  : 

n if  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCPGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : S C PG P L I B ) SCDOSOBJS) 


Ci;CHK:3cceab99ab9966bb00331  5755531  ccf38860056c9f1fff7]D 
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bn.c 


/* 

* bn.c  - the  high-level  bignum  interface 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb 

* 

* $Id:  bn.c,v  1.18.4.1  1997/06/07  09:49:25  mhw  Exp  $ 

*/ 

^include  "bn.h" 

/*  Functions  */ 
void 

bnBeg i n ( s t r u c t BigNum  *bn) 

{ 

n static  int  bninit  = 0; 

a if  (Ibninit)  { 

n n bnInitC); 

n n bninit=1; 

n > 

n bn->ptr=0; 

o bn->size=0; 

n bn->a I I o c a t e d = 0; 

} 

void 

bn S wa p ( s t r u c t BigNum  *a,  struct  BigNum  *b) 

{ 

n void*p; 

n unsigned  t; 

n p = a->ptr; 

n a->ptr  = b->ptr; 

n b->ptr=p; 

n t=a->size; 

n a->size  = b->size; 

n b->size=t; 

n t = a->a I located; 

n a->allocated  = b->a I located; 

n b->allocated  = t; 

} 

int  ( * bn Y i e I d ) ( VO i d ) ; 

void  C *b n E nd ) C s t r u c t BigNum  *bn); 

int  ( *b n P r ea I I o c ) ( s t r u c t BigNum  *bn,  unsigned  bits); 

int  (*bnCopy)(struct  BigNum  *dest,  struct  BigNum  const  *src); 

void  ( * bn N o r m ) ( s t r u c t BigNum  *bn); 

void  ( * bn E X t r a c t B i gBy t e s ) ( s t r u c t BigNum  const  *bn,  unsigned  char  *dest, 
n unsigned  Isbyte,  unsigned  len); 

int  ( * bn  I n s e r t B i g By t e s ) ( s t r u c t BigNum  *bn,  unsigned  char  const  *src, 
n unsigned  Isbyte,  unsigned  len); 

void  ( *bn Ex t ra c t Li t t I eBy t e s ) ( s t r uc t BigNum  const  *bn,  unsigned  char  *dest, 
CCCHK:625dca5b77cc6bc733b0300e571121aa4422ffc6dd062ee886184e9d7821e908a:3 
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n unsigned  Isbyte,  unsigned  Len); 

int  ( *bn 1 nse r t Li 1 1 L eBy t e s ) ( s t ru c t BigNum  *bn,  unsigned  char  const  *src, 
n unsigned  Isbyte,  unsigned  Len); 

unsigned  (*bnLSWord)(struct  BigNum  const  *src); 
unsigned  (*bnBits)(struct  BigNum  const  *src); 

int  ( *bn Add ) ( s t ru c t BigNum  *dest,  struct  BigNum  const  *src); 

int  C *bn S ub ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src); 

int  ( *b n CmpQ ) ( s t r u c t BigNum  const  *a,  unsigned  b); 

int  ( *bn S e t Q ) ( s t r u c t BigNum  *dest,  unsigned  src); 

int  ( *bn AddQ ) ( s t ru c t BigNum  *dest,  unsigned  src); 

int  ( *bnSubQ ) ( s t ru c t BigNum  *dest,  unsigned  src); 

int  ( *b n Cmp ) ( s t r u c t BigNum  const  *a,  struct  BigNum  const  *b); 

int  (*bnSquare)(struct  BigNum  *dest,  struct  BigNum  const  *src); 

int  ( *bnMu L ) ( s t r uc t BigNum  *dest,  struct  BigNum  const  *a, 

n struct  BigNum  const  *b); 

int  ( *bnHu LQ ) ( s t rue t BigNum  *dest,  struct  BigNum  const  *a,  unsigned  b); 
int  ( *bn D i vMod ) ( s t r uc t BigNum  *q,  struct  BigNum  *r,  struct  BigNum  const  *n, 
n struct  BigNum  const  *d); 

int  ( *bnMod ) ( s t r uc t BigNum  *dest,  struct  BigNum  const  *src, 
n struct  BigNum  const  *d); 

unsigned  (*bnHodQ)(struct  BigNum  const  *src,  unsigned  d); 
int  ( *b n Ex pMod ) ( s t r u c t BigNum  *resuLt,  struct  BigNum  const  *n, 
n struct  BigNum  const  *exp,  struct  BigNum  const  *mod); 

int  ( *bn Dou b L e ExpMod ) ( s t r u c t BigNum  *dest, 

n struct  BigNum  const  *n1,  struct  BigNum  const  *e1, 

n struct  BigNum  const  *n2,  struct  BigNum  const  *e2, 

a struct  BigNum  const  *mod); 

int  ( *bnT wo ExpMod )( s t r u c t BigNum  *n,  struct  BigNum  const  *exp, 
n struct  BigNum  const  *mod); 

int  ( *bnG cd ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *a, 
n struct  BigNum  const  *b); 

int  ( *bn I n V ) ( s t ru c t BigNum  *dest,  struct  BigNum  const  *src, 
n struct  BigNum  const  *mod); 

int  ( *bnLSh i f t ) ( s t ru c t BigNum  *dest,  unsigned  amt); 
void  ( *bnRSh i f t ) C s t r u c t BigNum  *dest,  unsigned  amt); 
unsigned  ( *bnHa keOdd ) ( s t r u c t BigNum  *n); 
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/* 

* bn.h  - the  interface  to  the  bignum  routines. 

* ALL  functions  which  return  ints  can  potentiaLLy  aLLocate  memory 

* and  return  -1  if  they  are  unabLe  to.  ALL  "const"  arguments 

* are  unmod i f i ed . 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  not  particuLarLy  asymmetric,  as  some  operations  are  of  the 

* form  a = b a c,  whiLe  others  do  a 3=  b.  In  general,  outputs  may  not 

* point  to  the  same  struct  BigNums  as  inputs,  except  as  specified 

* beLow.  This  relationship  is  referred  to  as  "being  the  same  as". 

* This  is  not  numerical  equivalence. 

* 

* The  ”Q"  operations  take  "unsigned"  inputs.  Higher  vaLues  of  the 

* extra  input  may  work  on  some  i mp L erne n t a t i o n s , but  65535  is  the 

* highest  portable  vaLue.  Just  because  L)NSIGNED_HAX  is  Larger  than 

* that,  or  you  know  that  the  word  size  of  the  Library  is  Larger  than  that, 

* that,  does  *not*  mean  it's  aLLowed. 

* 

* $Id:  bn.h,v  1.21.2.1  1997/06/07  09:49:25  mhw  Exp  $ 

*/ 

#ifndef  BN_H 
#define  BN_H 

#if  d e f i n e d ( _ W I N3 2 ) &S  ! d e f i n e d ( N 0 D L L) 

U if  d e f i n e d ( BN  LI B ) 

# define  BNExport  __decLspec(  dLLexport  ) 

# e L se 

# define  BNExport  __decLspec(  dLLimport  ) 
tt  end  i f 

#e  L se 

U define  BNExport 
#end i f 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 


Struct 

Bi gNum  { 

n 

void  *p t 

c 

unsigned 

n 

unsigned 

>; 

r; 

size;n  /*  Note: 
a L Located; 


#ifndef  TYPE_BIGNUM 
//define  TYPE_BIGNUM  1 
typedef  struct  BigNum  BigNum; 
//end  i f 


in  ( va r i a b L e-s i 2 e d ) words  */ 


/* 

* Use r-s upp L i ed  function:  if  non-NULL,  this  is  caLLed  during  Long-running 

* computations.  You  may  put  YieLdC)  caLLs  in  here  to  give  CPU  time  to 

* other  processes.  You  may  aLso  force  the  computation  to  be  aborted, 

* by  returning  a vaLue  < 0,  which  wiLL  be  the  return  vaLue  of  the 

* bnXXX  caLL.  (You  probabLy  want  the  vaLue  to  be  someting  other  than 

* -1,  to  distinguish  it  from  an  out-of-memory  error.) 

* 

* The  functions  that  this  is  caLLed  from,  and  the  intervaLs  at  which  it 
[CCHK:6d2e47fd8d15ba7a0d55920ee41bca6fa662fdd849d0686338bf532c80acf872b]: 
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* is  called,  are  not  well  defined,  just  "reasonably  often".  (Currently, 

* once  per  exponent  bit  in  modular  exponentiation,  and  once  per  two 

* divisions  in  GCD  and  inverse  computation.) 

*/ 

extern  int  BNExport  ( *bn Y i e I d ) ( vo i d ) ; 

/*  Functions  */ 

/* 

* You  usually  never  have  to  call  this  function  explicitly,  as 

* bnBeginC)  takes  care  of  it.  If  the  program  jumps  to  address  0, 

* this  function  has  not  been  called. 

*/ 

void  BNExport  bn  I n i t ( vo i d ) ; 

/* 

* This  initializes  an  empty  struct  BigNum  to  a zero  value. 

* Do  not  use  this  on  a BigNum  which  has  had  a value  stored  in  it! 

*/ 

void  BNExport  bnBe g i n ( s t r u c t BigNum  *bn); 

/*  Swap  two  BigNums.  Cheap.  */ 

void  BNExport  bn S wa p ( s t r u c t BigNum  *a,  struct  BigNum  *b); 

/*  Reset  an  initialized  bigNum  to  empty,  pending  deallocation.  */ 
extern  void  BNExport  ( * bn E nd ) ( s t r u c t BigNum  *bn); 

/* 

* If  you  know  you'll  need  space  in  the  number  soon,  you  can  use  this  function 

* to  ensure  that  there  is  room  for  at  least  "bits"  bits.  Optional. 

* Returns  <0  on  out  of  memory,  but  the  value  is  unaffected. 

*/ 

extern  int  BNExport  ( *bn P r e a I I o c ) ( s t r u c t BigNum  *bn,  unsigned  bits); 

/*  Hopefully  obvious.  dest  = src.  dest  may  be  the  same  as  src.  */ 

extern  int  BNExport  (*bnCopy)(struct  BigNum  *dest,  struct  BigNum  const  *src); 

/* 

* Mostly  done  automatically,  but  this  removes  leading  zero  words  from 

* the  internal  representation  of  the  BigNum.  Use  is  unclear. 

*/ 

extern  void  BNExport  ( *bnNo r m ) ( s t r u c t BigNum  *bn); 


/* 

* Move  bytes  between  the  given  buffer  and  the  given  BigNum  encoded  in 

* base  256.  I.e.  after  either  of  these,  the  buffer  will  be  equal  to 

* (bn  / 256^lsbyte)  % 256*len.  The  difference  is  which  is  altered  to 

* match  the  other ! 

*/ 

extern  void  BNExport  ( *bn E x t r a c t B i g By t e s ) ( s t r u c t BigNum  const  *bn, 
n unsigned  char  *dest,  unsigned  Isbyte,  unsigned  len); 

extern  int  BNExport  ( *bn I n s e r t B i g By t e s ) ( s t r u c t BigNum  *bn, 
n unsigned  char  const  *src,  unsigned  Isbyte,  unsigned  len); 


/*  The 
extern 


extern 


same,  but  the  buffer  is  little-endian.  */ 

void  BNExport  ( *bn Ex t r a c t L i 1 1 I e By t e s ) ( s t r u c t BigNum  const  *bn, 
unsigned  char  *dest,  unsigned  Isbyte,  unsigned  len); 
int  BNExport  ( * bn  I n s e r t L i 1 1 1 eBy t e s ) ( s t r u c t BigNum  *bn. 


C[CHK:220e44ff71b304403ed119ff9ff08f71ff100fbb377ac8ba064daa37d5f0b4bb2:: 
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n unsigned  char  const  *src,  unsigned  Lsbyte,  unsigned  Len); 

/*  Return  the  L e a s t - s i g n i f i c a n t bits  (at  least  16)  of  the  BigNum  */ 
extern  unsigned  BNExport  ( *bn LS Wo r d ) ( s t r u c t BigNum  const  *src); 

/* 

* Return  the  number  of  significant  bits  in  the  BigNum. 

* 0 or  1 +f L 00 r ( L og 2 ( s r c ) ) 

*/ 

extern  unsigned  BNExport  C *bn B i t s ) ( s t r u c t BigNum  const  *src); 

#define  bnBytes(bn)  ( C bn B i t s ( bn ) +7 ) / 8 ) 

/* 

* dest  +=  src.  dest  and  src  may  be  the  same.  Guaranteed  not  to 

* allocate  memory  unnecessarily,  so  if  you're  sure  bnBits(dest) 

* won't  change,  you  don't  need  to  check  the  return  value. 

*/ 

extern  int  BNExport  ( *bn Ad d ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src); 
/* 

* dest  -=  src.  dest  and  src  may  be  the  same,  but  bnSetQCdest,  0)  is  faster. 

* if  dest  < src,  returns  +1  and  sets  dest  = src-dest. 

*/ 

extern  int  BNExport  (*bnSub)(struct  BigNum  *dest,  struct  BigNum  const  *src); 

/*  Return  sign  (-1,  0,  +1)  of  a-b.  a <=>  b -->  bnCmpQCa,  b)  <=>  0 */ 
extern  int  BNExport  ( * b n C mpQ ) ( s t r u c t BigNum  const  *a,  unsigned  b); 

/*  dest  = src,  where  0 <=  src  < 2*16.  */ 

extern  int  BNExport  ( * b n S e t Q ) ( s t r u c t BigNum  *dest,  unsigned  src); 

/*  dest  +=  src,  where  0 <=  src  < 2*16  */ 

extern  int  BNExport  ( *bn AddQ ) ( s t r u c t BigNum  *dest,  unsigned  src); 

/*  dest  -=  src,  where  0 <=  src  < 2*16  */ 

extern  int  BNExport  ( *bn S u bQ  ) ( s t r u c t BigNum  *dest,  unsigned  src); 

/*  Return  sign  (-1,  0,  +1)  of  a-b.  a <=>  b -->  bnCmpCa,  b)  <=>  0 */ 

extern  int  BNExport  ( *b n C mp ) ( s t r u c t BigNum  const  *a,  struct  BigNum  const  *b); 

/*  dest  = src*2.  dest  may  be  the  same  as  src,  but  it  costs  time.  */ 
extern  int  BNExport  ( * b n S q ua r e ) ( s t r u c t BigNum  *dest, 
n struct  BigNum  const  *src); 

/*  dest  = a * b.  dest  may  be  the  same  as  a or  b,  but  it  costs  time.  */ 
extern  int  BNExport  C *bn Mu  I ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *a, 
n struct  BigNum  const  *b); 

/*  dest  = a * b,  where  0 <=  b < 2*16.  dest  and  a may  be  the  same.  */ 

extern  int  BNExport  ( *bn M u I Q ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *a, 
n unsigned  b); 

/* 

* q = n/d,  r = n%d.  r may  be  the  same  as  n,  but  not  d, 

* and  q may  not  be  the  same  as  n or  d. 

* re-entrancy  issue:  this  temporarily  modifies  d,  but  restores 

* it  for  return . 

*/ 

C:CHK:66d885554d77a98dc005f59331eee117cc9997882277fa66c144a1c43f8ff66f0:: 
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extern  int  BNExport  ( *bn D i vHod ) ( s t r u c t BigNum  *q,  struct  BigNum  *r, 
n struct  BigNum  const  *n,  struct  BigNum  const  *d); 

/* 

* dest  = src  % d.  dest  and  src  may  be  the  same,  but  not  dest  and  d. 

* re-entrancy  issue:  this  temporarily  modifies  d,  but  restores 

* it  for  return. 

*/ 

extern  int  BNExport  ( *b nHod ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src, 
n struct  BigNum  const  *d); 

/*  return  src  % d,  where  0 <=  d < 2'"'\6.  */ 

extern  unsigned  int  BNExport  C*bnModQ)(struct  BigNum  const  *src,  unsigned  d); 
/*  n = n^exp,  modulo  "mod"  "mod"  *must*  be  odd  */ 

extern  int  BNExport  ( *bn Ex pMod ) ( s t r u c t BigNum  *result,  struct  BigNum  const  *n, 
o struct  BigNum  const  *exp,  struct  BigNum  const  *mod); 

/* 

* dest  = n1*e1  * n2^e2,  modulo  "mod".  "mod"  *must*  be  odd. 

* dest  may  be  the  same  as  n1  or  n2. 

*/ 

extern  int  BNExport  ( *bn Doub I e Ex pMo d ) ( s t r u c t BigNum  *dest, 
n struct  BigNum  const  *n1,  struct  BigNum  const  *e1  , 

n struct  BigNum  const  *n2,  struct  BigNum  const  *e2, 

a struct  BigNum  const  *mod); 

/*  n = 2‘'exp,  modulo  "mod"  "mod"  *must*  be  odd  */ 

extern  int  BNExport  ( * bnT wo  Ex pMod ) ( s t r u c t BigNum  *n,  struct  BigNum  const  *exp, 
n struct  BigNum  const  *mod); 

/*  dest  = gcdCa,  b).  The  inputs  may  overlap  arbitrarily.  */ 

extern  int  BNExport  ( *bnG cd ) C s t r u c t BigNum  *dest,  struct  BigNum  const  *a, 

n struct  BigNum  const  *b); 

/*  dest  = src'-l,  modulo  "mod".  dest  may  be  the  same  as  src.  */ 

extern  int  BNExport  ( *bn I n v ) ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src, 

n struct  BigNum  const  *mod); 

/*  Shift  dest  left  "amt"  places  */ 

extern  int  BNExport  ( *bn LS h i f t ) ( s t r u c t BigNum  *dest,  unsigned  amt); 

/*  Shift  dest  right  "amt"  places,  discarding  low-order  bits  */ 
extern  void  BNExport  ( *bn R S h i f t ) ( s t r u c t BigNum  *dest,  unsigned  amt); 

/*  For  the  largest  2‘'k  that  divides  n,  divide  n by  it  and  return  k.  */ 
extern  unsigned  BNExport  ( *bnHa keOdd ) ( s t r u c t BigNum  *n); 

#ifdef  cplusplus 

} 

#endi f 

#endif/*  ! BN_H  */ 
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/* 

* bn00.c  - auto-size-detecting  bn??.c  file. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  in  1995  by  CoLin  Plumb. 

* 

* $Id:  bn00.c,v  1.5. 4.1  1997/06/07  09:49:26  mhw  Exp  $ 

*/ 

^include  "bnsize00.h" 

#if  BNSIZE64 

/*  Include  all  of  the  C source  file  by  reference  */ 

//include  "bn64.c" 

//include  "bninit64.c" 

//elif  BNSIZE32 

/*  Include  all  of  the  C source  file  by  reference  */ 

//include  "bn32.c" 

//include  "bninit32.c" 

#eLse  /*  BNSIZE16  */ 

/*  Include  all  of  the  C source  file  by  reference  */ 

//include  "bn16.c" 

#incLude  "bninit16.c" 

//endi  f 


:[CHK:64175ddfff66ffbf11eeb233ddf9885a76ef3d:] 


16 


Pretty  Good  Privacy  S.CT*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


bnl  6.C 


/* 

* bn16.c  - the  high-level  bignum  interface 

•k 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Like  bni16.c,  this  reserves  the  string  "16"  for  textual  replacement. 

* The  string  must  not  appear  anywhere  unless  it  is  intended  to  be  replaced 

* to  generate  other  bignum  interface  functions. 

* 

* Written  by  Colin  Plumb 

★ 

* $Id:  bn16.c,v  1.37.2.1  1997/06/07  09:49:26  mhu  Exp  $ 

*/ 

#ifndef  H AV E_ C 0 N F I G_ H 
#define  H A V E_ C 0 N F I G_ H 0 
#end  i f 

#if  HAVE_CONFIG_H 
#include  "config.h" 

#end i f 

/* 

* Some  compilers  complain  about  #if  FOO  if  FOO  isn't  defined, 

* so  do  the  A N S I -ma nda t ed  thing  explicitly... 

*/ 

#ifndef  NO_STRING_H 
^define  NO_STRING_H  0 
#endi f 

#ifndef  H A V E_ S T R I NG S_H 
#define  HAVE_STRINGS_H  0 
#endi f 

#ifndef  NEED_MEHORY_H 
#define  N E E D_H EMO R Y_ H 0 
Send  i f 

#if  !NO_STRING_H 

Sinclude  <string.h>n  /*  for  memmoveC)  in  bnHakeOdd  */ 

Selif  HAVE_STRINGS_H 
Sinclude  <strings.h> 

#e nd i f 

Sif  NEED_HEMORY_H 
Sinclude  <memory.h> 

Send i f 

/* 

* This  was  useful  during  debugging,  so  it's  left  in  here. 

* You  can  ignore  it.  DBMALLOC  is  generally  undefined. 

*/ 

Sifndef  DBMALLOC 
Sdefine  DBAMLLOC  0 
S e nd i f 

Sif  DBMALLOC 

Sinclude  ". ./dbmalloc/malloc.h" 

Sdefine  MALLOCDB  ma I I o c_ c h a i n_ c h e c k ( 1 ) 

Seise 

Sdefine  MALLOCDB  (void)0 
S e n d i f 
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bnl  6.C 


^include  "bni.h" 

#incLude  "bni16.h" 

#incLude  "bnimem.h" 

#incLude  "bn16.h" 

#incLude  "bn.h" 

/*  Work-arounds  for  some  particularly  broken  systems  */ 
#include  " bn k I u d g e . h " n /*  For  memmoveC)  */ 

//include  "pgpDebug.h" 

/*  Functions  */ 
void 

bnInit_16(void) 

{ 

n bnEnd  = bnEnd_16; 

a bnPrealloc  = bn P r ea  I I o c_ 1 6 ; 

a bnCopy  = bnCopy_16; 

n bnNorm  = bnNorm_16; 

n bnExt ractBi gBytes  = bn E x t r a c t B i g By t e s_1 6 ; 

n bnInsertBigBytes  = bnInsertBigBytes_16; 

o b n E X t r a c t Li 1 1 I e By t e s = bn  Ex t r a c t L i 1 1 I e By t e s _ 1 6 ; 

B bnInsertLittleBytes  = bnInsertLittleBytes_16; 

n bnLSWord  = bnLSWord_16; 

n bnBits  = bnBits_16; 

n bnAdd  = bnAdd_16; 

n bnSub  = bnSub_16; 

n bnCmpQ  = bnCmpQ_16; 

n bnSetQ  = bnSetQ_16; 

n bnAddQ  = bnAddQ_16; 

n bnSubQ  = bnSubQ_16; 

n bnCmp  = bnCmp_16; 

n bnSquare  = bnSquare_16; 

n bnMul  = bnMul_16; 

B bnMulQ  = bnMulQ_16; 

B bnDivMod  = b n D i vHod_ 1 6 ; 

B bnHod  = bnMod_16; 

B bnModQ  = bnModQ_16; 

n bnExpMod  = bnExpHod_16; 

n bn  Do ub I e ExpHod  = b n Dou b I e Ex pHod_1 6 ; 

n bnTwoExpHod  = bnTwoExpHod_1 6; 

n bnGcd  = bnGcd_16; 

n bninv  = bnlnv_16; 

B bnLShift  = bnLShift_16; 

n bnRShift  = bnRShift_16; 

n bnHakeOdd  = bnMa ke0dd_1 6; 

> 

void 

b n E nd_1 6 ( s t r u c t BigNum  *bn) 

{ 

n i f ( bn->pt  r ) { 

B n BNI FREEC (BNW0RD1 6 *)bn->ptr,  b n->a I I o c a t e d ) ; 

B B bn->ptr=0; 

n } 

n bn->size=0; 

B bn->a I located  = 0; 


CCCHK:475088f00dd1e66fdfcdbf74656b9dbfc4cbbfa26428c811ecaf828700ea745ai:: 
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n MALLOCDB; 

} 


/*  Internal  function.  It  operates  in  words.  */ 
static  int 

bnRe s i ze_1 6 ( s t ru c t BigNum  *bn,  unsigned  Len) 

{ 

n VO i d *p; 

n /*  Round  size  up:  most  malLocs  impose  8-byte  granularity  anyway  */ 

n len  = (len  + ( 8 / s i z eo f ( BN WOR D 1 6 ) - 1))  & " ( 8 / s i z e o f ( BN W 0 R D 1 6 ) - 1); 

n p = BNIREALLOC ( (BNW0RD1 6 *)bn->ptr,  bn->a I I o c a t ed , len); 

n i f ( ! p ) 

n n return-1; 

n bn->ptr=p; 

n bn->a I I o c a t ed  = len; 

n MALLOCDB; 

n returnO; 

> 

#define  bn S i z e C h e c k ( bn , size)  \ 

n if  (bn->a I located  < size  S&  bn  Re s i z e_ 1 6 ( bn , size)  < 0)  \ 

n n return  -1 

int 

bn P r ea I I o c_1 6 ( s t r uc t BigNum  *bn,  unsigned  bits) 

{ 

n bits  = (bits  + 16-1)/16; 

n bnSizeCheck(bn,  bits); 

n MALLOCDB; 

n returnO; 

> 


int 

bnCopy_1 6 ( s t r uc t BigNum  *dest,  struct  BigNum  const  *src) 

{ 

n bnSizeCheck(dest,  src->size); 

n dest->size  = src->size; 

n bni Copy_1 6( (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)src->ptr, 

n MALLOCDB; 

n returnO; 

} 


src->size); 


VO  i d 

bnNo rm_1 6 ( s t ru c t BigNum  *bn) 

{ 

n bn->size  = bn i No rm_1 6 ( ( BN WO R D 1 6 *)bn->ptr,  bn->size); 

} 


/* 

* Convert  a bignum  to  big-endian  bytes.  Returns,  in  big-endian  form,  a 

* substring  of  the  bignum  starting  from  Isbyte  and  "len"  bytes  long. 

* Unused  high-order  (leading)  bytes  are  filled  with  0. 

*/ 


void 

bn  Ex t r a c t B i g By t e s_ 1 6 ( s t r u c t BigNum  const  *bn,  unsigned  char  *dest. 


CCCHK: f 44af 74cc8d4a288866c555f bb3229b22aac652500c446078aa5a82529f 7661 2c:: 
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unsigned  Lsbyte,  unsigned  ten) 

{ 

n unsigned  s = bn->si2e  * (16  / 8); 

n /*  Fill  unused  Leading  bytes  with  0 */ 

n while  (s  < Lsbyte+Len  S8  Len)  { 

n n *dest++=0; 

n n L en--; 

n > 

n if(Len) 

D n bn i E X t r a c t B i g By t e s _ 1 6 ( ( BN WO R D 1 6 *)bn->ptr,  dest,  Lsbyte,  Len); 

n MALLOCDB; 

} 

i nt 

bn  I n se r t Bi gBy t es_1 6 ( s t ru c t BigNum  *bn,  unsigned  char  const  *src, 
unsigned  Lsbyte,  unsigned  Len) 

{ 

Q unsigned  s = bn -> size; 

n unsigned  words  = ( L e n+ L s by t e + s i z e o f ( B N WO R D 1 6 ) - 1 ) / s i z eo f ( BN WO R D 1 6 ) ; 

n /*  Pad  with  zeros  as  required  */ 

n bnSizeCheckCbn,  words); 

a if(s<words){ 

n n bni Zero_1 6( (BNW0RD1 6 *)bn->ptr  B I G LI TT LE ( - s , + s ) , words-s); 

n n s = wo  rds ; 

n > 

n bn i I n s e r t B i g By t e s_ 1 6 ( ( BN WO R D 1 6 *)bn->ptr,  src,  Lsbyte,  Len); 

n bn->size  = bn  i No  r iti_1  6 ( ( BN  WO  R D 1 6 *)bn->ptr,  s); 

n MALLOCDB; 

n returnO; 

} 

/* 

* Convert  a bignum  to  L i t t L e- e nd i a n bytes.  Returns,  in  L i t t L e-end i a n form,  a 

* substring  of  the  bignum  starting  from  Lsbyte  and  "Len"  bytes  Long. 

* Unused  high-order  (trailing)  bytes  are  filled  with  0. 

*/ 

void 

bn  Ex t r a c t Li 1 1 L eBy t es_1 6 ( s t ru c t BigNum  const 
unsigned  Lsbyte,  unsigned 

{ 

n unsigned  s = bn->size  * (16  / 8); 

n /*  FiLL  unused  Leading  bytes  with  0 

n while  (s  < Lsbyte+Len  SS  Len) 

n n destC  — Len3  = 0; 

n i f ( L en  ) 

H n b n i E X t r a c t Li 1 1 L eBy t e s _ 1 6 ( ( BN  WO R D 1 6 *)bn->ptr,  dest, 

n n L sbyte,  Len); 

n MALLOCDB; 

[[CHK:b3221e6cccf66442c5a9aad99e3a0066aa8b111cda6eA24633d0ff4f2bada8d3b]: 
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1 nt 

bn  I nse r t Li 1 1 L eBy t e s_1 6 ( s t ru c t BigNum  *bn,  unsigned  char  const  *src, 

unsigned  Lsbyte,  unsigned  Len) 


unsigned  s = bn -> size; 

unsigned  words  = ( L e n+ L s by t e+ s i z e o f ( BN WO R D 1 6 ) - 1 ) / s i z eof ( BN WO R D 1 6 ) ; 


a /*  Pad  with  zeros  as  required  */ 

B bn S i z e C h e c k ( b n , words); 


if  (s  < words)  { 

B bni Zero_1 6( (BNW0RD1 6 *)bn->ptr  B 1 G L I TT LE ( -s , +s ) , words-s); 

B s=words; 

> 


bniInsertLittLeBytes_16((BNW0RD16  *)bn->ptr,  src,  Isbyte,  Len); 
bn->size  = bn i No r m_1 6 ( ( BN WOR D 1 6 *)bn->ptr,  s); 


MALLOCDB; 
return  0; 


/*  Return  the  L ea s t -s i g n i f i c a n t word  of  the  input.  */ 
unsigned 

bn LS Wo rd_1 6 ( s t r u c t BigNum  const  *src) 

{ 

B return  src  — >size  ? ( u n s i g n ed ) ( ( BN  WO R D 1 6 * ) s r c->p t r ) C BI G LI TT L E ( - 1 , 0 ) D 

B B B : 0 ; 

> 

unsigned 

bnB i t s_1 6 ( s t r u c t BigNum  const  *src) 

{ 

B return  b n i B i t s_1 6 ( ( BN WO R D 1 6 *)src->ptr,  src->size); 

> 

i n t 

bn Add_1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src) 

{ 

B unsigned  s = src->size,  d = dest->size; 

B BNW0RD16  t; 


if  ( !s) 

B return0; 


bnSizeCheckCdest,  s); 


if  (d  < s)  { 

B bni Zero_1 6( (BNW0RD1 6 *)dest->ptr  B I G L I TT LE ( -d ,+d ) , s-d); 

B dest->size  = d = s; 

B MALLOCDB; 

> 

t = bni AddN_1 6( (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)src->ptr,  s); 

MALLOCDB; 

if  (t)  { 


[CCHK:00aec00dd4774e29955224c5565fd2ebb79ad668e9444add331de358942d0f94e:: 
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n 

n 

i f 

(d  > s)  { 

n 

n 

a 

t = bni Addi _1 6( (BNU0RD1 6 *)dest->ptr  BI G L I TT L E ( -s , + s ) 

n 

Q 

n 

d-s,  t ) ; 

n 

u 

n 

HALLOCDB; 

n 

n 

} 

n 

n 

i f 

(t)  { 

n 

n 

s 

bnSizeCheckCdest,  d+1); 

n 

a 

n 

((BNW0RD16  *)dest->ptr)CBIGLITTLE(-1-d,d)]  = t ; 

n 

n 

a 

dest->si ze  = d+1 ; 

n 

n 

} 

n 

> 

n 

return 

0; 

> 

/* 

* 

dest  -=  s r c . 

* If  dest  goes  negative,  this  produces  the  absolute  value  of 

* the  difference  (the  negative  of  the  true  value)  and  returns  1. 

* Otherwise,  it  returls  0. 

*/ 


1 n t 

bn Sub_1 6 C s t r u c t BigNum  *dest,  struct  BigNum  const  *src) 
{ 


n 

unsigned 

1 s = src->size,  d = dest -> size; 

n 

BNW0RD1 6 

' t; 

n 

1 f 

Cd  < 

s 88 

d < Cs  = bn i N 0 r m_ 1 6 ( ( BN WO R D 1 6 *)src->ptr,  s)))  { 

n 

o 

bnSizeCheckCdest,  s); 

n 

a 

bni Zero 

_16( (BNW0RD16  *)dest->ptr  B I G LI TT L E ( -d , +d ) , s-d) 

D 

a 

dest->size  = d = s; 

n 

n 

MALLOCDB; 

a 

> 

n 

i f 

( ! s) 

a 

n 

return 

0; 

n 

t = 

bni SubN_1 6C (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)src->ptr,  s ) ; 

n 

MALLOCDB 

r 

Q 

i f 

(t)  { 

n 

a 

if  (d  > 

s)  { 

D 

a 

n 

t = bni Subi _1 6( (BNW0RD1 6 *)dest->ptr  BIGLITTLEC 

□ 

a 

D 

d - s , t ) ,■ 

n 

o 

n 

MALLOCDB; 

a 

a 

> 

o 

a 

if  (t) 

{ 

a 

a 

n 

bni Neg_1 6( (BNW0RD1 6 *)dest->ptr,  d); 

a 

a 

n 

dest->size  = bn i No r m_ 1 6 ( ( BN WO R D 1 6 *)dest->ptr. 

n 

a 

n 

dest->si ze); 

n 

a 

□ 

MALLOCDB; 

a 

a 

B 

return  1; 

n 

n 

> 

n 

> 

n 

dest->size  = bniNorm_16((BNW0RD16  *)dest->ptr,  dest->size); 

return  0; 


/* 

* Compare  the  BigNum  to  the  given  value,  which  must  be  < 65536. 

* Returns  -1.  0 or  1 if  a<b,  a ==  b or  a>b. 

* a <=>  b -->  bnCmpQ(a,b)  <=>  0 
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*/ 
i n t 

bnCmpQ_1 6 ( s t ru c t BigNum  const  *a,  unsigned  b) 

n unsignedt; 

□ BNW0RD16  v; 


t = bniNorm_16(CBNW0RD16  *)a->ptr,  a->size); 

/*  If  a is  more  than  one  word  Long  or  zero,  it's  easy, 
if  (t  !=  1) 

n return  ( t > 1 ) ? 1 : ( b ? -1  : 0); 

V = ( u n s i g n e d ) ( ( BN  WO R D 1 6 * ) a -> p t r ) C B I G LI TT LE ( -1 , 0 ) ] ; 
return  (v  > b)  ? 1 : ((v  < b)  ? — 1 : 0); 


*/ 


1 n t 

bnS e t Q_1 6 ( s t r u c t BigNum  *dest,  unsigned  src) 
{ 


n 

i f 

(src)  { 

Q 

n 

b n S i z e C h e c k ( d e s t , 1); 

n 

n 

( (BNW0RD1 6 

*)dest->ptr)CBIGLITTLE( 

n 

n 

dest->si ze 

= 1; 

n 

> 

else 

{ 

Q 

n 

dest->si ze 

= 0; 

n 

> 

n 

return 

0; 

= (BNW0RD16)src; 


1 n t 

bn AddQ_1 6 ( s t r u c t BigNum  *dest,  unsigned  src) 
{ 

n BNW0RD16  t ; 


c 


if  ( ! dest->si ze) 

n return  bnSetQCdest,  src); 

t = bniAdd1_16((BNU0RD16  *)dest->ptr,  dest->size,  (BNW0RDl6)src); 

MALLOCDB; 

if  (t)  { 

n src  = dest->size; 

n bn S i z e C h e c k ( d e s t , src  + 1); 

n ((BNW0RD16  *)dest->ptr)CBIGLITTLE(-1-src,src):  = t; 

n dest->size  = src+1; 

> 

return  0; 


n 
n 
□ 
n 
□ 
n 
a 
□ 
n 
a 
n 
> 

/* 

* Return  value  as  for  bnSub:  1 if  subtract  underfLoued,  in  which 

* case  the  return  is  the  negative  of  the  computed  value. 

*/ 

i n t 

bnSubQ_1 6 ( s t r u c t BigNum  *dest,  unsigned  src) 

{ 

n BNW0RD16  t; 

n if  eldest -> size) 

::CHK:91497ffd2f610eedcd522b411725555544edd7fde12891118e1fd557783e3eb5a:: 
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« n return  bnSetQCdest,  src)  < 0 ? -1  : (src  !=  0); 


n 

n 

n 

n 

n 

a 

n 

a 

/ * Try 
/ * n 
□ 

} 


t - b n i S u b 1 _ 1 6 ( ( BN WO R D 1 6 * ) d e s t ->p t r , dest->size,  src); 

MALLOCDB; 
if  ( t ) f 

n /*  Underflow.  <=  1 word,  so  do  it  simply.  */ 

n bni Neg_1 6 ( (BNW0RD1 6 *)dest->ptr,  1 ) ; 

n dest->size  = 1; 

n returnl; 

> 

to  normalize?  Needing  this  is  going  to  be  pretty  damn  rare.  */ 
a dest->size  = b n i N o r m_1 6 ( ( BN  WO R D 1 6 *)dest->ptr,  dest->size); 

return  0; 


*/ 


/* 

* Compare  two  BigNums.  Returns  -1.  0 or  1 if  a<b,  a ==  b or  a>b. 

* a <=>  b -->  bnCmp(a,b)  <=>  0 
*/ 

i nt 

bn C mp_ 1 6 ( s t r u c t BigNum  const  *a,  struct  BigNum  const  *b) 

{ 

n unsigned  s,t; 


n s = b n i N o rm_ 1 6 ( C BN WO R D 1 6 *)a->ptr,  a->size); 

n t = bniNorm_16((BNW0RD16  *)b->ptr,  b->size); 

n 

n i f ( s ! = t ) 

n n returns>t?1:-1; 

n return  bniCmp_16C(BNW0RD16  *)a->ptr,  (BNW0RD16  *)b->ptr,  s); 

} 


i nt 

bn S q ua r e_1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src) 
{ 

n unsigned  s; 

n BNW0RD16  *srcbuf; 


n s = b n i N o r m_ 1 6 ( ( BN W 0 R D 1 6 *)src— >ptr,  src->size); 

n if  ( ! s)  { 

n n dest->size  = 0; 

n n return  0; 

n } 

n bnSizeCheckCdest,  2*s); 


n 

□ 

Q 

Q 

n 

n 

n 

D 

n 

□ 


if  (src  ==  dest)  { 

n BNIALLOCCsrcbuf , BNW0RD16,  s); 

n if  (Isrcbuf) 

a n return-1; 

n bniCopy_16(srcbuf,  (BNW0RD16  *)src->ptr,  s); 

n bni Square_1 6( (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)srcbuf,  s); 

n BNI FREECsrcbuf , s); 

> else  { 

n bni Squa re_1 6( CBNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)src->ptr,  s); 

> 


o dest->size  = bn i No r m_1 6 ( ( BN WOR D 1 6 *)dest->ptr,  2*s); 

n MALLOCDB; 

CCCHK:66c2ffb33079abb5e1906288655a3766cd2166dfb4feebe58b3d8cbb85afe709d]] 
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n return0; 

> 


i nt 

bnMu L_1 6( St ruct  BigNum  *dest,  struct  BigNunn  const  *a,  struct  BigNum  const  *b) 
{ 

n unsigned  s,  t; 

n BNW0RD16  *srcbuf; 


n s = bniNorm_16{(BNW0RD16  *)a->ptr,  a->size); 

n t = bniNorm_16((BNW0RD16  *)b->ptr,  b->si2e); 

n if(!s|l!t){ 

a n dest->size=0; 

n n return0; 

n } 


n if(a==b) 

n n return  b n S qua r e_1 6 ( d e s t , a); 

n bnSizeCheckCdest,  s+t); 


n 

□ 

D 

□ 

n 

n 

a 

n 

n 

n 

n 

D 

n 

n 

□ 

n 

n 

a 

D 

n 

a 

n 

a 

> 


if  (dest  ==  a)  { 

n BNIALLOCfsrcbuf,  BNW0RD16,  s); 

a if  (Isrcbuf) 


n n return-1; 

n bn i C opy _ 1 6 C s r c bu f , (BNW0RD16  *)a->ptr,  s); 

n bn  i Hu L_1  6 ( ( BNWORD 1 6 *)dest->ptr,  srcbuf,  s, 

n (BNW0RD16  *)b->ptr,  t); 

n BNI FREE( srcbuf , s ) ; 

} else  if  (dest  ==  b)  { 

n BNIALLOCCsrcbuf , BNW0RD16,  t); 

n if  (!srcbuf) 


n 

□ 

D 

n 

n 

> else 

n 

□ 


n return-1; 

bni Copy_16(srcbuf , CBNW0RD16  *)b->ptr,  t); 

bni Mu L_1 6( (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)a->ptr, 

srcbuf,  t); 

BNIFREECsrcbuf,  t); 

{ 

bni Hu L_1 6( (BNWOR01 6 *)dest->ptr,  (BNW0RD16  *)a->ptr, 

(BNW0RD16  *)b->ptr. 


> 

dest->size  = bn i No r m_1 6 ( ( BN WOR D 1 6 *)dest->ptr,  s+t); 


s. 


s, 

t); 


MALLOCDB; 
return  0; 


i n t 

b nMu L Q_1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *a,  unsigned  b) 
{ 

n unsigned  s; 

n s = bn i N o r m_ 1 6 ( ( BN WOR D 1 6 *)a->ptr,  a->size); 

a if(!s||!b){ 

n n dest->size=0; 

n n return0; 

n > 

n i f (b  ==  1) 
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n n return  bnCopy_16(dest,  a); 

n bnSizeCheckCdest,  s+1); 

a bni  Mu  INI  _1  6 ( (BNW0RD1 6 *)dest->ptr,  (BNW0RD16  *)a->ptr,  s,  b); 

n dest->size  = b n i N o r m_ 1 6 ( ( BN  WO R D 1 6 *)dest->ptr,  s + 1); 

n MALLOCDB; 

n return  0; 

> 

i n t 

bn D i V Mod_ 1 6 ( s t r u c t BigNum  *q,  struct  BigNum  *r,  struct  BigNum  const  *n, 
struct  BigNum  const  *d) 

{ 

n unsigned  dsize,  nsize; 

n BNW0RD16  q h i g h ; 

0 dsize  = bniNorm_16((BNW0RD16  *)d->ptr,  d->size); 

n nsize  = b n i N o r m_ 1 6 ( ( BN  WO R D 1 6 *)n->ptr,  n->size); 

n if(nsize<dsize){ 

n n q->size  = 0;n  /*  No  quotient  */ 

n n r->size=nsize; 

n n return  0;n  /*  Success  */ 

n } 

n bnSizeCheckCq,  nsize-dsize); 

n if  (r  !=  n)  {n  /*  You  are  allowed  to  reduce  in  place  */ 

n n bn S i z e C h e c k ( r , nsize); 

n n bn i C opy _ 1 6 ( C BN WO R D 1 6 *)r->ptr,  (BNW0RD16  *)n->ptr,  nsize); 

n } 

□ a 

n qhigh  = bn i D i v_1 6 ( ( BNW0RD1 6 *)q->ptr,  (BNW0RD16  *)r->ptr,  nsize, 

n (BNW0RD16  *)d->ptr,  dsize); 

n nsize  -=  dsize; 

n if(qhigh){ 

n n bn S i z e C h e c k ( q , nsize+1); 

n n *((BNW0RD16  *)q->ptr  B I G LI TT LE ( -n s i z e- 1 , + n s i z e ) ) = qhigh; 

n a q->size  = nsize+1; 

n } e I s e { 

n n q->size  = b n i No r m_ 1 6 C ( BN  WO R D 1 6 *)q->ptr,  nsize); 

n > 

n r->size  = bn i No rm_1 6 ( ( BNW0RD1 6 *)r->ptr,  dsize); 

n MALLOCDB; 

n return0; 

} 

1 nt 

bnMod_ 1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src,  struct  BigNum  const  *d) 
{ 

n unsigned  dsize,  nsize; 

n nsize  = b n i No r m_ 1 6 ( ( BN WO R D 1 6 *)src->ptr,  src->size); 

n dsize  = b n i N o r m_ 1 6 ( C BN WO R D 1 6 *)d->ptr,  d->size); 

n if(dest!=src){ 

a n bnSizeCheckCdest,  nsize); 

n n bniCopy_16((BNW0RD16  *)dest->ptr,  (BNW0RD16  *)src->ptr,  nsize); 

[CCHK:d19bd6ff5d7f900c667a109966a7399c3c3c8c340de08819aff8ccc54d8089209:: 
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n 

y 

a 

if  (nsize  < dsize)  { 

□ 

B dest->size  = nsize 

; B / * N o 

quotient 

*/ 

□ 

B return0; 

n 

} 

□ 

(void)bniDiv_16((BNW0RD16 

*)dest->pt  r 

BIGLITTLE(-dsize,+dsize), 

n 

( BNW0RD1 6 

*)dest->ptr. 

nsize. 

u 

(BNW0RD1 6 

*)d->ptr,  dsize); 

u 

dest->size  = bn i N o r m_ 1 6 ( ( BN WOR D 1 6 *)dest->ptr. 

dsize); 

n 

MALLOCDB; 

a 

return  0; 

> 


unsigned 

bn ModQ_ 1 6 ( s t r u c t BigNum  const  *src,  unsigned  d) 

{ 

n unsigned  s; 

n s = bn i N o rm_1 6 ( ( BN  WO R D 1 6 *)src->ptr,  src->size); 

n i f ( ! s ) 

n n returnO; 

□ 

n if  (d  & (d-1))n  /*  Not  a power  of  2 */ 

n u d = bninodQ_16( (BNW0RD16  *)src->ptr,  s,  d); 

n else 

n n d = ( uns  i gned ) ( C BNW0RD1  6 * ) s r c ->p t r ) C B I G LI TT L E ( -1 , 0 ) D & (d-1); 

n returnd; 

} 


i nt 

bn ExpMod_1 6 ( s t ru c t BigNum  *dest,  struct  BigNum  const  *n, 
n struct  BigNum  const  *exp,  struct  BigNum  const  *mod) 

{ 

n unsigned  nsize,  esize,  msize; 

n nsize  = bn i No rm_1 6 ( ( BN WO R D 1 6 *)n->ptr,  n->size); 

n esize  = bn i No r m_1 6 ( ( BN WO R D 1 6 *)exp->ptr,  exp->size); 

n msize  = bniNorm_16((BNW0RD16  *)mod->ptr,  mod->size); 

n if  (imsize  ||  (((BNW0RD16  * ) mod->p t r ) C B I G L I TT LE ( -1 , 0 ) ] & 1)  ==  0) 

n n return  -1;n  /*  Illegal  modulus!  */ 


n bnSizeCheckCdest,  msize); 


a 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 


/* 
i f 
n 
□ 
n 
□ 


Special-case  base  of  2 */ 

(nsize  ==  1 &&  ((BNW0RD16  * ) n-> p t r ) C B I G LI TT L E ( -1 , 0 ) D ==  2)  { 
if  ( bn i T wo ExpMod_1 6 ( ( BN WO R D 1 6 *)dest->ptr, 

B B (BNW0RD16  *)exp->ptr,  esize, 

B B (BNW0RD16  *)mod->ptr,  msize)  < 0) 

B return-1; 


} else  { 


B 

B 

B 

B 

B 


if  (bni ExpMod_1  6( (BNW0RD1  6 
(BNW0RD1 6 
B B (BNW0RD16 

B B (BNW0RD16 

return  -1; 


*)dest->ptr, 
*)n->ptr,  nsize, 
*)exp->ptr,  esize, 
*)mod->ptr,  msize) 


< 0) 
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n > 

n dest->size  = bniNorm_16((BNW0RD16  *)dest->ptr,  msize); 

n MALLOCDB; 

n return0; 

} 


i n t 

bn  Do u b L e E X pMod_ 1 6 ( s t r u c t BigNum  *dest, 

n struct  BigNum  const  *n1,  struct  BigNum  const  *e1, 

n struct  BigNum  const  *n2,  struct  BigNum  const  *e2, 

n struct  BigNum  const  *mod) 

{ 

n unsigned  nisize,  elsize,  n2size,  e2size,  msize; 


n1 s i ze 
e 1 s i z e 
n 2 s i z e 
e 2 s i z e 
msize 


= bni Norm_1 6( (BNW0RD1 6 *)n1->ptr, 
= bn i N o r m_ 1 6 ( ( BN  WO R D 1 6 *)e1->ptr, 
= bni Norm_1 6( CBNW0RD1 6 *)n2->ptr, 
= bni Norm_1 6( (BNW0RD1 6 *)e2->ptr, 
b n i N o r m_1 6 ( ( BN WO R D 1 6 *)mod->ptr. 


n1->size); 
e1->size); 
n2->size); 
e2->s i ze  ) ; 
mod->s i z e ) ; 


n if  (Jmsize  ||  ((CBNW0RD16  * ) mod->p t r ) C B I G L I TT L E ( - 1 , 0 ) D S 1)  ==  0) 

° “ return  -1;n  /*  Illegal  modulus!  */ 


n bn S i z e C h e c k C de s t , msize); 


n if  ( bn i Doub I e ExpMod_1 6 ( ( BN  WORD  1 6 *)dest->ptr. 


n 

( BNW0RD1 6 

*)n1->ptr. 

n 1 s i z e , 

(BNW0RD1 6 

*)e1->ptr. 

el  si ze. 

n 

(BNW0RD1 6 

*)n2->ptr. 

n 2 s i z e , 

(BNW0RD16 

*) e2->pt  r. 

e2si ze. 

n 

(BNW0RD1 6 

*)mod->pt  r. 

msize) 

< 0) 

n 

return  -1; 

n dest->size  = bn i N o r m_ 1 6 C C BN WO R D 1 6 *)dest->ptr,  msize); 

n MALLOCDB; 

n return0; 

} 


i n t 

bnT wo ExpHod_ 1 6 ( s t r u c t BigNum  *n,  struct  BigNum  const  *exp, 
n struct  BigNum  const  *mod) 

{ 

n unsigned  esize,  msize; 

n esize  = bn i No r m_ 1 6 ( ( BN  WO R D 1 6 *)exp->ptr,  exp->size); 

n msize  = bniNorm_16((BNW0RD16  *)mod->ptr,  mod->size); 

n if  (Imsize  ||  (C(BNW0RD16  * ) mod->p t r ) C B 1 G LI TT LE ( -1 , 0 ) ] & 1)  ==  0) 

n n return  -1;n  /*  Illegal  modulus!  */ 

n bn S i z e C h e c k ( n , msize); 

n if  ( bn i TwoExpMod_1 6 ( ( BNWOR D1 6 *)n->ptr,  (BNW0RD16  *)exp->ptr,  esize, 

n (BNW0RD16  *)mod->ptr,  msize)  < 0) 

B B return-1; 

B n->size  = bni Norm_1 6( (BNW0RD1 6 *)n->ptr,  msize); 

B MALLOCDB; 

B return0; 
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i n t 

bnGcd_1 6 ( s t rue t BigNum  *dest,  struct  BigNum  const  *a,  struct  BigNum  const  *b) 
{ 

n BNW0RD16  *tmp; 


n 

unsigned  asize,  bsize; 

a 

i n t 

i ; 

n 

/* 

Kind  of  siLLy,  but  we  might 

as  well  permit  it 

n 

i f 

(a  ==  b) 

n 

Q 

return  dest  ==  a ? 0 : 

bnCopyCdest,  a); 

n 

/* 

Ensure  a is  not  the  same  as 

"dest"  */ 

Q 

i f 

(a  ==  dest)  { 

Q 

a 

a = b; 

n 

n 

b = dest; 

n 

} 

n asize  = bniNorni_16((BNW0RDl6  *)a->ptr,  a->size); 

n bsize  = bniNorm_16((BNW0RD16  *)b->ptr,  b->size); 

n bn S i z e C h e c k ( d e s t , bsize+1); 

n /*  Copy  a to  tmp  */ 

n BNIALLOCCttnp,  BNW0RD16,  asize  + 1); 


n 

i f 

( ! tmp ) 

n 

n 

return  -1 ; 

n 

bn 

i C opy 

_16(tmp,  (BNW0RD16  *)a->ptr,  asize); 

n 

/* 

Copy 

b to 

dest,  if  necessary  */ 

n 

i f 

(dest  ! = 

b) 

n 

n 

bniCopy_16((BNW0RD16  *)dest->ptr. 

n 

n 

n 

(BNW0RD16  *)b->ptr,  bsize); 

H 

i f 

( b s i 

ze  > 

asize  ||  (bsize  ==  asize  &8 

n 

bni Cmp_16( (BNW0RD16  *)b->ptr,  (BNW0RD16  *)a->ptr,  asize)  > 0)) 

n 

a 

n 

i = 

bni Gcd_1 6 ( ( BNW0RD1 6 *)dest->ptr,  bsize,  tmp,  asize. 

n 

n 

Q 

&dest->si ze); 

n 

□ 

if  C 

i > 0)n  /*  Result  in  tmp,  not  dest  */ 

D 

n 

n 

bni Copy_1 6( (BNW0RD1 6 *)dest->ptr,  tmp,  dest->size); 

n 

> 

else 

n 

n 

i = 

bni Gcd_1 6( tmp,  asize,  (BNW0RD16  *)dest->ptr,  bsize. 

n 

Q 

n 

&dest->size); 

n 

n 

if  C 

i ==  0)n  /*  Result  in  tmp,  not  dest  */ 

Q 

n 

n 

bni Copy_1 6( (BNW0RD1 6 *)dest->ptr,  tmp,  dest->size); 

n > 

n BN  I F R E E ( t mp , asize  + 1); 

n HALLOCDB; 

n return  (i  < 0)  ? i : 0; 

} 

i nt 

b n I n v_ 1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src, 
struct  BigNum  const  *mod) 

{ 

n unsigned  s,  m; 

n inti; 
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n 
n 

n 
n 
n 
n 
n 
n 
n 
n 

B 
B 
B 
B 
B 
B 
B 
B 
B 
B 
B 
B 

B 
B 
B 

B 
B 
} 

/* 

* Shift  a bignum  Left  the  appropriate  number  of  bits, 

* multiplying  by  2^amt. 

*/ 

i n t 

bn LS h i f t _1 6 C s t ru c t BigNum  *dest,  unsigned  amt) 


B 

unsigned  s 

= dest->size; 

B 

BNW0RD16  carry; 

B 

i f 

(amt  % 

16)  { 

B 

fl 

carry  = bn i Ls h i f t _ 1 6 ( ( BNU 0 R D 1 6 *)dest->ptr,  s,  amt  % 

16); 

B 

B 

i f 

(carry)  { 

B 

B 

n 

s + + ; 

B 

B 

n 

bnSizeCheck(dest,  s); 

fl 

fl 

D 

((BNW0RD16  *)dest->ptr)[BIGLITTLE(-s,s-1 ):  = 

carry; 

B 

fl 

> 

B 

> 

B 

amt 

/=  16; 

B 

i f 

( amt ) { 

fl 

fl 

bn S i z e C h e c k ( d e s t , s+amt); 

B 

fl 

memmo V e ( ( BN WOR D 1 6 *)dest->ptr  B I G LI TT LE ( - s-a m t , +amt) 

r 

B 

fl 

(BNW0RD16  *)dest->ptr  BIG(-s), 

B 

fl 

B 

s * si zeof (BNW0RD1 6) ) ; 

CCCHK:52aad3ecfe0468d2b11f6b7227e3323aaa7c56702aaf85a72f3316739857b2562:: 


s - bniNorm_16C(BNW0RDl6  *)src->ptr,  src->size); 
m = bn i No r m_ 1 6 ( ( BN WO R D 1 6 *)mod->ptr,  mod->size); 

/*  bnilnv_16  requires  that  the  input  be  Less  than  the  modulus  */ 
if  ( m < s II 

(m==s  &&  bni Cmp_1 6( (BNW0RD1 6 *)src->ptr,  CBNW0RD16  *)mod->ptr. 


bn S i z e C h e c k ( d e s t , s + (m==s)); 
if  (dest  !=  src) 

n b n i C o p y _ 1 6 ( ( B N W 0 R D 1 6 *)dest— >ptr, 

n (BNW0RD16  *)src->ptr,  s); 

/*  Pre-reduce  modulo  the  modulus  */ 

(void)bniDiv_16((BNW0RD16  *)dest->ptr  BIGLITTLEC-m,+m), 
n <BNW0RD16  *)dest->ptr,  s, 

(BNW0RD16  *)mod->ptr,  m); 
s = b n i No r m_ 1 6 C ( BN WO R D 1 6 *)dest->ptr,  m); 

MALLOCDB; 


B 
B 
B 
B 
B 
B 
B 
B 
B 

} else  { 

n bn S i z e C h e c k ( d e s t , m+1); 

a if(dest!=src) 

H n b n i C opy _ 1 6 ( ( BN WO R D 1 6 *)dest->ptr, 

n n CBNW0RD16  *)src->ptr,  s); 

> 

i = bn i Inv_1 6 ( ( BNW0RD1 6 *)dest->ptr,  s,  (BNW0RD16  *)mod->ptr,  m); 
if  (i  ==  0) 

H dest->size  = b n i No r m_1 6 ( C BN WO R D 1 6 *)dest->ptr,  m); 


MALLOCDB; 
return  i; 


s)  ) ) 
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n 

n 

□ 

□ 

n 

□ 

} 


n bniZero_16((BNW0RD16  *)dest->ptr,  amt); 

n s +=  amt ; 

> 

dest->size  = s; 

MALLOCDB; 
return  0; 


/* 

* Shift  a bignum  right  the  appropriate  number  of  bits, 

* dividing  by  2^amt  . 

*/ 

void  bnRS h i f t _1 6 ( s t r u c t BigNum  *dest,  unsigned  amt) 

{ 


D 

unsigned 

s = dest->size; 

n 

if  (amt 

>=  16)  { 

n 

B 

memmo ve ( 

n 

B 

(BNW0RD1 6 

n 

B 

a (BNW0RD16 

n 

B 

n s-amt/16* 

o 

B 

s -=  amt /I  6; 

B 

B 

amt  %=  16; 

o 

> 

*)dest->ptr  B I G ( - s+a m t / 1 6 ) , 
*)dest->ptr  BIGLITTLE(-s,  +amt/16) 
sizeof(BNW0RD16)); 


n i f ( amt ) 

n n ( VO i d ) bn i R s h i f t _ 1 6 ( ( BN WO R D 1 6 *)dest->ptr,  s,  amt); 


n dest->size  = bn i No rm_1 6 ( ( BNW0RD1 6 *)dest->ptr,  s); 

n MALLOCDB; 

} 

/* 

* Shift  a bignum  right  until  it  is  odd,  and  return  the  number  of 

* bits  shifted.  n = d * 2*s.  Replaces  n with  d and  returns  s. 

* Returns  0 when  given  0.  (Another  valid  answer  is  infinity.) 

*/ 

unsigned 

bnHa ke0dd_1 6 ( s t r u c t BigNum  *n) 

{ 


B 

unsigned  size; 

B 

unsigned  s;n  /*  shift  amount 

B 

BNW0RD16  *p; 

B 

BNW0RD16  t; 

B 

P 

= (BNW0RD16  *)n->ptr; 

B 

s i 

ze  = bn i No r m_1 6 ( p , n->size); 

B 

i f 

( ! s i z e ) 

B 

B 

return  0; 

B 

t 

= BIGLITTLECpC-1  :,pC0:); 

B 

S 

= 0; 

B 

/* 

See  how  many  words  we  have  to 

B 

i f 

( ! t)  { 

B 

B 

/*  Shift  by  words  */ 

B 

B 

do  { 

B 

B 

n 
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n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


CCCHK 
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B B S++; 

n n BIGLITTLEC — p,p++); 

n > while  (Ct  = B I G LI TT L E ( p [ - 1 ] , p [ 0 : ) ) ==  0); 

n size-=s; 

n s *=  16; 

n memmoveC(BNU0RDl6  *)n->ptr  BIG(-size),  p BIGC  — size), 

° « size  * sizeof(BNW0RD16)); 

a p = CBNW0RD16  *)n->ptr; 

a MALLOCDB; 

} 

pgpAssert(t) ; 

/*  Now  count  the  bits  */ 
while  C (t  & 1)  ==  0)  { 
a t >>=  1 ; 

B S + +; 

> 

/*  Shift  the  bits  */ 
if  (s  & (16-1 ))  { 

a bniRshift_16(p,  size,  s & (16-1)); 

a /*  Renormalize  */ 

a if  (BIGLITTLE(*(p-si ze),*(p+(si  ze-1 ) ) ) ==  0) 

a a --S i ze; 

> 

n->size  = size; 

MALLOCDB; 
return  s; 
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/* 

* bn16.h  - interface  to  16-bit  bignum  routines. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  bn16.h,v  1.13.2.1  1997/06/07  09:49:26  mhw  Exp  $ 

*/ 

#ifdef  cpLuspLus 

extern  "C"  { 

# e nd i f 

struct  BigNum; 


void  bnlnit_16(void); 

void  bnEnd_16(struct  BigNum  *bn); 

int  bnPreaLLoc_16(struct  BigNum  *bn,  unsigned  bits); 
int  bnCopy_16(struct  BigNum  *dest,  struct  BigNum  const  *src); 
int  bnSuap_16(struct  BigNum  *a,  struct  BigNum  *b); 
void  bn N o r m_ 1 6 ( s t r u c t BigNum  *bn); 

void  bn  Ex t ra c t B i gBy t es_1 6 ( s t r u c t BigNum  const  *bn,  unsigned  char  *dest, 
n unsigned  Lsbyte,  unsigned  dLen); 

int  bn  I nse r t Bi gBy t es_1 6 ( s t r uc t BigNum  *bn,  unsigned  char  const  *src, 
n unsigned  Lsbyte,  unsigned  Len); 

void  bn  Ex t r a c t Li 1 1 L eBy t e s_1 6 ( s t r u c t BigNum  const  *bn,  unsigned  char  *dest, 
n unsigned  Lsbyte,  unsigned  dLen); 

int  bninse r t Li t t L eBy tes_1 6( s t rue t BigNun  *bn,  unsigned  char  const  *src, 
a unsigned  Lsbyte,  unsigned  Len); 

unsigned  bn LS Wo r d_ 1 6 ( s t r u c t BigNum  const  *src); 
unsigned  bnB i t s_ 1 6 ( s t r u c t BigNum  const  *src); 

int  bnAdd_16(struct  BigNum  *dest,  struct  BigNum  const  *src); 
int  bnSub_16(struct  BigNum  *dest,  struct  BigNum  const  *src); 
int  b n CnipQ_  1 6 { s t r u c t BigNum  const  *a,  unsigned  b); 
int  bnSetQ_16(struct  BigNum  *dest,  unsigned  sre); 
int  bn  Ad dQ_1 6 ( s t r u c t BigNum  *dest,  unsigned  sre); 
int  bnSubQ_16(struct  BigNum  *dest,  unsigned  sre); 
int  bnCmp_16(struct  BigNum  const  *a,  struct  BigNum  const  *b); 
int  bnSquare_16(struct  BigNum  *dest,  struct  BigNum  const  *src); 
int  bnHu L_1 6 ( st rue t BigNum  *dest,  struct  BigNum  const  *a, 
n struct  BigNum  const  *b); 

int  bnMuLQ_16(struct  BigNum  *dest,  struct  BigNum  const  *a,  unsigned  b); 
int  bnDi vMod_1 6 ( s t ruct  BigNum  *q,  struct  BigNum  *r,  struct  BigNum  const  *n, 
n struct  BigNum  const  *d); 

int  bnHod_16(struct  BigNum  *dest,  struct  BigNum  const  *src, 
n struct  BigNum  const  *d); 

unsigned  bnMod9_1 6 ( s t rue t BigNum  const  *src,  unsigned  d); 
int  bnExpHod_1 6 ( St  rue t BigNum  *dest,  struct  BigNum  const  *n, 
n struct  BigNum  const  *exp,  struct  BigNum  const  *mod); 

int  bn Doub L e ExpMod_1 6 ( s t r uc t BigNum  *dest, 

n struct  BigNum  const  *n1,  struct  BigNum  const  *e1, 

n struct  BigNum  const  *n2,  struct  BigNum  const  *e2, 

n struct  BigNum  const  *mod); 

int  bnTwoExpMod_16(struct  BigNum  *n,  struct  BigNum  const  *exp, 
n struct  BigNum  const  *mod); 

int  bnG c d_ 1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *a, 
n struct  BigNum  const  *b); 

int  b n I n v_1 6 ( s t r u c t BigNum  *dest,  struct  BigNum  const  *src, 
n struct  BigNum  const  *mod); 
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int  bn LS h i f t _1 6 ( s t r u c t BIgNum  *dest,  unsigned 
void  bn R S h i f t _1 6 C s t ru c t BigNum  *dest,  unsigned 
unsigned  bnHa ke0dd_1 6 ( s t ru c t BigNum  *n); 

#i f def  cpLuspLus 

} 

#endi  f 


CCCHK: 5477a9ea64065d:: 
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bn68000.c 


/* 

* bn68000.c  - bnInitC)  for  Motorola  680x0  family,  16  or  32-bit. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  in  1995  by  Colin  Plumb. 

* 

* $Id:  bn68000.c,v  1.5. 2.1  1 997/06/07  09:49:27  mhw  Exp  $ 

*/ 


#include  "bn.h" 
/(include  "bni.h" 
#include  "bn16.h 
//include  "bn32.h 


#ifndef  BNINCLUDE 


//error 

# e nd i f 

You  must 

define 

void 

bnlnit(void) 

{ 

n 

if  ( i s68020 ( ) ) 

Q 

Q 

bn  I n i t 

n 

else 

n 

n 

bn  I n i t 

> 


BNINCLUDE  to  bni68000.h 


320; 

160; 


to  use  assembly  primitives 
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/* 

* bn8086.c  - bnInitC)  for  Intel  x86  family  in  16-bit  mode. 

* 

* Copyright  CC)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  in  1995  by  Colin  Plumb. 

★ 

* $Id:  bn8086.c,v  1.5. 4.1  1997/06/07  09:49:27  mhw  Exp  $ 

*/ 

#include  "bni.h" 

^include  "bn16.h" 

#include  "bn32.h" 

#ifndef  BNINCLUDE 

#error  You  must  define  BNINCLUDE  to  bni8086.h  to  use  assembly  primitives. 

# e n d i f 

void 

bnlnit(void) 

{ 


n 

if  (not386()) 

n 

o 

b n I n i t 

_ 1 6 O ; 

n 

else 

□ 

Q 

bn  I n i t 

_32C ); 

> 
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bndsaprime.c 


/* 

* bndsaprime.c  - Digital  Signature  Algorithm  prime  generation  using  the 

* bignum  library  and  sieving. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

* 

* $Id:  b n d s a p r i m e . c , V 1.2. 2.1  1 997/06/07  09:49:27  mhw  Exp  $ 

*/ 

#include  <stdarg.h> 

^include  <string.h> 

#if  BNDEBUG 
^include  <stdio.h> 

#endi f 

^include  "bnkludge.h" 


//include 
//i  nc  lude 
//include 
//include 
^include 


bn  . h " 

bnimem.h"n  /*  For  bniMemWipe  */ 

bndsaprime.h" 

bnsieve.h" 

pgpDebug . h" 


/*  Size  of  the  sieve  area  (can  be  up  to  65536/8  - 8192)  */ 
//define  SIEVE  1024 


/* 

* Helper  function  that  does  the  slow  primality  test. 

* bn  is  the  input  bignum;  a and  e are  temporary  buffers  that  are 

* allocated  by  the  caller  to  save  overhead. 

* 

* Returns  0 if  prime,  >0  if  not  prime,  and  -1  on  error  (out  of  memory). 

* If  not  prime,  the  return  value  is  the  number  of  modular  exponentiations 

* performed.  Calls  the  progress  function  with  progress  indicators  as 

* tests  are  passed. 

* 

* Currently,  the  testing  performs  Euler  tests,  to  the  bases  2,  3,  5,  7, 

* 11,  13  and  17.  (An  Euler  test  is  a slightly  strengthened  Fermat  test; 

* Euler  pseudoprimes  are  a subset  of  Fermat  pseudoprimes.)  Some  people 

* worry  that  this  might  not  be  enough.  Number  theorists  may  wish  to 

* generate  primality  proofs,  but  for  random  inputs,  this  returns  non-primes 

* with  a probability  which  is  quite  negligible,  which  is  good  enough. 

* NOTE  that  for  NON-random  inputs,  there  are  indeed  numbers  which  are 

* strong  pseudoprimes  to  a lot  of  bases.  Up  to  1/4  of  all  bases  0 < b < n. 

* 

* It  has  been  proved  (see  Carl  Pomerance,  "On  the  Distribution  of 

* Pseudoprimes",  Hath.  Corap.  v.37  (1981)  pp.  587-593)  that  the  number 

* of  pseudoprimes  (composite  numbers  that  pass  a Fermat  test  to  the 

* base  2)  less  than  x is  bounded  by: 

* exp(ln(x)*(5/14))  <=  P_2(x)n  //////  CHECK  THIS  FORHULA  - it  looks  wrong!  ftUU 

* P_2(x)  <=  X * exp(-1/2  * ln(x)  * I n ( I n ( I n ( x ) ) ) / ln(ln(x))). 

* Thus,  the  local  density  of  Pseudoprimes  near  x is  at  most 

* exp(-1/2  * ln(x)  * I n ( I n ( I n ( x ) ) ) / ln(ln(x))),  and  at  least 

* exp ( I n ( X ) * ( 5 / 1 4 ) - ln(x)).  Here  are  some  values  of  this  function 

* for  various  k-bit  numbers  x = 2''k: 

* BitsnDensity  <=a  Bit  equivalentn  Density  >=n  Bit  equivalent 

* 1 28n3 . 577869e-07n  21.414396n  4 . 2 0 2 2 1 3e-37n  120.840190 

* 1 92n4 . 1 75629e-1 0n  31.157288n  4 . 936 2 5 0 e-56n  183.724558 
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* 

* 

★ 

★ 

★ 

★ 

★ 

* 

* 

* 

* 

* 

★ 

★ 

* 

★ 

* 

* 

★ 

★ 

★ 

* 

* 

★ 

* 

★ 

★ 

★ 

* 

★ 

* 

★ 

★ 

* 


256  5.804314e-13n 
384  1 . 578039e-1 8n 
512  5.858255e-24n 
768  1 . 489276e-34n 
1024  6.633188e-45n 


40 . 6479400 
59 . 1 365730 
77.1758030 
112. 3709440 
146.7570620 


4.977813e-75o 
3 . 938861  e-1 1 3d 
2 . 563353e-1 51 D 
7.8728256-2280 
1 . 8824046-3040 


246.829095 

373.400096 

500.253110 

754.422724 

1008.953565 


As  you  can  S66,  th6r6's  quit6  a bit  of  slop  batwoon  thasa  astimatas. 
In  fact,  tha  dansity  of  psaudoprimas  is  conjacturad  to  ba  closer 
to  the  square  of  that  upper  bound.  E.g.  the  density  of  pseudoprimes 
of  size  256  is  around  3 * 10''-27.  The  density  of  primes  is  very 
high,  from  0.005636  at  256  bits  to  0.001409  at  1024  bits,  i.e. 
more  than  10''-3. 


For  those  people  used  to  cryptographic  levels  of  security  where  the 
56  bits  of  DES  key  space  is  too  small  because  it's  exhaustible  with 
custom  hardware  searching  engines,  note  that  you  are  not  generating 
50,000,000  primes  per  second  on  each  of  56,000  custom  hardware  chips 
for  several  hours.  The  chances  that  another  Dinosaur  Killer  asteroid 
will  land  today  is  about  10''-11  or  2''-36,  so  it  would  be  better  to 
spend  your  time  worrying  about  *that*.  Well,  okay,  there  should  be 
some  derating  for  the  chance  that  astronomers  haven't  seen  it  yet,  but 
I think  you  get  the  idea.  For  a good  feel  about  the  probability  of 
various  events,  I have  heard  that  a good  book  is  by  E'mile  Borel, 

"Les  P r ob a b i I i t e ' s et  la  vie".  (The  's  are  accents,  not  apostrophes.) 

For  more  on  the  subject,  try  "Finding  Four  Million  Large  Random  Primes", 
by  Ronald  Rivest,  in  Advancess  in  Cryptology:  Proceedings  of  Crypto  '90. 
He  used  a sma I I -d i v i s o r test,  then  a Fermat  test  to  the  base  2,  and  then 
8 iterations  of  a Miller-Rabin  test.  About  718  million  random  256-bit 
integers  were  generated,  43,741,404  passed  the  small  divisor  test, 
4,058,000  passed  the  Fermat  test,  and  all  4,058,000  passed  all  8 
iterations  of  the  Miller-Rabin  test,  proving  their  primality  beyond  most 
reasonable  doubts. 


* If  the  probability  of  getting  a pseudoprime  is  some  small  p,  then 

* the  probability  of  not  getting  it  in  t trials  is  C1-p)*t.  Remember 

* that,  for  small  p,  (1-p)^(1/p)  ~ 1/e,  the  base  of  natural  logarithms. 

* (This  is  more  commonly  expressed  as  e = I i m_  { x \ t o \ i n f t y > (1+1/x)''x.) 

* Thus,  (1-p)*t  ~ e*(-p*t)  = expC-p*t).  So  the  odds  of  being  able  to 

* do  this  many  tests  without  seeing  a pseudoprime  if  you  assume  that 

* p = 10*-6  (one  in  a million)  is  one  in  57.86.  If  you  assume  that 

* p = 2*10*-6,  it's  one  in  3347.6.  So  it's  implausible  that  the 

* density  of  pseudoprimes  is  much  more  than  one  millionth  the  density 

* of  primes. 

* 

* He  also  gives  a theoretical  argument  that  the  chance  of  finding  a 

* 256-bit  non-prime  which  satisfies  one  Fermat  test  to  the  base  2 is  less 

* than  10^-22.  The  small  divisor  test  improves  this  number,  and  if  the 

* numbers  are  512  bits  (as  needed  for  a 1024-bit  key)  the  odds  of  failure 

* shrink  to  about  10''-44.  Thus,  he  concludes,  for  practical  purposes 

* *one*  Fermat  test  to  the  base  2 is  sufficient. 

*/ 

static  int 

p r i meT e s t ( s t r u c t BigNum  const  *bn,  struct  BigNum  *e,  struct  BigNum  *a, 
o int  (*f)(void  *arg,  int  c),  void  *arg) 

{ 

D interr; 

D unsigned  i,  j; 


C[CHK:28f0ce11544a79677c417f1f2fb9add6709a14db0fb078fa134a86b71233b280d]: 


38 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


bndsaprime.c 


n unsigned  k,  1; 

a static  unsigned  const  primesCD  = {2,  3,  5,  7 , 11,  13,  17>; 

#define  CONFIRMTESTS  7 


#i  f 
□ 
o 
□ 

Q 

n 

□ 

□ 

□ 

a 

n 

n 


BNDEBUGn  /*  Debugging  */ 

/* 

* This  is  debugging  code  to  test  the  sieving  stage. 

* If  the  sieving  is  wrong,  it  will  Let  past  numbers  with 

* smaLL  divisors.  The  prime  test  here  wiLL  stiLL  work,  and 

* weed  them  out,  but  you'll  be  doing  a Lot  more  slow  tests, 

* and  presumably  excluding  from  consideration  some  other  numbers 

* which  might  be  prime.  This  check  just  verifies  that  none 

* of  the  candidates  have  any  small  divisors.  If  this 

* code  is  enabled  and  never  triggers,  you  can  feel  quite 

* confident  that  the  sieving  is  doing  its  job. 

*/ 


n 

i = 

bnModQ(bn, 

30030);n  /*  30030 

= 2*3* 

n 

i f 

( ! (i 

i 2)) 

printf("bn  div  by 

2 ! " ) ; 

□ 

i f 

( ! ( i 

( 3)) 

printf("bn  div  by 

3 ! " ) ; 

n 

i f 

( ! (i 

i 5)) 

printfC'bn  div  by 

5!"); 

n 

i f 

( ! ( i 

( 7)) 

printf("bn  div  by 

7 ! " ) ; 

n 

i f 

( ! ( i 

( ID) 

printf("bn  div  by 

11!"); 

n 

i f 

( ! (i 

( 13)) 

printf("bn  div  by 

13!"); 

□ 

i = 

bnModQ(bn, 

7429);n  /*  7429 

= 17  * 19 

n 

i f 

( ! (i 

( 17)) 

printfC'bn  div  by 

17!"); 

n 

i f 

( ! (i 

( 19)) 

printf("bn  div  by 

19!"); 

n 

i f 

( ! (i 

( 23)) 

printf("bn  div  by 

23! "); 

n 

i = 

bnModQ(bn, 

33263);n  /*  33263 

= 29  * 31 

ti 

i f 

( ! ( i 

29)) 

printf("bn  div  by 

29!"); 

n 

i f 

( ! (i 

( 31  ) ) 

printf("bn  div  by 

31!"); 

n 

i f 

( ! ( i 

37)  ) 

printf("bn  div  by 

37!"); 

#end i f 

5*7*11 


23  */ 


* 37  */ 


* 13  */ 


□ 

D 

□ 

a 

□ 

n 

D 

D 

n 

a 

□ 

□ 

□ 

□ 

n 

a 

n 

□ 

□ 

n 

n 

□ 

n 

□ 

D 


/* 

* Now,  check  that  bn  is  prime.  If  it  passes  to  the  base  2, 

* it's  prime  beyond  all  reasonable  doubt,  and  everything  else 

* is  just  gravy,  but  it  gives  people  warm  fuzzies  to  do  it. 

* 

* This  starts  with  verifying  Euler's  criterion  for  a base  of  2. 

* This  is  the  fastest  p s eudop r i ma I i t y test  that  I know  of, 

* saving  a modular  squaring  over  a Fermat  test,  as  well  as 

* being  stronger.  7/8  of  the  time,  it's  as  strong  as  a strong 

* pseudop r i ma L i ty  test,  too.  (The  exception  being  when  bn  == 

* 1 mod  8 and  2 is  a quartic  residue,  i.e.  bn  is  of  the  form 

* a*2  + (8*b)''2.)  The  precise  series  of  tricks  used  here  is 

* not  documented  anywhere,  so  here's  an  explanation. 

* Euler's  criterion  states  that  if  p is  prime  then  a*((p-1)/2) 

* is  congruent  to  Jacobi(a,p),  modulo  p.  Jacobi(a,p)  is 

* a function  which  is  +1  if  a is  a square  modulo  p,  and  -1  if 

* it  is  not.  For  a = 2,  this  is  particularly  simple.  It's 

* +1  if  p ==  +/-1  (mod  8),  and  -1  if  m ==  +/-3  (mod  8). 

* If  p ==  3 mod  4,  then  all  a strong  test  does  is  compute 

* 2'' ( ( p-1  ) / 2 ) . and  see  if  it's  +1  or  -1.  (Euler's  criterion 

* says  *which*  it  should  be.)  If  p ==  5 (mod  8),  then 

* 2*((p-1)/2)  is  -1,  so  the  initial  step  in  a strong  test, 

* Looking  at  2'' ( ( p-1  ) /4 ) , is  wasted  - you're  not  going  to 

* find  a +/-1  before  then  if  it  *is*  prime,  and  it  shouldn't 

* have  either  of  those  values  if  it  isn't.  So  don't  bother. 
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n 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

n 

n 

n 

u 

n 

□ 

n 


★ 

* The  remaining  case  i s p ==  1 (mod  8).  In  this  case,  we 

* expect  2''((p-1)/2)  ==  1 (mod  p),  so  we  expect  that  the 

* square  root  of  this,  2^((p-1)/4),  will  be  +/-1  (mod  p). 

* Evaluating  this  saves  us  a modular  squaring  1/4  of  the  time. 

* If  it's  -1,  a strong  p s e ud o p r i ma I i t y test  would  call  p 

* prime  as  well.  Only  if  the  result  is  +1,  indicating  that 

* 2 is  not  only  a quadratic  residue,  but  a quartic  one  as  well, 

* does  a strong  p s e ud o p r i ma I i t y test  verify  more  things  than 

* this  test  does.  Good  enough. 

* 

* We  could  back  that  down  another  step,  looking  at  2''((p-1)/8) 

* if  there  was  a cheap  way  to  determine  if  2 were  expected  to 

* be  a quartic  residue  or  not.  Dirichlet  proved  that  2 is 

* a quartic  residue  iff  p is  of  the  form  a^2  + (8*b*2). 

* All  primes  ==  1 (mod  4)  can  be  expressed  as  a^2  + (2*b)''2, 

* but  I see  no  cheap  way  to  evaluate  this  condition. 

*/ 


n 

if  (bnCopy(e,  bn)  < 

0) 

n 

B 

return 

-1; 

n 

(void)bnSubQ(e, 

1 ); 

n 

1 = bnLSWord(e) 

f 

□ 

j = 1;n 

/* 

where  to 

start  in  prime  array 

for  strong  prime 

tests  * / 

n 

i f ( 1 & 

7) 

{ 

n 

B 

bnRShift(e, 

1); 

a 

B 

i f 

( bnT wo E X pMod ( a , e,  bn)  < 0) 

□ 

fl 

B 

return  -1; 

u 

B 

i f 

( ( 1 

S 7) 

= = 6)  { 

n 

B 

B 

/* 

bn  ==  7 mod  8,  expect 

+ 1 */ 

n 

B 

B 

i f 

( bnBi ts(a)  !=  1) 

a 

B 

fl 

□ 

return  1;n 

/*  Not 

prime  * / 

n 

B 

B 

k = 

1; 

n 

B 

> 

else 

{ 

& 

B 

B 

/* 

bn  ==  3 or  5 mod  8,  expect 

-1  ==  bn-1  * 

/ 

n 

B 

B 

i f 

(bnAddQ(a,  1)  < 0) 

n 

B 

B 

D 

return  -1 ; 

n 

B 

B 

i f 

(bnCmp(a,  bn)  !=  0) 

n 

B 

B 

D 

return  1;n 

/*  Not 

prime  * / 

Q 

B 

B 

k = 

1; 

Q 

B 

B 

i f 

( l & 4)  { 

Q 

B 

B 

Q 

/*  bn  ==  5 mod  8 

, make 

odd  for  strong  tests 

n 

B 

B 

D 

bnRShift(e,  1); 

n 

B 

B 

n 

k = 2; 

n 

B 

B 

> 

Q 

B 

> 

Q 

> else 

n 

B 

/* 

bn  = 

= 1 

mod  8,  expect  2^((bn- 

1 )/4) 

==  +/-1  mod 

bn  * / 

c 

B 

bnRShift(e, 

2); 

B 

B 

if 

( bnTwoExpMod ( a , e,  bn)  < 0) 

B 

B 

B 

return  -1; 

B 

B 

i f 

(bnBits(a)  ==  1)  ( 

B 

B 

B 

j = 

0;n  /*  Re-do  strong 

prime 

test  to  base 

2 */ 

B 

B 

> 

else 

{ 

B 

B 

B 

i f 

(bnAddGKa,  1)  < 0) 

B 

B 

B 

n 

return  -1; 

B 

B 

B 

i f 

( bnCmp (a,  bn)  !=  0) 
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Q 

n 

□ 

n 

Q 

n 

□ 

n 

n 

n 


return  1;n 


/*  Not  prime  */ 


n n □ 

n > 

n k = 2 + bnMakeOddCe); 


/*  It's  prime!  Now  go  on  to  confirmation  tests  */ 

/* 

* Now,  e = (bn-1)/2^k  is  odd.  k >=  1,  and  has  a given  value 

* with  probability  2''-k,  so  its  expected  value  is  2. 

* j = 1 in  the  usual  case  when  the  previous  test  was  as  good  as 

* a strong  prime  test,  but  1/8  of  the  time,  j = 0 because 


n 

* 

the 

St  rong 

prime  test  to  the  base  2 needs  to 

be  re-done  . 

n 

*/ 

n 

for 

(i 

= j ; 

i 

< sizeof(primes)/sizeof(*primes); 

i ++ ) { 

□ 

n 

i f 

(f 

S&  (err  = f(arg,  '*'))  < 0) 

n 

n 

n 

return  err; 

n 

n 

( VO i d ) b n S e t Q ( a , primesCiD); 

n 

□ 

i f 

(bnExpHod(a,  a,  e,  bn)  < 0) 

n 

B 

n 

return  -1; 

n 

n 

i f 

( bnBi ts(a)  ==  1) 

n 

n 

□ 

continue;n  /*  Passed 

this 

test  * / 

s 

Q 

L = 

k; 

n 

n 

for 

(; 

;)  { 

D 

n 

n 

i f (bnAddQ(a,  1 ) < 0) 

n 

n 

Q 

n return  -1; 

a 

n 

n 

if  (bnCmp(a,  bn)  ==  0)n  /* 

Was 

result  bn-1?  */ 

n 

n 

□ 

a break, -n  /*  Prime  * 

/ 

n 

Q 

n 

if  (!--l)n  /*  Reached 

end. 

not  -1 ? luck? 

a 

n 

B 

n return  i+2-j;n  /* 

Failed,  not  prime  * 

a 

B 

B 

/*  This  portion  is  executed,  on 

average,  once , 

a 

B 

B 

( VO i d ) bn S u bQ ( a , 1);n  /* 

Put 

a back  where  it 

B 

B 

B 

if  (bnSquare(a,  a)  < 0 | | 

bnMod(a,  a,  bn)  < 0) 

D 

B 

B 

n return  -1; 

n 

B 

B 

if  (bnBits(a)  ==  1) 

n 

B 

B 

n return  i+2-j;n  /* 

Failed,  not  prime  * 

n 

B 

y 

Q 

B 

/* 

It 

worked  (to  the  base  primesCi 

D)  */ 

s 

D 

> 

n 

/* 

Yes 

, we' 

ve 

decided  that  it's  prime.  */ 

D 

i f 

(f 

&&  (err 

= f (arg,  '*'  ))  < 0) 

n 

n 

return 

err; 

B 

return 

0;n 

/*  Prime!  */ 

*/ 


/* 

* Modifies  the  given  bnq  to  return  a prime  slightly  larger,  and  then 

* modifies  the  given  bnp  to  be  a prime  which  is  ==  1 (mod  bnq). 

* This  is  done  by  decreasing  bnp  until  it  is  ==  1 (mod  2*bnq),  and 

* then  searching  forward  in  steps  of  2*bnq. 

* Returns  >=0  on  success  or  -1  on  failure  (out  of  memory).  On 

* success,  the  return  value  is  the  number  of  modular  exponentiations 

* performed  (excluding  the  final  confirmation). 

* This  never  gives  up  searching. 

•k 

* int  (*f)(void  *arg,  int  c),  void  *arg 
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The  function  f argument,  if  non-NULL,  is  called  with  progress  indicator 
characters  for  printing.  A dot  (.)  is  written  every  time  a primality  test 
is  failed,  a star  (*)  every  time  one  is  passed,  and  a slash  C/)  in  the 
case  that  the  sieve  was  emptied  without  finding  a prime  and  is  being 
refilled.  f is  also  passed  the  void  *arg  argument  for  private 
context  storage.  If  f returns  < 0,  the  test  aborts  and  returns 
that  value  immediately. 

Apologies  to  structured  programmers  for  all  the  GOTOs. 


* 

★ 

* 
it 
★ 

★ 

* 

★ 

* 

*/ 
i n t 

d s a P r i meG e n ( s t r u c t BigNum  *bnq,  struct  BigNum  *bnp, 

lid  *a  r g ) 


□ 

i nt  (*f ) Cvoi d 

*arg,  int  c). 

□ 

int  retval; 

Q 

unsigned  p,  prev; 

n 

struct  BigNum 

a,  e; 

n 

int  modexps  = 

0; 

fdef 

MSDOS 

Q 

unsigned  char 

* s i e V e ; 

#e  L se 

u 

unsigned  char 

si eveCSIEVET; 

#endi f 

#i f def 

MSDOS 

a 

sieve  = bniMemAlloc(SIEVE); 

n 

if  (Isieve) 

n 

n return 

-1; 

#end  i f 

EX 

bnBeginC&a); 

n 

bnBeg i n ( &e  ) ; 

a /*  Phase  1:  Search  forwards  from  bnq  for  a suitable  prime.  */ 

n /*  First,  make  sure  that  bnq  is  odd.  */ 

n ( VO i d ) bn Ad  da ( b n q , ~ bn L S Wo r d ( bnq ) & 1); 


□ 

n 

for  ( 

n 

i f 

( s i e ve Bu i 1 d ( s i e V e , SIEVE,  bnq,  2,  1)  < 0) 

EX 

a 

n 

goto 

f a i led; 

n 

Q 

P = 

prev  = 0 ; 

n 

n 

i f 

(sieveCOD 

8 1 II  (p  = s i e ve Sea r c h ( s i e ve,  SIEVE,  p)) 

n 

D 

a 

do  { 

El 

n 

n 

EX 

/* 

a 

n 

n 

n 

* Adjust  bn  to  have  the  right  value. 

n 

n 

n 

n 

* incrementing  in  steps  of  < 65536. 

n 

n 

n 

a 

* 32767  = 65535/2. 

n 

n 

n 

n 

*/ 

EX 

u 

n 

□ 

pgpAssertCp  >=  prev); 

n 

n 

n 

n 

prev  = p-prev;n  /*  Delta  - add  2*prev 

#if 

SIEVE*8*2 

>=  65536 

n 

n 

n 

Q 

while  (prev  > 32767)  { 

Q 

n 

□ 

n 

n if  CbnAddQCbnq,  2*32767)  < 0) 

El 

n 

n 

EX 

n n gotofailed; 

n 

a 

Q 

n 

B prev  -=  32767; 

n 

n 

n 

n 

> 

CCCHK:a8accbd6560e0f3efffc0ccc9cdd77222775eed9ff3f956cee6fdcd25547fd06b3i] 


42 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


bndsaprime.c 


#endi f 

n 

B 

B 

B 

i f 

CbnAddQCbnq,  2*prev) 

< 0) 

n 

B 

B 

B 

B 

goto  failed; 

n 

B 

B 

B 

prev  = 

p; 

n 

B 

B 

B 

retva  L 

= primeTestCbnq, 

8e,  8a,  f,  a 

rg ) ; 

n 

B 

B 

B 

i -f 

Cretval  <=  0) 

n 

B 

B 

B 

B 

goto  phase2;n 

/*  Success  ! 

*/ 

□ 

B 

B 

B 

modexps  +=  retval; 

B 

B 

B 

B 

i f 

Cf 

&S  Cretval  = fCarg 

, < 0) 

B 

B 

B 

B 

D 

goto  done; 

B 

B 

B 

B 

/* 

And 

try  again  */ 

B 

B 

B 

B 

P = 

s i 

e ve S e a r c h C s i e V e , SIEVE,  p); 

B 

B 

B 

> while 

Cp) 

r 

/*  Ran  out  of  sieve  space  - increase  bn  and  keep  trying.  */ 


#if  SIEVE*8*2  >=  65536 


n 

n 

□ 

n 

D 

□ 

n 

n 

# e I s e 

Q 

n 

# end i f 
n 
n 
n 


D 

n 

a 

n 

□ 

n 

a 

n 

□ 

n 

□ 

n 


p = ( (SIEVE-1)*8+7)  - prev;n 
while  (p  >=  32737)  { 

n if  CbnAddQCbnq,  2*32767)  < 0) 

n n gotofailed; 

n p -=  32767; 

> 

if  CbnAddQCbnq,  2*Cp+1))  < 0) 
n gotofailed; 

if  CbnAddQCbnq,  SIEVE*8*2  - prev)  < 0) 
n gotofailed; 

if  Cf  SS  Cretval  = fCarg,  '/'))  < 0) 
n gotodone; 


/*  Number  of  steps  Cof  2)  */ 


> /*  for  C;;)  */ 


/* 

* Phase  2:  find  a suitable  prime  bnp  ==  1 Cmod  bnq). 
*/ 


n /* 

n * Since  bnp  will  be,  and  bnq  is,  odd,  bnp-1  must  be  a multiple 

n * of  2*bnq.  So  start  by  subtracting  the  excess, 

n * / 

pha s e 2 : 

n /*  Double  bnq  until  end  of  bnp  search.  */ 

n if  CbnAddCbnq,  bnq)  < 0) 

n n gotofailed; 

n bnModC&a,  bnp,  bnq); 

n if  CbnBitsC&a))  Cn  /*  Will  always  be  true,  but...  */ 

n n C vo i d ) bn S u bQ C Sa , 1); 

n n if  CbnSubCbnp,  &a))  n /*  Also  error  on  underflow  */ 

n n n gotofailed; 

n } 

n /*  Okay,  now  we're  ready.  */ 
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a 

for  ( ; 

;)  t 

a 

B 

i f 

( s i e veBu i L dB i g ( s i e V e , SIEVE,  bnp,  bnq,  0) 

< 0) 

a 

fl 

B 

goto 

f ai led; 

n 

B 

i f 

(f  &&  (retvaL  = f(arg,  '/'))  < 0) 

a 

fl 

fl 

goto 

d 0 n e ; 

n 

B 

P 

= prev  = 0; 

n 

B 

i f 

(si  eve  101 

& 1 II  (p  = s i e veS ea r c h ( s i e ve , 

SIEVE,  p)) 

Q 

B 

fl 

do  { 

n 

fl 

fl 

fl 

/* 

B 

fl 

fl 

fl 

* Adjust  bn  to  have  the  right  value. 

B 

fl 

fl 

fl 

* adding  (p-prev)  * 2*bnq. 

B 

fl 

B 

fl 

*/ 

B 

B 

B 

fl 

pgpAssert(p  >=  prev); 

B 

fl 

B 

fl 

/*  Compute  delta  into  a */ 

fl 

B 

B 

fl 

if  (bnMulQCSa,  bnq,  p-prev) 

< 0) 

B 

B 

fl 

fl 

n goto  failed; 

B 

B 

fl 

fl 

if  (bnAdd(bnp,  8a)  < 0) 

B 

B 

fl 

fl 

n goto  failed; 

B 

fl 

fl 

fl 

prev  = p; 

B 

B 

fl 

fl 

retval  = p r i me T e s t ( bn p , 8e, 

& 3 ^ 

f,  arg) 

B 

fl 

□ 

B 

if  (retval  <=  0) 

B 

B 

fl 

B 

n goto  done;n  /*  Success!  */ 

B 

B 

B 

B 

modexps  +=  retval; 

B 

B 

B 

fl 

if  (f  88  (retval  = f(arg, 

' ) ) 

< 0) 

B 

B 

B 

fl 

n gotodone; 

B 

B 

□ 

fl 

/*  And  try  again  */ 

B 

fl 

B 

fl 

p = s i e veSea r c h ( s i e ve , SIEVE 

/ p) 

r 

B 

fl 

B 

} while  (p); 

B 

fl 

> 

B 

fl 

/* 

Ran  out  of 

sieve  space  - increase  bn  and 

keep 

trying 

#if  SIEVE*8  == 

65536 

B 

fl 

i f 

(prev)  { 

B 

fl 

fl 

p = (unsigned)(SIEVE*8uL  - prev); 

B 

□ 

> 

else  { 

B 

fl 

fl 

/*  Corner  case  that  will  never  actually 

happen 

B 

fl 

fl 

if  (bnAddCbnp,  bnq)  < 0) 

B 

□ 

fl 

fl 

goto  failed; 

B 

fl 

fl 

p = 65535; 

B 

fl 

> 

#e  L se 

B 

fl 

P 

= SIEVE*8  - 

prev; 

#end  1 f 

B 

fl 

/* 

Add  p * bnq  to  bnp  */ 

B 

fl 

i f 

( bnMu 1 Q ( &a 

, bnq,  p)  < 0) 

B 

fl 

fl 

goto 

f a i led; 

B 

fl 

i f 

( bnAdd (bnp 

V 

(0 

00 

s 

B 

fl 

fl 

goto 

f a i led; 

B 

> /*  for  ( 

;;)  */ 

failed: 

B 

retva  L 

= - 

1; 

done  : 

n /*  Shift  bnq  back  down  by  the  extra  bit  again.  */ 
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n 

b n RS h i f t ( b nq , 1);n  /*  Harmless  even  if  bnq  is  random  */ 

n 

bnEnd(&e)  ; 

n 

bnEndC&a); 

#i f def 

MSDOS 

n 

bniMemFreeCsieve,  SIEVE); 

ft  else 

a 

bniHemWipeCsieve,  sizeof(sieve)); 

#endi f 

n 

return  retval  < 0 ? retval  : modexps  + 2*C0NFIRMTESTS; 
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/* 

* bndsaprime.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  bndsaprime. h,v  1.2. 2.1  1 997/06/07  09:49:28  mhw  Exp  $ 

*/ 

#ifdef  __cpLuspLus 
extern  "C"  { 

#endi f 

struct  BigNum; 

#ifndef  TYPE_BIGNUM 

#define  TYPE_BIGNUM  1 

typedef  struct  BigNum  BigNum; 

#end  i f 

/*  Generate  a pair  of  DSS  primes  */ 

int  dsa P r i meGe n ( s t r u c t BigNum  *bnq,  struct  BigNum  *bnp, 
n int  (*f)(void  *arg,  int  c),  void  *arg); 

#ifdef  __cpLuspLus 

> 

#end i f 
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/* 


* bngermain.c  - Sophie  Germain  prime  generation  using  the  bignum  Library 
and  sieving. 


* 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by  CoLin  PLumb. 

"k 


* $Id  : 

bngermain.c, V 

*/ 

# i f n d e f 

HAVE_CONFIG_H 

#def i ne 

HAVE_C0N  FIG_H 

e n d i f 

#if  HAVE 

_CONFIG_H 

#incLude 

"config.h" 

#endi f 

#def i ne 

BNDEBUG  1 

# i f n d e f 

BNDEBUG 

#def i ne 

BNDEBUG  0 

#e nd i f 

#if  BNDEBUG 

# i nc  L ude 

<stdio.h> 

#end i f 

#incLude 

" bn . h " 

# i n c L ude 

"bngermain.h 

# i n c L ude 

"bnjacobi .h" 

ttincLude 

"bnimem. h"n 

#incLude 

"bnsieve.h" 

#incLude 

"bnkLudge.h" 

#i nc  Lude 

"pgpDebug.h" 

/*  For  bniHemWipe  */ 


/*  Size  of  the  sieve  area  (can  be  up  to  65536/8  = 8192)  */ 
^define  SIEVE  8192 

static  unsigned  const  confirmC]  = {2,  3,  5,  7,  11,  13,  17}; 
^define  CONFIRMTESTS  ( s i z eo f ( c on f i rm ) / s i z e o f ( * c on f i rm ) ) 


#if  BNDEBUG 
/* 

* For  sanity  checking  the  sieve,  we  check  for  smaLL  divisors  of  the  numbers 

* we  get  back.  This  takes  "rem",  a partiaLLy  reduced  form  of  the  prime, 

* "div"  a divisor  to  check  for,  and  "order",  a parameter  of  the  "order" 

* of  Sophie  Germain  primes  (0  = normal  primes,  1 = Sophie  Germain  primes, 

* 2 = 4*p+3  is  aLso  prime,  etc.)  and  does  the  check.  It  just  compLains 

* to  stdout  if  the  check  faiLs. 

*/ 

static  void 

g e r ma i n S a n i t y ( u n s i g ned  rem,  unsigned  div,  unsigned  order) 

{ 

n unsigned  muL=1; 

n rem%=div; 

n if(!rem) 

n n printf("bndivby%u!\n",  div); 

n whiLe  (ordei ) { 
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n 

n 

n 

n 

Q 

□ 

n 

> 


□ 

s 

□ 

□ 

□ 

la 

> 


rem  +=  rem+1 ; 
if  (rem  >=  div) 
n rem  -=  div; 

muL  +=  muL; 
if  ( ! r em ) 

n pri ntf ( "%u*bn+%u  div  by  %u!\n",  muL,  muL-1,  div); 


#endif  /*  BNDEBUG  */ 


/* 

* 

★ 

* 

★ 

★ 

* 

* 

* 

* 

* 

* 

* 

★ 

* 

* 

★ 

* 

★ 

* 

* 

★ 

* 

★ 

★ 

* 

★ 

★ 

•k 

* 

★ 

★ 

* 

★ 

★ 

* 

★ 

★ 


Helper  function  that  does  the  slow  primaLity  test. 

bn  is  the  input  bignum;  a,  e and  bn2  are  temporary  buffers  that  are 
allocated  by  the  caller  to  save  overhead.  bn2  is  filled  with 
a copy  of  2^order*bn+2*order-1  if  bn  is  found  to  be  prime. 

Returns  0 if  both  bn  and  bn2  are  prime,  >0  if  not  prime,  and  -1  on 
error  (out  of  memory).  If  not  prime,  the  return  value  is  the  number 
of  modular  exponentiations  performed.  Prints  a '+'  or  on  the 

given  FILE  (if  any)  for  each  test  that  is  passed  by  bn,  and  a 
for  each  test  that  is  passed  by  bn2. 

The  testing  consists  of  strong  p s e u d o p r i ma I i t y tests,  to  the  bases  given 
in  the  confirmC]  array  above.  (Also  called  H i I I e r-Ra b i n , although  that's 
not  technically  correct  if  we're  using  fixed  bases.)  Some  people  worry 
that  this  might  not  be  enough.  Number  theorists  may  wish  to  generate 
primality  proofs,  but  for  random  inputs,  this  returns  non-primes  with 
a probability  which  is  quite  negligible,  which  is  good  enough. 


It  has  been  proved  (see  Carl  Pomerance,  "On  the  Distribution  of 
Ps e udo p r i me s " , Math.  Comp,  v.37  (1981)  pp.  587-593)  that  the  number  of 
pseudoprimes  (composite  numbers  that  pass  a Fermat  test  to  the  base  2) 
less  than  x is  bounded  by: 

exp(  ln(x)*(  5/1 4)  ) <=  P_2(x)n  ###  CHECK  THIS  FORMULA  - it  looks  wrong!  Mtftt 
P_2(x)  <=  X * exp(-1/2  * ln(x)  * I n ( I n ( I n ( x ) ) ) / ln(ln(x))). 

Thus,  the  local  density  of  Pseudoprimes  near  x is  at  most 

exp(-1/2  * ln(x)  * I n ( I n ( I n ( x ) ) ) / ln(ln(x))),  and  at  least 

exp ( I n ( X ) * ( 5 / 1 4 ) - ln(x)).  Here  are  some  values  of  this  function 


for  various  k-bit 
BitsQDensity  <=n 
128n3.577869e-07n 
192n4.175629e-10n 
256  5 . 80431  4e-1 3n 
384  1 . 578039e-1 8n 
51  2 5 . 858255e-24n 
768  1 . 489276e-34n 
1024  6.633188e-45n 


numbers  x = 2''k: 

Bit  equivalentn 
21 . 41 4396n 
31 . 1 57288n 
40 . 647940n 
59.136573n 
77.175803n 
112.370944n 
146.757062n 


Densi ty  >=n 
4 . 20221 3e-37n 
4.936250e-56n 
4.977813e-75n 
3.938861e-113n 
2 . 563353e-1 51 n 
7.872825e-228n 
1 . 882404e-304n 


Bit  equivalent 
120. 840190 
1 83 . 724558 
246 . 829095 
373 . 400096 
500 .253110 
754 . 422724 
1 008 .953565 


* As  you  can  see,  there's  quite  a bit  of  slop  between  these  estimates. 

* In  fact,  the  density  of  pseudoprimes  is  conjectured  to  be  closer  to  the 

* square  of  that  upper  bound.  E.g.  the  density  of  pseudoprimes  of  size 

* 256  is  around  3 * 10^-27.  The  density  of  primes  is  very  high,  from 

* 0.005636  at  256  bits  to  0.001409  at  1024  bits,  i.e.  more  than  10^-3. 

* 


* For  those  people  used  to  cryptographic  levels  of  security  where  the 

* 56  bits  of  DES  key  space  is  too  small  because  it's  exhaustible  with 

* custom  hardware  searching  engines,  note  that  you  are  not  generating 

* 50,000,000  primes  per  second  on  each  of  56,000  custom  hardware  chips 
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* for  several  hours.  The  chances  that  another  Dinosaur  Killer  asteroid 

* will  land  today  is  about  10^-11  or  2^-36,  so  it  would  be  better  to 

* spend  your  time  worrying  about  *that*.  Well,  okay,  there  should  be 

* some  derating  for  the  chance  that  astronomers  haven't  seen  it  yet, 

* but  I think  you  get  the  idea.  For  a good  feel  about  the  probability 

* of  various  events,  I have  heard  that  a good  book  is  by  E'mile  Borel, 

* "Les  P r o ba b i I i t e ' s et  la  vie".  (The  's  are  accents,  not  apostrophes.) 

•k 

* For  more  on  the  subject,  try  "Finding  Four  Million  Large  Random  Primes", 

* by  Ronald  Rivest,  in  Advancess  in  Cryptology:  Proceedings  of  Crypto 

* '90.  He  used  a sma I I -d i v i so r test,  then  a Fermat  test  to  the  base  2, 

* and  then  8 iterations  of  a Miller-Rabin  test.  About  718  million  random 

* 256-bit  integers  were  generated,  43,741,404  passed  the  small  divisor 

* test,  4,058,000  passed  the  Fermat  test,  and  all  4,058,000  passed  all 

* 8 iterations  of  the  Miller-Rabin  test,  proving  their  primality  beyond 

* most  reasonable  doubts. 

* 

* If  the  probability  of  getting  a pseudoprime  is  some  small  p,  then  the 

* probability  of  not  getting  it  in  t trials  is  (l-p)^t.  Remember  that, 

* for  small  p,  (1-p)''C1/p)  “ 1/e,  the  base  of  natural  logarithms. 

* (This  is  more  commonly  expressed  as  e = I i m_ { x \ t o \ i n f t y > (1+1/x)^x.) 

* Thus,  (1-p)*t  ■ e*(-p*t)  = exp(-p*t).  So  the  odds  of  being  able  to 

* do  this  many  tests  without  seeing  a pseudoprime  if  you  assume  that 

* p = 10*-6  (one  in  a million)  is  one  in  57.86.  If  you  assume  that 

* p = 2*10''-6,  it's  one  in  3347.6.  So  it's  implausible  that  the  density 

* of  pseudoprimes  is  much  more  than  one  millionth  the  density  of  primes. 

•k 

* He  also  gives  a theoretical  argument  that  the  chance  of  finding  a 

* 256-bit  non-prime  which  satisfies  one  Fermat  test  to  the  base  2 is 

* less  than  10^-22.  The  small  divisor  test  improves  this  number,  and 

* if  the  numbers  are  512  bits  (as  needed  for  a 1024-bit  key)  the  odds 

* of  failure  shrink  to  about  10^-44.  Thus,  he  concludes,  for  practical 

* purposes  *one*  Fermat  test  to  the  base  2 is  sufficient. 

*/ 

static  i nt 

g e rma i n P r i meTe s t ( s t r u c t BigNum  const  *bn,  struct  BigNum  *bn2,  struct  BigNum  *e, 
n struct  BigNum  *a,  unsigned  order,  int  (*f)(void  *arg,  int  c), 

n void*arg) 

{ 

n interr; 

n uns i gned  i ; 

a i n t j ; 

n unsigned  k,  I,  n; 


#if 

BNDEBUGq  /*  Debugging 

*/ 

n 

/* 

o 

* 

This  is  debuggi ng 

code  to 

n 

★ 

If  the  sieving 

i s 

wrong,  i 

Q 

* 

small  divisors. 

The  prime 

n 

* 

weed  them  out. 

but 

you  ' 1 1 

n 

k 

and  presumably 

excluding  f 

o 

k 

which  might  be 

prime.  Th i 

a 

k 

of  the  candidates 

have  any 

a 

k 

code  is  enabled 

and  neve  r 

a 

k 

confident  that 

the 

sieving 

n 

*/ 

a 

i = 

bnLSWo  rd ( bn ) ; 

a 

if 

(!(i  % 2))  printf( 

"bn  d i V 

test  the  sieving  stage, 
t will  let  past  numbers  with 
test  here  will  still  work,  and 
be  doing  a lot  more  slow  tests, 
rom  consideration  some  other  numbers 
s check  just  verifies  that  none 
small  divisors.  If  this 
triggers,  you  can  feel  quite 
is  doing  its  job. 

by  2!"); 
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n 

n 

n 

□ 

n 

n 

n 

n 

a 

n 

n 

Q 

□ 

□ 

a 

# e n d 1 f 

n 

n 

n 

n 

Q 

D 

n 

□ 

Q 

n 

a 

□ 

n 

n 


1 = bnModQCbn, 

germainSanityCi 

germainSanityCi 

germainSanityCi 

germainSanityCi 

germainSanityCi 

i = bnModQCbn, 

germainSanityCi 

germainSanityCi 

germainSanityCi 

germainSanityCi 

i = bnHodQ  C bn, 

germainSanityCi 

germainSanityCi 

germainSanityCi 


51051), -n  /*  51051 
, 3,  order); 

, 7,  order); 

, 11,  order); 

, 13,  order); 

, 17,  order); 
63365);n  /*  63365 
, 5,  order); 

, 19,  order); 

, 23,  order); 

, 29,  order); 
47027);n  /*  47027 
, 31,  order); 

, 37,  order); 

, 41,  order); 


3 * 7 * 11  * 13  * 17  */ 


5 * 19  * 23  * 29  */ 


31  * 37  * 41  */ 


/* 

* First,  check  whether  bn  is  prime.  This  uses  a fast  primaLity 

* test  which  usually  obviates  the  need  to  do  one  of  the 

* confirmation  tests  later.  See  bnprime.c  for  a full  explanation. 

* We  check  bn  first  because  it's  one  bit  smaller,  saving  one 

* modular  squaring,  and  because  we  might  be  able  to  save  another 

* when  testing  it.  Cl/4  of  the  time.)  A small  speed  hack, 

* but  finding  big  Sophie  Germain  primes  is  *slow*. 

*/ 

if  CbnCopyCe,  bn)  < 0) 
n return-1; 

C VO i d ) b n S ubQ C e , 1); 

I = bnLSWordCe); 

j = 1;n  /*  Where  to  start  in  prime  array  for  strong  prime  tests  */ 


□ 

n 

□ 

n 

n 

n 

n 

n 

□ 

□ 

n 

n 

n 

□ 

D 

□ 

D 

n 

n 

n 

n 

n 

n 

a 

a 

a 


i f C I & 7)  { 


n 

a 

n 

n 

a 

n 

Q 

a 

□ 

a 

n 

D 

a 

□ 

□ 

□ 

□ 

n 

□ 

n 

D 

} else 

n 

a 

Q 


bnRShiftCe,  1); 

if  C b nT wo E xpHod C a , e,  bn)  < 0) 
n return-1; 

if  CCl  & 7)  ==  6)  { 


/*  bn  ==  7 mod  8,  expect  +1  */ 
if  CbnBitsCa)  !=  1) 

n return  1;n  /*  Not  prime  */ 

k = 1; 


else  { 


/*  bn  ==  3 or  5 mod  8,  expect  -1  ==  bn-1  */ 
if  CbnAddQCa,  1)  < 0) 
n return-1; 

if  CbnCmpCa,  bn)  !=  0) 

n return  1;n  /*  Not  prime  */ 

k = 1; 

i f C I & 4)  { 

n /*  bn  ==  5 mod  8,  make  odd  for  strong  tests  */ 

n bnRShiftCe,  1); 

n k = 2 ; 

> 


/*  bn  ==  1 mod  8,  expect  2*CCbn-1)/4) 
bnRShiftCe,  2); 

if  C b nT wo E xpMod C a , e,  bn)  < 0) 


+/-1  mod  bn  */ 
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n 

n 

□ 

n 

B 

B 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

> 


n return  -1 ; 

if  (bnBits(a)  ==  1)  <. 

n j = 0;b  /*  Re-do  strong  prime  test  to  base  2 * / 

> else  { 

n if  (bnAddQCa,  1)  < 0) 

n B return-1; 

n if  (bnCmpCa,  bn)  !=  0) 

B B return  1;o  /*  Not  prime  */ 

> 

k = 2 + bnMa keOdd ( e ) ; 


B 

B 

B 

B 

fl 

fl 

fl 

B 

B 

B 

fl 

fl 

fl 

B 

fl 

B 

B 

fl 

B 

B 

fl 

fl 

fl 

fl 

fl 

B 

B 

B 

B 

fl 

fl 

B 

fl 

n 

fl 

B 

B 


/* 

* It*s  prime!  Now  check  higher-order  forms  bn2  = 2*bn+1,  4*bn+3, 

* etc.  Since  bn2  ==  3 mod  4,  a strong  p s e udop r i ma L i t y test  boils 

* down  to  Looking  at  a ^ ( ( bn2 -1  ) / 2 ) mod  bn  and  seeing  if  it*s  +/-1 . 

* (+1  if  bn2  is  ==  7 mod  8,  -1  if  it*s  ==  3) 

* Of  course,  that  exponent  is  just  the  previous  bn2  or  bn... 

*/ 


i f 

fl 

for 

B 

B 

fl 

B 

B 

fl 

fl 

fl 

fl 

□ 

fl 

fl 

fl 

B 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

fl 


CbnCopy(bn2,  bn)  < 0) 

n return-1; 

(n  = 0;  n < order;  n++)  i 
/* 


* Print  a success  indicator:  the  sign  of  J a c ob i ( 2 , bn 2 ) , 

* which  is  available  to  us  in  L.  bn2  = 2*bn  + 1.  Since  bn 

* is  odd,  bn2  must  be  ==  3 mod  4,  so  the  options  modulo  8 

* are  3 and  7.  3 i f I ==  1 mod  4,  7 if  L ==  3 mod  4. 

* The  sign  of  the  Jacobi  symbol  is  - and  + for  these  cases, 

* respect i ve  ly . 

*/ 


if  (f  &&  (err  = fCarg,  "-+"[(1  >>  1)  & 13))  < 0) 
n returnerr; 

/*  Exponent  is  previous  bn2  */ 

if  CbnCopyCe,  bn2)  < 0 ||  bn LS h i f t ( bn2 , 1)  < 0) 
n return-1; 

( V o i d ) bn Adds ( bn 2 , 1);n  /*  Can't  overflow  */ 

if  C bnTwoExpHod C a , e,  bn2)  < 0) 
n return-1; 

if  Cn  I 1)  -Cfl  /*  Expect  + */ 

n if(bnBits(a)!=1) 

n n return  2+n;n  /*  Not  prime  */ 

> else  { 


fl 

fl 

fl 

fl 

> 

I 


i f 

(bnAddQCa,  1)  < 

0) 

fl 

return  -1 ; 

i f 

(bnCmpCa,  bn2)  ! 

= 0) 

fl 

return  2+n; 

n /*  Not  prime  */ 

bnLSWord(bn2) ; 

> 


B 

B 

B 

B 

fl 

fl 

fl 


/*  Final  success  indicator  - it's  in  the  bag.  */ 
if  (f  &&  (err  = fCarg,  '*'))  < 0) 
n returnerr; 

/* 

* Success!  We  have  found  a prime!  Now  go  on  to  confirmation 

* tests...  k is  an  amount  by  which  we  know  it's  safe  to  shift 
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n 

n 

□ 

n 

a 

n 

□ 

D 

n 

n 

n 

□ 

D 

n 

D 

n 

n 

n 


down  e.  j = 1 unless  the  test  to  the  base 
re-done  (it  wasn't  *quite*  a strong  test). 

Here,  we  do  the  full  strong  p s e u d o p r i ma L i t y 
that  a number  is  composite,  or  says  that  it 


For  the  given  base  a,  find  bn-1  = 2''k  * e, 

X ==  a^e  (mod  bn). 

If  X ==  +1  ->  strong  pseudoprime  to  base  a 
Otherwise,  repeat  k times: 

If  X ==  -1,  ->  strong  pseudoprime 
X = x^2  (mod  bn) 

If  X = +1  ->  composite 
If  we  reach  the  end  of  the  iteration  and  x 
end,  it  is  composite.  Which  means  that  the 
only  has  to  proceed  k-1  times.  If  x is  not 
it's  composite  no  matter  what  the  result  of 


2 could  stand  to  be 
in  which  case  it's  0. 

test . This  proves 
's  probably  prime. 

then  find 


is  *not*  +1,  at  the 
squaring  actually 
-1  by  then, 
the  squaring  is. 


For  the  multiples  2*bn+1,  4*bn+3,  etc.  then  k = 1 (and 


n 

•k 

the 

previous  multiple  of  bn)  so  there  is  no  need  to 

do 

any 

B 

* 

1 OOP i n g 

at  all. 

B 

*/ 

B 

for 

( i 

= j 

; i < CONFIRMTESTS;  i++)  { 

B 

B 

i f 

(bnCopy(e, 

bn ) < 0 ) 

B 

B 

□ 

B 

return  -1; 

B 

B 

bnRShift(e,  k) 

f 

B 

fl 

k 

+ = bnMa  keOdd ( e ) ; 

B 

fl 

(void)bnSetQ(a 

, confirmCiD); 

B 

B 

i f 

(bnExpModCa 

, a,  e,  bn)  < 0) 

B 

fl 

B 

return 

-1; 

B 

B 

i f 

(bnBits(a) 

! = 1 ) { 

B 

B 

fl 

L = k; 

B 

B 

fl 

for  C ; 

;)  ( 

B 

fl 

B 

B 

i f (bnAddQ(a,  1 ) < 0) 

B 

B 

B 

fl 

B return-1; 

B 

fl 

fl 

B 

if  (bnCmp(a,  bn)  ==  0)n  /*  Was 

result  bn-1?  */ 

B 

B 

fl 

fl 

B break ;b  /*  Prime  */ 

B 

fl 

fl 

B 

if  ( !--l) 

B 

fl 

B 

fl 

B return  (1+order)*i+2;B 

/* 

Fail  * / 

fl 

B 

B 

fl 

/*  This  part  is  executed  once. 

on 

average.  */ 

B 

fl 

fl 

fl 

(void)bnSubQ(a,  1);b  /*  Restore 

a */ 

B 

B 

B 

B 

if  (bnSquare(a,  a)  <0  ||  bnModla, 

a,  bn)  < 0) 

B 

fl 

fl 

B 

B return  -1 ; 

B 

fl 

B 

B 

if  (bnBits(a)  ==  1) 

B 

B 

B 

B 

E return  ( 1 +o r d e r ) * i +1 ; b 

/* 

Fail  * / 

B 

B 

fl 

> 

B 

B 

> 

B 

B 

i f 

( bnCopy < bn2 

, bn ) < 0 ) 

B 

B 

fl 

return 

-1; 

B 

B 

fl 

/* 

Only  do  the 

following  if  we're  not  re-doing 

base  2 * / 

B 

fl 

i f 

( i ) for  ( n 

= 0;  n < order;  n++)  { 

if  (bnCopy(e,  bn2)  < ( 
n return-1; 

( VO i d ) bn  Adda ( b n 2 , 1); 


bn LS h i f t ( b n 2 , 1)  < 0) 
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Q 

n 

0 

/* 

Print  success  indicator  for  previous  test  */ 

a 

n 

0 

j = 

b n J a c 0 b i 9 ( c on f i r m C i D , bn2); 

n 

n 

0 

i f 

(f  &S  (err  = f(arg,  j < 0 ? : '+'))  < 0) 

n 

n 

0 

□ 

return  err; 

n 

n 

0 

/* 

Check  that  p*e  ==  J a c o b i ( p , bn2  ) (mod  bn2)  */ 

n 

□ 

0 

< 

o 

id)bnSet9(a,  confirmCiJ); 

n 

□ 

0 

i f 

(bnExpMod(a,  a,  e,  bn2)  < 0) 

n 

n 

0 

o 

return  -1; 

n 

Q 

0 

/* 

a 

n 

0 

* 

FIXME : 

Actually,  we  don't  need  to  compute  the 

n 

n 

0 

* 

Jacobi 

symbol  externally...  it  never  happens  that 

n 

n 

o 

* 

0) 

II 

+ 

1 

1 but  it's  the  wrong  one.  So  we  can  just 

n 

0 

0 

* 

look  at 

a and  use  its  sign.  Find  a proof  somewhei 

Q 

0 

0 

*/ 

n 

0 

0 

1 f 

(j  < 0) 

{ 

n 

0 

0 

0 

/* 

Not  a 9.R.,  should  have  a = bn2-1  */ 

n 

0 

0 

0 

i f 

(bnAdd9(a,  1)  < 0) 

n 

0 

0 

0 

□ 

return  -1; 

Q 

0 

0 

o 

i f 

(bnCmp(a,  bn2)  1=  0)n/*  Was  result  bn2-1 ? 

n 

o 

0 

0 

n 

return  ( 1 +o r d e r ) * i +n+ 2 ; n / * Fail  */ 

a 

0 

0 

} else  { 

n 

o 

0 

0 

/* 

9uadratic  residue,  should  have  a = 1 */ 

n 

0 

0 

0 

i f 

( bnBi ts(a)  !=  1) 

n 

0 

0 

0 

Q 

return  ( 1 +o r d e r ) * i +n+2 ; n / * Fail  */ 

n 

O 

0 

> 

n 

0 

> 

D 

0 

/* 

Final  success  i 

ndicator  for  the  base  confirmCiD.  */ 

n 

o 

i f 

(f  &S  (err  = f (arg,  '*'  ))  < 0) 

a 

0 

0 

return  err 

f 

H 

> 

Q 

return 

0;  n 

/* 

Prime! 

*/ 

> 

/* 

* Add  x*y  to  bn,  which  is  usually  (but  not  always)  < 65536. 

* Do  it  in  a simple  linear  manner. 

*/ 

static  int 

bn AddM u I t ( s t r u c t BigNum  *bn,  unsigned  long  x,  unsigned  y) 

{ 

n unsigned  long  z = (unsigned  long)x  * y; 

n while  (z  > 65535)  { 

n n if  (bnAdd9(bn,  65535)  < 0) 

n n Q return-1, • 

n n z -=  65535; 

n } 

n return  bnAddQ(bn,  ( u n s i g n ed  ) z ) ; 

} 

/* 

* Modifies  the  bignum  to  return  the  next  Sophie  Germain  prime  >=  the 

* input  value.  Sohpie  Germain  primes  are  number  such  that  p is 

* prime  and  2*p+1  is  also  prime. 

* 

* This  is  actually  parameterized:  it  generates  primes  p such  that  "order 
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* mu L t i p L e s-p L u s- t wo  are  also  prime,  2*p+1,  2*(2*p+1)+1  = 4*p+3,  etc. 

* 

* Returns  >=0  on  success  or  -1  on  failure  (out  of  memory).  On  success, 

* the  return  value  is  the  number  of  modular  exponentiations  performed 

* (excluding  the  final  confirmations).  This  never  gives  up  searching. 

* 


* The  FILE  *f  argument,  if  non-NULL,  has  progress  indicators  written 

* to  it.  A dot  (.)  is  written  every  time  a primeality  test  is  failed, 

* a plus  (+)  or  minus  (-)  when  the  smaller  prime  of  the  pair  passes  a 

* test,  and  a star  (*)  when  the  larger  one  does.  Finally,  a slash  (/) 

* is  printed  when  the  sieve  was  emptied  without  finding  a prime  and  is 

* being  refilled. 

* 

* Apologies  to  structured  programmers  for  all  the  GOTOs. 

*/ 


1 n t 

bnGe rma i nP r i meGen ( s t r u c t BigNum  *bn,  unsigned  order. 


n 

int  (*f)(void  *arg,  int  c),  void  *arg) 

s 

int  retval; 

a 

unsigned  p,  prev; 

n 

unsigned  inc; 

n 

struct  BigNum  a,  e,  bn2; 

n 

int  modexps  = 0; 

#i f def 

MSDOS 

n 

unsigned  char  *sieve; 

#e  L se 

Et 

unsigned  char  s i e ve C S I E V E D ; 

#endi  f 

fdef 

MSDOS 

n 

sieve  = bniMemAlloc(SIEVE); 

u 

if  (!sieve) 

D 

n return  -1 ; 

#end  i f 

n 

bnBeg i n ( Sa  ) ; 

□ 

bnBegin(&e); 

B 

bnBegin(&bn2); 

B 

/* 

B 

* Obviously,  the  prime  we  find  must  be 

odd  . 

Further, 

if  2*p+1 

B 

* is  also  to  be  prime  (order  > 0)  then 

P ! = 

1 (mod 

3), 

lest 

B 

* 2*p+1  ==  3 (mod  3).  Added  to  p !=  3 

(mod 

3),  P 

= = 2 

(mod  3) 

B 

* and  p ==  5 (mod  6). 

B 

* If  order  > 2 and  we  care  about  4*p+3 

and 

8*p+7, 

then 

simi larly 

B 

* p ==  4 (mod  5),  so  p ==  29  (mod  30). 

B 

* So  pick  the  step  size  for  searching  based 

on  the 

order 

B 

* and  increse  bn  until  it's  ==  -1  (mod 

inc) 

- 

B 

* mod  7 doesn't  have  a unique  value  for 

p because 

2 -> 

A 

1 

A 

1 

in 

B 

* nor  does  mod  11,  and  I don't  want  to 

think  about 

t h i 

ng s past 

B 

* that.  The  required  order  would  be  i mp r a c t i c a 1 1 y 

high,  in  any 

B 

*/ 

B 

inc  = order  ? ((order  > 2)  ? 30  : 6)  : 2 

/ 

B 

if  (bnAddQ(bn,  inc-1  - bnModQ(bn,  inc)) 

< 0) 

B 

n goto  failed; 
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n 

for 

(;;)  { 

n 

D 

1 f 

(si eveBui 

Ld(sieve,  SIEVE,  bn,  inc,  order)  < 0) 

□ 

n 

a 

goto 

f a i Led; 

D 

n 

P = 

: p r e V = 0 

r 

n 

n 

if 

( s i e ve  C03 

8 1 II  (p  = s i e veS ea r c h ( s i e ve  , SIEVE,  p))  ! 

c 

D 

a 

do  -C 

Q 

n 

a 

a 

/*  Adjust  bn  to  have  the  right  value 

. */ 

n 

n 

a 

a 

pgpAssert(p  >=  prev); 

n 

n 

a 

a 

if  ( bn Ad dM u L t ( b n , p-prev,  inc)  < 0) 

n 

n 

a 

a 

n goto  failed; 

n 

□ 

a 

a 

prev  = p; 

n 

n 

a 

a 

/*  Okay,  do  the  strong  tests.  */ 

n 

□ 

a 

a 

retvaL  = g e r ma i n P r i meT e s t ( b n , Bbn2, 

8e, 

o 

a 

a 

a 

order,  f. 

a rg  ) 

n 

n 

a 

a 

if  (retvaL  <=  0) 

n 

n 

a 

a 

n gotodone; 

a 

n 

a 

a 

modexps  +=  retvaL; 

n 

n 

a 

a 

if  (f  88  (retvaL  = f(arg,  '.'))  < 0) 

n 

n 

a 

a 

n gotodone; 

n 

n 

a 

a 

/*  And  t ry  agai n */ 

n 

a 

a 

a 

p = s i e V e S ea r c h ( s i e ve , SIEVE,  p); 

a 

a 

a 

> while  (p); 

n 

a 

> 

D 

a 

/* 

Ran  out  of  sieve  space  - increase  bn  and  keep  trying. 

a 

a 

i f 

( bn AddMu L t ( bn , (unsigned  L o ng  ) S I E V E *8-p r e v , inc) 

< 0) 

a 

a 

a 

goto 

f a i Led; 

n 

a 

i f 

(f  SB  (retvaL  = f(arg,  '/'))  < 0) 

a 

a 

a 

goto 

done  ; 

a 

> /* 

for  ( ; 

;)  */ 

f a i Led: 

n retvaL=-1; 

done  : 

n bnEndC&bnZ); 

n bnEndC&e); 

n bnEndC&a); 

#ifdef  HSDOS 

n bn i Hem F re e C s i e ve , 

#e  L se 

n bn i HemU i p e C s i e ve , 

#end i f 

n return  retvaL<0 

> 


SIEVE); 

s i zeof (sieve)); 

? retvaL  : modexps+ ( o rde r+1 ) *CON F I RMTE STS ; 


c 
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/* 

* bnge  rma i n . h 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  b ng e r ma i n . h , V 1.3. 2.1  1997/06/07  09:49:28  mhw  Exp  $ 

*/ 

#ifndef  BNGERMAIN_H 
#define  BNGERMAIN.H 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 

struct  BigNum; 

#ifndef  TYPE.BIGNUM 

#define  TYPE.BIGNUH  1 

typedef  struct  BigNum  BigNum; 

#e nd i f 

/*  Generate  a Sophie  Germain  prime  */ 

int  BNExport  bnG e r ma i n P r i meG e n ( s t r u c t BigNum  *bn,  unsigned  dbL, 
n int  (*f)(void  *arg,  int  c),  void  *arg); 

#ifdef  __cpLuspLus 
} 

#end i f 

#endif  /*  BNGERHAIN  H */ 


[CCHK:6d2d15443ff6a11aa7099d2dd9755a4e76e96:: 
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/* 

* 

* 

* 

* 

* 

* 

★ 

★ 

*/ 


bni.h  - Low-Level  bignum  header. 

Defines  various  word  sizes  and  useful  macros. 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All 

Written  by  Colin  Plumb 

$Id:  bni.h, V 1.4. 2.1  1997/06/07  09:49:29  mhw  Exp  $ 


rights  reserved. 


#ifndef  BNI_H 
#def i ne  BNI  H 


#ifndef  H A V E_ C ON F I G_ H 
#define  H A V E_ C ON F I G_ H 0 
#endi f 

#if  HAVE_CONFIG_H 
//include  "config.h" 

# e nd i f 


/* 

* Some  compilers  complain  about  //if  FOO  if  FOO  isn't  defined, 

* so  do  the  ANSI-mandated  thing  explicitly... 

*/ 

//ifndef  NO_LIHITS_H 
//define  NO_LIMITS_H  0 
// end i f 

/*  Make  sure  we  have  8-bit  bytes  */ 

//if  !NO_LIMITS_H 
//include  <Limits.h> 

//if  UCHAR_HAX  !=  0xff  ||  CHAR_BIT  !=  8 

//error  The  bignum  Library  requires  8-bit  unsigned  characters. 

//end  i f 

//endif  /*  !NO_LIHITS_H  */ 

//ifdef  BNINCLUDEn  /* 

//define  STR(x)  //xn  /* 

Sdefine  XSTR(x)  STRCxJn  /* 

//include  XSTR  ( BN  I N C LU  D E ) n 
//undef  XSTR 
//undef  STR 
// e nd i f 

/*  Do  we  want  bnYieldC)?  */ 

#ifndef  BNYIELD 
^define  BNYIELD  0 
//endif 

/*  Figure  out  the  endianness  */ 

/*  Error  if  more  than  one  is  defined  */ 

//if  BN_BIG_ENDI  AN  SS  BN_LI  TT  L E_  E N D I AN 

//error  Only  one  of  B N_B  I G_EN  D I A N or  BN_LI  TT  LE  _ E N D I AN  may  be  defined 
// e nd i f 

/* 

* If  no  preference  is  stated.  Little-endian  C code  is  slightly  more 

* efficient,  so  prefer  that.  (The  endianness  here  does  NOT  have  to 

i:[CHK:677c289a4f43366fd1bbb2eef777ed2e7d55debe70330d3111bdc77ba17ece9ed:] 
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* match  the  machine's  native  byte  sex;  the  Library's  C code  uiLL  work 

* either  way.  The  flexibility  is  allowed  for  assembly  routines 

* that  do  care. 

*/ 

#if  ! def i nedCBN_BIG_ENDIAN)  &&  1 d e f i n ed ( BN_ LI TT LE_ E N D I AN  ) 

#define  BN_ LI TT L E _ E N D I A N 1 

#endif  /*  ! BN_B I G _ E N D I AN  &&  ! BN_ L I TT L E_ E N D I AN  */ 

/*  Macros  to  choose  between  big  and  Little  endian  */ 

#if  BN_BIG_ENDIAN 

#define  BIG(b)  b 

#define  LITTLE(l)  /*nothing*/ 

^define  B I G L I TT LE ( b , L)  b 
#eLif  BN_LITTLE_ENDI AN 
#define  BIG(b)  /*nothing*/ 

#define  LITTLE(L)  L 
//define  B I G LI  TT  L E ( b , L ) L 
//else 

//error  One  of  BN  _B  I G_  E N D I AN  or  BN_  L I TT  L E_  E N D I A N must  be  defined  as  1 
#end  i f 


/* 

* Find  a 16-bit  unsigned  type. 

* Unsigned  short  is  preferred  over  unsigned  int  to  make  the  type  chosen 

* by  this  file  more  stable  on  platforms  (such  as  many  68000  compilers) 

* which  support  both  16-  and  32-bit  ints. 

*/ 

//ifndef  BNW0RD16 

#ifndef  USHRT_HAXn  /*  No  <Limits.h>  available  - guess  */ 

typedef  unsigned  short  bnword16; 

//define  BNW0RD16  bnword16 
//elif  USHRT_MAX  ==  0xffff 
typedef  unsigned  short  bnword16; 

//define  BNW0RD16  bnword16 
//elif  UINT_MAX  ==  0xffff 
typedef  unsigned  bnword16; 

//define  BNW0RD16  bnword16 
#end  i f 

#endif  /*  BNW0RD16  */ 

/* 

* Find  a 32-bit  unsigned  type. 

* Unsigned  Long  is  preferred  over  unsigned  int  to  make  the  type  chosen 

* by  this  file  more  stable  on  platforms  (such  as  many  68000  compilers) 

* which  support  both  16-  and  32-bit  ints. 

*/ 

//ifndef  BNW0RD32 

//ifndef  ULONG_HAXn  /*  No  <Limits.h>  available  - guess  */ 

typedef  unsigned  Long  bnword32; 

//define  BNW0RD32  bnword32 
//elif  UL0NG_MAX  ==  0xffffffffuL 
typedef  unsigned  Long  bnword32; 

//define  BNW0RD32  bnword32 
//elif  UINT_MAX  ==  0xffffffff 
typedef  unsigned  bnword32; 

//define  BNW0RD32  bnword32 
#elif  USHRT_MAX  ==  0xffffffff 

:CCHK:97b1acffb9b309cde734446e0643471dd07659a444b0f1e0a5c558da11d0112d43: 
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typedef  unsigned  short  bnword32; 

//define  BNW0RD32  bnuord32 
#endi f 

#endif  /*  BNW0RD16  */ 

/* 

* Find  a 64-bit  unsigned  type. 

* The  conditions  here  are  more  complicated  to  avoid  using  numbers  that 

* will  choke  lesser  preprocessors  (like  0 x f f f f f f f f f f f f f f f f ) unless 

* we're  reasonably  certain  that  they'll  be  acceptable. 

*/ 

#if  ! def i ned(BNW0RD64)  &&  UL0NG_MAX  > Oxfffffffful 
#if  UL0NG_MAX  ==  0x f f f f f f f f f f f f f f f f 
typedef  unsigned  long  bnword64; 

//define  BNW0RD64  bnword64 
# e n d i f 
//e nd i f 

/* 

* I would  test  the  value  of  unsigned  long  long,  but  some  *p r e p r o c e s s o r s * 

* can't  parse  constants  that  long  even  if  the  compiler  can  accept  them,  so  it 

* doesn't  work  reliably.  So  cross  our  fingers  and  hope  that  it's  a 64-bit 

* type . 

* 

* GCC  uses  UL0NG_L0NG_MAX . Solaris  uses  ULLONG.MAX.  IRIX  and  Metrowerks  use 

* U LON G LON G_H AX . Are  there  any  other  names  for  this? 

*/ 

//ifndef  BNW0RD64 

#if  d e f i n ed ( U LO NG_ LO NG_M AX ) n /*  GCC  uses  this  */ 

typedef  unsigned  long  long  bnword64; 

//define  BNU0RD64  bnword64 

//elif  def  i ned(ULLONG_MAX)n  /*  Solaris  */ 

/*  Solaris  defines  ULLONG_MAX  with  ..ll,  which  its  preprocessor  chokes  on. 

* So  we  can't  test  the  value.  Just  assume  that  it's  64  bits...  */ 
typedef  unsigned  long  long  bnword64; 

//define  BNU0RD64  bnword64 

//elif  def  ined(ULONGLONG_HAX)  /*  IRIX  and  Metrowerks  */ 

/* 

* Metrowerks  always  defines  U LON G LO NG_M AX , but  it  may  be 

* equal  to  UL0NG_MAX  in  some  cases,  so  we  have  to  test  its  value. 

* Unf ormtunate ly,  its  preprocessor  silently  truncates  to  32  bits! 

*/ 

//if  ULONGLONG_MAX  > ULONG.MAX 
/*  Case  1:  preprocessor  works  */ 
typedef  unsigned  long  long  bnword64; 

^define  BNW0RD64  bnword64 

//elif  LONGLONG_MAX  ==  LONGLONG_MIN 

/*  Case  2:  Preprocessor  silently  truncates  to  32  bits  */ 
typedef  unsigned  long  long  bnword64; 

//define  BNW0RD64  bnword64 
// e nd i f 

//endif  /*  U LON  G L0NG_M  AX  */ 

//endif  /*  IBNW0RD64  */ 

/*  We  don't  even  try  to  find  a 128-bit  type  at  the  moment  */ 

#endif  /*  !BNI_H  */ 
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/* 

* bni00.c  - auto-size-detecting  bni??.c  file. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  in  1995  by  CoLin  PLumb. 

* 

* $Id:  bni00.c,v  1.2. 4.1  1997/06/07  09:49:29  mhw  Exp  $ 

*/ 

SincLude  "bnsize00.h" 

#if  BNSIZE64 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "bni64.c" 

#eLif  BNSIZE32 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "bni32.c" 

#eLse  /*  BNSIZE16  */ 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "bni16.c" 

Send  i f 


C[!CHK:6a9aaeecbbee33a99ccbcc55b55e04067f9IlIl 
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/* 

* bm'16.c  - Low-Level  bignum  routines,  16-bit  version. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

* 

* $Id:  bni16.c,v  1.9. 2.1  1997/06/07  09:49:29  mhu  Exp  $ 

* 

* NOTE:  the  magic  constants  "16"  and  "32"  appear  in  many  places  in  this 

* file,  including  inside  identifiers.  Because  it  is  not  possible  to 

* ask  "#ifdef"  of  a macro  expansion,  it  is  not  possible  to  use  the 

* preprocessor  to  c o n d i t i ona I i z e these  properly.  Thus,  this  file  is 

* intended  to  be  edited  with  textual  search  and  replace  to  produce 

* alternate  word  size  versions.  Any  reference  to  the  number  of  bits 

* in  a word  must  be  the  string  "16",  and  that  string  must  not  appear 

* otherwise.  Any  reference  to  twice  this  number  must  appear  as  "32", 

* which  likewise  must  not  appear  otherwise.  Is  that  clear? 

* 

* Remember,  when  doubling  the  bit  size  replace  the  larger  number  (32) 

* first,  then  the  smaller  (16).  When  halving  the  bit  size,  do  the 

* opposite.  Otherwise,  things  will  get  wierd.  Also,  be  sure  to  replace 

* every  instance  that  appears.  ( : % s / f oo / ba r / g in  vi) 

* 

* These  routines  work  with  a pointer  to  the  L e a s t - s i g n i f i c a n t end  of 

* an  array  of  W0RD16s.  The  BI6(x),  LITTLE(y)  and  B I G LTT LE ( x , y ) macros 

* defined  in  bni.h  (which  expand  to  x on  a big-edian  machine  and  y on  a 

* Little-endian  machine)  are  used  to  c o nd i t i o na L i z e the  code  to  work 

* either  way.  If  you  have  no  assembly  primitives,  it  doesn't  matter. 

* Note  that  on  a big-endian  machine,  the  L e a s t -s i g n i f i c a n t -end  pointer 

* is  ONE  PAST  THE  END.  The  bytes  are  ptrC-ID  through  ptrC-Len3. 

* On  Little-endian,  they  are  ptrCOD  through  ptrCLen-ID.  This  makes 

* perfect  sense  if  you  consider  pointers  to  point  *between*  bytes  rather 

* than  at  them. 

* 

* Because  the  array  index  values  are  unsigned  integers,  ptrC-i] 

* may  not  work  properly,  since  the  index  -i  is  evaluated  as  an  unsigned, 

* and  if  pointers  are  wider,  zero-extension  will  produce  a positive 

* number  rahter  than  the  needed  negative.  The  expression  used  in  this 

* code,  *(ptr-i)  will,  however,  work.  (The  array  syntax  is  equivalent 

* to  *(ptr+-i),  which  is  a pretty  subtle  difference.) 

* 

* Many  of  these  routines  will  get  very  unhappy  if  fed  zero-length  inputs. 

* They  use  pgpAssert()  to  enforce  this.  An  higher  Layer  of  code  must  make 

* sure  that  these  aren't  called  with  zero-length  inputs. 

* 

* Any  of  these  routines  can  be  replaced  with  more  efficient  versions 

* elsewhere,  by  just  ^defining  their  names.  If  one  of  the  names 

* is  ^defined,  the  C code  is  not  compiled  in  and  no  declaration  is 

* made.  Use  the  BNINCLUDE  file  to  do  that.  Typically,  you  compile 

* asm  subroutines  with  the  same  name  and  just,  e.g. 

* ^define  bn i Hu L Ad d 1 _1 6 bn i H u L Add  1 _1 6 

* 

* If  you  want  to  write  asm  routines,  start  with  bn i Hu L Ad d 1 _ 1 6 ( ) . 

* This  is  the  workhorse  of  modular  exponentiation.  bn i H u L N 1 _1 6 ( ) is 

* also  used  a fair  bit,  although  not  as  much  and  it's  defined  in  terms 

* of  bn  i Hu L Ad d 1 _1  6 if  that  has  a custom  version.  bn i Mu L S u b 1 _1  6 and 

* bniDiv21_16  are  used  in  the  usual  division  and  remainder  finding. 

CCCHK:60b248ba201f09e9a7352e1ac660ca9e87bfbc72103cd6308f1c97e03f9f72c2d:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


61 


bnil  6.C 


* (Not  the  Montgomery  reduction  used  in  modular  exponentiation,  though.) 

* Once  you  have  b n i M u L Ad d 1 _1 6 defined,  writing  the  other  two  should 

* be  pretty  easy.  (Just  make  sure  you  get  the  sign  of  the  subtraction 

* in  bn i Mu  I Subi _1 6 right  - it's  dest  = dest  - source  * k.) 

* 

* The  only  definitions  that  absolutely  need  a double-word  (BNW0RD32) 

* type  are  bniMulAdd1_16  and  bniMulSub1_16;  if  those  are  provided, 

* the  rest  follows.  bniDiv21_16,  however,  is  a lot  slower  unless  you 

* have  them,  and  bniModQ_16  takes  after  it.  That  one  is  used  quite  a 

* bit  for  prime  sieving. 

*/ 


Sifndef  H A V E_ C 0 N F I G_ H 
^define  H A V E_ C ON F I G_ H 0 
#e  nd i f 

#if  HAVE_C0N FIG_H 
#include  "config.h" 

# e n d i f 


/* 

* Some  compilers  complain  about  #if  FOO  if  FOO  isn't 

* so  do  the  ANSI-mandated  thing  explicitly... 

*/ 

#ifndef  NO_ASSERT_H 
#define  NO_ASSERT_H  0 
# e nd i f 

#ifndef  NO_STRING_H 
#define  NO_STRING_H  0 
# e n d i f 

#ifndef  H A V E_ ST R I NG S _ H 
#define  H A V E_ ST R I NG S _ H 0 
#end i f 

#ifndef  N E E D_H EMO R Y_H 
^define  N E E D _M EMO R Y_ H 0 
#end i f 


def i ned. 


#if  !NO_STRING_H 

//include  <string.h>n  /*  For  memcpy  */ 

#elif  HAVE_STRINGS_H 
//include  <strings.h> 

#e  nd i f 

#if  NEED_HEMORY_H 
#include  <memory.h> 

// e nd i f 


#include 
//include 
//include 
//i  nc  lude 


b n i . h " 
bn i 1 6 . h " 
bnimem.h" 
bnlegal.h 


//include  "bnkludge.h 
//include  "pgpDebug.h 


//ifndef  BNW0RD16 

//error  16-bit  bignum  library  requires  a 16-bit  data  type 
//endi  f 


/*  Make  sure  the  copyright  notice  gets  included  */ 
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volatile  const  char  * volatile  const  b n i C o py r i g h t _1 6 = bnCopyright; 

/*  If  this  is  defined,  include  bnYieldC)  calls  */ 

#if  BNYIELD 

extern  int  ( *bn Y i e I d ) ( vo i d ) ; n /*  From  bn.c  */ 

#endi  f 

/* 

* Most  of  the  multiply  (and  Montgomery  reduce)  routines  use  an  outer 

* loop  that  iterates  over  one  of  the  operands  - a so-called  operand 

* scanning  approach.  One  big  advantage  of  this  is  that  the  assembly 

* support  routines  are  simpler.  The  loops  can  be  rearranged  to  have 

* an  outer  loop  that  iterates  over  the  product,  a so-called  product 

* scanning  approach.  This  has  the  advantage  of  writing  less  data 

* and  doing  fewer  adds  to  memory,  so  is  supposedly  faster.  Some 

* code  has  been  written  using  a p r od u c t - s c a n n i ng  approach,  but 

* it  appears  to  be  slower,  so  it  is  turned  off  by  default.  Some 

* experimentation  would  be  appreciated. 

* 

* (The  code  is  also  annoying  to  get  right  and  not  very  well  commented, 

* one  of  my  pet  peeves  about  math  libraries.  I'm  sorry.) 

*/ 

#ifndef  PRODUCT_SCAN 
^define  PRODUCT_SCAN  0 
#endi  f 


/* 

* Copy  an  array  of  words.  <Marvin  mode  on>  Thrilling,  isn't  it?  </Marvin> 

* This  is  a good  example  of  how  the  byte  offsets  and  BIGLITTLE()  macros  work. 

* Another  alternative  would  have  been 

* memcpy(dest  BIG(-len),  src  BIG(-len),  I e n * s i z e o f ( BN WO R D 1 6 ) ) , but  I find  that 

* putting  operators  into  conditional  macros  is  confusing. 

*/ 

#ifndef  bniCopy_16 
void 

bn i Copy_1 6 ( BNWORD 1 6 *dest,  BNU0RD16  const  *src,  unsigned  len) 

{ 

n memcpy(BIGLITTLE(dest-len,dest ),  B I G LI TT LE ( s r c- I e n , s r c ) , 

n len  * s i z eo f ( *s r c ) ) ; 

} 

#endif  /*  !bniCopy_16  */ 


/* 

* Fill  n words  with  zero.  This  does  it  manually  rather  than  calling 

* memset  because  it  can  assume  alignment  to  make  things  faster  while 

* memset  can't.  Note  how  big-endian  numbers  are  naturally  addressed 

* using  predecrement,  while  little-endian  is  postincrement. 

*/ 

#ifndef  bniZero_16 
void 

bni Zero_1 6(BNW0RD1 6 *num,  unsigned  len) 

{ 

n while  (len — ) 

n n B I G LI TT LE ( *--n urn, *num++ ) = 0; 

} 

#endif  /*  !bniZero_16  */ 

/* 
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* Negate  an  array  of  words. 

* Negation  is  subtraction  from  zero.  Negating  Low-order  words 

* entails  doing  nothing  until  a non-zero  word  is  hit.  Once  that 

* is  negated,  a borrow  is  generated  and  never  dies  until  the  end 

* of  the  number  is  hit.  Negation  with  borrow,  -x-1,  is  the  same  as 

* Repeat  that  until  the  end  of  the  number. 

* 


* Doesn't  return  borrow  out  because  that's  pretty  useless  - it's 

* always  set  unless  the  input  is  0,  which  is  easy  to  notice  in 

* normalized  form. 

*/ 

#i  f ndef  bni Neg_1 6 
void 

bn i Neg_1 6 ( BN  WO R D1  6 *num,  unsigned  Len) 

{ 

n pgpAssert(Len); 


X . 


□ 

/* 

skip  Low-order  zero  words  */ 

n 

while  (BIGLITTLEC* — num,*num)  ==  0) 

□ 

n 

if  ( ! -- L en  ) 

n 

n 

n return; 

Q 

ct 

LITTLE(num  + + ; ) 

n 

> 

& 

/* 

Negate  the  Lowest-order  non-zero 

word 

n 

*num  = -*num,- 

n 

/* 

Complement  all  the  higher-order 

words 

n 

while  ( — Len)  { 

n 

Q 

BIGLITTLEC  — num,+  + num); 

a 

n 

*num  = ~*num; 

n 

> 

> 

tfendif 

/*  ! 

!bniNeg_16  */ 

/* 

* bniAdd1_16:  add  the  single-word  "carry"  to  the  given  number. 

* Used  for  minor  increments  and  propagating  the  carry  after 

* adding  in  a shorter  bignum. 

* 

* Technique:  If  we  have  a double-width  word,  presumably  the  compiler 

* can  add  using  its  carry  in  inline  code,  so  we  just  use  a Larger 

* accumulator  to  compute  the  carry  from  the  first  addition. 

* If  not,  it's  more  complex.  After  adding  the  first  carry,  which  may 

* be  > 1,  compare  the  sum  and  the  carry.  If  the  sum  wraps  (causing  a 

* carry  out  from  the  addition),  the  result  will  be  Less  than  each  of  the 

* inputs,  since  the  wrap  subtracts  a number  (2''16)  which  is  Larger  than 

* the  other  input  can  possibly  be.  If  the  sum  is  >=  the  carry  input, 

* return  success  immediately. 

* In  either  case,  if  there  is  a carry,  enter  a Loop  incrementing  words 

* until  one  does  not  wrap.  Since  we  are  adding  1 each  time,  the  wrap 

* will  be  to  0 and  we  can  test  for  equality. 

*/ 

#ifndef  bniAdd1_16n  /*  If  defined,  it's  provided  as  an  asm  subroutine  */ 

#ifdef  BNW0RD32 
BNW0RD1 6 

bn i Add  1 _1 6 ( BN WOR D 1 6 *num,  unsigned  Len,  BNW0RD16  carry) 

{ 

n BNW0RD32  t; 
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pg p A s s e r t ( L e n > 0);n  /*  Alternative:  if  (!Len)  return  carry  */ 

t = (BNW0RD32)BIGLITTLE(* — num,*num)  + carry; 
BIGLITTLE(*nuni,*num++)  = ( BN  WO  R D 1 6 ) t ; 
if  (Ct  >>  16)  ==  0) 
n return0; 

while  (--len)  { 

n if  ( + + B I G L I TT L E ( * — num,*num  + +)  !=  0) 

n n returnO; 

> 

return  1; 

#else  /*  no  BNWORD32  */ 

BNWORD1 6 

bn  i Ad  d 1 _1  6 ( BN  WO  R D 1 6 *nuin,  unsigned  len,  BNWORD16  carry) 

{ 

n pgpAssertClen  > 0);n  /*  Alternative:  if  (!len)  return  carry  */ 

n if  ( ( B I G LI TT L E ( * — num, *n u m + + ) +=  carry)  >=  carry) 

n n return0; 

n while  (--len)  { 

n n if  ( ++B I G L I TT L E ( * — num,*num++)  !=  0) 

n n n return0; 

n } 

n returni; 

> 

#end i f 

#endif/*  !bniAdd1_16  */ 


/* 

* bniSub1_16:  subtract  the  single-word  "borrow"  from  the  given  number. 

* Used  for  minor  decrements  and  propagating  the  borrow  after 

* subtracting  a shorter  bignum. 

* 

* Technique:  Similar  to  the  add,  above.  If  there  is  a dou b I e- I e ng t h type, 

* use  that  to  generate  the  first  borrow. 

* If  not,  after  subtracting  the  first  borrow,  which  may  be  > 1,  compare 

* the  difference  and  the  *negative*  of  the  carry.  If  the  subtract  wraps 

* (causing  a borrow  out  from  the  subtraction),  the  result  will  be  at  least 

* as  large  as  -borrow.  If  the  result  < -borrow,  then  no  borrow  out  has 

* appeared  and  we  may  return  immediately,  except  when  borrow  ==  0.  To 

* deal  with  that  case,  use  the  identity  that  -x  = "x+l,  and  instead  of 

* comparing  < -borrow,  compare  for  <=  "borrow. 

* Either  way,  if  there  is  a borrow  out,  enter  a loop  decrementing  words 

* until  a non-zero  word  is  reached. 

* 

* Note  the  cast  of  "borrow  to  (BNW0RD16).  If  the  size  of  an  int  is  larger 

* than  BNW0RD16,  C rules  say  the  number  is  expanded  for  the  arithmetic,  so 

* the  inversion  will  be  done  on  an  int  and  the  value  won't  be  quite  what 

* is  expected. 

*/ 

#ifndef  bniSub1_16n  /*  If  defined,  it's  provided  as  an  asm  subroutine  */ 

#ifdef  BNW0RD32 
BNW0RD1 6 

bn  i Subi _1 6 ( BNWOR D1 6 *num,  unsigned  len,  BNW0RD16  borrow) 

{ 

n BNW0RD32  t ; 

n pg p A s s e r t ( I e n > 0);n  /*  Alternative:  if  (lien)  return  borrow  */ 
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n t = ( BNWOR  D32  ) BIG  LITT  LE  ( *--nuni,  *num  ) - borrow; 

n BIGLITTLE(*num,*num++)  = (BNW0RD16)t; 

n if  ((t  >>  16)  ==  0) 

n n return  0; 

n while  ( — Len)  { 

n n if  ( ( B I G LI TT LE ( *--n urn, *n um++ ) ) --  !=  0) 

n n a return0; 

n > 

n returni; 

} 

#eLse  /*  no  BNWORD32  */ 

BNW0RD1  6 

bniSubI  16(BNW0RD16  *num,  unsigned  Len,  BNW0RD16  borrow) 

D 

n 
n 
□ 
n 
n 
□ 

D 

> 

#endi  f 
# e n d i f 

/* 

* bniAddN_16:  add  two  bignums  of  the  same  Length, 

* returning  the  carry  (0  or  1). 

* One  of  the  building  blocks,  along  with  bniAddI,  of  adding  two  bignums  of 

* differing  Lengths. 

* 

* Technique:  Maintain  a word  of  carry.  If  there  is  no  double-width  type, 

* use  the  same  technique  as  in  bniAddI,  above,  to  maintain  the  carry  by 

* comparing  the  inputs.  Adding  the  carry  sources  is  used  as  an  OR  operator; 

* at  most  one  of  the  two  comparisons  can  possibly  be  true.  The  first  can 

* only  be  true  if  carry  ==  1 and  x,  the  result,  is  0.  In  that  case  the 

* second  can't  possibly  be  true. 

*/ 

#ifndef  bniAddN_16 
#ifdef  BNW0RD32 
BNWORDI 6 

bn i Ad d N_ 1 6 ( BN WOR D 1 6 *num1,  BNW0RD16  const  *num2,  unsigned  Len) 
f 

n BNW0RD32  t; 

n pgp As s e r t ( L en  > 0); 

n t = (BNW0RD32)BIGLITTLEC*  — num1,*num1)  + BIGLITTLEC*  — n um2 , *num2  + + ) ; 

n BIGLITTLE(*num1 ,*num1++)  = (BNW0RD16)t; 

n while  (--Len)  { 

a a t = (BNW0RD32)BIGLITTLE(* — num1,*num1)  + 

n n (BNW0RD32)BIGLITTLE(* — n um2 , * n um2++ ) + (t  >>  16); 

n n BIGLITTLE(*num1 ,*num1++)  = (BNW0RD16)t; 

n } 


pgpAssertCLen  > 0);b  /*  Alternative:  if  (!Len)  return  borrow  */ 

if  ((BIGLITTLEC*  — num,*num  + +)  -=  borrow)  <=  ( BN  WO R D 1 6 ) ~ bo r r o w ) 
n return0; 

while  (--Len)  { 

n if  ((BIGLITTLEC* — num,*num++)) — !=  0) 

n n return0; 

} 

return  1; 

/*  !bniSub1_16  */ 
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a return  (BNW0RD16)(t>>16); 

> 

#eLse  /*  no  BNW0RD32  */ 

BNW0RD1  6 

bn  i Add  N_  1 6 ( BN  WO  R D 1 6 *nun)1,  BNW0RD16  const  *num2,  unsigned  Len) 

{ 

n BNWORD16  x,  carry  = 0; 

n pg p A s s e r t ( L e n > 0);n  /*  Alternative:  change  Loop  to  test  at  start  */ 

n do  { 

n n X = B I G L I TT LE ( *--num2 , *n um2  + + ) ; 

n n carry  = (x  +=  carry)  < carry; 

n n carry  +=  (BIGLITTLEC*  — numi  , *nuni1 ++ ) +=  x)  < x; 

n } while  ( — Len); 

n return  carry; 

} 

#endi f 

#endif  /*  !bniAddN_16  */ 


/* 

* bniSubN_16:  add  two  bignums  of  the  same  length, 

* returning  the  carry  (0  or  1). 

* One  of  the  building  blocks,  along  with  subnl,  of  subtracting  two  bignums  of 

* differing  Lengths. 

* 

* Technique:  If  no  double-width  type  is  availble,  maintain  a word  of  borrow. 

* First,  add  the  borrow  to  the  subtrahend  (did  you  have  to  Learn  all  those 

* awful  words  in  elementary  school,  too?),  and  if  it  overflows,  set  the 

* borrow  again.  Then  subtract  the  modified  subtrahend  from  the  next  word 

* of  input,  using  the  same  technique  as  in  subnl,  above. 

* Adding  the  borrows  is  used  as  an  OR  operator;  at  most  one  of  the  two 

* comparisons  can  possibly  be  true.  The  first  can  only  be  true  if 

* borrow  ==  1 and  x,  the  result,  is  0.  In  that  case  the  second  can't 

* possibly  be  true. 

■k 

* In  the  double-word  case,  ( BNW0RD1 6 ) - ( t >>1 6 ) is  subtracted,  rather  than 

* adding  t>>16,  because  the  shift  would  need  to  sign-extend  and  that's 

* not  guaranteed  to  happen  in  ANSI  C,  even  with  signed  types. 

*/ 

#ifndef  bniSubN_16 
#ifdef  BNW0RD32 
BNW0RD1 6 

bn i S ubN_1 6 ( BN WOR D 1 6 *num1,  BNU0RD16  const  *num2,  unsigned  Len) 

{ 

n BNWORD32  t; 

n pg p A s s e r t ( L e n > 0); 

n t = (BNW0RD32)BIGLITTLE(*  — num1,*num1)  - BIGLITTLEC*  — n um2 , *num2  + + ) ; 

n BIGLITTLE(*num1 ,*num1++)  = (BNW0RD16)t; 


□ 

a 

□ 

□ 

□ 


while  (--Len)  { 

n t = (BNW0RD32)BIGLITTLE(* — num1,*num1)  - 

n (BNW0RD32)BIGLITTLE(* — num2 , * num2++ ) - 

n (BNW0RD16)-Ct  >>  16); 

n BIGLITTLE(*num1 ,*num1++)  = (BNW0RD16)t; 
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n } 

n return  - ( BN  WO R D 1 6 ) ( t >>1 6 ) ; 

> 

Seise 
BNWORD1 6 

bn  i SubN_1  6 ( BNWOR  D 1 6 *nuni1,  BNW0RD16  const  *nun2,  unsigned  Len) 

{ 

a BNW0RD16  x,  borrow  = 0; 

n pgpAssertCLen  > 0);n  /*  Alternative:  change  loop  to  test  at  start  */ 

a do  { 

n n X = BIGLITTLE(*--num2,*num2++); 

n n borrow  = (x  +=  borrow)  < borrow; 

n n borrow  +=  (BIGLITTLEC*  — num1,*num1++)  -=  x)  > (BNW0RD16)~x; 

n > while  (--len); 

n return  borrow; 

} 

Send  i f 

Sendif  /*  !bniSubN_16  */ 


Sifndef  bniCmp_16 
/* 

* bniCmp_16:  compare  two  bignums  of  equal  length,  returning  the  sign  of 

* numi  - num2.  (-1,  0 or  +1). 

* 

* Technique:  Change  the  little-endian  pointers  to  big-endian  pointers 

* and  compare  from  the  mo s t -s i g n i f i c a n t end  until  a difference  if  found. 

* When  it  is,  figure  out  the  sign  of  the  difference  and  return  it. 

*/ 

i nt 

bn i Cmp_ 1 6 ( BN WO R D 1 6 const  *num1,  BNW0RD16  const  *num2,  unsigned  len) 

{ 

n B 1 G LI TT LE ( n uml  -=  len,  numi  +=  len); 

n BIGLITTLECnum2  -=  len,  num2  +=  len); 


□ 

□ 

n 

□ 

□ 

□ 

n 

a 

Q 

} 


while  (len — ) { 


Q 

a 

n 

□ 

□ 

n 


if  ( B I G L I TT LE ( * n uml ++  !=  *num2++,  * — numi 

n if  ( B I G L I TT LE ( n uml C - 1 T < num2C-13, 

n n return  -1 ; 

n else 

n n returni; 

> 


= * — n um2 ) ) { 
*num1  < *num2 ) ) 


} 


return  0; 


Sendif  /*  !bniCmp_16  */ 


/* 

* mu  1 1 6_ppmma a ( p h , p I , X , y , a , b ) is  an  optional  routine  that 

* computes  (ph,pl)  =x*y+a+b.  mul16_ppmma  and  mul16_ppmm 

* are  simpler  versions.  If  you  want  to  be  lazy,  all  of  these 

* can  be  defined  in  terms  of  the  others,  so  here  we  create  any 

* that  have  not  been  defined  in  terms  of  the  ones  that  have  been. 
*/ 
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/*  Define  ones  with  fewer  a's  in  terms  of  ones  with  more  a's  */ 

#if  ! d e f i ned ( mu L 1 6_ppmma ) &&  d e f i n ed ( mu L 1 6_ppmma a ) 

^define  mu  1 1 6_ppmma ( ph , p L , x, y , a ) mu L 1 6_ppmma a ( p h , p L , x , y , a , 0 ) 

Send i f 

#if  ! d e f i n ed ( mu L 1 6_p pmm ) &&  d e f i n ed ( mu L 1 6_ ppmma ) 

Sdefine  mu  1 1 6_ppmm ( p h , p L , x , y ) mu L 1 6_p pmma ( p h , p L , x , y , 0 ) 

Send i f 

/* 

* Use  this  definition  to  test  the  mu L 1 6_p pmm-ba s ed  operations  on  machines 

* that  do  not  provide  muM6_ppmm.  Change  the  final  "0"  to  a "1"  to 

* enable  it. 

*/ 

Sif  ! d e f i n ed ( mu  1 1 6_ppmm ) &&  d e f i n ed ( BN WOR D32  ) &&  0n  /*  Debugging  */ 

Sdefine  mu  1 1 6_p pmm ( ph , p I , x , y ) \ 

n ({BNU0RD32  _ = ( BN WO R D 32 ) ( x ) * ( y ) ; (pi)  = (ph)  = _>>16;}) 

S e n d i f 

Sif  def i ned ( mu  1 1 6_ppmm ) SS  ! def i ned ( mu  1 1 6_ppmma ) 

Sdefine  mu  1 1 6_ppmma ( ph , p I , x, y , a ) \ 

n ( mu  1 1 6_ppmm ( ph , p I , X, y ) , (ph)  +=  ((pi)  +=  (a))  < (a)) 

Send i f 

Sif  def i ned ( mu  1 1 6_ppmma ) &&  ! d e f i n ed ( mu  1 1 6_ppmma a ) 

Sdefine  mu  1 1 6_ppmma a ( ph , p I , x , y , a , b ) \ 

n ( mu  1 1 6_ppmma ( p h , p I , X , y , a ) , (ph)  +=  ((pi)  +=  (b))  < (b)) 

Se n d i f 

/* 

* bniMulN1_16:  Multiply  an  n-word  input  by  a 1-word  input  and  store  the 

* n+1-word  product.  This  uses  either  the  mul16_ppmm  and  mul16_ppmma 

* macros,  or  C multiplication  with  the  BNW0RD32  type.  This  uses  mul16_ppmma 

* if  available,  assuming  you  won't  bother  defining  it  unless  you  can  do 

* better  than  the  normal  multiplication. 

*/ 

Sifndef  bniHulN1_16 

Sifdef  bni Mu  I Addi _1 6n  /*  If  we  have  this  asm  primitive,  use  it.  */ 
void 

bn i Mu  I N1 _1 6 ( BNW0RD1 6 *out,  BNW0RD16  const  *in,  unsigned  len,  BNW0RD16  k) 

{ 

n bn i Z e r o_1 6 ( ou t , len); 

n BI G LI TT LE ( * ( ou t - I e n ) , * ( ou t + I e n ) ) = b n i Mu  I Add  1 _ 1 6 ( ou t , in,  len,  k); 

} 

Selif  de f i ned ( mu  1 1 6_ppmm ) 
void 

b n i Mu  I N 1 _1 6 ( BN WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  len,  BNW0RD16  k) 

{ 

n BNW0RD16  prod,  carry,  carryin; 

n pgpAssert(len  > 0); 

n BIG( — out;--in;); 

n mul16_ppmm(carry,  *out,  *in,  k); 

n LI TT LE ( ou t ++ ; i n + + ; ) 

n while  (--len)  { 

n a BIG(--out;  — in;) 
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a n 
Q n 
□ n 
n > 

n BI G LI TTLE ( *--ou t , *ou t ) = carry; 


carryin  = carry; 

nu L 1 6_ppmma ( ca r ry , *out,  *in,  k,  carryin); 
LITTLE(out++;in++;) 


#eLif  d e f i n e d ( BN  WO R D 3 2 ) 
void 

bn i H u L N 1 _ 1 6 ( BN  WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k) 
L 

a BNW0RD32  p; 

n pg p As s e r t ( L en  > 0); 

n p = (BNW0RD32)BIGLITTLEC* — in,*in++)  * k; 

a BIGLITTLEC* — out,*out++)  = (BNW0RD16)p; 


while  (--Len)  { 

n p = CBNW0RD32)BIGLITTLE(* — in,*in++)  * k + CBNW0RD16)(p  >>  16); 

n BIGLITTLEC* — out,*out++)  = (BNW0RD16)p; 

> 

BIGLITTLEC* — out,*out)  = (BNW0RD16)(p  >>  16); 


□ 
n 
n 
a 
n 
> 

#e  I s e 

Serror  No  16x16  ->  32  multiply  available  for  16-bit  bignum  package 
#end  i f 

#endif  /*  bniMuLNI  16  */ 


/* 

* b n i M u L Ad d 1 _1 6 : Multiply  an  n-word  input  by  a 1-word  input  and  add  the 

* Low  n words  of  the  product  to  the  destination.  *Returns  the  n+lst  word 

* of  the  product.*  (That  turns  out  to  be  more  convenient  than  adding 

* it  into  the  destination  and  dealing  with  a possible  unit  carry  out 

* of  *that*.)  This  uses  either  the  muL16_ppmma  and  mul16_ppmmaa  macros, 

* or  C multiplication  with  the  BNW0RD32  type. 

* 

* If  you're  going  to  write  assembly  primitives,  this  is  the  one  to 

* start  with.  It  is  by  far  the  most  commonly  called  function. 

*/ 

#ifndef  bn i Mu L Ad d 1 _1 6 
#if  d e f i ne d ( mu L 1 6_ppmm ) 

BNW0RD1 6 

bn i M u L Ad d 1 _ 1 6 ( BN WOR D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k) 
{ 

n BNW0RD16  prod,  carry,  carryin; 

n pgpAssert ( Len  > 0); 

n BIG(--out;--in;); 


n 

carryin 

= *out ; 

□ 

mu  L 1 6_ 

ppmmaCcarry,  *out,  * 

n 

LITTLE(out++; i n++; ) 

□ 

while 

( 

— Len)  { 

Q 

a 

BIGC  — out;  — i n; ) ; 

n 

a 

carryin  = carry; 

n 

n 

muL16_ppmmaa(carry 

n 

n 

*out  = prod; 
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a a LI TT L E ( ou t + + ; i n + + ; ) 

n > 


n return  carry; 

> 

#elif  def i ned ( BNWOR D32 ) 

BNWORD1 6 

b n i M u L Ad d 1 _ 1 6 ( BN  WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNWORDId  k) 
{ 

□ BNWORD32  p; 


n pgpAssertCLen  > 0); 


n p = (BNU0RD32)BIGLITTLE (*--i n,*i n++)  * k + BIGLITTLEC* — out,*out); 

n BIGLITTLE(*out,*out++)  = ( BN WO R D 1 6 ) p ; 


n while  ( — Len)  -C 

a a p = (BNW0RD32)BIGLITTLE(* — in,*in++)  * k + 

a n (BNW0RD16)(p  >>  16)  + BIGLITTLEC* — out,*out); 

n a BIGLITTLE(*out,*out++)  = (BNW0RD16)p; 

n > 


n return  (BNW0RD16)(p  >>  16); 

> 

ffeLse 

fferror  No  16x16  ->  32  multiply  available  for  16-bit  bignum  package 
#e  nd i f 


#endif  /*  bniMulAddI  16  */ 


/* 

* bn  i Hu  I S ub  1 _1 6 : HuLtipLy  an  n-uord  input  by  a 1-word  input  and  subtract  the 

* n-word  product  from  the  destination.  Returns  the  n+lst  word  of  the  product. 

* This  uses  either  the  muL16_ppmm  and  mul16_ppmma  macros,  or 

* C multiplication  with  the  BNW0RD32  type. 

* 

* This  is  rather  uglier  than  adding,  but  fortunately  it's  only  used  in 

* division  which  is  not  used  too  heavily. 

*/ 

#ifndef  bn i Hu  I S u b 1 _1 6 
#if  def i ned ( mu L 1 6_ppmm ) 

BNW0RD1 6 

bniHuLSub1_16(BNW0RD16  *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k) 

{ 


Q 

BNW0RD16  prod,  carry,  carryin; 

n 

pgpAssertCLen  > 0); 

n 

BIGC- 

-in;) 

n 

mu  1 1 6 

_ppmm(carry,  prod,  *in,  k); 

n 

LITTLEC i n++; ) 

n 

carry 

+=  C B I G LI TT LE ( *--ou t , *ou t ++ ) -=  prod)  > 

CBNW0RD16)~prod; 

n 

while 

( — Len)  { 

n 

D 

BIGC — i n; ) ; 

a 

n 

carryin  = carry; 

n 

□ 

mu  1 1 6_ppmma ( ca r ry,  prod,  *in,  k,  carryin); 

n 

n 

LITTLEC i n++; ) 

n 

□ 

carry  +=  CBIGLITTLEC* — out,*out++)  -= 

prod)  > CBNW0RD16) 
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n 


> 


n return  carry; 

} 

#eLif  d e f i n e d ( B N WO R D 32  ) 

BNW0RD1  6 

bn i Mu  I S ubi _1 6 C BN WOR D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNWORD16  k) 
{ 

a BNW0RD32  p; 

n BNW0RD16  carry,  t; 


n pg p A s s e r t ( L e n > 0); 


n p = (BNW0RD32)BIGLITTLE(* — in,*in++)  * k; 

n t = BIGLITTLEC* — out,*out); 

n carry  = ( BN  WO R D 1 6 ) ( p>> 1 6 ) + 

n n n ( ( B I G LI TT L E ( *ou t , *o u t + + ) = t - ( BN WO R D 1 6 ) p ) > t); 


n 

□ 

n 

a 

a 

a 


while  ( — Len)  { 

n p = (BNW0RD32)BIGLITTLE(* — in,*in++)  * k + carry; 

n t = BIGLITTLEC* — out,*out); 

n carry  = ( BN WO R D 1 6 ) ( p>> 1 6 ) + 

n n ( (BIGLITTLE(*out,*out++)=t-(BNW0RDl6)p)  > t ); 

> 


a return  carry; 

} 

#e  L se 

terror  No  16x16  ->  32  multiply  available  for  16-bit  bignum  package 
Send  i f 

Sendif  /*  ! bn i Hu  I Subi _1 6 */ 


/* 

* Shift  n words  Left  "shift"  bits.  0 < shift  < 16.  Returns  the 

* carry,  any  bits  shifted  off  the  Left-hand  side  (0  <=  carry  < 2*shift). 
*/ 

Sifndef  bniLshift_16 
BNW0RD1 6 

bn i Ls h i f t _1 6 ( BN WOR D 1 6 *num,  unsigned  Len,  unsigned  shift) 

{ 

n BNWORD16  x,  carry; 

n pgpAssertCshift  > 0); 

n pgpAssertCshift  < 16); 


□ 

carry 

= 0; 

□ 

while 

Clen--)  { 

o 

n 

BIGC  — num; ) 

□ 

D 

X = * n u m ; 

n 

n 

*num  = Cx<<shift)  | carry; 

□ 

n 

LITTLE  C num  + +;  ) 

El 

n 

carry  = x >>  C16-shift); 

n 

> 

□ 

return 

carry; 

} 

Sendif  /*  ! bn i Ls h i f t _1 6 */ 

/* 
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* An  optimized  version  of  the  above,  for  shifts  of  1. 

* Some  machines  can  use  add-wi t h-ca r ry  tricks  for  this. 
*/ 

#ifndef  bniDoubLe_16 
BNW0RD1 6 

bn i D ou b L e_1 6 ( BN WOR D 1 6 *num,  unsigned  Len) 

{ 

n BNW0RD16  x,  carry; 


a 

n 

n 

n 

a 

n 

□ 

n 


carry 

= 0; 

while 

(len--)  { 

□ 

BIG(--num; ) 

a 

X = *num; 

u 

*num  = (x<<1)  1 carry; 

n 

LITTLE(num++;) 

n 

carry  = x >>  (16-1); 

> 


n return  carry; 

> 

#endif  /*  IbniDoubLe  16  */ 


/* 

* Shift  n words  right  "shift"  bits.  0 < shift  < 16.  Returns  the 

* carry,  any  bits  shifted  off  the  right-hand  side  (0  <=  carry  < 2*shift). 
*/ 

#ifndef  bniRshift_16 
BNW0RD1 6 

b n i R s h i f t _1 6 ( BN WOR D 1 6 *num,  unsigned  Len,  unsigned  shift) 

{ 


Q 

BNW0RD16  X,  carry 

= 0; 

n 

pg p A s s e r t ( s h i f t > 

0); 

n 

pgpAssert(shift  < 

16); 

n 

BIGLITTLE(num  -= 

len,  num  +=  Len); 

Q 

while 

(Len--)  { 

n 

n 

LITTLE( — 

n um;  ) 

s 

n 

X = *num; 

n 

□ 

*num  = (x>>shift)  | carry; 

□ 

n 

BI G C num+  + 

;) 

n 

n 

carry  = x 

<<  (16-shift); 

n 

> 

n 

return 

carry  >>  (16-shift); 

} 

#endif  /*  !bniRshift  16  */ 


/* 

* Multiply  two  numbers  of  the  given  Lengths.  prod  and  num2  may  overlap, 

* provided  that  the  Low  Leni  bits  of  prod  are  free.  (This  corresponds 

* nicely  to  the  place  the  result  is  returned  from  bn i Mo n t Re d u c e_1 6 . ) 

* 

* TODO:  Use  Karatsuba  multiply.  The  overlap  constraints  may  have 

* to  get  rewhacked. 

*/ 

#ifndef  bniMuL_16 
void 

b n i M u L _1 6 ( BN WO R D 1 6 *prod,  BNW0RD16  const  *num1,  unsigned  leni, 
CCCHK:781ee5feef3993b43b377ba7eec724A311ee07a34519e552a55da49966d616ecd:: 


Pretty  Good  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


73 


bnil  6.C 


BNW0RD16  const  *num2,  unsigned  Len2) 

{ 

n /*  Special  case  of  zero  */ 

a if(!Len1  ||  !Len2){ 

n n b n i Z e ro_ 1 6 ( p r od , Len1+Len2); 

n n return; 

n > 

n /*  Multiply  first  word  */ 

n bn i Mu  I N1 _1 6 ( p r od,  numi,  leni,  BIGLITTLEC*  — n um2 , * n um2  + + ) ) ; 


n 

a 

□ 

□ 

n 

Q 

a 

□ 

n 

□ 

} 


/* 

* Add  in  subsequent  words,  storing  the  most  significant  word, 

* which  is  new  each  time. 

*/ 

while  (--len2)  { 

a BIGLITTLEC — prod,prod++); 

a BIGLITTLE(*(prod-len1-1 ),*(prod+len1 ) ) = 

a n b n i Mu  I Ad d 1 _1 6 ( p r od , numi,  leni, 

a n n B I G L I TT LE ( *--n um2 , *n um2  + + ) ) ; 

} 


#endif  /*  IbniHul  16  */ 


/* 

* bniMulX_16  is  a square  multiply  - both  inputs  are  the  same  length. 

* It's  normally  just  a macro  wrapper  around  the  general  multiply, 

* but  might  be  i mp I erne n t a b I e in  assembly  more  efficiently  (such  as 

* when  product  scanning). 

*/ 

#ifndef  bniMulX_16 

#if  def ined(BNW0RD32)  SS  PRODUCT_SCAN 
/* 

* Test  code  to  see  whether  product  scanning  is  any  faster.  It  seems 

* to  make  the  C code  slower,  so  PRODUCT_SCAN  is  not  defined. 

*/ 

static  void 

bn i Mu  I X_1 6 ( BNWORD 1 6 *prod,  BNW0RD16  const  *num1,  BNW0RD16  const  *num2, 
a unsigned  len) 

{ 

a BNW0RD32  x,  y; 

a BNW0RD16  const  *p1,  *p2; 

a unsigned  carry; 

a unsigned  i,  j; 


a /*  Special  case  of  zero  */ 

a ifCllen) 

a a return; 

a X = (BNW0RD32)BIGLITTLE(num1 C-1 3 * num2[-i:,  nurnlCe:  * num2L0:); 

a BIGLITTLEC* — prod,  *prod++)  = (BNW0RD16)x; 

a X >>=  1 6 ; 


n 

for  ( i 

= 1;  i < len;  i ++ ) { 

□ 

n 

carry  = 0; 

Q 

0 

pi  = numi; 

□ 

n 

p2  = BIGLITTLE(num2-i-1 ,num2+i+1 ); 

Q 

D 

for  (j  = 0;  j <=  i;  j++)  { 
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H 

B 

fl 

BIGCy  = (BNW0RD32)* — pi  * *p2++;) 

n 

B 

B 

LITTLECy  = (BNW0RD32 ) *p1 ++  * * — p2;) 

n 

B 

B 

X 

+ 

II 

□ 

fl 

fl 

carry  +=  (x  < y); 

n 

B 

> 

n 

B 

BIGLITTLEl* — prod,*prod++)  = (BNW0RD16)x; 

a 

fl 

X = 

(x  >>  16)  1 ( B N WO R D 3 2 ) c a r r y <<  16; 

a 

> 

a 

for  ( i 

= 1; 

i < len;  i++)  f 

u 

B 

carry  = 0; 

n 

fl 

pi  = 

BIGLITTLE(num1-i ,num1+i ) ; 

D 

fl 

p2  = 

BIGLITTLE(num2-len,num2+len) ; 

□ 

B 

for 

(j  = i;  j < len;  j++)  { 

n 

fl 

fl 

BIGCy  = (BNW0RD32)* — pi  * *p2++;) 

n 

B 

n 

LITTLECy  = ( BNWOR D32 ) *p1 ++  * * — p2;) 

n 

B 

fl 

X +=  y; 

B 

fl 

fl 

carry  +=  (x  < y); 

B 

fl 

> 

B 

B 

BIGLITTLEC* — prod,*prod++)  = (BNW0RD16)x; 

B 

fl 

X = 

(x  >>  16)  1 (BNW0RD32)carry  <<  16; 

B 

B 

> 

B 

BlGLITTLEl*- 

-prod,*prod)  = (BNW0RD16)x; 

> 

#eLse  /*  !def ined(BNW0RD32)  ||  ! P RO D U C T_S C A N */ 

/*  Default  trivial  macro  definition  */ 

#define  bn i Mu  I X_1 6 ( p r od , numi , num2,  len)  bn i M u I _ 1 6 ( p r od , numi,  len,  num2, 
#endif  /*  ! def i ned ( BNW0RD32  ) ||  ! P RO D U C T_ S C A N */ 

#endif  /*  ! IbmMulX  16  */ 


#if  !def ined(bniHontHul_16)  SS  de f i n ed ( BN  WO R D32 ) &&  PRODUCT_SCAN 
/* 

* Test  code  for  product-scanning  multiply.  This  seems  to  slow  the  C 

* code  down  rather  than  speed  it  up. 

* This  does  a multiply  and  Montgomery  reduction  together,  using  the 

* same  loops.  The  outer  loop  scans  across  the  product,  twice. 

* The  first  pass  computes  the  low  half  of  the  product  and  the 

* Montgomery  multipliers.  These  are  stored  in  the  product  array, 

* which  contains  no  data  as  of  yet.  x and  carry  add  up  the  columns 

* and  propagate  carries  forward. 

* 


* The  second  half  multiplies  the  upper  half,  adding  in  the  modulus 

* times  the  Montgomery  multipliers.  The  results  of  this  multiply 

* are  stored. 

*/ 


static  void 


bniMontMul_16(BNW0RD16  *prod,  BNW0RD16  const  *num1, 

nsigned  len,  BNW0RD16 


'p2,  *pm; 


fl 

BNWOR01 6 

const  *mod 

{ 

fl 

BNW0RD32 

X,  y; 

B 

BNW0RD1 6 

const  *p1. 

fl 

BNW0RD1 6 

*pp; 

fl 

BNW0RD1 6 

t; 

fl 

unsigned 

carry; 

fl 

unsigned 

i /■  j ; 

B 

/*  Specie 

l case  of 

fl 

if  (lien) 

BNU0RD16  const  *num2, 

i n V ) 
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return; 


/* 

* This  computes  directly  into  the  high  half  of  prod,  so  just 

* shift  the  pointer  and  consider  prod  only  "Len"  elements  long 

* for  the  rest  of  the  code. 

*/ 

BIGLITTLECprod  -=  len,  prod  +=  len); 


/*  Pass  1 - compute  Montgomery  multipliers  */ 

/*  First  iteration  can  have  certain  simplifications.  */ 

X = (BNW0RD32)BIGLITTLE(num1 C-1 : * numZC-l],  num1C0:  * num2[0]); 
BI  G LI TT LE ( p r od C-1 3 , prodC03)  = t = i nv  * (BNW0RD16)x; 
y = (BNW0RD32)t  * B I G L I TT L E ( mod C - 1 3 , mod L 0 3 ) ; 

X +=  y; 

/*  Note:  GCC  2.6.3  has  a bug  if  you  try  to  eliminate  "carry"  */ 

carry  = (x  < y); 

pg p A s s e r t ( ( BN WO R D 1 6 ) X ==  0); 

X = X >>  16  I ( BNW0RD32 ) ca r ry  <<  16; 


n 

for 

( i 

= 1;  i < len;  i++)  { 

n 

n 

carry  = 0; 

n 

□ 

pi  = numi ; 

n 

n 

p2  = B I G L I TT LE ( n um2 - i - 1 , n um2+ i +1 ) ; 

□ 

n 

pp  = prod; 

□ 

Q 

pm  = BIGLITTLE(mod-i-1,mod+i+1); 

a 

n 

for  (j  = 0;  j < i;  j++)  { 

n 

n 

a y = (BNW0RD32)BIGLITTLEC* — pi 

★ 

* p 2 + + , * 

Q 

a 

n X +=  y; 

□ 

u 

n carry+=(x<y); 

n 

n 

n y = (BNW0RD32)BIGLITTLE(* — pp 

* 

* p m + + ^ * 

n 

n 

n X +=  y; 

□ 

a 

n carry+=(x<y); 

□ 

Q 

} 

□ 

n 

y = (BNW0RD32)BIGLITTLECp1  :-1  3 * p2i:03. 

pi[0:  * 

n 

n 

X +=  y; 

u 

n 

carry  +=  (x  < y); 

u 

n 

pg p As s e rt ( BI G LITTLE C pp  ==  prod-i,  pp 

= = 

prod+i ) ) 

u 

u 

BIGLITTLECppC-l 3,  ppC03)  = t = i nv  * 

CBNW0RD1 6)x 

n 

a 

pg p A s s e r t ( B I G L I TT L E ( pm  ==  mod-1,  pm  = 

= 

mod  + 1 ) ) ; 

n 

n 

y = (BNW0RD32)t  * B I G L I TT L E ( pm C 0 3 , pm [ 

-13); 

n 

n 

X +=  y; 

n 

n 

carry  +=  ( x < y ) ; 

n 

□ 

pg p A s s e r t ( ( BN  WO R D 1 6 ) X ==  0); 

n 

n 

X = X >>  16  1 CBNW0RD32)carry  <<  16; 

Q 

> 

□ 

/* 

Pass 

2 - compute  reduced  product  and  store 

* 

/ 

la 

for 

(i 

= 1;  i < len;  i++)  i 

n 

n 

carry  = 0; 

□ 

D 

pi  = B I G LI TT L E ( numi - i , numi + i ) ; 

n 

a 

p2  = B I G LI TT L E C n um2 - 1 e n , n um2+ 1 e n ) ; 

□ 

n 

pm  = B I G LI TT L E ( mod- i , mod+ i ) ; 

n 

c 

pp  = B I G LI TTLE ( p rod- 1 en, p r od+ 1 en ) ; 

n 

n 

for  (j  = i;  j < len;  j++)  f 

a 

Q 

n y = (BNW0RD32)BIGLITTLE(* — pi 

* 

* p 2 + + , * 

Q 

□ 

n X +=  y; 

n 

n 

n carry+=(x<y); 

pi  + + 


pi  + + 
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Q 

D 

□ 

□ 

B 

B 

B 

B 

B 


n n y = ( BN WO R D 32 ) B I G LI TT LE ( * — pm  * *pp++,  *pm++  * * — pp); 

B B X +=  y ; 

B B carry+=(x<y); 

n > 

n pgpAssertCBIGLITTLECpm  ==  mod-Len,  pm  ==  mod+Len)); 

n pgpAssert(BIGLITTLE(pp  ==  prod-i,  pp  ==  prod+i)); 

n BIGLITTLE(ppC0],ppC-1 D)  = (BNW0RD16)x; 

n X = (x  >>  16)  I (BNU0RD32)carry  <<  16; 

> 


n /*  Last  round  of  second  half,  simplified.  */ 

n B I G L I TT L E ( * ( p rod- L en ) , * ( p r od+ L e n-1 ) ) = (BNW0RD16)x; 

n carry=Cx>>16); 

n while  (carry) 

n B carry  -=  bn i S u b N_ 1 6 ( p r od , mod,  len); 

n while  ( bn i Cmp_1 6 ( p rod , mod,  len)  >=  0) 

n B ( VO i d ) bn i S ub N_ 1 6 ( p r od , mod,  len); 

> 

/*  Suppress  later  definition  */ 

^define  bn i Hon t M u I _1 6 bn i Mon t Hu  I _1 6 
# e n d i f 


#if  ! def i nedCbni Square.l 6)  &S  de f i n ed ( BN WO R D 3 2 ) SS  PRODUCT_SCAN 
/* 

* Trial  code  for  p r odu c t -s c a n n i ng  squaring.  This  seems  to  slow  the  C 

* code  down  rather  than  speed  it  up. 

*/ 

void 

bn i Squa r e_1 6 ( BN W0RD1 6 *prod,  BNW0RD16  const  *num,  unsigned  len) 

{ 

n BNW0RD32  x,  y,  z; 

n BNW0RD16  const  *p1,  *p2; 

n unsigned  carry; 

n unsigned  i,  j; 

n /*  Special  case  of  zero  */ 

n if(!len) 

B B return; 

n /*  Word  0 of  product  */ 

n X = (BNWORD32)BIGLITTLECnumC-1 : * numC-i:,  numC0D  * num:0D); 

n BIGLITTLE(* — prod,  *prod++)  = (BNW0RD16)x; 

n X >>=  16; 


n 

/* 

Words  1 through  len-1  */ 

Q 

for 

(i  = 1;  i < 

len;  i++)  { 

Q 

B 

carry  = 

0; 

n 

B 

y = 0; 

B 

B 

pi  = num 

' f 

n 

B 

p2  = B I G LI TT LE ( num- i -1 , num+ i +1 ) ; 

B 

B 

for  ( j = 

0;  j < (i+1)/2;  j++)  { 

B 

B 

B 

BIGCz  = (BNW0RD32)* — pi 

B 

B 

B 

LITTLECz  = (BNW0RD32)*p1 

B 

B 

B 

y +=  z; 

B 

B 

B 

carry  +=  (y  < z); 

B 

B 

> 

B 

B 

y +=  2 = 

y; 

*p2  + + ; ) 

* * — p2;) 
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□ 

n 

carry  + 

= carry  + (y  < z); 

n 

n 

i f 

( ( i 

8 1)  ==  0)  { 

□ 

B 

B 

pg p As se r t ( BI G LI TT LE ( pi -1  ==  p2. 

pi  = 

n 

B 

B 

BIGCz  = (BNW0RD32)*p2  * *p2;) 

n 

B 

B 

LITTLECz  = (BNW0RD32)*p1  * *p1;) 

n 

B 

B 

y +=  z; 

n 

B 

B 

carry  +=  (y  < z); 

□ 

B 

y 

Q 

B 

X + 

= y; 

a 

n 

carry  + 

= (x  < y); 

n 

□ 

BIGLITTLEC* — p r od , *p r od++ ) = (BNW0RD16)x 

r 

a 

Q 

X = 

(x 

>>  16)  1 (BNW0RD32)carry  <<  16; 

a 

> 

B 

/* 

Words  len  through  2*len-2  */ 

B 

for 

(i  = 1; 

i < 

Len;  i++)  { 

B 

n 

carry  = 

0; 

B 

Q 

y = 

0; 

B 

B 

pi 

= B I G L I TT LE ( n urn- i , n um+ i ) ; 

B 

B 

p2 

= BI G LITTLE ( num- L en, num+ L en ) ; 

n 

B 

for 

( j 

= 0;  i < (Len-i)/2;  j++)  f 

n 

B 

□ 

BIGCz  = CBNW0RD32)* — pi  * *p2++; 

) 

B 

B 

n 

LITTLECz  = CBNW0RD32)*p1++  * * — 

p2;) 

B 

n 

□ 

y +=  z; 

□ 

n 

n 

carry  +=  Cy  < z); 

n 

n 

} 

□ 

n 

y + 

= z 

= y; 

n 

n 

carry  + 

= carry  + Cy  < z); 

n 

B 

if 

( ( Len-i ) 8 1 ) f 

n 

B 

n 

pgpAssertCBIGLITTLECp1-1  ==  p2. 

pi 

n 

B 

n 

BIGCz  = CBNW0RD32)*p2  * *p2;) 

□ 

B 

n 

LITTLECz  = CBNW0RD32 ) *p1  * *p1;) 

n 

B 

n 

y +=  z; 

Q 

□ 

B 

carry  +=  Cy  < z); 

n 

n 

y 

n 

B 

X + 

= y; 

n 

B 

carry  + 

= Cx  < y); 

□ 

B 

BIGLITTLEC* — p r od , *p r od++ ) = (BNW0RD16)x 

r 

n 

B 

X = 

(x 

>>  16)  1 CBNW0RD32)carry  <<  16; 

n > 

D 

n /*Word2*Len-1*/ 

a BIGLITTLEC*— prod,*prod)  = (BNW0RD16)x; 

> 


p2-1  )); 


p2-1  )); 


/*  Suppress  Later  definition  */ 
#define  bniSquare_16  bniSquare_16 
#end  i f 


/* 

* Square  a number,  using  optimized  squaring  to  reduce  the  number  of 

* primitive  multiples  that  are  executed.  There  may  not  be  any 

* overlap  of  the  input  and  output. 

* 

* Technique:  Consider  the  partial  products  in  the  multiplication 

* of  "abcde"  by  itself: 

* 

* abcde 

* * a b c d e 

* ================== 
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★ 

* 

★ 

* 

* 


ae  be  ce  de  ee 
ad  bd  cd  dd  de 

ac  be  cc  cd  ce 

ab  bb  be  bd  be 

aa  ab  ac  ad  ae 


* Note  that 

★ 

* 


everything  above 
ae  be  ce  de  = 
ad  bd  cd  = 

be  = 


the  main  diagonal: 
(abed)  * e 
(abc)  * d 
(ab)  * c 


a b 


(a)  * b 


it 


★ 

i s a copy  of 

everything  below 

* 

d e 

* 

c d c e 

* 

b c 

bd  be 

* 

a b a c ad 

a e 

•k 

* 

Thus,  the  sum 

is  2 * (off  the 

•k 


the  main  diagonal: 


diagonal)  + diagonal. 


* This  is  accumulated  beginning  with  the  diagonal  (which 

* consist  of  the  squares  of  the  digits  of  the  input),  which  is  then 

* divided  by  two,  the  off-diagonal  added,  and  multiplied  by  two 

* again.  The  low  bit  is  simply  a copy  of  the  low  bit  of  the 

* input,  so  it  doesn't  need  special  care. 

* 


* TODO:  Merge  the  shift  by  1 with  the  squaring  loop. 

* TODO:  Use  Karatsuba.  (a*W  + b)*2  = a^2  * (W^2  + W)  + b^2  * (W  + 1)  - (a-b)''2  * W. 
*/ 


#ifndef  bniSquare_16 
void 

bni Squa re_1 6(BNW0RD1 6 *prod,  BNU0RD16 
{ 


n 

BNW0RD1 6 

t; 

n 

BNW0RD1 6 

*prodx  = prod;nn 

n 

BNW0RD1 6 

const  *numx  = num;n 

n 

unsigned 

lenx  = len;n  n 

n 

if  ( ! 1 e n ) 

n n return; 


const  *num,  unsigned  len) 

/*  Working  copy  of  the  argument  */ 
/*  Working  copy  of  the  argument  */ 
/*  Working  copy  of  the  argument  */ 


n /*  First,  store  all  the  squares  */ 

n while  (lenx — ) { 

#ifdef  mul16_ppmm 

n n BNW0RD16  ph,  pi; 

a n t = BIGLITTLE(*  — numx,*numx  + +); 

n n mul16_ppmm(ph,pl,t,t); 

n n BIGLITTLE(* — p r od x , *p r od x++ ) = 

n n BIGLITTLE(*--prodx,*prodx++)  = 

#elif  def ined(BNW0RD32)  /*  use  BNW0RD32  */ 

□ a BNW0RD32  p; 

n n t = BIGLITTLE(*--numx,*numx++); 

n n p = (BNW0RD32)t  * t; 

n n BIGLITTLE(*  — p r odx , *p r od x + + ) = 

n n BIGLITTLE(*  — p r od x , *p r odx  + + ) = 

#elsen  /*  Use  bniHulN1_16  */ 

n a t = B I G L I TT LE ( n umx C -1 3 , *n umx ) ; 

n n bniHulN1_16(prodx,  numx,  1,  t); 


pL; 

ph; 


(BNW0RD16)p; 
(BNW0RD1 6) (p>>1 6) ; 
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n n BIGLlTTLE(--numx,numx++); 

n n BIGLITTLE(prodx  -=  2,  prodx  +=  2); 

#endi f 

n > 

n /*  Then,  shift  right  1 bit  */ 

n (void)bniRshift_16(prod,  2*Len,  1); 


a 

n 

n 

n 

D 

D 

n 

a 

n 

Q 

n 


/*  Then,  add  in  the  off-diagonaL  sums  */ 

Lenx  = Len; 
numx  = num; 
prodx  = prod; 
while  (--Lenx)  { 

n t = B I G LI TT L E ( *--n umx , *n umx++ ) ; 

n BIGLITTLEC--prodx,prodx++); 

n t = bniMuLAdd1_16(prodx,  numx,  Lenx,  t); 

n bn i Add  1 _1 6 ( BI G LI TTLE ( p rodx- I enx, p r odx+ L enx  ) , Lenx  + 1,  t); 

n B I G LI TT L E C --p r odx , p r odx++ ) ; 

> 


n /*  Shift  it  back  up  */ 

n bn i D o u b L e_ 1 6 ( p r od , 2*Len); 


n /*  And  set  the  Low  bit  appropriately  */ 

a BIGLITTLE(prodC-1  ],prodC0])  |=  B I G LI TT LE ( n urn C -1 ] , n urn C 0 3 ) & 1 ; 

} 

#endif  /*  ! bn i Squa r e_1 6 */ 


/* 

* bniNorm_16  - given  a number,  return  a modified  Length  such  that  the 

* most  significant  digit  is  non-zero.  Zero-Length  input  is  okay. 

*/ 

#ifndef  bniNorm_16 
unsigned 

bn  i No rm_1 6 ( BNWORDI 6 const  *num,  unsigned  Len) 

{ 

a BI G L I TT LE ( n urn  -=  Len, num  +=  Len); 

n while  (Len  &S  B I G LI TT L E ( *num++ , *--n urn ) ==  0) 

a a — Len; 

n return  Len; 

} 

#endif  /*  bniNorm_16  */ 

/* 

* bniBits_16  - return  the  number  of  significant  bits  in  the  array. 

* It  starts  by  normalizing  the  array.  Zero-Length  input  is  okay. 

* Then  assuming  there's  anything  to  it,  it  fetches  the  high  word, 

* generates  a bit  Length  by  multiplying  the  word  Length  by  16,  and 

* subtracts  off  16/2,  16/4,  16/8,  ...  bits  if  the  high  bits  are  clear. 

*/ 

#ifndef  bniBits_16 
unsigned 

bn i Bi t s_1 6 ( BN WOR D1 6 const  *num,  unsigned  Len) 

{ 

□ BNW0RD16  t; 

n unsigned  i; 

n Len  = bniNorm_16(num,  Len); 

n if(Len){ 
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Et 

n 

t = BIGLITTLE( 

n 

□ 

pgpAssert(t); 

a 

□ 

Len  *=  16; 

n 

n 

i = 16/2; 

n 

D 

do  { 

n 

n 

n i f ( t 

n 

□ 

Q □ 

n 

n 

n else 

□ 

n 

a a 

n 

D 

> while  ((i  /= 

n 

> 

n 

return 

Len; 

»>  i ) 

t >>=  i; 

L en  -=  i , 
2 ) ! = 0 ) ; 


#endif  /*  bniBits  16  */ 


/* 

* If  defined,  use  hand-roLLed  divide  rather  than  compiler's  native. 

* If  the  machine  doesn't  do  it  in  Line,  the  manual  code  is  probably 

* faster,  since  it  can  assume  normalization  and  the  fact  that  the 

* quotient  will  fit  into  16  bits,  which  a general  32-bit  divide 

* in  a compiler's  run-time  Library  can't  do. 

*/ 


#ifndef  BN_ S LO W_ D I V I D E_32 

/*  Assume  that  divisors  of  more  than  thirty-two  bits  are  slow  */ 
//define  BN_S  LO  W_D  I V I D E_32  (32  > 0x20) 

//end  i f 


/* 

* Return  (nh<<16|nL)  Z d,  and  place  the  quotient  digit  into  *q . 

* It  is  guaranteed  that  nh  < d,  and  that  d is  normalized  (with  its  high 

* bit  set).  If  we  have  a double-width  type,  it's  easy.  If  not,  ooh, 

* yuk! 

*/ 

//ifndef  bniDiv21_16 

//if  def  i ned(BNW0RD32)  &S  ! BN_S  LO  W_  D I V I D E_32 
BNW0RD1 6 

bniDiv21_16(BNW0RD16  *q,  BNW0RD16  nh,  BNU0RD16  nl,  BNW0RD16  d) 

{ 


n 

BNW0RD32  n 

= (BNW0RD32)nh  << 

1 6 

n 

/*  Divisor 

must  be  normalized 

*/ 

n 

pgpAssert(d 

» (16-1)  ==  1); 

n 

*q  = n / d ; 

n 

return  n % 

d; 

//else 

/* 

* This  is  where  it  gets  ugly. 

★ 

* Do  the  division  in  two  halves,  using  Algorithm  D from  section  4.3.1 

* of  Knuth.  Note  Theorem  B from  that  section,  that  the  quotient  estimate 

* is  never  more  than  the  true  quotient,  and  is  never  more  than  two 

* too  Low. 

* 

* The  mapping  onto  conventional  Long  division  is  (everything  a half  word): 

* qh qL_ 

* dh  dl  ) nh.h  nh.L  nl.h  nl.L 
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* - (qh  * d) 

* 


rrrr  rrrr  nL.L 


* 

★ 

* 

* 

★ 

* 

* 

* 

* 

★ 

* 

* 

* 

★ 

* 

* 

* 

★ 

* 

* 


- (ql  * d) 


rrrr  rrrr 

The  -impLicit  3/2-digit  d*qh  and  d*qL  subtracters  are  computed  this  way: 
First,  estimate  a q digit  so  that  nh/dh  works.  Subtracting  qh*dh  from 
the  Cnh.h  nh.l)  list  Leaves  a 1/2-word  remainder  r.  Then  compute  the 

Low  part  of  the  subtracter,  qh  * dL.  This  also  needs  to  be  subtracted 

from  (nh.h  nh.L  nL.h)  to  get  the  final  remainder.  So  we  take  the 
remainder,  which  is  (nh.h  nh.L)  - qh*dl,  shift  it  and  add  in  nL.h,  and 
try  to  subtract  qh  * dL  from  that.  Since  the  remainder  is  1/2-word 
Long,  shifting  and  adding  nL.h  results  in  a single  word  r. 

It  is  possible  that  the  remainder  we're  working  with,  r,  is  Less  than 
the  product  qh  * dL,  if  we  estimated  qh  too  high.  The  estimation 
technique  can  produce  a qh  that  is  too  Large  (never  too  small).  Leading 
to  r which  is  too  small.  In  that  case,  decrement  the  digit  qh,  add 
shifted  dh  to  r (to  correct  for  that  error),  and  subtract  dL  from  the 

product  we're  comparing  r with.  That's  the  "correct"  way  to  do  it,  but 

just  adding  dL  to  r instead  of  subtracting  it  from  the  product  is 
equivalent  and  a Lot  simpler.  You  just  have  to  watch  out  for  overflow. 


★ 


* The  process  is  repeated  with  (rrrr  rrrr  nL.L)  for  the  Low  digit  of  the 

* quotient  qL. 

* 

* The  various  uses  of  16/2  for  shifts  are  because  of  the  note  about 

* automatic  editing  of  this  file  at  the  very  top  of  the  file. 

*/ 

#define  highhaLf(x)  ( (x)  >>  16/2  ) 

#define  lowhaLf(x)  ( (x)  & ( ( ( BN  WO R D 1 6 ) 1 « 16/2)-1)  ) 

BNW0RD1  6 

bni Di v21 _1 6(BNW0RD1 6 *q,  BNW0RD16  nh,  BNW0RD16  nL,  BNW0RD16  d) 

{ 

n BNU0RD16  dh  = highhaLf(d),  dL  = LowhaLf(d); 

a BNW0RD16  qh,  qL,  prod,  r; 


n /*  Divisor  must  be  normalized  */ 

n pgpAssert((d  >>  (16-1))  ==  1); 


n /*  Do  first  half-word  of  division  */ 


□ 

q h = n h 

/ dh; 

Q 

r = nh 

% dh; 

n 

prod  = 

qh  * dL 

/ 

Q 

/* 

□ 

* Add 

next  half-word  of  numerator  to  remainder  and  correct 

n 

* qh  may  be  up  to  two  too  Large. 

n 

*/ 

n 

r = ( r 

<<  (16/2))  1 highhaLf(nL); 

n 

if  ( r < 

prod) 

{ 

u 

B 

— qh; 

r + = d ; 

u 

B 

if  ( r 

>=  d SS  r < prod)  { 

Q 

B 

Q 

--qh;  r +=  d; 

n 

B 

} 

B 

> 

B 

r -=  prod; 
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n 

/*  Do  second  half-word 

of  division 

D 

ql  = r / dh; 

n 

r = r % d h ; 

n 

prod  = ql  * dl; 

n 

r = ( r <<  (16/2))  | LowhaLf(nL); 

n 

if  (r  < prod)  { 

□ 

n --ql;  r +=  d; 

n 

n i f ( r >=  d 88 

r < prod)  { 

Q 

n n — ql; 

r +=  d ; 

n 

n } 

D 

> 

□ 

r -=  prod; 

n 

*q  = (qh  <<  (16/2))  | 

q L ; 

n 

> 

# e n d i f 

return  r; 

#end i f 

/*  bniDiv21_16  */ 

/* 

* In 

the  division  functions. 

the  dividend 

and 


which  stand  for  "numerator' 


* The  quotient  is  ( n L en-d L en+1 ) digits  Long. 

* the  high  (nLen-dLen)  words  of  the  dividend, 

* on  top  to  hold  the  top  word. 

*/ 


divisor  are  referred  to 
and  "denominator". 

It  may  be  overlapped  with 
but  one  extra  word  is  needed 


/* 

* Divide  an  n-word  number  by  a 1-word  number,  storing  the  remainder 

* and  n-1  words  of  the  n-word  quotient.  The  high  word  is  returned. 

* It  IS  legal  for  rem  to  point  to  the  same  address  as  n,  and  for 

* q to  point  one  word  higher. 

* 

* TODO:  If  BN_S LOW_ D I V I D E_32 , add  a divnhaLf_16  which  uses  16-bit 

* dividends  if  the  divisor  is  half  that  Long. 

* TODO:  Shift  the  dividend  on  the  fly  to  avoid  the  last  division  and 

* instead  have  a remainder  that  needs  shifting. 

* TODO:  Use  reciprocals  rather  than  dividing. 

*/ 

Sifndef  bniDiv1_16 
BNW0RD1 6 

bn  i D i v1  _1  6 ( BNWOR D 1 6 *q,  BNW0RD16  *rem,  BNW0RD16  const  *n,  unsigned  Len, 
BNW0RD16  d) 

unsigned  shift; 
unsigned  xLen; 

BNW0RD16  r; 

BNW0RD16  qhigh; 

pg p As s e r t ( L e n > 0); 
pgpAssert(d); 

if  (Len  ==  1 ) { 
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a 

□ 

r = *n ; 

n 

tt 

* r e m = 

r % d 

n 

a 

return 

r / d 

n 

y 

n 

□ 

a 

u 

n 

a 

a 

□ 

a 

n 

Q 


shift  = 0 ; 
r = d; 

xLen  = 16/2; 
do  { 

n if  Cr>>xLen) 

n n r>>=xLen; 

n else 

n n shift+=xLen; 

> while  CCxLen  /=  2)  !=  0); 

pgpAssertCCd  >>  ( 1 6- 1 - s h i f t ) ) ==  1); 
d <<=  shift; 


a BIGLITTLECq  -=  Len-1,q  +=  Len-1); 

n BIGLITTLECn  -=  Len,n  +=  Len); 


Q 

r = BIGLITTLE(*n++,* — n); 

n 

if  ( r < 

d)  i 

□ 

n 

q h i g h = 0 ; 

n 

} else 

{ 

□ 

n 

qhigh  = r/d; 

n 

a 

r % = d ; 

n 

} 

n 

X 1 en  = 

Len; 

n 

while  ( 

— X Len) 

a 

n 

r = bn i D i v2 1 _ 1 6 C B I G L I TT LE ( q + + , — q),  r. 

a 

a 

n B BIGLITTLE(*n++,* — n),  d); 

a 

/* 

a 

* Final  correction  for  shift  - shift  the  quotient 

a 

* bits 

, and  merge  in  the  extra  bits  of  quotient. 

a 

* the 

final  remainder  mod  the  real  d. 

a 

*/ 

a 

if  ( s h i 

ft)  i 

a 

D 

d >>=  shift; 

a 

n 

qhigh  = (qhigh  « shift)  | bn i Ls h i f t _ 1 6 ( q , 

a 

□ 

BIGLITTLE(qC-1 :,*q)  |=  r/d; 

a 

D 

r %=  d; 

a 

} 

a 

* rem  = 

r; 

a 

return 

qhigh; 

> 


up  "shift" 
Then  reduce 


Len-1,  shift); 


# e n d i f 


/* 

* This  function  performs  a "quick"  modulus  of  a number  with  a divisor 

* d which  is  guaranteed  to  be  at  most  sixteen  bits,  i.e.  Less  than  65536. 

* This  applies  regardless  of  the  word  size  the  library  is  compiled  with. 

* 

* This  function  is  important  to  prime  generation,  for  sieving. 

*/ 

Sifndef  bniHoda_16 
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/*  If  there's  a custom  bn i Hod2 1 _1 6,  no  normalization  needed  */ 
#ifdef  bniHod21_16 
unsi gned 

bn i M odQ_ 1 6 ( BN  WO R D 1 6 const  *n,  unsigned  ten,  unsigned  d) 


Q 

unsi gned  i , shift; 

n 

BNW0RD16  r; 

n 

pgpAssert C Len  > 0); 

n 

BIGLITTLECn  -=  len,n 

+=  Len); 

n 

/*  Try  using  a compare  to  avoid  the  first  divide  */ 

n 

r = BIGLITTLEC*n++,* 

--n)  ; 

El 

if  Cr  >=  d) 

n 

n r %=  d; 

n 

while  C — Len) 

n 

n r=bniMod21 

_16Cr,  BIGLITTLEC*n++,* — n),  d); 

n 

return  r; 

> 

#eLif  def ined(BNW0RD32)  &S  ! BN_S LOW_ D I V I D E_3 2 
unsi gned 

b n i M odQ_ 1 6 ( BN WO R D 1 6 const  *n,  unsigned  Len,  unsigned  d) 

{ 

n BNW0RD16  r ; 

n if  (!  — Len) 

n n return  B I G LI TT L E ( n C -1 3 , n C 0 ] ) % d; 

n BIGLITTLECn  -=  Len,n  +=  Len); 

n r = BIGLITTLE(nC-1 D,nC0] ) ; 

n dot 

a a r = ( BN  WOR  D 1 6 ) ( ( ( ( BNWO  R D32  ) r<<1  6 ) | B I G LI  TT  L E ( *n  + + , * — n ) ) % d); 

n > while  ( — Len); 

n returnr; 

> 

#e  L i f 16  >=  0x20 
/* 

* If  the  single  word  size  can  hold  65535*65536,  then  this  function 

* is  avilabLe. 

*/ 

#ifndef  highhaLf 

^define  highhaLf(x)  ( (x)  >>  16/2  ) 

^define  LowhalfCx)  ( (x)  & ((1  « 16/2)-1)  ) 

#end i f 
unsigned 

bn i ModQ_ 1 6 ( BN WO R D 1 6 const  *n,  unsigned  Len,  unsigned  d) 

{ 

a BNW0RD16  r,  x; 


n BIGLITTLECn  -=  Len,n  +=  Len); 


□ 

D 

D 


r = BIGLITTLE(*n++,* — n); 
while  ( — Len)  { 

n X = BIGLITTLE(*n++,* — n); 
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n 

n r = (r%d  <<  16/2)  | highhalf(x); 

n 

n r = (r%d  <<  16/2)  | lowhalf(x); 

n 

> 

n 

return  r%d; 

> 

Seise 

/*  Default  case  - use  bniDiv21_16  */ 

unsigned 

b n i ModQ_ 

.16(BNW0RD16  const  *n,  unsigned 

len,  unsigned  d) 

{ 

s 

unsigned  i,  shift; 

n 

BNW0RD16  r; 

n 

BNW0RD16  q; 

n 

pgpAssertClen  > 0); 

□ 

shift  = 0; 

n 

r = d; 

n 

i = 16; 

n 

while  (i  /=  2)  { 

n 

a i f ( r >>  i ) 

Q 

B B r >>=  i ; 

n 

n else 

n 

n n shift  +=i; 

n 

> 

n 

pgpAssertCd  >>  (16-1-shift)  == 

1 ); 

n 

d <<=  shift; 

n 

BIGLITTLECn  -=  len,n  +=  len); 

n 

r = BIGLITTLE(*n++,* — n); 

n 

if  (r  >=  d) 

n 

n r %=  d ; 

n 

while  (--len) 

n 

n r = bn i D i v2 1 _1 6 ( &q , r. 

BIGLITTLE(*n++,* — n 

n 

/* 

n 

* Final  correction  for  shift  - 

shift  the  quotient 

a 

* bits,  and  merge  in  the  extra 

bits  of  quotient. 

n 

* the  final  remainder  mod  the 

real  d . 

n 

*/ 

n 

if  (shift) 

Q 

n r%=d>>  shift; 

B 

return  r; 

# end i f 

#endif  /*  bniModQ  16  */ 


/* 

* Reduce  n mod  d and  return  the  quotient.  That  is,  find: 

* q = n / d ; 

* n = n % d ; 

* d is  altered  during  the  execution  of  this  subroutine  by  normalizing  it. 

* It  must  already  have  its  most  significant  word  non-zero;  it  is  shifted 

* so  its  most  significant  bit  is  non-zero. 
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* 

* The  quotient  q is  nlen-dLen+l  words  long.  To  make  it  possible  to 

* overlap  the  quptient  with  the  input  (you  can  store  it  in  the  high  dlen 

* words),  the  high  word  of  the  quotient  is  *not*  stored,  but  is  returned. 

* (If  all  you  want  is  the  remainder,  you  don't  care  about  it,  anyway.) 

* 

* This  uses  algorithm  D from  Knuth  (4.3.1),  except  that  we  do  binary 

* (shift)  normalization  of  the  divisor.  WARNING:  This  is  hairy! 

* 

* This  function  is  used  for  some  modular  reduction,  but  it  is  not  used  in 

* the  modular  exponentiation  loops;  they  use  Montgomery  form  and  the 

* corresponding,  more  efficient,  Montgomery  reduction.  This  code 

* is  needed  for  the  conversion  to  Montgomery  form,  however,  so  it 

* has  to  be  here  and  it  might  as  well  be  reasonably  efficient. 

* 


* The  overall  operation  is  as  follows  ("top"  and  "up"  refer  to  the 

* most  significant  end  of  the  number;  "bottom"  and  "down",  the  least): 

* 


* 

* 

* 

* 

* 

* 

* 

* 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

A 

*/ 


- Shift  the  divisor  up  until  the  most  significant  bit  is  set. 

- Shift  the  dividend  up  the  same  amount.  This  will  produce  the 
correct  quotient,  and  the  remainder  can  be  recovered  by  shifting 

it  back  down  the  same  number  of  bits.  This  may  produce  an  overflow 
word,  but  the  word  is  always  strictly  less  than  the  most  significant 
divisor  word. 

- Estimate  the  first  quotient  digit  qhat: 

- First  take  the  top  two  words  (one  of  which  is  the  overflow)  of  the 
dividend  and  divide  by  the  top  word  of  the  divisor: 

qhat  = (nh,nm)/dh.  This  qhat  is  >=  the  correct  quotient  digit 
and,  since  dh  is  normalized,  it  is  at  most  two  over. 

- Second,  correct  by  comparing  the  top  three  words.  If 
(dh,dl)  * qhat  > (nh,nm,ml),  decrease  qhat  and  try  again. 

The  second  iteration  can  be  simpler  because  there  can't  be  a third. 
The  computation  can  be  simplified  by  subtracting  dh*qhat  from 
both  sides,  suitably  shifted.  This  reduces  the  left  side  to 
dl*qhat.  On  the  right,  (nh,nm)-dh*qhat  is  simply  the 
remainder  r from  (nh,nm)%dh,  so  the  right  is  (r,nl). 

This  produces  qhat  that  is  almost  always  correct  and  at 
most  (prob  “ 2/2*16)  one  too  high. 

- Subtract  qhat  times  the  divisor  (suitably  shifted)  from  the  dividend. 
If  there  is  a borrow,  qhat  was  wrong,  so  decrement  it 

and  add  the  divisor  back  in  (once). 

- Store  the  final  quotient  digit  qhat  in  the  quotient  array  q. 

Repeat  the  quotient  digit  computation  for  successive  digits  of  the 
quotient  until  the  whole  quotient  has  been  computed.  Then  shift  the 
divisor  and  the  remainder  down  to  correct  for  the  normalization. 

TODO:  Special  case  2-word  divisors. 

TODO:  Use  reciprocals  rather  than  dividing. 


#ifndef  divn_16 
BNU0RD1 6 

bn  i D i v_  1 6 ( BN WO R D 1 6 *q,  BNW0RD16  *n,  unsigned  nlen,  BNW0RD16  *d,  unsigned  dlen) 
{ 

n BNW0RD16  nh,nm,nl;n  /*  Top  three  words  of  the  dividend  */ 

n BNW0RD16  dh,dl;n/*  Top  two  words  of  the  divisor  */ 

n BNW0RD16  qhat;n  /*  Extimate  of  quotient  word  */ 

n BNW0RD16  r;n  /*  Remainder  from  quotient  estimate  division  */ 
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n BNW0RD16  qhigh;n/*  High  word  of  quotient  */ 

n unsigned  i;n  /*  Temp  */ 

n unsigned  shift;n/*  Bits  shifted  by  normalization  */ 

n unsigned  qlen  = nlen-dlen;  /*  Size  of  quotient  (Less  1)  */ 

#ifdef  muL16_ppmm 
a BNW0RD16  t16; 

#eLif  def ined(BNWORD32) 
n BNW0RD32  t32; 

#eLse  /*  use  bniMuLN1_16  */ 
n BNW0RD16  t2C2]; 

^define  t2high  B I G L I TT L E ( t 2 C 0 ] , t 2 [ 1 ] ) 

^define  t2Low  B I G L I TT LE ( t 2 C 1 ] , t 2 [ 0 ] ) 

# e n d i f 

n pgpAssertCdLen); 

n pg p A s s e r t ( n L e n >=  dlen); 


n 

/* 

n 

* 

Special  cases  for  short  divisors.  The  general  case  uses  the 

n 

* 

top 

top  2 digits  of  the  divisor  (d)  to  estimate  a 

quotient  digit 

n 

★ 

so 

it  breaks 

if  there  are  fewer  digits  available. 

Thus,  we  need 

n 

★ 

special  cases  for  a divisor  of  Length  1.  A divisor  of  Length 

n 

★ 

2 can  have  a 

*lot*  of  a dmi n i s t r i V i a overhead  removed  removed. 

n 

★ 

S 0 

it's  probably  worth  s p e c i a L - c a s i ng  that  case. 

too. 

n 

*/ 

n 

i f 

(dlen  ==  1) 

n 

B 

return 

b n i D i V 1 _ 1 6 ( q , B I G L I TT LE ( n- 1 , n ) , n,  nlen. 

n 

B 

BIGLITTLE(d:-i:,dC0])); 

#if  0 

n 

/* 

n 

★ 

a]  a)  a) 

This  is 

not  yet  written...  The  general  Loop 

will  do. 

n 

★ 

albeit  less 

efficiently 

n 

*/ 

B 

i f 

(dlen  ==  2) 

{ 

B 

B 

/* 

B 

B 

* d i V i 

sor  two  digits  Long; 

B 

B 

* use 

the  3/2  technique  from  Knuth,  but  we 

know 

B 

B 

* it's 

exact . 

B 

B 

*/ 

B 

B 

dh  = BIGLITTLE(dC-1 :,d:0: ) ; 

B 

B 

dl  = BIGLITTLE(dC-2:,dCi:); 

B 

B 

shift  = 

0; 

B 

B 

if  ( C s h 

& ((BNW0RD16)1  <<  16-1-shift))  ==  0) 

{ 

B 

B 

B 

do  { 

B 

B 

B 

a shi f t++; 

B 

B 

B 

> while  (dh  & ( BN WO R D 1 6 ) 1 << 1 6-1  - s h i f t ) ==  0); 

B 

B 

B 

dh  = dh  <<  shift  | dl  >>  (16-shift); 

B 

B 

B 

dl  <<=  shift; 

B 

B 

> 

B 

B 

for  ( s h 

ift  = 0;  (dh  S (BNW0RD16)1  <<  16-1-shift))  ==  0; 

B 

fl 

B 

B B B fl  B 

shi ft++) 

B 

B 

B 

f 

B 

B 

if  (shift)  { 
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c 


Q 

n 

} 

n 

n 

dh  = dh  << 

n 

n 

shift  = 0; 

n 

Q 

while  (dh 

n 

> 

# e n d i f 

Q 

dh  = BIGLITTLE(*(d 

n 

pgpAsse  rt ( dh ) ; 

□ 

/*  Normalize  the  d 

n 

shift  = 

0; 

n 

r = dh; 

n 

i = 16/2 

/ 

n 

do  ( 

n 

n 

if  ( r >>  i 

n 

n 

n r : 

n 

□ 

else 

n 

□ 

10 

□ 

n 

} while 

( ( i /=  2) 

dl  >>  (16-shift); 


□ 

n 

D 

n 

D 

n 


n h = 0 ; 
if  (shift)  { 

n bniLshift_16(d,  dlen,  shift); 

n dh  = BIGLITTLE (*(d-d Len) ,*(d  + ( d L en-1  ) ) ) ; 

n nh  = bn i Ls h i f t _ 1 6 ( n , nLen,  shift); 

> 


□ 


n 


/*  Assert  that  dh  is  now  normalized  */ 
pgpAssert(dh  >>  (16-1)); 

/*  Also  get  the  second-most  significant  word  of  the  divisor  */ 
dl  = BIGLITTLE(*(d-(dLen-1)),*(d+(dLen-2))); 


Q 

a 

n 

□ 

n 

n 

□ 


/* 

* Adjust  pointers:  n to  point  to  Least  significant  end  of  first 

* first  subtract,  and  q to  one  the  mo s t -s i g n i f i c a n t end  of  the 

* quot ient  array. 

*/ 


BIGLITTLE(n  -=  qLen,n  +=  qlen); 
BIGLITTLE(q  -=  qLen,q  +=  qlen); 


n /*  Fetch  the  most  significant  stored  word  of  the  dividend  */ 

n nm  = BI G LI TT LE ( * ( n-d L e n ) , * ( n + ( d I en-1  ) ) ) ; 


D 

n 

n 

n 

n 

n 

n 

a 

a 

□ 

a 

□ 

Q 


/* 

* Compute  the  first  digit  of  the  quotient,  based  on  the 

* first  two  words  of  the  dividend  (the  most  significant  of  which 

* is  the  overflow  word  h). 

*/ 

if  (nh)  { 

n pgpAssert(nh  < dh); 

a r = bn i D i v2 1 _1 6 ( &q h a t , nh,  nm,  dh); 

> else  if  (nm  >=  dh)  { 

n qhat=nm/dh; 

n r=nm%dh; 

> else  {n  /*  Quotient  is  zero  */ 

n qhigh=0; 
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goto  divLoop; 


n /*  Now  get  the  third  most  significant  word  of  the  dividend  */ 

n nL  = BIGLITTLE(*(n-(dLen-1 )),*(n+CdLen-2))); 


n 

u 

n 

tt 

#ifdef 

n 

n 

n 

n 

n 

□ 

n 

□ 

Q 

n 

n 

#eLif 

a 

□ 

o 

Q 

n 

n 

a 

n 

□ 

n 

#e  L se 
□ 


* Correct  qhat,  the  estimate  of  quotient  digit. 

* qhat  can  only  be  high,  and  at  most  two  words  high, 

* so  the  Loop  can  be  unrolled  and  abbreviated. 

*/ 

mu  L 1 6_ppmm 

mu  1 1 6_ppmm ( nm,  t16,  qhat,  dl); 

if  (nm  > r ||  Cnm  ==  r &&  t16  > nl))  t 


/*  Decrement  qhat  and  adjust  comparison  parameters  */ 
qhat--; 

if  ((r  +=  dh)  >=  dh)  { 
n nm-=(t16<dL); 


t16  - = 
if  ( nm 

Q 


dl; 

> r I I 
q h a t -■ 


(nm  ==  r SS  t16  > nL)) 


defined(BNW0RD32) 

t32  = CBNU0RD32)qhat  * dL; 
if  (t32  > ((BNW0RD32)r  <<  16)  + 

□ 

□ 

Q 

n 
n 
n 
□ 

> 

/*  Use  bniHuLN1_16  */ 

bniHuLN1_16(BIGLITTLECt2+2,t2),  SdL,  1,  qhat); 

if  (t2high  > r ||  (t2high  ==  r &&  t2Lou  > nL))  { 

n /*  Decrement  qhat  and  adjust  comparison  parameters  */ 


n L ) { 

/*  Decrement  qhat  and  adjust  comparison  parameters  */ 
q h a t - - ; 

if  ((r  +=  dh)  > dh)  ( 
n t32-=dL; 

n if  (t32  > (CBNW0RD32)r  <<  16)  + nL) 

n n qhat--; 

> 


□ 

tt 

q h a t - - ; 

n 

a 

if  C ( r 

+=  dh)  >=  dh)  < 

n 

tt 

n 

t2high  -=  (t2low  < dl); 

n 

a 

□ 

t2low  -=  dl; 

o 

tt 

n 

if  Ct2high  > r 

II  (t2high 

n 

tt 

a 

n qhat — 

£t 

tt 

y 

n 

> 

#endi  f 

n 

/* 

Do 

the  multiply  and  subtract  */ 

Q 

r = 

bniHuLSub1_ 

16Cn,  d,  dlen. 

qhat); 

tt 

/* 

If 

there  was 

a borrow,  add 

back  once. 

tt 

i f 

( r 

n 

c 

A 

/*  Borrow?  */ 

tt 

tt 

( VO i d ) b n i Ad d N_1 6 ( n , d. 

d 1 e n ) ; 

tt 

tt 

qhat  — ; 

tt 

> 

tt 

/* 

Remember  the 

first  quotient 

digit.  * / 

tt 

qhi  gh 

= qhat  ; 
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n /*  Now,  the  main  division  loop:  */ 

d i V L oop : 

n whileCql  en — ) { 


/*  Advance  n */ 

nh  = BIGLITTLEC *( n-d Len) ,*(n+(d Len-1 ) ) ) ; 
BIGLITTLE(++n, — n ) ; 

nm  = BIGLITTLE(*{n-dLen),*(n+(dlen-1 ))); 


n 

B 

i f 

( n h 

==  dh)  { 

n 

B 

B 

qhat  = ■(BNWORD16)0; 

□ 

B 

B 

/*  Optimized  computation  of  r = (nh,nm) 

Q 

B 

B 

r = nh  + nm; 

n 

B 

B 

if  ( r < nh ) 

n 

B 

B 

n goto  subtract; 

n 

B 

> 

else 

{ 

n 

B 

B 

pgpAssertCnh  < dh); 

n 

B 

B 

r = bn i D i v2 1 _1 6 ( 8qha t , nh,  nm,  dh); 

a 

B 

> 

n 

B 

n L 

= BIGLITTLE(*(n-(dlen-1)),*(n+(dlen-2))); 

#i f def 

mu  L 1 6_ 

ppmm 

n 

B 

mu  1 1 6_ 

ppmmCnm,  t16,  qhat,  dl); 

B 

B 

■i  f 

( nm 

> r II  (nm  ==  r 88  t16  > nl))  { 

B 

B 

B 

/*  Decrement  qhat  and  adjust  comparison 

B 

B 

B 

q h a t - - ; 

B 

B 

B 

if  ((r  +=  dh)  >=  dh)  { 

B 

B 

B 

n nm-=(t16<dl); 

B 

B 

B 

n t16-=dl; 

B 

B 

B 

n if  (nm  > r | | (nm  ==  r 88  t16  > 

B 

B 

B 

n n qhat--; 

B 

B 

B 

} 

B 

B 

> 

- qhat  * dh  */ 


nD) 


#eLi  f 

n 

□ 

□ 

□ 

n 

n 

n 

n 

Q 

n 

//else 

a 


defined(BNU0RD32) 
□ 


t32  = (BNW0RD32)qhat  * d I ; 
if  (t32  > ( (BNW0RD32 ) r<<1 6)  + 


nl)  { 


/*  Decrement  qhat  and  adjust  comparison  parameters  */ 
q h a t - - ; 

if  (Cr  +=  dh)  >=  dh)  { 
n t32  -=  dl; 

n if  (t32  > ((BNW0RD32)r  <<  16)  + nl) 

a n qhat--; 

> 


/*  Use  bniMulNI  16  */ 


bniHulN1_16(BIGLITTLE(t2+2,t2),  8dl,  1,  qhat); 

if  (t2high  > r ||  (t2high  ==  r &&  t2lou  > nl))  { 

n /*  Decrement  qhat  and  adjust  comparison  parameters  */ 


B 

B 

B 

q h a t - - ; 

B 

B 

B 

if  C C r 

+=  dh)  >=  dh)  { 

B 

B 

B 

B 

t2high  -=  (t2low  < dl); 

B 

B 

B 

B 

t2low  -=  dl; 

B 

B 

B 

B 

if  (t2high  > r ||  (t2high 

B 

B 

B 

B 

n qhat--; 

B 

B 

B 

> 

B 

B 

> 

==  r 88  t2low  > nl)) 


// en d i f 
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n 

n 

/* 

n 

□ 

* 

As  a point  of  interest,  note  that  it  is  not 

worth 

checki ng 

□ 

n 

★ 

for  qhat  of  0 or  1 and  installing  special 

-case 

code.  These 

□ 

n 

* 

occur  with  probability  2*-16,  so  spending 

1 

eye 

L e 

to  check 

n 

n 

* 

for  them  is  only  worth  it  if  we  save  more 

than 

2^ 

15  cycles. 

n 

□ 

* 

and  a mu  1 1 i p 1 y-a nd- s u b t r a c t for  numbers  i 

n 

the 

1 024-b i t 

n 

n 

* 

range  just  doesn't  take  that  long. 

n 

n 

*/ 

s u b t r a 

c t : 

Q 

n 

/* 

n 

n 

* 

n points  to  the  least  significant  end  of 

the  substring 

n 

Q 

* 

of  n to  be  subtracted  from.  qhat  is  either 

exact 

0 r 

□ 

n 

* 

one  too  large.  If  the  subtract  gets  a borrow. 

i t 

was 

13 

n 

★ 

one  too  large  and  the  divisor  is  added  back 

i n . 

It's 

n 

13 

* 

a dlen+1  word  add  which  is  guaranteed  to 

produce 

a 

n 

n 

★ 

carry  out,  so  it  can  be  done  very  simply. 

□ 

n 

*/ 

13 

n 

r = 

bn i Mu  1 Subi _1 6 ( n,  d,  dlen,  qhat); 

□ 

n 

i f 

(r  > nh)  (b  /*  Borrow?  */ 

13 

n 

n 

( VO i d ) b n i Add N_1 6 ( n , d,  dlen); 

n 

a 

□ 

qhat--; 

a 

s 

> 

n 

n 

/* 

Store  the  quotient  digit  */ 

n 

s 

BIGLITTLE(*q++,* — q)  = qhat; 

n 

> 

n 

/* 

Ta  h 

d a h ! 

*/ 

n 

i f 

(shift) 

n 

n 

bn i R s h i f t _1 6 ( d , dlen,  shift); 

□ 

□ 

bniRshift_16(n,  dlen,  shift); 

n 

> 

□ 

return 

q h i g h ; 

#end  1 f 

/* 

* Find  the  negative  multiplicative  inverse  of  x (x  must  be  odd!)  modulo  2''16. 

★ 

* This  just  performs  Newton's  iteration  until  it  gets  the 

* inverse.  The  initial  estimate  is  always  correct  to  3 bits,  and 

* sometimes  4.  The  number  of  valid  bits  doubles  each  iteration. 

* (To  prove  it,  assume  x * y ==  1 (mod  2''n),  and  introduce  a variable 

* for  the  error  mod  2*2n.  x * y ==  1 + k*2*n  (mod  2*2n)  and  follow 

* the  iteration  through.) 

*/ 

Sifndef  bn i Mon t I n v 1 _1 6 
BNW0RD1 6 

bni  Mon 1 1 n v1 _1 6 ( BNWOR D 1 6 const  x) 

{ 

BNU0RD16  y = x,  z; 

n pgpAssert(x  S 1); 

while  ((z  = x*y)  !=  1) 
y *=  2 - z; 
return  -y; 
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#if  def ined(BNW0RD32)  SS  PRODUCT_SCAN 
/* 

* Test  code  for  p rod u c t - s c a n n i ng  Montgomery  reduction. 

* This  seems  to  slow  the  C code  down  rather  than  speed  it  up. 

* 


* The  first  Loop  computes  the  Montgomery  multipliers,  storing  them  over 

* the  Low  half  of  the  number  n. 

* 

* The  second  half  multiplies  the  upper  half,  adding  in  the  modulus 

* times  the  Montgomery  multipliers.  The  results  of  this  multiply 

* are  stored. 

*/ 


void 


bni MontReduce_1 6(BNW0RD1 6 *n,  BNW0RD16  const  *mod,  unsigned  mien,  BNW0RD16  inv) 
{ 


n 

n 

Q 

n 

a 

n 


BNW0RD32 
BNW0RD1 6 
BNW0RD1 6 
BNW0RD1 6 
unsigned 
unsigned 


X,  y; 

const  *pm; 

*pn; 

t; 

carry; 
i r j ; 


n /*  Special  case  of  zero  */ 

n i f ( ! m I en ) 

n n return; 


n /*  Pass  1 - compute  Montgomery  multipliers  */ 

n /*  First  iteration  can  have  certain  simplifications.  */ 

a t = BIGLITTLECnC-i:,n:0:); 

n X = t ; 

n t*=inv; 

n BIGLITTLE(nC-1 :,  nCOD)  = t; 

n X +=  (BNW0RD32)t  * B I G LI TT L E ( mod C - 1 3 , mod C 0 3 ) ; /*  Can't  overflow  */ 

n pg p A s s e r t ( ( BNUOR D 1 6 ) X ==  0); 

n x=x>>16; 


n 

a 

o 

D 

n 

□ 

Q 

n 

n 

n 

□ 

a 

n 

□ 

a 

Q 

n 

n 

n 


for  (i  = 1;  i < mien;  i++)  { 
n carry=0; 

n p n = n ; 

n pm  = BI G LI TT LE C mod- i -1 , mod+ i + 1 ) ; 

n for(j=0;j<i;j++){ 

n n y = ( B N W 0 R D 3 2 ) B I G L I T T L E ( * — pn  * *pm++,  *pn++  * * — pm); 

n a X +=  y; 

n B carry  +=  (x  < y); 

n > 

n pg p As s e r t ( BI G LI TT L E ( p n ==  n-i,  pn  ==  n+i)); 

n y = t = BIGLITTLE(pnC-1 3,  pnC03); 

a X +=  y; 

B carry+=(x<y); 

n BIGLITTLE(pnC-1 3,  pnC03)  = t = inv  * (BNW0RD16)x; 

a pgpAssertCBIGLITTLECpm  ==  mod-1,  pm  ==  mod+1)); 

n y = (BNWORD32)t  * B I G LI TT LE ( pm C 0 3 , pm C- 1 3 ) ; 

B X +=  y; 

n carry+=(x<y); 

n pg p A s s e r t ( ( BN WO R 0 1 6 ) X ==  0); 
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n n x=x>>16|(BNW0RD32)carry<<16; 

n } 


n BIGLITTLECn  -=  mien,  n +=  inLen); 


n 

n 

n 

n 

a 

a 

a 

a 

n 

□ 

n 

□ 

n 

D 

n 

□ 

n 

n 


/*  Pass  2 - compute  upper  words  and  add  to  n */ 
for  (i  = 1;  i < mien;  i++)  { 
n carry=0; 

n pm  = B I G LI TT LE ( mod- i , mod+ i ) ; 

n p n = n ; 

n for(j=i;j<mLen;j++){ 

n n y = ( B N W 0 R D 3 2 ) B I G L I T T L E ( * — pm  * *pn++,  *pm++  * * — pn); 

n n X + = y ; 

n n carry  +=  (x  < y); 

n > 

n pg p A s s e r t C B I G L I TT L E ( pm  ==  mod-mLen,  pm  ==  mod+mlen)); 

n pg p As s e r t ( BI G LI TT LE ( pn  ==  n+mLen-i,  pn  ==  n-mlen+i)); 

n y = t = BIGLITTLE(*(n-i ),*(n  + i-1  ) ); 

n X +=  y; 

n carry+=(x<y); 

n BIGLITTLE (*( n-i ) ,*Cn+i -1 ) ) = ( BNW0RD1 6 ) x; 

n X = (x  >>  16)  I ( BN  WO R D 3 2 ) c a r r y <<  16; 

> 


n /*  Last  round  of  second  half,  simplified.  */ 

n t = BIGLITTLE(*( n-mlen) ,*( n+mlen-l ) ) ; 

n X +=  t ; 

n BIGLITTLE(*(n-mLen),*Cn  + mLen-1 ) ) = ( BN  WO R D 1 6 ) x ; 

n carry  = (unsigned)(x  >>  16); 


n while  (carry) 

n n carry  -=  bniSubN_16(n,  mod,  mien); 

n while  ( bn i Cmp_1 6 ( n , mod,  mien)  >=  0) 

n n (void)bniSubN_16(n,  mod,  mien); 

} 

#define  bn i Mon t Re d u c e_1 6 bn i Mo n t R ed u c e_ 1 6 
# e nd i f 


/* 

* Montgomery  reduce  n,  modulo  mod.  This  reduces  modulo  mod  and  divides  by 

* 2'' ( 1 6*m  I en ) . Returns  the  result  in  the  *top*  mien  words  of  the  argument  n. 

* This  is  ready  for  another  multiplication  using  bniMul_16. 

* 

* Montgomery  representation  is  a very  useful  way  to  encode  numbers  when 

* you're  doing  lots  of  modular  reduction.  What  you  do  is  pick  a multiplier 

* R which  is  relatively  prime  to  the  modulus  and  very  easy  to  divide  by. 

* Since  the  modulus  is  odd,  R is  closen  as  a power  of  2,  so  the  division 

* is  a shift.  In  fact,  it's  a shift  of  an  integral  number  of  words, 

* so  the  shift  can  be  implicit  - just  drop  the  low-order  words. 

•k 

* Now,  choose  R *larger*  than  the  modulus  m,  2^(16*mlen).  Then  convert 

* all  numbers  a,  b,  etc.  to  Montgomery  form  M(a),  M(b),  etc  using  the 

* relationship  M(a)  = a*R  mod  m,  M(b)  = b*R  mod  m,  etc.  Note  that: 

* - The  Montgomery  form  of  a number  depends  on  the  modulus  m. 

* A fixed  modulus  m is  assumed  throughout  this  discussion. 

* - Since  R is  relaitvely  prime  to  m,  multiplication  by  R is  invertible; 

* no  information  about  the  numbers  is  lost,  they're  just  scrambled. 

* - Adding  (and  subtracting)  numbers  in  this  form  works  just  as  usual. 

C[CHK:35533ba1ce54cf2c36a5c411899a0033707faa112387f437c4421daf0daace315:: 


94 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


bnil  6.C 


★ 

* 

* 

•k 

* 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

*/ 


M(a+b)  = (a+b)*R  mod  m = (a*R  + b*R)  mod  m = (M(a)  + M(b))  mod  m 
- Multiplying  numbers  in  this  form  produces  a*b*R*R.  The  problem 
is  to  divide  out  the  excess  factor  of  R,  modulo  m as  well  as  to 
reduce  to  the  given  length  mien.  It  turns  out  that  this  can  be 
done  *faster*  than  a normal  divide,  which  is  where  the  speedup 
in  Montgomery  division  comes  from. 

Normal  reduction  chooses  a mo s t - s i g n i f i c a n t quotient  digit  q and  then 
subtracts  q*m  from  the  number  to  be  reduced.  Choosing  q is  tricky 
and  involved  (just  look  at  bniDiv_16  to  see!)  and  is  usually 
imperfect,  requiring  a check  for  correction  after  the  subtraction. 

Montgomery  reduction  *adds*  a multiple  of  m to  the  *low-order*  part 
of  the  number  to  be  reduced.  This  multiple  is  chosen  to  make  the 
low-order  part  of  the  number  come  out  to  zero.  This  can  be  done 
with  no  trickery  or  error  using  a precomputed  inverse  of  the  modulus. 
In  this  code,  the  "part"  is  one  word,  but  any  width  can  be  used. 

Repeating  this  step  sufficiently  often  results  in  a value  which 
is  a multiple  of  R (a  power  of  two,  remember)  but  is  still  (since 
the  additions  were  to  the  low-order  part  and  thus  did  not  increase 
the  value  of  the  number  being  reduced  very  much)  still  not  much 
larger  than  m*R.  Then  implicitly  divide  by  R and  subtract  off 
m until  the  result  is  in  the  correct  range. 

Since  the  low-order  part  being  cancelled  is  less  than  R,  the 
multiple  of  m added  must  have  a multiplier  which  is  at  most  R-1 . 
Assuming  that  the  input  is  at  most  m*R-1,  the  final  number  is 
at  most  m*(2*R-1)-1  = 2*m*R  - m - 1,  so  subtracting  m once  from 
the  high-order  part,  equivalent  to  subtracting  m*R  from  the 
while  number,  produces  a result  which  is  at  most  m*R  - m - 1, 
which  divided  by  R is  at  most  m-1 . 

To  convert  *to*  Montgomery  form,  you  need  a regular  remainder 
routine,  although  you  can  just  compute  R*R  (mod  m)  and  do  the 
conversion  using  Montgomery  multiplication.  To  convert  *from* 
Montgomery  form,  just  Montgomery  reduce  the  number  to 
remove  the  extra  factor  of  R. 

TODO:  Change  to  a full  inverse  and  use  Karatsuba's  multiplication 
rather  than  this  wo r d-a t-a- t i me . 


#ifndef  bn i Mon t Red u c e_1 6 
void 

bn i Mo n t Re d u c e_1 6 ( BN  WO RD 1 6 *n,  BNW0RD16  const  *mod,  unsigned  const  mien, 
BNW0RD16  inv) 

{ 

n BNU0RD16  t; 

a BNW0RD16  c = 0; 

n unsigned  len  = mien; 


n /*  inv  must  be  the  negative  inverse  of  mod's  least  significant  word  */ 

n pg p As s e r t ( ( BN WO R D 1 6 ) ( i n V * B I G LI TT LE ( mod C -1 D , mod C 0 ] ) ) ==  ( BNW0RD1 6 ) -1 ) ; 


n 


n 

□ 


pgpAssert(len); 
do  { 

n t = b n i Mu  I Add  1 _ 1 6 ( n , mod,  mien,  inv  * B I G L I TT L E ( n C -1 D , n C 0 D ) ) ; 
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n 

n 

c +=  bniAddI 

_1 6(BIGLITTLE(n-mlen 

,n+mlen),  len,  t) 

r 

n 

a 

BIGLITTLE ( — 

n , + + n ) ; 

n 

> 

while  (--len); 

a 

/* 

u 

* 

All  that  adding  can  cause  an  overflow 

past 

the  modulus 

size. 

u 

•k 

but  it's  unusual. 

and  never  by  much. 

so  a 

subtracti on 

loop 

a 

★ 

is  the  right  way 

to  deal  with  it. 

n 

* 

This  subtraction 

happens  infrequently 

- I ' 

ve  only  ever 

seen  it 

n 

•k 

invoked  once  per 

reduction,  and  then 

just 

under  22.5% 

of  the  time 

n 

★ 

/ 

n 

while  (c) 

□ 

u 

c -=  bniSubN 

_16(n,  mod,  mien); 

n 

while  ( bn i Cmp_1 6 ( n. 

mod,  mien)  >=  0) 

Q 

\ 

a 

( VO i d ) bn i S u b N_ 1 6 ( n , mod,  mien); 

j 

Uendi  i 

/* 

!bniHontReduce_16 

*/ 

/* 

* A couple  of  helpers  that  you  might  want  to  implement  atomically 

* in  asm  sometime. 

*/ 

#ifndef  b n i Hon t Mu  I _ 1 6 
/* 

* Multiply  "numi"  by  "num2",  modulo  "mod",  all  of  length  "len",  and 

* place  the  result  in  the  high  half  of  "prod".  "inv"  is  the  inverse 

* of  the  I ea s t -s i g n i f i c a n t word  of  the  modulus,  modulo  2^16. 

* This  uses  numbers  in  Montgomery  form.  Reduce  using  "len"  and  "inv". 

* 

* This  is  implemented  as  a macro  to  win  on  compilers  that  don't  do 

* inlining,  since  it's  so  trivial. 

*/ 

^define  bn i Mon t Hu  I _1 6 C p r od , n1,  n2,  mod,  len,  inv)  \ 

n ( bn i Hu  I X_1 6 ( p r od , n1,  n2,  len),  bn i Mon t Re d u c e_ 1 6 ( p r od , mod,  len,  inv)) 

#endif  /*  ! bn i Mon t M u I _ 1 6 */ 

#ifndef  bn i Hon t S q ua r e _ 1 6 
/* 

* Square  "num",  modulo  "mod",  both  of  length  "len",  and  place  the  result 

* in  the  high  half  of  "prod".  "inv"  is  the  inverse  of  the  least-significant 

* word  of  the  modulus,  modulo  2*16. 

* This  uses  numbers  in  Montgomery  form.  Reduce  using  "len"  and  "inv". 

* 

* This  is  implemented  as  a macro  to  win  on  compilers  that  don't  do 

* inlining,  since  it's  so  trivial. 

*/ 

#define  b n i Mon t S q ua r e_ 1 6 ( p r od , n,  mod,  len,  inv)  \ 

n ( bn i Squa r e_1 6 ( p rod,  n,  len),  bn i Ho n t R ed u c e_ 1 6 ( p r od , mod,  len,  inv)) 

D 

#endif  /*  ! bn i Mo n t S q u a r e_ 1 6 */ 

/* 

* Convert  a number  to  Montgomery  form  - requires  mien  + nlen  words 

* of  memory  in  "n". 

*/ 

void 

bn i ToHon t _1 6 ( BNWOR D1  6 *n,  unsigned  nlen,  BNW0RD16  *mod,  unsigned  mien) 

{ 
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n /*  Hove  n up  "mien"  words  */ 

n bniCopy_16(BIGLITTLE(n-mlen,n  + iiilen),  n , nlen); 

n bn i Ze ro_1 6 ( n , mien); 

n /*  Do  the  division  - dump  the  quotient  in  the  high-order  words  */ 

n ( VO i d ) bn i D i v_ 1 6 ( B I G L I TT L E ( n-m L e n , n+m L e n ) , n,  mlen+nLen,  mod,  mien); 

> 


/* 

* Convert  from  Montgomery  form.  Montgomery  reduction  is  aLL  that  is 

* needed . 

*/ 

void 

bn i F romMon t _1 6 ( BN W0RD1 6 *n,  BNW0RD16  *mod,  unsigned  Len) 

{ 

n /*  Zero  the  high  words  of  n */ 

n bniZero_16(BIGLITTLE{n-Len,n+Len),  Len); 

n bn i Mon t R e d u c e_ 1 6 ( n , mod,  Len,  bn i Mon 1 1 n v 1 _1 6 ( mod C B I G LI TT LE ( - 1 , 0 ) D ) ) ; 

n /*  Move  n down  Len  words  */ 

n bn i Copy_1 6 ( n , B I G LI TT LE ( n- L e n , n+ L e n ) , Len); 

} 


/* 

* The  windowed  exponentiation  aLgorithm,  precomputes  a tabLe  of  odd 

* powers  of  n up  to  2*k.  See  the  comment  in  bnExpMod_16  beLow  for 

* an  expLanation  of  how  it  actuaLLy  works  works. 

* 

* It  takes  2*(k-1)-1  muLtipLies  to  compute  the  tabLe,  and  Ce-1)/(k+1) 

* muLtipLies  (on  average)  to  perform  the  exponentiation.  To  minimize 

* the  sum,  k must  vary  with  e.  The  optimaL  window  sizes  vary  with  the 

* exponent  Length.  Here  are  some  seLected  vaLues  and  the  boundary  cases. 

* (An  underscore  _ has  been  inserted  into  some  of  the  numbers  to  ensure 

* that  magic  strings  Like  16  do  not  appear  in  this  tabLe.  It  shouLd  be 

* ignored.) 

•k 


* 

At 

e 

= 

1 

bits. 

k = 1 

(0.000000) 

i s 

best 

★ 

At 

e 

= 

2 

bits. 

k = 1 

(0 . 500000) 

i s 

best 

★ 

At 

e 

= 

4 

bits. 

k = 1 

(1  . 500000) 

i s 

best 

* 

At 

e 

= 

8 

bits. 

CNJ 

II 

(3.333333) 

< 

k = 1 

(3.500000) 

★ 

At 

e 

= 

1_6 

bits. 

(NJ 

II 

(6 . 000000) 

i s 

best 

* 

At 

e 

= 

26 

bits. 

II 

(9.250000) 

< 

k = 2 

(9.333333) 

★ 

At 

e 

= 

3_2 

bits. 

II 

(10 .750000) 

i s 

best 

★ 

At 

e 

= 

6_4 

bits. 

k = 3 

(18.750000) 

i s 

best 

★ 

At 

e 

= 

82 

bits. 

II 

(23 . 200000) 

< 

k = 3 

(23.250000) 

* 

At 

e 

= 

128 

bits. 

k = 4 

(3_2 . 400000) 

i s 

best 

★ 

At 

e 

= 

242 

bits. 

k = 5 

(55.1_66667) 

< 

II 

(55.200000) 

★ 

At 

e 

= 

256 

bits. 

in 

11 

(57.500000) 

i s 

best 

★ 

At 

e 

= 

512 

bits. 

k = 5 

(100.1.66667) 

is  best 

★ 

At 

e 

= 

674 

bits. 

II 

(127.142857) 

< 

k=5  (127.1.66667) 

* 

At 

e 

= 

1 024 

bits. 

k = 6 

(177.142857) 

i s 

best 

★ 

At 

e 

= 

1794 

bits. 

II 

(287.125000) 

< 

k=6  (287.142857) 

* 

At 

e 

= 

2048 

bits. 

II 

(318. 875000) 

i s 

best 

★ 

At 

e 

= 

4096 

bits. 

II 

(574.875000) 

i s 

best 

* 

* The  numbers  in  parentheses  are  the  expected  number  of  mu L t i p L i c a t i on s 

* needed  to  do  the  computation.  The  normaL  r u s s i a n-p ea s a n t modular 

* exponentiation  technique  always  uses  (e-1)/2.  For  exponents  as 

* smaLL  as  192  bits  (beLow  the  range  of  current  factoring  aLgorithms), 

* haLf  of  the  muLtipLies  are  eLiminated,  45.2  as  opposed  to  the  naive 
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* 95.5.  Counting  the  191  squarings  as  3/4  a multiply  each  (squaring 

* proper  is  just  over  half  of  multiplying,  but  the  Montgomery 

* reduction  in  each  case  is  also  a multiply),  that's  143.25 

* multiplies,  for  totals  of  188.45  vs.  238.75  - a 21%  savings. 

* For  larger  exponents  (like  512  bits),  it's  483.92  vs.  639.25,  a 

* 24.3%  savings.  It  asymptotically  approaches  25%. 

* 

* Urn,  actually  there's  a slightly  more  accurate  way  to  count,  which 

* really  is  the  average  number  of  multiplies  required,  averaged 

* uniformly  over  all  2^(e-1)  e-bit  numbers,  from  2*(e-1)  to  (2''e)-1. 

* It's  based  on  the  recurrence  that  for  the  last  b bits,  b <=  k,  at 

* most  one  multiply  is  needed  (and  none  at  all  1/2^b  of  the  time), 

* while  when  b > k,  the  odds  are  1/2  each  way  that  the  bit  will  be 

* 0 (meaning  no  multiplies  to  reduce  it  to  the  b-1-bit  case)  and 

* 1/2  that  the  bit  will  be  1,  starting  a k-bit  window  and  requiring 

* 1 multiply  beyond  the  b-k-bit  case.  Since  the  most  significant 

* bit  is  always  1,  a k-bit  window  always  starts  there,  and  that 

* multiply  is  by  1,  so  it  isn't  a multiply  at  all.  Thus,  the 

* number  of  multiplies  is  simply  that  needed  for  the  last  e-k  bits. 

* This  recurrence  produces; 

* 


* 

At 

e 

= 

1 

bits. 

k = 1 

( 0 . 000000 ) 

is  best 

★ 

At 

e 

= 

2 

bits. 

k = 1 

(0.500000) 

is  best 

* 

At 

e 

= 

4 

bits. 

k = 1 

(1 . 500000) 

is  best 

★ 

At 

e 

= 

6 

bits. 

k = 2 

(2 . 437500) 

< k = 1 

(2.500000) 

★ 

At 

e 

= 

8 

bits. 

k = 2 

(3.109375) 

is  best 

* 

At 

e 

= 

1 _6 

bits. 

k = 2 

(5.777771) 

is  best 

★ 

At 

e 

= 

24 

bits. 

k = 3 

(8 . 437629) 

II 

V 

(8 . 444444) 

* 

At 

e 

= 

3_2 

bits. 

k = 3 

(10.437492) 

is  best 

★ 

At 

e 

= 

6_4 

bits. 

k = 3 

(18.437500) 

is  best 

* 

At 

e 

= 

81 

bits. 

II 

(22 . 6_40000) 

< k = 3 

(22 . 687500) 

* 

At 

e 

= 

128 

bits. 

k = 4 

(3_2 . 040000) 

is  best 

★ 

At 

e 

= 

241 

bits. 

k = 5 

(54.611111  ) 

A 

II 

(54.6_40000) 

★ 

At 

e 

= 

256 

bits. 

in 

II 

(57.111111) 

is  best 

it 

At 

e 

= 

512 

bits. 

k = 5 

(99.777778) 

is  best 

it 

At 

e 

= 

673 

bits. 

k = 6 

(126.591837) 

< k=5  (126.611111) 

★ 

At 

e 

= 

1 024 

bits. 

'O 

II 

(176.734694) 

is  best 

★ 

At 

e 

= 

1 793 

bits. 

k = 7 

(286.578125) 

< k=6  (286.591837) 

it 

At 

e 

= 

2048 

bits. 

k = 7 

(318.453125) 

is  best 

* 

if 

At 

e 

= 

4096 

bits. 

k = 7 

(574.453125) 

is  best 

* 

T h i 

s 

has  the 

rol  lover 

points  at  6, 

24,  81, 

241,  673  and  1793  instead 

★ 

0 f 

8, 

26,  82 

, 242, 

674 

, and  1794. 

Not  a very  big  difference. 

* (The  numbers  past  that  are  k=8  at  4609  and  k=9  at  11521, 

* vs.  one  more  in  each  case  for  the  approximation.) 

* 

* Given  that  exponents  for  which  k>7  are  useful  are  uncommon, 

* a fixed  size  table  for  k <=  7 i s used  for  simplicity. 

* 

* The  basic  number  of  squarings  needed  is  e-1 , although  a k-bit 

* window  (for  k > 1)  can  save,  on  average,  k-2  of  those,  too. 

* That  savings  currently  isn't  counted  here.  It  would  drive  the 

* crossover  points  slightly  lower. 

* (Actually,  this  win  is  also  reduced  in  the  DoubleExpMod  case, 

* meaning  we'd  have  to  split  the  tables.  Except  for  that,  the 

* multiplies  by  powers  of  the  two  bases  are  independent,  so 

* the  same  logic  applies  to  each  as  the  single  case.) 

* 
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* Table  entry  i is  the  Largest  number  of  bits  in  an  exponent  to 

* process  with  a window  size  of  i+1.  Entry  6 is  the  Largest 

* possible  unsigned  number,  so  the  window  will  never  be  more 

* than  7 bits,  requiring  2^6  = 0x40  slots. 

*/ 

^define  BN E X PHO D_M AX_ W I N DO Wn  7 

static  unsigned  const  bn  Ex pMod T h r e s hTa b L e C BN E XPMO D_M AX_W I N DO W T = { 
o 5,  23,  80,  240,  672,  1792,  (unsigned)-l 

/*n  7,  25,  81  , 241  , 673,  1 793,  ( uns i gned ) -1 n MP#  The  old  approximations  */ 

>; 


/* 

* Perform  modular  exponentiation,  as  fast  as  possible!  This  uses 

* Montgomery  reduction,  optimized  squaring,  and  windowed  exponentiation. 

* The  modulus  "mod"  MUST  be  odd! 

* 

* This  returns  0 on  success,  -1  on  out  of  memory. 

* 

* The  window  algorithm: 

* The  idea  is  to  keep  a running  product  of  b1  = n^ ( h i g h-o r d e r bits  of  exp), 

* and  then  keep  appending  exponent  bits  to  it.  The  following  patterns 


* 

apply  to  a 

3-bit  window 

(k  = 3) 

: 

•k 

To 

append 

0 

square 

* 

To 

append 

1 

square^ 

multiply 

by  n^l 

★ 

To 

append 

1 0 

s q u a r e y. 

multiply 

by  n * 1 , 

square 

* 

To 

append 

1 1 

square. 

square. 

multiply 

by  n^3 

★ 

To 

append 

100 

square. 

multiply 

by  nM, 

square. 

squa  re 

* 

To 

append 

101 

squa  re. 

squa  re. 

squa  re. 

multiply 

by 

n''5 

★ 

To 

append 

1 1 0 

squa  re. 

squa  re. 

multiply 

by  0*3, 

square 

* 

To 

append 

1 1 1 

squa  re. 

square. 

square. 

multiply 

by 

n*7 

* 

* Since  each  pattern  involves  only  one  multiply,  the  longer  the  pattern 

* the  better,  except  that  a 0 (no  multiplies)  can  be  appended  directly. 

* We  precompute  a table  of  odd  powers  of  n,  up  to  2^k,  and  can  then 

* multiply  k bits  of  exponent  at  a time.  Actually,  assuming  random 

* exponents,  there  is  on  average  one  zero  bit  between  needs  to 

* multiply  (1/2  of  the  time  there's  none,  1/4  of  the  time  there's  1, 

* 1/8  of  the  time,  there's  2,  1/16  of  the  time,  there's  3,  etc.),  so 

* you  have  to  do  one  multiply  per  k+1  bits  of  exponent. 

* 

* The  loop  walks  down  the  exponent,  squaring  the  result  buffer  as 

* it  goes.  There  is  a wbits+1  bit  lookahead  buffer,  buf,  that  is 

* filled  with  the  upcoming  exponent  bits.  (What  is  read  after  the 

* end  of  the  exponent  is  unimportant,  but  it  is  filled  with  zero  here.) 

* When  the  mo s t -s i g n i f i c a n t bit  of  this  buffer  becomes  set,  i.e. 

* (buf  8 tblmask)  !=  0,  we  have  to  decide  what  pattern  to  multiply 

* by,  and  when  to  do  it.  We  decide,  remember  to  do  it  in  future 

* after  a suitable  number  of  squarings  have  passed  (e.g.  a pattern 

* of  "100"  in  the  buffer  requires  that  we  multiply  by  n'^l  immediately; 

* a pattern  of  "110"  calls  for  multiplying  by  n^3  after  one  more 

* squaring),  clear  the  buffer,  and  continue. 

•k 

* When  we  start,  there  is  one  more  optimization:  the  result  buffer 

* is  impLcitly  one,  so  squaring  it  or  multiplying  by  it  can  be 

* optimized  away.  Further,  if  we  start  with  a pattern  like  "100" 

* in  the  Lookahead  window,  rather  than  placing  n into  the  buffer 

* and  then  starting  to  square  it,  we  have  already  computed  n*2 

* to  compute  the  odd-powers  table,  so  we  can  place  that  into 


[CCHK:d21c7adeadd223a1f13d77f1b927fb392c4abcef046e74ef7b9506d7cf7e6dbc0:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


99 


bnil  6.C 


* the  buffer  and  save  a squaring. 

* 

* This  means  that  if  you  have  a k-bit  window,  to  compute  n''z, 

* where  z is  the  high  k bits  of  the  exponent,  1/2  of  the  time 

* it  requires  no  squarings.  1/4  of  the  time,  it  requires  1 

* squaring,  ...  1/2''(k-1)  of  the  time,  it  reqires  k-2  squarings. 

* And  the  remaining  1/2''{k-1)  of  the  time,  the  top  k bits  are  a 

* 1 followed  by  k-1  0 bits,  so  it  again  only  requires  k-2 

* squarings,  not  k-1.  The  average  of  these  is  1.  Add  that 

* to  the  one  squaring  we  have  to  do  to  compute  the  table, 

* and  you'll  see  that  a k-bit  window  saves  k-2  squarings 

* as  well  as  reducing  the  multiplies.  (It  actually  doesn't 

* hurt  in  the  case  k = 1,  either.) 

* 


* n must  have  mien  words  allocated.  Although  fewer  may  be  in  use 

* when  n is  passed  in,  all  are  in  use  on  exit. 

*/ 

i n t 

bn i E X pMo d_ 1 6 ( BN WO R D 1 6 *result,  BNW0RD16  const  *n,  unsigned  nlen, 
a BNW0RD16  const  *e,  unsigned  elen,  BNW0RD16  *mod,  unsigned  mien) 

{ 

n BNW0RD16  *table:i  <<  ( BN E X PMO D_H AX_ W I N D 0 W- 1 ) D ; 


□ 

□ a 

n 

/* 

Table  of  odd  powers  of  n */ 

□ 

unsi gned 

e b i t s ; n n 

/* 

Exponent  bits  */ 

n 

unsi gned 

w b i t s ; n n 

/* 

Window  size  */ 

n 

unsigned 

t b 1 ma  s k 

/* 

Mask  of  exponentiation  window  */ 

n 

BNWORDI 6 

b i t po  s ; 

□ 

/* 

Mask  of  current  look-ahead  bit  */ 

n 

unsi gned 

buf  ; n 

n 

/* 

Buffer  of  exponent  bits  */ 

Q 

unsigned 

mu  1 1 pos 

/* 

Where  to  do  pending  multiply  */ 

n 

BNWORDI 6 

const  * 

m u L t ; n 

/* 

What  to  multiply  by  */ 

D 

unsigned 

i ;n 

n 

/* 

Loop  counter  */ 

□ 

i nt  i sone 

D 

/* 

Flag:  accum.  is  implicitly  one  */ 

a 

BNWORDI 6 

*a,  *b; 

n 

/* 

Working  bu f f e r s / a c c umu  1 a t o r s */ 

n 

BNWORDI 6 

*t;n 

n 

/* 

Pointer  into  the  working  buffers  */ 

n 

BNWORDI 6 

i n V ; n 

n 

/* 

mod''-1  modulo  2*16  */ 

n 

i nt  y;n  n 

n 

/* 

bnYield()  result  */ 

n pgpAssert (mien); 

n pg p A s s e r t ( n I e n <=  mien); 


n 

/* 

First,  a 

couple  of  trivial  cases.  */ 

n 

elen  = bn i No rm_ 1 6 ( e , elen); 

n 

i f 

( ! e 1 en  ) 

{ 

n 

n 

/* 

X * 0 ==  1 */ 

n 

n 

b n i Z e r o_ 1 6 ( r e s u 1 1 , mien); 

□ 

n 

BIGLITTLE(resultC-i:,result[0:)  = 1; 

Q 

□ 

return  0; 

Q 

> 

n 

ebits  = bn i B i t s _1 6 ( e , elen); 

u 

i f 

(ebits  = 

= 1 ) { 

n 

n 

/* 

X 

> 

II 

II 

X 

n 

n 

i f 

(n  !=  result) 

□ 

n 

D 

bn i Copy_1 6 ( re s u 1 t , n,  nlen); 

Q 

Q 

i f 

(mien  > nlen) 

Q 

n 

□ 

bniZero_16(BIGLITTLE(result-nlen,result+nlen), 

□ 

n 

□ 

m 1 en-n 1 en ) ; 

n 

a 

return  0; 

□ 

> 
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n /*  Okay,  now  move  the  exponent  pointer  to  the  mo s t - s i g n i f i c a n t word  */ 

n e = B I G LI TT LE ( e-e I e n , e+eLen-1); 

n /*  Look  up  appropriate  k-1  for  the  exponent  - tbLmask  = 1<<(k-1)  */ 

n wbits=0; 

n while  (ebits  > bn  Ex pHodT h r e s h Ta b I e C wb i t s 3 ) 

n n wbits++; 

n /*  Allocate  working  storage:  two  product  buffers  and  the  tables.  */ 

a BNIALLOCCa,  BNU0RD16,  2*mlen); 

n i f ( ! a ) 

n n return-1; 

n BNIALLOCCb,  BNW0RD16,  2*mlen); 

n i f ( ! b ) { 

n n BNIFREE(a,2*mlen); 

n n return-1; 

n > 

n /*  Convert  to  the  appropriate  table  size:  tblmask  = 1<<(k-1)  */ 

n tblmask  = 1u  <<  wbits; 

n /*  We  have  the  result  buffer  available,  so  use  it.  */ 

n tableC0]  = result; 


n 

n 

n 

n 

a 

n 

n 

a 

n 

n 

a 


/* 

* Okay,  we  now  have  a minimal-sized  table  - expand  it. 

* This  is  allowed  to  fail!  If  so,  scale  back  the  table  size 

* and  proceed. 

*/ 

for  (i  = 1;  i < tblmask;  i++)  { 
a BNIALLOCCt,  BNW0RD16,  mien); 

n if  (!t)n/*  Out  of  memory!  Quit  the  loop.  */ 

n n break; 

n tableCiD=t; 

> 


n /*  If  we  stopped,  with  i < tblmask,  shrink  the  tables  appropriately  */ 

n while  (tblmask  > i)  { 

n n wbits  — ; 

n n tblmask  >>=  1 ; 

n } 

n /*  Free  up  our  o ve r a 1 1 o c a t i on s */ 

n while  ( — i > tblmask) 

n n BNI F RE E ( t ab I e C i 3 , mien); 


n /*  Okay,  fill  in  the  table  */ 

n /*  Compute  the  necessary  modular  inverse  */ 

n inv  = bn  i Mon 1 1 n V 1 _1  6 ( mod C B I G LI TT LE ( -1 , 0 ) 3 ) ; n /*  LSW  of  modulus  */ 

n /*  Convert  n to  Montgomery  form  */ 

n /*  Move  n up  "mien"  words  into  a */ 

n t = BIGLITTLECa-mlen,  a+mlen); 

n bn i C opy _1 6 ( t , n,  nlen); 

n bn i Z e r o_1 6 ( a , mien); 

n /*  Do  the  division  - lose  the  quotient  into  the  high-order  words  */ 
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n ( VO i d ) b n i D i v_ 1 6 ( t , a,  mlen  + nLen,  mod,  mien); 

n /*  Copy  into  first  table  entry  */ 

n bniCopy_16(tabLeC0],  a,  mien); 


n /*  Square  a into  b */ 

n bn i Mont Squa r e_1 6 ( b,  a,  mod,  mien,  inv); 


n 

for  ( i 

Q 

n 

Q 

Q 

#if 

BNYIELD 

n 

n 

□ 

n 

#end 

i f 

/*  Use  high  half  of  b to  initialize  the  table  */ 
t = BIGLITTLECb-mlen,  b+mlen); 

1;  i < tblmask;  i++)  -C 

bniMontMul_16(a,  t,  tableCi-1],  mod,  mien,  inv); 
bniCopy_16(tableCiI],  BIGLITTLE(a-mlen,  a + mlen),  mien); 


if  (bnYield  &&  (y  = bnYieldC))  < 
n gotoyield; 


0) 


/*  We  might  use  b = n'^2  later...  */ 


n /*  Initialze  the  fetch  pointer  */ 

n bitpos  = (BNW0RD16)1  <<  ((ebits— 1)  & (16-1));n  /*  Initialize  mask  */ 

n /*  This  should  point  to  the  msbit  of  e */ 

n pg p A s s e r t ( ( * e & bitpos)  !=  0); 


n 

n 

Q 

n 

□ 

□ 

n 

n 

□ 

n 

n 

n 

□ 

n 

Q 

n 

a 

o 

a 

n 

n 

Q 

n 

n 

n 


/* 

* Pre-load  the  window.  Becuase  the  window  size  is 

* never  larger  than  the  exponent  size,  there  is  no  need  to 

* detect  running  off  the  end  of  e in  here. 

* 

* The  read-ahead  is  controlled  by  elen  and  the  bitpos  mask. 

* Note  that  this  is  *ahead*  of  ebits,  which  tracks  the 

* most  significant  end  of  the  window.  The  purpose  of  this 

* initialization  is  to  get  the  two  wbits+1  bits  apart, 

* Like  they  should  be. 

* 

* Note  that  bitpos  and  elLen  together  keep  track  of  the 

* Lookahead  read  pointer  in  the  exponent  that  is  used  here. 
*/ 

buf  = 0; 

for  (i  = 0;  i <=  wbits;  i++)  { 

n buf  = (buf  <<  1)  I ((*e  & bitpos)  !=  0); 

n bitpos  >>=  1 ; 

n if  (Ibitpos)  { 


tt 

n 

BIGLITTLE(e++,e — ); 

Q 

a 

bitpos  = (BNW0RD16)1 

□ 

n 

elen--; 

n > 

> 

pg p A s s e r t ( b u f & tblmask); 


n / * 

n * Set  the  pending  multiply  positions  to  a Location  that  will 

n * never  be  encountered,  thus  ensuring  that  nothing  will  happen 

n * until  the  need  for  a multiply  appears  and  one  is  scheduled, 

n * / 

n muLtpos  = ebits;n  /*  A NULL  value  */ 
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n 

mult  = 0 ; n 

/* 

Force 

a crash  if 

we 

use  these  */ 

n 

/* 

n 

* Okay,  now 

begins 

the 

real  work. 

The 

first 

step  is 

a 

* slightly 

magi c , 

so  it 

's  done  outside 

the  main  loop. 

n 

* but  it's 

very  similar 

to  what*s  i 

ns  i de  . 

a 

*/ 

n 

ebi ts--;n 

/* 

Start 

processi ng 

the 

first 

bit...  * / 

i sone  = 1 ; 


/* 

* 

★ 

* 

★ 

it 

it 

it 


This  is  just  like  the  multiply  in  the  loop,  except  that 

- We  know  the  msbit  of  buf  is  set,  and 

- We  have  the  extra  value  n^2  floating  around. 

So,  do  the  usual  computation,  and  if  the  result  is  that 
the  buffer  should  be  multiplied  by  n^1  immediately 
(which  we'd  normally  then  square),  we  multiply  it 
(which  reduces  to  a copy,  which  reduces  to  setting  a flag) 

* by  n*2  and  skip  the  squaring.  Thus,  we  do  the 

* multiply  and  the  squaring  in  one  step. 

*/ 

pg p A s s e r t ( bu f & tblmask); 
multpos  = ebits  - wbits; 
while  ((buf  & 1)  ==  0)  ( 
n buf  >>=  1 ; 

n multpos ++; 

> 

/*  Intermediates  can  wrap,  but  final  must  NOT  */ 
pg p A s s e r t ( mu  1 1 po s <=  ebits); 
mult  = t a b I e C bu f >>1 ] ; 
buf  = 0; 


/*  Special  case:  use  already-computed  value  sitting  in  buffer  */ 
if  (multpos  ==  ebits) 
n isone=0; 


n / * 

n * At  this  point,  the  buffer  (which  is  the  high  half  of  b)  holds 

n * either  1 (implicitly,  as  the  "isone"  flag  is  set),  or  n^2. 

n * / 


a 

□ 

□ 

a 

□ 

□ 

n 

n 

□ 

a 

n 

Q 

a 

□ 

□ 


/* 

* The  main  loop.  The  procedure  is: 

* - Advance  the  window 

* - If  the  most-significant  bit  of  the  window  is  set, 

* schedule  a multiply  for  the  appropriate  time  in  the 

* future  (may  be  immediately) 

* - Perform  any  pending  multiples 

* - Check  for  termination 

* - Square  the  buffer 

* 

* At  any  given  time,  the  acumulated  product  is  held  in 

* the  high  half  of  b. 

*/ 

for  (;;)  ( 
n ebits  — ; 


n n /*  Advance  the  window  */ 
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p g p A s s e r t ( b u f < tbLmask); 
buf  <<=  1 ; 

/* 

* This  reads  ahead  of  the  current  exponent  position 

* (controlled  by  ebits),  so  we  have  to  be  able  to  read 


u 

n 

* 

past 

the  1 s b 

of  the  exponents  without  error 

n 

n 

★ 

/ 

□ 

n 

i f 

( e 1 e n ) { 

n 

n 

n 

buf  1 = 

((*e  & bitpos)  !=  0); 

n 

n 

n 

b i t po  s 

»=  1; 

a 

Q 

n 

if  (!bitpos)  { 

n 

n 

n 

n 

BIGLITTLE(e++,e — ); 

u 

n 

n 

ct 

bitpos  = (BNW0RD16)1  <<  (16-1) 

n 

n 

n 

n 

e 1 e n-- ; 

□ 

n 

n 

> 

n 

n 

> 

n 

n 

/* 

Examine  the 

window  for  pending  multiplies  * 

n 

Q 

i f 

(buf 

& tblmask)  f 

n 

n 

n 

□ 

n 

□ 

n 

Q 

□ 

> 


multpos  = ebits  - wbits; 
while  C (buf  S 1 ) ==  0)  { 
n buf  >>=  1 ; 

n multpos++; 

> 

/*  Intermediates  can  wrap,  but  final  must  NOT  */ 
pg p A s s e r t ( mu  1 1 po s <=  ebits); 
mult  = tableCbuf>>1D; 
buf  = 0 ; 


/*  If  we  have  a pending  multiply,  do  it  */ 


Q 

B 

i f 

(ebits  = 

= multpos)  { 

□ 

B 

B 

/* 

Multiply  by  the  table  entry  remembered  previousi 

U 

B 

fl 

t = 

BIGLITTLE(b-mlen, 

b+mlen); 

n 

B 

fl 

i f 

( i sone  ) { 

n 

B 

fl 

B 

/*  Multiply  by 

1 is 

a trivial  case  */ 

n 

B 

B 

B 

bn i Copy_1 6 ( t , 

mu  L t , 

mien); 

n 

B 

B 

B 

isone  = 0; 

n 

fl 

B 

> e 

1 se  f 

n 

B 

B 

B 

bn i Mon t Mu  1 _1 6 ( a , t. 

mult,  mod,  mien,  inv); 

n 

B 

B 

B 

/*  Swap  a and 

b */ 

B 

B 

B 

B 

t=a;a=b; 

b = t; 

B 

B 

B 

> 

/*  Are  we  done?  */ 
if  ( ! ebi ts) 
n break; 


#if  BNYIELD 
□ □ 


/*  Square  the  input  */ 
if  (lisone)  { 

t = BIGLITTLE(b-mlen,  b+mlen); 
bn i H on t S qu a r e_1 6 ( a , t,  mod,  mien,  inv); 
/*  Swap  a and  b */ 
t=a;a=b;b=t; 


if  (bnYield  &S  (y  = bnYield())  < 0) 
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n n a gotoyieLd; 

#end i f 


n 

> /*  for  (;;)  */ 

n 

pgpAssert( ! isone); 

Q 

pgpAssert(  !buf); 

n 

/*  DONE!  */ 

Q 

/*  Convert  result  out  of 

Montgomery  form  */ 

O 

t = BIGLITTLE(b-mlen,  b+mlen); 

Q 

bniCopy_16(b,  t,  mien); 

n 

bn i Z e r o_1 6 ( t , mien); 

a 

bn i Mon t R e d u c e_1 6 ( b,  mod. 

mien,  inv); 

a 

bniCopy_16(result,  t,  mien); 

n 

/* 

n 

* Clean  up  - free  intermediate  storage. 

□ 

* Do  NOT  free  tableCO), 

which  is  the  result 

n 

* buffer. 

n 

*/ 

n y = 0; 

#if  BNYIELD 
yield: 

#endi f 

n while  ( t b I ma s k ) 

n n BN  I F R E E ( t ab I e C t b I ma s k] , mien); 

n BNI FREECb,  2*mlen) ; 

n BNIFREEla,  2*mlen); 

a returny;n  /*  Success*/ 

} 


/* 

* Compute  and  return  nl^el  * n2''e2  mod  "mod". 

* result  may  be  either  input  buffer,  or  something  separate. 

* It  must  be  "mien"  words  long. 

* 

* There  is  a current  position  in  the  exponents,  which  is  kept  in  elbits. 

* (The  exponents  are  swapped  if  necessary  so  el  is  the  longer  of  the  two.) 

* At  any  given  time,  the  value  in  the  accumulator  is 

* n 1 '' ( e 1 >>e1  bi  t s ) * n2 '' ( e2>>e  1 b i t s ) mod  "mod". 

* As  elbits  is  counted  down,  this  is  updated,  by  squaring  it  and  doing 

* any  necessary  multiplies. 

* To  decide  on  the  necessary  multiplies,  two  windows,  each  w1bits+1  bits 

* wide,  are  maintained  in  bufi  and  buf2,  which  read  *ahead*  of  the 

* elbits  position  (with  appropriate  handling  of  the  case  when  elbits 

* drops  below  w1bits  + 1).  When  the  mo s t -s i g n i f i c a n t bit  of  either  window 

* becomes  set,  indicating  that  something  needs  to  be  multiplied  by 

* the  accumulator  or  it  will  get  out  of  sync,  the  window  is  examined 

* to  see  which  power  of  n1  or  n2  to  multiply  by,  and  when  (possibly 

* later,  if  the  power  is  greater  than  1)  the  multiply  should  take 

* place.  Then  the  multiply  and  its  location  are  remembered  and  the 

* window  is  cleared. 

* 

* If  we  had  every  power  of  n1  in  the  table,  the  multiply  would  always 

* be  wibits  steps  in  the  future.  But  we  only  keep  the  odd  powers, 

* so  instead  of  waiting  wibits  squarings  and  then  multiplying 

* by  n1''k,  we  wait  wibits-k  squarings  and  multiply  by  n1  . 
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* 

* Actually,  w2bits  can  be  less  than  wibits,  but  the  window  is  the  same 

* size,  to  make  it  easier  to  keep  track  of  where  we're  reading.  The 

* appropriate  number  of  low-order  bits  of  the  window  are  just  ignored. 
*/ 

i n t 

bniDoubleExpMod_16(BNW0RD16  *result, 

BNW0RD16  const  *n1,  unsigned  nllen, 

BNW0RD16  const  *e1,  unsigned  ellen, 

BNW0RD16  const  *n2,  unsigned  n2len, 

BNW0RD16  const  *e2,  unsigned  e2len. 


r 

BNW0RD16  *mod,  unsigned 

mien) 

\. 

n 

B^W0RD1 6 

*tabLe1C1  « 

CBNEXPMOD 

_MAX 

:_WIND0W-1 ) ]; 

n 

Q □ 

n 

n 

/* 

Table  of  odd  powers  of 

n1  */ 

n 

BNW0RD1 6 

*tabLe2ni  << 

(BNEXPMOD 

_HAX 

:_WIND0W-1 ):; 

n 

□ n 

n 

n 

/* 

Table  of  odd  powers  of 

n2  */ 

□ 

unsigned 

elbits,  e2bits;n 

/* 

Exponent  bits  */ 

a 

unsi gned 

wibits,  w2bits;n 

/* 

Window  sizes  */ 

n 

unsigned 

tblmask;n 

n 

/* 

Mask  of  exponentiation 

window  */ 

n 

BNW0RD1 6 

b i t p 0 s ; n 

n 

/* 

Mask  of  current  look-ahead  bit  */ 

D 

unsigned 

bufi,  buf2;n 

n 

/* 

Buffer  of  exponent  bits 

*/ 

n 

unsi gned 

multipos,  mult2pos;n 

/* 

Where  to  do  pending  multiply  */ 

n 

BNWORDI 6 

const  *muLt1, 

* m u L t 2 ; n 

/* 

What  to  multiply  by  */ 

n 

unsigned 

■i  ; n n 

n 

/* 

Loop  counter  */ 

n 

int  isone 

; n H 

□ 

/* 

Flag:  accum.  is  implicitly  one  */ 

n 

BNW0RD1 6 

* a , * b ; n 

n 

/* 

Working  b u f f e r s / a c c umu  1 a t o r s */ 

□ 

BNW0RD1 6 

*t ; n n 

n 

/* 

Pointer  into  the  working  buffers  */ 

n 

BNW0RD1 6 

i n v; n n 

Q 

/* 

mod*-1  modulo  2^16  */ 

□ 

int  y ; n n 

n 

□ 

/* 

bnYieldC)  result  */ 

n pgpAssert(mlen); 

n pg p A s s e r t ( n 1 I e n <=  mien); 

n pg p A s s e r t ( n 2 I e n <=  mien); 

n /*  First,  a couple  of  trivial  cases.  */ 

n ellen  = bniNorm_16(e1,  ellen); 

n e2len  = bn i N o rm_ 1 6 ( e 2 , e2len); 


D 

n 

□ 

n 

□ 

n 

n 

n 

n 

n 


/*  Ensure  that  the  first  exponent  is  the  longer  */ 
elbits  = bn i Bi t s_1 6 ( el , ellen); 
e2bits  = bniBits_16(e2,  e2len); 
if  (elbits  < e2bits)  { 

n i = ellen;  ellen  = e2len;  e2len  = i; 

n i = elbits;  elbits  = e2bits;  e2bits  = i; 

n t = (BNW0RD16  *)n1;  n1  = n2;  n2  = t; 

n t = (BNW0RD16  *)e1;  el  = e2;  e2  = t; 

> 

pg p A s s e r t ( e 1 b i t s >=  e2bits); 


n /*  Handle  a trivial  case  */ 

n if  (!e2len) 

n n return  b n i E x pMod_ 1 6 ( r e s u I t , n1,  nllen,  el,  ellen,  mod,  mien); 

u pg p A s s e r t ( e 2 b i t s ) ; 


n /*  The  code  below  fucks  up  if  the  exponents  aren't  at  least  2 bits  */ 

n if(e1bits==1){ 

n H pgpAssert(e2bits  ==  1); 
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BNIALLOC(a,  BNW0RD16,  n1  L en  + n2 L en  ) ; 
if  ( !a) 

n return-1; 

bniMul_16(a,  n1,  nILen,  n2,  n2Len); 

/*  Do  a direct  modular  reduction  */ 
if  (nILen  + n2Len  >=  mien) 

a ( VO i d ) bn i D i v_1 6 ( a+m I e n , a,  n1Len+n2Len,  mod,  mien); 

bn i C 0 py_ 1 6 ( r e s u L t , a,  mien); 

BNIFREECa,  n 11 en+n 2 L e n ) ; 
return  0; 

n /*  Okay,  now  move  the  exponent  pointers  to  the  mo s t - s i g n i f i c a n t word  */ 

n el  = BIGLITTLE(e1-e1 Len,  e1+e1Len-1); 

n e2  = BIGLITTLE(e2-e2Len,  e2+e2Len-1); 

n /*  Look  up  appropriate  k-1  for  the  exponent  - tblmask  = 1<<(k-1)  */ 

n w1bits=0; 

n while  (elbits  > bn E xpHodT h r e s hTa b I e C w 1 b i t s D ) 

n n w1bits++; 

n w2bits=0; 

n while  (e2bits  > b n ExpModT h r e s hTa b I e C w 2 b i t s D ) 

n n w2bits++; 

n pgpAs se r t ( w1 b i t s >=  w2bits); 

n /*  Allocate  working  storage:  two  product  buffers  and  the  tables.  */ 

n BNIALLOCCa,  BNW0RD16,  2*mlen); 

n i f ( ! a ) 

n n return-1; 

n BNIALLOCCb,  BNW0RD16,  2*mlen); 

n i f ( ! b ) { 

n n BNIFREE(a,2*mlen); 

n n return-1; 

n > 


D 

/* 

Convert  to  the  appropriate  table  size: 

tblmask  = 

1<<Ck-1)  */ 

n 

tblmask  = 1u  <<  wibits; 

n 

/* 

Use  buf2  for  its  size,  temporarily  */ 

D 

buf 2 = 1 u <<  w2bi ts; 

□ 

BNIALLOCCt,  BNW0RD16,  mien); 

n 

i f 

( ! t ) { 

o 

n 

BNIFREECb,  2*mlen); 

n 

n 

BNIFREEfa,  2*mlen); 

D 

n 

return  -1; 

n 

> 

n 

table1C0D  = t; 

a 

table2C0D  = result; 

a 

/* 

a 

* 

Okay,  we  now  have  some  m i n i ma 1 - s i z ed  tables 

- expand  them. 

a 

* 

This  is  allowed  to  fail!  If  so,  scale 

back 

the 

table  sizes 

n 

* 

and  proceed.  We  allocate  both  tables  at  the 

same  time 

n 

* 

so  if  it  fails  partway  through,  they'll 

both 

be 

a reasonable 

n 

★ 

size  rather  than  one  huge  and  one  tiny. 
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n * When  i passes  buf2  (the  number  of  entries  in  the  e2  window, 

n * which  may  be  Less  than  the  number  of  entries  in  the  el  window), 

a * stop  allocating  e2  space, 

n * / 


tt 

for 

(i  = 1; 

1 

< tblmask;  i++)  { 

□ 

n 

BNIALL0C(t,  BNW0RD16,  mien); 

□ 

n 

i f 

( ! 

t)B/*  Out  of  memory!  Quit  the  Loop. 

a 

n 

B 

break; 

n 

n 

tablelCi)  = t; 

n 

□ 

i f 

( i 

< buf2)  { 

n 

n 

fl 

BNIALL0C(t,  BNW0RD16,  mien); 

n 

□ 

B 

if  (It)  { 

n 

n 

B 

B BNI  FREE(tabLe1 Ci :,  mien); 

□ 

B 

B 

B break; 

□ 

B 

B 

} 

n 

B 

B 

tabLe2Ci3  = t; 

n 

B 

> 

*/ 


n > 


n /*  If  we  stopped,  with  i < tblmask,  shrink  the  tables  appropriately  */ 

o while  (tblmask  > i)  { 

n B w1 bi ts--; 

B B tblmask  >>=1; 

n > 

B /*  Free  up  our  ove ra L L oca t i ons  */ 

n while  (--i  > tblmask)  { 

n B if(i<buf2) 

B B B BNIFREE(tabLe2Ci:,mLen); 

n B BNIFREE(tabLe1 Hi :,  mien); 

n } 

n /*  And  shrink  the  second  window  too,  if  needed  */ 

n if  (w2bits  > wibits)  ( 

n B w2bits=w1bits; 

B B buf 2 = tb  Lmask; 

n } 

B /* 

B * From  now  on,  use  the  w2bits  variable  for  the  difference 

n * between  wibits  and  w2bits. 

B * / 

n w2bits  = w 1 b i t s- w2 b i t s ; 

n /*  Okay,  fill  in  the  tables  */ 

B /*  Compute  the  necessary  modular  inverse  */ 

B inv  = bn i Hon 1 1 n V 1 _1 6 ( mod C B I G L I XT LE ( -1 , 0 ) D ) ; B /*  LSW  of  modulus  */ 

n /*  Convert  n1  to  Montgomery  form  */ 

B /*  Move  n1  up  "mien"  words  into  a */ 

n t = BI G LI IT L E ( a -m L e n , a+mlen); 

n bn i Copy_1 6 ( t , n1,  nILen); 

a bn i Z e r o_ 1 6 ( a , mien); 

B /*  Do  the  division  - Lose  the  quotient  into  the  high-order  words  */ 

B ( VO i d ) bn i D i v_ 1 6 ( t , a,  mlen+nllen,  mod,  mien); 

B /*  Copy  into  first  table  entry  */ 

B bn i Copy_1 6 ( t ab L el C0D , a,  mien); 
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n /*  Square  a into  b */ 

n bn i Hon t S q u a r e_ 1 6 ( b , a,  mod,  mien,  inv); 


n 

n 

□ 

n 

n 

#i  f 
n 

D 


/*  Use  high  half  of  b to  initialize  the  first  table  */ 
t = BIGLITTLECb-mlen,  b+mlen); 
for  (i  = 1;  i < tblmask;  i++)  { 

n bn i Mon t Hu  I _1 6 ( a , t,  tablelCi-ID,  mod,  mien,  inv); 

n bn i Copy_1 6 ( t a b I e 1 C i D , B I G L I TT L E ( a -m I en , a + mlen),  mien); 

BNYIELD 

n if  CbnYield  &&  (y  = bnYieldC))  < 0) 

n n gotoyield; 


#end  i f 

n > 


n /*  Convert  n2  to  Montgomery  form  */ 


n t = BIGLITTLE(a-mlen,  a+mlen); 

n /*  Hove  n2  up  "mien"  words  into  a */ 

n bniCopy_16(t,  n2,  n2len); 

n b n i Z e r o_1 6 ( a , mien); 

n /*  Do  the  division  - lose  the  quotient  into  the  high-order  words  */ 

n ( VO i d ) b n i D i v_1 6 ( t , a,  mlen+n2len,  mod,  mien); 

n /*  Copy  into  first  table  entry  */ 

n bn i Copy_1 6 ( t a b I e2 COD , a,  mien); 


n /*  Square  it  into  a */ 

n bniHontSquare_16(a,  table2C03,  mod,  mien,  inv); 

n /*  Copy  to  b,  low  half  */ 

n bniCopy_16(b,  t,  mien); 


n 

/* 

n 

for 

□ 

n 

o 

D 

#if 

BNYIELD 

n 

Q 

n 

n 

#end 

i f 

Q 

> 

n 

/* 

Q 

★ 

n 

* 

u 

* 

n 

★ 

n 

★ 

□ 

* 

n 

*/ 

Use  b to  initialize  the  second  table  */ 

(i  = 1;  i < buf2;  i++)  { 

bniHontHul_16(a,  b,  table2Ci-1Il,  mod,  mien,  inv); 
b n i C o py _1 6 ( t a b I e 2 [ i D , t,  mien); 

if  CbnYield  &&  (y  = bnYieldC))  < 0) 
o goto  yield; 


Okay,  a recap:  at  this  point,  the  low  part  of  b holds 
n2*2,  the  high  part  holds  n1*2,  and  the  tables  are 
initialized  with  the  odd  powers  of  n1  and  n2  from  1 
through  2*tblmask-1  and  2*buf2-1. 

We  might  use  those  squares  in  b later,  or  we  might  not. 


n /*  Initialze  the  fetch  pointer  */ 

n bitpos  = CBNW0RD16)1  <<  CCe1bits-1)  & C16-1));n  /*  Initialize  mask  */ 

n /*  This  should  point  to  the  msbit  of  el  */ 

n pg p A s s e r t C C *e 1 & bitpos)  !=  0); 

n /* 

n * Pre-load  the  windows.  Becuase  the  window  size  is 

n * never  larger  than  the  exponent  size,  there  is  no  need  to 
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□ 

n 

n 

n 

n 

n 

□ 

□ 

□ 

n 

□ 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

□ 

n 

n 

n 


* detect  running  off  the  end  of  el  in  here. 

* 

* The  read-ahead  is  controlled  by  ellen  and  the  bitpos  mask. 

* Note  that  this  is  *ahead*  of  elbits,  which  tracks  the 

* most  significant  end  of  the  window.  The  purpose  of  this 

* initialization  is  to  get  the  two  w1bits+1  bits  apart, 

* like  they  should  be. 

* 

* Note  that  bitpos  and  ellen  together  keep  track  of  the 

* lookahead  read  pointer  in  the  exponent  that  is  used  here. 

* e2len  is  not  decremented,  it  is  only  ever  compared  with 

* ellen  as  *that*  is  decremented. 

*/ 


bufi  = 

buf2  = 

0; 

for  ( 1 

= 0;  i 

<=  wibits;  i++)  { 

n 

bufi  = 

(bufi  <<  1 ) 1 ( (*e1  S 

bitpos)  !=  0); 

D 

if  (ellen  <=  e2len) 

n 

n 

buf2  = (buf2  <<  1)  1 

((*e2  S bitpos) 

n 

bi tpos 

>>=  1; 

n 

if  (!  bitpos)  { 

a 

□ 

BIGLITTLE(e1++,e1 — ) ; 

n 

n 

if  (ellen  <=  e2len) 

n 

u 

n BIGLITTLE(e2++,e2 — ); 

n 

u 

bitpos  = (BNW0RD16)1 

« (16-1); 

a 

n 

el len--; 

n 

> 

y 

pgpAsse  rt (bufi 

& tblmask); 

n / * 

n * Set  the  pending  multiply  positions  to  a location  that  will 

n * never  be  encountered,  thus  ensuring  that  nothing  will  happen 

n * until  the  need  for  a multiply  appears  and  one  is  scheduled, 

n * / 

n multipos  = mult2pos  = e1bits;n  /*  A NULL  value  */ 

n multi  = mult2  = 0;n  /*  Force  a crash  if  we  use  these  */ 


n / * 

n * Okay,  now  begins  the  real  work.  The  first  step  is 

n * slightly  magic,  so  it's  done  outside  the  main  loop, 

n * but  it's  very  similar  to  what's  inside, 

n * / 

a isone  = 1;n  /*  Buffer  is  implicitly  1,  so  replace  * by  copy  */ 

n e1bits--;n  /*  Start  processing  the  first  bit...  */ 

n / * 

n * This  is  just  like  the  multiply  in  the  loop,  except  that 

n * - We  know  the  msbit  of  bufi  is  set,  and 

n * - We  have  the  extra  value  n1''2  floating  around, 

n * So,  do  the  usual  computation,  and  if  the  result  is  that 

n * the  buffer  should  be  multiplied  by  nl^'l  immediately 

n * (which  we'd  normally  then  square),  we  multiply  it 

n * (which  reduces  to  a copy,  which  reduces  to  setting  a flag) 

n * by  n1''2  and  skip  the  squaring.  Thus,  we  do  the 

n * multiply  and  the  squaring  in  one  step, 

n * / 

a pgpAssert(buf1  S tblmask); 

n multipos  = elbits  - wibits; 
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n 

o 

n 

n 

n 

Q 

n 

n 


whi  Le  ((bufi  & 1 ) ==  0)  { 
n buf1>>=1; 

n muLt1pos++; 

> 

/*  Intermediates  can  wrap,  but  finaL  must  NOT  */ 
pgpAssert (mu L t1 pos  <=  elbits); 
muLtI  = t a b L e 1 L bu  f 1 >>  1 II  ; 
bufi  = 0 ; 


/*  Special  case:  use  already-computed  value  sitting  in  buffer  */ 
if  (multipos  ==  elbits) 
n isone=0; 


s 

Q 

n 

n 

n 

Q 

n 

Q 

n 

n 

n 

□ 

n 

n 

o 

n 

o 

n 


/* 

* The  first  multiply  by  a power  of  n2.  Similar,  but 

* we  might  not  even  want  to  schedule  a multiply  if  e2  is 

* shorter  than  el,  and  the  window  might  be  shorter  so 

* we  have  to  Leave  the  low  w2bits  bits  alone, 

*/ 

if  (buf2  & tblmask)  i 

n /*  Remember  Low-order  bits  for  Later  */ 

n i = buf2  & (<1u  <<  w2bits)  - 1); 

n buf 2 >>=  w2bi ts; 

n muLt2pos  = elbits  - wibits  + w2bits; 

n while  (Cbuf2  & 1)  ==  0)  -C 

n n buf 2 >>=  1 ; 

n n mult2pos++; 

n > 

n pg p A s s e r t ( mu L t 2 po s <=  elbits); 

n mult2  = t a b I e2 C buf 2>>1 D ; 

n buf 2 = i ; 


Q 

n 

n 

n 

n 

Q 

n 

a 

n 

□ 

n 


n 

n 

n 

n 

n 

n 

H 

n 

n 

n 

> 


if  (mult2pos  ==  elbits)  T 


B 

t 

= BIGLITTLECb-mLen, 

b+mlen); 

B 

i f 

(isone)  ( 

B 

B 

bni Copy_16(t, 

b,  mLen);n/*  Copy  Low  to  high 

B 

B 

isone  = 0 ; 

B 

> 

else  { 

B 

B 

bn i Mon t Hu  1 _1 6 ( a , t,  b,  mod,  mien,  inv); 

B 

B 

t=a;a=b; 

b = t; 

B 

> 

> 


n /* 

n * At  this  point,  the  buffer  (which  is  the  high  half  of  b) 

n * holds  either  1 (implicitly,  as  the  "isone"  flag  is  set), 

n * n1^2,  n2*2  or  n1^2  * n2^2. 

n */ 


B 

B 

B 

B 

B 

B 

B 

B 


/* 

* The  main  Loop-  The  procedure  is: 

* - Advance  the  windows 

* - If  the  mos t - s i g n i f i c a n t bit  of  a window  is  set, 

* schedule  a multiply  for  the  appropriate  time  in  the 

* future  (may  be  immediately) 

* - Perform  any  pending  multiples 

* - Check  for  termination 
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n * - Square  the  buffers 

n * 


n * At  any  given  time,  the  acumuLated  product  is  held  in 

n * the  high  half  of  b. 

n */ 

n for  (;;)  { 

a n el bi ts--; 


n 

n 

n 

Q 

n 

□ 

Q 

n 

□ 

n 

n 

n 

n 

Q 

o 

n 

n 

n 

u 

n 

n 

n 

n 


a 

□ 

n 

D 

n 

□ 

n 

□ 

n 

Q 

n 

n 

u 

a 

a 

a 

a 

n 

n 

n 

n 

n 

n 


/*  Advance  the  windows  */ 
pg p A s s e r t ( b u f 1 < tbLmask); 
buf1  <<=  1; 

pg pA s s e r t ( bu f 2 < tbLmask); 
buf2  <<=  1; 

/* 

* This  reads  ahead  of  the  current  exponent  position 

* (controlled  by  elbits),  so  we  have  to  be  able  to  read 

* past  the  Isb  of  the  exponents  without  error, 

*/ 


i f 

(el L e n ) 

a 

bufi  1=  ((*e1  & 

bitpos)  !=  0); 

n 

i f 

(elLen  <=  e2Len) 

n 

□ 

buf2  1= 

((*e2  & bitpos)  !=  0); 

n 

bitpos  >>=  1; 

n 

i f 

(!bitpos)  { 

Q 

n 

BIGLITTLECe1++,e1 — ) ; 

n 

n 

if  (elLen  <=  e2Len) 

s 

□ 

n 

BIGLITTLE ( e2++, e2 — ) ; 

n 

n 

bitpos  = 

(BNW0RD16)1  <<  (16-1); 

a 

n 

el  L e n - - ; 

a 

> 

> 


n 

n 

/* 

n 

□ 

i f 

□ 

Q 

B 

Q 

Q 

B 

Q 

n 

B 

n 

n 

B 

n 

Q 

B 

n 

Q 

B 

n 

Q 

B 

□ 

n 

B 

□ 

Q 

B 

n 

n 

> 

n 

n 

/* 

Q 

n 

★ 

n 

u 

★ 

a 

B 

* 

n 

B 

★ 

n 

B 

★ 

n 

B 

★ 

n 

B 

it 

n 

B 

i f 

n 

B 

B 

n 

B 

B 

n 

B 

B 

n 

B 

B 

Examine  the  first  window  for  pending  multiplies  */ 
(bufi  & tbLmask)  { 

multipos  = elbits  - wibits; 
while  CCbufl  & 1)  ==  0)  { 
n bufi  >>=  1 ; 

n multi pos++ ; 

> 

/*  Intermediates  can  wrap,  but  final  must  NOT  */ 
pgp As s e r t ( mu L t 1 pos  <=  elbits); 
multi  = t ab I el C buf 1 >>1 D ; 
bufi  = 0 ; 


Examine  the  second  window  for  pending  multiplies. 
Window  2 can  be  smaller  than  window  1,  but  we 
keep  the  same  number  of  bits  in  buf2,  so  we  need 
to  ignore  any  low-order  bits  in  the  buffer  when 
computing  what  to  multiply  by,  and  recompute  them 
Later. 

(buf2  & tbLmask)  -C 

/*  Remember  Low-order  bits  for  later  */ 
i = buf2  & (Clu  « w2bits)  - 1); 
buf2  >>=  w2bits; 

muLt2pos  = elbits  - wibits  + w2bits; 
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□ 

n 

a 

while  ( (buf 2 S 1)  ==  0)  { 

n 

a 

n 

n buf2>>=l; 

n 

u 

n 

n muLt2pos++; 

n 

n 

n 

> 

n 

» 

a 

pg p A s s e r t ( mu L t 2 po s <=  elbits); 

n 

n 

n 

muLt2  = tabLe2Cbuf2>>1]; 

n 

n 

n 

b u f 2 = i ; 

a 

n 

> 

n 

n 

/* 

If 

we  have  a pending  multiply  for  el,  do  it  */ 

n 

n 

i f 

(elbits  ==  muLtIpos)  ( 

n 

n 

n 

/*  Multiply  by  the  table  entry  remembered  previously 

a 

n 

n 

t = BIGLITTLE(b-mlen,  b+mlen); 

n 

n 

n 

if  (isone)  { 

o 

n 

n 

n /*  Multiply  by  1 is  a trivial  case  */ 

n 

n 

□ 

n bniCopy_16(t,  multi,  mien); 

n 

XX 

n 

n isone=0; 

n 

Q 

n 

} else  { 

n 

n 

n 

n bniMontMul_16(a,  t,  multi,  mod,  mien,  inv); 

D 

□ 

XX 

n /*Swapaandb*/ 

n 

n 

XX 

n t=a;a=b;b=t; 

D 

a 

XX 

> 

n 

Q 

> 

n 

n 

f* 

If 

we  have  a pending  multiply  for  e2,  do  it  */ 

n 

n 

i f 

(elbits  ==  muLt2pos)  ( 

n 

n 

n 

/*  Multiply  by  the  table  entry  remembered  previously 

n 

Q 

n 

t = BIGLITTLE(b-mlen,  b+mlen); 

n 

n 

n 

if  (isone)  { 

n 

n 

n 

n /*  Multiply  by  1 is  a trivial  case  */ 

n 

n 

n 

a bniCopy_16(t,  mult2,  mien); 

n 

n 

n 

n isone=0; 

n 

n 

n 

> else  { 

n 

n 

n 

n bn i Mon t Mu  1 _1 6 ( a , t,  mult2,  mod,  mien,  inv); 

n 

n 

Q 

n /*  Swap  a and  b */ 

n 

n 

Q 

n t=a;a=b;b=t; 

□ 

Q 

n 

> 

n 

n 

> 

n 

n 

/* 

Are  we  done?  */ 

Q 

n 

if 

( ! 

elbits) 

n 

n 

n 

break; 

n 

n 

/* 

Square  the  buffer  */ 

n 

XX 

i f 

( ! 

i sone  ) i 

o 

XX 

□ 

t = BIGLITTLE(b-mlen,  b+mlen); 

n 

n 

n 

bn i Mon t S q ua r e_1 6 ( a , t,  mod,  mien,  inv); 

o 

n 

n 

/*  Swap  a and  b */ 

n 

n 

n 

t=a;a=b;b=t; 

Q 

n 

> 

#if  BNYIELD 

o 

n 

i f 

(bnYield  &&  (y  = bnYieLd())  < 0) 

o 

u 

H 

goto  yield; 

#endi f 

Q 

> /* 

for  ( ; 

;) 

*/ 

n 

pgpAssertl  ! 

i sone ) ; 
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n pgpAssertCIbufI); 

n pgpAssert(!buf2); 

n /*  DONE!  */ 

n /*  Convert  result  out  of  Montgomery  form  */ 

n t = BIGLITTLECb-mLen,  b+mlen); 

n bni Copy_1 6(b,  t,  mien); 

n bniZero_16(t,  mien); 

a bniMontReduce_16(b,  mod,  mien,  inv); 

n b n i C opy _ 1 6 ( r e s u L t , t,  mien); 


n /*  Clean  up  - free  intermediate  storage  */ 

n y = 0; 

#if  BNYIELD 
yield: 

#end  i f 
n 
□ 
a 
n 
a 
□ 
a 
a 
a 
□ 

Q 

> 

/* 

* Z^exp  (mod  mod).  This  is  an  optimized  version  for  use  in  Fermat 

* tests.  The  input  value  of  n is  ignored;  it  is  returned  with 

* "mien"  words  valid. 

*/ 

i n t 

bn i T wo E X pH od_ 1 6 ( BN WOR D 1 6 *n,  BNW0RD16  const  *exp,  unsigned  elen. 


n 

/ 

BNW0RD1 6 

*mod,  unsigned  mien) 

\ 

□ 

unsigned 

e;n  /*  Copy  of  high  words  of  the  exponent 

□ 

unsigned 

bits;n  /*  Assorted  counter  of  bits  */ 

£t 

BNW0RD1 6 

const  *bitptr; 

D 

BNW0RD1 6 

bitword,  bitpos; 

Q 

BNW0RD1 6 

*a,  *b,  *a1; 

n 

BNW0RD1 6 

inv; 

Q 

i n t y ; n n 

/*  Result  of  bnYield()  */ 

buf2  = tblmask  >>  w2bits; 
while  ( — tblmask)  f 
a if  (tblmask  < buf2) 

n a BN  I F R E E ( t a b I e 2 C t b I ma s k D , mien); 

n B N I F R E E ( t a b I e 1 C t b I ma s k ] , mien); 

> 

t = table1C0D; 

BNIFREE(t,  mien); 

BNIFREE(b,  2*mlen); 

BNIFREE(a,  2*mlen); 

return  y;n  /*  Success  */ 


n pgp As se r t ( m I en ) ; 

n bitptr  = B I G L I TT LE ( e x p-e I e n , exp+elen-1); 

n bitword  = *bitptr; 

n pgpAssert (bi tword); 

n /*  Clear  n for  future  use.  */ 

n bni Zero_1 6(n,  mien); 

n bits  = bniBits_16(exp,  elen); 
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n 

n 

/* 

First,  a couple  of  trivial 

cases.  * / 

n 

i f 

(bits  <=  1 ) 

{ 

u 

n 

/*  2 ^ 

0 ==  1,  2*1 

= = 2 */ 

a 

n 

BIGLITTLE(nC-1],ni:0:) 

= (BNW0RD1 6) 1 <<e len; 

n 

n 

return 

0; 

n 

> 

n /*  Set  bitpos  to  the  most  significant  bit  */ 

n bitpos  = CBNW0RD16)1  <<  (Cbits-I)  & (16-1)); 

n /*  Now,  count  the  bits  in  the  modulus.  */ 

a bits  = bn i B i t s_1 6 ( mod , mien); 

n pgpAssertCbits  > 1);n  /*  a 1-bit  modulus  is  just  stupid...  */ 


n 

/* 

n 

* We 

start 

with  1<<e, 

where  "e"  is  as  many  high  bits  of  the 

a 

* exponent 

as  we  can 

manage  without  going  over  the  modulus. 

n 

* Thi 

s first  loop  finds  "e". 

□ 

*/ 

n 

e = 1; 

□ 

wh  i 1 e 

( e 1 e n ) 

n 

n 

/*  Consume  the 

first  bit  */ 

n 

□ 

bi tpos  >>=  1 ; 

n 

n 

if  ( 

I bi tpos ) { 

n 

o 

n 

if  ( !- 

-elen) 

n 

n 

n 

n 

break; 

n 

n 

n 

bitword  = B I G L I TT LE ( *++b i t p t r , * — bitptr); 

n 

n 

n 

bitpos 

= (BNW0RD16)1<<(16-1  ); 

n 

n 

> 

□ 

n 

e = 

(e  <<  1 ) 1 

((bitpos  S bitword)  !=  0); 

n 

n 

if  ( 

e >=  bits) 

{n  /*  Overflow!  Back  out.  */ 

D 

n 

n 

e >>  = 

1; 

D 

Q 

n 

break; 

n 

n 

> 

n 

> 

u 

/* 

n 

* The 

bit  i 

n "bitpos" 

being  examined  by  the  bit  buffer  has  NOT 

n 

* been  consumed  yet. 

This  may  be  past  the  end  of  the  exponent 

□ 

* in 

which 

case  elen 

= = 1 . 

Q 

*/ 

n 

/*  Okay,  now 

, set  bit 

"e"  in  n.  n is  already  zero.  */ 

n inv  = (BNW0RD16)1  <<  (e  S (16-1)); 

n e /=  16; 

n BIGLITTLE(nC-e-1 :,nCe: ) = inv; 

n / * 

n * The  effective  length  of  n in  words  is  now  "e+1". 

n * This  is  used  a little  bit  later, 

n * / 


n if(!elen) 

n n return  0;n  /*  That  was  easy!  */ 


c 


/* 

* We  have  now  processed  the  first  few  bits.  The  next  step 

* is  to  convert  this  to  Montgomery  form  for  further  squaring. 
*/ 
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n /*  Allocate  working  storage:  two  product  buffers  */ 

n BNIALLOCCa,  BNW0RD16,  2*mlen); 

n i f ( ! a ) 

n n return-1; 

o BNIALLOCCb,  BNW0RD16,  2*mlen); 

n i f ( ! b)  f 

n n BNI FREECa,  2*mlen  ) ; 

n n return-1; 

n } 


n /*  Convert  n to  Montgomery  form  */ 

n inv  = B I G LI TT L E ( mod C- 1 3 , mod C 0 ] ) ; n /*  LSW  of  modulus  */ 

a pgpAssertCinv  S 1);n  /*  Modulus  must  be  odd  */ 

n inv  = bniMontInv1_16(inv); 

n /*  Move  n (length  e+1,  remember?)  up  "mien"  words  into  b */ 

n /*  Note  that  we  lie  about  a1  for  a bit  - it's  pointing  to  b */ 

n a1  = BIGLITTLE(b-mlen,b+mlen); 

n bn i C opy _ 1 6 ( a 1 , n,  e + 1 ) ; 

B bniZero_16(b,  mien); 

B /*  Do  the  division  - dump  the  quotient  into  the  high-order  words  */ 

B (void)bniDiv_16(a1,  b,  mlen+e+1,  mod,  mien); 

n /* 

B * Now  do  the  first  squaring  and  modular  reduction  to  put 

B * the  number  up  in  a1  where  it  belongs, 

n * / 

B bn i Mon t S q ua r e_ 1 6 ( a , b,  mod,  mien,  inv); 

B /*  Fix  up  a1  to  point  to  where  it  should  go.  */ 

B a1  = B I G LI TT LE ( a -m I e n , a + m I e n ) ; 


/* 

* Okay^ 

* b i s 
*/ 


now,  a1  holds  the  number  being  accumulated,  and 
a scratch  register.  Start  working: 


s 

for 

(;;)  { 

n 

a 

/* 

Q 

a 

* 

Is  the  bit  set?  If  so,  double  a1  as  well. 

n 

a 

★ 

A modular  doubling  like  this  is  very  cheap. 

u 

□ 

*/ 

n 

□ 

if 

(bitpos  & bitword)  { 

n 

n 

n 

/* 

n 

Q 

a 

* Double  the  number.  If  there  was  a carry 

n 

n 

n 

* the  result  is  greater  than  the  modulus. 

& 

n 

a 

* the  modulus. 

D 

n 

n 

*/ 

n 

n 

n 

if  ( bn i Dou b 1 e_1 6 ( a 1 , mien)  || 

n 

n 

n 

bn i Cmp_1 6 ( a 1 , mod,  mien)  > 0) 

n 

Q 

n 

B ( vo i d ) bn i S ub N_ 1 6 ( a 1 , mod,  mien); 

n 

□ 

> 

D 

□ 

/* 

Advance  to  the  next  exponent  bit  */ 

n 

n 

bitpos  >>=  1; 

□ 

n 

i f 

( ! bi tpos ) { 

n 

n 

n 

if  ( ! --e  1 en ) 

n 

a 

n 

B break;B  /*  Done!  */ 

n 

a 

n 

bitword  = B I G LI TT LE ( *++b i t p t r , *--b i t p t r ) ; 

n 

n 

n 

bitpos  = (BNW0RD1 6) 1 <<( 1 6-1 ) ; 

a 

a 

> 
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n 

B 

/* 

B 

B 

* 

The  e 1 en / b i t wo r d / b i t pos  bit  buffer  is 

known 

to  be 

B 

B 

* 

non-empty,  i.e.  there  is  at  least  one 

more 

unconsumed 

B 

B 

* 

Thus,  it's  safe  to  square  the  number. 

B 

B 

*/ 

B 

B 

bn  i 

Mont Squa r e_1 6 ( b,  a1,  mod,  mien,  inv); 

B 

B 

/* 

Rename  result  (in  b)  back  to  a (a1,  really) 

. */ 

B 

B 

a1 

= b;  b = a;  a = a1; 

B 

B 

a1 

= BIG LITT LE ( a-m 1 en , a+m 1 en ) ; 

#if  BNYIELD 

B 

B 

i f 

(bnYield  &8  (y  = bnYield())  < 0) 

B 

B 

n 

goto  yield; 

#endi f 

B 

> 

B 

1* 

DONE  ! 

Just  a little  bit  of  cleanup...  */ 

B 

/* 

B 

■k 

Conve  rt 

result  out  of  Montgomery  form...  this 

B 

★ 

just  a 

Montgomery  reduction. 

B 

*/ 

n bniCopy_16(a,  a^ , mien); 

n b n i Z e ro_ 1 6 C a 1 , mien); 

n bniHontReduce_16(a,  mod,  mien,  inv); 

n bn i Copy_1 6 ( n,  a1,  mien); 


n /*  Clean  up  - free  intermediate  storage  */ 

n y = 0; 

#if  BNYIELD 
yield: 

#end i f 

n BNI FREECb,  2*mlen) ; 

n BNI FREEla,  2*mlen) ; 


n returny;n  /*Success*/ 

} 


/* 

* Returns  a substring  of  the  big-endian  array  of  bytes  representation 

* of  the  bignum  array  based  on  two  parameters,  the  least  significant 

* byte  number  (0  to  start  with  the  least  significant  byte)  and  the 

* length.  I.e.  the  number  returned  is  a representation  of 

* (bn  / 2*(8*lsbyte))  % 2 ^ (8*buflen). 

•k 

* It  is  an  error  if  the  bignum  is  not  at  least  buflen  + Isbyte  bytes 

* long. 

* 

* This  code  assumes  that  the  compiler  has  the  minimal  intelligence 

* neded  to  optimize  divides  and  modulo  operations  on  an  unsigned  data 

* type  with  a power  of  two. 

*/ 

void 

bn i Ex t r a c t B i gBy t e s_ 1 6 ( BN WOR D 1 6 const  *n,  unsigned  char  *buf, 
a unsigned  Isbyte,  unsigned  buflen) 

{ 

n BNW0RD16  t = 0;n/*  Needed  to  shut  up  uninitialized  var  warnings  */ 
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n unsigned  shift; 


n Isbyte  +=  bufLen; 

n shift  = (8  * Lsbyte)  % 16; 

o Lsbyte  /=  (16/8);n  /*  Convert  to  word  offset  */ 

n BIGLITTLECn  -=  Lsbyte,  n +=  Lsbyte); 

n if  (shift) 

n n t = BIGLITTLE(n[-1 ],nC0:); 


□ 

n 

n 

Q 

n 

Q 

□ 

a 

} 


whiLe  (bufLen--)  { 
n if(!shift){ 

a n t = BIGLITTLE(*n++,* — n); 

n n shift=16; 

n > 

n shift-=8; 

o *buf++  = (unsigned  char)(t>>shift); 

} 


/* 

* Merge  a big-endian  array  of  bytes  into  a bignum  array. 

* The  array  had  better  be  big  enough.  This  is 

* equivaLent  to  extracting  the  entire  bignum  into  a 

* Large  byte  array,  copying  the  input  buffer  into  the 

* middLe  of  it,  and  converting  back  to  a bignum. 

* 

* The  buf  is  "Len"  bytes  Long,  and  its  *Last*  byte  is  at 

* position  "Lsbyte"  from  the  end  of  the  bignum. 

* 

* Note  that  this  is  a pain  to  get  right.  FortunateLy,  it's  hardLy 

* criticaL  for  efficiency. 

*/ 

void 

b n i I n s e r t B i g By t e s_1 6 ( BN WO R D 1 6 *n,  unsigned  char  const  *buf, 
unsigned  Lsbyte,  unsigned  bufLen) 

{ 

n BNW0RD16  t = 0;n/*  Shut  up  un i n i t i a L i z ed  varibaLe  warnings  */ 

n Lsbyte  +=  bufLen; 

n BIGLITTLE(n  -=  L s by t e / ( 1 6 / 8 ) , n +=  L s by t e / (1 6 / 8 ) ) ; 

n /*  Load  up  Leading  odd  bytes  */ 

n if  (Lsbyte  % (16/8))  { 

n n t = BIGLITTLE(* — n,*n++); 

n n t >>=  (Lsbyte  * 8)  % 16; 

n } 

n /*  The  main  Loop  - merge  into  t,  storing  at  each  word  boundary.  */ 

a whiLe  (bufLen--)  { 

a a t = (t  <<  8)  I *buf++; 

naif  ((--Lsbyte  % (16/8))  ==  0) 

nan  B I G LI TT LE ( *n++ , * — n)  = t; 

a } 

a /*  Merge  odd  bytes  in  t into  Last  word  */ 
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n Lsbyte  = CLsbyte  * 8)  % 16; 

n if  (Lsbyte)  ( 

n n t <<=  Lsbyte; 

n a t 1=  (((BNW0RD16)1  « Lsbyte)  - 1)  & B I G L I TT LE ( n C 0 ] , n C - 1 ] ) ; 

n n BIGLITTLE( nC0],nC-1 D ) = t; 

n > 


n return; 

} 


/* 

* Returns  a substring  of  the  L i t t L e-end i a n array  of  bytes  representation 

* of  the  bignum  array  based  on  two  parameters,  the  Least  significant 

* byte  number  (0  to  start  with  the  Least  significant  byte)  and  the 

* Length.  I.e.  the  number  returned  is  a representation  of 

* (bn  / 2^(8*Lsbyte)  ) X 2 (8*bufLen). 

* 

* It  is  an  error  if  the  bignum  is  not  at  Least  bufLen  + Lsbyte  bytes 

* Long. 

* 

* This  code  assumes  that  the  compiLer  has  the  minimaL  inteLLigence 

* neded  to  optimize  divides  and  moduLo  operations  on  an  unsigned  data 

* type  with  a power  of  two. 

*/ 

void 

bni Ext ract Li 1 1 L eBy t es_1 6(BNW0RD1  6 const  *n,  unsigned  char  *buf, 
n unsigned  Lsbyte,  unsigned  bufLen) 

{ 

n BNW0RD16  t = 0;n/*  Needed  to  shut  up  uninitiaLized  var  warnings  */ 

n BIGLITTLE(n  -=  L s by t e / ( 1 6 / 8 ) , n +=  L s by t e / ( 1 6 / 8 ) ) ; 


n 

n 


n 

a 


if  (Lsbyte  % (16/8))  ( 
n t = BIGLITTLE(* — n,*n++); 

n t >>=  (Lsbyte  % (16/8))  * 8 ; 

} 


a 

n 

n 

n 

□ 

□ 

} 


whi Le  (buf  Len--)  ( 

n if  ((Lsbyte++  % (16/8))  ==  0) 

n a t = BIGLITTLE(* — n,*n++); 

n *buf++  = (unsigned  char)t; 

n t >>=  8; 

} 


/* 

* Merge  a L i t t L e-e nd i a n array  of  bytes  into  a bignum  array. 

* The  array  had  better  be  big  enough.  This  is 

* equivaLent  to  extracting  the  entire  bignum  into  a 

* Large  byte  array,  copying  the  input  buffer  into  the 

* middLe  of  it,  and  converting  back  to  a bignum. 

* 

* The  buf  is  "Len"  bytes  Long,  and  its  first  byte  is  at 

* position  "Lsbyte"  from  the  end  of  the  bignum. 

* 

* Note  that  this  is  a pain  to  get  right.  FortunateLy,  it's  hardLy 

* criticaL  for  efficiency. 

*/ 
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void 

bn i I n s e r t L i t t L eBy t e s _1 6 ( B N WO R D 1 6 *n,  unsigned  char  const  *buf, 
unsigned  Lsbyte,  unsigned  buflen) 

{ 

n BNW0RD16  t = 0;n/*  Shut  up  uninitialized  varibale  warnings  */ 

n /*  Move  to  mo s t - s i g n i f i c a n t end  */ 

n Lsbyte  +=  buflen; 

a buf  +=  buflen; 

n BIGLITTLECn  -=  I s by t e / C 1 6 / 8 ) , n +=  I s by t e / ( 1 6 / 8 ) ) ; 

n /*  Load  up  leading  odd  bytes  */ 

n if  (lsbyte  % (16/8))  { 

n Q t = BIGLITTLE(* — n,*n++); 

n n t>>=(lsbyte*8)%16; 

n > 

n /*  The  main  loop  - merge  into  t,  storing  at  each  word  boundary.  */ 

n while  (buflen  — ) { 

n o t = (t  <<  8)  I *--buf; 

n n if  (( — lsbyte  % (16/8))  ==  0) 

n n n B I G L I TT LE ( * n++, * — n)  = t; 

n } 

H /*  Merge  odd  bytes  in  t into  last  word  */ 

n lsbyte  = (lsbyte  * 8)  % 16; 

n i f ( I sbyte  ) { 

n n t<<=lsbyte; 

a n t 1=  ( ( (BNW0RD16)1  <<  lsbyte)  - 1)  & B I G LI TT LE ( n C 0 : , n C -1 D ) ; 

a n BIGLITTLE(nC0:,n:-1 : ) = t; 

n > 

n return; 

} 

#ifdef  DEADCODEn/*  This  was  a precursor  to  the  more  flexible  bn  i Ex t r a c t By t e s */ 
/* 

* Convert  a big-endian  array  of  bytes  to  a bignum. 

* Returns  the  number  of  words  in  the  bignum. 

* Note  the  expression  "16/8"  for  the  number  of  bytes  per  word. 

* This  is  so  the  word-size  adjustment  will  work. 

*/ 

unsigned 

bn i F r omBy t e s_1 6 ( BN  WO R D 1 6 *a,  unsigned  char  const  *b,  unsigned  blen) 

{ 


n 

BNW0RD16  t; 

Q 

unsigned  alen  = 

(blen  + (16/8-1 ))/(16/8); 

n 

BIGLITTLE(a  -= 

alen,  a +=  alen); 

n 

while  (blen)  { 

a 

a t = 0; 

□ 

a dot 

u 

a a 

t = t <<  8 1 *b++; 

tt 

a > wh i 1 e 

(--blen  & (16/8-1)); 

n 

a BIGLITTLE(*a++,* — a)  = t; 

Q 

> 

n 

return  alen; 
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/* 

* Computes  the  GCD  ot  a and  b.  Modifies  both  arguments;  when  it  returns, 

* one  of  them  is  the  GCD  and  the  other  is  trash.  The  return  value 

* indicates  which:  0 for  a,  and  1 for  b.  The  Length  of  the  retuLt  is 

* returned  in  rlen.  Both  inputs  must  have  one  extra  word  of  precision. 

* alen  must  be  >=  blen. 

* 

* TODO:  use  the  binary  algorithm  (Knuth  section  4.5.2,  algorithm  B). 

* This  is  based  on  taking  out  common  powers  of  2,  then  repeatedly: 

* gcd(2*u,v)  = gcd(u,2*v)  = gcd(u,v)  - isolated  powers  of  2 can  be  deleted. 

* gcd(u,v)  = gcd(u-v,v)  - the  numbers  can  be  easily  reduced. 

* It  gets  Less  reduction  per  step,  but  the  steps  are  much  faster  than 

* the  division  case. 

*/ 

i n t 

bn i G c d_ 1 6 ( BN WO R D 1 6 *a,  unsigned  alen,  BNU0RD16  *b,  unsigned  blen, 
n unsigned  *rlen) 

f 

#if  BNYIELD 
n i n t y ; 

#end  i f 

n pgpAssertCalen  >=  blen); 


Q while 

n n 


a 

n 

n 

□ 


n 

□ 

□ 

D 


n 


n 


n 


□ 


□ D 

#if  BNYIELD 


(blen  !=  0)  { 

(void)bniDiv_16(BIGLITTLE(a-blen,a+bLen), 
alen  = bn i N o r m_1 6 C a , blen); 
if  (alen  ==  0)  { 
n *rLen=bLen; 

n returni; 

> 

(void)bniDiv_16(BIGLITTLE(b-aLen,b+alen), 
blen  = bn i No r m_1 6 ( b , alen); 


n n if  CbnYield  &&  (y  = bnYieldC))  < 0) 

n n n returny; 

#e nd i f 
n > 

n *rLen=aLen; 

n return0; 


} 


a,  alen. 


b , blen. 


b. 


3/ 


blen); 


a L e n ) ; 


/* 

* Invert  "a"  modulo  "mod"  using  the  extended  Euclidean  algorithm. 

* Note  that  this  only  computes  one  of  the  cosequences,  and  uses  the 

* theorem  that  the  signs  flip  every  step  and  the  absolute  value  of 

* the  cosequence  values  are  always  bounded  by  the  modulus  to  avoid 

* having  to  work  with  negative  numbers. 

* gcd(a,mod)  had  better  equal  1.  Returns  1 if  the  GCD  is  NOT  1. 

* a must  be  one  word  Longer  than  "mod".  It  is  overwritten  with  the 

* result. 

* TODO:  Use  Richard  Schroeppel's  *much*  faster  algorithm. 

*/ 

i nt 

bni Inv_1 6(BNW0RD1 6 *a,  unsigned  alen,  BNW0RD16  const  *mod,  unsigned  mien) 
{ 
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n BNW0RD16  *h ; a /*  Hold  a copy  of  mod  during  GCD  reduction  */ 

n BNW0RD16  *p;n  /*  Temporary  for  products  added  to  t0  and  t1  */ 

n BNW0RD16  *t0,  *t1;n  /*  Inverse  accumulators  */ 

n BNW0RD16  cy; 

n unsigned  blen,  t0Len,  tILen,  pLen; 

n i n t y ; 

n alen  = bn i No rm_1 6 ( a , alen); 

n ifClalen) 

n n return  1;n  /*  No  inverse  */ 


n mien  = bn i N o r m_1 6 ( mod , mien); 

n pgpAssert  (alen  <=  mien); 


n 

/* 

Inverse 

of  1 is  1 */ 

n 

i f 

(alen  == 

1 S8  BIGLITTLE(aC-1 :,a [0] ) ==  1) 

{ 

o 

a 

b n i 

Zero_1 6(BIGLITTLE(a-a len,a+a len). 

mlen-alen); 

n 

B 

return  0; 

n 

> 

n 

/* 

Allocate 

a pile  of  space  */ 

n 

BNI ALLOC ( b. 

BNW0RD16,  mlen+1); 

□ 

i f 

(b) 

{ 

n 

n 

/* 

D 

o 

* 

Although  products  are  guaranteed 

t 0 

always  be 

less 

than 

Q 

n 

* 

modulus,  it  can  involve  multiplying 

two  3-word 

numbe  rs 

a 

□ 

★ 

get  a 5-word  result,  requiring  a 

6th 

word  to  store 

a 0 

a 

n 

★ 

temporarily.  Thus,  mien  + 1. 

n 

a 

*/ 

n 

n 

BNIALLOC(p,  BNW0RD16,  mlen+1); 

□ 

a 

i f 

(p)  { 

□ 

n 

Q 

BNIALLOC(t0,  BNW0RD16,  mien) 

r 

n 

n 

n 

if  (t0)  { 

D 

Q 

n 

a BNIALL0C(t1,  BNW0RD16, 

mien); 

n 

n 

n 

n i f (t1  ) 

Q 

Q 

n 

n n n goto 

allocated; 

□ 

n 

Q 

a BNIFREE(t0,  mien); 

n 

n 

n 

> 

a 

n 

n 

BNIFREE(p,  mlen+1); 

n 

n 

> 

n 

n 

BNIFREE(b,  mlen+1); 

n 

y 

n 

return 

-1; 

allocated: 


n 

n 

n 

a 

□ 

n 

□ 

n 

D 

Q 

n 


/*  Set  t0  to  1 */ 
t0len  = 1; 

BIGLITTLEC t0C-1 t0[0: ) = 1; 


/*  b = mod  */ 

bn i C opy _1 6 ( b , mod,  mien); 

/*  blen  = mien  (implicitly)  */ 


/*t1=b/a;b=b%a*/ 

cy  = bn i 0 i v_1 6 ( t 1 , b,  mien,  a,  alen); 

*(BIGLITTLE(t1-(mlen-alen)-1,t1+(mlen-alen))) 


cy; 
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n tILen  = bn i No rm_1 6 ( 1 1 , m L en-a L en  + 1 ) ; 

n blen  = bniNorm_16(b,  aLen); 


□ 

a 

n 

u 

Q 

n 

n 

n 

n 

n 

u 

n 


/*  while  (b  > 1)  */ 

while  (blen  > 1 ||  B I G LI  TT  L E ( b C - 1 D , b C 0 ] ) !=  (BNW0RD16)1)  -C 

n /*q=a/b;a=a%b;*/ 

n if  (alen  < blen  ||  (alen  ==  blen  &&  bniCmp_16(a,  a,  alen)  < 0)) 

H n pgpAssert(0); 

n cy  = bniDiv_16(BIGLITTLECa-blen,a+blen),  a,  alen,  b,  blen); 

n *(BIGLITTLE(a-alen-1,a+alen))  = cy; 

n plen  = bniNorm_16(BIGLITTLE(a-blen,a+blen),  alen-blen+1); 

a pgpAssert(plen); 

n alen  = bn i No rm_ 1 6 ( a , blen); 

n if(!alen) 

n n goto  failure;n  /*  GCD  not  1 */ 


D 

n 

n 

n 

n 

a 

n 

a 

n 

D 

n 

n 

n 

n 

n 

n 

a 

□ 

n 

n 


n 

n 

s 

n 

n 

n 

n 

o 

n 

Q 

n 

a 

n 

n 

n 

n 

n 

Q 

n 

n 


/*t0+=q*t1;  */ 

pg p A s s e r t ( p I e n + 1 1 I e n <=  mlen  + 1); 

bniMul„16(p,  BIGLITTLE(a-blen,a+bLen),  plen,  t1,  tllen); 
plen  = bn i No rm_ 1 6 ( p , plen  + tllen); 
pg p A s s e r t ( p I e n <=  mien); 
if  (plen  > t0len)  i 

n bn i Ze ro„1 6 ( BI G LITTLE ( 1 0- 1 0 I en , 1 0 + t 0 I en ) , plen-t0len); 

n t0len=plen; 

> 


cy  = bniAddN_16(t0,  p,  plen); 
if  (cy)  { 

a if(t0len>plen){ 

n n cy  = bn  i Add  1 _1  6 ( B I G LI TT LE ( t 0- p I e n , 1 0 + p I e n ) , 

n n n n t0len“plen,  cy); 

a > 


a if(cy)-C 

a a BIGLITTLE(t0C-t0len-13,t0Ct0len:)  = cy; 

a a t 0 I en  + + ; 

a > 


> 


a 

a 

a 

a 

a 

a 

a 

a 

a 


a 

a 

a 

a 

a 

a 

a 

a 

a 


/*  if  (a  <=  1)  return  a ? t0  : FAIL;  */ 

if  (alen  <=  1 &&  B I G LI TT LE ( a E -1 3 , a E 0 J ) ==  (BNW0RD16)1)  i 
a if(alen==0) 

a a goto  faiLure;n  /*  FAIL  */ 

a pg p A s s e r t ( 1 0 I e n <=  mien); 

a bni Copy_1 6(a,  t0,  t0len); 

a bniZero_16(BIGLITTLE(a-t0Len,  a+t0len),  mlen-t0len); 

a goto  success; 

> 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


/*q=b/  a;b=b%a;*/ 

if  (blen  < alen  ||  (blen  ==  alen  &&  bniCmp_16(b,  a,  alen)  < 0)) 
a pgpAssert(0); 

cy  = bniDiv_16(BIGLITTLE(b-alen,b+alen),  b,  blen,  a,  alen); 
*(BIGLITTLE(b-blen-1,b+blen))  = cy; 

plen  = bniNorm_16(BIGLITTLE(b-aLen,b+alen),  blen-alen+1); 

pgpAssert(plen); 

blen  = bn i No r m_1 6 ( b , alen); 

if  (!blen) 

a goto  failure;n  /*  GCD  not  1 */ 
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/*  t1  += 


t0;  */ 


pgp As s e r t ( p L e n+ t 0 L en  <=  mLen+1); 

bm'Mul_16(p,  BIGLITTLE(b-aLen,b+aLen),  pLen,  t0,  t0Len); 
pLen  = bniNorm_16(p,  pLen  + t0Len); 
pgpAssertCpLen  <=  mien); 


n 

n 

i f 

(pLen  > tILen)  { 

□ 

D 

s 

bn i Z e r 0 

_16(BIGLITTLE(t1-t1Len,t1+tUen),  pLen-tUen); 

s 

n 

Q 

tILen  = 

pLen; 

□ 

n 

> 

□ 

Q 

cy 

= bniAddN_16(t1,  p,  pLen); 

n 

n 

i f 

( c y ) { 

n 

n 

□ 

if  (tILen  > pLen)  ( 

u 

n 

n 

a 

cy  = bni Add1_16(BIGLITTLE(t1-pLen,t0+pLen), 

n 

a 

n 

a 

a a t1Len-pLen,cy); 

□ 

n 

n 

> 

s 

n 

n 

if  ( c y ) 

{ 

n 

u 

n 

□ 

BIGLITTLE(t1 :-t1 Len-1 ],t1 [t1 Len])  = cy; 

□ 

a 

n 

a 

1 1 L e n + + ; 

n 

n 

n 

} 

n 

□ 

> 

#if  BNYIELD 

□ 

n 

i f 

(bnYieLd  SS 

(y  = bnYieLd()  < 0)) 

a 

n 

Q 

goto  y i 

e L d; 

#end  1 f 

D 

> 

n 

if  ( 

! b L e n ) 

□ 

n 

goto  faiLure;B 

/*  gcd(s,  mod)  !=  1 --  FAIL  */ 

n /*  return  mod-tl  */ 

n bniCopy_16(a,  mod,  mien); 

n pgp As se r t ( 1 1 I en  <=  mLen); 

n cy  = bniSubN_16(a,  t1,  tILen); 

a if(cy){ 

a a pgpAssert (mien  > tILen); 

a a cy  = bniSub1_16(BIGLITTLECa-t1Len,  a+tILen),  mLen-tILen,  cy); 

a a pgpAssert C ! cy); 

a > 


success  ; 

a BNIFREECtI,  mien); 

a BNIFREE(t0,  mien); 

a BNIFREECp,  mlen+l); 

a BNIFREECb,  mlen+1); 

□ 

a return0; 

faiLureia  n /*  GCD  is  not  1 - no  inverse  exists!  */ 

a y = 1; 


#if  BNYIELD 

y i e L d : 

#end  i f 

n 

BNIFREE(t1,  mLen); 

Q 

BNIFREE(t0,  mLen); 

Q 

BNIFREE(p,  mLen+1); 

n 

BNIFREE(b,  mLen+1); 

n 

return  y ; 
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} 
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/* 

* b n i 1 6 . h 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL 

* 

* $Id:  bni16.h,v  1.4. 2.1  1 997/06/07  09  : 49:30  mhw  Exp  $ 

*/ 


rights 


reserved. 


#ifndef  BNI16_H 
#define  BNI16_H 


#incLude  "bni.h" 

#ifndef  BNW0RD16 

terror  16-bit  bignum  Library  requires  a 16-bit  data  type 
#end  i f 

#ifdef  __cpLuspLus 
extern  "C"  t 

# e n d i f 

#ifndef  bniCopy_16 

void  bniCopy_16(BNW0RD16  *dest,  BNW0RD16  const  *src,  unsigned  Len); 

# e n d i f 

#ifndef  bniZero_16 

void  bn i Z e r o_ 1 6 ( BN WO R D 1 6 *num,  unsigned  Len); 

#endi f 

#ifndef  bniNeg_16 

void  bn i N e g _ 1 6 ( BN  WO R D 1 6 *num,  unsigned  Len); 

# e n d i f 

#ifndef  bniAdd1_16 

BNW0RD16  bn i Add  1 _1 6 ( BN  WO R D 1 6 *num,  unsigned  Len,  BNW0RD16  carry); 

# e n d i f 

#ifndef  bniSub1_16 

BNW0RD16  bn i S u b 1 _ 1 6 ( BN WO R D 1 6 *num,  unsigned  Len,  BNWORD16  borrow); 

#end i f 

#ifndef  bniAddN_16 

BNW0RD16  bn  i Ad  d N_  1 6 ( BN  WOR  D 1 6 *num1  , BNW0RD16  const  *nuni2,  unsigned  Len); 

#end i f 

#ifndef  bniSubN_16 

BNW0RD16  b n i S u bN_1  6 ( BN  WO  R D 1 6 *nuni1,  BNW0RD16  const  *num2,  unsigned  Len); 

#endi f 

#i f ndef  bni Cmp_1 6 

int  bn i Cmp_1 6 ( BNW0RD1 6 const  *num1,  BNW0RD16  const  *num2,  unsigned  Len); 

# e n d i f 

#ifndef  bniMuLN1_16 

void  bn i Mu L N 1 _ 1 6 ( BN WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k); 
#endi f 

#ifndef  b n i Mu L Ad d 1 _ 1 6 
BNW0RD1 6 

bn i Mu L Add  1 _ 1 6 C BN WOR D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k); 
#endi f 

#ifndef  bn i M u L S u b 1 _1 6 

BNW0RD16  bn i Hu L S ub 1 _ 1 6 ( BN WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len, 
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n n n BNW0RD16  k); 

#end i f 

#ifndef  bniLshift_16 

BNW0RD16  bniLshift_16(BNW0RD16  *nuffl,  unsigned  Len,  unsigned  shift); 

#end i f 

#ifndef  bniDoubLe_16 

BNW0RD16  bniDoubLe_16(BNW0RD16  *num,  unsigned  Len); 

# e n d i f 

#ifndef  bniRshift_16 

BNW0RD16  bniRshift_16(BNW0RD16  *nutn,  unsigned  Len,  unsigned  shift); 

# e n d i f 

#ifndef  bniMuL_16 

void  bni Mu L_1 6 (BNW0RD1 6 *prod,  BNW0RD16  const  *num1 , unsigned  Leni, 
n BNW0RD16  const  *num2,  unsigned  Len2); 

# e n d i f 

Sifndef  bniSquare_16 

void  bniSquare_16(BNW0RD16  *prod,  BNW0RD16  const  *num,  unsigned  Len); 

# e n d i f 

#ifndef  bniNorni_16 

unsigned  bniNorm_16(BNW0RD16  const  *nuni,  unsigned  Len); 

#endi f 

#ifndef  bniBits_16 

unsigned  bniBits_16(BNW0RD16  const  *nunt,  unsigned  Len); 

#endi f 

#ifndef  bn i Ex t r a c t B i g By t e s_ 1 6 

void  bn i Ext ra c t Bi gBy t es_1 6 ( BNWORD 1 6 const  *bn,  unsigned  char  *buf, 
n unsigned  Lsbyte,  unsigned  bufLen); 

#end i f 

#ifndef  bn i I n s e r t B i gy t e s_1 6 

void  bn i I nse r t Bi gBy t es_1 6 ( BNW0RD1 6 *n,  unsigned  char  const  *buf, 
n unsigned  Lsbyte,  unsigned  bufLen); 

# e n d i f 

#ifndef  bn i Ex t ra c t Li t t L eBy t es_1 6 

void  bni ExtractLi tt LeBytes_1 6(BNW0RD1 6 const  *bn,  unsigned  char  *buf, 
n unsigned  Lsbyte,  unsigned  bufLen); 

# e nd i f 

#ifndef  bn i I n s e r t L i t t L eBy t e s _1 6 

void  bn i I nse r t Li t t L eBy t es_1 6 ( BNW0RD1 6 *n,  unsigned  char  const  *buf, 
n unsigned  Lsbyte,  unsigned  bufLen); 

#end i f 

#ifndef  bniDiv21_16 

BNU0RD16  bniDiv21_16(BNW0RD16  *q,  BNW0RD16  nh,  BNW0RD16  nL,  BNW0RD16  d); 

# e nd i f 

Sifndef  bniDiv1_16 

BNW0RD16  bni Di v1_1 6(BNW0RD1 6 *q,  BNU0RD16  *rem, 
n BNU0RD16  const  *n,  unsigned  Len,  BNU0RD16  d); 

#end i f 

tfifndef  bniHoda_16 

unsigned  bn i ModQ_1 6 ( BNUOR D 1 6 const  *n,  unsigned  Len,  unsigned  d); 

# e n d i f 

#ifndef  bniDiv_16 
BNW0RD1 6 

bniDiv_16(BNW0RDl6  *q,  BNW0RD16  *n,  unsigned  nLen,  BNW0RD16  *d,  unsigned  dLen); 
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# e n d i f 

#ifndef  bniMontInv1_16 

BNW0RD16  bniMontInv1_16(BNW0RD16  const  x); 

#endi  f 

#ifndef  b n i Ho n t R ed u c e_ 1 6 

void  b n i Mon t R e d u c e_ 1 6 ( BN  WO R D 1 6 *n,  BNW0RD16  const  *mod,  unsigned  const  mien, 
BNW0RD16  inv); 

# e n d i f 

#ifndef  bniToMont_16 

void  bniToMont_16(BNW0RD16  *n,  unsigned  nLen,  BNW0RD16  *mod,  unsigned  mien); 

# e n d i f 

#ifndef  bn i F romMont_1 6 

void  bniFromMont_16(BNW0RD16  *n,  BNW0RD16  *mod,  unsigned  Len); 

#endi  f 

#ifndef  bniExpHod_16 

int  b n i Ex pMod_ 1 6 ( B N WO R D 1 6 *resuLt,  BNW0RD16  const  *n,  unsigned  nLen, 
n BNW0RD16  const  *exp,  unsigned  eLen,  BNW0RD16  *mod,  unsigned  mien); 

#end  i f 

#ifndef  bn i D oub L e E x pHod_ 1 6 

int  b n i Do ub L e E x pH od_1 6 C BN  WO R D 1 6 *resuLt, 

n BNW0RD16  const  *n1,  unsigned  nILen,  BNW0RD16  const  *e1,  unsigned  elLen, 

n BNW0RD16  const  *n2,  unsigned  n2Len,  BNW0RD16  const  *e2,  unsigned  e2Len, 

n BNW0RD16  *mod,  unsigned  mien); 

# e n d i f 

#ifndef  bniTwoExpHod_16 

int  b n i Two E xpMod_ 1 6 ( BN WO R D 1 6 *n,  BNW0RD16  const  *exp,  unsigned  elen, 
a BNW0RD16  *mod,  unsigned  mien); 

# e n d i f 

#ifndef  bniGcd_16 

int  bniGcd_16(BNW0RD16  *a , unsigned  alen,  BNW0RD16  *b,  unsigned  blen, 
n unsigned  *rLen); 

# e n d i f 

#ifndef  bnilnv_16 

int  bn i I n v_1 6 ( BN  WO R D 1 6 *a,  unsigned  alen,  BNW0RD16  const  *mod,  unsigned  mien); 
#end i f 

#ifdef  cplusplus 

} 

#end  i f 

#endif  /*  BNI16  H */ 
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/* 

* bni68000.c  - 16-bit  bignum  primitives  for  the  68000  (or  68010)  processors. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* This  was  written  for  Hetrowerks  C,  and  whiLe  it  shouLd  be  reasonabLy 

* portabLe,  NOTE  that  Metrowerks  Lets  a caLLee  trash  a0,  a1,  d0,  d1,  and  d2. 

* Some  680x0  compiLers  make  d2  caLLee-save,  so  instructions  to  save  it 

* wiLL  have  to  be  added. 

* 

* This  code  supports  16  or  32-bit  ints,  based  on  LIINT_HAX. 

* RegardLess  of  UINT_MAX,  onLy  bignums  up  to  64K  words  (1  miLLion  bits) 

* are  supported.  (68k  hackers  wi L L recognize  this  as  a consequence  of 

* using  dbra  . ) 

* 

* These  primitives  use  L i t t L e-endi an  word  order. 

* (The  order  of  bytes  within  words  is  irreLevant  to  this  issue.) 

* 

* $Id:  bni68000.c,v  1.5. 2.1  1 997/06/07  09:49:31  mhw  Exp  $ 

*/ 


#incLude  <Limits.h> 


#incLude  "bni.h"  /*  ShouLd  incLude  bni68000.h  */ 


/* 

* The  Metrowerks  C compiLer  (1.2.2)  produces  bad  68k  code  for  the 

* foLLowing  input,  which  happens  to  be  the  inner  Loop  of  bniSubI, 

* so  a few  Less  than  criticaL  routines  have  been  recoded  in  assembLy 

* to  avoid  the  bug.  (Optimizer  on  or  off  does  not  matter.) 

•k 

* unsigned 

* d e c r erne n t ( u n s i g n ed  *num,  unsigned  Len) 

* { 

* do  { 

* if  ((*num++) — !=  0) 

* returnO; 

* > whiLe  ( — Len); 

* returni; 

* } 

*/ 

asm  BNW0RD16 

bn i Subi _1 6 ( BNWORDI 6 *num,  unsigned  Len,  BNW0RD16  borrow) 

{ 


movea  . L 

4(sp),a0 

/* 

num  */ 

#if  UINT 

_MAX  == 

0xf f f f 

mo V e . w 

10(sp),d0 

/* 

borrow 

*/ 

# e L s e 

move  . w 

12(sp),d0 

/* 

borrow 

*/ 

Send  i f 

s u b . w 

d0, (a0)+ 

b c c 

done 

Sif  UINT 

_MAX  == 

0xf f f f 

move  . w 

8(sp),d0 

/* 

Len  * / 

#e  L s e 

move . w 

10(sp),d0 

/* 

Len  * / 

Send i f 

subq . w 

S2,d0 
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Loop  : 


done  : 


bcs 

subq  . w 

#1 , (a0)+ 

d b c c 

d0, L oop 

mo veq  . L 

#0,d0 

addx  . w 

d0,d0 

r t s 

done 


asm  BNW0RD16 

bn i A d d 1 _1 6 ( BN WO R D 1 6 *num,  unsigned  Len,  BNW0RD16  carry) 
{ 


#e  L se 
#endi f 


# e L s e 
#end  i f 

Loop: 

done  : 


movea  . L 

4(sp),a0 

/* 

n urn  * / 

■_MAX  = = 

0xf f f f 

mo V e . w 

10(sp),d0 

/* 

carry 

move  . w 

1 2 ( sp ) , d0 

/* 

carry 

add  . w 

d0, Ca0)+ 

b c c 

done 

_MAX  == 

0xf f f f 

move  . w 

8 ( sp ) , d0 

/* 

L e n * / 

move  . w 

10(sp),d0 

/* 

L e n * / 

subq  . u 

#2,d0 

bcs 

done 

addq  . w 

#1  , (a0)  + 

db  c c 

d 0 , Loop 

mo V e q . L 

na,(i0 

addx  . w 

d0,d0 

r t s 

asm  void 

bn i Hu L N 1 _ 1 6 ( BN  WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k) 


# e L s e 


#end i f 


move . w 

d3,-(sp) 

/* 

2 bytes  of  stack  frame  */ 

mo ve . L 

2+4(sp),a1 

/* 

out  */ 

mo ve . L 

2+8(sp),a0 

/* 

in  * / 

_HAX  == 

0xf f f f 

move  . w 

2+12(sp),d3 

/* 

L e n * / 

move  . w 

2+14(sp),d2 

/* 

k */ 

move . w 

2+14(sp),d3 

/* 

Len  (Low  16  bits)  */ 

move . w 

2+16(sp),d2 

/* 

k */ 

move . w 

(a0)+,d1 

/* 

First  muLtipLy  */ 

mu  L u . w 

d2,d1 

move . w 

d1 , (a1  ) + 

c L r . w 

d1 

swap 

d1 

subq  . w 

#1  ,d3 

/* 

Setup  for  Loop  unroLLing 
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L s r . w 
b c s . s 
beq  . s 

s ubq  . w 
mo ve  . L 

m16_Loop: 

mo ve  . w 
mu  I u . u 
add  . L 
move  . w 
c L r . un 
swapD 

ml 6_even : 

mo ve  . w 
mu  L u . u 
add  . L 
move  . u 
c L r . w 
swap 

d b ra 

mo ve  . u 
move . w 
rt  s 

m16_short : 

mo ve  . w 
move . w 
r t s 

> 


#1  ,d3 
ml 6_even 
m16_short 

#1  ,d3 
d1  ,d0 


(a0)+,d1 

d2,d1 

d0,d1 

d1 , (a1  ) + 

d1 

d1 


(a0)+,d0 
d2,d0 
d1  ,d0 
d0, Cal  ) + 
d0 
d0 

d3,m16_Loop 

d0,  (a1  ) 
(sp)+,d3 


d1 , (a1  ) 
(sp)+,d3 


/*  Set  up  software  pipeline  properly  */ 


asm  BNW0RD16 

bni Mu  I Addi _1 6(BNW0RD1 6 *out,  BNW0RD16  const  *in,  unsigned  len,  BNU0RD16  k) 
{ 


mo ve . w 

d4,-(sp) 

c 1 r . w 

d4 

move . w 

d3,-(sp) 

/* 

4 bytes  of  stack  frame  */ 

move . L 

4+4(sp),a1 

/* 

out  * / 

move . 1 

4+8(sp),a0 

/* 

in  * / 

#if  UINT 

_MAX  == 

0xf f f f 

mo ve . w 

4+12(sp),d3 

/* 

1 en  */ 

move . w 

4+14(sp),d2 

/* 

k */ 

Uelse 

move . w 

4+14(sp),d3 

/* 

len  (low  16  bits)  */ 

move . w 

4+16(sp),d2 

/* 

k */ 

#end i f 

move . w 

Ca0)+,d1 

/* 

First  multiply  */ 

mu  L u . w 

d2,d1 

add . w 

d1 , (a1  ) + 

c 1 r . w 

d1 

swap 

d1 

addx  . w 

d4,d1 
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s u bq  . w 

#1  ,d3 

/* 

Setup 

for  Loop 

unroLLing 

*/ 

L s r . w 

#1  ,d3 

b c s . s 

ma16_even 

beq  . s 

ma16_short 

s u bq  . w 

#1  ,d3 

/* 

Set  up 

software 

pipeLine 

proper  Ly 

mo ve  . L 

d1  ,d0 

ma 1 6_  L oop : 

move .w  (a0)+,d1 
muLu.w  d2,d1 
add. I d0,d1 
add.w  d1,(a1)+ 
c L r . w d 1 
swap  d 1 
addx . w d4,d1 
ma 1 6_e ven : 

move . w (a0)+,d0 
muLu.w  d2,d0 
add.L  d1,d0 
add . w d0, (a1  ) + 
c L r . w d0 
swap  d 0 
addx . w d4, d0 

dbra  d3,ma16_Loop 


move.w  (sp)+,d3 
move -w  (sp)+,d4 
rt  s 

mal 6_short : 

move.w  (sp)+,d3 
move.L  d1,d0 
move .w  (sp)+,d4 
rt  s 

} 


asm  BNW0R016 

bn i Mu L S u b 1 _1 6 ( BN WO R D 1 6 *out,  BNW0RD16  const  *in,  unsigned  Len,  BNW0RD16  k) 
{ 


move.w 

d4,-( sp) 

c L r . w 

d4 

move . w 

d3,-(sp) 

/* 

4 bytes  of  stack  frame  */ 

move . L 

4+4Csp),a1 

/* 

out  */ 

mo ve . L 

4 + 8 ( sp ) ^ a0 

/* 

in  * / 

#if  UINT_HAX  == 

0xf f f f 

move . w 

4+1 2(sp),d3 

/* 

L e n * / 

move . u 

4+14(sp),d2 

/* 

k */ 

#e  1 se 

move.w 

4+14(sp),d3 

/* 

Len  (Low  16  bits)  */ 

move . w 

4+16(sp),d2 

/* 

k */ 

#end i f 

move . w 

(a0)+,d1 

/* 

First  muLtipLy  */ 

muLu.w  d2,d1 
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s ub  . w 

d1 , (a1  ) + 

c L r . w 

d1 

swap 

d1 

a dd  X . w 

d4,d1 

s ubq  . w 

#1  ,d3 

/ * Setup 

for  Loop 

unrol Ling 

*/ 

L s r . w 

#1  ,d3 

bcs  . s 

ms16_even 

beq  . s 

msl 6_short 

subq  . w 

#1  ,d3 

/*  Set  up 

software 

pi pe  L i ne 

properLy 

move . L 

d1  ,d0 

ms  1 6_  L OOP : 

mo V e . w 
mu  L u . w 
add  . L 
s u b . w 
c L r . w 
swap 
a d d X . w 

ms16_even: 

mo ve  . w 
mu  L u . w 
a dd  . I 
sub  . w 
c L r . u 
swap 
a ddx  . w 

dbra 

move  . w 
move  . w 
rt  s 

msl 6_short : 

mo ve  . w 
move.  L 
mo V e . w 
r t s 

} 


(a0)+,d1 

d2,d1 

d0,d1 

d1 , (a1  ) + 

d1 

d1 

d4,d1 


(a0)+,d0 

d2,d0 

d1  ,d0 

d0,(a1)+ 

d0 

d0 

d4,  d0 

d3,ms1 6_Loop 

(sp)+,d3 

(sp)+,d4 


(sp)+,d3 
d1  ,d0 
(sp)+,d4 


/*  The  generic  Long/short  divide  doesn't  know  that  nh  < d */ 
asm  BNU0RD16 

bniDiv21  16(BNW0RD16  *q,  BNU0RD16  nh,  BNW0RD16  nL,  BNW0RD16  d) 


{ 

move  . L 

8 ( sp ) , d0n 

d i V u . wn 

12(sp),d0 

move.  L n 

4(sp),a0 

mo V e . wn 

d0, (a0) 

c L r . wn 

d0 

s wa  pn 

d0 

r t s 

> 

asm  unsigned 

bniModQ_16(BNW0RD16  const  *n. 


n /*nh*and*nL*/ 


unsigned  Len,  BNW0RD16  d) 
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{ 


move  . L 

4(sp),a0 

/* 

n * / 

moveq . 

Ln#0,d1 

#if  UINT_MAX  = 

= 0xffff 

move  . w 

8 ( s p ) , d 1 

/* 

L e n * / 

mo ve  . w 

10(sp),d2 

/* 

d */ 

# e L s e 

move . w 

10(sp),d1 

/* 

Len  (Low  16  bits)  */ 

move  . w 

12(sp),d2 

/* 

d */ 

#endi f 

n □ 

add. In  d1,a0 

n Q 

add. In  d1,a0n 

n 

n /*  n +=  Len  */ 

n n 

moveq. Ln#0,d0 

subq  . w 

#1  ,d1 

mq16_Loop: 

move  . w 

-(a0),d0n 

n 

/*  Assemble  remainder  and  new  word 

d i vu  . w 

d2,d0  n 

/* 

Put  remainder  in  high  half  of  d0  */ 

dbra  d 1 , mq 1 6_ L oop 

mql 6_done : 

c I r . H d0 
swap  d0 
r t s 

> 


/* 

* Detect  if  this  is  a 32-bit  processor  (68020+  *or*  CPU32). 

* Both  the  68020+  and  CPU32  processors  (which  have  32 x 32->64-b i t 

* muLtipLy,  what  the  32-bit  math  Library  wants)  support  scaled  indexed 

* addressing.  The  68000  and  68010  ignore  the  scale  selection 

* bits,  treating  it  as  *1  all  the  time.  So  a 32-bit  processor 

* will  evaluate  -2 ( a 0, a 0 . w*2 ) as  1+1+2-2  = 1. 

* A 16-bit  processor  will  compute  1+1-2  = 0. 

* 

* Thus,  the  return  value  will  indicate  whether  the  chip  this  is 

* running  on  supports  32 x32->64-b i t multiply  (mulu.L). 

*/ 


asm  i nt 


i s68020(voi d) 

{ 

machine 

68020 

lea 

1 ,a0 

#i  f 0 

lea 

-2(a0,a0.w*2),a0n 

# e L s e 

d c . w 

0x41f0,  0x82fe 

#endi f 

move  . L n 

a0,  d0 

> 

r t s 

/*  Metrowerks  won't  asm  this,  arrgh  */ 


/* 

* Since  I had  to  h a nd-a s s emb I e that  fancy  addressing  mode,  I had  to  study 

* up  on  680x0  addressing  modes. 

* A summary  of  680x0  addressing  modes. 

* A 68000  effective  address  specifies  an  operand  on  an  instruction,  which 

* may  be  a register  or  in  memory.  It  is  made  up  of  a 3-bit  mode  and  a 
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* 

ic 

3-bit  register  specifier. 

The  meanings  of 

the 

various  modes  are: 

* 

000 

r e g 

- D n , n 

specified 

by  "reg" 

* 

001 

reg 

c 

c 

< 

1 

specified 

by  "reg" 

* 

010 

r e g 

- (An) 

★ 

011 

reg 

- ( An ) + 

* 

100 

reg 

- - ( An  ) 

★ 

101 

reg 

- d16(An),  one  16- 

bit  di splacement 

word 

follows,  sign-extended 

if 

1 1 0 

reg 

- Fancy 

addressi ng 

mode  off  of  An, 

see 

extension  word  below 

* 

1 1 1 

000 

- a b s . W , 

one  16-bit  signed  absolute  address  follows 

* 

1 1 1 

001 

- abs . L, 

one  32-bit  absolute  address  follows 

★ 

1 1 1 

010 

- d16(PC),  one  16- 

bit  displacemnt 

word 

follows,  sign-extended 

* 

1 1 1 

011 

- Fancy 

addressi ng 

mode  off  of  PC, 

see 

extension  word  below 

★ 

1 1 1 

1 00 

- ^immediate,  followed  by  16  or  32 

bits 

of  immediate  value 

* 

1 1 1 

1 01 

- unused 

, reserved 

★ 

1 1 1 

1 1 0 

- unused 

, reserved 

* 

1 1 1 

1 1 1 

- unused 

, reserved 

* 


* Memory  references  are  to  data  space,  except  that  PC-reLative  references 

* are  to  program  space,  and  are  read-only. 

* 

* Fancy  addressing  modes  are  followed  by  a 16-bit  extension  word,  and  come 

* in  "brief"  and  "full"  forms. 

* The  "brief"  form  looks  like  this.  Bit  8 is  0 to  indicate  this  form: 

* 

*1111111 

*65432  1 0987654321  0 

* + + + J. + + h + + + + + + + + + 

* |A/D|  register  |L/U|  scale  1 0 | 8-bit  signed  displacement  | 

* + 1 1 1 1 1 1 1 1 1 1 h 1 1 1 1 ^ 

* 

* The  basic  effective  address  specifies  a 32-bit  base  register  - A0  through 

* A7  or  PC  (the  address  of  the  following  instruction). 

* The  A/D  and  register  fields  specify  an  index  register.  A/D  is  1 for 

* address  registers,  and  0 for  data  registers.  L/W  specifies  the  length 

* of  the  index  register,  1 for  32  bits,  and  0 for  16  bits  (sign-extended). 

* The  scale  field  is  a left  shift  amount  (0  to  3 bits)  to  apply  to  the 

* sign-extended  index  register.  The  final  address  is  d8 ( An , Rn . X*S C A LE ) , 

* also  written  ( d 8 , An , R n . X* S C A LE ) . X is  "W"  or  "L",  SCALE  is  1,  2,  4 or  8. 

* "*1"  may  be  omitted,  as  may  a d8  of  0. 

it 

* The  68000  supports  this  form,  but  only  with  a scale  field  of  0. 

* It  does  NOT  (says  the  HC68030  User's  Manual  M C 68030 UM / A D , section  2.7) 

* decode  the  scale  field  and  the  following  format  bit.  They  are  treated 

* as  0 . 

* I recall  (I  don't  have  the  data  book  handy)  that  the  CPU32  processor 

* core  used  in  the  683xx  series  processors  supports  variable  scales, 

* but  only  the  brief  extension  word  form.  I suspect  it  decodes  the 

* format  bit  and  traps  if  it  is  not  zero,  but  I don't  recall. 

* 

* The  "full"  form  (680x0,  x >=  2 processors  only)  looks  like  this: 

★ 

* 1 1 1 1 1 1 1 

*654321  0987654321  0 

* + + + + H h H + + + H + + + + + + 

* |A/D|  register  |L/W|  scale  | 1 | BS | IS|BD  size|  0 | P |0D  size| 

* .) H 1 1 1 1 ^ 1 h h 1 1 1 K h 1 + 

* 
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★ 

★ 

★ 

* 

"k 

•k 

* 

* 

Hr 

* 

★ 

★ 

★ 

★ 

★ 

* 

* 

Hr 

Hr 

* 

* 

Hr 

★ 

Hr 

* 

Hr 

Hr 

* 

k 

k 

Hr 

Hr 

★ 

Hr 

Hr 

Hr 

* 

Hr 

* 


The  first  8 bits  are  interpreted  the  same  way  as  in  the  brief  form, 
except  that  bit  8 is  set  to  1 to  indicate  the  fuLL  form. 

BS,  Base  Suppress,  if  set,  causes  a value  of  0 to  be  used  in  place  of 
the  base  register  value.  If  this  is  set,  the  base  register 
specified  is  irrelevant,  except  that  if  it  is  the  PC,  the  fetch  is 
still  done  from  program  space.  The  specifier  "ZPC"  can  be  used  in 
place  of  "PC"  in  the  effective  address  mnemonic  to  represent  this 
case  . 

IS,  Index  Suppress,  if  set,  causes  a value  of  0 to  be  used  in  place 
of  the  scaled  index  register.  In  this  case,  the  first  7 bits  of  the 
extension  word  are  irrelevant. 

BD  size  specifies  the  base  displacement  size.  A value  of  00 
in  this  field  is  illegal,  while  01,  10  and  11  indicate  that  the 
extension  word  is  followed  by  0,  1 or  2 16— bit  words  of  base  displacement 
(zero,  sign-extended  to  32  bits,  and  mo s t -s i g n i f i c a n t word  first, 
respectively)  to  add  to  the  base  register  value. 

Bit  3 is  unused. 

The  P bit  is  the  pre/post  indexing  bit,  and  only  applies  if  an  outer 
displacement  is  used.  This  is  explained  later. 

OD  size  specifies  the  size  of  an  outer  displacement.  In  the  simple 
case,  this  field  is  set  to  00  and  the  effective  address  is 
(di sp,An,Rn . X*SCALE)  or  ( d i s p , PC , R n . X* S C A L E ) . 

In  this  case  the  P bit  must  be  0.  Any  of  those  compnents  may  be 
suppressed,  with  a BD  size  of  01,  the  BS  bit,  or  the  IS  bit. 

If  the  OD  size  is  not  00,  it  encodes  an  outer  displacement  in  the  same 
manner  as  the  BD  size,  and  0,  1 or  2 16— bit  words  of  outer  displacement 
follow  the  base  displacement  in  the  instruction  stream.  In  this  case, 
this  is  a d ou b I e- i nd i r e c t addressing  mode.  The  base,  base  displacement, 
and  possibly  the  index,  specify  a 32-bit  memory  word  which  holds  a value 
which  is  fetched,  and  the  outer  displacement  and  possibly  the  index  are 
added  to  produce  the  address  of  the  operand. 

If  the  P bit  is  0,  this  is  pre-indexed,  and  the  index  value  is  added 
before  the  fetch  of  the  indirect  word,  producing  an  effective  address 
of  C C d i s p , A n , R n . X* S C A LE D , d i s p ) . If  the  P bit  is  1,  the  post-indexed  case, 
the  memory  word  is  fectched  from  base-t-base  displacement,  then  the  index 
and  outer  displacement  are  added  to  compute  the  address  of  the  operand. 
This  effective  address  is  written  ( C d i s p , An D , Rn . X* S C A LE , d i s p ) . 

(In  both  cases,  "An"  may  also  be  "PC"  or  "ZPC".) 

Any  of  the  components  may  be  omitted.  If  the  index  is  omitted  (using  the 
IS  bit),  the  P bit  is  irrelevant,  but  must  be  written  as  0. 


Hr 

Thus 

legal  combinations  of  IS,  P and  OD  si: 

* 

0 

0 

00 

- 

( d i s p , An , Rn . X* S C A LE ) , also  written 

Hr 

0 

0 

01 

- 

(Cdisp,An,Rn.X*SCALE:) 

Hr 

0 

0 

1 0 

- 

(Cdisp,An,Rn.X*SCALE:,d16) 

Hr 

0 

0 

1 1 

- 

(i:disp,An,Rn.X*SCALE:,d32) 

★ 

0 

1 

01 

- 

(Cdisp,An:,Rn.X*SCALE) 

★ 

0 

1 

10 

- 

(Cdisp,An:,Rn.X*SCALE,d16) 

Hr 

0 

1 

1 1 

- 

(Cdisp,An:,Rn.X*SCALE,d32) 

Hr 

1 

0 

00 

- 

(disp,An),  also  written  disp(An) 

★ 

1 

0 

01 

- 

(Cdisp,An]) 

Hr 

1 

0 

10 

- 

( Cdi  sp,AnI!,d1  6) 

Hr 

*/ 

1 

0 

1 1 

— 

( Cdi sp, AnD,d32) 

/*  45678901234567890123456789012345678901234567890123456789012345678901234567*/ 
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/* 

* bni68000.h  - 16-bit  bignum  primitives  for  the  68000  (or  68010)  processors. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* These  primitives  use  L i t t L e -e nd i a n word  order. 

* (The  order  of  bytes  within  words  is  irreLevant.) 

* 

* $Id:  bni68000.h,v  1.4. 2.1  1997/06/07  09:49:31  mhw  Exp  $ 

*/ 

#define  BN_LI TT L E_ E N D I AN  1 

typedef  unsigned  short  bnword16; 

^define  BNW0RD16  bnword16 

#ifdef  __cpLuspLus 
extern  "C"  ( 

#end  i f 

bnword16  bn i S ub 1 _1 6 ( bn  wo r d1 6 *num,  unsigned  Len,  bnword16  borrow); 

bnword16  bn i Add  1 _1 6 ( bn wo r d 1 6 *num,  unsigned  Len,  bnword16  carry); 

void  bn i Mu L N1 _1 6 ( bn  wo rdl 6 *out,  bnword16  const  *in,  unsigned  Len,  bnword16  k); 

bnword16 

bn i Mu L Ad d 1 _ 1 6 ( bn wo r d 1 6 *out,  bnword16  const  *in,  unsigned  Len,  bnword16  k); 
bnword16 

bn i Mu L S u b 1 _1 6 ( bn wo r d 1 6 *out,  bnword16  const  *in,  unsigned  Len,  bnword16  k); 
bnword16  bn i D i v2 1 _1 6 ( bn wo r d1 6 *q,  bnword16  nh,  bnword16  nL,  bnword16  d); 
unsigned  bniModQ_16(bnword16  const  *n,  unsigned  Len,  bnword16  d); 

int  is68020(void); 

#ifdef  cpLuspLus 

> 

#e nd i f 

/*  ^define  the  vaLues  to  excLude  the  C versions  */ 

^define  bniSub1_16  bniSub1_16 
^define  bniAdd1_16  bniAdd1_16 
^define  bniMuLN1_16  bniMuLN1_16 
^define  bni Mu L Addi _1 6 bn i Mu L Add  1 _1 6 
^define  bn i Mu L S u b 1 _ 1 6 bn i Mu L S u b1 _1 6 
^define  bniDiv21_16  bniDiv21_16 
//define  bniMod9_16  bniMod9_16 

/*  ALso  incLude  the  68020  definitions  for  16/32  bit  switching  versions.  */ 
//incLude  "bni68020.h" 
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/* 

* bni68020.c  - 32-bit  bignum  primitives  for  the  68020+  (0r  683xx)  processors. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by  CoLin  PLumb 

"k 

* $Id:  bni68020.c,v  1.6. 2.1  ! ^7  09:49:31  mhw  Exp  $ 

* 

* This  was  written  for  Hetrowerks  C,  and  whiLe  it  shouLd  be  reasonabLy 

* portabLe,  NOTE  that  Hetrowerks  Lets  a caLLee  trash  a0,  a1,  d0,  d1,  and  d2. 

* Some  680x0  compiLers  make  d2  caLLee-save,  so  instructions  to  save  it 

* wiLL  have  to  be  added. 

* 

* This  code  supports  16  or  32-bit  ints,  based  on  UINT_MAX. 

* RegardLess  of  UINT_MAX,  onLy  bignums  up  to  64K  words  (2  miLLion  bits) 

* are  supported.  (68k  hackers  wiLL  recognize  this  as  a consequence  of 

* using  dbra.) 

* 


* Under  the  Code  Fragment  Manager,  different  caLLing  conventions  appLy. 

* The  caLLed  function  pops  its  own  arguments  (unLess  it's  variadic), 

* and  aLL  arguments  are  passed  in  4-by t e -a L i g n e d stack  sLots,  even 

* if  they're  smaLLer  that  4 bytes.  FortunateLy,  this  onLy  requires 

* minor  hacking. 

"k 


* These  primitives  use  L i t t L e-e nd i a n word  order. 

* (The  order  of  bytes  within  words  is  irreLevant  to  this  issue.) 

* 


* TODO:  ScheduLe  this  for  the  68040's  pipeLine.  (When  I get  a 68040  manuaL.) 
*/ 


SincLude  <Limits.h> 

SincLude  "bni.h"  /*  ShouLd  incLude  bni68020.h  */ 


/* 

* The  Metrowerks  C compiLer  (1.2.2)  produces  bad  68k  code  for  the 

* foLLowing  input,  which  happens  to  be  the  inner  Loop  of  bniSubI, 

* so  a few  Less  than  criticaL  routines  have  been  recoded  in  assembLy 

* to  avoid  the  bug.  (Optimizer  on  or  off  does  not  matter.) 

* 


* unsigned 

* de c r emen t ( un s i g n ed  *num,  unsigned  Len) 

* { 

* do  { 

* if  ((*num++)--  !=  0) 

* return0; 

* > whiLe  ( — Len); 

* returni; 

* } 

*/ 

asm  BNW0RD32 

bn  i S ubi  _32 ( BNW0RD32  *num,  unsigned  Len,  BNW0RD32  borrow) 

{ 

movea . L 4(sp),a0  /*  num  */ 

#if  UINT_MAX  ==  0xffff  S&  IGENERATINGCFM  &&  !defined( CFM68K 

move.L  10(sp),d0  /*  borrow  */ 


# e L s e 


) 
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move.L  12(sp),d0 

#end i f 


/*  borrow  */ 


s u b . L 
b c c 

#if  UINT  MAX  == 


move  . w 

#e  L se 

mo V e . w 

#endi f 

subq  . u 

b c s 

Loop: 

subq. L 

dbcc 

done: 


d0, (a0)+ 

done 

0xffff  &&  ! GENERATINGCFM  &&  !defined( 


8 ! sp  ) , d0 

/* 

L e n * / 

10!sp),d0 

/* 

L e n * / 

#2,d0 

done 


#1  , (a0)  + 
d0 , Loop 


moveq.L  #0,d0 
addx.u  d0^d0 

#if  GENERATINGCFM  ||  defined! CFM68K ) 

a a rtdn  n #12 

#e  L s e 


rt  s 

#e  nd i f 

> 


C FM68K ) 


asm  BNW0RD32 


bni Addi _ 

f 

32!BNU0RD32  *num. 

unsigned 

Len,  BNW0RD32  carry) 

\ 

movea  . L 

4!sp},a0 

/* 

num  * / 

#if  UINT 

_MAX  == 

0xffff  && 

IGENERATINGCFM  S& 

! def i ned! CFM68K_ 

_) 

move  . L 

10!sp),d0 

/* 

carry  * / 

#e  L se 

move  . L 

12!sp),d0 

/* 

carry  * / 

#endi f 

add  . L 

d0,  !a0)  + 

b c c 

done 

#if  UINT 

_MAX  == 

0xffff  && 

IGENERATINGCFM  && 

Idef ined! CFM68K_ 

_) 

move  . w 

8!sp),d0 

/* 

Len  */ 

# e L s e 

move  . w 

10!sp}^d0 

/* 

Len  */ 

#end i f 

subq  . w 

#2,d0 

Loop: 


done  : 


b c s done 

addq .L  #1,(a0)+ 
dbcc  d0,Loop 


moveq  . L #0, d0 
addx . w d0,d0 

#if  GENERATINGCFM  ||  defined! CFM68K ) 

n n rtdn  n #12 

# e L s e 


r t s 

# e nd i f 
} 


asm  void 

bn  i Mu L N 1 _32 ! BN WOR D 32  *out,  BNW0RD32  const  *in,  unsigned  Len,  BNW0RD32  k) 

{ 
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machine  68020 

movem.L  d3-d5 , - ( s p ) /*  12  bytes  of  extra  data  */ 

moveq.L  #0,d4 


move  . L 

1 6(sp),a1 

/* 

out  * / 

move. L 

20(sp),a0 

/* 

in  * / 

#if  UINT 

_HAX  == 

0xffff  && 

! GENERATINGCFM  &&  IdefinedC CFM68K 

mo V e . w 

24(sp),d5 

/* 

L e n * / 

move. L 

26(sp),d2 

/* 

k */ 

#e  L se 

mo ve  . w 

26Csp),d5 

/* 

L e n * / 

move  . L 

28(sp),d2 

/* 

k */ 

# e n d i f 

move. L 

Ca0)+,d3 

/* 

First  muLtipLy  */ 

mu  L u . L 

move.  L 

d2,d1 : d3 
d3,  (a1  ) + 

/* 

dc.w  0x4c02,  0x3401  */ 

) 


subq  . w 

#1  ,d5 

/*  Setup 

for  Loop 

unroL  Ling 

*/ 

L s r . w 

#1  ,d5 

b c s . s 

m32_even 

beq  . s 

m32_short 

5 ubq  . w 

#1  ,d5 

/ * Set  up 

software 

pipeLine 

properLy  */ 

move  . L 

d1  ,d0 

m32_  Loop: 

move.L  (a0)+,d3 
muLu.L  d2^d1:d3 
add.L  d0,d3 
addx.L  d4,d1 
move.L  d3,(a1)+ 
m32  even : 


/*  dc.w  0x4c02,  0x3401  */ 


move.L  (a0)+,d3 

muLu.L  d2,d0:d3  /*  dc.w  0x4c02,  0x3400  */ 

add.L  d1,d3 
addx . L d4,d0 
move .L  d3,(a1)+ 


dbra  d5,m32_Loop 


move.L  d0,(a1) 
movem.L  (sp)+,d3-d5 

#if  GENERATINGC FH  ||  definedC CFH68K 

n n rtdn  n #16 

#e  L s e 

r t s 

#endi f 
m3  2_short  : 

move.L  d1,(a1) 
movem.L  (sp)+,d3-d5 

#if  GENERATINGC FM  ||  definedC CFH68K 

n n rtdn  n #16 

#e  L s e 

r t s 

#end  i f 
} 


) 


) 
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asm  BNW0RD32 

b n i H u I Add  1 _32 ( BN WO R D3 2 *out,  BNWORD32  const  *in,  unsigned  Len,  BNUORD32  k) 
{ 


machine 

68020 

movem . L 

d3-d5,- ( sp ) 

/* 

12  bytes  of  extra  data  */ 

mo V e q . L 

#0,d4 

move  . L 

16(sp),a1 

/* 

out  * / 

move . L 

20( sp},a0 

/* 

in  * / 

#if  UINT_HAX  == 

0xffff  S&  ! 

GENERATINGCFM  &S  !defined( CFM68K ) 

mo V e . w 

24(sp),d5 

/* 

Len  * / 

mo ve  . L 

26Csp),d2 

/* 

k */ 

#e  L s e 

move . w 

26(sp),d5 

/* 

Len  * / 

move. L 

28(sp),d2 

/* 

k */ 

#endi f 

move  . L 

Ca0)+,d3 

/* 

First  muLtipLy  */ 

mu  L u . L 

d2,d1 :d3 

/* 

dc.w  0x4c02,  0x3401  */ 

add  . L 

d3,  (a1)  + 

addx  . L 

d4,d1 

subq  . w 

#1  ,d5 

/* 

Setup  for  Loop  unroLLing  */ 

L s r . w 

#1  ,d5 

b c s . s 

ma32_even 

beq  . s 

ma32_short 

subq  . w 

#1  ,d5 

/* 

Set  up  software  pipeLine  property 

move . L 

d1  ,d0 

ma32_Loop: 

move.  L 

(a0)+,d3 

mu  1 u . L 

d2,d1 : d3 

/* 

dc.w  0x4c02,  0x3401  */ 

add  . L 

d0,d3 

addx  . L 

d4,d1 

add  . L 

d3,  (a1  ) + 

addx  . L 

d4,d1 

ma32_even : 

move.  L 

(a0)+,d3 

mu  L u . 1 

d2^d0 : d3 

/* 

dc.w  0x4c02,  0x3400  */ 

add  . L 

d1  ,d3 

addx  . L 

d4,  d0 

add  . 1 

d3,  (a1  ) + 

addx  . L 

d4  , d0 

dbra  d5,ma32_Loop 
movem.L  (sp)+,d3-d5 

#if  GENERATINGCFM  M definedC CFM68K ) 

n n rtdn  n #16 

#e  L se 

r t s 

#end i f 
ma32_short : 

move  .1  d1 ,d0 
movem.L  (sp)+,d3-d5 
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#if  GENERATINGCFM  ||  definedC CFH68K ) 

n n rtdn  n #16 

# e L s e 

r t s 

# e n d i f 
} 


asm  BNW0RD32 

bn  i Mu L Subi  _3  2 ( BNW0RD32  *out,  BNW0RD32  const  *in,  unsigned  Len,  BNW0RD32  k) 
{ 


machine 

68020 

movem . L 

d3-d5,-(sp) 

/*  12  bytes  of  extra  data  */ 

moveq . L 

#0,d4 

move. L 

16(sp),a1 

/ * out  * / 

move. L 

20(sp),a0 

/*  in  */ 

#if  UINT_MAX  == 

0xffff  S&  ! GENERATINGC FM  &&  IdefinedC CFH68K ) 

move  . M 

24(sp),d5 

/*  Len  */ 

move . L 

26(sp),d2 

/*  k */ 

#e  L se 

mo ve . w 

26(sp),d5 

/*  Len  */ 

move . L 

28(sp),d2 

/*  k */ 

#e nd i f 

move  . L 

(a0)+,d3 

/*  First  muLtipLy  */ 

mu  L u . L 

d2,d1 : d3 

/*  dc.w  0x4c02,  0x3401  */ 

s u b . 1 

d3, (a1  ) + 

a ddx  . L 

d4,d1 

subq . M 

#1  ,d5 

/*  Setup  for  Loop  unroLLing  */ 

L s r . w 

#1  ,d5 

b c s . s 

ms32_even 

beq  . s 

ms32_short 

s ubq  . w 

#1  ,d5 

/*  Set  up  software  pipeLine  property 

move  . L 

d1  ,d0 

ms32_Loop: 

move  . L 

( a0 )+, d3 

mu  1 u . L 

d2,d1 : d3 

/*  dc.w  0x4c02,  0x3401  */ 

add  . 1 

d0,d3 

addx  . L 

d4,d1 

s u b . L 

d3,  Ca1)  + 

addx  . L 

d4,d1 

ms32_even  : 

move . L 

(a0)+,d3 

mu  L u . L 

d2,d0:d3 

/*  dc.w  0x4c02,  0x3400  */ 

a dd  . L 

d1  ,d3 

addx  . L 

d4,d0 

s u b . L 

d3,  (a1  ) + 

addx  . L 

d4  , d 0 

dbra 

d5,ms32_Loop 

movem . L 

{ sp ) +, d3-d5 

#if  GENERATINGCFM  ||  defined(_ 

_CFM68K ) 

Q n 

rtdn  n 

#16 
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#e  L s e 

rt  s 

# e n d i f 

ms32_short : 

move.L  d1,d0 
moven.L  (sp)+,d3-d5 

#if  GENERATINGC FM  ||  definedC CFM68K ) 

n n rtdn  n #16 

#e  L se 

r t s 

#endi f 

> 


asm  BNU0RD32 

bni Di v21_32(BNW0RD32  *q,  BNW0RD32  nh,  BNW0RD32  nl,  BNW0RD32  d) 

{ 

machine  68020 
move.L  8(sp>,d0 
move.L  12(sp),d1 
move.L  4(sp),a0 

divu.L  16(sp),d0:d1  /*  dc.w  0x4c6f,  0x1400,  16  */ 

move.L  d1,(a0) 

#if  GENERATINGCFM  ||  definedC CFH68K ) 

n n rtdn  n #16 

# e L s e 

r t s 

#end  i f 

> 


asm  unsigned 

bn i nodQ_32 ( BNWOR D32  const  *n,  unsigned  Len,  unsigned  d) 
{ 


#e  L se 


#endi f 


machine 

68020 

move. L 

4(sp),a0 

/* 

n * / 

move. L 

d3,a1 

•_HAX  = = 

0xffff  &&  ! GENERATINGCFM  S8  IdefinedC CFM68K_ 

moveq . L 

#0,d2 

mo V e . w 

8Csp),d1 

/* 

Len  * / 

mo V e . u 

10(sp),d2 

/* 

d */ 

mo V e . w 

10(sp),d1 

/* 

Len  */ 

move.  L 

12(sp),d2 

/* 

d */ 

dc.w 

0x41f0,  0x1cfc 

/* 

Lea  -4(a0,d1 . L*4),a0 

*/ 

/ * First 

time,  divide 

32/32 

- may  be  faster  than 

64/32 

move  . L 

(a0),d3 

d i vu  L . L 

d2,d0 : d3 

/* 

dc.w  0x4c02,  0x3000 

*/ 

subq  . w 

#2,d1 

bmi  n 

mq32_done 

ip  : 

move  . L 

-(a0),d3 

d i vu . L 

d2,d0 : d3 

/* 

dc.w  0x 4 c 02 , 0x3400 

*/ 

db  r a 

d1 ,mq32_Loop 

CCCHK:8a557229446eccc6163d846550a52bbcddedff2671e83110871dd726dde5ba097:D 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


143 


bni68020.c 


inq32_done  : 

move.L  a1,d3 

#if  GENERATINGC FM  ||  definedC CFMdSK ) 

n n rtdn  n #12 

#e  L se 

rt  s 

Send  i f 

> 

/*  45678901234567890123456789012345678901234567890123456789012345678901234567*/ 
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/* 

* bni68020.h  - 32-bit  bignum  primitives  for  the  68020  (or  683xx)  processors. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* These  primitives  use  L i t t L e-e n d i a n word  order. 

* (The  order  of  bytes  within  words  is  irreLevant.) 

* 

* $Id:  bni68020.h,v  1.3. 2.1  1997/06/07  09:49:32  mhw  Exp  $ 

*/ 

^define  BN_LITTLE_ENDI AN  1 

typedef  unsigned  Long  bnword32; 

^define  BNU0RD32  bnword32 

#ifdef  __cpLuspLus 
extern  "C"  { 

Send i f 

bnword32  bn i S ub 1 _3 2 ( bn wo r d32  *num,  unsigned  Len,  bnword32  borrow); 

bnword32  bn i Ad d 1 _3 2 ( b n wo r d32  *num,  unsigned  Len,  bnword32  carry); 

void  bniHuLN1_32(bnword32  *out,  bnword32  const  *in,  unsigned  Len,  bnword32  k); 

bnword32 


bniHuLAddl 

bnwo  rd32 

_32(bnword32 

*ou  t , 

bnword32 

const 

*i 

n,  unsigned 

Len,  bnword32 

k); 

bniHuLSubI 

_32 (bnword32 

*ou  t , 

bnwo  rd32 

const 

*i 

n,  unsigned 

Len,  bnword32 

k); 

bnword32  bn i D i v2 1 _32 ( bn wo r d 32 

*q,  bnword32 

nh. 

bnword32  nL 

, bnword32  d); 

unsigned  bn i HodQ_3 2 ( b n wo r d32  const  *n,  unsigned  Len,  unsigned  d); 

Sifdef  __cpLuspLus 
} 

Send i f 

/*  Sdefine  the  vaLues  to  excLude  the  C versions  */ 

Sdefine  bniSub1_32  bniSub1_32 
Sdefine  bniAdd1_32  bniAdd1_32 
Sdefine  bniMuLN1_32  bniMuLN1_32 
Sdefine  bn i Hu L Add  1 _32  bn i Hu L Add  1 _32 
Sdefine  bn i Hu L S u b 1 _32  bn i Hu L S u b1 _32 
Sdefine  bniDiv21_32  bniDiv21_32 
Sdefine  bniHodQ  32  bniHodCl  32 
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;;;  Assembly  primitives  for  bignum  Library,  80386  family,  32-bit  code. 

r r / 

;;;  Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
/ / / 

;;;  $Id:  bn i 803 86 . a s m, v 1.5. 2.1  1997/06/07  09:49:32  mhw  Exp  $ 

r r r 

;;;  Several  primitives  are  included  here.  Only  bniHuLAddI  is  *reaLLy* 

;;;  critical,  but  once  that's  written,  bniMuLNI  and  bniMuLSubI  are  quite 

;;;  easy  to  write  as  well,  so  they  are  included  here  as  well. 

;;;  bniDiv21  and  bniHodQ  are  so  easy  to  write  that  they're  included,  too. 

r r r 

;;;  ALL  functions  here  are  for  32-bit  flat  mode.  I.e.  near  code  and 
;;;  near  data,  although  the  near  offsets  are  32  bits. 

/ / / 

;;;  The  usual  80x86  calling  conventions  have  AX,  BX,  CX  and  DX 
;;;  volatile,  and  SI,  DI,  SP  and  BP  preserved  across  calls. 

;;;  This  includes  the  "E"xtended  forms  of  all  of  those  registers 

r r r 

;;;  However,  just  to  be  confusing,  recent  32-bit  DOS  compilers  have 
;;;  quietly  changed  that  to  require  EBX  preserved  across  calls,  too. 

;;;  Joy. 


. 386 

;_TEXT  segment  para  public  use32  'CODE'  ; 16-byte  aligned  because  486  cares 
;_TEXTn  ends 

i f def  aversion 
if  aversion  Le  510 
FLATn  groupn  _TEXT 

e nd i f 
else 

FLATn  groupn  _TEXT 

endi  f 

n assumen  cs:FLAT,  ds:FLAT,  ss:FLAT 

_TEXT  segment  para  public  use32  'CODE'  ; 16-byte  aligned  because  486  cares 

n public  _bniMuLN1_32 

n public  _bn i Hu L Add  1 _32 

n public  _bn i Hu L S u b1 _32 

n publicn  _bniDiv21_32 

n publicn  _bniModQ_32 


;;  Register  usage: 

;;  eax  - Low  half  of  product 
;;  ebx  - carry  to  next  iteration 
;;  ecx  - multiplier  (k) 

;;  edx  - high  half  of  product 
;;  esi  - source  pointer 
;;  edi  - dest  pointer 
;;  ebp  - loop  counter 


/ / 

/ / 

r r 

r / 

/ r 

r r 

/ r 


stack  frame: 


+ -" 

+ esp+20 

e s p + 2 4 

1 

k 1 

+ -- 

+ esp+16 

esp+20 

1 

L en  1 

+ — 

+ esp+1 2 

esp+16 

1 

i n 1 

e s p + 2 8 

e s p + 32 

esp+36 

esp+24 

esp+28 

e s p + 3 2 

esp+20 

esp+24 

esp+28 
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'w 


H + esp  + 8 

I out  I 

+ + esp  + 4 

I return  | 

+ - 


es  1 

-+  esp 

1 

ebp 

1 

e bx 

1 

ed  i 

1 

-+ 

esp+1 2 

esp+1 6 

esp+20 

e s p + 24 

esp  + 8 

e s p + 1 2 

e s p + 1 6 

esp+20 

esp  + 4 

e s p + 8 

esp+1 2 

e s p + 1 6 

esp 

esp  + 4 

esp  + 8 

esp+1 2 

esp 

esp  + 4 

esp  + 8 

esp 

esp  + 4 

e s p 


n alignn  16 

_bn i Mu L N 1 _32 n procn  near 


c 


c 


n pushn  esi n a 

n movD  e s i , C e s p+ 1 2 D n 

n pushn  ebpn  a 

a mova  e bp, C e s p+2 0 3 n 


Va 


Va 


Load  in 

Load  Len 


n 

pushn 

ebxn  a ; 

U 

n 

mo  vn 

ecx,Cesp+283n  ; 

Vn 

Load 

k 

□ 

pushn 

e d i n a ; 

U 

n 

movn 

edi,Cesp+203n  ; 

Vn 

Load 

out 

r r 

First  muLti 

pLy  step  has  no  carry  in. 

n 

movn 

eax,Cesi3n  ; 

U 

n 

Lean 

e b X , C e b p*4-4 3 n ; 

Vn 

Loop 

unroLLing 

n 

mu  L n 

e C X n a ; 

NPn 

first 

mu  L t i p L y 

n 

movn 

Cedi3,eaxn  ; 

U 

Q 

andn 

ebx,12na  ; 

Vn 

Loop 

unroLLing 

n 

addn 

es i , ebxna  ; 

Un 

Loop 

unroLLing 

n 

addn 

edi,ebxaa  ; 

vn 

Loop 

unroLLing 

n 

j mpn 

DWORD  PTR  m32_ j ump t a b L e C ebx 3 n 

; NPn 

n 

a L i gnn 

4 

m32 

_jumptabLe: 

Q 

ddn 

m32_case0 

n 

ddn 

m32_case1 

n 

ddn 

m32_case2 

n 

ddn 

m32_case3 

n 

nop 

a 

a L i gnn 

8 

n 

nop 

u 

nop 

n 

nopn 

; Get  Loop  niceLy 

a L i g n ed 

m32 

_ca  se0 : 

n 

subn 

ebp, 4a  a ; 

U 

Q 

j ben 

SHORT  m32_donen  ; 

V 

m32 

_ L OOP : 

n 

movn 

eax,Cesi+43n 

U 

n 

movn 

ebx, edxna  ; 

Vn 

Remember  carry 

Loop  unroLLing 


CCCHK: 0502 9da5d88b441ccbedbc5aff6d961 00099 cc74d25bb18e83366eebca85b353e33 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


147 


bni80386.asnn 


n 

adda 

e s i , 1 6n  n 

/ 

u 

n 

addn 

ed i , 1 6n  n 

r 

V 

n 

mu  L n 

e c xn  n 

r 

NP 

n 

addn 

eax,ebxnn 

r 

lln 

Add  carry  in  from  previous 

n 

a d c Q 

edx,0n  n 

r 

U 

n 

mo  vn 

Cedi-12], eaxn 

r 

V 

m32 

_ c a s e 3 : 

Q 

mo  vn 

eax,Cesi-8]n 

/ 

U 

n 

mo  vn 

ebx, edxnn 

r 

Va 

Remember  carry  for  later 

n 

mu  L n 

e c xn  a 

/ 

NP 

n 

addn 

eax,ebxnn 

/ 

Un 

Add  carry  in  from  previous 

n 

adcn 

edx,0n  a 

r 

U 

a 

movn 

Cedi-8],eaxa 

/ 

V 

mZZ 

_ c a s e 2 : 

u 

movn 

eax,Cesi-4]a 

t 

U 

a 

movn 

ebx, edxaa 

/ 

Vn 

Remember  carry  for  later 

a 

mu  L n 

ecxn  a 

r 

NP 

n 

addn 

eax, ebxaa 

r 

Un 

Add  carry  in  from  previous 

n 

adcn 

edx,0a  a 

/ 

U 

□ 

movn 

Cedi-4], eaxa 

/ 

V 

m32 

_ c a s e 1 : 

n 

movn 

eax,Cesi ]a 

/ 

U 

n 

movn 

ebx, edxaa 

/ 

Vn 

Remember  carry  for  later 

a 

mu  L n 

e c xa  a 

/ 

NP 

a 

addn 

eax, ebxaa 

r 

Un 

Add  carry  in  from  previous 

□ 

adcn 

edx,0a  a 

r 

U 

n 

movn 

Cedi  ],eaxa 

f 

V 

n 

s u bn 

ebp,4a  a 

r 

U 

a 

j an 

SHORT  m32_loopa 

t 

V 

m32 

_done : 

n 

movn 

Cedi+4],edxa 

/ 

U 

n 

popn 

ed  i n a 

/ 

V 

□ 

popn 

ebxn  a 

r 

U 

n 

popn 

ebpn  a 

r 

V 

n 

popn 

e s i n a 

/ 

U 

n 

retn 

a a 

/ 

NP 

_bniMuLN1_32n 

e n d p 

n 

a L i gnn 

1 6 

_bniMuLAdd1_32n 

proca  near 

n 

pushn 

e s i a a 

/ 

U 

Q 

movn 

esi,Cesp+12]a 

/ 

Vn 

load  in 

n 

pushn 

ed  i n a 

r 

U 

n 

movn 

edi,Cesp+12]a 

r 

Vn 

load  out 

n 

pushn 

e b p a a 

f 

U 

n 

movn 

ebp,Cesp+24]a 

r 

Vn 

load  1 en 

n 

pushn 

ebxa  a 

t 

U 

n 

movn 

ecx,Cesp+32]n 

r 

Vn 

load  k 

r r 

First  multiply  step  has  no  carry  in. 

Q 

movn 

eax,Cesi]a 

r 

U 

D 

movn 

ebx, Cedi ]n 

/ 

V 

n 

mu  1 n 

e c xa  a 

/ 

NPn 

first  multiply 

Q 

addn 

ebx,eaxaa 

/ 

U 
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□ 

Lean 

eax, Cebp*4-4]n 

r 

Vn 

Loop  un  ro  L L i ng 

D 

adcn 

edx,0n  n 

r 

U 

□ 

andn 

eax,1 2n  n 

r 

Vn 

Loop  unroLLing 

a 

movn 

Cedi ],ebxn 

r 

U 

Q 

addn 

esi,eaxnn 

r 

Vn 

L oop  unroLLing 

n 

a ddn 

edi ,eaxnn 

f 

Un 

Loop  unroLLing 

n 

j mpn 

DWORD  PTR  ma32_ 

j ump t a b L e C e a X ] n ; NPn  Loop  unroL 

n 

a L i gnn 

4 

ma32_ 

j ump t a b L e : 

n 

ddn 

ma32_case0 

a 

ddn 

ma32_case1 

□ 

ddn 

ma32_case2 

n 

ddn 

ma32_ca  se3 

n 

nop 

n 

a L i gnn 

8 

D 

nop 

n 

nop 

n 

nopn 

n n 

f 

To  a 

Lign  Loop  properLy 

ma32_ 

c a s e0 : 

n 

s ubn 

ebp,4n  n 

f 

U 

n 

j ben 

SHORT  ma32_donen; 

V 

ma32_ 

Loop: 

n 

movn 

eax,Cesi+4Dn 

r 

U 

n 

movn 

ebx, edxnn 

r 

Vn 

Remember  carry  for  Later 

n 

addn 

es i , 1 6n  n 

r 

U 

□ 

addn 

ed i , 1 6n  n 

w 

V 

n 

mu  L n 

e cxn  n 

r 

NP 

n 

addn 

eax,ebxnn 

r 

Un 

Add  carry  in  from  previous 

n 

movn 

ebx,Cedi-12Dn 

r 

V 

D 

adcn 

edx,0n  n 

/ 

U 

D 

addn 

ebx^eaxna 

r 

V 

□ 

adcn 

edx, 0n  n 

/ 

U 

a 

movn 

Cedi-12D,ebxn 

/ 

V 

ma32_ 

case3 : 

Q 

movn 

eax,Cesi-8]n 

/ 

U 

n 

movn 

ebx, edxnn 

f 

Vn 

Remember  carry  for  Later 

a 

mu  L n 

e c xn  n 

r 

NP 

a 

addn 

eax,ebxnn 

/ 

Un 

Add  carry  in  from  previous 

n 

movn 

ebx, Cedi -8]n 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

addn 

ebx,eaxnn 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cedi-8D,ebxn 

r 

V 

ma32_ 

ca  se2  : 

Q 

movn 

eax,Cesi-4Dn 

r 

U 

n 

movn 

ebx, edxno 

r 

vn 

Remember  carry  for  Later 

n 

mu  L n 

ecxn  a 

/ 

NP 

a 

addn 

eax,ebxnn 

/ 

Un 

Add  carry  in  from  previous 

n 

movn 

ebx,Cedi-4]n 

r 

V 

n 

adcn 

edx,0n  n 

/ 

U 

B 

addn 

ebx,eaxnn 

r 

V 
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n 

adcn 

edx,0n  a 

/ 

u 

Q 

mo  vn 

Cedi-4D,ebxn 

r 

V 

ma  32 

_case1  : 

n 

mo  vn 

eax,Cesi Un 

u 

n 

mo  vn 

ebx, edxnn 

t 

vn 

n 

mu  L n 

e c xn  n 

r 

NP 

a 

addn 

eax,ebxnn 

/ 

Un 

n 

mo  vn 

ebx, C ed i 3n 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

a 

addn 

ebx^eaxnn 

/ 

V 

n 

adcn 

edx, 0n  n 

r 

U 

u 

mo  vn 

Cedi 3,ebxn 

r 

V 

u 

subn 

ebp,4n  n 

r 

u 

n 

jan 

SHORT  ma32_Loop 

V 

ma32 

_done  : 

n 

popn 

ebxn  n 

0 

u 

□ 

popn 

ebpn  n 

0 

V 

□ 

mo  vn 

eax, edxnn 

0 

u 

n 

popn 

e d i n n 

0 

V 

fi 

popn 

e s i n n 

0 

u 

n 

retn 

n n 

0 

NP 

_bniMuLAdd1_32n 

endp 

□ 

a L i gnn 

1 6 

_bniMuLSub1_32n 

procn  near 

n 

pushn 

e s i n n 

0 

u 

n 

mo  vn 

esi,Cesp+12Dn 

0 

Vn 

n 

pushn 

ed  i n n 

0 

U 

□ 

movn 

edi,Cesp+12Dn 

0 

Vn 

n 

pushn 

ebpn  n 

0 

U 

□ 

movn 

ebp,Cesp+24Dn 

0 

Vn 

n 

pushn 

ebxn  n 

0 

U 

u 

movn 

e cx, C e sp  + 3 2 Dn 

0 

Vn 

0 0 

First  muLtipLy  step  has  no 

carry  i 

n 

pushn 

e s i n n 

0 

U 

Q 

movn 

esi,Cesp+12Dn 

0 

vn 

n 

pushn 

ed  i n n 

0 

U 

n 

movn 

edi,Cesp+12Dn 

0 

Vn 

n 

pushn 

ebpn  n 

0 

U 

□ 

movn 

ebp, Cesp+24Dn 

0 

Vn 

n 

movn 

ecx, Cesp+28Dn 

0 

Un 

0 0 

First  muLtipLy  step  has  no 

carry  i 

n 

movn 

eax,Cesi Un 

0 

V 

□ 

movn 

ebx, Cedi  ]n 

0 

U 

n 

mu  L n 

e c xn  n 

0 

NPn 

n 

subn 

ebx,eaxnn 

0 

U 

Q 

Lean 

eax,Cebp*4-4Dn 

0 

Vn 

n 

adcn 

edx,0n  n 

0 

U 

Q 

a ndn 

eax,1 2n  n 

0 

Vn 

n 

movn 

Cedi ],ebxn 

0 

U 

Remember  carry  for  Later 

Add  carry  in  from  previous  word 


Load  in 

Load  out 

Load  L e n 

Load  k 

Load  in 

Load  out 

Load  Len 
Load  k 


first  muLtipLy 
Loop  unroLLing 
L oop  unroLLing 


n 

addn 

esi^eaxnn 

; vn 

Loop 

unroLLing 

n 

addn 

edi ,eaxnn 

; un 

Loop 

unroLLing 
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□ 


j tnpn 


DWORD  PTR  ms32_juniptabLeCeax3n  ; NPn 


Loop  unrolling 


n 

a L i gnn 

4 

ms32_ 

j umptab  Le : 

n 

ddn 

ms32_case0 

Q 

ddn 

ms32_case1 

n 

ddn 

ms32_ca  se2 

n 

ddn 

ms32_case3 

n 

nop 

a 

a L i gnn 

8 

n 

nop 

a 

nop 

a 

nop 

m s 3 2 _ 

c a s e 0 : 

a 

subn 

ebp,4n  o 

/ 

u 

a 

j ben 

SHORT  ms32_doneB 

; 

V 

ms32_ 

Loop: 

D 

mo  vn 

eax,Cesi+43n 

/ 

u 

n 

mo  vn 

ebx, edxnn 

r 

Vn 

a 

a ddn 

e s i , 1 6n  H 

r 

U 

n 

a ddn 

ed  i , 1 6n  n 

r 

V 

n 

mu  L n 

ecxn  n 

/ 

NP 

n 

a ddn 

eax,ebxnn 

r 

Un 

a 

movn 

ebx,Cedi-123n 

/ 

V 

n 

adcn 

edx,0n  n 

/ 

U 

n 

subn 

ebx,eaxnn 

r 

V 

Q 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cedi-123, ebxn 

r 

V 

ms32_ 

c a s e3 : 

□ 

movn 

eax,Cesi-8]n 

r 

u 

a 

movn 

ebx, edxnn 

r 

Vn 

n 

mu  L n 

ecxn  n 

r 

NP 

a 

a ddn 

eax,ebxnn 

t 

Un 

a 

movn 

ebx, Ced i -8Dn 

r 

V 

n 

adcn 

edx,0n  n 

/ 

U 

a 

subn 

ebx, eaxnn 

r 

V 

a 

adcn 

edx,0n  n 

r 

U 

a 

movn 

Cedi -8D,ebxn 

/ 

V 

ms32_ 

case2 : 

n 

movn 

eax,[esi-4Dn 

/ 

U 

n 

movn 

ebx, edxnn 

/ 

Vn 

D 

mu  In 

ecxn  n 

r 

NP 

n 

addn 

eax, ebxnn 

/ 

Un 

n 

movn 

ebx,Cedi-43n 

/ 

V 

n 

adcn 

edx,0n  n 

/ 

U 

n 

subn 

ebx, eaxnn 

/ 

V 

D 

adcn 

edx,0n  n 

/ 

U 

n 

movn 

Cedi-4D,ebxn 

r 

V 

ms32„ 

easel  : 

s 

movn 

eax,Cesi3n 

r 

U 

n 

movn 

ebx, edxnn 

r 

Vn 

a 

mu  L n 

ecxn  n 

/ 

NP 

H 

addn 

ea  X, ebxnn 

/ 

Un 

n 

movn 

ebx, Cedi ]n 

/ 

V 

Remember  carry  for  Later 


Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 
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□ 

adcQ 

edx,0n  n 

/ 

u 

a 

subn 

ebx, eaxnn 

r 

V 

n 

ad  cn 

edx,0n  Q 

r 

u 

n 

movn 

Cedi D,ebxn 

f 

V 

n 

subs 

ebp,4n  n 

r 

u 

n 

j an 

SHORT  ms32_ 

l 0 0 p n ; 

V 

ms32 

_done : 

n 

popn 

ebxn  n 

/ 

u 

s 

popn 

ebpn  □ 

r 

V 

□ 

movn 

eax,edxnn 

r 

u 

□ 

popn 

ed  i n n 

r 

V 

□ 

popn 

e s i n a 

/ 

u 

n 

retn 

a n 

/ 

NP 

_bniMulSub1_32n 

endp 

;;  Two-word  by  one-word  divide.  Stores  quotient,  returns  remainder. 

;;  BNW0RD32  bn i D i v2 1 _32 ( BN  WO R D 3 2 *q,  BNW0RD32  nh,  BNW0RD32  nl,  BNWORD32  d) 


r r 

4 

8 

1 2 

1 6 

align 

4 

_bniDiv21_32n 

procn  near 

n 

movn 

edx,Cesp+8Dn 

a 

/ 

Un 

Load 

n h 

n 

movn 

eax,Cesp+1 21a 

a 

f 

Vn 

Load 

n 1 

a 

movn 

ecx,Cesp+4Dn 

a 

r 

un 

Load 

q 

n 

d i vn 

DWORD  PTR  Cesp+16:n 

f 

NP 

Q 

mo  va 

Cecx],eaxa 

a 

r 

Un 

Store 

quotient 

a 

movn 

eax,edxan 

a 

f 

Ma 

Return  remainder 

n ret 

_bn i D i v2 1 _32n  endp 

;;  Multi-word  by  one-word  remainder. 

;;  This  speeds  up  key  generation.  It's  not  worth  unrolling  and  so  on; 

;;  using  32-bit  divides  is  enough  of  a speedup. 

/ r 

;;  The  modulus  (in  ebp)  is  often  16  bits.  Given  that  the  dividend  is  32 
;;  bits,  the  chances  of  saving  the  first  divide  because  the  high  word  of  the 
;;  dividend  is  less  than  the  modulus  are  low  enough  it's  not  worth  taking 
;;  the  cycles  to  test  for  it. 

r r 

; ; unsigned  bniModQ_32(BNW0RD32  const  *n,  unsigned  len,  unsigned  d) 

;;  4 8 12 

align  4 


_bn i ModQ_32n 

procn  near 

a 

movn 

eax,Cesp+4Dn 

a 

/ 

Un 

Load  n 

a 

pu  s hn 

ebpn  o 

a 

/ 

V 

a 

movn 

ebp,Cesp+1 21a 

a 

r 

Un 

Load  len 

a 

pu  s hn 

e s i n n 

a 

r 

V 

a 

lean 

esi ,Cebp*4+eax 

-4Dn 

r 

U 

a 

movn 

ecx,Cesp+16Dn 

a 

r 

vn 

Load  d 

a 

xorn 

edx, edxnn 

a 

/ 

un 

Clear  edx  for  first  iteration 

modq32_ 

loop  : 

a 

movn 

eax,Cesi Dn 

a 

f 

Un 

Load  new  low  word  for  divide 

a 

subn 

es i , 4n  n 

a 

/ 

V 

a 

d i vn 

e c X n n 

a 

/ 

NPn 

edx  = edxieax  % ecx 

a 

d e cn 

ebpn  □ 

a 

r 

U 
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n 

j nzn 

SHORT  modq32_Loopn 

Q 

popn 

es  i n n 

n 

n 

movn 

eax,edxnn 

n 

n 

popn 

e b pn  n 

n 

retn 

□ □ 

□ 

_bn i ModQ_32n 

endp 

n 

mo  V L n 

4(%esp),%eaxn 

n 

n 

push  In 

%ebpn  n 

n 

Q 

mo V L n 

1 2(%esp),Xebpn 

n 

n 

push  L n 

%e  s i n n 

Q 

Q 

L ea  L n 

-4(%eax,Xebp,4) 

, % e s i n 

n 

mov  L n 

20(%esp),%ecxn 

n 

D 

xo r L n 

%edx,%edxn 

n 

modq32_ 

Loop: 

D 

mo  V 1 n 

(%esi ),%eaxn 

D 

n 

s u b L n 

$4, %e  s i nn 

n 

D 

d i V L n 

Xecxn  Q 

□ 

n 

de c L n 

%ebpn  n 

n 

n 

j nzn 

modq32_loopn 

a 

□ 

pop  L n 

% e s i n n 

n 

n 

mo  V L n 

%edx,%eaxn 

n 

□ 

pop  L n 

Xebpn  n 

n 

n 

retn 

O D 

n 

; V 

; u 

; Vn  Return  remainder  in  eax 
; U 
; NP 


ft  Un  Load  n 

ff  V 

ft  Un  Load  Len 

ft  V 
U U 

ft  Vq  Load  d 

ft  Un  Clear  MSW  for  first  divide 

ff  U 
ft  V 
ft  NP 
U U 
ft  V 

ft  U 
ft  V 
# U 
ft  NP 


TEXTn  ends 


n 


end 
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/* 

* bni80386.h  - This  file  defines  the  interfaces  to  the  80386 

* assembly  primitives.  It  is  intended  to  be  included  in  "bni.h" 

* via  the  "//include  BNINCLUDE"  mechanism. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  bni  80386.h,v  1.2. 4.1  1 997/06/07  09:49:32  mhw  Exp  $ 

*/ 

//define  BN_  LI  TT  LE_  E N D I A N 1 

typedef  unsigned  long  bnuord32; 

#define  BNW0RD32  bnword32 

/*  MS-DOS  needs  the  calling  convention  described  to  it.  */ 

#ifndef  MSDOS 

#ifdef  MSDOS 

//define  MSDOS  1 
//  e n d i f 
//end  i f 

//ifndef  MSDOS 

//ifdef MSDOS 

#define  MSDOS  1 
#endi f 
#e  nd i f 

/*  By  MS-DOS,  we  mean  16-bit  brain-dead  MS-DOS.  Not  32-bit  good  things.  */ 
#ifdef  __G032 
#undef  MSDOS 
//  e n d i f 

//ifdef  __G032__ 

#undef  MSDOS 
//endi  f 

//ifdef  MSDOS 

//define  CDECL  __cdecl 

//else 

#define  CDECL  /*nothing*/ 

//end  i f 

//ifdef  __cplusplus 

/*  These  a s s emb I y- I a ng ua g e primitives  use  C names  */ 
extern  "C"  C 
//end  i f 

/*  Function  prototypes  for  the  asm  routines  */ 
void  CDECL 

bniMulN1_32(bnword32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
//define  bniMulNl_32  bniMulNl_32 

bnword32  CDECL 

bn i Mu  I Addi _32 ( bnwo rd32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
#define  b n i Mu  I Ad d 1 _32  bn i Hu  I Ad d 1 _32 

bnword32  CDECL 

bn i Mu  I Sub  1 _32 ( bn  wo r d32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
#define  bn i M u I S u b 1 _32  b n i M u I S u b 1 _3 2 
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bnword32  CDECL 

bniDiv21_32(bnword32  *q,  bnword32  nh,  bnword32  nL,  bnword32  d); 
#define  bniDiv21_32  bniDiv21_32 

unsigned  CDECL 

bniHodQ_32(bnword32  const  *n,  unsigned  len,  bnword32  d); 

^define  bniHodGl_32  bniModQ_32 

#ifdef  __cpluspLus 
} 

#end i f 


#if  __GNUC 

/* 

* Use  the  (massively  cool)  GNU  inline-assembler  extension  to  define 

* inline  expansions  for  various  operations. 

* 


The  massively  cool  part  is  that  the  assembler  can  have  inputs 
and  outputs,  and  you  specify  the  operands  and  which  effective 
addresses  are  legal  and  they  get  substituted  into  the  code. 

(For  example,  some  of  the  code  requires  a zero.  Rather  than 
specify  an  immediate  constant,  the  expansion  specifies  an  operand 
of  zero  which  can  be  in  various  places.  This  lets  GCC  use  an 
immediate  zero,  or  a register  which  contains  zero  if  it's  available.) 


* The  syntax  is  asm("asm_code"  : outputs  : inputs  : trashed) 

* %0,  %1  and  so  on  in  the  asm  code  are  substituted  by  the  operands 
in  I e f t- t o-r i gh t order  (outputs,  then  inputs). 

The  operands  contain  constraint  strings  and  values  to  use. 

Outputs  must  be  lvalues,  inputs  may  be  rvalues.  In  the  constraints: 
"a"  means  that  the  operand  must  be  in  eax. 

"d"  means  that  the  operand  must  be  in  edx. 

"g"  means  that  the  operand  may  be  any  effective  address. 

"="  means  that  the  operand  is  assigned  to. 

"%"  means  that  this  operand  and  the  following  one  may  be 

interchanged  if  desirable. 

"bcDSmn"  means  that  the  operand  must  be  in  ebx,  ecx,  esi,  edi,  memory, 
or  an  immediate  constant.  (This  is  almost  the  same  as  "g" 
but  allowing  it  in  eax  wouldn't  help  because  x is  already 
assigned  there,  and  it  must  not  be  in  edx,  since  edx  is 
overwritten  by  the  multiply  before  a and  b are  read.) 


* 

★ 

* 

★ 

★ 

* 

*/ 


Note  that  GCC  uses  AT8T  assembler  syntax,  which  is  rather 
different  from  Intel  syntax.  The  length  (b,  w or  1)  of  the 
operation  is  appended  to  the  opcode,  and  the  *second*  operand 
is  the  destination,  not  the  first.  Finally,  the  register  names 
are  all  preceded  with  "Z".  (Doubled  here  because  % is  a 
magic  character.) 


/*  (ph«32)  + pi  = x*y  */ 

^define  mu  1 32_ppmm( ph , p I , x, y ) n \ 

n asm ("mull  Z3"  : "=d"(ph),  "=a"(pl)  : "Za"(x),  "g"(y)) 

/*  (ph«32)  + pi  = x*y  + a */ 

^define  mu  1 32_ppmma ( p h , p I , x , y , a ) n \ 
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□ 

a 

n 


Q 

□ 


asm__("muLL  %3\n\t"n  n \ 

"addl  %4,%%eax\n\t"n  \ 

"adcl  %5,%%edx"na  \ 

: "=&d"(ph),  "=a"(pL)n  \ 

: "%a"(x),  "9"Cy)r  "bcDSmn"(a),  "bcDSmn"(0)) 


/*  (ph<<32)  + pL  = x*y  + a + b */ 

#define  mu L 3 2_ppmma a ( p h , p L , x , y , a , b ) n \ 
n __a sm__ ( "mu L L %3\n\t"n  n \ 
n "addl  % 4 , % % e a x \ n \ t " n \ 

n "adcl%6,%%edx\n\t"n  \ 
n "addL%5,%%eax\n\t"n  \ 
n "adcl  %6,%%edx"nn  \ 


n : "=8d"(ph),  "=a"Cpl)n  \ 

n : "%a"(x),  "g"(y)r  "%bcDSmn"(a),  "bcDSmn"Cb),  "bcDSmn"(0)) 


/*  q = ((nh<<32)  + nl)  / d,  return  remainder.  nh  guaranteed  < d.  */ 

#undef  bniDiv21_32 

#define  bn i D i v2 1 _32 ( q , n h , n L , d ) n \ 
n ({unsigned  _;n  \ 

a __a sm__ ( "d i V L Z4"  : "=d"(_),  "=a"(*q)n:  "d"(nh),  "a"(nL),  "g"Cd));  \ 

n _;>) 


/*  No  quotient,  just  return  remainder  ((nh<<32)  + nl)  % d */ 


#def 1 ne 

bniMod21_32(nh, 

n L , d ) n 

\ 

□ 

({unsigned  _;n 

\ 

n 

__a  sm__ ( " d i V 1 

%3"  : 

"=d"(_)  : 

"d"(nh). 

" a " ( n 1 ) , 

"g"(d)  : 

"ax");  \ 

n _ ; } ) 

#endif  /*  GNUC  */ 
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###  Assembly  primitives  for  bignum  Library,  80386  family,  32-bit  code. 

nn# 

ttHII  Copyright  (C)  1 995-1  997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

n§n 

nutl  $Id:  bni80386.s,v  1.4. 2.1  1 997/06/07  09:49:33  mhw  Exp  $ 

unu 

ttU#  Several  primitives  are  included  here.  Only  bniHulAddI  is  *really* 
ttttU  critical,  but  once  that's  written,  LnmHuLNI  and  bniMuLSubI  are  quite 

Htftt  easy  to  write  as  well,  so  they  are  included  here  as  well. 

ftUU  bniDiv21  and  bniModQ  are  so  easy  to  write  that  they're  included,  too. 

ttun 

ttttU  All  functions  here  are  for  32-bit  flat  mode.  I.e.  near  code  and 
###  near  data,  although  the  near  offsets  are  32  bits. 

###  Preserved  registers  are  esp,  ebp,  esi,  edi  and  ebx.  That  Last 
###  is  needed  by  ELF  for  PIC,  and  differs  from  the  IBM  PC  calling 
###  convention. 

# Different  assemblers  have  different  conventions  here 
aLign4  = 4n  ft  could  be  2 or  4 

align8  = 8n  ft  could  be  3 or  8 

aLign16=16n  # cound  be  4 or  16 


.text 


ft  We  declare  each  symbol  with  two  names,  to  deal 


n 

. g L ob  1 D 

bniMuLN1_32 

n 

. g 1 ob  L a 

_bniMuLN1_32 

u 

. g 1 ob  Lq 

bniHulAdd1_32 

n 

. g lob  In 

_bniHuLAdd1_32 

a 

. g 1 ob  1 n 

bniMuLSub1_32 

n 

. g L ob  1 n 

_bniHulSub1_32 

n 

. g 1 ob  1 D 

bni Div21_32 

n 

. g L ob  L n 

_bni Div21_32 

Q 

. g L ob  L n 

bniModa_32 

n 

. g L ob  L n 

_bn i Hoda_32 

with  ELF/a.out  variances. 


ft#  Register  usage: 

##  %eax  - low  half  of  product 
ttU  Xebx  - carry  to  next  iteration 
M#  %ecx  - multiplier  (k) 

Utt  %edx  - high  half  of  product 

ttft  %esi  - source  pointer 

Utt  Zedi  - dest  pointer 

tttt  Zebp  - Loop  counter 

Utt 

Utf  Stack  frame: 


UM 

ttn 

+ - 

1 

k 

- + 

1 

%e  s p + 2 0 

Zesp+24 

Zesp+28 

Zesp+32 

Zesp+36 

un 

uu 

+ - 

1 

L en 

- + 

1 

Z e s p + 1 6 

Zesp+20 

Zesp+24 

Zesp+28 

Zesp+32 

un 

un 

+ - 

1 

i n 

- + 

1 

Zesp+1 2 

Zesp+1 6 

Zesp+20 

Zesp+24 

Zesp+28 

un 

un 

+ - 

1 

out 

- + 

1 

Zesp+8 

Zesp+1 2 

Z e s p + 1 6 

Zesp+20 

Zesp+24 

un 

un 

+ - 

1 

return 

- + 

1 

Zesp+4 

Zesp+8 

Z e s p + 1 2 

Z e s p + 1 6 

Zesp+20 
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ttit 

+ + %esp  %esp  + 4 

% e s p + 8 

% e s p + 1 2 

% e s p + 1 6 

nn 

1 % e s 1 I 

uu 

+ + 

%esp 

% e s p + 4 

% e s p + 8 

% e s p + 1 2 

tin 

I %ebp  I 

ttit 

+ + 

%esp 

% e s p + 4 

%esp+8 

tttt 

I %ebx  I 

ttit 

+ + 

% e s p 

%esp+4 

tttt 

I %ed i I 

uu 

+ + 

%esp 

□ 

. a L i g n n 

a L i g n 1 6 

bn i Mu  L N1 _32  : 

_bniMulN1_32: 

n 

push  Ln 

%e  s i B n 

U U 

n 

mo  V L n 

12(%esp),%esiB 

U VB 

Load  in 

n 

pu  s h L n 

%ebpn  n 

U U 

n 

mo V L n 

20(%esp),%ebpn 

U Vn 

Load  Len 

tt 

push  L n 

%ebxn  a 

U U 

n 

mo V L n 

28(%esp),%ecxn 

U Vn 

Load  k 

n 

pu s h L n 

%edi n n 

U U 

□ 

mo  V L n 

20(%esp),%edin 

U Vn 

Load  out 

uu 

First  muLtipLy  step  has  no 

carry  in. 

o 

mo V L n 

(%esi ),%eaxn 

n 

U V 

n 

lea  Ln 

-4(,%ebp,4),%ebxn 

U Un 

Loop  unrolling 

□ 

mu  L 1 B 

%ecxn  n 

□ 

U NPn 

first  multiply 

n 

mo  V L B 

%eax, C%edi  )n 

n 

U U 

n 

a nd  L B 

$1 2,%ebxn 

n 

n 

> 

L oop  unrolling 

n 

a dd  L B 

%ebx,%esin 

n 

U Un 

L oop  unrolling 

n 

add  L B 

%ebx,%edi  n 

n 

U Vn 

Loop  unrolling 

n 

3 mpn 

*m32_jumptabLe(%ebx)n 

U NPn 

Loop  unrolling 

Q 

. a L i g nB 

a L i g n4 

m32 

_j  umptable : 

n 

. L ongn 

m32_case0 

n 

. L ongB 

m32_case1 

□ 

. Longs 

m32_case2 

n 

. Longs 

m32_ca  se3 

n 

nop 

n 

. a 1 i gnn 

a L i gn8 

n 

nop 

n 

nop 

n 

nopn 

U Get  Loop  nicely  aligned 

m32 

_case0 : 

n 

s ub  L B 

$4,%ebpnn 

u u 

H 

j b e n 

m32_donen 

U V 

ni32 

_ L oop  : 

a 

mo  V L n 

4(%esi ),%eaxn 

u u 

n 

mo  V L n 

%edx,%ebxn 

U vn 

Remembe  r 

carry  for  Later 

Q 

add  L B 

$1 6,%esi n 

U U 

n 

addin 

$16,%edin 

U V 

n 

mu  L L n 

% e c XB  n 

U NP 

n 

add  Lb 

%ebx,%eaxn 

U Un 

Add  carry  in  from  previous 
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n 

adc  In 

$0, %edxnn 

n 

u 

n 

mo V L n 

%eax,-12(%edi  )n 

ft 

V 

m32 

_ca  s e3 : 

n 

mo  V L n 

-8(Zesi ),%eaxn 

ft 

u 

n 

mov  In 

%edx,%ebxn 

# 

Vn 

Remember  carry  for  later 

n 

mu  L L n 

%e  cxn  n 

ft 

NP 

n 

addin 

%ebx,%eaxn 

ft 

Un 

Add  carry  in  from  previous 

n 

a d c L n 

$0,%edxnn 

ft 

U 

□ 

mo  V 1 n 

%eax,-8(%edi  )n 

u 

V 

m32 

_ c a s e 2 : 

n 

mo V L n 

-4(%esi ),%eaxn 

ft 

u 

a 

mo  V L n 

%edx,%ebxn 

ft 

Vn 

Remember  carry  for  later 

n 

mu  1 L n 

Zecxn  n 

ft 

NP 

□ 

addin 

%ebx,%eaxn 

# 

Un 

Add  carry  in  from  previous 

n 

adc  In 

$0,%edxnn 

u 

U 

n 

mo  V 1 n 

%eax,-4(%edi )n 

ft 

V 

m32 

_ c a s e 1 : 

n 

mo  V 1 n 

(%esi ),%eaxn 

u 

U 

n 

mo  V 1 n 

%edx,%ebxn 

ft 

Vn 

Remember  carry  for  later 

□ 

mu  1 1 n 

Zecxn  n 

ft 

NP 

□ 

addin 

Zebx,Zeaxn 

ft 

un 

Add  carry  in  from  previous 

n 

adc  In 

$0, Zedxna 

ft 

U 

n 

mov  In 

Zeax, (Zedi )n 

ft 

V 

a 

sub  1 n 

$4,Zebpnn 

ft 

U 

n 

j an 

m32_loopn 

ft 

V 

m32 

_done : 

a 

mo  V 1 n 

Zedx,4(Zedi  )n 

ft 

U 

n 

pop  1 n 

Zedi n n 

ft 

V 

n 

pop  In 

Zebxn  a 

ft 

U 

n 

pop  1 n 

Zebpn  n 

ft 

V 

n 

pop  1 n 

Ze  s i n n 

ft 

U 

Q 

retn 

n n 

ft 

NP 

D 

. a 1 i g nn 

a 1 i g n 1 6 

bn i Hu  1 Addi _32 : 

_bniMuLAdd1_32: 

n 

push  In 

Z e s i n n 

ft 

U 

n 

mo  V 1 n 

12(Zesp),Zesin 

ft 

Vn 

load  in 

n 

pu  s h 1 n 

Zedi n n 

ft 

U 

n 

mo  V 1 n 

12(Zesp),Zedin 

ft 

Vn 

load  out 

n 

pu  s h 1 n 

Zebpn  n 

ft 

U 

n 

mo  V 1 n 

24(Zesp)^Zebpn 

ft 

Vn 

load  1 en 

n 

push  In 

Zebxn  n 

ft 

U 

□ 

mov  1 n 

32(Zesp}, Zecxn 

tt 

Vn 

load  k 

nu 

First  multiply  step  has  no  carry  in. 

n 

mo  V 1 n 

(Zesi ),Zeaxn 

□ 

tt  V 

n 

mo  V 1 n 

(Zedi ), Zebxn 

n 

tt  U 

a 

mu  1 1 n 

Zecxn  n 

n 

tt  NPn  first  multiply 

u 

addin 

Zeax, Zebxn 

n 

tt  U 

n 

1 ea  1 n 

-4(,Zebp,4),Zeaxn 

tt  Vn  loop  unrolling 

n 

adc  In 

$0,Zedxnn 

n 

U U 

n 

a nd  1 n 

$1 2,Zeaxn 

n 

tt  Vn  loop  unrolling 

n 

mo  V 1 n 

Zebx, (Zedi  )n 

n 

tt  U 
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n 

addin 

%eax,%esin  n 

U 

Vn 

loop 

unrolling 

B 

addin 

%eax,%edin  n 

U 

Un 

loop 

unrol ling 

n 

j mpn 

*ma32_jumptable(%eax)n 

n 

NPn 

loop 

unrolling 

B 

. a l i gnn 

a 1 i g n4 

ma32_ 

jumptable: 

B 

. 1 ongn 

ma32_ 

case0 

B 

. 1 ongn 

ma32_ 

easel 

B 

. 1 ongn 

ma32_ 

ca  se2 

B 

. 1 ongn 

ma  32_ 

c a s e3 

B 

. a 1 i g nn 

a 1 i g n 8 

B 

nop 

B 

nop 

B 

nopn 

B 

B 

# To  align  loop  properly 

ma32_ 

c a s e0  : 

B 

sub  1 n 

$4, %ebpnn 

U 

u 

B 

j ben 

ma32_donen 

U 

V 

ma32_ 

loop: 

B 

mo  V 1 n 

4(%esi  ),%eaxn 

U 

u 

B 

mo  V 1 n 

%edx,%ebxn 

U 

Vn 

Remembe  r 

carry 

for 

later 

B 

addin 

$16,%esin 

n 

u 

B 

addin 

$1 6,%edi n 

n 

V 

B 

mu  1 1 n 

% e c xn  n 

It 

NP 

B 

addin 

%ebx,%eaxn 

ft 

un 

Add  carry 

i n 

from 

previous 

word 

B 

mo  V 1 n 

-12(%edi),%ebxn 

n 

V 

B 

adc  In 

$0,%edxnn 

u 

u 

B 

addin 

%eax,%ebxn 

u 

V 

B 

adc  In 

$0, %edxnn 

n 

u 

B 

mo  V 1 n 

%ebx,-1 2(%edi )n 

It 

V 

ma32_ 

c a s e 3 : 

B 

mo  V 1 n 

-8(%esi ),%eaxn 

It 

u 

B 

mo  V 1 n 

%edx,%ebxn 

tt 

Vn 

Remembe  r 

carry 

for 

later 

B 

mu  1 1 n 

%ecxn  n 

tt 

NP 

B 

addin 

%ebx, %eaxn 

tt 

Un 

Add  carry 

i n 

from 

previous 

word 

fl 

mo  V 1 n 

-8(%edi ),%ebxn 

It 

V 

B 

adc  In 

$0,%edxnn 

tt 

U 

B 

addin 

%eax,%ebxn 

tt 

V 

B 

adc  In 

$0,%edxnn 

tt 

U 

B 

mo  V 1 n 

%ebx,-8(%edi  )n 

tt 

V 

ma32_ 

case2 : 

B 

mo  V 1 n 

-4(%esi  ),%eaxn 

tt 

u 

B 

mo  V 1 n 

%edx,%ebxn 

tt 

Vn 

Remember 

carry 

for 

later 

B 

mu  1 1 n 

%ecxn  n 

tt 

NP 

B 

addin 

%ebx,%eaxn 

tt 

Un 

Add  carry 

i n 

from 

previous 

word 

B 

mo  V 1 n 

-4(%edi ),%ebxn 

It 

V 

B 

a d c 1 n 

$0, %edxnn 

tt 

U 

B 

addin 

%eax,%ebxn 

It 

V 

B 

a d c 1 n 

$0, %edxnn 

It 

u 

B 

mo  V 1 n 

%ebx,-4(%edi  )n 

tt 

V 

ma  3 2 _ 

easel  : 

B 

mo  V 1 n 

(%esi ),%eaxn 

tt 

u 

B 

mo  V 1 n 

%edx,%ebxn 

tt 

Vn 

Remembe  r 

carry 

for 

later 
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a 

mu  L L n 

%ecxa  n 

U 

NP 

n 

add  Lq 

%ebx,%eaxa 

U 

Ua 

n 

mo V L n 

(%edi  ),%ebxa 

U 

V 

n 

adc  La 

$0,%edxan 

n 

u 

D 

add  La 

%eax,%ebxa 

U 

V 

n 

adc  La 

$0,%edxan 

n 

u 

n 

mo  V L a 

%ebx,  (%edi  )a 

u 

V 

□ 

sub  La 

$4,%ebpan 

n 

u 

n 

j aa 

ma32_Loopa 

n 

V 

ma32 

_done  : 

n 

pop  L a 

%ebxa  n 

n 

u 

D 

pop  L a 

%ebpa  n 

u 

V 

n 

mo  V L a 

%edx,%eaxa 

n 

u 

n 

pop  L a 

%ed i a n 

n 

V 

n 

pop  L a 

%e  s i a n 

u 

u 

n 

reta 

n n 

n 

NP 

Add  carry  in  from  previous  word 


n 

. a L i gna 

a L i g n 1 6 

bn i Mu  L Subi _32 : 

_bniHuLSub1_32: 

n 

push  La 

%e  s i a a 

n 

u 

Q 

mo  V L a 

12(%esp),%esia 

# 

Va 

Load  in 

a 

pu s h L a 

%edi n n 

n 

U 

n 

mo V L a 

1 2(%esp),%edia 

u 

Va 

Load  out 

a 

pu s h L a 

%ebpa  D 

It 

U 

n 

mo  V L a 

24(%esp),%ebpa 

u 

Va 

Load  L en 

n 

pu  s h L a 

%ebxa  n 

u 

U 

a 

mo  V L a 

32(%esp),%ecxa 

n 

Va 

Load  k 

/* 

First  muLtipLy  step  has  no 

carry  in. 

* 

/ 

n 

mo  V L a 

(%esi ),%eaxa 

n 

» 

V 

n 

mov  L a 

(%edi ),%ebxa 

n 

U 

u 

n 

mu  L La 

%ecxa  n 

n 

U 

N Pa  first 

muLtipLy 

n 

sub  La 

%eax,%ebxa 

n 

u 

U 

D 

Lea  La 

-4(,%ebp,4),%eaxa 

u 

Va  Loop 

un  ro  L L i ng 

Q 

adc  La 

$0, %edxan 

n 

« 

U 

a 

a nd  L a 

$1 2,%eaxa 

n 

u 

Va  Loop 

unroLLing 

n 

mo  V L a 

%ebx, C%edi )a 

n 

u 

U 

n 

a dd  L a 

%eax,%esia 

□ 

n 

Va  Loop 

unroL  Ling 

n 

add  La 

%eax,%edia 

n 

It 

Ua  Loop 

unroL  Ling 

n 

j mpa 

*ms32_jumptabLe(%eax)a 

u 

NPa  Loop 

unroL  Ling 

n 

. a L i g na 

a L i g n 4 

ms32_jumptabLe: 


n 

. Longa 

ms32_ 

c a s e 0 

n 

. Longa 

ms32_ 

easel 

D 

. Longa 

ms32_ 

case2 

n 

. Longa 

ms32_ 

case3 

n 

. a L i gna 

a L i g n8 

n 

nop 

Q 

nop 

n 

nop 
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ms32_ 

c a s e0 : 

n 

s u b L Q 

$4,%ebpnn 

n 

u 

n 

j ben 

ms32_donen 

M 

V 

ms32_ 

Loop: 

n 

mo  V L n 

4(%esi  ),%eaxn 

u 

u 

n 

mo  V L n 

%edx,%ebxn 

n 

Va 

Remember 

carry  for 

Later 

u 

add  Ln 

$16,%esin 

u 

U 

n 

addin 

$1 6, %ed i n 

n 

V 

u 

mu  L L n 

%ecxn  a 

ti 

NP 

u 

addin 

%ebx, %ea  xn 

n 

Un 

Add  carry 

in  f rom 

previ ous 

word 

Q 

mo V L n 

-1  2(%edi  ),%ebxn 

u 

V 

n 

adc  In 

$0,%edxnn 

n 

U 

Q 

s u b 1 n 

%eax,.%ebxn 

# 

V 

n 

a d c L n 

$0, %edxnn 

u 

U 

n 

mo  V L n 

%ebx,-12(%edi )n 

u 

V 

ms32_ 

case3 : 

□ 

mo  V L n 

-8(%esi ),%eaxn 

ft 

U 

a 

mo  V L n 

%edx,%ebxn 

u 

Va 

Remember 

carry  for 

Later 

n 

mu  L L n 

%ecxn  n 

ft 

NP 

n 

addin 

%ebx,%eaxn 

ft 

Un 

Add  carry 

in  from 

previous 

word 

n 

mo V L n 

-8(%edi  ')  ,Xeb\a 

ft 

V 

□ 

a d c L n 

$0, %edxnn 

ft 

U 

□ 

s u b L n 

%eax,%ebxn 

u 

V 

n 

a d c L n 

$0, %edxnn 

ft 

U 

n 

mo  V 1 n 

%ebx,-8(%edi )n 

ft 

V 

nis32_ 

case2 : 

n 

mo  V L n 

-4(%esi ),%eaxn 

u 

U 

n 

mo  V L n 

%edx,%ebxn 

ft 

Vn 

Remembe  r 

carry  for 

Later 

a 

mu  1 L n 

%ecxn  n 

ft 

NP 

□ 

addin 

%ebx,%eaxn 

ft 

Un 

Add  carry 

in  from 

previ ous 

word 

□ 

mo  V 1 n 

-4(%edi ),%ebxn 

ft 

V 

□ 

adc  In 

$0, %edxnn 

ft 

U 

□ 

subln 

%eax,%ebxn 

ft 

V 

n 

adc  In 

$0, %edxnn 

# 

U 

o 

mov  L n 

%ebx,-4(%edi )n 

ft 

V 

ms32_ 

easel  : 

n 

mo V L n 

(%esi ),%eaxn 

ft 

U 

o 

mov  L n 

%edx, %ebxn 

ft 

Vn 

Remember 

carry  for 

Later 

□ 

mu  1 L n 

%ecxn  n 

tt 

NP 

B 

addin 

%ebx, %eaxn 

tt 

Un 

Add  carry 

in  from 

previ ous 

word 

B 

mo V L n 

C%edi ),%ebxn 

# 

V 

B 

adc  In 

$0, %edxnn 

tt 

U 

B 

subln 

%eax,%ebxn 

tt 

V 

B 

adc  In 

$0, %edxnn 

tt 

U 

B 

mov  L n 

%ebx,C%edi  )n 

tt 

V 

B 

subln 

$4, %ebpnn 

tt 

U 

B 

j an 

ms32_  L oopn 

tt 

V 

ms32_ 

done  : 

B 

pop  In 

%ebxn  n 

u 

U 

B 

pop  L n 

%ebpn  n 

tt 

V 

B 

mo V L n 

%edx,%eaxn 

u 

U 

B 

pop  L n 

%edi n a 

u 

V 

B 

pop  1 n 

%es i n n 

u 

U 

B 

retn 

a a 

u 

NP 
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MU 

T wo-wo rd  by 

one-word  divide. 

Stores 

quotient,  returns 

rema i nde  r . 

MU 

BNU0RD32  bn 

i Di v21_32(BNU0RD32 

*q,  BNW0RD32  nh,  BNW0RD32 

nl,  BNW0RD32 

MM 

4 

8 

1 2 

1 6 

a 

.align 

a 1 i g n 1 6 

bniDiv21_32: 

_bni Div21_32: 

tt 

mo  V 1 n 

8(%esp),%edxn 

M 

Un 

Load  n h 

u 

mo  V 1 n 

12(%esp),%eaxn 

M 

Vn 

Load  n 1 

a 

mo  V 1 n 

4(%esp),%ecxn 

M 

Un 

Load  q 

a 

d i V 1 n 

16C%esp)n 

M 

NP 

n 

mo  V 1 n 

%eax, (%ecx)n 

M 

Un 

Store  quotient 

n 

mo  V 1 n 

%edx,%eaxn 

M 

Vn 

Return  remainder 

n 

ret 

## 

Multi -wo  rd 

by  one-word  remainder. 

##  This  speeds  up  key  generation.  It's  not  worth  unrolling  and  so  on; 

#U  using  32-bit  divides  is  enough  of  a speedup. 

MU 

MU  The  modulus  (in  %ebp)  is  often  16  bits.  Given  that  the  dividend  is  32 
MU  bits,  the  chances  of  saving  the  first  divide  because  the  high  word  of  the 

ugh  it's  not  worth  taking 


unsigned  len,  unsigned  d) 
1 2 


MM 

dividend  is 

less  than  the  modulus 

are 

low 

MM 

the  cycles 

to  test  for  it. 

MM 

MM 

unsigned  bn i ModQ_32 ( BN WO R D 3 2 

const 

*n. 

u n s 

MM 

4 

8 

a 

.align 

a 1 i gni 6 

bniModQ_32: 

_bn i ModQ_32 : 

n 

mo  V 1 n 

4(%esp),%eaxn 

n 

M 

Un 

n 

pu  s h 1 n 

%ebpn  n 

n 

M 

V 

n 

mo  V 1 n 

12(%esp),%ebpn 

□ 

M 

Un 

a 

push  In 

%es i n n 

n 

M 

V 

n 

1 ea  1 n 

-4(%eax,%ebp,4) 

,%esi n 

M 

U 

n 

mo  V 1 n 

20(%esp),%ecxn 

n 

M 

Vn 

a 

xo  r 1 n 

%edx, %edxn 

n 

M 

Un 

modq32_loop: 

D 

mo  V 1 n 

(%esi ),%eaxn 

D 

M 

U 

n 

sub  In 

$4,%esinn 

n 

M 

V 

Q 

d i V 1 n 

%ecxn  n 

n 

M 

NP 

a 

dec  In 

Xebpn  n 

n 

M 

U 

a 

j n z n 

modq32_loopn 

a 

M 

V 

u 

pop  1 n 

% e s i n n 

Q 

M 

u 

n 

mo  V 1 n 

%edx,%eaxn 

n 

M 

V 

Q 

pop  1 n 

%ebpn  n 

n 

M 

u 

n 

r e t n 

D □ 

D 

M 

NP 

Load  n 


Load  I en 


Load  ( 
Clear 


MSW  for  first  divide 


C[CHK:e0211073bb598577ce13500f38d3fcb43bd3f2846ebbf80dabe2803:: 


Pretty  Good  Privacy  5.0'^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


163 


bni80386c.c 


/* 

* bni80386c.c  - Low-Level  bignum  routines,  32-bit  version. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Assembly  primitives  for  bignum  Library,  80386  family,  32-bit  code. 

* Inline  assembler  for  MS\/C  + + 4.X 

* 

* $Id:  bni  80386c . c,v  1.1. 2.1  1 997/06/07  09:49:33  mhw  Exp  $ 

★ 

* Several  primitives  are  included  here.  Only  bniMuLAddI  is  *realLy* 

* critical,  but  once  that's  written,  bniMulNI  and  bniHulSubI  are  quite 

* easy  to  write  as  well,  so  they  are  included  here  as  well. 

* bniDiv21  and  bniModQ  are  so  easy  to  write  that  they're  included,  too. 

* 

* The  usual  80x86  calling  conventions  have  AX,  BX,  CX  and  DX 

* volatile,  and  SI,  DI,  SP  and  BP  preserved  across  calls. 

* This  includes  the  "E"xtended  forms  of  all  of  those  registers 

* 

*/ 


#ifndef  HAVE_CONFIG_H 
#define  H A V E_C 0 N F I G_ H 0 
#end  i f 

#if  HAVE_CONFIG_H 
#incLude  "config.h" 

# end i f 


/* 

* Some  compilers  complain  about  #if  FOO  if  FOO  isn't  defined, 

* so  do  the  ANSI-mandated  thing  explicitly... 

*/ 

#ifndef  NO_ASSERT_H 
//define  NO_ASSERT_H  0 
//end  i f 

//ifndef  NO_STRING_H 
//define  NO_STRING_H  0 
#endi  f 

//ifndef  H A VE_ST R I NG S_H 
#define  HAVE_STRINGS_H  0 
// end i f 

//ifndef  N E E D_M  EMOR  Y_H 
//define  N E E D_M EMOR Y_H  0 
//endi  f 

//if  !NO_STRING_H 

//include  <string.h>n  /*  For  memcpy  */ 

//elif  HAVE_STRINGS_H 
//include  <strings.h> 

#end  i f 

//if  NEED_MEHORY_H 
//include  <memory.h> 

//end  i f 


#incLude  "bni.h" 
//include  "bni32.h" 
//include  " bni  mem. h" 
^include  "bnlegal.h" 
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//include  "bnkludge.h" 

//include  "pgpDebug.h" 

#ifndef  BNWORD32 

//error  32-bit  bignum  library  requires  a 32-bit  data  type 
//end  i f 


BNW0RD32 

bn  i Mu  I Ad d 1 _32 ( BN WO R D 32  *out,  BNW0RD32  const  *in,  unsigned  len,  BNW0RD32  k) 


n 

mov  e s i 

, i nn  n 

r 

l oad 

i n 

n 

mov  edi 

, outn  ; load 

out 

a 

mov  ecx 

, kn  n 

r 

load 

k 

n 

push  ebpn  □ 

/ 

preserve  ebp  for  return 

n 

mov  ebp 

, lenn  ; load 

l e n 

(must  be  last) 

r / 

First  multiply  step  has  no 

carry  in. 

D 

mo  vn 

eax,Cesi Dn 

/ 

U 

n 

mo  vn 

ebx, Cedi ]n 

r 

V 

n 

mu  1 n 

e c xn  n 

r 

NPn 

first 

multiply 

n 

addn 

ebx,eaxnn 

/ 

U 

n 

1 ean 

eax,Cebp*4-4Dn 

/ 

Vn 

loop 

unrolling 

o 

adca 

edx,0n  n 

/ 

U 

o 

andn 

eax,1 2n  n 

/ 

Vn 

loop 

unrolling 

n 

mo  vn 

Cedi 3,ebxn 

/ 

U 

n 

addn 

esi ,eaxnn 

/ 

Vn 

loop 

unrolling 

n 

addn 

edi ,eaxnn 

r 

Un 

loop 

unrolling 

; i 

nline  assembler  won't  do  tables 

, so 

use  si 

mp  1 e compa  re 

;« 

j mpn 

DWORD  PTR  ma32 

_ j ump t a b l e C ea X D n ; NPn  1 

/ 

a L i gnn 

4 

;ma32_jumptable 

: 

ddn 

ma32_case0 

ddn 

ma32_case1 

ddn 

ma32_ca  se2 

ddn 

ma32_ca  se3 

r 

nop 

n 

cmpn 

e a X , 0 

n 

j en 

ma32_case0 

n 

cmpn 

ea  X , 4 

n 

j en 

ma32_case1 

n 

cmpn 

ea X , 8 

D 

j en 

ma32_case2 

n 

j mpn 

ma32_case3 

n 

a L i g nn 

8 

n 

nop 

n 

nop 

Q 

nopn 

n n 

r 

To  a 1 

ign  loop  properly 

CCCHK:dd0001aaab5741dbce22791011317719988bc7f4f0eed346a6364d4c989495dff:: 


Pretty  Good  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


165 


bni80386c.c 


ma32  case0: 


n 

subn 

e bp , 4n  n 

r 

U 

n 

j ben 

SHORT  ma32_donen 

; 

V 

ma32_ 

Loop: 

n 

mo  vn 

eax,Cesi+4]n 

/ 

u 

n 

mo  vn 

ebx,edxnn 

f 

Vn 

n 

a ddn 

e s i , 1 6n  n 

f 

U 

n 

addn 

ed i , 1 6n  n 

r 

V 

□ 

mu  L Q 

e c xn  n 

r 

NP 

n 

addn 

eax,ebxnn 

/ 

Un 

n 

mo  vn 

ebx,Cedi-12Dn 

f 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

addn 

ebx,eaxnn 

r 

V 

□ 

adcn 

edx,0n  n 

f 

u 

n 

mo  vn 

Cedi  -1  2Il,ebxn 

/ 

V 

nia32_ 

c a s e 3 : 

n 

mo  vn 

eax,Cesi-8Dn 

r 

u 

n 

mo  vn 

ebx, edxnn 

/ 

Vn 

n 

mu  L n 

e c xn  n 

r 

NP 

□ 

addn 

eax,ebxnn 

r 

Un 

□ 

movn 

ebx,Cedi-83n 

/ 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

addn 

ebx^eaxnn 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cedi -8D,ebxn 

/ 

V 

ma32_ 

c a s e 2 : 

n 

movn 

eax,Cesi-4i]n 

r 

U 

n 

movn 

ebx, edxnn 

r 

Vn 

n 

mu  L n 

ecxn  n 

r 

NP 

o 

addn 

eax,ebxnn 

/ 

Un 

n 

movn 

ebx,Cedi-4Dn 

r 

V 

o 

adcn 

edx, 0n  n 

r 

U 

n 

addn 

ebx,eaxnn 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cedi -43,ebxn 

r 

V 

ma  32_ 

easel  : 

n 

movn 

eax,Cesi Hn 

r 

U 

n 

movn 

ebx, edxnn 

A 

Vn 

n 

mu  L n 

ecxn  n 

A 

NP 

n 

addn 

eax,ebxnn 

A 

un 

n 

movn 

ebx, Cedi  ]n 

A 

V 

n 

adcn 

edx,0n  n 

A 

U 

n 

addn 

ebx,eaxnn 

A 

V 

n 

adcn 

edx,0n  n 

A 

U 

n 

movn 

Cedi ],ebxn 

A 

V 

n 

subn 

ebp, 4n  n 

A 

U 

o 

j a n 

SHORT  ma32_Loopn 

A 

V 

ma32_ 

done  : 

D 

movn 

eax, edxnn 

A 

u 

n 

popn 

ebp 

Remember  carry  for  Later 


Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 


Remember  carry  for  Later 

Add  carry  in  from  previous  word 
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BNW0RD32 


bniHuLSub1_32(BNW0RD32  *out,  BNW0RD32 
r 

const  *in,  unsigned  Len,  BNWORD32 

__a  sm 

C 

n 

m 0 V e s 1 

, 1 nn  n 

; Load 

i n 

□ 

mov  edi 

, outn  ; Load 

out 

n 

mov  ecx 

, kn  n 

; Load 

k 

n 

push  ebpQ  n 

; preserve  ebp  for  return  block 

n 

mov  ebp 

, Lenn  ; Load 

Len  (must  be  Last) 

;;  First  muLtipLy  step  has  no 

carry  in 

s 

movn 

eax,Cesi Dn 

; V 

n 

mo  vn 

ebx,IIedi  Dn 

; U 

a 

mu  L Q 

e c xn  n 

; NPn 

first  multiply 

a 

subQ 

ebx, eaxnn 

; u 

a 

Lean 

eax,Cebp*4-4Dn 

; Vn 

Loop  unrolling 

n 

adcn 

edx,0n  n 

; U 

n 

andn 

eax,12n  n 

; Vn 

Loop  unrolling 

Q 

movn 

Cedi ],ebxn 

; u 

□ 

addn 

es i , eaxnn 

; Vn 

L OOP  unrolling 

a 

addn 

edi , eaxnn 

; Un 

L oop  unrolling 

; i n L 

ine  assembler  won't  do  tables,  so 

use  simple  compare  code 

3 mpQ 

DWORD  PTR  ms32 

_ j ump t a b L e C e a x D n ; NPn  Loop  unrolling 

/ 

a 1 i gnn 

4 

; ms32 

_ j ump t a b L e 

: 

ddn 

ms32_case0 

dda 

ms32_case1 

ddn 

ms32_case2 

ddn 

ms32_case3 

r 

nop 

n 

cmpn 

eax,  0 

n 

j en 

ms32_ca  se0 

□ 

cmpn 

ea X , 4 

n 

j en 

ms32_case1 

n 

cmpn 

eax,  8 

n 

j en 

ms32_case2 

D 

j mpn 

ms32_case3 

n 

a L i gnn 

8 

n 

nop 

n 

nop 

n 

nop 

ms32_ 

caseO : 

n 

subn 

ebp,4n  n 

; u 

n 

j ben 

SHORT  ms32_donen;  V 

ms32_ 

loop: 

n 

movn 

eax,Cesi+43n 

; u 

n 

movn 

ebx,edxnn 

; vn 

Remember  carry  for  Later 

n 

addn 

es i , 1 6n  n 

; u 

n 

addn 

ed i , 1 6n  n 

; V 
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n 

mu  1 a 

e c xn  n 

r 

NP 

n 

addn 

eax,ebxnn 

r 

Un 

Add  carry  in  from  previous 

word 

n 

mo  vn 

ebx,Cedi-12Iln 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

u 

subn 

ebx,eaxnn 

r 

V 

n 

adcn 

edx,0n  n 

/ 

u 

u 

mo  vn 

Cedi-12D,ebxn 

/ 

V 

ms32 

_ c a s e3 : 

n 

mo  vn 

eax,Cesi-8Dn 

/ 

u 

□ 

mo  vn 

ebx, edxnn 

r 

Vn 

Remember  carry  for  Later 

Q 

mu  L n 

e c xn  n 

r 

NP 

Q 

addn 

eax,ebxnn 

r 

Un 

Add  carry  in  from  previous 

word 

n 

movn 

ebx,Cedi-83n 

f 

V 

a 

adcn 

edx,0n  n 

f 

U 

a 

subn 

ebx,eaxnn 

f 

V 

a 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cedi-83, ebxn 

r 

V 

ms32 

_ca  se2  : 

n 

movn 

eax,Cesi-4]n 

f 

U 

□ 

movn 

ebx, edxnn 

r 

Vn 

Remember  carry  for  Later 

n 

mu  1 n 

ecxn  n 

/ 

NP 

n 

addn 

eax,ebxnn 

r 

Un 

Add  carry  in  from  previous 

word 

n 

movn 

ebx, Cedi -43n 

r 

V 

n 

adcn 

edx,0n  n 

r 

U 

a 

subn 

ebx,eaxnn 

r 

V 

o 

adcn 

edx,0n  n 

r 

u 

n 

movn 

Cedi-43,ebxn 

r 

V 

ms32 

_case1 : 

n 

movn 

eax,Cesi Dn 

/ 

u 

Q 

movn 

ebx, edxnn 

/ 

Vn 

Remember  carry  for  Later 

n 

mu  L n 

ecxn  n 

r 

NP 

n 

addn 

eax, ebxnn 

r 

Un 

Add  carry  in  from  previous 

word 

n 

movn 

ebx, Cedi Dn 

/ 

V 

n 

adcn 

edx,0n  n 

r 

U 

□ 

subn 

ebx, eaxnn 

/ 

V 

□ 

adcn 

edx,0n  n 

r 

U 

s 

movn 

Cedi D,ebxn 

r 

V 

n 

subn 

ebp,4n  n 

r 

U 

n 

j an 

SHORT  ms32_Loopn 

/ 

V 

ms32 

_done : 

□ 

movn 

eax, edxnn 

r 

U 

s 

popn 

ebp 

> 

> 
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/* 

* bni80386c.h  - This  file  defines  the  interfaces  to  the  80386  inLined  C 

* assembly  primitives.  It  is  intended  to  be  included  in  "bni.h" 

* via  the  "#include  BNINCLUDE"  mechanism. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  bni 80386c . h,v  1.1. 2.1  1 997/06/07  09:49:33  mhu  Exp  $ 

*/ 

//define  BN_  L I TT  L E_  E N D I A N 1 

typedef  unsigned  long  bnword32; 

^define  BNW0RD32  bnword32 

/*  MS-DOS  needs  the  calling  convention  described  to  it.  */ 

//ifndef  HSDOS 

//ifdef MSDOS 

//define  MSDOS  1 
//  e n d i f 
//end  i f 

//ifndef  MSDOS 

#ifdef  MSDOS 

#define  MSDOS  1 
//end  i f 
//end  i f 

/*  By  MS-DOS,  we  mean  16-bit  brain-dead  MS-DOS.  Not  32-bit  good  things.  */ 
//ifdef  __G032 
#undef  MSDOS 
//endi  f 

//ifdef  __G032__ 

//undef  MSDOS 
//end  i f 

//ifdef  MSDOS 

//define  CDECL cdecl 

//else 

//define  CDECL  /*nothing*/ 

//endi  f 

//ifdef  __cplusplus 

/*  These  a s semb I y- I a ng uage  primitives  use  C names  */ 
extern  "C"  { 

//endi  f 

/*  Function  prototypes  for  the  inline  asm  routines  */ 
bnword32  CDECL 

bn i Mu  I Addi _3 2 ( bn wo r d32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
//define  bn  i Mu  I Ad  d 1 _32  bn  i Mu  I Add  1 _32 

bnword32  CDECL 

bniMulSub1_32(bnword32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
#define  bn i Mu  I S u b 1 _32  bn i Mu  I Subi _32 

#if  0 

void  CDECL 

bn i Mu  I N1 _32 ( bn  wo rd32  *out,  bnword32  const  *in,  unsigned  len,  bnword32  k); 
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#define  bniHuLN1_32  bniMuLN1_32 
bnuord32  CDECL 

b n i D i V 2 1 _32 ( b n wo r d3 2 *q,  bnword32  nh,  bnuord32  nL,  bnword32  d); 
//define  bniDiv21_32  bniDiv21_32 

unsigned  CDECL 

bniModQ_32(bnword32  const  *n,  unsigned  Len,  bnword32  d); 

#define  bniModQ_32  bniHodQ_32 
#e  nd i f 

//ifdef  __cpLuspLus 
} 

//endi  f 


//if GNUC__ 

/* 

* Use  the  (massively  cool)  GNU  inline-assembler  extension  to  define 

* inline  expansions  for  various  operations. 

* 

* The  massively  cool  part  is  that  the  assembler  can  have  inputs 

* and  outputs,  and  you  specify  the  operands  and  which  effective 

* addresses  are  legal  and  they  get  substituted  into  the  code. 

* (For  example,  some  of  the  code  requires  a zero.  Rather  than 

* specify  an  immediate  constant,  the  expansion  specifies  an  operand 

* of  zero  which  can  be  in  various  places.  This  lets  GCC  use  an 

* immediate  zero,  or  a register  which  contains  zero  if  it's  available.) 

* 

* The  syntax  is  a s m ( " a sm_ c od e " : outputs  ; inputs  : trashed) 

* %0,  %1  and  so  on  in  the  asm  code  are  substituted  by  the  operands 

* in  lef t-to-ri ght  order  (outputs,  then  inputs). 

* The  operands  contain  constraint  strings  and  values  to  use. 

* Outputs  must  be  lvalues,  inputs  may  be  rvalues.  In  the  constraints: 

* "a"  means  that  the  operand  must  be  in  eax. 

* "d"  means  that  the  operand  must  be  in  edx. 

* "g"  means  that  the  operand  may  be  any  effective  address. 

* "="  means  that  the  operand  is  assigned  to. 

* "%"  means  that  this  operand  and  the  following  one  may  be 

* interchanged  if  desirable. 

* "bcDSmn"  means  that  the  operand  must  be  in  ebx,  ecx,  esi,  edi,  memory, 

* or  an  immediate  constant.  (This  is  almost  the  same  as  "g" 

* but  allowing  it  in  eax  wouldn't  help  because  x is  already 

* assigned  there,  and  it  must  not  be  in  edx,  since  edx  is 

* overwritten  by  the  multiply  before  a and  b are  read.) 

* 

* Note  that  GCC  uses  AT&T  assembler  syntax,  which  is  rather 

* different  from  Intel  syntax.  The  length  (b,  w or  1)  of  the 

* operation  is  appended  to  the  opcode,  and  the  *second*  operand 

* is  the  destination,  not  the  first.  Finally,  the  register  names 

* are  all  preceded  with  "%".  (Doubled  here  because  % is  a 

* magic  character.) 

*/ 

/*  (ph<<32)  + pi  = x*y  */ 

^define  mu  1 32_ppmm ( ph , p I , x , y ) n \ 

n __asm ("mull  %3"  : "=d"(ph),  "=a"(pl)  : "%a"(x),  "g"(y)) 
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/* 

(ph<<32)  + 

pL  = x*y 

+ a */ 

#def i ne 

muL32_ 

ppmma ( ph 

>•  P 1.  , X , y , a ) n 

\ 

n 

__a  sm_ 

_ ( " mu  1 L 

%3\n\t"n  n 

\ 

a 

" a dd  1 

%4,/£%eax\n\t"n 

\ 

a 

" a d c L 

%5,%%edx"nn 

\ 

a 

: "=&d 

"(ph),  "=a"(pL)n 

\ 

a 

: "%a" 

(x),  "9"(y),  "bcDSmn 

/* 

Cph«32)  + 

pi  = x*y 

+ a + b */ 

# d e f i n e 

muL32_ 

ppmmaa(ph,pL,x,y,a,b)n 

\ 

a 

__a  sm_ 

_ ( "mu  L L 

%3\n\t"n  n 

\ 

a 

" a d d L 

%4,%%eax\n\t"n 

\ 

a 

" a d c L 

%6,%%edx\n\t"n 

\ 

a 

" a dd  L 

%5,%%eax\n\t"n 

\ 

a 

"adc  L 

%6,%%edx"nn 

\ 

a 

: " = &d 

" ( ph  ) , " =a " ( p L ) n 

\ 

'(a),  "bcDSmn"(0)) 


"%a"(x),  "g"(.y'),  " %bc  DSmn  " ( a ) , "bcDSmn"  ( b ) , 


be  DSmn " ( 0 ) ) 


/*  q = ((nh<<32)  + nL)  / d,  return  remainder.  nh  guaranteed  < d.  */ 

#undef  bniDiv21_32 

^define  bn i D i v2 1 _32 ( q , n h , n L , d ) n \ 
n ({unsigned  _;n  \ 

n __a sm__ ( " d i V I %4"  : "=d"(_),  "=a"(*q)n;  "d"(nh),  "a"(nl),  "g"(d));  \ 

“ _;>) 


/*  No 

quotient,  just  return  remainder 

((nh«32)  + nl)  % d */ 

#def  i 

ne  bn i Mod 2 1 _32 ( n h , 

nL,d)n 

\ 

a 

({unsigned  _;n 

\ 

a 

__a  sm__ ( " d i V 1 

%3"  : 

II 

Q. 

1 

: "d"(nh),  "a"(nL),  "g"(d) 

a 

#endif  /*  GNUC  */ 
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;;;  bni8086.asm  - Assembly  primitives  for  bignum  Library,  80x86  family. 

r f r 

;;;  Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

f f f 

;;;  $Id:  bn i 80 86 . a sm, v 1.6. 2.1  1997/06/07  09:49:34  mhw  Exp  $ 

r f f 

;;;  Several  primitives  are  included  here.  Only  bniMuLAddI  is  *reaLly* 

;;;  critical,  but  once  that's  written,  bniMuLI  and  bniSubI  are  quite 

;;;  easy  to  write  as  well,  so  they  are  included  here  as  well. 

;;;  bniDiv21  and  bniModQ  are  so  easy  to  write  that  they're  included,  too. 

r / r 

;;;  ALL  functions  here  are  for  large  code,  large  data. 

;;;  All  use  standard  "cdecl"  calling  convention:  arguments  pushed  on  the 
;;;  stack  Css:sp)  right  to  Left  (the  Leftmost  agrument  at  the  Lowest  address) 

;;;  and  popped  by  the  caller,  return  values  in  ax  or  dx:ax,  and  register 

usage  as  follows: 


f r f 

;;;  Callee-save  (preserved  by  callee  if  needed): 


/ / 

s s , 

esp,  cs. 

eip,  ds,  esi. 

ed i , ebp. 

high 

byte 

of  FLAGS 

except 

r / 

a L 1 

other  registers  (CRx, 

DRx,  TRx, 

IDT, 

GDT, 

LDT,  TR, 

etc.). 

r 

r 

Cal  L e r- 

save  ( may 

be  corrupted 

by  callee) 

: 

r / 

es. 

eax,  ebx. 

ecx,  edx.  Low  byte  of 

flags 

( S F, 

ZF,  AF, 

PF,  CF) 

ft/ 

;;;  The  direction  flag  (DF)  is  either  preserved  or  cleared. 

;;;  I'm  not  sure  what  the  calling  convention  is  for  fs  and  gs.  This 
;;;  code  never  alters  them. 


;;  Not  all  of  this  code  has  to  be  '386  code,  but  STUPID  FUCKING  HASH  (5.0) 
;;  gives  an  error  if  you  change  in  the  middle  of  a segment.  Rather  than 
;;  fight  the  thing,  just  enable  '386  instructions  everywhere.  (And  Lose 
;;  the  error  checking.) 

.386 


_TEXT  segment  para  public  use16  'CODE'  ; 16-byte  aligned  because  '486  cares 
n assume  cs:_TEXT 


n 

public 

n 

public 

n 

public 

n 

pub  L i cn 

□ 

pub  Lien 

o 

public 

n 

public 

n 

public 

n 

pub  1 i cn 

n 

pub  L i cn 

□ 

pub  1 i cn 

bniMuLN1_16 
bninuLAdd1_16 
bniMuLSub1_16 
bni Div21_16 
bniHodQ_16 

bniHuLN1_32 
bniHulAdd1_32 
bniMulSubI _32 
bniDiv21_32 
bn i ModQ_32 

not386 


; ; Prototype : 

;;  BNW0RD16 

;;  bn i Hu  I Ad d_ 1 6 ( BN WO R D 1 6 *out,  BNW0RD16  *in,  unsigned  Len,  BNW0RD16  k) 

r / 

;;  Multiply  Len  words  of  "in"  by  k and  add  to  Len  words  of  "out"; 

;;  return  the  Len+lst  word  of  carry.  ALL  pointers  are  to  the  Least- 
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r / 

r r 

f f 

r 0 

0 0 

0 0 

0 0 


0 0 

0 0 


significant  ends  of  the  appropriate  arrays.  len  is  guaraneed  > 0. 

This  16-bit  code  is  optimized  for  an  8086/80286.  It  will  not  be  run 
on  32-bit  processors  except  for  debugging  during  development. 


NOTE  that  it  may  be  possible  to  assume  that  the  direction  flag  is  clear 
on  entry;  this  would  avoid  the  need  for  the  cld  instructions.  Hoeuever, 
;;  the  Microsoft  C libraries  require  that  the  direction  flag  be  clear. 

;;  Thus,  bniModGl_16  clears  it  before  returning. 

0 0 

;;  Stack  frame: 

; ; + + bp  + 1 8 

;;  I k I 

; ; + + bp  + 1 6 

;;  I len  | 

;;  H h bp  + 14 

;;  I I 

; ; +-  in  - + 

; ; I I 

; ; + h bp  + 1 0 

; ; I I 

;;  +-  out  -+ 

; ; I I 

; ; H h bp  + 6 

; ; I I 

;;  +-return-+ 

; ; I I 

; ; + (-  bp  + 2 

;;  I old  bp  | 

;;  + + bp 

0 0 

;;  Register  usage  for  bniMul1_16: 

;;  ds:CsiIln  in 

es:Cdi!]a  out 

bpn  n k 

cxn  n loop  counter  (len/4) 

dx,axn  high, low  parts  of  product 

bxn  n carry  from  previous  multiply  iteration 


0 0 

0 0 


0 0 

0 0 

0 0 


Register  usage  for  bn i Hu  I Add  1 _ 1 6 and  b n i H u I S ub 1 _1 6 : 
ds;CsiDn  in 

es : Cbx+si Dn  out 
bpn  n k 

cxn  n loop  counter  Clen/4) 

dx,axn  high, low  parts  of  product 

din  n carry  from  previous  multiply  iteration 


The  reson  for  the  difference  is  that  straight  mul  can  use  stosw,  but 
the  multiply  and  add  or  multiply  and  subtract  add  the  result  in,  so 
they  have  to  reference  es:Cdi3  to  add  it  in. 


0 0 

0 0 

0 0 

0 0 


The  options  are  either  "add  ax,es:Cdi3;  stosw"  or  "add  es;[diD,ax; 
add  di,2";  both  take  10  cycles  on  an  80286,  27  on  an  8086  and  35  on 
an  8088  although  the  former  is  preferred  since  it's  one  byte  smaller. 
However,  using  Ebx+siD  is  even  faster;  "add  e s : C bx+s i D , a x " takes 
7 cycles  on  an  80286,  25  on  an  8086  and  33  on  an  8088,  as  well  as 
being  the  smallest.  (Of  course,  stosw,  at  3 on  an  80286,  11  on  an 
8086  amd  15  on  an  8088  wins  easily  in  the  straight  multiply  case  over 
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mov  e s : C bx  + s i ] , a X , which  takes  3/18/22  cycles  and  is  Larger  to  boot.) 

Most  of  these  register  assignments  are  driven  by  the  8086's  instruction 
set.  The  only  really  practical  variation  would  be  to  put  the  multiplier 
k into  bx  or  di  and  use  bp  for  carry,  but  if  someone  can  make  a faster 
Duff's  device  using  a Lookup  table,  bx  and  di  are  useful  because  indexing 
off  them  is  more  flexible  than  bp. 

Overview  of  code: 

Len  is  guaranteed  to  be  at  least  1,  so  do  the  first  multiply  (with  no 
carry  in)  unconditionally.  Then  go  to  a min  Loop  unrolled  4 times, 
jumping  into  the  middle  using  a variant  of  Duff's  device. 

The  Loop  is  constructed  using  the  loop  instruction,  which  does 
"}  while  (--cnt)".  This  means  that  we  have  to  divide  the  count 
by  4,  and  increment  it  so  it  doesn't  start  at  0.  To  gain  a Little 
bit  more  efficiency,  we  actually  increment  the  count  by  2,  so  the 
minimum  possible  value  is  3,  which  will  be  shifted  down  to  produce  0. 
usually  in  Duff's  device,  if  the  number  of  iterations  is  a multiple 
of  the  unrolling  factor,  you  branch  to  just  before  the  Loop  conditional 
and  Let  it  handle  the  case  of  0.  Here,  we  have  a special  test  for  0 
at  the  head  of  the  Loop  and  fall  through  into  the  top  of  the  Loop 
if  it  passes. 

Basically,  with  STEP  being  a multiply  step,  it's: 


;;  “ 

; 

STEP; 

count  +=  2; 
mod4  = count  % 4; 
count  /=  4; 

switch(mod4)  { 

case  3 : 

; 

n if  (count) 

{ 

; 

□ n do 

{ 

; 

; 

n n n 

case  2 : 

STEP; 

; 

□ □ D 

case  1 : 

STEP; 

; 

Don 

case  0 : 

STEP; 

n □ □ 

STEP; 

n n } 

n } 

} 

while 

(--count); 

The  switchC)  is  actually  done  by  two  Levels  of  branch  instructions 
rather  than  a Lookup  table. 


bniMuLNl  16n 


p r o c n 


far 


pushn 
mo  vn 
pushn 
pushn 
pushn 
c L d 


bp 

bp,sp 
d s 
s i 
d i 
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n 

L esn 

di ,Cbp+6Dn 

f 

out 

n 

1 d 5Q 

si , Cbp+1 0Dn 

r 

i n 

a 

movn 

cx, Cbp+1 4]n 

r 

1 e n 

n 

mo  V 

bp, Cbp+1 6]n 

r 

k 

r r 

First  multiply  step  has  no  carry  in 

n 

1 od  s w 

n 

mu  1 n 

bp 

n 

s t o s w 

/ / 

The  switchC) 

for  Duff's  devi 

c e 

starts  here 

r r 

Note:  this  * 

is*  faster  than 

a 

jump  table  for  an  8086  and 

/ f 

8086:  jump 

table:  44  cycles 

/ 

this:  27/29/31/41 

r f 

80286:  jump 

table:  25  cycles 

r 

this:  17/17/20/22 

n 

s h rn 

C X , 1 

n 

j cn 

SHORT  m16_odd 

n 

i ncn 

cx 

□ 

s h rn 

C X , 1 

Q 

j cn 

SHORT  m16_case2 

Q 

j mpn 

SHORT  m16_case0 

□ 

nopn 

n n 

/ 

To  align  loop 

m16 

_odd  : 

Q 

i n cn 

C X 

Q 

sh  rn 

cx,  1 

n 

j n c n 

SHORT  m16_case1 

n 

j zn 

SHORT  m16_donen 

r 

Avoid  entire  loop 

in  this 

m16 

_ 1 oop : 

a 

1 od  sw 

n 

movn 

bx,dxn  n 

/ 

Remember  carry  for 

later 

n 

mu  1 n 

bp 

Q 

addn 

a X , bxn  n 

/ 

Add  carry  in  f rom 

previous 

n 

a d c n 

dx,  0 

n 

stosw 

m16 

_ c a s e2 : 

n 

1 od  s w 

n 

movn 

bx,dxn  n 

/ 

Remember  carry  for 

later 

n 

mu  1 n 

bp 

Q 

addn 

ax, bxn  n 

/ 

Add  carry  in  from 

previous 

n 

a d cn 

dx,0 

n 

stosw 

ml  6 

_case1  : 

n 

1 od  s w 

n 

movn 

bx,dxn  n 

r 

Remember  carry  for 

later 

n 

mu  1 n 

bp 

n 

addn 

ax, bxn  n 

r 

Add  carry  in  from 

previous 

n 

a d c n 

dx,0 

n 

stosw 

m16 

_case0 : 

n 

1 od  sw 

Q 

movn 

bx, dxn  n 

r 

Remember  carry  for 

later 

n 

mu  1 n 

bp 

n 

addn 

ax, bxn  n 

r 

Add  carry  in  from 

previous 

n 

adcn 

dx  , 0 

n 

stosw 

' 286  . 
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n 

Loopn 

ml 6_  1 oop 

ml 6_done  : 

n 

movn 

ax,dx 

□ 

stoswn 

n n ; 

Store  last  word 

n 

popn 

d i 

D 

popQ 

s i 

n 

popn 

d s 

n 

popn 

bp 

n 

ret 

_bniMuLN1_16n 

e n d p 

□ 

a L i g n n 

2 

_bn i Mu  1 Addi _1 6n 

procn  far 

n 

pushn 

bp 

□ 

movn 

bp,  sp 

D 

pushn 

d s 

n 

pushn 

s i 

n 

pushn 

d i 

□ 

c L d 

n 

L esn 

bx,Cbp  + 6!]n  ; 

out 

n 

Ldsn 

si,Cbp+10]n  ; 

i n 

s 

movn 

cx,Cbp+14]n  ; 

1 e n 

n 

mo  V 

bp,Cbp+163n  ; 

k 

; ; First 

multiply  step  has  no  carry  in 

□ 

1 od  s w 

n 

mu  1 n 

bp 

□ 

a ddn 

es:Cbx!],axn  ; 

This  time,  store  in  CbxD 

n 

adcn 

dx,0 

□ 

subn 

bx,sin  n ; 

Prepare  to  use  Cbx+siU. 

;;  The  switchC) 

for  Duff's  device 

starts  here 

; ; Note: 

this  * 

is*  faster  than  a 

jump  table  for  an  8086  and 

;;  8086: 

jump 

table:  44  cycles; 

this:  27/29/31/41 

;;  80286 

: jump 

table:  25  cycles; 

this:  17/17/20/22 

n 

s h rn 

cx,  1 

n 

jcn 

SHORT  ma16_odd 

n 

i n cn 

C X 

n 

s h rn 

C X , 1 

n 

jcn 

SHORT  ma16_case2 

n 

j mpn 

SHORT  ma16_case0 

ma 1 6_odd 

; 

Q 

i n c n 

cx 

□ 

sh  rn 

C X , 1 

n 

j ncn 

SHORT  ma16_case1 

a 

jzn 

SHORT  ma16_donen; 

Avoid  entire  loop  in  this 

ma16_Loop: 

Q 

lodSM 

n 

movn 

di ,dxn  n ; 

Remember  carry  for  later 

□ 

mu  1 n 

bp 

directly 


■286. 


case 
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n 

a ddn 

n 

adcn 

Q 

adda 

n 

adcn 

ma  1 6_ 

. c a s e 2 : 

n 

Lodsw 

n 

mo  vn 

n 

mu  L n 

n 

adda 

n 

adcn 

a 

addn 

n 

adcn 

ma  1 6_ 

easel  : 

n 

Lodsw 

n 

mo  vn 

n 

mu  L n 

n 

addn 

Q 

adcn 

n 

addn 

n 

adcn 

ma  1 6_ 

ca  se0 : 

n 

Lodsw 

n 

mo  vn 

n 

mu  L n 

Q 

addn 

n 

adcn 

n 

addn 

n 

adcn 

D 

L oopn 

ma  1 6_ 

done  : 

o 

mo  vn 

n 

popn 

n 

popn 

n 

popn 

Q 

popn 

n 

ret 

_bniHuLAdd1_16n 

n 

a L i gnn 

_bn i Hu  L Subi _1 6n 

n 

pushn 

n 

mo  vn 

n 

pushn 

n 

pushn 

n 

pushn 

n 

c L d 

n 

L esn 

n 

Ldsn 

n 

mo  vn 

n 

mo  V 

ax,di n n 
dx,0 

es:Cbx+si3,ax 
dx,  0 


d i , dxn  n 
bp 

a X , d i n n 

dx,0 

es:Cbx+si3,ax 
dx,  0 


d i , d X n n 

bp 

a X , d i n n 
dx,  0 

es:Cbx+siD,ax 

dx,0 


d i , dxn  n 
bp 

a X , d i n n 

dx,0 

es  : Cbx  + si 3, ax 
dx  , 0 

mal 6_  Loop 


a X , d X 

d i 
s i 
ds 
bp 


e n d p 
2 

procn  far 
bp 

bp,  sp 
d s 
s i 
d i 

bx,Cbp+6Dn 
si ,Cbp+10Dn 
cx, Cbp+1 4Dn 
bp, Cbp+1 63n 


; Add  carry  in  from  previous  word 


; Remember  carry  for  Later 
; Add  carry  in  from  previous  word 


; Remember  carry  for  Later 
; Add  carry  in  from  previous  word 


; Remember  carry  for  Later 
; Add  carry  in  from  previous  word 


; out 
; i n 
; L e n 
; k 


;;  First  muLtipLy  step  has  no  carry  in 
D L od  s w 
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d 

mu  L n 

bp 

□ 

subn 

es:CbxIl,axn 

; This  time,  store  in  Cbx!]  directly 

Q 

adcn 

dx,  0 

Q 

subn 

bx, s i n n 

; Prepare  to  use  Cbx+si]. 

;;  The  switchC) 

for  Duff's  devi ce 

starts  here 

; ; Note:  this  * 

is*  faster  than  a 

jump  table  for  an  8086  and 

;;  8086:  jump 

table:  44  cycles; 

this:  27/29/31/41 

;;  80286:  jump 

table:  25  cycles; 

this:  17/17/20/22 

□ 

s h rn 

cx,1 

□ 

j c n 

SHORT  ms16_odd 

□ 

i ncn 

C X 

n 

s h rn 

C X , 1 

n 

j cn 

SHORT  msl 6_case2 

n 

j mpn 

SHORT  ms16_case0 

ms  1 6_ 

odd  : 

n 

i ncn 

C X 

Q 

s h r n 

C X , 1 

D 

j ncn 

SHORT  ms16_case1 

n 

j zn 

SHORT  ms16_donen; 

Avoid  entire  Loop  in  this 

ms  1 6_ 

Loop: 

□ 

L od  s w 

□ 

mo  vn 

d i , d X n n ; 

Remember  carry  for  Later 

n 

mu  L n 

bp 

Q 

addn 

ax,di n n ; 

Add  carry  in  from  previous 

n 

adcn 

dx,0 

□ 

subn 

es:IIbx  + si!l,ax 

n 

adcn 

dx,  0 

ms  1 6_ 

case2 : 

n 

1 odsw 

n 

mo  vn 

di ,dxn  n ; 

Remember  carry  for  Later 

Q 

mu  L n 

bp 

□ 

addn 

a X, d i n n ; 

Add  carry  in  from  previous 

Q 

adcn 

dx,  0 

n 

subn 

es:Cbx+siD,ax 

n 

adcn 

dx,  0 

ms  1 6_ 

easel : 

□ 

L od  s w 

n 

movn 

d i , d X n n ; 

Remember  carry  for  Later 

Q 

mu  L n 

bp 

n 

addn 

ax, din  n ; 

Add  carry  in  from  previous 

n 

adcn 

dx,  0 

□ 

subn 

es:Cbx+siD,ax 

n 

adcn 

dx,  0 

ms  1 6_ 

ca  se0 : 

n 

L od  s w 

n 

movn 

di ,dxn  n ; 

Remember  carry  for  Later 

□ 

mu  L n 

bp 

n 

addn 

ax,di n n ; 

Add  carry  in  from  previous 

n 

adcn 

dx,  0 

n 

subn 

es:  Cbx  + si ],ax 

n 

adcn 

dx,  0 

n 

1 00  pn 

ms16_loop 

■286. 
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ms16_done: 


n 

movB 

a X , d X 

Q 

popn 

d i 

n 

popn 

s i 

□ 

popn 

d s 

n 

popn 

bp 

B 

ret 

_bn i Mu L Subi _1 6n  endp 


Two-word  by  one-word  divide.  Stores  quotient,  returns  remainder. 
BNW0RD16  bni Di v21 _1 6(BNW0RD1 6 *q,  BNW0RD16  nh,  BNW0RD16  nL,  BNW0RD16  d) 


r f 

n 


8 


1 0 


1 2 


a L i gnn  2 


_b  n i D i 

v21_16n 

procn  far 

n 

tnovn 

cx,bpn  n ; 

bp  NOT  pushed; 

note  change  in  offsets 

B 

movB 

bp,  sp 

B 

movn 

dx, Cbp+8D 

B 

movB 

ax,Cbp+10D 

B 

d i vn 

WORD  PTR  :bp+123 

B 

Lesn 

bx, Cbp+4] 

B 

movn 

es:CbxD,ax 

B 

movn 

ax,  dx 

B 

movn 

bp,  cx 

B 

ret 

B 

nopn 

n /ToaLign 

Loop  in  bniModQ  properly 

_bn i D i v21 _1 6n 

endp 

; ; HuLti-word 

by  one-word  remainder. 

;;  BNW0RD16  bn i HodQ_1 6 ( BNWOR D 1 6 *q 

, unsigned  Len, 

unsigned  d ) 

f r 

6 

10 

1 2 

_bn i HodQ_1 6n 

procn  far 

B 

pusha 

bp 

B 

movn 

bp,sp 

B 

pushQ 

d s 

B 

movn 

bx,si 

B 

movn 

cx,10CbpIln  ; 

Load  len 

n 

Idsn 

si ,6[bp]n  ; 

Load  q 

B 

stdn 

n n 

Loop  MSW  to  LSU 

B 

addn 

s i , c X 

B 

movn 

bp,12Cbp!]n  ; 

Load  d 

B 

addn 

s i , cx 

B 

xo  rn 

dx,dxn  n ; 

Set  up  for  first  divide 

B 

subn 

s i , 2 n n ; 

Adjust  pointer 

to  point  to  MSW 

B 

Lodswn 

n n ; 

Load  first  word 

B 

cmpn 

ax,bpn  n ; 

See  if  we  can  skip  first  divide 

B 

j ncn 

SHORT  modq 1 6_ i nne rn  ; No  such 

Luck 

B 

movn 

dx,axn  n ; 

Yes!  Modulus  > 

input,  so  remainder  = 

B 

decn 

C X n n ; 

Do  Loop 

B 

j zn 

SHORT  modq16_done 

modq1 6 

_ L OOP : 

B 

L odsw 

modql 6 

_ i nn  e r : 

i nput 
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n d i vn 

n Loopn 

modql 6_done : 
a popn 

a mo  vn 

n popn 

n mo  vn 

n c L dn 

n ret 


bp 

modq16_Loop 
d s 

ax,dxn  ; Return  remainder 
bp 

s i , bx 

n ; Microsoft  C's  Libraries  assume  this 


bniModQ  16n 


e nd  p 


Similar,  but  using  32-bit  operations. 

The  differences  are  that  the  switchC)  in  Duff's  device  is  done  using 
a jump  table,  and  Lods  is  not  used  because  it's  slower  than  Load  and 
increment.  The  pointers  are  only  updated  once  per  Loop;  offset 
addressing  modes  are  used,  since  they're  no  slower.  Ldi3  is  used 
instead  of  Cbx+siD  because  the  extra  increment  of  di  take  only  one 
cycle  per  Loop  a '486,  while  Cbx+si]  takes  one  extra  cycle  per  multiply. 

The  register  assignments  are  also  slightly  different: 

esiCsiDn  in 

dsiCdiDn  out 

ecxn  n k 

bpn  n Loop  counter  (Len/4) 

edx,eaxn  high, Low  parts  of  product 

ebxn  n carry  word  from  previous  multiply  iteration 

The  use  of  bp  for  a loop  counter  Lets  all  the  32-bit  values  go 
in  caller-save  registers,  so  there's  no  need  to  do  any  32-bit 
saves  and  restores.  Using  ds:di  for  the  destination  saves  one 
segment  override  in  the  bniMuLN1_32  code,  since  there's  one  more 
store  to  Cdi3  than  Load  from  es:CsiD. 

Given  the  number  of  32-bit  references  that  this  code  uses,  optimizing 
it  for  the  Pentium  is  interesting,  because  the  Pentium  has  a very 
inefficient  implementation  of  prefix  bytes.  Each  prefix  byte,  with 
the  exception  of  0x0f  *>>  on  conditional  branch  instructions  ONLY  <<* 
is  a 1-cycLe  non-pa i r i ab I e instruction.  Which  has  the  effect  of 
forcing  the  instruction  it's  on  into  the  U pipe.  But  this  code  uses 
*Lots*  of  prefix  bytes,  notably  the  0x66  operand  size  override. 

For  example  "add  CdiD,eax"  is  advised  against  in  Intel's  optimization 
papers,  because  it  takes  3 cycles  and  2 of  them  are  not  pairable. 

But  any  Longer  sequence  would  have  a prefix  byte  on  every  instruction, 
resulting  in  even  more  non-pairable  cycles.  Also,  only  two  instructions 
in  the  multiply  kernel  can  go  in  the  V pipe  (the  increments  of  si  and 
di),  and  they're  already  there,  so  the  pairable  cycles  would  be  wasted. 

Things  would  be  *quite*  different  in  native  32-bit  mode. 

ALL  instructions  that  could  go  in  the  V pipe  that  aren't  there  are 
marked. 

The  setup  code  is  quite  intricately  interleaved  to  get  the  best  possible 
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;;  performance  out  of  a Pentium.  If  you  want  to  follow  the  code, 

;;  pretend  that  the  sections  actually  come  in  the  following  order: 

;;  1)  prologue  (push  registers) 

;;  2)  load  (fetch  arguments) 

;;  3)  first  multiply 
;;  4)  loop  unrolling 

r r 

;;  The  loop  unrolling  setup  consists  of  taking  the  count,  adjusting 
;;  it  to  account  for  the  first  multiply,  and  splitting  it  into 
;;  two  parts:  the  high  bits  are  a loop  count,  while  the  low  bits  are 
;;  used  to  find  the  right  entry  in  the  Duff's  device  jump  table  and 
;;  to  adjust  the  initial  data  pointers. 


f 

r 

/ 

r 

r 


Known  slack:  There  is  one  instruction  in  the  prologue  and  one  in 
the  epilogue  that  could  go  in  the  V pipe  if  I could  find  a U-pipe 
instruction  to  pair  them  with,  but  all  the  U-pipe  instructions 
are  already  paired,  so  it  looks  difficult. 


r 

/ 

/ 

/ 

/ 

r 

/ 

/ 


There  is  a cycle  of  Address  Generation  Interlock  in  the  bniMulN1_32 
code  on  the  Pentium  (not  on  a '486).  I can't  figure  out  how  to 
get  rid  of  it  without  wasting  time  elsewhere.  The  problem  is  that 
the  load  of  bx  needs  to  be  done  as  soon  as  possible  to  let  it 
be  set  up  in  time  for  the  switch().  The  other  problem  is  the 
epilogue  code  which  can  waste  time  if  the  order  of  the  pushed 
registers  is  diddled  with  so  that  ds  doesn't  come  between  si  and  di. 


/ 

r 

r 

A 


The  increment  of  si  after  the  last  load  is  redundant,  and  the 
copy  of  the  high  word  of  the  product  to  the  carry  after  the  last 
multiply  is  likewise  unnecessary. 


;;  In  these  cases,  the  operations  were  done  that  way  in  order  to  remove 
;;  cycles  from  the  loop  on  the  '486  and/or  Pentium,  even  though  it  costs 
;;  a few  overhead  cycles  on  a '386. 

;;  The  increment  fo  si  has  to  be  done  early  because  a load  based  on  si 
;;  is  the  first  thing  in  any  given  multiply  step,  and  the  address 
;;  generation  interlock  on  the  '486  and  Pentium  requires  that  a full 
;;  cycle  (i.e.  possibly  two  instructions  on  a Pentium)  pass  between 
;;  incrementing  a register  and  using  it  in  an  address. 

;;  This  saves  one  cycle  per  multiply  on  a '486  and  Pentium,  and  costs 
;;  2 cycles  per  call  to  the  function  on  a '386  and  1 cycle  on  a '486. 


/ / 

;;  The  carry  word  is  copied  where  it  is  so  that  the  decrement  of  the  loop 
;;  counter  happens  in  the  V pipe.  The  instruction  between  the  decrement 
;;  of  the  loop  counter  and  the  branch  should  be  a U-pipe  instruction  that 
;;  doesn't  affect  the  flags.  Thus,  the  "mov"  was  rotated  down  from 
;;  the  top  of  the  loop  to  fill  the  slot. 

;;  This  is  a bit  more  marginal:  it  saves  one  cycle  per  loop  iteration  on 
;;  a Pentium,  and  costs  2 cycles  per  call  on  a '386,  '486  or  Pentium. 

/ / 

;;  The  same  logic  applies  to  the  copy  of  the  carry  and  increment  of  si 
;;  before  the  test,  in  case  0,  for  skipping  the  loop  entirely. 

;;  It  makes  no  difference  in  speed  if  the  loop  is  executed,  but 
;;  incrementing  si  before  saves  an  address  generation  interlock  cycle 
;;  On  a '486  and  Pentium  in  the  case  that  the  loop  is  executed. 

;;  And  the  loop  is  executed  more  often  than  not. 


r r 

;;  Given  that  just  one  multiply  on  a '386  takes  12  to  41  cycles  (with  the 
;;  average  being  very  much  at  the  high  end  of  that)  4 cycles  of  additional 
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;;  overhead  per  caLL  is  not  a big  deal. 

;;  On  a Pentium,  it  would  actually  be  easier  to  *not*  unroll  the  loop 
;;  at  all,  since  the  decrement  and  compare  are  completely  hidden 
;;  in  the  V-pipe  and  it  wouldn't  cost  anything  to  do  them  more  often. 

;;  That  would  save  the  setup  for  the  unrolling  and  Duff's  device  at  the 
;;  beginning.  But  the  overhead  for  that  is  pretty  minor:  ignoring  what's 
;;  hidden  in  the  V pipe,  it's  two  cycles  plus  the  indirect  jump. 

;;  Not  too  much,  and  special-casing  the  pentium  is  quite  a hassle. 

;;  (For  starters,  you  have  to  detect  it,  and  since  you're  probably  in 
; ; V86  mode,  without  access  to  the  EFLAGS  register  to  test  the  CPUID  bit.) 


n alignn  16 


- 

DniMulN1_32n 

p r 0 c n 

far 

u 

p u s h Q 

bpB 

fl 

r 

Un 

prologuen 

* * 

Could 

b e 

V 

u 

movn 

bp, spn 

fl 

f 

Vn 

prologue 

n 

pu  s hn 

sin 

B 

r 

lln 

prologuen 

★ * 

Could 

be 

V 

n 

movn 

bx,Cbp  + 14!]n 

f 

un 

load  lenn 

* * 

Could 

be 

V ( AGI  I ) r 

B 

pu  s h n 

dsn 

B 

r 

NPn 

prologue 

B 

1 esn 

si,[!bp  + 10)n 

r 

NPn 

load  in 

B 

mo  V 

ecx,IIbp  + 16]n 

/ 

Un 

load  k 

B 

d e c n 

bxn 

fl 

/ 

Vn 

1 oop  un  ro 1 1 i 

ng 

B 

shin 

bx,  2n 

fl 

f 

Un 

1 oop  un  ro  1 1 i 

ng 

B 

pushn 

d i n 

fl 

r 

Vn 

prologue 

fl 

1 d sn 

di,Cbp+6]n 

/ 

NPn 

load  out 

B 

movn 

bp, bxn 

B 

r 

Un 

loop  unrolli 

ngn 

Could 

b e 

V 

B 

a n dn 

bx, 1 2n 

fl 

r 

Vn 

loop  unrolli 

ng 

;;  First  multiply  step  has  no  carry  in. 


B 

movn 

eax,es : Csi Dn 

/ 

Un 

first 

multiply 

B 

addn 

s i , bxn  n 

r 

Vn 

loop 

unrolling 

fl 

mu  1 n 

e c xn  n 

r 

NPn 

first 

multiply 

fl 

movn 

Cdi D,eaxn 

A 

Un 

first 

multiply 

fl 

addn 

d i , bxn  n 

A 

Vn 

loop 

unrolling 

;;  The  switchC)  for  Duff's  device.  This  jump  table  is  (slightly!)  faster 
;;  than  a bunch  of  branches  on  a '386  and  '486,  and  is  probably  better  yet 
;;  on  higher  processors. 

n jmpn  WORD  PTR  c s : m32 _ j ump t a b I e C bx ) n ; NPn  loop  unrolling 


m32_ 

j ump t a b 1 e : 

fl 

dwn 

OFFSET 

m32 

_ c a s e0 , 

0 

fl 

dwn 

OFFSET 

m32 

_ c a s e 1 , 

0 

B 

dwn 

OFFSET 

m32 

_ ca  s e2 , 

0 

fl 

dwn 

OFFSET 

m32 

_ ca  s e3 , 

0,  0, 

0,  0n  ; Get 

loop 

aligned  properly 

m32_ 

case0 : 

fl 

addn 

s i , 1 6n 

n 

A 

un 

Fix  up  sin 

* ★ 

Could  be  V 

B 

testn 

bp,  bpn 

n 

A 

V 

fl 

movn 

ebx, edxnn 

A 

Un 

Remember  carry  for 

later 

fl 

j ben 

SHORT  m32_ 

donen  ; 

Vn 

Avoi d entire 

loop  i 

f loop  count  is 

m32_ 

loop: 

fl 

movn 

eax,es : 

L s i 

-12:n  ; 

U 

fl 

addn 

di,  16n 

fl 

A 

V 

fl 

mu  1 n 

ecxn 

n 

A 

NP 
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n 

addn 

eax, ebxnn 

r 

Un 

Add  carry  in  f 

rom 

previ ous 

word 

n 

adca 

edx,0n  n 

r 

U 

n 

movn 

Cdi-12D,eaxn 

r 

U 

m32 

_c  a se3 : 

n 

movn 

ebx, edxnn 

r 

Un 

Remembe  r carry 

for 

Later 

□ 

movn 

eax,es: Csi-8]n 

r 

U 

n 

mu  Ln 

ecxn  n 

/ 

NP 

□ 

addn 

eax, ebxnn 

r 

Un 

Add  carry  in  from 

previous 

word 

n 

a d cn 

edx, 0n  n 

r 

U 

□ 

movn 

Cdi-83,eaxn 

r 

U 

m32 

_ c a s e 2 : 

n 

movn 

ebx, edxnn 

r 

Un 

Remembe  r carry 

for 

Later 

n 

movn 

eax,es: Csi-4Dn 

f 

U 

□ 

mu  L n 

ecxn  n 

r 

NP 

a 

addn 

eax, ebxnn 

r 

Un 

Add  carry  in  from 

previ ous 

word 

n 

adcn 

edx,0n  n 

r 

U 

n 

movn 

Cdi-43,eaxn 

r 

U 

m32 

_case1  : 

n 

movn 

ebx, edxnn 

r 

Un 

Remembe  r carry 

for 

Later 

n 

movn 

eax,es:[!si3n 

/ 

U 

Q 

mu  L n 

ecxn  n 

r 

NP 

n 

addn 

eax, ebxnn 

r 

Un 

Add  carry  in  f rom 

previous 

word 

n 

adcn 

edx,0n  n 

t 

U 

n 

addn 

s i , 1 6 nn 

r 

V 

n 

movn 

Cdi 3,eaxn 

/ 

U 

n 

subn 

bp, 1 6n  n 

/ 

V 

□ 

movn 

ebx, edxnn 

r 

Un 

Remembe  r carry 

for 

Later 

n 

j an 

m32_Loopn 

r 

V 

m32 

.done : 

n 

movn 

Cdi+4!],edxn 

r 

U 

n 

popn 

din  n 

f 

V 

n 

popn 

dsn  n 

f 

NP 

□ 

popn 

sin  n 

r 

Un 

**  Could  be  V 

n 

popn 

bpn  n 

r 

V 

a 

retn 

n n 

/ 

NP 

_bnnMuLN1 _32n 

endp 

n 

a L i g nn 

16 

- 

bni Mu  L Addi _32n 

p r 0 c n 

far 

Q 

pushn 

bpn 

n 

/ 

Un 

proLoguen 

•k* 

Could 

be 

V 

Q 

movn 

bp , s pn 

a 

r 

Vn 

prologue 

n 

pushn 

dsn 

n 

r 

NPn 

prologue 

n 

mo  V 

ecx,Cbp+163n 

r 

Un 

load  k 

a 

movn 

bx,Cbp  + 14!]n 

r 

Vn 

load  1 e n 

n 

pushn 

d i n 

a 

r 

un 

prologuen 

* * 

Could 

be 

V 

n 

decn 

bxn 

u 

/ 

Vn 

loop  unrolling 

D 

Ldsn 

di  , Cbp  + 6Dn 

/ 

NPn 

load  out 

n 

shin 

bx,  2n 

n 

/ 

Un 

loop  unrolling 

n 

pushn 

sin 

n 

/ 

Vn 

prologue 

n 

1 e sn 

si,Cbp+10Dn 

/ 

NPn 

load  in 

n 

movn 

bp, bxn 

n 

r 

Un 

1 OOP  un  ro  1 1 i ngn 

★ * 

Could 

be 

V 
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Q 

a ndn 

bx , 1 2n 

n 

r 

Vn 

1 oop 

unrolling 

r r 

First  multi 

ply  step 

has  no 

carry  in. 

n 

movn 

e a X , e s 

C s i Da 

/ 

Un 

first 

multiply 

Q 

adds 

s i , bxn 

□ 

/ 

Vn 

loop 

unrolling 

n 

mu  1 n 

e c xn 

XX 

r 

NPn 

first 

multiply 

□ 

addQ 

Cdi D,eaxn 

Un 

first 

multiply 

Et 

adcn 

e d X , 0n 

XX 

r 

Un 

first 

multiply 

Q 

addn 

d i , bxn 

XX 

/ 

vn 

loop 

unrolling 

;;  The  switchC)  for  Duff's  device.  This  jump  table  is  (slightly!)  faster 
;;  than  a bunch  of  branches  on  a '386  and  '486,  and  is  probably  better  yet 
;;  on  higher  processors. 

n jmpn  WORD  PTR  cs:ma32_jumptableCbx!]n  ; NPn  loop  unrolling 

n a I i g n 2 

ma32_jumptable: 

n dwn  OFFSET  ma32_case0,  0 


n 

dwn 

OFFSET  ma32_case1 

, 0 

□ 

dwn 

OFFSET  ma32_case2 

r 0 

XX 

dun 

OFFSET  ma32_case3 

, 0, 

0n;  To  get  loop  aligned  properly 

ma32_ 

c a s e0 : 

n 

addn 

s i , 1 6n  n 

Un 

Fix  up  sin  **  Could  be  V 

n 

testn 

b p , b pn  n 

r 

V 

XX 

movn 

ebx, edxnn 

r 

Un 

Remember  carry  for  later 

XX 

j ben 

SHORT  ma32_donen 

; 

Vn 

Avoid  entire  loop  if  loop 

count  is  0 

ma  3 2 _ 

loop: 

n 

movn 

eax,es:Csi-12Dn 

f 

U 

n 

addn 

d i , 1 6n  n 

r 

V 

B 

mu  1 n 

e c xn  n 

r 

NP 

B 

addn 

eax,ebxnn 

Un 

Add  carry  in  from  previous 

word 

B 

adcn 

edx,0n  n 

r 

U 

B 

addn 

Cdi-12D,eaxn 

/ 

U 

B 

adcn 

edx,0n  n 

r 

U 

ma  32_ 

c a s e 3 : 

B 

movn 

ebx, edxnn 

/ 

Un 

Remember  carry  for  later 

B 

movn 

eax,es:Csi-83n 

/ 

U 

B 

mu  1 n 

e cxn  a 

/ 

NP 

B 

addn 

eax,ebxnn 

r 

Un 

Add  carry  in  from  previous 

word 

B 

adcn 

edx,0n  a 

r 

U 

B 

addn 

Cdi-8],eaxa 

r 

U 

B 

adcn 

edx,0n  a 

r 

U 

ma32_ 

case2 : 

B 

movn 

ebx, edxna 

r 

un 

Remember  carry  for  later 

B 

movn 

eax,es:Csi-4Dn 

X 

U 

B 

mu  L n 

e c xa  a 

X 

NP 

B 

addn 

eax,ebxna 

X 

Un 

Add  carry  in  from  previous 

word 

B 

adcn 

edx, 0n  a 

X 

U 

B 

addn 

Cdi-4i],eaxn 

X 

U 

B 

adcn 

edx, 0n  a 

X 

U 

ma32_ 

easel  : 

B 

movn 

ebx, edxna 

X 

Un 

Remember  carry  for  later 

B 

movn 

eax,es: Esi 3n 

X 

U 

B 

mu  In 

e c xn  a 

X 

NP 

B 

addn 

eax,ebxna 

X 

Un 

Add  carry  in  from  previous 

word 

B 

adcn 

edx,0n  a 

X 

U 

B 

addn 

s i , 1 6 na 

X 

V 
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a 

addn 

Cdi  !],eaxD 

f 

U 

a 

adcn 

edx, 0n 

a 

r 

U 

a 

subn 

bp, 1 6n 

a 

/ 

V 

a 

mo  vn 

ebx,edxnn 

/ 

Un 

Remember  carry 

for  later 

a 

j an 

ma  32_  L oopn 

/ 

V 

ma  32 

_done : 

a 

popn 

sin 

r 

Un 

★ * 

Could  be  V 

a 

popn 

din 

r 

V 

a 

mo  vn 

a X , d xn 

r 

Un 

return 

value  lown 

**  Could  be  V 

a 

popn 

dsn 

r 

NP 

a 

s h rn 

edx, 1 6n 

f 

un 

return 

value  high 

a 

popn 

bpn 

r 

V 

a 

retn 

a 

f 

NP 

_bniHuLAdd1_32n 

e n d p 

a 

a l i g nn 

16 

_bn i Hu  1 Subi _32n 

p r 0 cn 

far 

a 

pu  s h n 

bpn 

a 

r 

Un 

prologuen 

* * 

Could 

be 

V 

a 

mo  vn 

bp , s pn 

a 

f 

Vn 

prologue 

a 

pu  s hn 

dsn 

a 

/ 

NPn 

prologue 

a 

mo  V 

ecx, Cbp+1 6]n 

f 

l)n 

load  k 

a 

mo  vn 

bx, Cbp+1 43n 

r 

Vn 

load  1 e n 

a 

pushn 

d i n 

a 

/ 

Un 

prologuen 

★ * 

Could 

b e 

V 

a 

decn 

bxn 

a 

/ 

Vn 

1 OOP  unrolling 

a 

1 dsn 

di , Cbp+6Dn 

f 

NPn 

load  out 

a 

shin 

bx,  2n 

a 

r 

Un 

loop  unrolling 

a 

pushn 

s i n 

a 

/ 

Vn 

prologue 

a 

1 e sn 

si  , Cbp  + 1 0Dn 

/ 

NPn 

load  in 

a 

mo  vn 

bp, bxn 

a 

r 

Un 

loop  unrollingn 

Could 

be 

V 

a 

andn 

bx,1 2n 

a 

r 

Vn 

loop  unrolling 

First  multiply  step 

has  no 

carry  in. 

a 

movn 

eax,es 

Csi  :n 

/ 

Un 

first  multiply 

a 

addn 

s i , bxn 

a 

/ 

Vn 

1 oop  unrolling 

a 

mu  1 n 

ecxn 

a 

/ 

NPn 

first  multiply 

a 

subn 

Cdi D,eaxn 

/ 

Un 

first  multiply 

a 

adcn 

edx, 0n 

a 

/ 

Un 

first  multiply 

a 

addn 

d i , bxn 

a 

/ 

Vn 

loop  unrolling 

r r 

The  switchC) 

for  Duff ' s devi ce 

T h i 

s jump  table  is 

( s 1 i 

g h 1 1 y 

) 

fa 

;;  than  a bunch  of  branches  on  a '386  and  '486,  and  is  probably  better  yet 
;;  on  higher  processors. 


a 

j mpn 

WORD  PTR  cs 

: ms 32_ j ump t a b 1 e C bx D n • NPn  loop  unrolling 

a 

align  2 

ms32_ 

jumptable: 

a 

dwn 

OFFSET 

ms32 

_case0,  0 

a 

dwn 

OFFSET 

ms32 

_case1,  0 

a 

dwn 

OFFSET 

ms32 

_case2,  0 

a 

dwn 

OFFSET 

ms32 

_case3,  0,  0n;  To  get  loop  aligned  properly 

ins32_case0: 
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□ 

a ddc 

s i , 1 6n  n 

/ 

Un 

Fix  up  si 

n 

* * 

Could  be 

V 

n 

testn 

bp,bpn  n 

/ 

V 

n 

mo  vn 

ebx, edxnn 

r 

Un 

Remembe  r 

carry  for 

later 

s 

j ben 

SHORT  ms32_donen; 

vn 

Avoid  entire 

loop 

if  loop  count 

ms32 

_ 1 OOP  : 

n 

mo  vn 

eax,es:Csi-123n 

r 

U 

XX 

addn 

d i , 1 6n  a 

r 

V 

XX 

mu  1 n 

ecxn  n 

f 

NP 

XX 

addn 

eax,ebxnn 

r 

Un 

Add  carry 

i n 

from 

previous 

word 

XX 

a d cn 

edx,0n  n 

/ 

U 

XX 

subn 

Cdi-12D,eaxn 

r 

U 

□ 

adcn 

ed  X , 0n  H 

r 

U 

ms32 

_ c a s e3 : 

n 

mo  vn 

ebx, edxnn 

/ 

Un 

Remembe  r 

carry  for 

later 

n 

movn 

eax,es: Csi-8Dn 

/ 

U 

□ 

mu  1 n 

ecxn  n 

/ 

NP 

n 

addn 

eax,ebxnn 

/ 

Un 

Add  carry 

1 n 

from 

previous 

word 

XX 

adcn 

e d X , 0n  n 

t 

U 

XX 

subn 

Cdi-8D,eaxn 

r 

U 

XX 

adcn 

edx,0n  n 

f 

U 

ms32 

_case2 : 

n 

movn 

ebx, edxnn 

/ 

un 

Remember 

carry  for 

later 

Q 

movn 

eax,es:[isi-4Dn 

r 

U 

□ 

mu  1 n 

ecxn  n 

r 

NP 

□ 

addn 

eax,ebxnn 

r 

Un 

Add  carry 

1 n 

from 

previous 

word 

XX 

adcn 

edx,0n  n 

r 

U 

XX 

subn 

Cdi-43,eaxn 

r 

U 

XX 

adcn 

edx,0n  n 

r 

U 

ms32 

_ c a s e 1 : 

n 

movn 

ebx, edxnn 

r 

Un 

Remembe  r 

carry  for 

later 

n 

movn 

eax,es:CsiDn 

r 

U 

□ 

mu  1 n 

ecxn  n 

r 

NP 

XX 

addn 

eax,ebxnn 

w 

Un 

Add  carry 

i n 

from 

previous 

word 

XX 

adcn 

edx,0n  n 

r 

U 

XX 

addn 

s i , 1 6 nn 

r 

V 

XX 

subn 

[di 3,eaxn 

/ 

U 

XX 

adcn 

edx,0n  n 

/ 

U 

XX 

subn 

bp, 1 6n  n 

/ 

V 

XX 

movn 

ebx, edxnn 

r 

Un 

Remembe  r 

carry  for 

later 

□ 

j an 

ms32_  1 oopn 

r 

V 

ms32 

_done : 

n 

popn 

sin  ; U n 

★ * 

Could  be  V 

n 

popn 

din  ; V 

□ 

movn 

ax, dxn  ; Un 

return 

value  1 own 

* * 

Could  be 

V 

XX 

popn 

dsn  ; NP 

XX 

s h rn 

edx, 1 6n  ; Un 

return 

value  high 

XX 

popn 

b p n ; V 

XX 

retn 

n ; NP 

bn i Mu  I S u b 1 _32 n endp 


r r 

r r 


Just  for  interest's  sake,  here's 
In  addition  to  being  smaller,  it 


a completely  Pentium-optimized 
takes  8 + ( 8+mu I _t i me ) *n  cycles 


version. 
, as 
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/ / 

compared  to 

the  10  + j mp_ t i me  ^ 

( 8+mu L_t i me ) *n  cycles  for  the 

Loop  above 

r r 

(I  don't  know  how  Long  a 32x32- 

■>64 

bit  multiply  or 

an  indirect 

jump 

r f 

take  on  a Pentium,  so  plug  those  numbers  in.) 

;« 

a L i gnn 

2 

nopn 

; To  align  loop 

n 1 

c e L y 

;P_ 

bni Mu  L Addi _ 

32n  procn 

far 

r 

pu  s h n 

b pn  n 

/ 

un 

prologuen 

**  Could 

be  V 

mo  vn 

bp,  spn  n 

r 

Vn 

prologue 

pushn 

dsn  n 

F 

NPn 

prologue 

mo  V 

ecx, Cbp+1 63n 

r 

un 

load  k 

pushn 

sin  n 

r 

Vn 

prologue 

Ldsn 

si  ,nbp+10Dn 

/ 

NPn 

Load  in 

mo  vn 

eax,CsiDn 

/ 

Un 

first  multiply 

pushn 

din  n 

/ 

Vn 

prologue 

mu  L n 

ecxn  n 

r 

NPn 

first  multiply 

L e sn 

d i , Cbp  + 6Dn 

; 

NPn 

load  out 

addn 

es:[di!],eaxn 

r 

Un 

first  multiply 

mo  vn 

bp,  Cbp  + 1 4Dn 

r 

Vn 

Load  L en 

adcn 

edx,0n  n 

F 

Un 

first  multiply 

dec 

b p n n 

F 

V 

mo  vn 

ebx, edxnn 

F 

Un 

Remembe  r carry 

for  later 

j en 

Pma32_donen 

F 

V 

; Pma32_  L oop : 

mo  vn 

eax,Csi+4]n 

F 

u 

addn 

d i , 4n  n 

F 

V 

mu  1 n 

ecxn  n 

F 

NP 

addn 

eax,ebxnn 

F 

Un 

Add  carry  in  from  previous  word 

adcn 

edx,0n  n 

F 

U 

addn 

s i , 4n  n 

F 

V 

addn 

es:Cdi3,eaxn 

F 

U 

;n 

adcn 

edx,0n  n 

F 

U 

de  cn 

bpn  n 

F 

V 

mo  vn 

ebx, edxnn 

F 

un 

Remembe  r carry 

for  later 

j nen 

Pma32_ 1 oopn 

F 

V 

; Pma 32 _d on e : 

popn 

din  ; U n 

it  ★ 

Could  be  V 

popn 

sin  ; V 

popn 

dsn  ; NP 

movn 

ax,dxn  ; Un 

return 

value  Lown 

**  Could 

be  V 

popn 

bpn  ; V 

s h rn 

edx,16n  ; Un 

return 

value  high 

retn 

n ; NP 

; P_b n i Mu  I Add  1 _32n  endp 


F 

; Two-word  by 

one-word 

divide. 

Stores 

quot i ent 

, returns  remainder. 

F 

; BNW0RD32  bn i D i v2 1 _32 ( BN WO RD32 

*q,  BNU0RD32  nh 

, BNW0RD32  nl. 

BNU0RD32 

d) 

F 

F 

4 

8 

1 2 

16 

D 

a L i g nn 

1 6 

_ 

bni Di v21 _32n 

procn 

far 

n 

movn 

cx, bpn 

n 

n 

/ 

Un 

bp  NOT  pushed; 

offsets 

differ 

n 

movn 

bp , s pn 

n 

n 

F 

V 

n 

n 

n 

n 

n 

F 

AGI 

a 

movn 

edx,Cbp+83n 

n 

F 

U 

n 

movn 

eax,Cbp+123n 

n 

F 

U 
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Q 

d i vn 

DWORD  PTR  Cbp+16Dn 

; NP 

Q 

L esn 

bx, C bp  + 4Dn 

Q 

; NP 

n 

mo  vn 

es:  Cbxll,eaxn 

n 

; u 

n 

mo  vn 

a X , d xn  n 

n 

; V 

□ 

s h rn 

edx, 1 6n  n 

n 

; u 

n 

mo  vn 

bp, cxn  n 

n 

; V 

□ 

retn 

n n 

n 

; NP 

□ 

nop 

n 

nop 

n 

nop 

n 

nopn 

n n 

n 

; Get  bniHodQ_32  aligned  properly 

_bni Div21_32n 

endp 

f / 

Mu  L t i -wo  rd 

by  one-word  remainder. 

f r 

This  speeds 

up  key  generation.  It 

's  not  worth  unrolling  and  so  on; 

r r 

using  32-bit  divides  is  enough  of 

a speedup . 

r f 

r r 

bp  is  used 

as  a counter  so 

that  all  the  32-bit  values  can  be  in 

r / 

caLler-save 

registers  Ceax 

, ecx,  edx).  bx  is  needed  as  a pointer. 

r / 

r f 

The  modulus 

(in  ebp)  is  16 

bits. 

Given  that  the  dividend  is  32  bits. 

/ / 

the  chances 

of  saving  the 

first  d i 

vide  because  the  high  word  of  the 

r r 

dividend  is 

less  than  the 

modulus 

are  low  enough  it's  not  worth  taking 

r r 

the  cycles 

to  test  for  it. 

/ / 

/ r 

unsigned  b n i HodQ_3 2 ( BN WO R D 1 6 *q,  unsigned  len,  unsigned  d) 

/ / 

6 

10  12 

_bn i HodQ_32n 

procn  far 

o 

xorn 

ecx,ecxnn 

; Un 

Clear  ecx  (really,  the  high  half) 

n 

pushn 

bpn  a 

; V 

n 

movn 

edx,ecxnn 

; Un 

Clear  high  word  for  first  divide 

n 

movn 

bp, spn  n 

; V 

n 

pushn 

dsn  n 

; NP 

n 

Idsn 

ax, Cbp+bDn 

; NPn 

Load  dividend  pointer 

Q 

movn 

bx,Cbp+103n 

; un 

Load  countn  **  Could  be  V 

n 

subn 

ax, 4n  n 

; vn 

Offset  dividend  pointer 

n 

movn 

cx,Cbp+123n 

; Un 

Load  modulusn  **  Could  be  V 

n 

movn 

bp,bxn  □ 

; vn 

Copy  count 

n 

shin 

bx, 2n  a 

; Un 

Shift  index 

a 

addn 

bx,axn  n 

; un 

Add  basen  **  Could  be  V 

lean 

bx, Ceax+ebp*4 

- 4 D ; U n 

Move  pointer  to  high  word 

modq32_Loop: 

n 

movn 

eax,Cbx3n 

; u 

n 

subn 

bx, 4n  n 

; V 

n 

d i vn 

ecxn  n 

; NP 

a 

decn 

bpn  n 

; Un 

**  Could  be  V 

n 

j nzn 

modq32_loopn 

; V 

modq32_done  : 

Q 

popn 

dsn  n 

; NP 

n 

movn 

ax,dxn  n 

; Un 

**  Could  be  V 

n 

popn 

bpn  □ 

; V 

n 

retn 

n n 

; NP 

bniModQ_32n  endp 
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;;  int  no t 386 ( vo i d ) returns  0 on  a 32-bit  (386  or  better)  processor; 
;;  non-zero  if  an  80286  or  Lower.  The  Z flag  is  set  to  reflect 
;;  ax  on  return.  This  is  only  called  once,  so  it  doesn't  matter  how 
;;  it's  aligned. 


not386  procn  far 


;;  This  first  test  detects  80x86  for  x < 2.  On  the  8086  and  '186, 

;;  "push  sp"  does  "--sp;  spC0]  = sp".  On  all  Later  processors,  it  does 
; " s p [ - 1 3 = s p ; - - s p " . 


□ 

pushn 

sp 

Q 

popn 

a X 

n 

subn 

ax,  sp 

n 

j nen 

SHORT  return 

f r 

This  test  is 

the  key  one. 

It  will  probably  detect  8086,  V30  and  80186 
as  well  as  80286,  but  I haven't  had  access  to  test  it  on  any  of  those, 
so  it's  protected  by  the  well-known  test  above.  It  has  been  tested 
on  the  80286,  80386,  80486,  Pentium  and  AMD  tested  it  on  their  K5  . 

I have  not  been  able  to  confirm  effectiveness  on  the  P6  yet,  although 
someone  I spoke  to  at  Intel  said  it  should  work. 


;;  This  test  uses  the  fact  that  the  '386  and  above  have  a barrel  shifter 
;;  to  do  shifts,  while  the  '286  does  Left  shifts  by  releated  adds. 

;;  That  means  that  on  the  '286,  the  auxilliary  carry  gets  a copy  of 
;;  bit  4 of  the  shift  output,  while  on  the  '386  and  up,  it's  trashed 
;;  (as  it  happens,  set  to  1)  independent  of  the  result.  (It's  documented 
;;  as  undefined.) 


;;  We  do  two  shifts,  which  should  produce  different  auxilliary  carries 
;;  on  a '286  and  XOR  them  to  see  if  they  are  different.  Even  on  a 
;;  future  processor  that  does  something  different  with  the  aux  carry 
;;  flag,  it  probably  does  something  data-independent,  so  this  will  still 
;;  work.  Note  that  all  flags  except  aux  carry  are  defined  for  shl 
;;  output  and  will  be  the  same  for  both  cases. 


n 

movn 

a 1,4 

n 

sh  Id 

a L , 1 n 

; Expected 

t o 

produce  ac  = 0 on  a ' 

'286 

D 

L a h f 

rt 

shin 

a L , 1 n 

; Expected 

t 0 

produce  a c = 1 on  a ' 

' 286 

n 

movn 

a 1 , a h 

n 

Lahf 

a 

xo  rn 

a L,ahn 

; X 0 r the 

flags  together  to  detect 

the 

di  fference 

□ 

movn 

a h , a L n 

; Clear  ah 

i f 

al  is  clear.  Leave  Z 

flag 

alone 

return; 

n 

ret 

_not386nendp 
_TEXTn  ends 
a end 
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/* 

* bni8086.h  - This  file  defines  the  interfaces  to  the  8086 

* assembly  primitives  for  16-bit  MS-DOS  environments. 

* It  is  intended  to  be  included  in  "bni.h" 

* via  the  "^include  BNINCLUDE"  mechanism. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  bni8086.h,v  1.2. 4.1  1 997/06/07  09:49:35  mhu  Exp  $ 

*/ 

#define  BN_LITTLE_ENDI AN  1 
#ifdef  __cplusplus 

/*  These  a s s emb I y- I a ng u a g e primitives  use  C names  */ 
extern  "C"  { 

# e nd i f 

/*  Set  up  the  appropriate  types  */ 
typedef  unsigned  short  bnword16; 

#define  BNW0RD16  bnword16 
typedef  unsigned  long  bnword32; 

#define  BNW0RD32  bnword32 

void  __cdecl  __far 

bn i Mu  I N1 _1 6 C bn  wo rdl 6 __far  *out,  bnword16  const far  *in, 

unsigned  len,  bnword16  k); 

#define  bniHulN1_16  bniHulN1_16 

bnuord16  __cdecl  __far 

bn i Mu  I Add  1 _1 6 ( bn  wo rdl  6 far  *out,  bnword16  const far  *in, 

unsigned  len,  bnword16  k); 

^define  bn i Mu  I Add  1 _1 6 bn i Mu  I Ad d 1 _1 6 

bnword16  __cdecl  __far 

bn i H u I S ub 1 _1 6 ( b n wo r d 1 6 __far  *out,  bnword16  const far  *in, 

unsigned  len,  bnword16  k); 

^define  b n i Mu  I S u b 1 _ 1 6 bn i Mu  I Subi _1 6 

bnword16  __cdecl  __far 

bniDiv21_16(bnword16 far  *q,  bnword16  nh,  bnword16  nl,  bnword16  d); 

#define  bniDiv21_16  bniDiv21_16 

bnword16  __cdecl  __far 

bn i ModQ_1 6 ( bn wo r d 1 6 const  far  *n,  unsigned  len,  bnword16  d); 

#define  bniModQ  16  bniModQ_16 


void  __cdecl  __far 

bn i Mu  I N 1 _32 ( bnwo r d32  __far  *out,  bnword32  const  __far  *in, 
unsigned  len,  bnword32  k); 

#define  bniMulN1_32  bniMulN1_32 

bnword32  __cdecl  __far 

bn i Mu  I Addi _32 ( bnwo r d32  __far  *out,  bnword32  const  __far  *in, 
unsigned  len,  bnword32  k); 

^define  bni Mul Addi _32  bn i Mu  I Addi _32 
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c 


bnword16  cdecL  far 

b n i ModQ_32 ( bn wo rd32  const  __far  *n,  unsigned  Len,  bnword32  d); 
#define  bniHoda_32  bniModQ_32 

int  __cdecL  far  n o t 386 ( vo i d ) ; 

#ifdef  cpLuspLus 

> 

# e nd i f 


bnword32  __cdecL  __far 

bn i Mu L Subi _32 ( bnwo rd32  far  *out,  bnword32  const  __far  *in, 

unsigned  Len,  bnword32  k); 

^define  bni Hu L Subi _32  bn i Hu L Subi _32 

bnword32  cdecL  __far 

bn i D i v2 1 _32 ( bn wo r d32  far  *q,  bnword32  nh,  bnword32  nL,  bnword32  d); 

#define  bniDiv21  32  bniDiv21  32 
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U 

U bni960jx.s  - A s s emb L y- L a n g u a g e bignum  primitives  for  the  i960  Jx  series. 

# 

U Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

U 

U $Id:  bni  960jx.s,v  1.3. 2.1  ^991 ! ! <il  09:49:35  mhw  Exp  $ 

U 

tf  The  Jx  series  is  fairLy  straightforward  s i ng  L e- i n s t r u c t i o n- i s s u e 
U i mp L emen t a t i on,  with  a 1 - c y c L e- i s s u e 4- cy c L e- L a t e n cy  no n-p i pe L i n e d 
tf  muLtipLier  that  we  can  use.  Note  aLso  that  Loads  which  hit  in  the 
U cache  have  2 cycLes  of  Latency  and  stores  staLL  untiL  aLL  pending 
tt  Loads  are  done. 

# 

tt  What  is  intenseLy  annoying  about  the  i 960  is  that  it  uses  the  same 
ft  fLags  for  aLL  conditionaL  branches  (even  c ompa  r e-a  nd-b  r a n c h sets  the 
tf  fLags)  AND  for  the  carry  bit.  Further,  it  is  hard  to  manipuLate 
tf  that  bit. 
tt 

tt  CaLLing  conventions: 

tt  The  r registers  are  aLL  LocaL,  if  you  set  them  up.  There's  an  aLternative 

tt  caLLing  convention  that  uses  baL  (branch  and  Link)  and  doesn't  set  them  up. 

tt  CurrentLy,  aLL  of  these  functions  are  designed  to  work  that  way. 

tt  g0-g7  are  argument  registers  and  voLatiLe  across  caLLs.  return  in  g0-g3. 

tt  g8-g11  are  extra  argument  registers,  and  voLatiLe  if  used,  but 

tta  preserved  if  not.  Here,  they  are  not. 

tt  g12  is  used  for  PIC,  and  is  preserved. 

tt  g13  is  a pointer  to  a structure  return  vaLue,  if  used,  and  is  voLatiLe. 
tt  g14  is  magic,  and  is  used  as  a return  address  in  the  b r a n c h -a  nd- L i n k 
ttu  convention,  and  as  a pointer  to  an  argument  bLock  if  the  arguments 

tta  won't  fit  in  registers,  but  is  usuaLLy  hardwired  0 and  must  be 

tta  returned  set  to  zero  (0). 

tt  g15  is  the  frame  pointer,  and  shouLdn't  be  messed  with. 

tt  The  AC  (condition  codes)  are  aLL  voLatiLe. 

tf  The  fp  registers  are  aLL  voLatiLe,  but  irreLevant. 

tt 

# BNU0RD32 

tt  bn i Mu L t Add  1 _32 ( BNW0RD32  *out,  BNW0RD32  const  *in,  unsigned  Len,  BNWORD32  k) 
tt  This  adds  "k"  * "in"  to  "Len"  words  of  "out"  and  returns  the  word  of 
tt  carry. 
tt 

tt  For  doing  mu  L t i p L y-a  d d , the  960  is  a bit  annoying  because  it  uses 
tt  the  same  status  bits  for  the  carry  fLag  and  for  the  Loop  indexing 
tt  computation,  and  doesn't  have  an  "add  with  carry  out  but  not  carry  in" 
tt  instruction.  FortunateLy,  we  can  arrange  to  have  the  Loop  indexing 
tt  Leave  the  carry  bit  cLear  most  of  the  time. 

U 

tt  The  basic  sequence  of  the  Loop  is: 
ft  1.  HuLtipLy  k * *in  + + ->  high.  Low 
tt  2.  Addc  carry  word  and  carry  bit  to  Low 

ft  3.  Addc  carry  bit  to  high,  producing  carry  word  (note:  cannot  generate  carry) 
tt  4.  Addc  Low  to  *out  + + 
tt 

tt  Note  that  the  carry  bit  set  in  step  4 is  used  in  step  2.  The  onLy  pLace 
tt  in  this  Loop  that  the  carry  fLag  isn't  in  use  is  between  steps  3 and  4, 
tt  so  we  have  to  rotate  the  Loop  to  pLace  the  Loop  indexing  operations  here. 
tt  (Which  consist  of  a c ompa  r e-a  n d-d  e c r erne  n t and  a conditionaL  branch.) 
tt  The  Loop  above  ignores  the  detaiLs  of  when  to  do  Loads  and  stores,  which 
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M have  some  flexibility,  but  must  be  carefully  scheduled  to  avoid  stalls. 

It 

It  The  first  iteration  has  no  carry  word  in,  so  it  requires  only  steps  1 and  4, 

# and  since  we  begin  the  loop  with  step  4,  it  boils  down  to  just  step  1 

# followed  by  the  loop  indexing  (which  clears  the  carry  bit  in  preparation 

# for  step  4). 

It 

It  Arguments  are  passed  as  follows: 

It  g0  - out  pointer 
It  g1  - in  pointer 

# g2  - length 

# g3  - k 

It  The  other  registers  are  used  as  follows. 

# g4  - low  word  of  product 

# g5  - high  word  of  product 

# g6  - current  word  of  "out" 

It  g7  - carry  word 

U g13  - current  word  of  "in" 

n .globl  _bn i Mu  I Add  1 _32 

_bniMulAdd1  32: 


Q 

1 dn 

(gl),gl3  n 

U 

Fetch  *in 

Q 

addon 

g1,4,g1  n 

U 

Increment  in 

n 

emu  1 n 

g1 3,g3,g4n 

n 

Do  multiply  (step  1) 

n 

1 dn 

( g0  ) , g6  n 

n 

Fetch  *out 

n 

chkbi tn 

0,g2n  n 

tt 

Check  if  loop  counter  was  odd 

n 

s h ron 

1,g2,g2  n 

u 

Divide  loop  counter  by  2 

□ 

mo  vn 

g5,g7n  n 

u 

Move  high  word  to  carry 

n 

bnon 

ma_  1 oopi n 

tt 

If  even,  jump  to  ma_loop1 

n 

cmpon 

0,g2n  n 

tt 

If  odd,  was  it  1 (now  0)? 

n 

ben 

ma_done  n 

It 

If  equal  (carry  set),  jump  to  ending  code 

ff 

ma 

Entered  with 

_ 1 oop : 

carry  bit  clea 

r 

n 

1 dn 

(g1),g13  n 

tt 

Fetch  * i n 

n 

addcn 

g4,g6,g6n 

tt 

Add  low  to  *out  (step  4),  generate  carry 

a 

emu  In 

g13,g3,g4n 

tt 

Do  multiply  (step  1) 

Q 

stn 

g6,(g0)  n 

tt 

Write  out  *out 

n 

addon 

g0,4,g0  n 

tt 

Increment  out 

n 

addon 

g1,4,g1  n 

tt 

Increment  in 

n 

1 dn 

(g0),g6  n 

tt 

Fetch  next  *out 

n 

addcn 

g7,g4,g4n 

tt 

Add  carries  to  low  (step  2) 

Q 

ma 

_ loopi 

addcn 

g5,0,g7  n 

It 

Add  carry  bit  to  high  (step  3)  S clear  carry 

n 

1 dn 

Cg1),g13  n 

tt 

Fetch  *in 

B 

addcn 

g4,g6,g6n 

# 

Add  low  to  *out  (step  4),  generate  carry 

B 

emu  1 n 

g1 3,g3,g4n 

tt 

Do  multiply  (step  1) 

B 

stn 

g6, (g0)  n 

tt 

Write  out  *out 

B 

addon 

g0,4,g0  n 

It 

Increment  out 

B 

addon 

g1,4,g1  n 

It 

Increment  in 

B 

1 dn 

(g0),g6  n 

It 

Fetch  next  *out 

B 

addcn 

g7,g4,g4n 

tt 

Add  carries  to  low  (step  2) 

B 

B 

B 

addcn  95,0,g7  n 

cmpdeconi ,g2,g2 
bnen  ma_loop 

tt 

Add  carry  bit  to  high  (step  3)  & clear  carry 

u 

When  we  come 

here,  carry  is 

*set*,  and  we  stil  have  to  do  step  4 

ma_done : 
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n 

c mp  i n 

0, 1 B B 

U 

Clear 

carry  (equal  flag) 

□ 

addcn 

g4,g6,g6B 

U 

Add  low  to  *out  (step  4), 

generate  carry 

n 

s t B 

g6,(g0)  B 

ft 

Write 

out  *o  u t 

□ 

a dd  c B 

g7,0,g0  B 

ft 

Add  carry  bit  and  word  to 

produce  return 

Q 

ret 

L 


a Now,  muLtipLy  N by  1 is  simiLarLy  annoying.  We  only  have  one  add  in  the 
# whole  Loop,  which  should  just  be  able  to  leave  its  carry  output  in  the 
ft  carry  flag  for  the  next  iteration,  but  we  need  the  condition  codes  to  do 
ft  Loop  testing.  *Sigh*. 
ft 

ft  void 

ft  bn  i Mu  L t N1  _32  ( BNW0RD32  *out,  BNW0RD32  const  *in,  unsigned  Len,  BNW0RD32  k) 
ft  This  stores  Len  + 1 words  of  "k"  * Len  words  of  "in"  and  stores  the  result 
If  in  "out". 
ft 


ft 

To  avoid  having  to  do  a move 

after  the  first  iteration,  for 

the  first 

ft 

step. 

g4/g5  i 

s the  product . 

For 

second  step,  g6/g7  is  used 

for  product 

it 

storage  and  g5  is  the  carry  i 

n . 

It  alternates  from  then  on 

. 

n 

. g 1 ob 1 

_bniMuLN1_32 

_bniMuLN1_32: 

□ 

1 dB 

(gl),g13  B 

# 

Fetch  *in 

n 

addoB 

g1,4,g1  B 

# 

Increment  in 

□ 

emu  L B 

g1 3,g3,g4B 

# 

Do  multiply  (step  1) 

c 

c h kb i t B 

0,g2B  n 

# 

Check  if  Loop  counter  was  odd 

Q 

s h r OB 

1,g2,g2  b 

# 

Divide  Loop  counter  by  2 

n 

bnoB 

m_ 1 oopi  B 

U 

If  even,  jump  to  ma_Loop1 

n 

mo  VB 

g4,g6 

n 

cmpoB 

0,g2B  n 

U 

If  counter  was  odd,  was  it 

1 (now  0)? 

n 

mo  VB 

g5,g7 

n 

beB 

m_doneB  n 

tt 

If  equal  (carry  set),  jump 

to  ending  code 

n 

Entered  with 

carry  bit  clear 

ni_ 

Loop: 

n 

tt  Result  in  g6,  carry  word 

in  g 7 

a 

L dB 

(g1 ),g13B 

tt 

Fetch  *in 

n 

addoB 

g1,4,g1  B 

tt 

Increment  in 

□ 

emu  1 B 

g13,g3,g4B 

U 

Do  multiply  (step  1) 

n 

StB 

g6, ( g0  ) B 

tt 

Write  out  *out 

o 

addoD 

g0,4,g0Bn 

tt 

Increment  out 

n 

addcB 

g7,g4,g4B 

tt 

Add  carries  to  Low  (step  2) 

# 

No  need  to  add  carry  bit  here 

, because  it'll  get  remembered 

until  next  addc 

addcB 

g5,0,g5  b 

tt 

Add  carry  bit  to  high  (step 

3) 

m_ 

L oopi 

: 

n 

if  Carry 

word  in  g 5 

n 

1 dB 

(g1),g13B 

tt 

Fetch  *in 

□ 

addoB 

g1 ,4,glBn 

ft 

Increment  in 

n 

emu  L B 

g13,g3,g6n 

U 

Do  multiply  (step  1) 

n 

StB 

g4, (g0)Bn 

U 

Write  out  *out 

n 

addoB 

g0,4,g0  B 

tt 

Increment  out 

n 

addcB 

g5,g6,g6B 

tt 

Add  carries  to  Low  (step  2) 

n 

addcB 

g7,0,g7  b 

U 

Add  carry  bit  to  high  (step 

3) 

n 

cmpdecoBi ,g2,g2 

□ 

b n en 

m_  L 00 p 

n 

When 

we  come 

here,  we  have  to 

store  g6  and  the  carry  word  i 

n g 7 . 

m done : 
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c 

stn 

g6,(g0)  n 

tt 

Write 

out  *out 

n 

stn 

g7,4(g0)n 

U 

Write 

out  *out 

Q 

ret 

n 

BNW0RD32 

u 

bniMultSubI 

_32(BNW0RD32 

*ou  t , 

BNU0RD32 

const  *in,  unsigned  len. 

BNW0RD32 

k) 

u 

This  subtracts  "k"  * "in 

" from 

'Len"  words  of  "out"  and  returns 

the  word 

0 f 

# borrow. 

U 

ft  This  is  similar  to  mu  L t i p L y-a  d d , but  actually  a bit  more  obnoxious, 

# because  of  the  carry  situation.  The  960  uses  a carry  (rather  than  a borrow) 
ft  bit  on  subtracts,  so  the  carry  bit  should  be  1 for  a subc  to  do  the 

a same  thing  as  an  ordinary  subo.  So  we  use  two  carry  chains:  one  from 
U the  add  of  the  low-order  words  to  the  high-order  carry  word,  and  a second, 

# which  uses  an  extra  register,  to  connect  the  subtracts.  This  avoids 

# the  need  to  fiddle  with  inverting  the  bit  in  the  usual  case. 

n 

It  Arguments  are  passed  as  follows: 

U g0  - out  pointer 
U g1  - in  pointer 
tt  g2  - length 

# g3  - k 

U The  other  registers  are  used  as  follows. 

# g4  - low  word  of  product 

# g5  - high  word  of  product 

ft  g6  - current  word  of  "out" 
tt  g7  - carry  word 
tt  gl3  - current  word  of  "in" 
tt  g14  - remembered  carry  bit 


n 

. g l ob l 

_bniMulSub1_32 

_bniMulSub1_32: 

Q 

Ida 

(g1  ),g13n 

tt 

Fetch  *in 

n 

addoa 

g1,4,g1  n 

tt 

Increment  in 

n 

emu  1 n 

g1 3,g3,g4n 

tt 

Do  multiply  (step  1) 

n 

1 dn 

(g0),g6  n 

tt 

Fetch  *out 

n 

ch  kbi tn 

0,g2  n 

tt 

Check  if  loop  counter  was  odd 

n 

movn 

1,g14  n 

tt 

Set  remembered  carry  for  first  iteration 

n 

sh  ron 

1,g2,g2  n 

U 

Divide  loop  counter  by  2 

n 

movn 

95, g7  n 

tt 

Hove  high  word  to  carry 

n 

bnon 

ms_ 1 oopi n 

tt 

If  even,  jump  to  ma_loop1 

n 

cmpon 

0,  g2  n 

tt 

If  odd,  was  it  1 (now  0}? 

Q 

ben 

ms_done  n 

tt 

If  equal  (carry  set),  jump  to  ending  code 

U 

Entered  with 

carry  bit  clear 

ms 

_ 1 oop : 

a 

1 dn 

(g1 ),g13n 

tt 

Fetch  *in 

n 

cmpi  n 

g1 4,1  n 

tt 

Set  carry  flag 

n 

subcn 

9^rg6,g6n 

tt 

Subtract  low  from  *out  (step  4),  gen.  carry 

n 

emu  1 n 

g1 3,g3,g4n 

tt 

Do  multiply  (step  1) 

n 

addcn 

0,0, g14  n 

U 

g14  = carry,  then  clear  carry 

n 

stn 

g6,(g0)  n 

tt 

Write  out  *out 

B 

addon 

g0,4,g0  n 

tt 

Increment  out 

B 

addon 

g1,4,g1  n 

U 

Increment  in 

B 

1 dn 

(g0),g6  n 

tt 

Fetch  next  *out 

B 

addcn 

97,g4,g4n 

tt 

Add  carries  to  low  (step  2) 

B 

addcn 

g5,0,g7  n 

tt 

Add  carry  bit  to  high  (step  3) 

ms_ I oopi  : 
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n 

L dn 

(g1),gl3n 

# 

Fetch  * i n 

n 

c mp  i n 

g 1 4, 1 n 

# 

Set  carry  flag  for  subtract 

□ 

subcn 

g^rg6,g6n 

ft 

Subtract  Low  from  *out  (step  4), 

gen.  carry 

n 

emu  L n 

g1 3,g3,g4n 

n 

Do  multiply  (step  1) 

n 

a dd  c a 

0,0,g1 4 n 

u 

g14  = carry,  then  clear  carry 

n 

s t n 

g6,(g0)  n 

u 

Write  out  *out 

n 

addoa 

g0,4,g0  n 

n 

Increment  out 

Q 

addon 

glr4,gl  n 

n 

Increment  in 

Q 

L dn 

( g0 ) , g6  n 

tt 

Fetch  next  *out 

□ 

a d d c n 

g7,g4,g4n 

n 

Add  carries  to  Low  (step  2) 

E( 

addcn 

g5,0,g7  n 

u 

Add  carry  bit  to  high  (step  3) 

□ 

cmpdeconi ,g2,g2 

n 

bnen 

ms_  L oop 

U When 

we  come 

here,  carry  is 

*set*,  and  we  stiL  have  to  do  step  4 

ms_done 

: 

n 

c mp  i n 

g14,1  n 

U 

set  carry  (equal  flag) 

n 

subcn 

g4,g6,g6n 

U 

Add  Low  to  *out  (step  4),  generate  carry 

a 

s t n 

g6,  ( g0  ) n 

ft 

Write  out  *out 

n 

subcn 

0r0/’g'l  ^ ° 

n 

g14  = -1  if  no  carry  (borrow),  0 

if  carry 

n 

s u bon 

g1 4,g7,g0n 

n 

Add  borrow  bit  to  produce  return 

value 

Q 

movn 

0, g 1 4 n 

n 

Restore  g14  to  0 for  return 

n 

ret 
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/* 

* bnialpha.h  - header  file  that  declares  the  Alpha  a s s emb I y- I a ng ua g e 

* subroutines.  It  is  intended  to  be  included  via  the 

* BNINCLUDE  mechanism. 

* 

* Copyright  CC)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  bnialpha.h, V 1.2. 4.1  1 997/06/07  09:49:35  mhw  Exp  $ 

*/ 


^define  BN_ L I TT LE_ E N D I AN  1 

typedef  unsigned  long  bnuord64; 

#define  BNW0RD64  bnuord64 

#ifdef  cplusplus 

/*  These  a s s emb I y- I a n g ua g e primitives  use  C names  */ 
extern  "C"  { 

#endi f 

void  bn i Hu  I N 1 _64 ( bn wo r d64  *out,  bnword64  const  *in,  unsigned  len,  bnword64  k); 
//define  bniMulN1_64  bniMulN1_64 

bnword64 

bn i Mu  I Add  1 _64 ( b n wo r d64  *out,  bnword64  const  *in,  unsigned  len,  bnword64  k); 
//define  bniHulAddl  64  bniHulAddI  64 


c 


bnwo  rd64 

bn i M u I S u b 1 _64 ( bn wo rd64  *out,  bnword64  const  *in,  unsigned  len,  bnword64  k); 
//define  bn  i Mu  I Subi  _64  bn  i Mu  I S u b 1 _64 

//ifdef cplusplus 

> 

// e nd i f 
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/* 

* bniaLpha.s  - DEC  Alpha  64-bit  math  primitives.  These  use  64-bit  words 

* unless  otherwise  noted. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  bnialpha.s, V 1.4. 2.1  1 997/06/07  09:49:36  mhw  Exp  $ 

* 

* The  DEC  assembler  apparently  does  some  instruction  scheduling, 

* but  I tried  to  do  some  of  my  own,  and  tries  to  spread  things 

* out  over  the  register  file  to  give  the  assembler  more  room 

* to  schedule  things. 

* 

* Alpha  OSF/1  register  usage  conventions: 


★ 

r0 

- V0 

- Temp,  holds  integer  return  value 

* 

oo 

- t0  . . 

t7 

- Temp,  trashed  by  procedure  call 

★ 

r9.  . r14 

- S0.  . 

s 5 

- Saved  across  procedure  calls 

★ 

r1  5 

- s6/FP 

- Frame  pointer,  saved  across  procedure  calls 

★ 

r1  6 . . r21 

- a0 . . 

a 5 

- Argument  registers,  all  trashed  by  procedure 

* 

r22 . . r25 

1 

r+ 

OO 

til 

- Temp,  trashed  by  procedure  call 

★ 

r26 

- ra 

- Return  address 

* 

r27 

- t12/pv 

- Procedure  value,  trashed  by  procedure  call 

* 

r28 

- at 

- Assembler  temp,  trashed  by  procedure  call 

★ 

r29 

- gp 

- Global  pointer 

★ 

r30 

- sp 

- Stack  pointer 

* 

*/ 

r31 

- zero 

- hardwired  to  zero 

n .text 

n . a I i gnn  4 

n .globln  bniMulN1_64 

/*  I have  no  idea  what  the  '2'  at  the  end  of  the  .ent  line  means.  */ 
n .entn  bniHulNl_64  2 

/* 

* Arguments:  $16  = out,  $17  = in,  $18  = len<32>,  $19  = k 

* Other  registers:  $0  = carry  word,  $1  = product  low, 

* $2  = product  high,  $3  = input  word 
*/ 

bniMulNI  64: 


n 

1 dqn 

$3,0($1 7)n 

/* 

Load  first  word  of  input  */ 

n 

s ub  1 n 

$18,1, $18 

n 

mu  1 qn 

$3,$1 9,$1 n 

/* 

Do  low  half  of 

first  multiply  */ 

n 

umu 1 hn 

$3,$1 9,$0n 

/* 

Do  second  half 

of  first  multiply  */ 

Q 

s t qn 

$1 ,0($1 6) 

n 

beqa 

$18,m64_done 

ni64_ 

loop: 

n 

IdqD 

$3,8($17) 

Q 

addqn 

$17, 8, $17 

D 

mu  1 qn 

$3, $1 9, $1 n 

/* 

Do  bottom  half 

of  multiply  */ 

n 

sub  In 

$18,1, $18 

n 

umu  1 h n 

$3,$1 9,$2n 

/* 

Do  top  half  of 

multiply  */ 

Q 

addqn 

$0,$1 ,$1n 

/* 

Add  carry  word 

from  previous  multiply 

n 

s t qn 

$1 ,8($1 6) 

D 

cmpu  1 tn 

$1 ,$0,$0n 

/* 

Comput  e carry 

bit  from  add  */ 

D 

addqn 

$16, 8, $16 

n 

addqn 

$2,$0,$0n 

/* 

Add  carry  bit 

to  carry  word  */ 

□ 

beqn 

$18,m64_done 
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n 

L dqa 

$3,8($1 7) 

n 

addqn 

$17, 8, $17 

n 

mu  L qn 

$3,$19,$1n 

/* 

Do  bottom  half 

of  multiply  */ 

□ 

subln 

$18,1, $18 

n 

umu  L h n 

$3,$19,$2n 

/* 

Do  top  half  of 

multiply  */ 

n 

addqn 

$0,$1 ,$1n 

/* 

Add  carry  word 

from  previous  multiply 

n 

s t qn 

$1 ,8($1 6) 

n 

cmpu  L tn 

$1 ,$0,$0n 

/* 

Compute  carry 

bit  from  add  */ 

n 

addqn 

$1 6,8, $1 6 

□ 

addqn 

$2,$0,$0n 

/* 

Add  carry  bit 

to  carry  word  */ 

Q 

bnen 

$18,m64_Loop 

m6  4 

_done : 

n 

s t qn 

$0,8($16)n 

/* 

Store  Last  word  of  result  */ 

n 

retn 

$31,($26),1 

/* 

The  '1'  in  the  hint  field 

means 

procedure  return  - software  convention 

n 

.end  bniMuLN1_64 

n 

-text 

n 

. a L i gnn 

4 

□ 

. g L 0 b L n 

bniMulAdd1_64 

n 

. entn 

bniMulAdd1_64 

2 

/* 

* 

Arguments:  $16  = out,  $17 

= in. 

$18  = Len<32>, 

$19  = k 

* Other  registers:  $0  = product  high,  $1  = product  Lou, 

* $2  = product  high  temp,  $3  = input  word,  $4  = output  word 

* $5  = carry  bit  from  add  to  out 
*/ 

bniHuLAddI  64: 


Q 

L dqn 

$3,0($1 7)n 

/* 

Load  first  word  of  input  */ 

D 

subln 

$18,1, $18 

n 

mu  1 qn 

$3,$19,$1n 

/* 

Do  low  half  of 

first  multiply  */ 

n 

L dqn 

$4,0($1 6)n 

/* 

Load  first  word  of  output  */ 

n 

umu  L hn 

$3,$1 9,$2n 

/* 

Do  second  half 

of  first  multiply 

*/ 

n 

addqn 

$4,$1 ,$4 

a 

cmpu  L tn 

$4,$1 ,$5n 

/* 

Compute  borrow 

bit  from  subtract 

*/ 

n 

s t qn 

$4,0($1 6) 

n 

addqn 

$5,$2,$0n 

/* 

Add  carry  bit 

to  high  word  */ 

n 

beqn 

$1 8,ma64_done 

ma64_ 

Loop: 

D 

L dqn 

$3,8($17)n 

/* 

Load  next  word 

of  input  */ 

n 

addqn 

$17, 8, $17 

n 

1 dqn 

$4,8($16)n 

/* 

Load  next  word 

of  output  */ 

n 

mu  1 qn 

$3,$19,$1n 

/* 

Do  bottom  half 

of  multiply  */ 

n 

subln 

00 

s 

s 

00 

n 

addqn 

$0,$1 ,$1 n 

/* 

Add  carry  word 

from  previous  muLtip 

n 

umu  L hn 

$3,$1 9,$2n 

/* 

Do  top  half  of 

multiply  */ 

□ 

cmpu  1 tn 

$1  ,$0,$0n 

/* 

Compute  carry 

bit  from  add  */ 

a 

addqn 

$4,$1 ,$4n 

/* 

Add  product  to 

loaded  word  */ 

n 

cmpu  1 tn 

$4,$1 ,$5n 

/* 

Compute  carry 

bit  from  add  */ 

n 

s t qn 

$4,8($1 6) 

n 

addqn 

$5,$0,$5n 

/* 

Add  carry  bits 

together  */ 

n 

addqn 

$1 6,8, $1 6 

n 

addqn 

$5,$2,$0n 

/* 

Add  carry  bits 

to  carry  word  */ 

n 

beqn 

$18,ma64_done 
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n 

Ldqn  $3,8($17)n 

/* 

Load  next  word 

of  input  */ 

n 

addqn  $17, 8, $17 

n 

Ldqn  $4,8($1 6)n 

/* 

Load  next  word 

of  output  * 

/ 

n 

muLqn  $3,$19,$1n 

/* 

Do  bottom  haLf 

of  muLtipLy 

*/ 

n 

subLn  $18,1, $18 

□ 

addqn  $0,$1,$1n 

/* 

Add  carry  word 

from  previous  muLtipLy 

□ 

umuLhn  $3,$19,$2n 

/* 

Do  top  haLf  of 

muLtipLy  */ 

n 

cmpuLtn  $1,$0,$0n 

/* 

Compute  carry 

bit  from  add 

*/ 

n 

addqn  $4,$1,$4n 

/* 

Add  product  to 

Loaded  word 

*/ 

n 

cmpuLtn  $4,$1,$5n 

/* 

Compute  carry 

bit  from  add 

*/ 

n 

stqn  $4,8($16) 

a 

addqn  $5,$0,$5n 

/* 

Add  carry  bits 

together  */ 

Q 

addqn  $16, 8, $16 

□ 

addqn  $5,$2,$0n 

/* 

Add  carry  bits 

to  carry  word  */ 

□ 

bnen  $ 1 8 , ma 64_ L oo p 

ma64_done: 

n 

retn  $31,($26),1 

n 

.end  bn i Mu L Add  1 _64 

Q 

■ text 

n 

. a L i g nn  4 

n 

.gLobLn  bniMuLSub1_ 

64 

n 

■entn  bniMuLSub1_ 

64  2 

/ * 

* 

Arguments:  $16  = out,  $17  = in. 

$18  = Len<32>, 

$19  = k 

* Other  registers:  $0  = carry  word,  $1  = product  Low, 

* $2  = product  high  temp,  $3  = input  word,  $4  = output  word 

* $5  = borrow  bit  from  subtract 
*/ 

bn i Mu  L Sub1  64 : 


n 

Ldqn 

$3,0($1 7)n 

/* 

Load  first 

word  of  input  */ 

□ 

subLn 

$18,1, $18 

n 

mu  L qn 

$3,$19,$1n 

/* 

Do  Low  haLf  of 

first  muLtipLy  */ 

n 

Ldqn 

$4,0($16)n 

/* 

Load  first 

word  of  output  */ 

n 

umu  L h n 

$3,$1 9,$2n 

/* 

Do  second 

haLf 

of  first  muLtipLy 

*/ 

n 

cmpuLtn 

$4,$1 ,$5n 

/* 

Compute  borrow 

bit  f rom  subtract 

*/ 

n 

subqn 

$4,$1 ,$4 

□ 

addqn 

$5,$2,$0n 

/* 

Add  car  ry 

bit 

to  high  word  */ 

a 

stqn 

$4,0($1 6) 

n 

beqn 

$18,ms64_done 

nis64_ 

Loop: 

Q 

Ldqn 

$3,8($1 7)n 

/* 

Load  next 

word 

of  input  */ 

n 

addqn 

$17, 8, $17 

n 

Ldqn 

$4,8($1 6)n 

/* 

Load  next 

word 

of  output  */ 

n 

mu  L qn 

$3,$19,$1n 

/* 

Do  bottom 

haLf 

of  muLtipLy  */ 

Q 

subLn 

$18,1, $18 

n 

addqn 

$0,$1 ,$1 n 

/* 

Add  carry 

word 

from  previous  muLtipLy 

Q 

umu  L hn 

$3,$1 9,$2n 

/* 

Do  top  haLf  of 

muLtipLy  */ 

n 

cmpuLtn 

$1 ,$0,$0n 

/* 

Comput  e carry 

bit  from  add  */ 

n 

cmpu  L tn 

$4,$1 ,$5n 

/* 

Compute  borrow 

bit  from  subtract 

*/ 

n 

subqn 

$4,$1 ,$4 

Q 

addqn 

$5,$0,$5n 

/* 

Add  carry 

bits 

together  */ 

n 

stqn 

$4,8($16) 

n 

addqn 

$5,$2,$0n 

/* 

Add  carry 

bits 

to  carry  word  */ 

□ 

addqn 

$16, 8, $16 

*/ 


*/ 
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c 


n 

beqn 

$1 8,ms64_done 

n 

Ldqn 

$3,8($17)n 

/* 

Load  next 

word 

of  input  */ 

Q 

addqn 

$1 7,8, $1 7 

Q 

1 dqn 

$4,8($1 6)n 

/* 

Load  next 

word 

of  output  */ 

n 

mu  L qa 

$3,$1 9,$1 n 

/* 

Do  bot  t om 

half 

of  multiply  */ 

a 

sub  L n 

$1 8, 1 ,$1 8 

n 

addqQ 

$0,$1,$1n 

/* 

Add  carry 

word 

from  previous  muLtip 

n 

umu  L hn 

$3,$1 9,$2n 

/* 

Do  top  half  of 

multiply  */ 

n 

cmpu  1 1 n 

$1 ,$0,$0n 

/* 

Compute  carry 

bit  from  add  */ 

n 

cmpu  L ta 

$4,$1 ,$5n 

/* 

Compute  borrow 

bit  from  subtract  */ 

a 

subqn 

$4,$1 ,$4 

n 

addqn 

$5,$0,$5n 

/* 

Add  carry 

bits 

together  */ 

Q 

s t qn 

$4,8($16) 

n 

addqn 

$5,$2,$0n 

/* 

Add  carry 

bits 

to  carry  word  */ 

n 

addqn 

$1 6,8, $1 6 

Q 

bnen 

$1 8,ms64_  Loop 

ms64  done  : 


retn  $31,($26),1 
.end  bniHulSubI  64 
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/* 

* bnimem.c  - Low-LeveL  bignum  memory  handling. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  Colin  Plumb 

* 

* $Id:  bnimem.c, V 1.5. 2.1  1 997/06/07  09:49:36  mhw  Exp  $ 

★ 

* Note  that  in  all  cases,  the  pointers  passed  around 

* are  pointers  to  the  *least*  significant  end  of  the  word. 

* On  big-endian  machines,  these  are  pointers  to  the  *end* 

* of  the  allocated  range. 

* 

* BNSECURE  is  a simple  level  of  security;  for  more  security 

* change  these  function  to  use  locked  unswappable  memory. 

*/ 

#ifndef  H A V E_ C ON F I G_ H 
#define  H A V E_ C ON F I G_ H 0 
# e nd i f 

#if  HAVE_C0N FIG_H 
^include  "config.h" 

#end  i f 


/* 

* Some  compilers  complain  about  #if  FOO  if  FOO  isn't  defined, 

* so  do  the  ANSI-mandated  thing  explicitly... 

*/ 

#ifndef  NO_STDLIB_H 
^define  NO_STDLIB_H  0 
#end  i f 

#ifndef  NO_STRING_H 
#define  NO_STRING_H  0 
#end  i f 

#ifndef  H A V E_ S T R I NG S_ H 
#define  HAVE_STRINGS_H  0 
#end  i f 

#ifndef  N E E D_M EMO R Y_H 
^define  N E E D_H EMO R Y_H  0 
# e nd i f 


#if  !NO_STDLIB_H 

#include  <stdlib.h>n  /*  For  mallocC)  S co.  */ 
# e I s e 

void  *malloc(); 
void  *realloc(); 
void  freeC); 

#e  nd i f 

#if  !NO_STRING_H 

#include  <string.h>n  /*  For  memset  */ 

#elif  HAVE_STRINGS_H 
Sinclude  <strings.h> 

#e  nd i f 

#if  NEED_HEMORY_H 
^include  <memory.h> 

#endi f 
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#ifndef  DBHALLOC 
^define  DBHALLOC  0 
#e nd i f 

#if  DBHALLOC 

/*  Development  debugging  */ 
^include  " . . / d bma L L o c / ma L L o c . h 
#e  nd i f 


^include  "bni.h" 

#incLude  "bnimem.h" 

^include  "bnkludge.h" 

#ifndef  bniHemWipe 
void 

bniHemWipeCvoid  *ptr,  unsigned  bytes) 

{ 

n memsetCptr,  0,  bytes); 

> 

#define  bn i HemW i p e ( p t r , bytes)  memsetCptr,  0,  bytes) 
#end i f 

#ifndef  bniHemALLoc 
void  * 

bn i HemA L L o c ( uns i g ned  bytes) 

{ 

n return  ma L L o c ( by t e s ) ; 

} 

^define  bn i HemA L I o c C by t e s ) ma L L o c ( by t e s ) 

#end i f 

#ifndef  bniHemFree 
void 

bn i Hem F r ee ( voi d *ptr,  unsigned  bytes) 

{ 

a bni HemWi pe (pt r,  bytes); 

n free(ptr); 

> 

#endi f 


#ifndef  bniRealLoc 

#if  def i ned ( bn i HemRea L L oc ) ||  !BNSECURE 

void  * 

bn i R e a L L o c ( VO i d *ptr,  unsigned  oLdbytes,  unsigned  newbytes) 

{ 

n ifCptr){ 

n n BIGCptr  = (char  *)ptr  - oLdbytes;) 

n n if  (newbytes  < oLdbytes) 

n n n memmove(ptr,  (char  *)ptr  + o L dby t e s - n e wby t e s , 

n n n n n n o I dby t es ) ; 

a > 

#ifdef  bn i HemRea L L oc 

n ptr  = bn i HemRea L L oc ( pt r,  oLdbytes,  newbytes); 

#e  L se 

n ptr  = reaLLoc(ptr,  newbytes); 

# e nd i f 

n if(ptr){ 

n n if  (newbytes  > oLdbytes) 
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□ 

n 

n 

> 


n memmoveCCchar 

□ n n 

BIGCptr  = (char  *)ptr 


*)ptr  + n e u by t e s -o L d by t e s , 
n oLdbytes); 

+ newbytes;) 


pt  r. 


B returnptr; 

> 

#eLse  /*  BNSECURE  */ 


void  * 

bni Rea L Loc ( voi d *oLdptr,  unsigned  oLdbytes,  unsigned  newbytes) 

{ 

B void  *neuptr  = b n i Mem A L L o c ( n e wby t e s ) ; 

B if  (Inewptr) 

B B returnnewptr; 

B if  (loLdptr) 

B B return  BIGLITTLE((char  *)newptr+newbytes,  newptr); 


B 

B 

B 

B 

B 

n 

B 

n 

B 

B 

n 

B 

B 

B 

n 


/* 

* The  following  copies  are  a bit  non-obvious  in  the  big-endian  case 

* because  one  of  the  pointers  points  to  the  *end*  of  allocated  memory. 
*/ 


if  (newbytes  > oldbytes)  (b 


/*  Copy  all  of  old  into  part  of  new  */ 


a 

B 
B 
B 

> else  { B 


BIG(newptr  = (char  *)newptr  + newbytes;) 

BIG(oLdptr  = (char  *)oLdptr  - oldbytes;) 

memc py ( BIGLITTLE ( ( c ha r * ) n e wp t r-o L d by t e s , newptr),  oLdptr, 
oldbytes); 


/*  Copy  part  of  old  into  all  of  new  */ 


mem c py ( n e wp t r , B I G LI TT L E ( ( c h a r * ) o L dp t r-n e wby t e s , oldptr), 
newbytes) ; 

BlG(newptr  = (char  *)newptr  + newbytes;) 

BIG(oLdptr  = (char  *)oLdptr  - oldbytes;) 


B 

n 

> 

Send  i f 
Send  i f 


bniMemFree(oLdptr, 
return  newptr; 

/*  BNSECURE  */ 

/*  IbniRealLoc  */ 


oldbytes); 
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/* 

* bnimem.h  - Operations  on  the  usual  buffers  of  bytes 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  bnimem.h, V 1.4. 2.1  1997/06/07  09:49:36  mhw  Exp  $ 

*/ 

#ifndef  BNSECURE 
^define  BNSECURE  1 
#e  nd i f 

#i f def  cpLuspLus 

extern  "C"  { 

#e  n d i f 

/* 

* These  operations  act  on  buffers  of  memory,  just  Like  malLoc  & free. 

* One  exception:  it  is  not  Legal  to  pass  a NULL  pointer  to  bniMemFree. 

*/ 

#ifndef  bniMemALLoc 

void  *bn i Mem A L I o c ( un s i g ned  bytes); 

# e nd i f 

#ifndef  bniMemFree 

void  bn  i Mem F r ee ( VO i d *ptr,  unsigned  bytes); 

#e nd i f 

/*  This  wipes  out  a buffer  of  bytes  if  necessary  needed.  */ 

Sifndef  bniMemWipe 
#if  BNSECURE 

void  bn i MemW i pe C VO i d *ptr,  unsigned  bytes); 

#e  I se 

^define  bn i MemWi pe ( pt r , bytes)  ( vo i d ) ( p t r , by t e s ) 

#e  nd i f 

#endif  /*  IbniMemWipe  */ 

/* 

* bniRealLoc  is  NOT  like  reaLLocC);  it's  endian-sensitive! 

* If  bn i MemRea L L o c is  ^defined,  bniReaLLoc  wi L L be  defined  in  terms  of  it. 

* It  is  Legal  to  pass  a NULL  pointer  to  bniRealLoc,  although  oLdbytes 

* will  always  be  sero. 

*/ 

#ifndef  bniRealLoc 

void  *bniReaLloc(void  *ptr,  unsigned  oldbytes,  unsigned  newbytes); 

#endi f 

#ifdef  __cpluspLus 

> 

# end i f 
/* 

* These  macros  are  the  ones  actually  used  most  often  in  the  math  Library. 

* They  take  and  return  pointers  to  the  *end*  of  the  given  buffer,  and 

* take  sizes  in  terms  of  words,  not  bytes. 

* 

* Note  that  BNIALLOC  takes  the  pointer  as  an  argument  instead  of  returning 
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* the  value. 

* 

* Note  also  that  these  macros  are  only  useable  if  you  have  included 

* bni.h  (for  the  BIG  and  BIGLITTLE  macros),  which  this  file  does  NOT  include. 
*/ 


#def i ne 
a 
a 
n 

Q 

#def i ne 
#de  f i n e 
n 

#def i ne 


BN  I ALLOC ( p, t y pe , wo r d s ) BIGLITTLE(  \ 

if  ( C(p)  = (type  * ) b n i H em A I I o c ( ( wo r d s ) * s i z e o f * ( p ) ) ) !=  0)  \ 

n (p)  +=  (words),  \ 

(p)  = (type  * ) b n i M em A I I o c ( ( wo r d s ) * sizeof*(p))  \ 

) 

BN  I F R E E ( p, wo r d s ) b n i M em F r e e ( ( p ) B I G ( - ( wo r d s ) ) , (words)  * sizeof*(p)) 
BNIREALLOC(p,old,new)  \ 

b n i R ea  I I o c ( p , (old)  * sizeof*(p),  (new)  * sizeof*(p)) 

BN  I W I PE ( p, wo r d s ) bn i M e mW i pe ( ( p ) B I G ( - ( wo r d s ) ) , (words)  * sizeof*(p)) 
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/* 

* bninit16.c  - Provide  an  init  function  that  sets  things  up  for  16-bit 

* operation.  This  is  a seaparate  tiny  file  so  you  can  compile  two  bn 

* packages  into  the  library  and  write  a custom  init  routine. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  in  1995  by  Colin  Plumb. 

* 

* $Id:  bninit16.c,v  1.7. 4.1  1997/06/07  09:49:37  mhw  Exp  $ 

*/ 

#include  "bn.h" 

^include  ”bn16.h" 

void 

bnlnit(void) 

{ 

n bnlnit_16(); 

} 
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/* 

* bnippc.c  - Assembly  primitives  for  the  bignum  Library,  PowerPC  version. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  bnippc.c, V 1.5. 2.1  1 997/06/07  09:49:37  mhw  Exp  $ 

* 

* Register  usage  during  function  calls  is: 

* r0  - volatile 

* r1  - stack  pointer,  preserved 

* r2  - TOC  pointer,  preserved 

* r3  - First  argument  and  return  value  register 

* r4-r10  - More  argument  registers,  volatile 

* r11-r12  - Volatile 

* r13-r31  - Preserved 

* LR,  CTR,  XER  and  MQ  are  all  volatile. 

* LR  holds  return  address  on  entry. 

* 

* On  the  PPC  601,  unrolling  the  Loops  more  doesn't  seem  to  speed  things 

* up  at  all.  I'd  be  curious  if  other  chips  differed. 

*/ 

//include  "bnippc.h" 

//if MWERKS < 0x800 

//include  "bnppcasm.h"n  /*  PowerPC  assembler  */ 


/* 

* MulNI  expects  (*out,  *in, 

* r3  r4 
*/ 

static  const  unsigned  muLNICT 


len,  k),  count  >=  1 
r5  r6 

= { 


n 

PPC 

_LWZ(7,4,0),  n 

/* 

Load  first  word  of  in  in 

r7 

*/ 

D 

PPC 

_MULLWC8,7,6),n 

/* 

Low  half  of  multiply  in 

r8  * 

/ 

Q 

PPC 

_MTCTR(5),n  n 

/* 

Hove  Len  into  CTR  */ 

Q 

PPC 

_ADDICC0,0,0),n 

/* 

Clear  carry  bit  for  Loop 

*/ 

Q 

PPC 

_MULHWU(5,7,6),n 

/* 

High  half  of  multiply  in 

r5 

*/ 

Q 

PPC 

_STW(8,3,0), 

O 

PPC 

_BC( 1 8,31 ,7)  ,n 

/* 

Branch  to  Label  if  --ctr 

= = 

0 */ 

/* 

Loop : * / 

□ 

PPC 

_LWZU(7,4,4),n 

/* 

r7  = *++in  */ 

n 

PPC 

_HULLW(8,7,6),h 

/* 

r8  = Low  word  of  product 

*/ 

□ 

PPC 

_ADDE(8,8,5),n 

/* 

Add  carry  word  r5  and  bit  CF 

t 0 

r8  */ 

n 

PPC 

_STWU(8,3,4),n 

/* 

*++out  = r8  */ 

n 

PPC 

_MULHWUC5,7,6),n 

/* 

r5  is  high  word  of  product. 

for 

carry 

n 

PPC 

_BC(16,31,-5),n 

/* 

Branch  to  Loop  if  — ctr 

!=  0 

*/ 

/* 

Label:  * / 

n 

PPC 

_ADDZE(5,5),nn 

/* 

Add  carry  flag  to  r5  */ 

n 

PPC 

_STW(5,3,4),nn 

/* 

outCi:  = r5  */ 

n 

>; 

PPC 

_BLR(  ) 

/* 

* 

Mu  1 Addi 

expects  (*out,  *in. 

Len, 

k),  count  >=  1 

★ 

r 3 r 4 

r 5 

r6 

*/ 

static  unsigned  const  muLAddICD  = { 

n PPC_LWZ ( 7, 4, 0 ) , n /*  Load  first  word  of  in  in  r7  */ 
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n 

PPC 

_LWZ(0,3,0),nn 

/* 

Load  first  word  of  out  into 

r0  */ 

n 

PPC 

_MULLW(8,7,6),n 

/* 

Low  half  of  multiply  in  r8 

*/ 

s 

PPC 

_MTCTR(5),n  n 

/* 

Move  len  into  CTR  */ 

t2 

PPC 

_HULHWU(5,7,6),n 

/* 

High  half  of  multiply  in  r5 

*/ 

n 

PPC 

_ADDC(8,8,0),n 

/* 

r8  = r8  + r0  */ 

n 

PPC 

_STW(8,3,0),nn 

/* 

Store  result  to  memory  */ 

n 

PPC 

_BC(18,31,10),n 

/* 

Branch  to  Label  if  --ctr  == 

0 */ 

/* 

Loop : */ 

□ 

PPC 

_LWZU(7,4,4),n 

/* 

r7  = *++in  */ 

n 

PPC 

_LWZU(0,3,4),n 

/* 

r0  = *++out  */ 

Q 

PPC 

_MULLW(8,7,6),n 

/* 

r8  = low  word  of  product  */ 

n 

PPC 

_ADDE(8,8,5),  n 

/* 

Add  carry  word  r5  and  carry 

bit  C F 

t 0 

r8  */ 

a 

PPC 

_MULHWU(5,7,6),n 

/* 

r5  is  high  word  of  product. 

for  carry 

word*/ 

n 

PPC 

_ADDZE(5,5),nn 

/* 

Add  carry  bit  from  Low  add 

to  r5  */ 

a 

PPC 

_ADDC(8,8,0),n 

/* 

r8  = r8  + r0  */ 

□ 

PPC 

_STW(8,3,0),  n 

/* 

*out  = r8  */ 

□ 

PPC 

_BC(16,31,-8),n 

/* 

Branch  to  Loop  if  — ctr  != 

0 */ 

/* 

Label:  * 

/ 

o 

PPC 

_ADDZE(3,5),nn 

/* 

Add  carry  flag  to  r5  and  move  to  r3 

*/ 

n 

>; 

PPC 

_BLR( ) 

/* 

* 

HulSubI 

expects  (*out,  *i 

n , L e n , 

k),  count  >=  1 

* 

k 

r3  r4 

r 5 

r6 

k 

HuLtipLy 

and  subtract  is 

rather 

a pain.  If  the  subtract  of 

the 

* Low  word  of  the  product  from  outCiD  generates  a borrow,  we  want  to 

* increment  the  carry  word  (initially  in  the  range  0 . . 0x f f f f f f f e ) . 

* However,  the  PPC's  carry  bit  CF  is  *cLear*  after  a subtract,  so 

* we  want  to  add  (1-CF)  to  the  carry  word.  This  is  done  using  two 

* instructions: 

* 

* SUBFHE,  subtract  from  minus  one  extended.  This  computes 

* rD  = “rS  + 0xffffffff  + CF.  Since  rS  is  from  0 to  0xfffffffe, 

* "rS  is  from  1 through  0xffffffff,  and  the  sum  with  0x f f f f f f f f + C F is 

* from  0 through  0xfffffffff,  setting  the  carry  flag  unconditionally,  and 

* NOR,  which  is  used  as  a bitwise  invert  NOT  instruction. 

•k 

* The  SUBFHE  performs  the  computation  rD  = “rS  + 0xffffffff  + CF, 

* = (-rS  - 1)  + (CF  - 1)  = -(rS  - CF  + 1)  - 1 = "(rS  + 1-CF), 

* which  is  the  bitwise  complement  of  the  value  we  want. 

* We  want  to  add  the  complement  of  that  result  to  the  Low  word  of  the 

* product,  which  is  just  what  a subtract  would  do,  if  only  we  could  get 

* the  carry  flag  clear.  But  it's  always  set,  except  for  SUBFE,  and  the 

* operation  we  just  performed  unconditionally  *sets*  the  carry  flag.  Ugh. 

* So  find  the  complement  in  a separate  instruction. 

*/ 


stati  c 

unsigned  const  mulSubICII 

= 

n 

PPC 

_LWZ(7,4,0),  n 

/* 

Load 

first  word  of  in 

i n 

r7 

*/ 

n 

PPC 

_LWZ(0,3,0),nn 

/* 

Load 

first  word  of  out 

into 

r0  */ 

n 

PPC 

_HTCTR(5),n  n 

/* 

Move 

Len  into  CTR  */ 

n 

PPC 

_HULLW(8,7,6),n 

/* 

Low  half  of  multiply  i 

n r8  */ 

n 

PPC 

_MULHWU(5,7,6),n 

/* 

High 

half  of  multiply 

i n 

r 5 

*/ 

n 

PPC 

_SUBFC(8,8,0),n 

/* 

r8  = 

r0  - r8,  setting 

C F 

*/ 

o 

PPC 

_STU(8,3,0),nn 

/* 

Store 

result  to  memory 

*/ 

n 

PPC 

_SUBFME(5,5),n 

/* 

First 

of  two  insns  to 

add 

(1 

-CF)  to 

n 

PPC 

_BC(18,31,12),n 

/* 

Branch  to  Label  if  --ctr 

= = 

0 */ 
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/* 

Loop  : 

*/ 

n 

PPC_ 

LWZU(7,4,4),n 

/* 

r7  = *++i 

n * / 

n 

PPC_ 

LWZU(0,3,4) ,n 

/* 

r0  = *++out  */ 

□ 

PPC_ 

N0R(5,5,5),nn 

/* 

Second  of 

two 

insns  to  add  (1-CF)  to 

r5  */ 

a 

PPC_ 

HULLW(8,7,6),n 

/* 

r8  = low 

word 

of  product  */ 

u 

PPC_ 

ADDC(8,8,5),  n 

/* 

Add  carry 

word 

r5  to  r8  */ 

n 

PPC_ 

HULHWUC5,7,6),n 

/* 

r5  is  high  word  of  product,  for  carry  word*/ 

n 

PPC_ 

ADDZE(5,5),nn 

/* 

Add  carry 

bit 

from  low  add  to  r5  */ 

n 

PPC_ 

SUBFC(8,8,0),n 

/* 

00 

II 

“J 

00 

setting  CF  */ 

u 

PPC_ 

STW(8,3,0),  n 

/* 

*out  = r8 

*/ 

n 

PPC_ 

SUBFME(5,5),n 

/* 

First  of 

two  i 

nsns  to  add  (1-CF)  to 

r5  */ 

n 

PPC_ 

BC(16,31,-10),n 

/* 

Branch  to 

Loop 

if  --ctr  !=  0 */ 

/* 

Label 

: */ 

□ 

PPC_ 

N0R(3,5,5),nn 

/* 

Finish  adding 

(1-CF)  to  r5,  store  in 

r3  */ 

a 

PPC 

BLRC  ) 

>; 

#i  f 
/* 

* 

* 

★ 

★ 

* 

* 

*/ 

static  unsigned  const  montReduceC3 


0 


Args:  BNW0RD32  *n,  BNW0RD32  const  *mod,  unsigned  mien,  BNW0RD32 
r3  r4  r5 

r7,  r8  and  r9  are  the  triple-width  accumulator. 
r0  and  r10  are  temporary  registers. 

r11  and  r12  are  temporary  pointers  into  n and  mod,  respectively. 
r2  (!)  is  another  temporary  register. 


i n V ) 
r6 


u 

PPC_ 

HTCTR(5),n  /*  ??? 

*/ 

n 

PPC_ 

LWZ(7,3,0),nn 

/* 

Load 

low  word  of  n into 

r7  */ 

n 

PPC_ 

LWZ(10,4,0),n 

/* 

Fetch  low  word  of  mod  */ 

n 

PPC_ 

MULLW(0,7,6),n 

/* 

Invert  r7  into  r0  */ 

u 

PPC_ 

STW(0,3,0),nn 

/* 

Store  back  for  future  use  */ 

n 

PPC_ 

MULHWU(8,10,7),n 

/* 

Get 

high  word  of  whatnot 

*/ 

n 

PPC_ 

MULLW(10,10,7),n 

/* 

Get 

low  word  of  it  */ 

Q 

PPC_ 

ADDC(7,7,10),n 

/* 

Add 

low  word  of  product 

to  r7 

n 

PPC_ 

ADDZE(8,8),nn 

/* 

Add 

carry  to  high  word  * 

/ 

s 

PPC 

n PPC_HULHW(8,7,6), 

n PPC_ADDC(7,7,0),n 

n PPC_ADDZE(8,8), 

n PPC 


/*  Add  inverse  back  to  r7  */ 


n PPC_LWZU( 

/*  Loop:  */ 

n PPC_LWZU(0,1 1 ,4), 

n PPC_LWZUC10,23,-4), 

n PPC_MULLW(2,0,1 0), 

n PPC_ADDC(7,7,2), 

n PPC_MULHWUC0,0,1 0) , 

n PPC_ADDE(8,8,0), 

a PPC_ADDZE(9,9) , 

n PPC_BC ( 1 6,31 ,-7) ,n 


/*  Branch  to  Loop  if  --ctr  !=  0 */ 


PPC_ADDIC_(count,-1 ), 

PPC_LWZU(0,x,4), 

PPC_ADDC(0,7,0), 
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n 

PPC_STW(0,x,0), 

n 

PPC_ADDZE(7,8), 

n 

PPC_ADDZE(8,9), 

n 

PPC_LI(9,0), 

n 

D 

>; 

#end  i f 

/* 

PPC_BC (xx,2,yy) 

* Three  overlapped  transition  vectors  for  three  functions. 

* A PowerPC  transition  vector  for  a (potentially)  inter-module 

* jump  or  call  consists  of  two  words,  an  instruction  address 

* and  a Table  Of  Contents  (TOC)  pointer,  which  is  loaded  into 

* r1.  Since  none  of  the  routines  here  have  global  variables, 

* they  don't  need  a TOC  pointer,  so  the  value  is  unimportant. 

* This  array  places  an  unintersting  32-bit  value  after  each  address. 
*/ 

unsigned  const  * const  bniPPC_tvC]  = { 
n mu  I N1 , 

a mulAddI, 

n mu  I Sub1 , 

D 0 

>; 

#else  /*  HWERKS  >=  0x800  */ 

/* 

* MulNl  expects  (*out,  *in,  len,  k),  count  >=  1 

* r3  r4  r5  r6 
*/ 

asm  void 

bn i M u I N 1 _32 ( r eg i s t e r unsigned  *out,  register  unsigned  const  *in, 
n register  unsigned  len,  register  unsigned  k) 

{ 


n 

1 wz  n 

r7,0(in)  o 

/* 

Load  first  word  of  in  in  r7  */ 

n 

mt  ct  rn 

1 eno  o 

D 

/*  Move  len  into  CTR  */ 

n 

mu  1 1 WD 

r8, r7, kon 

/* 

Low  half  of  multiply  in  r8  */ 

□ 

a dd i CO 

r0, r0,0nn 

/* 

Clear  carry  bit  for  loop  */ 

u 

mu  1 hwuo 

len, r7, kn 

/* 

High  half  of  multiply  in  len  */ 

n 

stw  o 

r8,0(out  )n 

/* 

*out  = r8  */ 

D 

mu  1 hwuo 

len, r7, ko 

/* 

len  is  high  word  of  product,  for 

carry 

*/ 

n 

bdz-o 

1 a be  1 o o 

/* 

Branch  to  Label  if  --ctr  ==  0 */ 

Loop: 

a 

Iwzuo 

r7,4(in)n 

/* 

r7  = *++in  */ 

Q 

mu  1 1 wo 

r8, r7, kon 

/* 

Low  half  of  multiply  in  r8  */ 

n 

addeo 

r8, r8, 1 eno 

/* 

Add  carry  word  len  and  bit  CF  to 

r8  */ 

n 

S t WUD 

r8,4(out)n 

/* 

*++out  = r8  */ 

Q 

mu  1 hwuo 

len,r7,kn 

/* 

len  is  high  word  of  product,  for 

carry 

*/ 

n 

bdnz+o 

Loopo  o 

/* 

Branch  to  Loop  if  — ctr  !=  0 */ 

label: 

n 

a dd  z eo 

1 en, 1 enon 

/* 

Add  carry  flag  to  carry  word  */ 

n 

Stw  o 

len,4(out) 

n 

> 

b 1 r 

/* 

* MulAddI  expects  C*out,  *in. 

len. 

k),  count  >=  1 
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★ 

*/ 


r3  r4  r5  r6 


asm  unsigned 

b n i Mu L Add  1 _3 2 ( r eg i s t e r unsigned  *out,  register  unsigned  const  *in. 


a 

f 

reg i St  e 

r unsigned  len. 

register  unsigned  k) 

a 

1 w z n 

r7, 0 ( i n ) n 

/* 

Load  first  word  of  in  in  r7  */ 

a 

1 w z a 

r0,0(out)n 

/* 

Load  first  word  of  out  into  r0  * 

/ 

n 

mu  1 1 wn 

r8, r7, k n 

/* 

Low  half  of  multiply  in  r8  */ 

n 

mt  c t rn 

1 e n n n 

/* 

Move  len  into  CTR  */ 

n 

mu  1 hwuD 

len,r7,kn 

/* 

High  half  of  multiply  in  len  */ 

u 

addcQ 

r8, r8, r0n 

/* 

r8  = r8  + r0  */ 

u 

s t w n 

r8,0(out)n 

/* 

Store  result  to  memory  */ 

a 

bdz-n 

labe In  n 

/* 

Branch  to  Label  if  --ctr  ==  0 */ 

Loop: 

n 

1 w z un 

r7,4(in)n 

/* 

r 7 = * + + in  * / 

□ 

1 w z un 

r0,4(out  )n 

/* 

r0  = *++out  */ 

n 

mu  1 1 wa 

r8, r7, knn 

/* 

r8  = low  word  of  product  */ 

□ 

adden 

r8,r8,  lenn 

/* 

Add  carry  word  len  and  carry  bit 

CF  to 

la 

mu  1 hwun 

len,r7,kn 

/* 

len  is  high  word  of  product,  for 

carry 

□ 

a dd  z en 

1 en, 1 ennn 

/* 

Add  carry  bit  from  low  add  to  r5 

*/ 

n 

a dd  c Q 

r8, r8, r0n 

/* 

r8  = r8  + r0  */ 

n 

s t w n 

r8,0(out  )n 

/* 

*out  = r8  */ 

n 

bdnz+n 

1 oopn  n 

/* 

Branch  to  Loop  if  --ctr  !=  0 */ 

Label: 

n 

a d d z e Q 

r3, rSn  n 

/* 

Add  carry  flag  to  r5  and  move  to 

r3  */ 

□ 

b 1 r 

} 

/* 

* MuLSubI  expects  (*out,  *in,  Len,  k),  count  >=  1 

* r3  r4r5r6 

* 

* Multiply  and  subtract  is  rather  a pain.  If  the  subtract  of  the 

* low  word  of  the  product  from  outCiD  generates  a borrow,  we  want  to 

* increment  the  carry  word  (initially  in  the  range  0 . . 0x f f f f f f f e ) . 

* However,  the  PPC ' s carry  bit  CF  is  *clear*  after  a subtract,  so 

* we  want  to  add  (1-CF)  to  the  carry  word.  This  is  done  using  two 

* instructions: 

* 


r8  */ 
*/ 


* SUBFME,  subtract  from  minus  one  extended.  This  computes 

* rD  = “rS  + 0xffffffff  + CF.  Since  rS  is  from  0 to  0xfffffffe, 

* ~rS  is  from  1 through  0xffffffff,  and  the  sum  with  0 x f f f f f f f f + C F is 

* from  0 through  Oxfffffffff,  setting  the  carry  flag  unconditionally,  and 

* NOR,  which  is  used  as  a bitwise  invert  NOT  instruction. 

* 

* The  SUBFME  performs  the  computation  rD  = “rS  + 0xffffffff  + CF, 

* = (-rS  - 1)  + (CF  - 1)  = -(rS  - CF  + 1)  - 1 = "(rS  + 1-CF), 

* which  is  the  bitwise  complement  of  the  value  we  want. 

* We  want  to  add  the  complement  of  that  result  to  the  low  word  of  the 

* product,  which  is  just  what  a subtract  would  do,  if  only  we  could  get 

* the  carry  flag  clear.  But  it's  always  set,  except  for  SUBFE,  and  the 

* operation  we  just  performed  unconditionally  *sets*  the  carry  flag.  Ugh. 

* So  find  the  complement  in  a separate  instruction. 

*/ 

asm  unsi gned 

bn  i Mu  I S u b 1 _32 ( r eg  i s t e r unsigned  *out,  register  unsigned  const  *in, 
a register  unsigned  len,  register  unsigned  k) 
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i 

n 

L uz  n 

r7,0(in)  n 

/* 

Load  first  uord  of  in  in  r7  */ 

n 

L wz  n 

r0,0(out )n 

/* 

Load  first  uord  of  out  into  r0  */ 

n 

mt  c t rn 

L en  n n 

/* 

Move  Len  into  CTR  */ 

n 

mu  1 1 wn 

r8, r7, k n 

/* 

Lou  haLf  of  muLtipLy  in  r8  */ 

n 

mu  L hwun 

L en, r7, kn 

/* 

High  haLf  of  muLtipLy  in  Len  */ 

n 

subf cn 

r8, r8, r0n 

/* 

r8  = r0  - r8,  setting  CF  */ 

n 

stw  a 

r8,0(out)n 

/* 

Store  resuLt  to  memory  */ 

a 

subf men 

L en, L ennn 

/* 

First  of  tuo  insns  to  add  (1-CF)  to  Len  */ 

n 

Loop: 

bdz-n 

L a be  L n n 

/* 

Branch  to  LabeL  if  --ctr  ==  0 */ 

n 

L uz  un 

r7,4(in)n 

/* 

r7  = *++in  */ 

n 

L uz  un 

r0,4(out)n 

/* 

r0  = *++out  */ 

u 

nor  n 

Len, Len, L enn 

/* 

Second  of  tuo  insns  to  add  (1-CF)  to  Len  */ 

n 

mu  L t.  un 

r8, r7, knn 

/* 

r8  = Lou  uord  of  product  */ 

n 

addcn 

r8, r8, L enn 

/* 

Add  carry  uord  Len  to  r8  */ 

Q 

mu  L huun 

Len, r7, kn 

/* 

Len  is  high  uord  of  product,  for  carry  */ 

n 

addzen 

Len, Lennn 

/* 

Add  carry  bit  from  Lou  add  to  Len  */ 

n 

subf cn 

r8, r8, r0n 

/* 

r8  = r0  - r8  */ 

n 

stu  n 

r8,0(out  )n 

/* 

*out  = r8  */ 

n 

subf men 

L en, L ennn 

/* 

First  of  tuo  insns  to  add  (1-CF)  to  Len  */ 

n 

Label : 

bdnz+n 

Loopn  n 

/* 

Branch  to  Loop  if  — ctr  !=  0 */ 

n 

n 

> 

nor  n 

b L r 

r3,r5,r5n 

/* 

Finish  adding  (1-CF)  to  Len,  store  in  r3  */ 

#endif  /*  MWERKS  >=  0x800  */ 
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/* 

* bnippc.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* A s s emb L y- L a ngua g e routines  for  the  Power  PC  processor. 

* AnnoyingLy,  the  Power  PC  does  not  have  64/32->32  bit  divide, 

* so  the  C code  shouLd  be  reasonabLy  fast.  But  it  does  have 

* 32x32->64-bi t muLtipLies,  and  these  routines  provide  access 

* to  that . 

* 

* In  versions  of  CodeWarrior  before  8.0,  there  was  no  PPC  assembler, 

* so  a kLudged-up  one  in  CPP  is  used.  This  requires  casting  an 

* array  of  unsigneds  to  function  pointer  type,  and  a function  pointer 

* is  not  a pointer  to  the  code,  but  rather  a pointer  to  a (code, TOC) 

* pointer  pair  which  we  fake  up. 

* 

* CodeWarrior  8.0  supports  PCC  assembly,  which  is  used  directLy. 

* 

* $Id:  bnippc.h, V 1.3. 2.1  1997/06/07  09:49:38  mhw  Exp  $ 

*/ 

#ifndef  BNIPPC.H 
^define  BNIPPC.H 

/* 

* Bignums  are  stored  in  arrays  of  32-bit  words,  and  the  Least 

* significant  32-bit  word  has  the  Lowest  address,  thus  "LittLe-endian". 

* The  C code  is  sLightLy  more  efficient  this  way,  so  unLess  the 

* processor  cares  (the  PowerPC,  Like  most  RISCs,  doesn't),  it  is 

* best  to  use  BN. LI TT LE. E N D I AN . 

* Note  that  this  has  NOTHING  to  do  with  the  order  of  bytes  within  a 32-bit 

* word;  the  math  Library  is  insensitive  to  that. 

*/ 

#define  BN.LI TT L E. E N D I AN  1 

typedef  unsigned  bnword32; 

#define  BNW0RD32  bnword32 

#ifdef  ..cpLuspLus 
extern  "C"  ( 

#end  i f 

#if  HWERKS < 0x800 

/*  Shared  transition  vector  array  */ 
extern  unsigned  const  * const  bniPPC.tvCD; 

/*  A function  pointer  on  the  PowerPC  is  a pointer  to  a transition  vector  */ 
#define  bniMuLN1.32  \ 

((void  (*)(bnword32  *,  bnword32  const  *,  unsigned,  bn wo r d32 ) ) ( b n i PPC . t v+0 ) ) 
#define  bn i Mu L Add  1 .3 2 \ 

((bnword32  (*)(bnword32  *,  bnword32  const  *,  unsigned,  bn wo r d32 ) ) ( b n i PPC. t v + 1 ) ) 
#define  bn i Hu L Subi .32  \ 

((bnword32  (*)(bnword32  *,  bnword32  const  *,  unsigned,  bn wo r d 3 2 ) ) ( b n i PPC. t v+2 ) ) 
Mei.se  /* HWERKS >=  0x800  */ 
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void  bniHuLN1_32(bnword32  * , bnword32  const  * , unsigned,  bnword32); 
^define  bniHuLN1_32  bniMuLN1_32 

bnword32  bn i Mu L Add  1 _32 ( bn wo r d3 2 *,  bnword32  const  *,  unsigned,  bnword32); 
^define  b n i Hu  I Ad d 1 _32  bn i Mu L Add  1 _3 2 

bnword32  bniMulSub1_32(bnword32  *,  bnword32  const  *,  unsigned,  bnword32); 
^define  bn i Hu L S u b 1 _32  b n i Mu  I S ub 1 _3 2 

#endif  /*  __MWERKS__  >=  0x800  */ 

#ifdef  __cpLuspLus 

> 

#e nd i f 

#endif  /*  BNIPPC_H  */ 
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/* 

* bnjacobi.c  - Compute  the  Jacobi  symbol  (small  prime  case  only). 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

* 

* $Id:  bnjacobi.c, V 1.1. 2.1  1 997/06/07  09:49:38  mhw  Exp  $ 

*/ 

#include  "bn.h" 

#include  "bnjacobi.h" 


/* 

* For  a small  (usually  prime,  but  not  necessarily)  prime  p, 

* compute  J a c ob i ( p , b n ) , which  is  -1,  0 or  +1,  using  the  following  rules: 

* Jacobi(x,  y)  = Jacobi(x  mod  y,  y) 

* Jacobi(0,  y)  = 0 

* Jacobi(1,  y)  = 1 

* Jacobi(2,  y)  = 0 if  y is  even,  +1  if  y is  +/-1  mod  8,  -1  if  y = +/-3  mod  8 

* J a c o b i ( X 1 *x 2 , y)  = Jacobi(x1,  y)  * Jacobi(x2,  y)  (used  with  x1  = 2 8 x1  =4) 

* If  X and  y are  both  odd,  then 

* Jacobi(x,  y)  = Jacobi(y,  x)  * (-1  if  x = y = 3 mod  4,  +1  otherwise) 

*/ 

i nt 

bn J a c ob i Q ( u n s i g n e d p,  struct  BigNum  const  *bn) 

{ 

a i n t j = 1 ; 

n unsigned  u = b n LS Wo r d ( bn ) ; 


a i f ( ! (u  8 1 ) ) 

n n return  0;n  /*  Don't  *do*  that  */ 

n /*  First,  get  rid  of  factors  of  2 in  p */ 

n while  ((p83)==0) 

n n p >>=  2 ; 

n if((p81)==0){ 

n n p >>=  1 ; 

n n i f ( ( u * u>>1 ) 8 2 ) 

n n n j=-j;nB  /*3(011)or5(101)mod8*/ 

n } 

n i f (p  ==  1 ) 

n n returnj; 

n /*  Then,  apply  quadratic  reciprocity  */ 

n if  (p  8 u 8 2)n  /*  p = u = 3 (mod  4?  */ 

n n j = -j; 

n /*  And  reduce  u mod  p */ 

n u = bnModCKbn,  p); 


□ 

□ 

□ 

n 

n 

□ 

a 

Q 

a 

□ 


/ * Now 

comput  e 

Jacobi(u,p),  u < p */ 

while 

(u)  { 

n 

while 

((u  8 3)  == 

0) 

n 

n 

u >>=  2; 

a 

if  ((u 

8 1 ) ==  0) 

( 

□ 

□ 

u >>=  1 ; 

n 

n 

if  ((p 

p>>1)  8 2) 

n 

n 

“ j 

= -j;n/*  3 

n 

> 

a 

if  ( u 

= = 1 ) 

(011)  or  5 


(101)  mod  8 */ 
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n 

n 

□ 

return  j; 

n 

□ 

/* 

Now  both  u and 

p are 

odd,  so  use  quadratic  reciprocity 

□ 

n 

i f 

( u < p ) { 

n 

□ 

n 

unsigned  t 

= u; 

u=p;p=t; 

a 

n 

n 

if  ( u & p 

S 2}q 

/*  u = p = 3 (mod  4?  */ 

n 

n 

Q 

“ j 

= - j ; 

n 

n 

> 

n 

n 

/* 

Now  u >=  p,  so 

it  can 

be  reduced  */ 

n 

n 

U / 

i=  p; 

n 

> 

n 

return 

0; 

} 
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/* 

* bnjacobi.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* For  a smaLL  CusuaLLy  prime,  but  not  necessariLy)  prime  p, 

* Return  J a c o b i ( p , b n ) , which  is  -1,  0 or  +1. 

* bn  must  be  odd. 

* 

* $Id:  bnjacobi.h, V 1.3. 2.1  1997/06/07  09:49:38  mhw  Exp  $ 

*/ 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 

struct  BigNum; 

#ifndef  TYPE_BIGNUM 

^define  TYPE_BIGNUM  1 

typedef  struct  BigNum  BigNum; 

#end  i f 

int  BNExport  bn  J a c ob  i Gl  ( u n s i g n e d p,  struct  BigNum  const  *bn); 

#ifdef  __cpLuspLus 

> 

# e nd i f 
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/* 

* bnkludge.h 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* KLudges  for  no t -q u i t e- AN S I systems. 

* This  shouLd  aLways  be  the  Last  fiLe  incLuded,  because  it  may 

* mess  up  some  system  header  fiLes. 

* 

* $Id:  bnkLudge.h,v  1.1. 2.1  1 997/06/07  09:49:38  mhw  Exp  $ 

*/ 


#ifndef  BNKLUDGE_H 
#define  BNKLUDGE_H 

/* 

* Some  compiLers  compLain  about  #if  FOO  if  FOO  isn't  defined, 

* so  do  the  AN S I -ma nda t ed  thing  e x p L i c i t L y . . . 

*/ 

#ifndef  A S S E RT_N E E D S _ST D I 0 
#define  A S S E RT_N E E D S _ST D I 0 0 
#endi f 

#ifndef  AS S E RT_N E E D S_ST D LI B 
#define  AS S E RT_N E E D S_ ST D LI B 0 
# e nd i f 

#ifndef  NO_STDLIB_H 
#define  NO_STDLIB_H  0 
#end  i f 


bnkludge.h 


/*  SunOS  4.1.x  <assert.h>  needs  "stderr"  defined,  and  "exit"  declared...  */ 

#ifdef  assert 

#if  ASSERT_NEEDS_STDIO 

^include  <stdio.h> 

#end i f 

#if  ASSERT_NEEDS_STDLIB 
#if  !NO_STDLIB_H 
^include  <stdLib.h> 

#endi f 
# end i f 
#e  nd i f 


#ifndef  N0_HEMM0VE 
^define  N0_HEMM0VE  0 
#end i f 

#if  N0_MEHM0VEn  /*  memoveC)  not  in  Libraries  */ 

^define  memmo ve ( d e s t , s r c , L en ) b c o py ( s r c , d e s t , L e n ) 

//end  i f 

//ifndef  N0_f1EHCPY 
^define  N0_HEHCPY  0 
//end i f 

//if  NO_MEHCPYn  /*  memcpyC)  not  in  Libraries  */ 

//define  memc  py  ( de  s t , s r c , L en  ) b c opy  ( s r c , d e s t , L e n ) 

//e n d i f 

//ifndef  HEH_PR0T0S_BR0KEN 
//define  HEH_PR0T0S_BR0KEN  0 
// e nd i f 
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#if  MEM_PROTOS_BROKEN 

#define  memc py C d , s , L ) mem c py ( ( vo i d *)(d),  (void  const  *)(s),  L) 

#define  memmove ( d , s , L ) memmove ( ( vo i d *)(d),  (void  const  *)(s),  L) 

#define  mem cmp ( d , s , L ) memcmp((void  const  *)(d),  (void  const  *)(s),  L) 

#define  mems e t ( d , v , L ) memset((void  *)(d),  v,  L) 

Send i f 

/* 

* If  there  are  no  prototypes  for  the  stdio  functions,  use  these  to 

* reduce  compiler  warnings.  Uses  EOF  as  a giveaway  to  indicate 

* that  <stdio.h>  was  SincLuded. 

*/ 

Sifndef  N0_ S T D I 0_P ROTO S 
Sdefine  N0_ S T D I 0_ P ROTO S 0 
Send i f 

Sif  N0_STDI0_PR0T0Sn  /*  Missing  prototypes  for  "simple"  functions  */ 

Sifdef  EOF 

Sifdef cplusplus 

extern  "C"  ( 

S e nd i f 

int  (puts)(char  const  *); 

int  (fputs)(char  const  *,  FILE  *); 

int  (fflush)(FILE  *); 

int  ( p r i n t f ) ( c h a r const  *, 

int  (fprintf)(FILE  *,  char  const  *, 

/*  If  we  have  a sufficiently  old-fashioned  stdio,  it  probably  uses  these...  */ 
int  ( _f I s bu f ) ( i n t , FILE  *); 
int  ( _f i I bu f ) ( F I L E *); 

Sifdef  __cplusplus 
} 

Send  i f 

Sendif  /*  EOF  */ 

Sendif  /*  N 0_ ST D I 0_ P ROTO S */ 

/* 

* Borland  C seems  to  think  that  it's  a bad  idea  to  decleare  a 

* structure  tag  and  not  declare  the  contents.  I happen  to  think 

* it's  a *good*  idea  to  use  such  "opaque"  structures  wherever 

* possible.  So  shut  up. 

*/ 

Sifdef  BORLANDC 

Spragma  warn  -stu 
Sifndef  HSDOS 
Sdefine  HSDOS  1 
Sendif 
Send i f 

/*  Turn  off  warning  about  negation  of  unsigned  values  */ 

Sifdef  _MSC_VER 

Spragma  wa r n i ng ( d i s a b I e : 4 1 46  ) 

S e nd i f 

/*  Cope  with  people  forgetting  to  define  the  OS,  if  possible...  */ 

Sifndef  HSDOS 

Sifdef  HSDOS 

Sdefine  HSDOS  1 

Sendif 

Sendif 
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#ifndef  HSDOS 

#ifdef  MSDOS 

#define  MSDOS  1 
#endi f 
#end  i f 

/*  By  MS-DOS,  we  mean  16-bit  brain-dead  MS-DOS.  Not  GCC 
#ifdef  __G032 
#undef  MS  DOS 
#endi f 

#ifdef  __G032__ 

#undef  MSDOS 
Send i f 


Sendif  /*  BNKLUDGE.H  */ 
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/* 

* bnLegaL.c 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  bnLegaL.c,v  1.2. 2.1  1 997/06/07  09:49:39  mhw  Exp  $ 

*/ 

#ifndef  H A V E_ C 0 N F I G _H 
#define  HAVE_CON F I G_H  0 
#end  i f 

#if  HAVE_CONFIG_H 

#incLude  "config.h"n  /*  For  "const"!  */ 

#end  i f 

/*  Force  incLusion  of  this...  */ 

#incLude  "bnLegaL.h" 

voLatiLe  const  char  bn  C o py  r i g h t [ II  = 

n "\0bnLib  1.1.2  Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc." 

a " ALL  rights  reserved."; 
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/* 

* bnlegal.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* ANSI  C stadard,  section  3.5.3:  "An  object  that  has  volatile-qualified 

* type  may  be  modified  in  ways  unknown  to  the  implementation  or  have 

* other  unknown  side  effects."  Yes,  we  can't  expect  a compiler  to 

* understand  law  . . . 

* 

* $Id:  bnlegal.h, V 1.2. 2.1  1 997/06/07  09:49:39  mhw  Exp  $ 

*/ 


Sifdef  __cplusplus 
extern  "C"  { 

#end i f 

extern  volatile  const  char  bn C o py r i g h t C 3 ; 

#ifdef  cplusplus 

> 

#e  n d i f 
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#ifndef  BNPPCASM.H 
#define  BNPPCASM.H 
/* 

* bnppcasm.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  bnppcasm.h, V 1.1. 2.1  1997/06/07  09:49:39  mhu  Exp  $ 

* 

* A PowerPC  assembler  in  the  C preprocessor. 

* This  assumes  that  ints  are  32  bits,  and  uses  them  for  the  values. 

* 

* An  a s s emb L y- L a ng ua g e routine  is  simpLy  an  array  of  unsigned  ints, 

* initiaLized  with  the  macros  defined  here. 

* 


* In  the  PowerPC,  a generic  function  pointer  does  *not*  point  to  the 

* first  word  of  code,  but  to  a two  (or  possibLy  more)  word  "transition 

* vector."  The  first  word  of  the  TV  points  to  the  function's  code. 

* The  second  word  is  the  function's  TOC  (TabLe  Of  Contents)  pointer, 

* which  is  Loaded  into  r2.  The  function's  gLobaL  variabLes  are 

* accessed  via  the  TOC  pointed  to  by  r2.  TOC  pointers  are  changed, 

* for  exampLe,  when  a dynamicaLLy  Linked  Library  is  caLLed,  so  the 

* Library  can  have  private  gLobaL  variabLes. 

* 


Saving  r2  and  reLoading  r2  each  function  caLL  is  a hassLe  that 
I'd  reaLLy  rather  avoid,  since  a Lot  of  usefuL  assembLy  Language  routines 
can  be  written  without  gLobaL  variabLes  at  aLL,  so  they  don't  need  a TOC 
pointer.  But  I haven't  figured  out  how  to  persuade  CodeUarrior  7 to 
generate  an  intra-TOC  caLL  to  an  array.  (CodeWarrior  8 supports 
PowerPC  asm,  which  obviates  the  need  to  do  the  c a s t - t o-f u n c t i on-po i n t e r 
trick,  which  obviates  the  need  for  cross-TOC  caLLs.) 

The  basic  PowerPC  caLLing  conventions  for  integers  are: 

r0  - scratch.  Hay  be  modified  by  function  caLLs. 

r1  - stack  pointer.  Must  be  preserved  across  function  caLLs. 

See  IMPORTANT  notes  on  stack  frame  format  beLow. 

This  must  *ALWAYS*,  at  every  instruction  boundary,  be  16-byte 

aligned  and  point  to  a vaLid  stack  frame.  If  a procedure 

needs  to  create  a stack  frame,  the  recommended  way  is  to  do: 

stwu  r 1 , -f rame.s i ze ( r 1 ) 

and  on  exit,  recover  with  one  of: 

addi  r 1 , r 1 , f r a me. s i z e , OR 

Lwz  r1,0(r1) 

r2  - TOC  pointer.  Points  to  the  current  table  of  contents. 

Must  be  preserved  across  function  caLLs. 
r3  - First  argument  register  and  return  vaLue  register. 

Arguments  are  passed  in  r3  through  r10,  and  vaLues  returned  in 
r3  through  r6,  as  needed.  (UsuaLLy  onLy  r3  for  singLe  word.) 
r4-r10  - More  argument  registers 

r11  - Scratch,  may  be  modified  by  function  caLLs. 

On  entry  to  indirect  function  caLLs,  this  points  to  the 
transition  vector,  and  additionaL  words  may  be  Loaded 
at  offsets  from  it.  Some  conventions  use  r12  instead. 
r12  - Scratch,  may  be  modified  by  function  caLLs. 

r13-r31  - CaLLee-save  registers,  may  not  be  modified  by  function 
caLLs. 

The  LR,  CTR  and  XER  may  be  modified  by  function  caLLs,  as  may  the  MS 
register,  on  those  processors  for  which  it  is  impLemented. 
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c 


CR  fields  0,  1,  5,  6 and  7 are  scratch  and  may  be  modified  by  function 
calls.  CR  fields  2,  3 and  4 must  be  preserved  across  function  calls. 


Stack  frame  format 


READ 


r1  points  to  a stack  frame,  which  must  *ALWAYS*,  meaning  after  each  and 
every  instruction,  without  excpetion,  point  to  a valid  1 6-by t e-a I i g n e d 
stack  frame,  defined  as  follows: 

* - The  296  bytes  below  r1  (from  -296(r1)  to  -1(r1))  are  the  so-called  Red 

* Zone  reserved  for  leaf  procedures,  which  may  use  it  without  allocating 
a stack  frame  and  without  decrementing  r1.  The  size  comes  from  the  room 
needed  to  store  all  the  callee-save  registers:  19  64-bit  integer  registers 
and  18  64-bit  floating-point  registers.  C18+19)*8  = 296.  So  any 
procedure  can  save  all  the  registers  it  needs  to  save  before  creating 
a stack  frame  and  moving  r1. 

The  bytes  at  -297(r1)  and  below  may  be  used  by  interrupt  and  exception 
handlers  *at  any  time*.  Anything  placed  there  may  disappear  before 
the  next  instruction. 

The  word  at  0(r1)  is  the  previous  r1,  and  so  on  in  a linked  list. 

This  is  the  minimum  needed  to  be  a valid  stack  frame,  but  some  other 
offsets  from  r1  are  preallocated  by  the  calling  procedure  for  the  called 
procedure's  use.  These  are: 

Offset  0:  Link  to  previous  stack  frame  - saved  r1,  if  the  called 

procedure  alters  it. 

Offset  4:  Saved  CR,  if  the  called  procedure  alters  the  callee-save 
fields.  There's  no  important  reason  to  save  it  here, 
but  the  space  is  reserved  and  you  might  as  well  use  it 
for  its  intended  purpose  unless  you  have  good  reason  to 
do  otherwise.  (This  may  help  some  debuggers.) 

Offset  8:  Saved  LR,  if  the  called  procedure  needs  to  save  it  for 

later  function  return.  Saving  the  LR  here  helps  a debugger 
track  the  chain  of  return  addresses  on  the  stack. 

Note  that  a called  procedure  does  not  need  to  preserve  the 
LR  for  it's  caller's  sake,  but  it  uually  wants  to  preserve 
the  value  for  its  own  sake  until  it  finishes  and  it's 
time  to  return.  At  that  point,  this  is  usually  loaded 
back  into  the  LR  and  the  branch  accomplished  with  BLR. 

However,  if  you  want  to  be  preverse,  you  could  load  it 
into  the  CTR  and  use  BCTR  instead. 


★ 

offset 

1 2 : 

Reserved 

t o 

c omp  i 

1 e r . 

I 

can't 

find 

what 

t h i 

s is 

for. 

* 

Offset 

16: 

Rese  rved 

t 0 

c 0 m p i 

1 e r . 

I 

can't 

find 

what 

t h i 

s is 

for. 

* 

Offset 

20: 

Saved  TOC 

pointer 

I n 

a 

cross 

-TOC 

call. 

the 

old 

TOC  (r2) 

is  saved  here  before  r2  is  loaded  with  the  new  TOC  value. 
Again,  it's  not  important  to  use  this  slot  for  this,  but 
you  might  as  well. 

Beginning  at  offset  24  is  the  argument  area.  This  area  is  at  least  8 words 

(32  bytes;  I don't  know  what  happens  with  64  bits)  long,  and  may  be  longer, 

up  to  the  length  of  the  longest  argument  list  in  a function  called  by 

the  function  which  allocated  this  stack  frame.  Generally,  arguments 

to  functions  are  passed  in  registers,  but  if  those  functions  notice 

the  address  of  the  arguments  being  taken,  the  registers  are  stored 

into  the  space  reserved  for  them  in  this  area  and  then  used  from  memory. 

Additional  arguments  that  will  not  fit  into  registers  are  also  stored 

here.  Variadic  functions  (like  printf)  generally  start  by  saving 

all  the  integer  argument  registers  from  the  "..."  onwards  to  this  space. 

For  that  reason,  the  space  must  be  large  enough  to  store  all  the  argument 
registers,  even  if  they're  never  used. 

(It  could  probably  be  safely  shrunk  if  you're  not  calling  any  variadic 
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* functions,  but  be  careful!) 

* 

* Offsets  above  that  are  private  to  the  calling  function  and  shouldn't 

* be  messed  with.  Generally,  what  appears  there  is  locals,  then  saved 

* registers. 

* 


* 

* The  floating-point  instruction  set  isn't  implemented  yet  (I'm  too 

* lazy,  as  I don't  need  it  yet),  but  for  when  it  is,  the  register 

* usage  convention  is: 

* FPSCR  - Scratch,  except  for  floating  point  exception  enable  fields, 

* which  should  only  be  modified  by  functions  defined  to  do  so. 

* frO  - scratch 

* fri  - first  floating  point  parameter  and  return  value,  scratch 

* fr2  - second  floating  point  parameter  and  return  value  (if  needed),  scratch 

* fr3  - third  floating  point  parameter  and  return  value  (if  needed),  scratch 

* fr4  - fourth  floating  point  parameter  and  return  value  (if  needed),  scratch 

* fr5-fr13  - More  floating  point  argument  registers,  scratch 

* fr14-fr31  - Callee-save  registers,  may  not  be  modified  across  a func  call 

* 


★ 

* 

* 

★ 

★ 

* 

* 

* 

★ 

★ 

★ 

★ 

* 

* 

* 

•k 

* 

★ 

★ 

★ 

* 

★ 

* 

* 

* 

•k 

* 

* 

★ 

* 

★ 

* 

★ 

★ 

* 

* 

* 

* 


Complex  values  store  the  real  part  in  the  I o we r -n umbe r d register  of  a pair. 
When  mixing  floating-point  and  integer  arguments,  reserve  space  (one  reg 
for  single-precision,  two  for  double-precision  values)  in  the  integer 
argument  list  for  the  floating-point  values.  Those  integer  registers 
generally  have  undefined  values,  UNLESS  there  is  no  prototype  for  the  call, 
in  which  case  they  should  contain  a copy  of  the  floating-point  value's 
bit  pattern  to  cope  with  wierd  software. 

If  the  floating  point  arguments  go  past  the  end  of  the  integer  registers, 
they  are  stored  in  the  argument  area  as  well  as  being  passed  in  here. 

After  the  argument  area  comes  the  calling  function's  private  storage. 
Typically,  there  are  locals,  followed  by  saved  GP  rgisters,  followed 
by  saved  FP  registers. 

Suggested  instruction  for  allocating  a stack  frame: 
stwu  r1,-frame_size(r1) 

Suggested  instructions  for  deallocating  a stack  frame: 
addi  r 1 , r 1 , f r ame_ s i z e 

0 r 

Iwz  r1,0(r1) 

If  frame_size  is  too  big,  you'll  have  to  load  the  offset  into  a temp 
register,  but  be  sure  that  r1  is  updated  atomically. 

Basic  PowerPC  instructions  look  like  this: 

1111111111222222222233 
01  234567890123456789012345678901 

1 Opcode  I I I I I I I I I I I I I I I I I I I I I I I I I I I 

Branch  instructions  Look  Like  this: 

I Opcode  I Branch  offset  |A|L| 
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* The  L,  or  LK,  or  Link  bit  indicates  that  the  return  address  for  the 

* branch  should  be  copied  to  the  Link  register  (LR). 

* The  A,  or  AA,  or  absolute  address  bit,  indicates  that  the  address 

* of  the  current  instruction  (NOTE:  not  next  instruction!)  should  NOT 

* be  added  to  the  branch  offset;  it  is  relative  to  address  0. 

* 

* Conditional  branches  looks  Like  this: 

* I Opcode  I BO  I BI  | Branch  offset  |A|L| 

* 

* The  BI  field  specifies  the  condition  bit  of  interest  (from  the  CR). 

* The  BO  field  specifies  what's  interesting.  You  can  branch  on  a 

* combination  of  a bit  of  the  condition  register  and  --ctr,  the  CTR 

* register.  Two  bits  encode  the  branch  condition  to  use: 

* BRANCH  IF 

* 00 = Bit  BI  is  0 

* 01 = Bit  BI  is  1 

* 1z = don't  care  about  bit  BI  (always  true) 

* AND 

* — 00-  = — c t r ! = 0 

* — 01-  = — ctr  ==  0 

* --1z-  = don't  decrement  ctr  (always  true) 

* The  Last  bit  us  used  as  a branch  prediction  bit.  If  set,  it  reverses 

* the  usual  backward-branch-taken  heuristic. 

* 

* y = branch  prediction  bit.  z = unused,  must  be  0 


★ 

0000y  - 

branch  if  --ctr 

!=  0 &S 

BI 

= = 

0 

★ 

don't  branch  if 

--ctr  == 

0 

1 1 

BI 

!=  0 

* 

0001 y - 

branch  if  --ctr 

00 

00 

II 

II 

BI 

= = 

0 

★ 

don't  branch  if 

--ct  r 1 = 

0 

1 1 

BI 

!=  0 

★ 

001 zy  - 

branch  if  BI  == 

0 

* 

don't  branch  if 

BI  I = 0 

* 

01 00y  - 

branch  if  --ctr 

0 && 

BI 

1 = 

0 

* 

don't  branch  if 

— ctr  = = 

0 

1 1 

BI 

= = 0 

* 

0101y  - 

branch  if  --ctr 

= = 0 S& 

BI 

I = 

0 

★ 

don't  branch  if 

— ctr  I = 

0 

1 1 

BI 

= = 0 

* 

01 1 zy  - 

branch  if  BI  1= 

0 

ie 

don't  branch  if 

BI  ==  0 

•k 

1 z00y  - 

branch  if  --ctr 

1=  0 

k 

don't  branch  if 

--ctr  == 

0 

k 

1 z 0 1 y - 

branch  if  --ctr 

= = 0 

k 

don't  branch  if 

--ctr  1 = 

0 

k 

1 z1 zz  - 

branch  always 

k 

If  y is 

1,  the  usual  branch  predict 

ion 

( 

usually  not  taken,  taken  for 

* backwards  branches  with  immediate  offsets)  is  reversed. 

* 

* Instructions  with  2 operands  and  a 16-bit  immediate  field  Look  Like  this: 

* 1 Opcode  I D I A I 16-bit  immediate  value  | 

* +-  + — F-  + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + 

* 

* Now,  there  are  three  variations  of  note.  In  some  instructions,  the  16-bit 

* value  is  sign-extended.  In  others,  it's  zero-extended.  These  are  noted 

* below  as  "simm"  (signed  immediate)  and  "uimm",  respectively.  Also,  which 

* field  is  the  destination  and  which  is  the  source  sometimes  switches. 

* Sometimes  it's  d = a OP  imm,  and  sometimes  it's  a = s OP  i mm . In  the 

* latter  cases,  the  "d"  field  is  referred  to  as  "s"  ("source"  instead  of 

:[CHK:332cc65c27d2dffba7760ec095521de407f6e3a4b792caf16a60eb866c8706efi:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


227 


bnppcasm.h 


* "destination".  These  are  Logical  and  shift  instructions.  (Store  also 

* refers  to  the  s register,  but  that's  the  source  of  the  value  to  be  stored.) 

* The  assembly  mnemonics,  however,  always  Lists  the  destination  first, 

* swapping  the  order  in  the  instruction  if  necessary. 

* Third,  quite  often,  if  r0  is  specified  for  the  source  a,  then  the  constant 

* value  0 is  used  instead.  Thus,  r0  is  of  Limited  use  - it  can  be  used  for 

* some  things,  but  not  all. 

* 

* Instructions  with  three  register  operands  look  Like  this: 

* I Opcode  I D I A I B I Subopcode  |C| 

* 

* For  most  of  the  instructions  of  interest  the  Opcode  is  31  and  the  subopcode 

* determines  what  the  instruction  does.  For  a few  instructions  (mostly  Loads 

* and  stores),  if  the  A field  is  0,  the  constant  0 is  used.  The  "C" 

* bit  (also  known  as  the  "RC"  bit)  controls  whether  or  not  the  condition 

* codes  are  updated.  If  it  is  set  (indicated  by  a suffix  on  the  official 

* PowerPC  opcodes,  and  a suffix  on  these  macros),  condition  code  register 

* field  0 (for  integer  instructions;  field  1 for  floating  point)  is  updated 

* to  reflect  the  result  of  the  operation. 

* Some  arithmetic  instructions  use  the  most  significant  bit  of  the  subopcode 

* field  as  an  overflow  enable  bit  (o  suffix). 

* 

* Then  there  are  the  rotate  and  mask  instructions,  which  have  5 operands,  and 

* fill  the  subopcode  field  with  2 more  5-bit  fields.  See  below  for  them. 

* 

* NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE  NOTE 

* These  macros  fully  parenthesize  their  arguments,  but  are  not  themselves 

* fully  parenthesized.  They  are  intended  to  be  used  for  initializer  Lists, 

* and  if  you  want  to  do  tricks  with  their  numeric  values,  wrap  them  in 

* parentheses. 

*/ 


#define  PPC_MA J OR ( x ) n 
#define  PPC_MI NOR ( x ) n 
#define  PPC_RCn  In 
#define  PPC_0En  1024n 


^define  PPC_ D E S T ( r eg ) n 
Sdefine  PPC _ S R C A ( r e g ) n 
^define  PPC _ S R C B ( r e g ) n 
//define  PPC_AAn  2n 
//define  PPC_LKn  In 


((x)<<26)n  /*  Major  opcode  (0..63)  */ 

((x)<<1)n  /*  Minor  opcode  (0..1023)  */ 

n /*  Record  carry  (.  suffix,  represented  as  _)  */ 

n /*  Overflow  enable  (o  suffix)  */ 

((reg)<<21)n  /*  Dest  register  field  */ 

((reg)<<16)n  /*  First  source  register  field  */ 

((reg)<<11)n  /*  Second  source  register  field  */ 

/*  Branch  is  absolute,  relative  to  address  0 */ 

/*  Branch  with  Link  (L  suffix)  */ 


/*  Unconditional  branch 
#define  PPC_B(dest)n 
#define  PP C_B A ( d e s t ) n 
//define  PP  C_B  L ( d e s t ) n 
//define  PPC_BLA(dest  )n 


(dest  is  26  bits,  +/-  2‘'25  bytes)  */ 
PPC_MAJ0R(18)  I (((dest)«2)  & 0x03fffffc) 
PPC_B(dest ) I PPC_AA 
PPC_B(dest ) I PPC_LK 
PPC_B(dest)|PPC_AA|PPC_LK 


/*  Three-operand  instructions  */ 

//define  PPC_TYPE31(minor,d,a,b)n\ 

n PPC_MAJ0R(31)|PPC_DEST(d)|PPC_SRCA(a)|PPC_SRCB(b)|PPC_MIN0R(minor) 

//define  PP  C _ A D D ( d , a , b ) n P PC  _T  Y P E3 1 ( 2 66  , d , a , b ) 

//define  PP  C_  A D D_  ( d , a , b ) n P PC  _T  Y P E3 1 ( 2 66  , d , a , b ) | P P C _R  C 

#define  PPC_ADDO(d,a,b)  n P PC _T Y P E 3 1 ( 2 66 , d , a , b ) | P P C _0 E 

#define  PPC _ A D D0_ ( d , a , b ) n P PC _T Y P E 3 1 ( 2 66 , d , a , b ) | PP C _0 E | P P C_ R C 

^define  PPC _ A D D C ( d , a , b ) n PP C _T Y P E 3 1 ( 1 0 , d , a , b ) 
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Sdefine  PPC _ A D D C _ ( d , a , b ) n 
#define  PPC_ A D D C 0 ( d , a , b ) n 
^define  PPC_ADOCO_(d,a,b)n 
#define  PPC_ A D D E ( d , a , b ) n 
^define  PPC_ A D D E_ ( d , a , b ) n 
#define  PPC _ A D D EO ( d , a , b ) n 
#define  PPC_ A D D E0_ ( d , a , b ) n 
#define  PPC_ A D DM E ( d , a ) n 
#define  PPC_ A D DM E_ ( d , a ) n 
#define  PPC_ADDMEO ( d, a ) n 
#define  PPC_ A D D M E 0_ ( d , a ) n 
^define  PPC _ A D D Z E ( d , a ) a 
#define  PPC _ A D D Z E_ ( d , a ) n 
//define  PPC_  A D D Z EO  ( d , a ) n 
#define  PPC_AD DZ E0_ ( d, a ) n 
//define  PPC_AN  D ( a , s , b ) n 
//define  PPC_AN  D_  ( a , s , b ) n 
//define  PP  C_AN  D C ( a , s , b ) n 
//define  PPC_  AND  C_  ( a , s,  b ) n 
//define  PP  C_  C M P C c r , a , b ) n 
//define  PPC_CMPLCcr,a,b)n 
//define  PPC  _C  NT  LZ  W ( a , s ) a 
#define  PPC_C NT LZ W_ ( a , s ) n 
//define  PPC_  D C B F ( a , b ) n 

//define  PPC_DCBI  (a,b)  n 

//define  PPC_DCBST(a,b)  n 

#define  PPC_D C BT ( a , b ) n 

//define  PP  C_D  C BT  ST  C a , b ) a 
//define  PP  C_D  C BZ  C a , b ) n 

//define  PP  C_  D I V W ( d , a , b ) n 
//define  PPC_DIVW_(d,a,b)n 
//define  PPC_  D I V WO  ( d , a , b ) n 
//define  PPC_DIVWO_(d,a,b)n 
//define  PPC_  D I VW  U ( d , a , b ) n 
//define  PPC  _ D I VW  U_  C d , a , b ) n 
//define  PPC_D  I VW  UO  ( d , a , b ) n 
#define  PPC_D I VW U0_ ( d , a , b ) n 
//define  PPC  EIEIOC)  a 


//define  PPC_EQ\/ ( a , s , b ) n 
//define  PPC_EQV_  ( a , s , b ) n 
//define  PPC_EXT  S B ( a , s , b ) n 
//define  PPC_EXTSB_  ( a , s , b ) n 
//define  PPC_EXTS  H ( a , s , b ) n 
//define  PP  C_  EXT  S H_  ( a , s , b ) n 
//define  PP  C_  I C B I ( a , b ) n 

//define  PPC_ISYNCC)  n 

//define  PPC_  LB  Z U X C d , a , b ) n 
//define  PPC  _ LB  Z X ( d , a , b ) n 
//define  PPC_LHAUX(d,a,b)n 
//define  PPC_LHAX  (d,  a , b ) n 
#define  PPC_LHBRX ( d , a , b ) n 
#define  PPC_LH Z UX ( d , a , b ) a 
//define  PPC_LHZX(d,a,b)  a 
//define  PPC_LSWI  (d,a,nb)a 
//define  PPC_LS  WX  ( d , a , b ) a 
//define  PPC_LS  ARX  ( d,  a , b ) a 
//define  PPC_  LS  B RX  ( d , a , b ) a 
//define  PPC_MCRXR  ( c rd  ) a 


PPC_TYPE31(10,d,a,b)|PPC_RC 

PPC_TYPE31(10,d,a,b)|PPC_OE 

PPC_TYPE31(10,d,a,b)|PPC_OE|PPC_RC 

PPC_TYPE31(138,d,a,b) 

PPC_TYPE31(138,d,a,b)|PPC_RC 

PPC_TYPE31(138,d,a,b)|PPC_0E 

PPC_TYPE31(138,d,a,b)|PPC_0E|PPC_RC 

PPC_TYPE31(234,d,a,0) 

PPC_TYPE31(234,d,a,0)|PPC_RC 

PPC_TYPE31(234,d,a,0)|PPC_OE 

PPC_TYPE31(234,d,a,0)|PPC_OE|PPC_RC 

PPC_TYPE31 (202, d, a, 0) 

PPC_TYPE31(202,d,a,0)|PPC_RC 

PPC_TYPE31(202,d,a,0)|PPC_OE 

PPC_TYPE31(202,d,a,0)|PPC_OE|PPC_RC 

PPC_TYPE31 (28,s,a,b) 

PPC_TYPE31(28,s,a,b)|PPC_RC 

PPC_TYPE31 (60,s,a,b) 

PPC_TYPE31(60,s,a,b)|PPC_RC 

PPC_TYPE31(0,(cr)<<2,a,b) 

PPC_TYPE31(32,(cr)<<2,a,b) 

PPC_TYPE31 C26,s,a,0) 

PPC_TYPE31(26,s,a,0)|PPC_RC 

PPC_TYPE31 (86,0,a,b) 

PPC_TYPE31 (470, 0, a, b) 

PPC_TYPE31 (54,0,a,b) 

PPC_TYPE31(278,0,a,b) 

PPC_TYPE31(246,0,a,b) 

PPC_TYPE31 (1014,0, a, b) 

PPC_TYPE31(491,d,a,b) 

PPC_TYPE31(491,d,a,b)|PPC_RC 

PPC_TYPE31(491,d,a,b)|PPC_0E 

PPC_TYPE31(491,d,a,b)|PPC_0E|PPC_RC 

PPC_TYPE31(459,d,a,b) 

PPC_TYPE31(459,d,a,b)lPPC_RC 

PPC_TYPE31(459,d,a,b)|PPC_OE 

PPC_TYPE31(459,d,a,b)|PPC_0E|PPC_RC 

PPC_TYPE31 (854,0,0,0) 

PPC_TYPE31(284,s,a,b) 

PPC_TYPE31(284,s,a,b)|PPC_RC 

PPC_TYPE31(954,s,a,b) 

PPC_TYPE31(954,s,a,b)|PPC_RC 

PPC_TYPE31(922,s,a,b) 

PPC_TYPE31(922,s,a,b)|PPC_RC 

PPC_TYPE31(982,0,a,b) 

PPC_TYPE31 (150,0,0,0) 
PPC_TYPE31(119,d,a,b) 

PPC_TYPE31 (87,d,a,b) 
PPC_TYPE31(375,d,a,b) 
PPC_TYPE31(343,d,a,b) 
PPC_TYPE31(790,d,a,b) 

PPC_TYPE31 (31 1 ,d,a,b) 
PPC_TYPE31(279,d,a,b) 
PPC_TYPE31(597,d,a,nb) 
PPC_TYPE31(533,d,a,b) 

PPC_TYPE31 (20,d,a,b) 

PPC_TYPE31 (534, d, a, b) 
PPC_TYPE31(512,(crd)<<2,0,0) 
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#define  PPC_MFCR(d)  a 

#define  PPC_MFSPR(d,spr) 
^define  PPC.MFTBCd)  n 

#define  PPC_MFTBU(d)  n 

^define  PPC  _I'1T  C R F ( ma  s k,  s ) 
^define  P PC _HT S P R ( s , s p r ) i 

#define  P P C _M U LH W ( d , a , b ) n 
#define  P P C_M U LH W_ ( d , a , b ) n 
#define  P P C_M U L H W U ( d , a , b ) n 
#define  PPC _MU LH WU_ ( d , a , b ) n 
#define  PPC _MU L L W ( d , a , b ) n 
#define  P P C_M U LLW_ ( d , a , b ) a 
#define  P P C_M U LLWO ( d , a , b ) n 
#define  PP C _MU L LWO_ ( d , a , b ) n 
#define  PPC_N AN D ( a , s , b ) n 
^define  P P C _N AN D_ ( a , s , b ) a 
#define  PPC_NEG(d,a)  n 
#define  P P C_ N EG_ ( d , a ) a 

#define  P P C _N EG  0 ( d , a ) n 

#define  PPC _N EG 0_ ( d , a ) n 

#define  PPC_N0R ( a , s , b ) n 
Udeiine  P P C_NO R_ ( a , s , b ) n 
#define  PPC_0R ( a , s , b ) n 
#define  PP C _0 R_ ( a , s , b ) n 
#define  PPC_0RC ( a , s , b ) n 
//define  PPC  _0  R C _ ( a , s , b ) n 
//define  PPC_S  LW  ( a , s , b ) n 
//define  P P C_  S LW_  ( a , s , b ) n 
#define  PPC_SRAW(a,s,b)  n 
#define  P P C _ S R A W_ ( a , s , b ) n 
#define  PP C _ S R A W I ( a , s , s h ) n 
#define  PPC _ S R A W I _ ( a , s , s h ) n 
//define  PPC_S  RW  ( a , s , b ) n 

//define  PPC  _ S R W_  ( a , s , b ) n 
//define  PPC_STBUX  ( s , a , b ) n 
#define  P P C_ S TBX ( s , a , b ) n 

#define  PPC_STHBRX ( s , a , b ) n 

#define  PP C _ ST H U X C s , a , b ) n 

#define  PPC_ S T H X ( s , a , b ) n 
//define  PPC  _ ST  S W I ( s , a , n b ) n 

//define  PPC_STSWX(  s,a,b)  n 
//define  PPC  _ST  WB  RX  C s , a , b ) n 

//define  PPC_STUCX_(  s,a,b)  n 
#define  P P C_S T W U X ( s , a , b ) n 
#define  P P C_ S T W X ( s , a , b ) n 
#define  P P C_ S UB F ( d , a , b ) n 
#define  PP C_ S UB F_ C d , a , b ) n 
//define  PPC  _ S UB  F 0 C d , a , b ) n 
#define  PPC _ S UB F 0_ C d , a , b ) n 
//define  PPC  _ S UB  C d , b , a ) n n 
//define  PPC  _ S UB_  C d , b , a ) na 
//define  PPC  _ S UBO  C d , b , a ) na 
#define  PPC _ S U BO_ C d , b , a ) n 
//define  P PC  _ S U B F C ( d , a , b ) n 
//define  PP  C_S  U B F C_  ( d , a , b ) n 
//define  PPC_SUBFCO(d,a,b)  n 
//define  PPC  _ S U B F C 0_  ( d , a , b ) n 
//define  PPC  _ S U B F E ( d , a , b ) n 


PPC_TYPE31 (19, d, 0,0) 

PPC_TYPE31(339,d,(spr)831,(spr)>>5) 
PPC_TYPE31 (371, d, 12,8) 

PPC_TYPE31 (371 ,d,1 3,8) 

PPC_TYPE31(144,s,0,(mask)&0xff) 

PPC_TYPE31(467,s,(spr)&31,(spr)>>5) 

PPC_TYPE31 (75,d,a,b) 

PPC_TYPE31(75,d,a,b)|PPC_RC 

PPC_TYPE31 (1 1 ,d,a, b) 

PPC_TYPE31(11,d,a,b)|PPC_RC 

PPC_TYPE31 (235, d, a, b) 

PPC_TYPE31(235,d,a,b)|PPC_RC 

PPC_TYPE31(235,d,a,b)|PPC_OE 

PPC_TYPE31(235,d,a,b)|PPC_OE|PPC_RC 

PPC_TYPE31 (476, s, a, b) 

PPC_TYPE31(476,s,a,b)|PPC_RC 

PPC_TYPE31 (104, d, a, b) 

PPC_TYPE31(104,d,a,b)|PPC_RC 

PPC_TYPE31(104,d,a,b)|PPC_OE 

PPC_TYPE31(104,d,a,b)|PPC_OE|PPC_RC 

PPC_TYPE31 (124, s, a, b) 

PPC_TYPE31(124,s,a,b)|PPC_RC 

PPC_TYPE31(444,s,a,b) 

PPC_TYPE31(444,s,a,b)|PPC_RC 

PPC_TYPE31 (412, s, a, b) 

PPC_TYPE31(412,s,a,b)|PPC_RC 

PPC_TYPE31 (24,s,a,b) 

PPC_TYPE31(24,s,a,b)|PPC_RC 

PPC_TYPE31(792,s,a,b) 

PPC_TYPE31(792,s,a,b)|PPC_RC 

PPC_TYPE31(824,s,a,sh) 

PPC_TYPE31(824,s,a,sh)|PPC_RC 

PPC_TYPE31(536,s,a,b) 

PPC_TYPE31(536,s,a,b)|PPC_RC 

PPC_TYPE31 (247, s, a, b) 

PPC_TYPE31 (21 5,s,a,b) 

PPC_TYPE31 (91 8,s,a,b) 

PPC_TYPE31 (439, s, a, b) 
PPC_TYPE31(407,s,a,b) 
PPC_TYPE31(725,s,a,nb) 

PPC_TYPE31 (661 ,s,a,b) 
PPC_TYPE31(662,s,a,b) 
PPC_TYPE31(150,s,a,b)|PPC_RC 
PPC_TYPE31 (183, s, a, b) 

PPC_TYPE31 (1 51 ,s,a,b) 

PPC_TYPE31 (40,d,a,b) 

PPC_TYPE31(40,d,a,b)|PPC_RC 

PPC_TYPE31(40,d,a,b)|PPC_OE 

PPC_TYPE31(40,d,a,b)|PPC_OE|PPC_RC 

PPC_SUBF(d,a,b) 

PPC_SUBF_(d,a,b) 

PPC_SUBFO(d,a,b) 

PPC_SUBFO_(d,a,b) 

PPC_TYPE31 (8,d,a,b) 
PPC_TYPE31(8,d,a,b)|PPC_RC 
PPC_TYPE31(8,d,a,b)|PPC_OE 
PPC_TYPE31(8,d,a,b)|PPC_0E|PPC_RC 
PPC_TYPE31 (136, d, a, b) 
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//define 
//define 
//define 
//define 
//de  f i n e 
//d e f i n e 
//define 
#def i ne 
#d  e f i n e 
//def  i ne 
//de  f i n e 
//define 
//define 
//define 


PPC_SUBFE_(d,a,b)  n 
PPC_SUBFEO(d,a,b)  a 
PPC_SUBFEO_(d,a,b)  n 
PPC_SUBFME(d,a)  n 
PPC_SUBFME_Cd,a)  n 
PPC_SUBFMEO(d,a)  n 
PPC_SUBFMEO_(d,a)  n 
PPC_SUBFZE(d,a)  n 
PPC_SUBFZE_(d,a ) n 
PPC_SUBFZEO(d,a ) n 
PPC_SUBFZEO_(d,a)  n 
PPC_SYNC()n  n 

PPC_TW(to,a,b)  n 
PPC_XOR(a,s,b)  n 


PPC_TYPE31(136,d,a,b)|PPC_RC 

PPC_TYPE31(136,d,a,b)|PPC_0E 

PPC_TYPE31(136,d,a,b)|PPC_0E|PPC_RC 

PPC_TYPE31 (232, d, a, 0) 

PPC_TYPE31(232,d,a,0)|PPC_RC 

PPC_TYPE31(232,d,a,0)|PPC_OE 

PPC_TYPE31(232,d,a,0)|PPC_OE|PPC_RC 

PPC_TYPE31(200,d,a,0) 

PPC_TYPE31(200,d,a,0)|PPC_RC 

PPC_TYPE31(200,d,a,0)|PPC_OE 

PPC_TYPE31(200,d,a,0)|PPC_OE|PPC_RC 

PPC_TYPE31 (598,0,0,0) 

PPC_TYPE31 (4,to,a,b) 
PPC_TYPE31(316,s,a,b)n 


/*  Immediate-operand  instructions.  Take  a 16-bit  immediate  operand  */ 
#define  PPC_I HH ( ma j o r , d , a , i mm ) \ 

n PPC_HAJOR(major)|PPC_DEST(d)|PPC_SRCA(a)|((imm)&0xffff) 

/*  Trap  word  immediate  */ 


//define  P PV_TU  I ( t o , a , s i mm ) n 
/*  Integer  arithmetic  */ 
//define  PP  C_HU  LLI  ( d , a , s i mm ) n 
//define  PP  C_S  UB  F I C ( s , a , s i mm ) n 
#define  PPC_CHPLI ( c r , a , u i mm) n 
//define  PP  C_C  HP  I ( c r , a , s i mm  ) n 
//define  PPC_AD  D I C ( d , a , s i mm)  n 
//define  PPC_ADDIC_(d,a,simm)n 
//define  PPC_  A D D I ( d , a , s i mm  ) n 
//define  PPC_  A D D I S ( d , a , s i mm ) n 


PPC_IMM(3,to,a,si mm) 

PPC_IMH(7,d,a,simm) 

PPC_IHM(8,s,a,simm) 

PPC_IMM(10,(cr)<<2,a,uimm) 

PPC_IMM(11,(cr)<<2,a,simm) 

PPC_IHH(12,d,a,simm) 

PPC_IHH(13,d,a,simm) 

PPC_IHH(14,d,a,simm) 

PPC_IHH(15,d,a,simm) 


/*  Conditional  branch  (dest  is 
//define  PPC_BC  ( bo,  bi  , des  t ) n 
//define  P PC_B  C A ( bo  , b i , d e s t ) n 
//define  PPC_BC  L ( bo  , b i , de  s t ) n 
//define  P PC_B  C L A ( bo  , b i , d e s t ) a 


16  bits,  +/-  2*15  bytes)  */ 
PPC_IHH(16,bo,bi, ( (dest )<<2)80xf f f c) 
PPC_BC(bo,bi,dest)|PPC_AA 
PPC_BC(bo,bi,dest)|PPC_LK 
PPC_BC(bo,bi,dest)|PPC_AA|PPC_LK 


/*  Logical  operations  */ 
//define  PP  C_OR  I ( a , s , u i mm  ) a 
//define  PPC_ORI  S ( a , s , u i mm)  a 
//define  PPC_XOR  I ( a , s , u i mm  ) a 
//define  PPC_XORI  S ( a , s , u i mm)  a 
//define  PPC_  AN  D I _ ( a , s , u i mm  ) a 
//define  PPC_  AN  D I S ( a , s , u i mm  ) a 


PPC_IHM(24,s,a,uimm) 

PPC_IHM(25,s,a,uimm) 

PPC_IHH(26,s,a,uimm) 

PPC_IHH(27,s,a,uimm) 

PPC_IHH(28,s,a,uimm) 

PPC_IMM(29,s,a,uimm) 


/*  Load/store  */ 


//define 

PPC 

_LWZ(d,a 

s i mm ) a 

PPC_ 

IHM(32,d 

, s i mm ) 

//def  i 

n e 

PPC 

_LWZU (d. 

a 

, s i mm  ) a 

PPC_ 

inM(33,d 

,a 

, s i mm ) 

//define 

PPC 

_LBZ(d,a 

s i mm  ) a 

PPC_ 

IHM(34,d 

, s i mm ) 

//def  i 

n e 

PPC 

_LBZU(d, 

a 

, s i mm ) a 

PPC_ 

IMn(35,d 

,a 

, s i mm ) 

//def  i 

n e 

PPC 

_STW(s,a 

s i mm ) a 

PPC_ 

IMH(36,s 

, s i mm ) 

//def  i 

n e 

PPC 

_STWU( s. 

a 

, s i mm ) a 

PPC_ 

IHH(37,s 

, s i mm ) 

//  d e f i 

n e 

PPC 

_STB( s,a 

s i mm ) a 

PPC_ 

IHH(38,s 

, s i mm ) 

//  d e f i 

n e 

PPC 

_STBU( s. 

a 

, s i mm ) a 

PPC_ 

IHH(39,s 

, s i mm ) 

//def  i 

n e 

PPC 

_LHZ(d,a 

s i mm ) a 

PPC_ 

IHM(40,d 

, s i mm ) 

//de  f i 

ne 

PPC 

_LHZU(d, 

a 

, s i mm ) a 

PPC_ 

IMH(41 ,d 

,a 

, s i mm ) 

//def  i 

ne 

PPC 

_LHA(d,a 

s i mm ) a 

PPC_ 

IMM(42,d 

, s i mm ) 

//def  i ne 

PPC 

_STH(s,a 

A 

s i mm  ) a 

PPC_ 

IHH(44,s 

, s i mm ) 

//de  f i 

n e 

PPC 

_STHU(s, 

a 

, s i mm ) a 

PPC_ 

IMM(45,s 

, s i mm ) 
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^define  P P C _ LH AU ( d , a , s i mm ) n 
#define  PPC_LMW ( d , a , s i mm ) n 
#define  P P C_ STM W ( s , a , s i mm ) n 


PPC_IMH(43,d,a,simm) 
PPC_IMH(46,d,a,si mm) 
PPC_IMM(47,s,a,simm) 


/ * Major 
#d  e f i n e 
n 

# d e f i n e 
#d  e f i n e 
#d  e f 1 ne 
#d  e f i n e 
#d  e f i n e 
#d  e f i n e 

# d e f i n e 
#def i ne 
#d  e f i ne 


number  = 19  - condition  register  operations.  d,  a and  b are  CR  bits*/ 
PPC_TYPE19Cminor,d,a,b)  \ 

PPC_MAJ0R(19)|PPC_DEST(d)|PPC_SRCA(a)|PPC_SRCB(b)|PPC_MIN0R(minor) 


PPC_MCRF(d,s)  n 

PPC_CRNOR(d,a,b)n 

PPC_CRANDCCd,a,b)n 

PPC_CRXORCd,a,b)n 

PPC_CRNANDCd,a,b)n 

PPC_CRAND(d,a,b)n 

PPC_CREQV(d,a,b)n 

PPC_CRORC(d,a,b)n 

PPC_CROR(d,a,b)  n 


PPC_TYPE19(0,(d)<<2,{s)«2,0) 
PPC_TYPE1 9(33,d,a,b) 
PPC_TYPE19(129,d,a,b) 
PPC_TYPE19(193,d,a,b) 
PPC_TYPE1 9(225,d,a,b) 
PPC_TYPE1 9(257,d,a,b) 
PPC_TYPE19(289,d,a,b) 
PPC_TYPE1 9(41 7,d,a,b) 
PPC_TYPE19(449,d,a,b) 


/*  Indirect  conditional  branch 
^define  PPC _B C LR ( bo , b i ) n 
#define  PPC_BC LRL ( bo, b i ) n 
#define  P P C_B C C T R ( bo , b i ) n 
^define  PP C_B C C T R L ( bo , b i ) n 
^define  PPC_BLR()  n 

#define  PPC  BCTRO  n 


*/ 

PPC_TYPE19(16,bo,bi,0) 
PPC_TYPE19(16,bo,bi,0)|PPC_LK 
PPC _TYPE1 9(528, bo, bi,0) 
PPC_TYPE19(528,bo,bi,0)|PPC_LK 
PPC_BCLR(20,31 ) 

PPC_BCCTR(20,31 ) 


/*  Other  */ 

#define  PP C_R LU I M I ( a , s , s h , mb , me ) \ 

n PPC_MAJOR(20) I PPC_DEST(s) I PPC. 

^define  PPC_RLWIMI_(a,s,sh,mb,me)n 
^define  P PC _ R LW I NM ( a , s , s h , mb , me ) \ 
a PPC_MAJ0R(21 ) I PPC_DEST(s) I PPC. 

#define  PPC_RLWINM_(a,s,sh,mb,me)n 
#define  P P C _ R LW N M ( a , s , b , mb , me ) \ 
a PPC_MAJ0R(23) I PPC_DEST(s) I PPC. 

#define  PP C _ R LW N H_ ( a , s , b , mb , me ) a 


SRCA(A)|PPC_SRCB(sh)|(mb)<<6|(me)<<1 

PPC_RLWIHI(a,s,sh,mb,me)|PPC_RC 

SRCA(A)|PPC_SRCB(sh)|(mb)<<6|(me)<<1 

PPC_RLWINM(a,s,sh,mb,me)|PPC_RC 

SRCA(A)|PPC_SRCB(b)|(mb)<<6|(me)<<1 

PPC_RLWNM(a,s,b,mb,me)|PPC_RC 


#define  PPC_SC()b  n n PP C_M A J 0 R ( 1 7 ) | 2 

/*  Major  number  = 63  Floating-point  operations  (not  implemented  for  now)  */ 


/*  Simplified  Mnemonics  */ 

/*  Fabricate  immediate  subtract  out  of  add  negative  */ 
^define  PPC_SL)BI  ( d,  a , s i mm ) a P PC_  A D D I ( d , a , - ( s i mm ) ) 

^define  P P C _ S UB I S ( d , a , s i mm ) a P PC_ A D D I S ( d , a , - ( s i mm ) ) 

^define  PPC_SUBI C ( d , a , s i mm ) a PPC_AD D I C ( d, a , - ( s i mm ) ) 

Sdefine  P P C_ S UB I C_ ( d , a , s i mm ) a P PC_ A D D I C _ ( d , a , - ( s i mm ) ) 

/*  Fabricate  subtract  out  of  subtract  from  */ 

#define  PP C_S UBC ( d , b , a ) aa  P PC _ S UB F C ( d , a , b ) 

#define  PPC_S UBC _ ( d , b , a ) a PP C _ S UB F C_ ( d , a , b ) 

#define  PPC_S U BC 0 ( d , b , a ) a P P C _ S UB F C 0 ( d , a , b ) 

#define  PPC _ S UBC 0_ ( d , b , a ) a PP C _ S UB F C 0_ ( d , a , b ) 

/*  Messy  compare  bits  omitted  */ 

/*  Shift  and  rotate  omitted  */ 

/*  Branch  coding  omitted  */ 


#define  PPC _ C R S ET ( d ) a n 

#define  PPC_C R C LR ( d ) a n 

#define  PPC_C RMOV E ( d, s ) aa 
#define  PPC _ C RN OT ( d , s ) a n 
/*  Trap  menmonics  omitted  */ 


PPC_CREQV(d,d,d) 

PPC_CRXOR(d,d,d) 

PPC_CROR(d,s,s) 

PPC_CRNOR(d,s,s) 
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/*  Menmonics  for  user-accessible  SPRs  */ 


#def i ne 

PPC 

_HFXER(d) 

n 

PPC 

_MFSPR(d,1 )n 

n 

#d  e f i n e 

PPC 

_MFLR(d) 

n 

PPC 

_MFSPR(d,8)n 

n 

//define 

PPC 

_MFCTR(d) 

n 

PPC 

_MFSPR(d,9)n 

n 

//define 

PPC 

_HTXER ( s ) 

n 

PPC 

_MTSPR(s,1 )n 

□ 

//def  i ne 

PPC 

_MTLR(s) 

u 

PPC 

_MTSPR(s,8)n 

n 

//def  i ne 

PPC 

_HTCTR(s) 

u 

PPC 

_MTSPR(s,9)n 

a 

/*  Recommended  mnemonics 

*/ 

//define 

PPC 

_N0P(  )n 

n 

PPC 

_0RI (0,0,0) 

#def i ne 

PPC 

_LI(d,simm)n 

n 

PPC 

_ADDI (d,0,si 

mm  ) 

//define 

PPC 

_LIS(d,simm)nn 

PPC 

_ADDIS(d,0,simm) 

#def i ne 

PPC 

_LA(d,a,simm)n 

PPC 

_ADDI (d,a,si 

mm  ) 

//define 

PPC 

_MR(d,s)n 

n 

PPC 

_0R(d,s,s) 

//define 

PPC 

_N0T(d,s)n 

n 

PPC 

_N0R(d,s,s) 

//  d e f i n e 

PPC 

_MTCR(s)n 

n 

PPC 

_HTCRF(0xf f , 

s ) 

#endi f / 

* BNPPCASM_H  */ 

/*  45678901234567890123456789012345678901234567890123456789012345678901234567*/ 
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/* 

* bnprime.c  - Prime  generation  using  the  bignum  Library  and  sieving. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  CoLin  PLumb 

* 

* $Id:  bnprime.c, V 1.2. 2.1  1 997/06/07  09:49:40  mhw  Exp  $ 

*/ 

#ifndef  HAVE_CONFIG_H 
^define  H A V E_C 0 N F I G_ H 0 
#end  i f 

#if  HAVE_CONFIG_H 
#incLude  "config.h" 

#endi  f 


#incLude  <stdarg.h>n 


/*  We  just  can't  Live  without  this...  */ 


#ifndef  BNDEBUG 
#define  BNDEBUG  0 
#end  i f 
#if  BNDEBUG 
#incLude  <stdio.h> 
#endi  f 


#i nc  L ude 
# i n c L u d e 
#incLude 
#incLude 

#incLude 
#i  nc  Lude 


bn  . h " 

bn i mem . h " 

bnprime.h" 

bnsieve.h" 

bnkLudge.h 
pgpDebug  . h 


/*  Size  of  the  shuffLe  tabLe  */ 
#define  SHUFFLEn256 
/*  Size  of  the  sieve  area  */ 
#define  SIEVE  32768u/16 


/*  Confirmation  tests.  The  first  one  *must*  be  2 */ 
static  unsigned  const  confirmC]  = {2,  3,  5,  7,  11,  13,  17>; 
#define  CONFIRMTESTS  ( s i z eo f ( c o n f i r m ) / s i z eo f ( * c on f i r m ) ) 


/* 

* Helper  function  that  does  the  sLow  primaLity  test. 

* bn  is  the  input  bignum;  a and  e are  temporary  buffers  that  are 

* aLLocated  by  the  caLLer  to  save  overhead. 

* 

* Returns  0 if  prime,  >0  if  not  prime,  and  -1  on  error  (out  of  memory). 

* If  not  prime,  returns  the  number  of  modular  exponentiations  performed. 

* CaLLs  the  given  progress  function  with  a for  each  primaLity  test 

* that  is  passed. 

* 

* The  testing  consists  of  strong  p s e ud op r i ma L i t y tests,  to  the  bases  given 

* in  the  confirmC]  array  above.  (ALso  caLLed  M i L L e r-Ra b i n , aLthough  that's 

* not  technicaLLy  correct  if  we're  using  fixed  bases.)  Some  peopLe  worry 

* that  this  might  not  be  enough.  Number  theorists  may  wish  to  generate 

* primaLity  proofs,  but  for  random  inputs,  this  returns  non-primes  with 

* a probabiLity  which  is  quite  negLigibLe,  which  is  good  enough. 
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It  has  been  proved  (see  Carl  Pomerance,  "On  the  Distribution  of 
Pseudoprimes",  Math.  Comp,  v.37  (1981)  pp.  587-593)  that  the  number  of 
pseudoprimes  (composite  numbers  that  pass  a Fermat  test  to  the  base  2) 


less  than  x is  bounded  by: 

exp(  Ln(x)''(  5/1  4)  ) <=  P_2(x)n  U#U  CHECK  THIS  FORMULA  - it  looks  wrong! 
P_2(x)  <=  X * exp(-1/2  * ln(x)  * I n ( I n ( L n ( x ) ) ) / ln(ln(x))). 


Thus,  the  local  density  of  Pseudopri 
exp(-1/2  * Ln(x)  * I n ( I n ( I n ( x ) ) ) / I 
exp ( I n ( X ) * ( 5 / 1 4 ) - ln(x)).  Here  are 
for  various  k-bit  numbers  x = 2^k: 


mes  near  x is  at  most 
n(ln(x))),  and  at  least 
some  values  of  this  function 


BitsnDensity  <=n 
128n3.577869e-07n 
192n4.175629e-10n 
256  5.804314e-13n 
384  1 . 578039e-1 8n 
512  5.858255e-24n 
768  1 .489276e-34n 
1024  6.633188e-45n 


Bit  equivalentn 
21 . 41 4396n 
31 . 1 57288n 
40 . 647940n 
59.1 36573n 
77. 1 75803n 
1 1 2 . 370944n 
146.757062n 


Density  >=n 
4 . 20221 3e-37n 
4 . 936250e-56n 
4.977813e-75n 
3.938861e-113n 
2 . 563353e-1 51 n 
7. 872825e-228n 
1 . 882404e-304n 


Bit  equivalent 
1 20. 8401  90 
1 83 . 724558 
246.829095 
373 . 400096 
500.253110 
754 . 422724 
1008.953565 


As  you  can  see,  there's  quite  a bit  of  slop  between  these  estimates. 

In  fact,  the  density  of  pseudoprimes  is  conjectured  to  be  closer  to  the 
square  of  that  upper  bound.  E.g.  the  density  of  pseudoprimes  of  size 
256  is  around  3 * 10^-27.  The  density  of  primes  is  very  high,  from 
0.005636  at  256  bits  to  0.001409  at  1024  bits,  i.e.  more  than  10^-3. 


For  those  people  used  to  cryptographic  levels  of  security  where  the 
56  bits  of  DES  key  space  is  too  small  because  it's  exhaustible  with 
custom  hardware  searching  engines,  note  that  you  are  not  generating 
50,000,000  primes  per  second  on  each  of  56,000  custom  hardware  chips 
for  several  hours.  The  chances  that  another  Dinosaur  Killer  asteroid 
will  land  today  is  about  10^-11  or  2*-36,  so  it  would  be  better  to 
spend  your  time  worrying  about  *that*.  Well,  okay,  there  should  be 
some  derating  for  the  chance  that  astronomers  haven't  seen  it  yet, 
but  I think  you  get  the  idea.  For  a good  feel  about  the  probability 
of  various  events,  I have  heard  that  a good  book  is  by  E'mile  Borel, 
"Les  P r oba b i I i t e ' s et  la  vie".  (The  's  are  accents,  not  apostrophes.) 


For  more  on  the  subject,  try  "Finding  Four  Million  Large  Random  Primes", 
by  Ronald  Rivest,  in  Advancess  in  Cryptology:  Proceedings  of  Crypto 
'90.  He  used  a sma I I -d i v i s o r test,  then  a Fermat  test  to  the  base  2, 
and  then  8 iterations  of  a Hiller-Rabin  test.  About  718  million  random 
256-bit  integers  were  generated,  43,741,404  passed  the  small  divisor 
test,  4,058,000  passed  the  Fermat  test,  and  all  4,058,000  passed  all 
8 iterations  of  the  Hiller-Rabin  test,  proving  their  primality  beyond 
most  reasonable  doubts. 


If  the  probability  of  getting  a pseudoprime  is  some  small  p,  then  the 
probability  of  not  getting  it  in  t trials  is  (l-p)^t.  Remember  that, 
for  small  p,  (1-p)*(1/p)  “ 1/e,  the  base  of  natural  logarithms. 

(This  is  more  commonly  expressed  as  e = I i m_{ x \ t o \ i n f t y ) (1+1/x)*x.) 
Thus,  (1-p)*t  ~ e*(-p*t)  = exp(-p*t).  So  the  odds  of  being  able  to 
do  this  many  tests  without  seeing  a pseudoprime  if  you  assume  that 
p = 10^-6  (one  in  a million)  is  one  in  57.86.  If  you  assume  that 
p = 2*10''-6,  it's  one  in  3347.6.  So  it's  implausible  that  the  density 
of  pseudoprimes  is  much  more  than  one  millionth  the  density  of  primes. 

He  also  gives  a theoretical  argument  that  the  chance  of  finding  a 
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* 256-bit  non-prime  which  satisfies  one  Fermat  test  to  the  base  2 is 

* Less  than  10^-22.  The  small  divisor  test  improves  this  number,  and 

* if  the  numbers  are  512  bits  (as  needed  for  a 1024-bit  key)  the  odds 

* of  failure  shrink  to  about  10''-44.  Thus,  he  concludes,  for  practical 

* purposes  *one*  Fermat  test  to  the  base  2 is  sufficient. 

*/ 

static  int 

p r i meT e s t ( s t r u c t BigNum  const  *bn,  struct  BigNum  *e,  struct  BigNum  *a, 
n 
{ 

□ 
a 
n 


int  (*f)Cvoid  *arg,  int  c),  void  *arg) 

unsigned  i,  j; 
unsigned  k,  1; 
int  err; 


#i  f 


BNDEBUGa 

/* 


/*  Debugging  */ 


★ 

* 

★ 

★ 

* 

* 

* 

* 

★ 

*/ 
i = 
i f 
i 

i f 
i f 


This  is  debugging  code  to  test  the  sieving  stage. 

If  the  sieving  is  wrong,  it  will  Let  past  numbers  with 
small  divisors.  The  prime  test  here  will  still  work,  and 
weed  them  out,  but  you'll  be  doing  a Lot  more  slow  tests, 
and  presumably  excluding  from  consideration  some  other  numbers 
which  might  be  prime.  This  check  just  verifies  that  none 
of  the  candidates  have  any  small  divisors.  If  this 
code  is  enabled  and  never  triggers,  you  can  feel  quite 
confident  that  the  sieving  is  doing  its  job. 


= bnLSWord(bn); 

(!Ci  % 2))  printf("bn  div  by  2!' 
: bnModQCbn,  51051);n  /*  51051  = 
(!(i  % 3))  printf("bn  div  by  3!' 
(!(i  % 7))  printf("bn  div  by  7!' 


); 

3 * 
); 
); 


1 1 


13 


17  */ 


n 

if  ( 1 ( i 

% 

ID) 

p r i n t f ( 

"bn  div  by 

11!" 

n 

if  ( ! (i 

% 

13)) 

p r i n t f ( 

"bn  div  by 

13!" 

); 

D 

if  ( ! ( i 

% 

17)) 

pri ntf  ( 

"bn  div  by 

17!" 

n 

i = bnModCKbn, 

63365); 

n /*  63365 

= 5 

* 

n 

if  ( ! ( i 

% 

5)  ) 

printf(" 

bn  div  by  5 

! " ) ; 

n 

if  ( ! ( i 

% 

19)) 

p r i n t f ( 

"bn  div  by 

19!" 

); 

n 

if  ( ! ( i 

% 

23)  ) 

p r i n t f ( 

"bn  div  by 

23!  " 

); 

n 

if  ( ! ( i 

% 

29)  ) 

p r i n t f ( 

"bn  div  by 

29  ! " 

); 

D 

i = bnModCKbn, 

47027); 

n /*  47027 

= 31 

* 

n 

if  ( ! ( i 

% 

31  ) ) 

p r i n t f ( 

"bn  div  by 

31  ! " 

); 

n 

if  ( ! ( i 

% 

37)  ) 

p r i n t f ( 

"bn  div  by 

37  ! " 

); 

□ 

if  ( ! ( i 

% 

41  ) ) 

p r i n t f ( 

"bn  div  by 

41  ! " 

); 

#endi f 

a 

Q 

/* 

* Now, 

check 

that  bn 

is  prime. 

If  it 

1 9 


23  * 29  */ 


37 


41  */ 


passes  to  the  base  2, 
it's  prime  beyond  all  reasonable  doubt,  and  everything  else 
is  just  gravy,  but  it  gives  people  warm  fuzzies  to  do  it. 

This  starts  with  verifying  Euler's  criterion  for  a base  of  2. 
This  is  the  fastest  p s e ud op r i ma L i t y test  that  I know  of, 
saving  a modular  squaring  over  a Fermat  test,  as  well  as 
being  stronger.  7/8  of  the  time,  it's  as  strong  as  a strong 
pseudopri ma L i ty  test,  too.  (The  exception  being  when  bn  == 

1 mod  8 and  2 is  a quartic  residue,  i.e.  bn  is  of  the  form 
a''2  + (8*b)‘'2.)  The  precise  series  of  tricks  used  here  is 
not  documented  anywhere,  so  here's  an  explanation. 
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Q 

n 

□ 

n 

Q 

D 

n 

u 

n 

n 

Q 

n 

n 

n 

Q 

n 

n 

Q 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

Q 

n 

n 

□ 

□ 

n 

a 


* Euler's  criterion  states  that  if  p is  prime  then  a'^((p-1)/2) 

* is  congruent  to  Jacobi(a,p),  modulo  p.  Jacobi(a,p)  is 

* a function  which  is  +1  if  a is  a square  modulo  p,  and  -1  if 

* it  is  not.  For  a = 2,  this  is  particularly  simple.  It's 

* +1  if  p ==  +/-1  (mod  8),  and  -1  if  m ==  +/-3  (mod  8). 

* If  p ==  3 mod  4,  then  all  a strong  test  does  is  compute 

* 2 C ( p- 1 ) / 2 ) . and  see  if  it's  +1  or  -1.  (Euler's  criterion 

* says  *which*  it  should  be.)  If  p ==  5 (mod  8),  then 

* 2^((p-1)/2)  is  -1,  so  the  initial  step  in  a strong  test, 

* looking  at  2^((p-1)/4),  is  wasted  - you're  not  going  to 

* find  a +/-1  before  then  if  it  *is*  prime,  and  it  shouldn't 

* have  either  of  those  values  if  it  isn't.  So  don't  bother. 

* 

* The  remaining  case  i s p ==  1 (mod  8).  In  this  case,  we 

* expect  2^((p“1)/2)  ==  1 (mod  p),  so  we  expect  that  the 

* square  root  of  this,  2^((p-1)/4),  will  be  +/-1  (mod  p). 

* Evaluating  this  saves  us  a modular  squaring  1/4  of  the  time. 

* If  it’s  -1,  a strong  pseudoprimality  test  would  call  p 

* prime  as  well.  Only  if  the  result  is  +1,  indicating  that 

* 2 is  not  only  a quadratic  residue,  but  a quartic  one  as  well, 

* does  a strong  pseudoprimality  test  verify  more  things  than 

* this  test  does.  Good  enough. 

* 

* Ue  could  back  that  down  another  step,  looking  at  2^((p“1)/8) 

* if  there  was  a cheap  way  to  determine  if  2 were  expected  to 

* be  a quartic  residue  or  not.  Dirichlet  proved  that  2 is 

* a quartic  residue  iff  p is  of  the  form  a^2  + (8*b'^2). 

* All  primes  ==  1 (mod  4)  can  be  expressed  as  a^2  + (2*b)^2, 

* but  I see  no  cheap  way  to  evaluate  this  condition. 

*/ 

if  (bnCopy(e,  bn)  < 0) 
n return-1; 

( vo i d ) b n S u bQ ( e , 1); 

I = bnLSWord(e); 


n 


j = 1;n  /*  Where  to  start  in  prime  array  for  strong  prime  tests  */ 


a 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

□ 

n 

a 

n 

n 

n 


i f 

( L & 7) 

{ 

Q 

bnRShift(e, 

1 

n 

i f 

( bnTwoExpMod ( a , e,  bn)  < 0) 

n 

n 

return  -1; 

n 

i f 

( ( L 

& 7) 

= = 6)  { 

D 

n 

/* 

bn  ==  7 mod  8,  expect  +1  */ 

n 

n 

i f 

(bnBits(a)  !=  1) 

o 

n 

n 

return  1;n 

/*  Not 

prime  * / 

a 

n 

k = 

1; 

n 

> 

else 

{ 

a 

n 

/* 

bn  ==  3 or  5 mod  8, 

expect 

•K 

1 

C 

.Q 

II 

II 

1 

n 

Q 

i f 

(bnAddQCa,  1)  < 0) 

n 

□ 

n 

return  -1; 

n 

n 

i f 

(bnCmpCa,  bn)  !=  0) 

n 

n 

n 

return  1;n 

/*  Not 

prime  * / 

□ 

n 

k = 

1; 

n 

n 

i f 

( l & 4)  { 

□ 

n 

n 

/*  bn  ==  5 mod 

8,  make 

odd  for  St  rong 

n 

n 

n 

bnRShiftCe,  1); 

n 

□ 

n 

k = 2; 

n n > 
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n 

> 

else 

{ 

n 

□ 

/* 

bn  ==  1 

mod  8,  expect 

II 

•**w. 

1 

c 

< 

CM 

= +/-1 

mod  bn 

n 

n 

bnRShift(e, 

2); 

n 

n 

i f 

( bnT wo E X pMod ( a , e,  bn) 

< 0) 

a 

n 

n 

return  -1; 

n 

n 

i f 

(bnBits(a)  ==  1)  { 

n 

n 

n 

j = 

0;n  /*  Re-do 

strong  prime  test  to 

base  2 

□ 

n 

> e 

L s e { 

□ 

tt 

a 

i f 

(bnAddQ(a,  1) 

< 0) 

n 

u 

n 

n 

return  -1 

r 

n 

n 

c 

i f 

(bnCmp(a,  bn) 

!=  0) 

n 

Q 

o 

n 

return  1; 

a /*  Not 

prime 

*/ 

□ 

n 

> 

□ 

n 

k = 

2 + bnMa  keOdd ( e ) ; 

n 

> 

s 

/* 

It's 

prime!  Now 

go  on  to  confirmation  tests 

*/ 

□ 

/* 

n 

★ 

Now, 

e = 

(bn-1)/2''k  is  odd.  k 

>=  1,  and  has 

a given  value 

u 

* 

with 

probabi Lity 

2^-k,  so  its 

expected  va  Lue 

is  2 , 

n 

★ 

j = 

1 in 

the  usual  case  when  the  previous  test  was 

as  good 

* 

* 

*/ 

for 

n 

D 

n 


a strong  prime  test,  but  1/8  of  the 
the  strong  prime  test  to  the  base  2 


time,  j = 0 because 
needs  to  be  re-done. 


( i 


= j;  i < CONFIRMTESTS;  i++)  { 
if  (f  S&  (err  = fCarg,  '*'))  < 0) 
n return  err; 

( VO i d ) b n S e t Q ( a , confirmCiD); 


□ 

tt 

i f 

(bnExpMod(a,  a,  e,  bn)  < 0) 

Q 

tt 

tt 

return  -1; 

n 

a 

if 

(bnBits(a)  ==  1) 

n 

n 

n 

continue;n  /*  Passed 

this  test  */ 

Q 

n 

L = 

k; 

n 

Q 

for 

(; 

;)  { 

n 

tt 

Q 

i f 

(bnAddQ(a,  1)  < 0) 

Q 

tt 

□ 

tt 

return  -1; 

n 

tt 

tt 

if 

(bnCmp(a,  bn)  ==  0)n 

/* 

Was  result  bn-1?  */ 

tt 

tt 

tt 

tt 

break;n  /*  Prime  * 

/ 

tt 

tt 

tt 

i f 

(!--l)n  /*  Reached 

end,  not  -1?  luck?  */ 

a 

tt 

tt 

n 

return  i+2-j;n 

/* 

Failed,  not  prime  */ 

tt 

tt 

tt 

/* 

This  portion  is  executed,  on  average,  once.  */ 

tt 

tt 

tt 

( VO i d ) bn S u bQ ( a , 1);n 

/* 

Put  a back  where  it  was 

tt 

tt 

tt 

i f 

(bnSquare(a,  a)  < 0 

1 1 

bnHod(a,  a,  bn)  < 0) 

tt 

tt 

tt 

tt 

return  -1; 

tt 

tt 

tt 

if 

(bnBits(a)  ==  1) 

tt 

n 

tt 

tt 

return  i+2-j;n 

/* 

Failed,  not  prime  */ 

tt 

□ 

> 

tt 

Q 

/* 

It 

worked  (to  the  base  confirmC 

i ] ) */ 

tt 

tt 

> 

tt 

/*  Yes, 

we  * 

ve 

decided  that  it's  prime. 

*/ 

*/ 


if  (f  S&  (err  = f (arg,  '*'  ))  < 0) 
n returnerr; 


return  0;n 


/*  Prime!  */ 
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/* 

* Add  x*y  to  bn,  which  is  usually  (but  not  always)  < 65536. 

* Do  it  in  a simple  linear  manner. 

*/ 

static  int 

bn AddMu I t ( s t r u c t BigNum  *bn,  unsigned  x,  unsigned  y) 

{ 

n unsigned  long  z = (unsigned  long)x  * y; 


n while  (z  > 65535)  { 

n n if  (bnAddQ(bn,  65535)  < 0) 

n n n return-1, • 

n n z -=  65535; 

n } 

n return  bnAddQ(bn,  ( u n s i g n ed ) z ) ; 

} 

static  int 

b n S ubMu I t ( s t r u c t BigNum  *bn,  unsigned  x,  unsigned  y) 
{ 

n unsigned  long  z = (unsigned  long)x  * y; 

n while  (z  > 65535)  ( 

n n if  (bnSubQ(bn,  65535)  < 0) 

n n n return-1; 

n n z -=  65535; 

n } 

n return  bnSubCKbn,  (unsigned)z); 

> 


/* 

* Modifies  the  bignum  to  return  a nearby  (slightly  larger)  number  which 

* is  a probable  prime.  Returns  >=0  on  success  or  -1  on  failure  (out  of 

* memory).  The  return  value  is  the  number  of  unsuccessful  modular 

* exponentiations  performed.  This  never  gives  up  searching. 

* 

* All  other  arguments  are  optional.  They  may  be  NULL.  They  are: 

* 

* unsigned  ( * r a nd ) ( u n s i g n ed  limit) 

* For  better  distributed  numbers,  supply  a non-null  pointer  to  a 

* function  which  returns  a random  x,  0 <=  x < limit.  (It  may  make  it 

* simpler  to  know  that  0 < limit  <=  SHUFFLE,  so  you  need  at  most  a byte.) 

* The  program  generates  a large  window  of  sieve  data  and  then  does 

* ps e udop r i ma I i t y tests  on  the  data.  If  a rand  function  is  supplied, 

* the  candidates  which  survive  sieving  are  shuffled  with  a window  of 

* size  SHUFFLE  before  testing  to  increase  the  uniformity  of  the  prime 

* selection.  This  isn't  perfect,  but  it  reduces  the  correlation  between 

* the  size  of  the  prime-free  gap  before  a prime  and  the  probability 

* that  that  prime  will  be  found  by  a sequential  search. 

* 

* If  rand  is  NULL,  sequential  search  is  used.  If  you  want  sequential 

* search,  note  that  the  search  begins  with  the  given  number;  if  you're 

* trying  to  generate  consecutive  primes,  you  must  increment  the  previous 

* one  by  two  before  calling  this  again. 

* 

* int  (*f)(void  *arg,  int  c),  void  *arg 

* The  function  f argument,  if  non-NULL,  is  called  with  progress  indicator 

* characters  for  printing.  A dot  (.)  is  written  every  time  a primality  test 
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* is  failed,  a star  (*)  every  time  one  is  passed,  and  a slash  (/)  in  the 

* (very  rare)  case  that  the  sieve  was  emptied  without  finding  a prime 

* and  is  being  refilled.  f is  also  passed  the  void  *arg  argument  for 

* private  context  storage.  If  f returns  < 0,  the  test  aborts  and  returns 

* that  value  immediately.  (bn  is  set  to  the  last  value  tested,  so  you 

* can  increment  bn  and  continue.) 

* 

* The  "exponent"  argument,  and  following  unsigned  numbers,  are  exponents 

* for  which  an  inverse  is  desired,  modulo  p.  For  a d to  exist  such  that 

* (x^e)''d  ==  X (mod  p),  then  d*e  ==  1 (mod  p-1),  so  gcd(e,p-1)  must  be  1. 

* The  prime  returned  is  constrained  to  not  be  congruent  to  1 modulo 

* any  of  the  z e r o- t e r m i n a t e d list  of  16-bit  numbers.  Note  that  this  list 

* should  contain  all  the  small  prime  factors  of  e.  (You'll  have  to  test 

* for  large  prime  factors  of  e elsewhere,  but  the  chances  of  needing  to 

* generate  another  prime  are  low.) 

* 

* The  list  is  terminated  by  a 0,  and  may  be  empty. 

*/ 
i n t 

b n P r i meG e n ( s t r u c t BigNum  *bn,  unsigned  ( * r a nd ) ( u n s i g n ed  ) , 

int  (*f)(void  *arg,  int  c),  void  *arg,  unsigned  exponent,  ...) 


n 

int  retval; 

Q 

int  modexps  = 

0; 

n 

unsigned  short 

offsetsCSHUFFLE]; 

B 

unsigned  i,  j; 

n 

unsigned  p,  q. 

p r e v; 

B 

struct  BigNum 

a,  e; 

# i f d e f 

HSDOS 

B 

unsigned  char  *sieve; 

#e  l s e 

B 

unsigned  char  sievetSIEVE] 

/ 

# e n d i f 

#i  f def 

MSDOS 

B 

sieve  = 

: bniHemAl loc(SIEVE) 

r 

B 

if  (!sieve) 

B 

B 

return  -1; 

#endi f 

B 

bnBegin(&a); 

B 

bnBegin(&e); 

# i f 0n 

f 

/*  Self 

-test  (not  used  for 

producti 

c 

o 

*/ 

B 

struct 

BigNum  t; 

B 

stat  i c 

unsigned  char  const 

primel C] 

= 

{5>; 

B 

static 

unsigned  char  const 

prime2C] 

= 

{7>; 

B 

static 

unsigned  char  const 

p r i me3  C ] 

= 

{ 1 1 > ; 

B 

static 

unsigned  char  const 

p r i me4  C 3 

= 

(1,  1> 

; /* 

257 

*/ 

B 

static 

unsigned  char  const 

prime5C3 

= 

{0xFF, 

0xF1 }; 

/*  65521  */ 

B 

static 

unsigned  char  const 

prime6C] 

= 

<1,  0, 

/* 

65537  */ 

B 

static 

unsigned  char  const 

prime7CD 

= 

<1,  0, 

3>; 

/* 

65539  */ 

B 

/*  A small  prime:  1234567891  */ 

B 

static 

unsigned  char  const 

prime8CD 

= 

(0x49, 

0x96 

, 0x02,  0xD3>; 

B 

/*  A si 

ightly  larger  prime 

: 12345678901234567891 

*/ 

B 

static 

unsigned  char  const 

prime9CD 

= 

{ 

B 

B 

0xAB,  0x54,  0xA9, 

0x8C,  0xEB, 

0x1  F, 

0X0A, 

0xD3  }; 

[[CHK: 
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/* 

* No,  123456789012345678901234567891  isn't  prime;  it's  just  a 

* Lucky,  e a s y- t o- r emembe r c on i c i d e n c e . (You  have  to  go  to 

* ...4567907  for  a prime.) 

*/ 


B 

static 

struct  { 

B 

□ 

unsigned 

char  const  *pri 

me  ; 

B 

Q 

unsigned 

size; 

B 

> const 

primeListC3  = C 

B 

n 

{ p r i mel , 

sizeofCprimel) 

>, 

B 

B 

{ prime2. 

si zeof(prime2) 

y. 

B 

B 

{ pri me3. 

sizeof(prime3) 

B 

B 

{ prime4. 

sizeof(prime4) 

B 

B 

{ pri me5. 

sizeof(prime5) 

>, 

B 

B 

{ primed. 

sizeofCprimed) 

B 

B 

C prime7. 

sizeof(prime7) 

n 

B 

{ primes. 

sizeofCprimeS) 

>, 

□ 

B 

{ prime9. 

sizeof(prime9) 

> 

B 

bnBeginCSt); 

B 

for  ( i 

= 0;  i < sizeof(primelist)/s 

>; 


bnl n se r t By t es ( 8t , p r i me L i s t C i D . p r i me  , 0, 
n primeListCi].size); 

bnCopy(8e,  &t),- 
( VO i d ) bn S u bS ( Se , 1); 
bnT wo E xpMod ( Sa , Se,  St); 
p = bnBits(Sa); 
if  (p  ! = 1 ) { 
n printfC 

"Bug:  Fermat(2)  %u-bit  output  (1  e x pe c t ed  ) \ n " , p); 
n fputs( "Prime  = 0x",  stdout); 

n for  (j  = 0;  j < p r i me L i s t C i 3 . s i z e ; j++) 

n n p r i n t f ( " % 02 X " , p r i me L i s t C i 3 . p r i me C j 3 ) ; 

n putcharC'Xn'); 

> 

bnSetQCSa,  3); 
bnExpModCSa,  Sa,  Se,  St); 
p = bnBits(Sa); 
if  ( p 
n 

" Bug  : 
n 
n 
n 


! = 1 ) { 
printfC 

Fermat(3)  %u-bit  output  (1  expec t ed ) \n  " , p); 
fputsC" Prime  = 0x",  stdout); 
for  (j  = 0;  j < p r i me L i s t C i 3 . s i z e ; j++) 
n printfC "%02X",  primelistCi3.primeCj3); 

putcharC'Xn'); 


a 

} 

#e n d i f 


bnEndCSt); 


/*  First,  make  sure  that  bn  is  odd.  */ 
if  ( ( bn LS Wo r d ( bn ) S 1)  ==  0) 
n (void)bnAddQ(bn,  1); 


retry: 
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□ 

/* 

Then 

build  a sieve  starting  at  bn.  */ 

u 

s i 

eveBui LdC 

sieve,  SIEVE,  bn,  2,  0); 

Q 

/* 

Do  the  extra  exponent  sieving  */ 

□ 

i f 

(exponent ) ( 

n 

□ 

va_ 

list  a p ; 

□ 

Q 

unsigned  t = exponent; 

Q 

n 

va_ 

start(ap,  exponent); 

u 

n 

do 

{ 

u 

n 

n 

/*  The  exponent  had  better  be  odd!  */ 

n 

n 

Q 

pgpAssert(t  & 1); 

D 

a 

n 

i = bnModQ( bn,  t ) ; 

n 

n 

Q 

/*  Find  1-i  */ 

n 

a 

n 

if  (i  ==  0) 

Q 

a 

n 

n i = 1; 

n 

a 

n 

else  if  (--i) 

n 

a 

□ 

D i = t - i ; 

Q 

n 

n 

/*  Divide  by  2,  modulo  the  exponent  */ 

n 

a 

n 

i=(i  ai)?i/2+t/2+1  : i/2; 

Q 

a 

n 

/*  Remove  all  following  multiples  from 

the  sieve.  */ 

Q 

a 

a 

sieveSingle(sieve,  SIEVE,  i,  t); 

□ 

n 

a 

/*  Get  the  next  exponent  value  */ 

fi 

a 

a 

t = va_arg(ap,  unsigned); 

n 

o 

} while  (t); 

n 

n 

va_ 

end(ap); 

n 

y 

□ 

/* 

Fill 

up 

the  offsets  array  with  the  first  SHUFFLE  candidates  */ 

n 

i : 

= P = 

0; 

a 

/* 

Get  first  prime  */ 

n 

i f 

(sieveC0D  8 1 ||  (p  = s i eve  Sea r c h C s i e ve , SIEVE,  p)) 

!=  0)  { 

n 

n 

offsetsCi++D  = p; 

n 

n 

P = 

s i e ve S ea r c h ( s i e ve , SIEVE,  p); 

s 

> 

a 

/* 

n 

* 

Okay, 

from  this  point  onwards,  p is  always  the  next 

entry 

n 

* 

from 

the 

sieve,  that  has  not  been  added  to  the  shuffle  table. 

n 

★ 

and  i 

s 0 

iff  the  sieve  has  been  exhausted. 

u 

★ 

If  we 

want  to  shuffle,  then  fill  the  shuffle  table 

until  the 

a 

★ 

sieve 

i s 

exhausted  or  the  table  is  full. 

n 

*/ 

a 

i f 

(rand 

&& 

p)  { 

a 

a 

d 0 

{ 

ts 

□ 

Q 

offsetsCi++]  = p; 

n 

n 

Q 

p = sieveSearch(sieve,  SIEVE,  p); 

a 

n 

} while  (p  &S  i < SHUFFLE) ; 

o 

} 

tx 

/* 

Choose  a 

random  candidate  for  experimentation  */ 

□ 

p rev  = 0 

A 

[CCHK; 

;d330a1bb995a775b930110ff19957aa9dd4b6fb75de63778ac6026ee0758c4234:: 

242  Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


bnprime.c 


n 

while 

( i ) { 

Q 

n 

/*  Pick 

a random  entry  from  the  shuffle  tabl 

□ 

Q 

j = rand  ? rand(i)  : 0; 

n 

□ 

q = of f s e t s C j 3 ; n / * The  entry  to  use  */ 

n 

n 

/*  Replace  the  entry  with  some  more  data,  if 

Q 

tt 

if  C p ) 

{ 

n 

Q 

Q 

offsetsCjD  = p; 

n 

n 

n 

p = s i e veSea r c h ( s i e ve , SIEVE,  p); 

Q 

n 

> else 

{ 

Q 

n 

n 

offsetsCj]  = 0 f f s e t s C -- i 3 ; 

n 

n 

n 

offsetsCi]  = 0; 

n 

n 

> 

Q 

a 

/*  Adjust  bn  to  have  the  right  value  */ 

n 

n 

if  ( ( q 

> prev  ? bn AddMu L t ( bn,  q-prev,  2) 

n 

n 

: bn S u bMu L t ( bn , prev-q,  2))  < 

n 

n 

Q 

goto  failed; 

Q 

n 

p r e V = 

q; 

H 

n 

/*  Now 

do  the  Fermat  tests  */ 

a 

□ 

retval 

= primeTest(bn,  &e,  &a,  f,  arg); 

Q 

n 

if  (retval  <=  0) 

n 

n 

n 

goto  done;n  /*  Success  or  error 

n 

n 

modexps 

+=  retval; 

n 

n 

if  (f  SS  (retval  = f(arg,  '.'))  < 0) 

n 

Q 

n 

goto  done; 

/*  Ran  out  of  sieve  space  - increase  bn  and  keep  trying.  */ 
if  ( bnAddMu L t ( bn,  S I E V E*8-p r e v , 2)  < 0) 
n goto  failed; 

if  (f  &S  (retval  = fCarg,  '/'))  < 0) 
n gotodone; 

goto  retry; 


f a i Led 
n 

done  : 

D 

n 

n 

#i f def 
n 

#e  L se 
n 

#e  nd i f 

n 

> 


retval  = -1; 

bnEnd(&e); 
bnEnd(&a)  ; 

bniHemWipeCoffsets,  sizeof(offsets)); 

MSDOS 

bniHemFreeCsieve,  SIEVE); 
bniMemWipeCsieve,  sizeof(sieve)); 

return  retval  < 0 ? retval  : modexps  + C ON F I RHT E ST S ; 


/* 

* Similar,  but  searches  forward  from  the  given  starting  value  in  steps  of 

* "step"  rather  than  1.  The  step  size  must  be  even,  and  bn  must  be  odd. 

* Among  other  possibilities,  this  can  be  used  to  generate  "strong" 

* primes,  where  p-1  has  a Large  prime  factor. 

*/ 

i n t 
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bn P r i meGenS t r ong ( s t r u c t BigNum  *bn,  struct  BigNun  const  *step, 
n int  (*f)(void  *arg,  int  c),  void  *arg) 

{ 

n int  retvaL; 

n unsigned  p,  prev; 

n struct  BigNum  a,  e; 

n int  modexps  = 0; 

#ifdef  nSDOS 

n unsigned  char  *sieve; 

#e  L se 

n unsigned  char  s i e v e C S I E V E !]  ; 

#end  i f 


#ifdef  HSDOS 

n sieve  = b n i M emA L L o c ( S I E V E ) ; 

n if  (Isieve) 


n n return  -1; 

# e nd i f 


a /*  Step  must  be  even  and  bn  must  be  odd  */ 

n pgpAssertCCbnLSWordCstep)  S 1)  ==  0); 

n pgpAssert(CbnLSWordCbn)  & 1)  ==  1); 


□ 

bnBeginC&a) 

r 

Q 

bnBeg i n ( &e ) 

a 

for 

(;;)  { 

n 

□ 

i f 

C s i e veBu i L d B i g C s i e ve , SIEVE,  bn,  step,  0)  < 0) 

u 

n 

□ 

goto 

f a i Led; 

n 

n 

P = 

prev  = 

0; 

n 

n 

1 f 

(sieve[!0II 

& 1 II  (p  = s i e ve Sea r c h ( s i eve,  SIEVE,  p)) 

n 

□ 

n 

d 0 

n 

n 

n 

n 

/* 

n 

n 

n 

□ 

* Adjust  bn  to  have  the  right  value. 

a 

n 

□ 

c 

* adding  (p-prev)  * 2*step. 

a 

n 

a 

n 

*/ 

n 

n 

a 

n 

pgpAssertCp  >=  prev); 

n 

n 

n 

□ 

/*  Compute  delta  into  a */ 

Q 

n 

n 

n 

if  CbnMuLQCSa,  step,  p-prev)  < 0) 

□ 

□ 

n 

n 

n goto  failed; 

n 

n 

Q 

n 

if  (bnAddCbn,  &a)  < 0) 

□ 

n 

n 

n 

n goto  failed; 

Q 

□ 

D 

n 

prev  = p; 

n 

n 

n 

Q 

retvaL  = p r i meTes t ( bn , &e,  &a,  f,  arg); 

n 

s 

n 

n 

if  (retvaL  <=  0) 

n 

n 

a 

n 

n goto  done;n  /*  Success!  */ 

Q 

n 

n 

n 

modexps  +=  retvaL; 

Q 

n 

□ 

n 

if  (f  &&  (retvaL  = f(arg,  '.'))  < 0) 

n 

Q 

n 

D 

n goto  done; 

n 

□ 

Q 

n 

/*  And  try  again  */ 

n 

n 

n 

n 

p = s i e ve Sea r c h ( s i e ve , SIEVE,  p); 

n 

n 

n 

> 

u h i 

Le  (p); 

Q 

n 

> 

n 

n 

/* 

Ran  out 

0 f 

sieve  space  - increase  bn  and  keep  trying 
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#if  SIEVE*8 

==  65536 

a 

B 

/*  Corner  case  that  will  never 

actuaLLy  happen 

*/ 

n 

B 

if  (Iprev)  { 

n 

B 

a if  (bnAdd(bn,  step)  < 0) 

Q 

B 

n n gotofaiLed; 

B 

B 

n p=65535; 

B 

B 

} else  { 

B 

B 

n p = ( un s i g n ed  ) C S I E V E*8 

- prev); 

B 

B 

} 

#e  1 se 

B 

B 

p = SIEVE*8  - prev; 

Send i f 

B 

B 

if  (bnMuLQ(&a,  step,  p)  < 0 || 

bnAdd(bn,  &a)  < 

0) 

B 

B 

n gotofaiLed; 

B 

B 

if  (f  &&  (retvaL  = f(arg,  '/')) 

< 0) 

B 

B 

n gotodone; 

B 

> /* 

for  (;;)  */ 

f a 1 Led: 

n retvaL=-1; 

done: 

n bnEnd(&e); 

n bnEnd ( &a  ) ; 

#ifdef  MSDOS 

n bniHettiFree(sieve,  SIEVE); 

#e  L se 

n bn  i H etnW  i pe  ( s i e ve  , sizeofCs 

# e n d i f 

n return  retvaL  < 0 ? retvaL 

> 


eve) ) ; 

: modexps  + C ON F I RMT E ST S ; 


CCCHK:989888c55aebe52a338771144812f85e7907034:] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


245 


bnprime.h 


/* 

* bnprime.h 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  bnprime.h, V 1.3. 2.1  1997/06/07  09:49:40  mhw  Exp  $ 

*/ 

#ifndef  BNPRIME_H 
#define  BNPRIME.H 

#ifdef  __cpLuspLus 
extern  "C"  C 
#end  i f 

struct  BigNum; 

#ifndef  TYPE.BIGNUM 

#define  TYPE.BIGNUM  1 

typedef  struct  BigNum  BigNum; 

#e  n d i f 

/*  Generate  a prime  >=  bn.  Leaving  the  resuLt  in  bn.  */ 

int  BNExport  b n P r i meG e n ( s t r u c t BigNum  *bn,  unsigned  ( * r a n d n urn ) ( un s i g n e d ) , 
n int  (*f)(void  *arg,  int  c),  void  *arg,  unsigned  exponent,  ...); 

/* 

* Generate  a prime  of  the  form  bn  + k*step.  Step  must  be  even  and 

* bn  must  be  odd . 

*/ 

int  BNExport  bn P r i me G e n S t r o ng ( s t r u c t BigNum  *bn,  struct  BigNum  const  *step, 
n n int  (*f)Cvoid  *arg,  int  c),  void  *arg); 

#ifdef  __cpLuspLus 
} 

#endi  f 

#endif  /*  BNPRIME  H */ 
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/* 

* bnprint.c  - Print  a bignum,  for  debugging  purposes. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  CoLin  PLumb. 

★ 

* $Id:  bnprint.c, V 1.17.2.1  1997/06/07  09:49:41  mhw  Exp  $ 

*/ 

#ifndef  H A V E_ C ON F I G_ H 
^define  H A V E_C ON F I G_ H 0 
# e n d i f 

#if  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 

/* 

* Some  compiLers  compLain  about  ttii  FOO  if  FOO  isn't  defined, 

* so  do  the  AN S I -ma nda t ed  thing  ex p L i c i t L y . . . 

*/ 

#ifndef  NO_STRING_H 
^define  NO_STRING_H  0 
# e nd i f 

#ifndef  H A V E_S T R I N G S_ H 
^define  HAVE_STRINGS_H  0 
# e nd i f 


#incLude  <stdio.h> 


#if  !NO_STRING_H 
tfincLude  <string.h> 
#eLif  HAVE_STRINGS_H 
#incLude  <strings.h> 
#e n d i f 


#incLude  "bn.h" 

#incLude  "bnprint.h" 

#incLude  "bnkLudge.h" 

i n t 

bnPrintCFILE  *f,  char  const  *prefix,  struct  BigNum  const  *bn, 
n char  const  *suffix) 

{ 

n unsigned  char  tempC32D;n/*  How  much  to  print  on  one  Line  */ 

n unsigned  Len; 

n s i z e _ t i ; 

n if  (prefix  &S  f pu t s ( p r e f i x , f)  < 0) 

n n returnEOF; 

n Len  = (bnBits(bn)  + 7)/  8; 

n if(!Len){ 

n n if  (putc('0',  f)  < 0) 

n n n returnEOF; 

n } e L s e { 

n n whiLe  (Len  > s i z e o f ( t emp ) ) ( 
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□ 

□ 

n 

ten 

-=  sizeof(temp); 

n 

n 

a 

bnExtractBigBytesCbn, 

temp,  len,  sizeof(temp)); 

□ 

n 

□ 

for 

(i  = 0;  i < sizeof(temp);  i++) 

□ 

Q 

s 

n 

if  (fprintfCf, 

"%02X",  tempCi])  < 0) 

n 

□ 

n 

n 

B return 

EOF; 

n 

n 

a 

i f 

(putcC ' W ' , f ) < 0 

II  putc('\n',  f)  < 0) 

n 

Q 

a 

n 

return  EOF; 

□ 

□ 

n 

i f 

(prefix)  { 

n 

a 

□ 

a 

i = s t r L e n ( p r e f i X ) ; 

n 

n 

n 

a 

while  (i--) 

n 

D 

a 

a 

B if(putc('  ',  f)<0) 

n 

n 

n 

□ 

n a 

return  EOF; 

a 

n 

□ 

> 

o 

n 

> 

n 

n 

bn  Ex t r a c t B i g By t e s ( bn  , temp,  0, 

len); 

□ 

Q 

for  C i 

= 0; 

i < len;  i++) 

n 

a 

□ 

i f 

(fprintf(f,  "%02X", 

tempCi])  < 0) 

□ 

a 

a 

□ 

return  EOF; 

□ 

> 

n 

return 

suffix 

?nf pu t s ( suf f i X,  f)  : 0; 

} 


i n t 

bn P r i n 1 1 0 ( F I LE  *f,  char  const  *prefix,  struct  BigNum  const  *bn, 
n char  const  *suffix) 

{ 

a struct  BigNum  pbig,  pbigi; 

n struct  BigNum  ten,  zero,  rem; 

n char  buf[3000];nn  n /*  up  to  9000  bits  */ 

n int  bufi  = sizeof(buf)-1,- 

n i n t n ; 

n bufCbufi:  = '\0'; 

n bnBegin  (Spbig); 

n bnBegin  C&pbigl); 

n bnBeg in  (6rem); 

Q 

n bnBegin  C&ten); 

n bnAdda  (&ten,  10); 

n bnBegin  (&zero); 


Q 

n 

D 

□ 

□ 

Q 

n 

a 


bnCopy  (&pbig,  bn); 

while  CbnCmp  (Spbig,  Szero)  !=  0)  -C 
n bnDivMod  (8pbig1,  &rem,  &pbig,  &ten); 

n bnCopy  C&pbig,  8pbig1); 

n n = bnLSWord  (8rem); 

n bufC--bufi]  = n + '0'; 

> 


D 

n 


n 


bnEnd  (8pbig); 
bnEnd  <8pbig1); 
bnEnd  (8rem); 


n if  (prefix  88  f p u t s ( p r e f i x , f)  < 0) 

H n returnEOF; 
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fputs  (buf+bufi,  f); 

memset  (buf,  0,  s i zeof ( buf  ) ) ; 

return  suffix  ?nf pu t s ( suf f i x,  f)  : 0; 
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/* 

* bnprint.h 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  bnprint.h, V 1.10.2.1  1997/06/07  09:49:41  mhw  Exp  $ 

*/ 

#ifndef  BNPRINT_H 
#define  BNPRINT.H 

#ifdef  __cpLuspLus 
extern  "C"  { 

#e nd i f 

#incLude  <stdio.h> 
struct  BigNum; 

#ifndef  TYPE.BIGNUM 

//define  TYPE.BIGNUM  1 

typedef  struct  BigNum  BigNum; 

#end  i f 

/*  Print  in  base  16  */ 

int  BNExport  bnPrintCFILE  *f,  char  const  *prefix,  struct  BigNum  const  *bn, 
n char  const  *suffix); 

/*  Print  in  base  10  */ 

int  BNExport  b n P r i n t 1 0 C F I LE  *f,  char  const  *prefix,  struct  BigNum  const  *bn, 
n char  const  *suffix); 

//ifdef  __cpLuspLus 

> 

# e nd i f 

#endif  /*  BNPRINT  H */ 
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/* 

* bnsieve.c  - Trial  division  for  prime  finding. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb 

* 

* $Id:  bnsieve.c, V 1.2. 2.1  1 997/06/07  09:49:42  mhw  Exp  $ 

* 

* Finding  primes: 

* - Sieve  1 to  find  the  small  primes  for 

* - Sieve  2 to  find  the  candidate  large  primes,  then 

* - P s e udo-p r i ma I i t y test. 

* 

* An  important  question  is  how  much  trial  division  by  small  primes 

* should  we  do?  The  answer  is  a LOT.  Even  a heavily  optimized 

* Fermat  test  to  the  base  2 (the  simplest  p s e ud op r i ma I i t y test) 

* is  much  more  expensive  than  a division. 

* 

* For  an  prime  of  n k-bit  words,  a Fermat  test  to  the  base  2 requires  n*k 

* modular  squarings,  each  of  which  involves  n*(n+1)/2  signle-word  multiplies 

* in  the  squaring  and  n*(n+1)  multiplies  in  the  modular  reduction,  plus 

* some  overhead  to  get  into  and  out  of  Montgomery  form.  This  is  a total 

* of  3/2  * k * n''2  * (n  + 1).  Equivalently,  if  n*k  = b bits,  it's 

* 3/2  * (b/k  + 1 ) * b^2  / k. 

"k 

* A modulo  operation  requires  n single-word  divides.  Let's  assume  that 

* a divide  is  4 times  the  cost  of  a multiply.  That's  4*n  multiplies. 

* However,  you  only  have  to  do  the  division  once  for  your  entire 

* search.  It  can  be  amortized  over  10-15  primes.  So  it's 

* really  more  like  n/3  multiplies.  This  is  b/3k. 

* 

* Now,  let's  suppose  you  have  a candidate  prime  t.  Your  options 

* are  to  a)  do  trial  division  by  a prime  p,  then  do  a Fermat  test, 

* or  to  do  the  Fermat  test  directly.  Doing  the  trial  division 

* costs  b/3k  multiplies,  but  a certain  fraction  of  the  time  (1/p),  it 

* saves  you  3/2  b'^3  / k*2  multiplies.  Thus,  it's  worth  it  doing  the 

* division  as  long  as  b/3k  < 3/2  * (b/k+1)  * b''2  / k / p. 


* 

I . e . p < 9/2 

★ 

(b/k  + 1 ) 

* b 

= 9/2 

* (b''2/k 

+ 

b)  . 

★ 

E . g . for  k=1 6 

and 

b=256. 

P < 

9/2  * 

17  * 256 

= 

19584. 

★ 

A 

Solving  for  k 

= 

1 6 

and  k=32 

a t 

a few 

interesting 

value 

★ 

k=16,  b=256: 

P 

< 

1 9584n 

k = 32. 

b=256:  p 

< 

1 0368 

★ 

k=16,  b=384: 

P 

< 

43200n 

k = 32. 

b=384;  p 

< 

22464 

* 

k=16,  b=512: 

P 

< 

76032n 

k = 32. 

b=512:  p 

< 

39168 

* 

k=16,  b=640: 

P 

< 

1 1 8080n 

k = 32. 

b=640 : p 

< 

60480 

k 


* H'm...  before  using  the  highly-optimized  Fermat  test,  I got  much  larger 

* numbers  (64K  to  256K),  and  designed  the  sieve  for  that.  Maybe  it  needs 

* to  be  reduced.  It  *is*  true  that  the  desirable  sieve  size  increases 

* rapidly  with  increasing  prime  size,  and  it's  the  larger  primes  that  are 

* worrisome  in  any  case.  I'll  leave  it  as  is  (64K)  for  now  while  I 

* think  about  it. 

* 

* A bit  of  tweaking  the  division  (we  can  compute  a reciprocal  and  do 

* multiplies  instead,  turning  4*n  into  4 + 2*n)  would  increase  all  the 

* numbers  by  a factor  of  2 or  so. 

* 
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* 

* Bit  kina  sieve  corresponds  to  the  number  a + k*b. 

* For  a given  a and  b,  the  sieve's  job  is  to  find  the  values  of 

* k for  which  a + k*b  ==  0 (mod  p).  Multiplying  by  b*-1  and 

* isolating  k,  you  get  k ==  -a*b^-1  (mod  p).  So  the  values  of 

* k which  should  be  worked  on  are  k = (-a*b*-1  mod  p)  + i * p, 

* for  i = 0,  1,  2,... 

* 

* Note  how  this  is  still  easy  to  use  with  very  large  b,  if  you  need  it. 

* It  just  requires  computing  (b  mod  p)  and  then  finding  the  multiplicative 

* inverse  of  that. 

* 

★ 

* How  large  a space  to  search  to  ensure  that  one  will  hit  a prime? 

* The  average  density  is  known,  but  the  primes  behave  oddly,  and  sometimes 

* there  are  large  gaps.  It  is  conjectured  by  shanks  that  the  first  gap 

* of  size  "delta"  will  occur  at  approximately  e x p ( s q r t ( de  1 1 a ) ) , so  a delta 

* of  65536  is  conjectured  to  be  to  contain  a prime  up  to  e*256. 

* Remembering  the  handy  2<->e  conversion  ratios: 

* ln(2)  = 0.693147  log2(e)  = 1.442695 

* This  covers  up  to  369  bits.  Damn,  not  enough!  Still,  it'll  have  to  do. 

* 

* Cramer's  conjecture  (he  proved  it  for  "most"  cases)  is  that  in  the  limit, 

* as  p goes  to  infinity,  the  largest  gap  after  a prime  p tends  to  (ln(p))''2 

* So,  for  a 1024-bit  p,  the  interval  to  the  next  prime  is  expected  to  be 

* about  709.78'‘2,  or  503791.  We'd  need  to  enlarge  our  space  by  a factor  of 

* 8 to  be  sure.  It  isn't  worth  the  hassle. 

* 

* Note  that  a span  of  this  size  is  expected  to  contain  92  primes  even 

* in  the  vicinity  of  2*1024  (it's  369  at  256  bits  and  492  at  192  bits). 

* So  the  probability  of  failure  is  pretty  low. 

*/ 

#ifndef  H AVE_C0N F I G_H 
#define  H A V E_CON F I G_H  0 
ttend  i f 

#if  HAVE_CONFIG_H 
#include  "config.h" 

#endi  f 


I* 

* Some  compilers  complain  about  #if  FOO  if  FOO  isn't  defined, 

* so  do  the  AN S I -ma nda t e d thing  explicitly... 

*/ 

#ifndef  NO_ASSERT_H 
^define  NO_ASSERT_H  0 
#end  i f 

#ifndef  NO_LIHITS_H 
#define  NO_LIMITS_H  0 
#en d i f 

#ifndef  NO_STRING_H 
#define  NO_STRING_H  0 
#end i f 

tfifndef  H A V E_S T R I NG S_ H 
#define  H A V E_ ST R I NG S_ H 0 
Send  i f 

Sifndef  NEED_MEnORY_H 
Sdefine  NEED_MEMORY_H  0 
Sendi  f 
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if  !N0  LIMITS  H 

For  UINT_MAX  */ 

If  not  avail,  default  value  of  0 is  safe  */ 

for  memsetC)  */ 

#elif  HAVE_STRINGS_H 
#include  <strings.h> 

# e n d i f 

#if  NEED_MEHORY_H 
^include  <niemory.h> 

#endi f 


//include  <limits.h>n  /* 

//endifnn  n /* 

//if  !NO_STRING_H 
//include  <string.h>n  /* 


#include  "bn.h" 
#include  "bnsieve.h 
#ifdef  MSDOS 
//include  "bnimem.h" 
//endi  f 


//include  "bnkludge.h" 

//include  "pgpDebug.h" 

/* 

* Each  array  stores  potential  primes  as  1 bits  in  little-endian  bytes. 

* Bit  k in  an  array  represents  a + k*b,  for  some  parameters  a and  b 

* of  the  sieve.  Currently,  b is  hardcoded  to  2. 

* 

* Various  factors  of  16  arise  because  these  are  all  *byte*  sizes,  and 

* skipping  even  numbers,  16  numbers  fit  into  a byte's  worth  of  bitmap. 

*/ 

/* 

* The  first  number  in  the  small  prime  sieve.  This  could  be  raised  to 

* 3 if  you  want  to  squeeze  bytes  out  aggressively  for  a smaller  SMALL 

* table,  and  doing  so  would  let  one  more  prime  into  the  end  of  the  array, 

* but  there  is  no  sense  making  it  larger  if  you're  generating  small 

* primes  up  to  the  limit  if  2''16,  since  it  doesn't  save  any  memory  and 

* would  require  extra  code  to  ignore  65537  in  the  last  byte,  which  is 

* over  the  16-bit  limit. 

*/ 

//define  SMALLSTART  1 


/* 

★ 

Size 

* 

with 

* 

SMALL 

* 

this 

*/ 

16  + SMALLSTART  - 2,  must  be  < 65536. 


:es.  For  compatibility 
can  appear  in  it. 

Since  65537  is  a prime. 


//define  SMALL  (65536/16) 


/* 

* Compute  the  multiplicative  inverse  of  x,  modulo  mod,  using  the  extended 

* Euclidean  algorithm.  The  classical  EEA  returns  two  results,  traditionally 

* named  s and  t,  but  only  one  (t)  is  needed  or  computed  here. 

* It  is  unrolled  twice  to  avoid  some  variable-swapping,  and  because  negating 

* t every  other  round  makes  all  the  number  positive  and  less  than  the 

* modulus,  which  makes  fixed-length  arithmetic  easier. 
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•k 

* If  gcd(x,  mod)  !=  1,  then  this  will  return  0. 
*/ 

static  unsigned 

s i e ve Mod  I n V e r t ( u n s i g n e d x,  unsigned  mod) 


n 

unsigned 

y; 

□ 

unsigned 

t0,  t1; 

□ 

unsi gned 

q; 

□ 

X 

A 

II 

1 ) 

□ 

n 

return  x;n 

/* 

0 and 

1 are  self-inverse 

n 

/* 

n 

* The  first  round 

i s 

s i mp  1 

i f i ed 

based  on  the 

n 

* initial  conditi 

on  s 

t0  = 

1 and 

t1  = 0 . 

n 

*/ 

n 

t1  = mod 

/ x; 

n 

y = mod 

% x; 

u 

if  (y  <= 

1 ) 

a 

□ 

return  y ? 

mod 

- t1 

: 0; 

u 

t0  = 1; 

n 

do  { 

u 

n q 

= X 

/ 

y; 

n 

n X 

= X 

% 

y; 

Q 

n 1 0 

+ = 

q 

* t1; 

o 

n i f 

Cx 

<= 

1 ) 

a 

D n 

return 

n 

n q 

= y 

/ 

x; 

a 

n y 

= y 

% 

x; 

n 

n t1 

+ = 

q 

* t0; 

n 

} while  (y 

• 

A 

n 

return  y ? 

mod 

- 

t1  : 

} 


? t0 


: 0; 


/* 

* Perform  a single  sieving  operation  on  an  array.  Clear  bits  "start", 

* "start+step",  "start+2*step",  etc.  from  the  array,  up  to  the  size 

* limit  (in  BYTES)  "size".  All  of  the  arguments  must  fit  into  16  bits 

* for  portability. 

* 

* This  is  the  core  of  the  sieving  operation.  In  addition  to  being 

* called  from  the  sieving  functions,  it  is  useful  to  call  directly  if, 

* say,  you  want  to  exclude  primes  congruent  to  1 mod  3,  or  whatever. 

* (Although  in  that  case,  it  would  be  better  to  change  the  sieving  to 

* use  a step  size  of  6 and  start  ==  5 (mod  6).) 

* 

* Originally,  this  was  inlined  in  the  code  below  (with  various  checks 

* turned  off  where  they  could  be  inferred  from  the  environment),  but  it 

* turns  out  that  all  the  sieving  is  so  fast  that  it  makes  a negligible 

* speed  difference  and  smaller,  cleaner  code  was  preferred. 

* 

* Rather  than  increment  a bit  index  through  the  array  and  clear 

* the  corresponding  bit,  this  code  takes  advantage  of  the  fact  that 

* every  eighth  increment  must  use  the  same  bit  position  in  a byte. 

* I.e.  start  + k*step  ==  start  + (k+8)*step  (mod  8).  Thus,  a bitmask 

* can  be  computed  only  eight  times  and  used  for  all  multiples.  Thus,  the 

i:CCHK:58dd577966d24bbc008bdd3ad9ff49e2a888e75b4eddb3f6666887285d7a99f84:: 
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* outer  Loop  is  over  (k  mod  8)  while  the  inner  Loop  is  over  (k  div  8). 

★ 

* The  only  further  trickiness  is  that  this  code  is  designed  to  accept 

* start,  step,  and  size  up  to  65535  on  16-bit  machines.  On  such  a 

* machine,  the  computation  "start+step"  can  overflow,  so  we  need  to 

* insert  an  extra  check  for  that  situation. 

*/ 

void 

s i e ve S i ng L e ( u n s i g n ed  char  *array,  unsigned  size,  unsigned  start,  unsigned  step) 
{ 

n unsigned  bit; 

n unsigned  char  mask; 

n unsigned  i; 

//if  UINT_MAX  < 0x1ffff 

a /*  Unsigned  is  small;  add  checks  for  wrap  */ 

n for  (bit  = 0;  bit  < 8;  bit++)  ( 


n 

n 

i 

= start/8; 

n 

n 

i f 

(i  >=  size) 

Q 

n 

B 

break; 

n 

n 

mask  = “(1  <<  (start  8 7)); 

D 

B 

do 

{ 

n 

B 

B 

arrayCi)  8=  mask; 

a 

B 

B 

i + = s t e p ; 

□ 

B 

> 

while  (i  >=  step  88  i < size); 

n 

B 

start  +=  step; 

□ 

B 

i f 

(start  < step)n  /*  Overflow  test 

n 

B 

B 

break; 

n 

> 

Uelse 

n 

/* 

Unsigned  has  the  range  - no  overflow  possible 

D 

for 

(bit  = 

0;  bit  < 8;  bit++)  ( 

n 

B 

i 

= start/8; 

□ 

B 

i f 

(i  >=  size) 

n 

B 

B 

break; 

n 

B 

mask  = “(1  <<  (start  & 7)); 

□ 

B 

do 

{ 

o 

B 

B 

arrayCi]  8=  mask; 

n 

B 

B 

i +=  step; 

n 

B 

> 

while  (i  < size); 

a 

B 

start  +=  step; 

n 

> 

//endi  f 
} 

/* 

* Returns  the  index  of  the  next  bit  set  in  the  given  array.  The  search 

* begins  after  the  specified  bit,  so  if  you  care  about  bit  0,  you  need 

* to  check  it  explicitly  yourself.  This  returns  0 if  no  bits  are  found. 

* 

* Note  that  the  size  is  in  bytes,  and  that  it  takes  and  returns  BIT 

* positions.  If  the  array  represents  odd  numbers  only,  as  usual,  the 

* returned  values  must  be  doubled  to  turn  them  into  offsets  from  the 

* initial  number. 

*/ 

unsigned 

s i e V e S e a r c h ( u n s i g n e d char  const  *array,  unsigned  size,  unsigned  start) 

{ 
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n 

unsigned  i;n 

/* 

Loop  index  */ 

□ 

unsigned  char 

t ; n 

/*  Temp  */ 

n 

1 f 

( !++ start) 

n 

n 

return 

0; 

n 

i 

= start/8; 

n 

i f 

(i  >=  size) 

n 

u 

return 

0;n 

/*  Done!  */ 

n /*  Deal  with  odd-bit  beginnings  =>  search  the  first  byte  */ 


n 

i f 

(start 

& 7) 

□ 

tt 

t 

= a r ray C 

i ++] 

>>  (start 

& 7); 

□ 

tt 

i f 

(t) 

{ 

□ 

tt 

n 

i f 

( ! (t 

& 15)) 

{ 

Q 

tt 

n 

Q 

t >>  = 

4; 

n 

a 

n 

□ 

start 

+ = 

4; 

n 

tt 

n 

} 

n 

tt 

tt 

i f 

C ! (t 

S 3)) 

{ 

n 

tt 

tt 

□ 

t >>  = 

2; 

n 

tt 

tt 

□ 

start 

+ = 

2; 

□ 

tt 

tt 

} 

n 

tt 

tt 

i f 

( ! (t 

& 1 ) ) 

n 

tt 

tt 

n 

start 

+ = 

1; 

n 

tt 

tt 

return 

start; 

□ 

tt 

} 

else 

i f 

(i  = = 

size) 

{ 

D 

a 

n 

return 

0;n 

/*  Done 

□ 

tt 

> 

n 

> 

Q 

/* 

Now 

the 

main 

search 

loop  */ 

D 

do 

{ 

n 

Q 

i f 

( (t 

= a r ray C 

i : ) 1 = 

0) 

{ 

D 

n 

Q 

start  = 

8*i  ; 

a 

n 

□ 

if 

( ! (t 

& 15)) 

{ 

n 

D 

n 

a 

t >>  = 

4; 

tt 

n 

tt 

tt 

start 

+ = 

4; 

n 

tt 

tt 

y 

tt 

tt 

n 

i f 

( I Ct 

& 3)) 

{ 

tt 

tt 

a 

n 

t >>  = 

2; 

n 

tt 

n 

tt 

start 

+= 

2; 

n 

tt 

tt 

y 

n 

tt 

a 

if 

( ! (t 

& 1 ) ) 

tt 

tt 

tt 

tt 

start 

+ = 

1; 

tt 

tt 

tt 

return 

start; 

tt 

tt 

y 

tt 

y 

wh  i 1 

e (++i  < 

size); 

tt 

/* 

F a i led 

*/ 

tt 

return 

0; 

} 

/* 

* Build  a table  of  small  primes  for  sieving  larger  primes  with.  This 

* could  be  cached  between  calls  to  sieveBuild,  but  it's  so  fast  that 

* it's  really  not  worth  it.  This  code  takes  a few  milliseconds  to  run. 
*/ 

static  void 
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s i eveSma L I ( uns 1 gned  char  *array,  unsigned  size) 

{ 

n unsigned  i;n  n /*  Loop  index  */ 

n unsigned  p;n  n /*  The  current  prime*/ 


n /*  Initialize  to  all  Is  */ 

n memsetCarray,  0xFF,  size); 


#if  SMALLSTART  ==  1 

n /*  Hark  1 as  NOT  prime  */ 

n arrayC0D  = 0xfe; 

n i = 1;n  /*  Index  of  first  prime 

#e  L se 

n i = 0;n  /*  Index  of  first  prime 

#e nd i f 


*/ 


*/ 


D 

D 

n 

n 

a 

n 

n 

n 

□ 

□ 

n 

a 

n 

n 

□ 

□ 

Q 

□ 

n 

a 


/* 

* Okay,  now  sieve  via  the  primes  up  to  256,  obtained  from  the 

* table  itself.  We  know  the  maximum  possible  table  size  is 

* 65536,  and  s i eveS i ng I e ( ) can  cope  with  out-of-range  inputs 

* safely,  and  the  time  required  is  trivial,  so  it  isn't  adaptive 

* based  on  the  array  size. 

* 

* Convert  each  bit  position  into  a prime,  compute  a starting 

* sieve  position  (the  square  of  the  prime),  and  remove  multiples 

* from  the  table,  using  s i e v e S i ng I e ( ) . I used  to  have  that 

* code  in  line  here,  but  the  speed  difference  was  so  small  it 

* wasn't  worth  it.  If  a compiler  really  wants  to  waste  memory, 

* it  can  inline  it. 

*/ 

do  { 

n p = 2 * i + SMALLSTART; 

n if  (p  > 256) 

n n break; 

n /*  Start  at  square  of  p */ 

n s i e ve S i ng I e ( a r r a y , size,  ( p* p-SH A L LS T A RT ) / 2 , p); 


n n /*  And  find  the  next  prime  */ 

n □ i = s i e V e S ea r c h { a r r a y , 16,  i); 

n >while(i); 

} 


/* 

* This  is  the  primary  sieving  function.  It  fills  in  the  array  with 

* a sieve  (multiples  of  small  primes  removed)  beginning  at  bn  and 

* proceeding  in  steps  of  "step". 

* 

* It  generates  a small  array  to  get  the  primes  to  sieve  by.  It's 

* generated  on  the  fly  - sieveSmall  is  fast  enough  to  make  that 

* perfectly  acceptable. 

* 

* The  caller  should  take  the  array,  walk  it  with  sieveSearch,  and 

* apply  a stronger  primality  test  to  the  numbers  that  are  returned. 

* 

* If  the  "dbl"  flag  non-zero  (at  least  1),  this  also  sieves  2*bn+1,  in 

* steps  of  2*step.  If  dbl  is  2 or  more,  this  also  sieve  4*bn+3, 

* in  steps  of  4*step,  and  so  on  for  arbitrarily  high  values  of  "dbl". 
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* This  is  convenient  for  finding  primes  such  that  (p-1)/2  is  also  prime. 

* This  is  particularly  efficient  because  sieveSingle  is  controlled  by  the 

* parameter  s = -n/step  (mod  p).  (In  fact,  we  find  t = -1/step  (mod  p) 

* and  multiply  that  by  n (mod  p).)  If  you  have  -n/step  (mod  p),  then 

* finding  - ( 2 *n  + 1 ) / ( 2 * s t e p ) (mod  p),  which  is  -n/step  - 1/(2*step)  (mod  p), 

* reduces  to  finding  -1/(2*step)  (mod  p),  or  t/2  (mod  p),  and  adding  that 

* to  s = -n/step  (mod  p).  Dividing  by  2 modulo  an  odd  p is  easy  - 

* if  even,  divide  directly.  Otherwise,  add  p (which  produces  an  even 

* sum),  and  divide  by  2.  Very  simple.  And  this  produces  s'  and  t' 

* for  step'  = 2*step.  It  can  be  repeated  for  step''  = 4*step  and  so  on. 

* 

* Note  that  some  of  the  math  is  complicated  by  the  fact  that  2*p  might 

* not  fit  into  an  unsigned,  so  rather  than  if  (odd(x))  x = (x+p)/2, 

* we  do  if  (odd(x))  x = x/2  + p/2  + 1; 

* 

* TODO:  Do  the  double-sieving  by  sieving  the  larger  number,  and  then 

* just  subtract  one  from  the  remainder  to  get  the  other  parameter. 

* (bn-1)/2  is  divisible  by  an  odd  p iff  bn-1  is  divisible,  which  is 

* true  iff  bn  ==  1 mod  p.  This  requires  using  a step  size  of  4. 

*/ 

i nt 

s i e V e Bu i I d ( u n s i g n e d char  *array,  unsigned  size,  struct  BigNum  const  *bn, 
n unsigned  step,  unsigned  dbl) 

{ 

n unsigned  i,  j;n  /*  Loop  index  */ 

n unsigned  p;n  /*  Current  small  prime  */ 

n unsigned  s;n  /*  Where  to  start  operations  in  the  big  sieve  */ 

n unsigned  t;n  /*  Step  modulo  p,  the  current  prime  */ 

#ifdef  MSDOSn  /*  Use  dynamic  allocation  rather  than  on  the  stack  */ 
n unsigned  char  *small; 

# e I s e 

n unsigned  char  smallCSMALL]; 

#end  i f 

n pg p A s s e r t ( a r r a y ) ; 


#ifdef  HSDOS 

n small  = bn i HemA I I o c ( S H A LL) ; n /*  Which  allocator?  Not  secure.  */ 

a if(!small) 

a n return-1, -n  /*Failed*/ 

#end  i f 


n 

Q 

a 

a 

□ 

n 

a 

□ 

n 

Q 

n 

Q 

D 

□ 

□ 

□ 


/* 

* An  odd  step  is  a special  case,  since  we  must  sieve  by  2, 

* which  isn't  in  the  small  prime  array  and  has  a few  other 

* special  properties.  These  are: 

* - Since  the  numbers  are  stored  in  binary,  we  don't  need  to 

* use  bnHodQ  to  find  the  remainder. 

* - If  step  is  odd,  then  t = step  % 2 is  1,  which  allows 

* the  elimination  of  a lot  of  math.  Inverting  and  negating 

* t don't  change  it,  and  multiplying  s by  1 is  a no-op, 

* so  t isn't  actually  mentioned. 

* - Since  this  is  the  first  sieving,  instead  of  calling 

* sieveSingle,  we  can  just  use  memset  to  fill  the  array 

* with  0x55  or  0xAA.  Since  a 1 bit  means  possible  prime 

* (i.e.  NOT  divisible  by  2),  and  the  least  significant  bit 

* is  first,  if  bn  % 2 ==  0,  we  use  0xAA  (bit  0 = bn  is  NOT 

* prime),  while  if  bn  % 2 ==  1,  use  0x55. 
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* (If  step  is  even,  bn  must  be  odd,  so  fill  the  array  with  0xFF.) 

* - Any  doublings  need  not  be  considered,  since  2*bn+1  is  odd,  and 

* 2*step  is  even,  so  none  of  these  numbers  are  divisible  by  2. 

*/ 

if  (step  S 1)  { 

n s = bnLSWord(bn)  & 1; 

n mems e t ( a r r a y , 0xAA  >>  s,  size); 


else  { 


/*  Initialize  the  array  to  all  1 
me  ms e t ( a r r a y , 255,  size); 
pg p A s s e r t ( bn LS W o r d ( bn  ) S 1); 


/* 

* This  could  be  cached  between  calls  to  sieveBuild,  but 

* it's  really  not  worth  it;  sieveSmall  is  *very*  fast. 

* sieveSmall  returns  a sieve  of  odd  primes. 

*/ 

s i e V e S ma I I ( s ma I I , SHALL); 


/* 

* Okay,  now  sieve  via  the  primes  up  to  s s i z e* 1 6+S M A LLS T ART-1 , 

* obtained  from  the  small  table. 

*/ 

i = (smallC0D  & 1)  ? 0 : s i e v e S ea r c h ( sma I I , SHALL,  0); 
do  { 

n p = 2 * i + SHALLSTART; 


/* 

* Hodulo  is  usually  very  expensive,  but  step  is  usually 

* small,  so  this  conditional  is  worth  it. 

*/ 

t = (step  < p)  ? step  : step  % p; 
if  ( ! t ) { 
n / * 

n * Instead  of  pgpAssert  failing,  returning  all  zero 

* bits  is  the  "correct"  thing  to  do,  but  I think 

* that  the  caller  should  take  care  of  that 

* themselves  before  starting. 

*/ 

pg p A s s e r t ( bnHodQ ( bn , p)  !=  0); 
continue; 


n 
n 
n 
n 
n 

Q 
} 

/* 

* Get  inverse  of  step  mod  p.  0 < t < p,  and  p is  prime, 

* so  it  has  an  inverse  and  s i e veHod I n ve r t can't  return  0. 
*/ 

t = s i e veHod I n ve r t ( t , p); 
pgpAssert(t); 

/*  Negate  t,  so  now  t ==  -1/step  (mod  p)  */ 

t = P - t; 


/*  Now  get  the  bignum  modulo  the  prime.  */ 
s = bnHodQ(bn,  p); 


an/*  Hultiply  by  t,  the  negative  inverse  of  step  size  */ 
#if  UINT_HAX/0xf f f f < 0xffff 

n n s = ( u n s i g ned  ) ( ( ( u n s i g n ed  long)s  * t)  % p); 
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#e  L se 

n n s=(s*t)%p; 

#end i f 


B 

B 

/ * s is 

now  the  starting  bit  position,  so  sieve  */ 

B 

B 

s i e V e S i 

ngleCarray,  size,  s,  p); 

B 

B 

/ * Now 

do  the  double  sieves  as  desired.  */ 

B 

B 

for  ( j 

= 0;  j < dbl;  j++)  ( 

B 

B 

B 

/*  Halve  t modulo  p */ 

#if  UINT 

_MAX  < 

0x1 f f f f 

B 

B 

B 

t=(t&1)?p/2+t/2+1  : t/2; 

B 

B 

B 

/*  Add  t to  s,  modulo  p with  overflow  checks 

B 

B 

B 

s +=  t ; 

B 

B 

B 

if  (s>=p  II  s<t) 

B 

B 

B 

n s -=  p; 

//else 

B 

B 

B 

if  (t  & 1 ) 

B 

B 

B 

n t +=  p; 

B 

B 

B 

t /=  2; 

B 

B 

B 

/*  Add  t to  s,  modulo  p */ 

B 

B 

B 

s +=  t ; 

B 

B 

B 

if  ( s >=  p ) 

B 

B 

B 

a s -=  p; 

#end i f 

B 

B 

B 

s i e ve S i ng 1 e ( a r r ay , size,  s,  p); 

B 

B 

> 

*/ 


n n /*  And  find  the  next  prime  */ 

n > while  ((i  = sieveSearchCsmalL,  SMALL,  i))  !=  0); 


#ifdef  HSDOS 

b n i Mem F r e e ( sma L L , SMALL), 


n 

# end i f 
n return0;n 

> 


/*  Success  */ 


/* 

* Similar  to  the  above,  but  use  "step' 

* size  rather  than  a fixed  value  of  2, 

* other  than  2,  this  will  blow  up. 

* 


(which  must  be  even)  as  a step 
If  "step"  has  any  small  divisors 


* Returns  -1  on  out  of  memory  (MSDOS  only,  actually),  and  -2 

* if  step  is  found  to  be  non-prime. 

*/ 

i nt 

s i e veBu i I dB i g ( un s i gned  char  *array,  unsigned  size,  struct  BigNum  const  *bn, 
a struct  BigNum  const  *step,  unsigned  dbl) 

{ 

n unsigned  i,  j;n  /*  Loop  index  */ 

n unsigned  p;n  /*  Current  small  prime  */ 

n unsigned  s;n  /*  Where  to  start  operations  in  the  big  sieve  */ 

a unsigned  t;n  /*  step  modulo  p,  the  current  prime  */ 

#ifdef  HSDOSn  /*  Use  dynamic  allocation  rather  than  on  the  stack  */ 
n unsigned  char  *small; 

#e  I se 

n unsigned  char  smallCSMALLD; 

#endi f 
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n pg p As s e r t ( a r ray ) ; 


#ifdef  HSDOS 


□ 

a 

□ 

#endi f 

D 

□ 

n 

o 

n 

n 

n 

n 

D 

□ 

n 

□ 

□ 

a 

a 

a 

n 

n 

n 

n 

□ 

□ 

n 

D 

□ 

a 

n 

Q 


small  = bn i MemA I I oc ( SM A LL) ; n /*  Which  allocator?  Not  secure.  */ 
if  (Ismail) 

n return  -1;n  /*  Failed  */ 


/* 

* An  odd  step  is  a special  case,  since  we  must  sieve  by  2, 

* which  isn't  in  the  small  prime  array  and  has  a feu  other 

* special  properties.  These  are: 

* - Since  the  numbers  are  stored  in  binary,  we  don't  need  to 

* use  bnModQ  to  find  the  remainder. 

* - If  step  is  odd,  then  t = step  % 2 is  1,  which  allows 

* the  elimination  of  a lot  of  math.  Inverting  and  negating 

* t don't  change  it,  and  multiplying  s by  1 is  a no-op, 

* so  t isn't  actually  mentioned. 

* - Since  this  is  the  first  sieving,  instead  of  calling 

* sieveSingle,  we  can  just  use  memset  to  fill  the  array 

* with  0x55  or  0xAA.  Since  a 1 bit  means  possible  prime 

* (i.e.  NOT  divisible  by  2),  and  the  least  significant  bit 

* is  first,  if  bn  % 2 ==  0,  we  use  0xAA  (bit  0 = bn  i s NOT 

* prime),  while  i f bn  % 2 ==  1,  use  0x55. 

* (If  step  is  even,  bn  must  be  odd,  so  fill  the  array  with  0xFF.) 

* - Any  doublings  need  not  be  considered,  since  2*bn+1  is  odd,  and 

* 2*step  is  even,  so  none  of  these  numbers  are  divisible  by  2. 

*/ 


if  ( bnLS Wo r d ( s t ep ) & 1)  ( 
n s = bnLSWord(bn)  S 1; 

n mems e t ( a r r a y , 0xAA  >>  s,  size); 

} else  { 

n /*  Initialize  the  array  to  all  1's  */ 

n mems e t ( a r r a y , 255,  size); 

n pg p A s s e r t ( bn LS Wo r d ( b n ) S 1); 

> 


n / * 

n * This  could  be  cached  between  calls  to  sieveBuild,  but 

n * it's  really  not  worth  it;  sieveSmall  is  *very*  fast, 

n * sieveSmall  returns  a sieve  of  the  odd  primes, 

n */ 

a s i e ve Sma I I ( sma 1 1 , SMALL); 


□ 

/* 

D 

* 

Okay,  now  sieve  via  the  primes  up  to 

ssize*16+SHALLSTART 

n 

* 

obtained 

from  the  small  table. 

D 

*/ 

n 

1 = 

( sma 1 1 C03  S 

1)  ? 0 : s i e ve S ea r c h ( s ma 

ll,  SHALL,  0); 

n 

do 

{ 

n 

n 

P = 

2 * 

i + SMALLSTART; 

n 

n 

t = 

bnModOlstep,  p); 

n 

n 

i f 

(It) 

{ 

n 

n 

a 

pgpAs se r t ( bnModa ( bn , p) 

!=  0); 

Q 

n 

n 

cont i nue ; 

n 

n 

} 

n 

n 

/* 

Get 

negative  inverse  of  step 

*/ 
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n 

n 

t = s i e V e Hod  I n ve r t ( b n H odQ ( s t e p , 

P > / P ) ; 

Q 

n 

pgpAssert(t); 

n 

n 

t = p-t; 

□ 

n 

/*  Okay,  we  have  a prime  - get 

the  remainder 

Q 

□ 

s = bnModQCbn,  p); 

n 

D 

/*  Now  multiply  s by  the  negative  inverse  of 

#if  UINT_MAX  < 

0xffff  * 0xffff 

□ 

n 

s = ( u n s i g n e d ) ( ( ( u n s i g n e d long)s  * t)  % p); 

# e 1 s e 

n 

□ 

s=(s*t)%p; 

# e n d i f 

Q 

n 

/*  We  now  have  the  starting  bit 

po s * / 

n 

Q 

s i e V e S i ng 1 e ( a r r a y , size,  s,  p); 

□ 

n 

/*  Now  do  the  double  sieves  as 

desired.  */ 

n 

n 

for  (j  = 0;  j < dbl;  j++)  f 

□ 

n 

n /*  Halve  t modulo  p */ 

#if  UINT_MAX  < 

0x1 f f f f 

□ 

n 

n t = (t  8 1 ) ? p/2  + t/2 

+ 1 : t/2; 

□ 

n 

n /*  Add  t to  s,  modulo  p 

with  overflow 

u 

n 

a s + = t ; 

u 

n 

n if(s>=p||s<t) 

n 

n 

n n s -=  p; 

#e  L se 

n 

n 

n i f (t  8 1 ) 

□ 

o 

n n t +=  p; 

a 

n 

n t /=  2 ; 

n 

□ 

a /*  Add  t to  s,  modulo  p 

*/ 

□ 

n 

n s + = t ; 

□ 

n 

n i f ( s >=  p ) 

Q 

□ 

n n s -=  p; 

# e n d i f 

n 

n 

n s i e ve S i n g 1 e ( a r r a y , size 

s , p ) ; 

n 

Q 

> 

Q 

n 

/*  And  find  the  next  prime  */ 

D 

> while 

(Ci  = s i e ve S e a r c h ( s ma 1 1 , SHALL, 

i ) ) ! = 0 ) ; 

f def 

MSDOS 

n 

bniMemFreeCsmalL,  SMALL); 

#end  i f 

n 

return 

0;n  /*  Success  */ 
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/* 

* bnsieve.h  - Trial  division  for  prime  finding. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  generally  not  intended  for  direct  use  by  a user  of  the  Library; 

* the  bnprime.c  and  dhprime.c  functions,  are  more  Likely  to  be  used. 

* However,  a special  application  may  need  these. 

* 

* $Id:  bnsieve.h, V 1.3. 2.1  1997/06/07  09:49:42  mhw  Exp  $ 

*/ 

#ifdef  __cpLuspLus 
extern  "C"  { 

#endi f 

struct  BigNum; 

#ifndef  TYPE_BIGNUH 
^define  TYPE_BIGNUM  1 
typedef  struct  BigNum  BigNum; 

#endi f 

/*  Remove  multiples  of  a single  number  from  the  sieve  */ 

void  BNExport  s i e v e S i ng L e ( un s i g n ed  char  *array,  unsigned  size,  unsigned  start, 
n unsigned  step); 

/*  Build  a sieve  starting  at  the  number  and  incrementing  by  "step".  */ 
int  BNExport  s i e v eBu i L d ( un s i g n ed  char  *array,  unsigned  size, 
n struct  BigNum  const  *bn,  unsigned  step,  unsigned  dbl); 

/*  Similar,  but  uses  a >16-bit  step  size  */ 

int  BNExport  s i e veBu i L dB i g C un s i g n ed  char  *array,  unsigned  size, 
n struct  BigNum  const  *bn,  struct  BigNum  const  *step,  unsigned  dbl); 

/*  Return  the  next  bit  set  in  the  sieve  (or  0 on  failure)  */ 

unsigned  BNExport  s i e ve S ea r c h ( u n s i g n ed  char  const  *array,  unsigned  size, 

n unsigned  start); 

tfifdef  cpLusplus 

> 

#end i f 
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/* 

* bnsize00.h  - pick  the  correct  machine  word  size  to  use. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  CoLin  PLumb. 

* 

* $Id:  bnsize00.h,v  1.7. 4.1  1997/06/07  09:49:42  mhw  Exp  $ 

*/ 

#incLude  "bni.h"n  /*  Get  basic  information  */ 

#if  1BNSIZE64  &&  IBNSIZE32  &S  !BNSIZE16  S&  d e f i ne d ( BN WO R D 64 ) 

# if  defined(BNW0RD128)  ||  (defined(bniMuLAdd1_64)  SS  defined(bniMuLSub1_64)) 

# define  BNSIZE64  1 

U eLif  d e f i n ed ( mu L 64_p pmm ) | | d e f i n ed C mu L 6 4_ p pmma ) | | d e f i n e d ( mu L 64_ppmma a ) 

ft  define  BNSIZE64  1 
ft  e n d i f 
#end  i f 


#if  1BNSIZE64  &&  1BNSIZE32  SS  !BNSIZE16  &&  d e f i n e d ( BN  WO R D 32  ) 

ft  if  def  i ned  ( BNW0RD64  ) | | ( d e f i n ed  ( b n i Mu  L Ad  d 1 _3  2 ) &S  d e f i n e d ( bn  i Hu  L S u b 1 _32  ) ) 

ft  define  BNSIZE32  1 

ft  eLif  d e f i n e d ( mu  L 3 2_p  pmm ) | | de  f i n e d ( mu  L 32  _p  pmma  ) | | d e f i n e d ( mu  L 32  _ppmma  a ) 
ft  define  BNSIZE32  1 
ft  e n d i f 
Send  i f 


#if  !BNS1ZE64  SS  IBNS1ZE32  SS  IBNS1ZE16  SS  d e f i n ed ( BN  WO R D 1 6 > 

ft  if  def  i ned  ( BN  WORD32  ) ||  ( d e f i n e d ( bn  i Mu  L Add  1 _1  6 ) SS  d e f i ned  ( bn  i M u L S u b 1 _1  6 ) ) 

# define  BNSIZE16  1 

ft  eLif  de  f i ned  ( mu  L 1 6_ppmm ) ||  d e f i n e d ( mu  L 1 6_p  pmma  ) ||  d e f i n ed  ( mu  L 1 6_ppmma  a ) 
ft  define  BNSIZE16  1 
ft  end  i f 
Send i f 


Sif  IBNSIZE64  SS 


!BNS1ZE32  SS  IBNS1ZE16 


Serror  UnabLe  to 
Send i f 


find  a viabLe  word  size  to  compiLe  bignum 


Library. 
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/* 

* Lbn00.c  - auto-size-detecting  Lbn??.c  file. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  in  1995  by  CoLin  PLumb. 

* 

* $Id:  Lbn00.c,v  1.5. 4.1  1997/06/07  09:49:43  mhw  Exp  $ 

*/ 

#incLude  "bnsize00.h" 

#if  BNSIZE64 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "Lbn64.c'' 

#eLif  BNSIZE32 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "Lbn32.c" 

#eLse  /*  BNSIZE16  */ 

/*  IncLude  aLL  of  the  C source  fiLe  by  reference  */ 

#incLude  "Lbn16.c" 

#endi f 
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# 

ft 

it 

n 

it 

U 

it 


Lib/pgp/Makefi Le.in 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc. 
$Id:  Makef i Le  . i n,v  1.4. 2.1  1997/06/07  09:49:47  mhw 


ALL  rights  reserved. 
Exp  $ 


LIBDONE=heLper/DONE  c omp r e s s / D ON E hash/DONE 
n pubkey/DONE  pipe/LIBDONE  utiLs/DONE 
SUBDIRS=i nc Lude  heLper  compress  hash  cipher 
n keys  keydb 


cipher/DONE  random/DONE  \ 
keys/DONE  keydb/DONE 
random  pubkey  pipe  utiLs  \ 


INSTALLLIBS  = SCPGPLIB) 
LIBTARGET  = SCPGPLIB) 
LIBTDEPS  = LIBDONE 


aL  L : : SCPGPLIB) 


ve  ry-c  L ean : : 

n SCRM)  SCPGPLIB)  ../SCPGPLIB) 
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U 

tt  L i b / pg p / ma  ke  f i L e . ms  c 
U 

tt  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
tt 

tt  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2.1  1 997/06/07  09:49:48  mhw  Exp  $ 
tt 

lincLude  "makefiLe.in" 

aLL  check  cLean  depend  headers  instaLL  very-cLean:: 
n for  %d  in  ( $(SUBDIRS)  ) do  \ 

n D cd  %d  &S  $(MAKE)  /$( MAKE F LAG S ) /f  makefiLe.msc  $3  &&  cd  .. 
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U 

tf  Lib/pgp/cipher/HakefiLe.in 
# 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

U $Id:  Makef i Le . i n,v  1.10.2.4  1997/06/07  09:49:48  mhw  Exp  $ 

# 

0BJS=Q  pgpCFB.o  pgpCipher.o  pgpIDEA.o  pgpDES3.o  pgpCASTS.o 
SHAREDHDRS=  pgpCFB.h  pgpCipher.h 

a L L : : DONE 
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U 

# L i b / pg p / c i ph e r / ma ke f i L e . ms c 

n 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

n 

# $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1997/06/07  09:49:49  mhw  Exp  $ 

U 

PGPLIB  = n.  .\.  .\pgpLib.  Lib 


CFLAGS=-I . 

n -I 

-DHAVE_C0NFIG_H=1  $(DEBUG) 

a L L : : n □ 

Lib 

headers:n 

i n c L 

! i n c L u d e " 

ma  kef i L e . i n " 

1 n c L : 

n if 

n n 

n if 

B B 

not  "$(SHAREDHDRS)"==""  \ 

for  %f  in  ( $(SHAREDHDRS) 

not  "$(PRIVHDRS)"==""  \ 

for  %f  in  ( SCPRIVHDRS)  ) 

) do  copy  %i  . . \ \ \ i n c L ude 

do  copy  %f  . . \ . . \ i n c L u d e 

DOSOBJ  SX  = n 

DOSOBJ  S = n 

SCOBJS: .o=.obj ) 

$(D0S0BJSX:Unix=Win32) 

Lib:n  ${D0S0BJS) 

. c . ob  j : 

n $(CC)  SCCFLAGS)  -17  -c  $< 

c L ean : 

n de  L * . ob  j 

DONE  : 

n if  exist  $(PGPLIB)  L i b / ou t : $ ( PG P LI B ) $(PGPLIB)  SCDOSOBJS) 

n if  not  exist  $(PGPLIB)  L i b / ou t : $ ( PG P L I B ) $(DOSOBJS) 


Ci:CHK:3a3fb9ffe8558833aa7c4244d9770ddeee33f1154c87:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


271 


pgpCAST5.c 


/* 

* pgpCASTS.c  - C source  code  for  CAST  block  cipher,  version  5 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

■k 

* Subject  to  the  terms  and  conditions  set  forth  below.  Northern  Telecom 

* Limited,  to  the  extent  of  its  Legal  right  to  do  so,  hereby  grants  a 

* non-exclusive,  royalty  free  License  to  make,  have  made,  use,  sell  and 

* have  sold  products  incorporating  or  embodying  the  CAST  algorithm  as 

* described  herein. 


* DISCLAIMER  OF  ALL  WARRANTIES 

* 

* IN  NO  EVENT  SHALL  NORTHERN  TELECOM  LIMITED  OR  ANY  OF  ITS 

* SUBSIDIARIES  BE  LIABLE  TO  ANY  PARTY  FOR  DIRECT,  INDIRECT,  SPECIAL, 

* INCIDENTAL,  OR  CONSEQUENTIAL  DAMAGES  ARISING  OUT  OF  THE  GRANT  OF 

* RIGHTS  UNDER  THIS  LICENSE,  EVEN  IF  NORTHERN  TELECOM  OR  ANY  OF  ITS 

* SUBSIDIARIES  HAVE  BEEN  ADVISED  OF  THE  POSSIBILITY  OF  SUCH  DAMAGE. 

* USE  OF  ANY  OF  THE  RIGHTS  GRANTED  HEREUNDER  SHALL  BE  AT  LICENSEE'S 

* SOLE  RISK. 

* 

* NORTHERN  TELECOM  LIMITED  AND  ITS  SUBSIDIARIES  SPECIFICALLY 

* DISCLAIM  ANY  REPRESENTATIONS,  CONDITIONS,  OR  WARRANTIES, 

* INCLUDING,  BUT  NOT  LIMITED  TO,  ANY  IMPLIED  WARRANTIES  OF  NON- 

* INFRINGEMENT,  MERCHANTABILITY  OR  FITNESS  FOR  A PARTICULAR 

* PURPOSE.  WITHOUT  LIMITING  THE  GENERALITY  OF  THE  FOREGOING, 

* NOTHING  IN  THIS  LICENSE  SHALL  BE  CONSTRUED  AS: 

* 

* (A)n  A WARRANTY  OR  REPRESENTATION  AS  TO  THE  VALIDITY  OR  SCOPE  OF 

* ANY  PATENT  OR  ANY  RIGHTS  UNDER  ANY  OTHER  FORM  OF  INTELLECTUAL 

* PROPERTY  PROTECTION  (WHETHER  STATUTORY  OR  OTHERWISE); 

k 

* (B)n  A WARRANTY  OR  REPRESENTATION  THAT  ANY  MANUFACTURE,  SALE, 

* LEASE,  USE  OR  IMPORTATION  WILL  BE  FREE  FROM  INFRINGEMENT  OF  ANY 

* INTELLECTUAL  PROPERTY  RIGHTS  OTHER  THAN  THOSE  UNDER  WHICH  AND 

* TO  THE  EXTENT  TO  WHICH  LICENSES  ARE  IN  FORCE  HEREUNDER; 

* 

* (On  AN  OBLIGATION  TO  MAINTAIN  ANY  INTELLECTUAL  PROPERTY  RIGHTS 

* OR  TO  CONTINUE  TO  PROSECUTE  ANY  APPLICATION  IN  RESPECT  OF  ANY 

* INTELLECTUAL  PROPERTY  RIGHTS  IN  ANY  COUNTRY; 

* 

* (D)n  AN  OBLIGATION  TO  FURNISH  ANY  MANUFACTURING,  TECHNICAL  OR 

* CONFIDENTIAL  INFORMATION  OR  TO  PROVIDE  ANY  ASSISTANCE, 

* MAINTENANCE,  OR  SUPPORT  OF  ANY  KIND; 

* 

* (E)n  CONFERRING  ANY  RIGHT  TO  USE,  IN  ADVERTISING,  PUBLICITY  OR 

* OTHERWISE,  ANY  NAME,  TRADE  NAME  OR  TRADEMARK  (STATUTORY  OR 

* OTHERWISE),  OR  ANY  CONTRACTION,  ABBREVIATION  OR  SIMULATION 

* THEREOF  (EXCEPT  AS  SET  OUT  BELOW); 

* 

* (F)n  CONFERRING  BY  IMPLICATION,  ESTOPPEL  OR  OTHERWISE  ANY 

* LICENSE  OR  OTHER  RIGHT  UNDER  ANY  INTELLECTUAL  PROPERTY  RIGHT, 

* EXCEPT  THE  LICENSES  AND  RIGHTS  EXPRESSLY  GRANTED  HEREUNDER; 

* 

* (G)H  AN  OBLIGATION  TO  HAKE  ANY  DETERMINATION  AS  TO  THE 

* APPLICABILITY  OF  ANY  INTELLECTUAL  PROPERTY  RIGHT  TO  ANY  PRODUCT; 

* 
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* (H)n  CREATING  ANY  AGENCY,  PARTNERSHIP,  JOINT  VENTURE  OR  SIMILAR 

* RELATIONSHIP. 

* 

* THIS  LICENSE  IS  EXPRESSLY  SUBJECT  TO  ANY  LAWS,  REGULATIONS,  ORDERS 

* OR  OTHER  RESTRICTIONS  ON  THE  EXPORT  FROM  CANADA,  THE  UNITED 

* STATES  OR  ANY  OTHER  COUNTRY  OF  CRYPTOGRAPHIC  TECHNOLOGY.  THIS 

* LICENSE  SHALL  NOT  EXTEND  TO  ANY  SUBJECT  MATTER  COVERED 

* HEREUNDER  WHICH  IS  EXPORTED  WITHOUT  A PROPER  EXPORT  LICENSE  OR 

* APPROVAL. 

* 

* License  to  use  CAST  as  described  herein  is  subject  to  it  being 

* referred  to  in  any  i np L e me n t a t i o n thereof  (including  all  product  and 

* markteting  materials)  as  the  "Northern  Telecom  Ltd.,  CAST  Encryption 

* Algorithm".  The  name  of  Northern  Telecom  Limited  (including  its 

* subsidiaries)  shall  not  be  used  to  endorse  or  promote  products  without 

* the  specific  prior  written  consent  of  Northern  Telecom  Limited. 

* 

* 

* $Id:  pgpCAST5.c,v  1.4. 2.1  1997/06/07  09:49:49  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#end  i f 


#i nc  lude 
#i nc  lude 
#include 
#i nc lude 
^include 


pgpCipher.h" 
pgpCASTS . h" 
pgpCASTBoxS  . h 
pgpMem . h " 
pgpUsuals.h" 


/*  The  size  of  a scheduled  CASTS  key  */ 

^define  C AST5_KE Y WO R D S 32 

#define  CASTS  KEYBYTES  ( s i z eo f ( wo r d 3 2 ) * C A ST S_KE Y WO R D S ) 


/*  CAST  is  uniformly  big-endian 
^define  B0(x)  ((x)  >>  24  & 2SS) 
^define  BKx)  ((x)  » 16  & 2SS) 
^define  B2(x)  ((x)  >>  8 & 2SS) 
^define  B3(x)  ((x)  S 2SS) 


byte  access  macros  */ 


/*  Some  macros  used  in  the  key  scheduling  code  */ 


#d  e f i n e 

X0 

B0(x01 23) 

#def i ne 

Xl 

B1  (x01 23) 

#d  e f i n e 

x2 

B2(x0123) 

#def i ne 

x3 

B3(x01 23) 

#def i ne 

x4 

B0(x4S67) 

#d  e f i ne 

xS 

B1 (x4S67) 

#def i ne 

x6 

B2(x4S67) 

#d  e f i n e 

x7 

B3(x4S67) 

#def i ne 

x8 

B0(x89AB) 

#d  e f i n e 

x9 

B1 (x89AB) 

#d  e f i ne 

xA 

B2(x89AB) 

# d e f i n e 

xB 

B3(x89AB) 

//define 

xC 

B0(xCDEF) 

//define 

xD 

B1  (xCDEF) 

//define 

xE 

B2(xCDEF) 

//define 

xF 

B3(xCDEF) 
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#d  e f i n e 

Z0 

B0(z01 23) 

#def i ne 

z1 

B1  (Z0123) 

#d  e f i n e 

z2 

B2(z0123) 

#def i ne 

z3 

B3(z01 23) 

#d  e f i n e 

z 4 

B0(z4567) 

#def i ne 

z5 

B1 (z4567) 

# de  f i n e 

z 6 

B2(z4567) 

#def i ne 

z7 

B3Cz4567) 

#def i ne 

z8 

B0(z89AB) 

#d  e f i n e 

z9 

B1 (z89AB) 

#de  f i n e 

zA 

B2(z89AB) 

#d  e f i n e 

zB 

B3(z89AB) 

#d  e f i n e 

z C 

B0(zCDEF) 

#def i ne 

zD 

B1 (zCDEF) 

#d  e f i n e 

zE 

B2CzCDEF) 

#def i ne 

z F 

B3CzCDEF) 

/* 

* This  expands  a 128-bit  key  to  a 32-word  scheduled  key,  where  each  round 

* uses  two  words:  a 32-bit  XOR  mask  and  a 5-bit  rotate  amount.  Shorter  keys 

* are  just  padded  with  zeros,  and  if  they  are  80  bits  or  Less,  the  cipher 


is  reduced  to  12  rounds  (not  implemented  here). 


* The  feed-forward  used  with  x0123  through  yCDEF  prevent  any  weak  keys, 

* and  the  substitution  to  set  up  the  xkey  tables  ensure  that  the  subround 

* keys  are  not  easily  derivable  from  each  other,  so  Linear  cryptanalysis 

* won't  do  very  well  against  CAST. 

*/ 

static  void 

C AST5 s c h edu L e ( wo rd32  xkeyC323,  byte  const  *k) 

{ 

n word32  X0123,  x4567,  x89AB,  xCDEF; 

n word32  z0123,  z4567,  z89AB,  zCDEF; 

n inti; 


/*  Initialize  x0 1 2 34 56789 AB C D E F with  input  key  */ 

X01 23  = (word32 ) kC  0:«24  | (word32)kC  i:«16  | (word32)kC  2:«8  | kC  33; 

x4567  = (word32)k[  4:«24  | (word32)kC  5:«16  | (word32)k:  6:«8  | kC  73; 

x89AB  = (word32)k[  83<<24  | (word32)kC  93«16  | C wo  r d3  2 ) k C 1 0 3 <<8  | ki:i13; 

xCDEF=(word32)kC123<<24  | ( wo  r d32  ) k [ 1 3 3«1  6 | ( wo  r d 3 2 ) k C 1 4 3 <<8  | kC153; 


/*  Now  set  up  the  key  table  */ 


Q 

for  ( i 

= 0 ; i < 

4;  i++) 

{ 

n 

n 

Z0123  = 

X01  23 

A 

S5CxD3 

A 

S6[xF3 

A 

S7CxC3 

A 

S8CxE3 

A 

S7Cx83; 

□ 

n 

z4567  = 

x89AB 

A 

S5:z03 

A 

S6Cz23 

A 

S7:z1 3 

A 

S8[z33 

A 

S8:xA3; 

n 

□ 

z89AB  = 

xCDEF 

A 

S5:z73 

A 

S6[z63 

A 

S7Cz53 

A 

S8Cz43 

A 

S5Cx93; 

s 

n 

zCDEF  = 

x4567 

A 

S5CzA3 

A 

S6Cz93 

A 

S7CzB3 

A 

S8i:z83 

A 

S6CxB3; 

n 

D 

X0123  = 

z89AB 

A 

S5[z53 

A 

S6Cz73 

A 

S7[z43 

A 

S8Cz63 

A 

S7:z03; 

n 

n 

x4567  = 

Z01  23 

A 

S5Cx03 

A 

S6i;x23 

A 

S7Cx1 3 

A 

S8Cx33 

A 

S 8 : z 2 3 ; 

n 

n 

x89AB  = 

z4567 

A 

S5:x73 

A 

S6i;x63 

A 

S7Lx53 

A 

S8Cx43 

A 

S5:z1 3; 

u 

D 

xCDEF  = 

zCDEF 

A 

S5:xA3 

A 

S6Cx93 

A 

S7CxB3 

A 

S8i:x83 

A 

S6Cz33; 

n 

n 

switch 

( i ) C 

n 

n 

case 

0: 

n 

□ 

D 

/*  Masking  keys 

/ 

rounds 

0. 

.7  */ 

a 

□ 

D 

X key  C 

03 

= S5Cz83 

* S6[z93 

* S7:z73 

''  S8Cz63 

S5Cz 
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□ 

Q 

B 

xkeyC  21 

= 

S5CzA3  ^ S6CzB3 

* S7Cz53  ^ 

S8Cz43 

A 

S6Cz63; 

n 

n 

B 

xkeyC  411 

= 

S5CzC3  * S6CzD3 

^ S7Cz33  ^ 

S8Cz23 

A 

S7Cz93; 

n 

n 

B 

xkeyC  6] 

= 

S5CzE3  * S6CzF3 

* S7Cz13  '' 

S8CZ03 

A 

S 8 C z C 3 ; 

n 

n 

B 

n 

Q 

B 

xkeyC  8] 

= 

S5Cx33  * S6Cx23 

S7CxC3  ^ 

S 8 C X D 3 

A 

S 5 C X 8 3 ; 

a 

n 

B 

xkeyCI 0] 

= 

S5Cx13  * S6Cx03 

^ S7CxE3  ^ 

S8CxF3 

A 

S 6 C X D 3 ; 

a 

□ 

B 

xkeyCI 2: 

= 

S5Cx73  ^ S6Cx63 

^ S7Cx83  * 

S8Cx93 

A 

S7Cx33; 

n 

n 

B 

xkeyCI 43 

= 

S5Cx53  * S6Cx43 

^ S7CxA3  * 

S8CxB3 

A 

S8Cx73; 

n 

n 

B 

break; 

□ 

n 

case 

1 : 

n 

n 

B 

/*  Masking 

keys,  rounds  8. 

.15  */ 

n 

a 

B 

xkeyC16] 

= 

S5Cz33  * S6Cz23 

* S7CzC3 

S8CzD3 

A 

S5Cz93; 

n 

n 

B 

xkeyCI 83 

= 

S5Cz13  ^ S6Cz03 

S7CzE3  ^ 

S8CzF3 

A 

S6CzC3; 

n 

n 

B 

xkeyC20: 

= 

S5Cz73  * S6Cz63 

* S7Cz83  * 

S8Cz93 

A 

S7Cz23; 

□ 

n 

B 

xkeyC22: 

S5Cz53  ^ S6Cz43 

* S7CzA3  '' 

S8CzB3 

A 

S 8 C z 6 3 ; 

n 

n 

B 

n 

n 

B 

xkeyC24] 

= 

S5Cx83  ^ S6Cx93 

''  S7Cx73  ^ 

S8Cx63 

A 

S5Cx33; 

n 

Q 

B 

xkeyC26] 

= 

S5CxA3  * S6CxB3 

S7Cx53  * 

S8Cx43 

A 

S6Cx73; 

Q 

n 

B 

xkeyC28] 

= 

S5CxC3  ^ S6CxD3 

^ S7Cx33  ^ 

S8Cx23 

A 

S7Cx83; 

n 

n 

B 

xkeyC30Il 

= 

S5CxE3  * S6CxF3 

^ S7Cx13  * 

S8Cx03 

A 

S 8 C X D 3 ; 

Q 

n 

B 

break; 

n 

n 

case 

2 : 

n 

B 

B 

/*  Rotati on 

keys,  rounds  0 

. . 7 */ 

n 

B 

fl 

xkeyC  1 3 

= 

( S 5 C z 8 3 ^ S 6 C z 9 3 '' 

S7Cz73*S8Cz63*S5Cz23  ) 

S 

31; 

n 

B 

B 

xkeyC  33 

= 

{ S 5 C z A 3 '' S 6 C z B 3 * 

S7Cz53''S8Cz43''S6Cz63  ) 

& 

31; 

n 

B 

B 

xkeyC  53 

= 

(S5CzC3*S6CzD3^ 

S7Cz33*S8Cz23*S7Cz93 ) 

& 

31; 

n 

B 

B 

xkeyC  73 

= 

(S5CzE3^S6CzF3* 

S7Cz1 3^S8Cz03^S8CzC3 ) 

& 

31; 

n 

B 

B 

n 

B 

B 

xkeyC  93 

= 

(S5Cx33‘'S6Cx23* 

S7CxC3*S8CxD3^S5Cx83 ) 

& 

31; 

n 

B 

B 

xkeyCI 1 3 

= 

(S5Cx1 3*S6Cx03^ 

S 7 C X E 3 * S 8 C X F 3 * S 6 C X D 3 ) 

a 

31; 

n 

B 

B 

xkeyCI 33 

= 

(S5Cx73*S6Cx63* 

S7Cx83^S8Cx93^S7Cx33  ) 

a 

31; 

Q 

B 

B 

xkeyCI 53 

= 

(S5Cx53*S6Cx43* 

S7CxA3''S8CxB3*S8Cx73  ) 

a 

31; 

Q 

B 

fl 

break; 

n 

B 

case 

3: 

n 

B 

B 

/*  Rotation 

keys,  rounds  8 

..15  */ 

n 

B 

fl 

xkeyC173 

= 

(S5Cz33*S6Cz23'' 

S7CzC3*S8Cz 

D3*S5Cz' 

93  ) 

a 

31; 

n 

B 

B 

xkeyC193 

= 

(S5Cz1 3^S6Cz03* 

S7CzE3*S8CzF3*S6CzC3  ) 

a 

31; 

n 

B 

B 

xkeyC21 3 

= 

(S5Cz73''S6Cz63^ 

S7Cz83*S8Cz93^S7Cz23  ) 

a 

31; 

n 

B 

fl 

xkeyC233 

= 

( S 5 C z 5 3 ^ S 6 C z 4 3 '' 

S7CzA3''S8CzB3^S8Cz63) 

a 

31; 

s 

B 

fl 

xkeyC253 

= 

(S5Cx83*S6Cx93'' 

S7Cx73*S8Cx63''S5Cx33  ) 

a 

31; 

D 

B 

B 

xkeyC273 

= 

(S5CxA3^S6CxB3'' 

S7Cx53''S8Cx43*S6Cx73  ) 

a 

31; 

n 

B 

B 

xkeyC293 

= 

(S5CxC3''S6CxD3^ 

S7Cx33^S8Cx23^S7Cx83  ) 

a 

31; 

Q 

B 

fl 

xkeyC31 3 

= 

( S 5 C X E 3 S 6 C X F 3 ^ 

S7Cx1  3*S8Cx03''S8CxD3  ) 

a 

31; 

n 

B 

B 

break; 

Q 

n 

B 

> 

> 

n 

X0123 

= x4567  = 

x89AB  = : 

xCDEF  = 0; 

n 

\ 

Z0123 

= z4567  = 

z89AB  = : 

zCDEF  = 0; 

#undef  x0 
#undef  x1 
#undef  x2 
#undef  x3 
#undef  x4 
#undef  x5 
//undef  x6 
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# u nd  e f 

x7 

#undef 

x8 

#un  d e f 

x9 

#undef 

xA 

Sundef 

xB 

//undef 

xC 

//undef 

xD 

#undef 

xE 

//undef 

xF 

//undef 

z0 

#undef 

z1 

//undef 

z2 

//undef 

z3 

# u n d e f 

z 4 

//undef 

z5 

#unde  f 

z6 

//undef 

z7 

#undef 

z8 

//undef 

z9 

# un  d e f 

zA 

//undef 

zB 

//undef 

zC 

#undef 

zD 

//undef 

zE 

Sundef 

zF 

/*  Some 

macros 

//def  i ne 

RO  L ( X , r 

#i f def 

__GNUC 

#if  __i386__ 

/*  Redefine  usi 

//undef 

ROL 

//define 

R0L(x, r 

n ({unsigned  _y;n  \ 

a astn__("roL  %%cL,%0" 

#endif  /*  __i386__  */ 

#endif  /*  GNUC  */ 


c_y) 


..0. 


(x),  "c"  (r));  _y;>) 


#define  F1(x,xkey,i)  ( RO  L C C x key ) C 2 * ( i ) II  + (x),  ( x k ey  ) C 2 * ( i ) + 1 D ) ) 


#define  F2(x,xkey,i)  ( ROL( ( x key ) C 2* ( i ) D 
#define  F3(x,xkey,i)  ( RO L ( ( x key ) C 2 * ( i ) D 


(x),  (xkey ) :2*( i ) + 1 : ) ) 
(x),  (xkey) :2*( i ) + 1 : ) ) 


^define  GKx)  (((S1CB0(x):  * S2I:b1(x):)  - S3CB2(x):)  + S4:b3(x):) 

(/define  G2(x)  (((S1CB0(x):  - S2CB1(x):)  + S3CB2(x):)  ^ S4CB3(x):) 

//define  G3(x)  (((S1CB0(x):  + S2[:b1(x):)  * S3:b2(x):)  - S4:b3(x):) 

/* 

* Encrypt  the  8 bytes  at  *in  into  the  8 bytes  at  *out  using  the  expanded 

* key  schedule  from  *xkey. 

*/ 

static  void 

C A ST  5 e n c ry p t ( by t e const  *in,  byte  *out,  word32  const  *xkey) 

{ 

n word32  L,  r , t; 

n L = (uord32)inC0D<<24  | (word32)inC1D<<16  | (word32)inC2Il<<8  | inC33; 

n r = ( wo r d 3 2 ) i n C 4 3 <<2 4 | ( wo r d 3 2 ) i n C 5 3 << 1 6 | ( wo r d 3 2 ) i n C 6 3 <<8  | inC73; 
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n 

t 

= 

FI  ( r. 

xkey. 

0); 

L 

A — 

G 1 ( t ) ; 

Q 

t 

= 

F2(  L, 

X key  , 

1 ); 

r 

A — 

G 2 ( t ) ; 

n 

t 

= 

F3(  r. 

xkey. 

2); 

1 

A — 

G3(t  ); 

Q 

t 

= 

FI  ( L, 

xkey. 

3); 

r 

A — 

G 1 ( t ) ; 

o 

t 

= 

F2  ( r. 

xkey. 

4); 

L 

A — 

G2(t); 

n 

t 

= 

F3(  L, 

xkey. 

5); 

r 

A — 

G 3 ( t ) ; 

n 

t 

= 

FI  ( r. 

xkey. 

6); 

L 

A — 

G 1 ( t ) ; 

n 

t 

= 

F2(  L, 

xkey. 

7); 

r 

A _ 

G2(t); 

n 

t 

= 

F3(  r. 

xkey. 

8); 

1 

A — 

G3(t); 

n 

t 

= 

FI  ( L, 

xkey. 

9); 

r 

A ~ 

G1 (t); 

Q 

t 

= 

F2(r, 

xkey. 

10); 

L 

A — 

G2(t); 

n 

t 

= 

F3(  L, 

xkey. 

11); 

r 

A ^ 

G3(t); 

□ 

/* 

Stop  here  if 

only 

doing 

12  rounds 

□ 

t 

= 

FI  ( r. 

xkey. 

12); 

L 

A -- 

G 1 ( t ) ; 

n 

t 

= 

F2(  L, 

xkey. 

13); 

r 

A — 

G 2 ( t ) ; 

n 

t 

= 

F3(  r. 

xkey. 

14); 

L 

A . 

G3(t); 

n 

t 

= 

FI  ( L, 

xkey. 

15); 

r 

A — 

G 1 ( t ) ; 

n 

outC03 

= 

B0Cr); 

n 

outci : 

= 

B 1 ( r ) ; 

□ 

0UtC2: 

= 

B2(r); 

n 

outi:3: 

= 

B3(r); 

n 

out  C4D 

= 

B0(  L ); 

D 

outcs: 

= 

Bid); 

n 

ou  t [ 6 3 

= 

B2d); 

n 

outC7: 

= 

B3( L); 

} 

#if  0 

/*  Unused  at  present  */ 

/* 

* Decrypt  the  8 bytes  at  *in  into  the  8 bytes  at  *out  using  the  expanded 

* key  schedule  from  *xkey. 

*/ 

static  void 

C ASTSde c rypt ( by t e const  *in,  byte  *out,  word32  const  *xkey) 

{ 

n word32  L,  r , t; 

n r = ( wo  r d32  ) i n C 0 D <<24  | ( wo  r d32  ) i n C 1 3 <<1  6 | ( wo  r d 32  ) i n C 2 ] <<8  1 inC3Il; 

n L = (word32)inC4D<<24  | (word32)inC53<<16  | (word32)inn6]<<8  | inC73; 


D 

t 

= 

Fid, 

xkey. 

15);  r 

A — 

G1(t); 

n 

t 

= 

F3(  r. 

xkey. 

14);  L 

A _ 

G3(t); 

n 

t 

= 

F2d, 

xkey. 

13);  r 

A — 

G2(t); 

B 

t 

= 

FI  ( r. 

xkey. 

12);  1 

A ^ 

G 1 ( t ) ; 

B 

/ 

* 

Start 

here  i 

f only 

doing  12  rounds 

B 

t 

= 

F3d, 

xkey. 

11);  r 

A ~ 

G3(t); 

B 

t 

= 

F2(r, 

xkey. 

10);  1 

A » 

G2(t); 

B 

t 

= 

Fid, 

xkey. 

9);  r 

A _ 

G1 (t); 

B 

t 

= 

F3(  r. 

xkey. 

8);  1 

A — 

G3(t); 

B 

t 

= 

F2d, 

xkey. 

7);  r 

A — 

G2 ( t ) ; 

B 

t 

= 

FI  ( r. 

xkey. 

6) ; L 

A — 

G 1 ( t ) ; 

B 

t 

= 

F3d, 

xkey. 

5);  r 

A — 

G 3 ( t ) ; 

B 

t 

= 

F2(r, 

xkey. 

4);  L 

A — 

G2(t); 

B 

t 

= 

Fid, 

xkey. 

3);  r 

A — 

G 1 ( t ) ; 
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n 

t = F3(r 

, xkey. 

2);  L 

G3(t); 

□ 

t = F2C  L 

, xkey. 

1);  r 

*=  G2(t); 

n 

t = FI ( r 

, xkey. 

0);  L 

GlCt); 

n 

ou  t C 0 3 = 

B0( L ); 

n 

ou  t C 1 3 = 

B 1 ( L ) ; 

n 

0 u t C 2 D = 

B2(L),• 

a 

out  C33  = 

B3( L ) ; 

n 

ou  t C 4 3 = 

B0( r); 

n 

outC53  = 

Bl(r); 

n 

out  C63  = 

B2(r); 

a 

outC73  = 

B3Cr); 

} 

# e n d i f 

/* 

* Exported  functions 
*/ 

/*  Expand  16  byte  key  into  expanded  key  *priv  */ 
static  void 

c a s t 5 Key ( VO i d *priv,  byte  const  *key) 

{ 

n CAST5scheduLe((word32  *)priv,  key); 

} 

/*  Encrypt  8 bytes  at  *in  into  8 bytes  at  *out  using  key  sched  from  *priv  */ 
static  void 

ca s t 5 En c ry p t C VO i d *priv,  byte  const  *in,  byte  *out) 

{ 

n CASTSencryptCin,  out,  (uord32  *)priv); 

> 


/* 

* Do  one  64-bit  step  of  a Tandem  Davies-Heyer  hash  computation. 

* The  hash  buffer  is  32  bytes  Long  and  contains  H (0..7),  then  G C8..15), 

* then  16  bytes  of  scratch  space.  The  buf  is  8 bytes  Long. 

* xkey  is  a temporary  key  scheduLe  buffer. 

* This  and  the  extra  data  in  the  hash  buffer  are  aLLocated  by  the 

* caLLer  to  reduce  the  amount  of  b u f f e r- w i p i ng  we  have  to  do. 

* (It's  onLy  caLLed  from  ideaWash,  so  the  interface  can  be  a bit 

* speciaLized.) 

*/ 

static  void 

C A ST  5 S t e pT a nd emDM ( by t e *hash,  byte  const  *buf,  word32  *xkey) 

{ 

n inti; 

n /*  keyl  = G <<  64  + M,  remembering  that  CAST  is  big-endian  */ 

a memc py ( h a s h+1 6 , buf,  8); 

n CASTSscheduLeCxkey,  hash+8); 

n /*  W = E_key1(H),  key2  = M <<  64  + W */ 

n C A S T 5 e n c r y p t ( h a s h , hash+24,  xkey); 

B CASTSscheduLeCxkey,  hash+16); 

B /*  V = E_key2CG)  */ 

B CAST5encrypt(hash+8,  hash+16,  xkey); 
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n /*  H *=  W,  G *=  V */ 

n for  (i  = 0;  i < 8;  i++)  { 

n n hashCiD  hashCi+24]; 

n n hashCi+83  hashCi+16D; 

n > 

} 

/* 

* Munge  the  key  of  the  C i p h e r C o n t e x t based  on  the  supplied  bytes. 

* This  is  for  random-number  generation,  so  the  exact  technique  is 

* unimportant,  but  it  happens  to  use  the  current  key  as  the 

* IV  for  computing  a tandem  Davies-Heyer  hash  of  the  bytes, 

* and  uses  the  output  as  the  new  key. 

*/ 

static  void 


c a s t 5 Wa s h ( VO i d *priv,  byte  const  *buf,  unsigned  len) 

f 

n 

unsigned  i; 

n 

byte  hashC32]; 

Q 

word32  *xkey  = (word32  *)priv; 

Q 

/* 

Read  out  the  key  in  canonical  byte  order 

for 

the 

IV 

*/ 

Q 

for 

(i  = 0;  i < 8;  i++)  { 

XX 

D 

hash[2*i]  = ( by t e ) ( x key C i ]>>8  ) ; 

n 

n 

hashC2*i+1]  = (byte)xkeyCi]; 

n 

} 

Q 

/* 

Do  the  initial  blocks  of  the  hash  */ 

D 

i = 

len; 

n 

while  (i  >=  8)  { 

Q 

n 

C AST  5 S t e pTa ndemD M C h a s h , buf,  xkey); 

n 

xx 

buf  +=  8; 

D 

XX 

i -=  8; 

n 

> 

n 

/* 

n 

* 

At  the  end,  we  do  Da mga r d-He r k 1 e strengthening. 

just 

like 

XX 

* 

HD5  or  SHA.  Pad  with  0x80  then  0 bytes 

to  6 

mod 

8, 

then 

n 

* 

add  the  length.  We  use  a 16-bit  length 

i n by t es 

instead 

n 

★ 

of  a 64-bit  length  in  bits,  but  that  is 

cryptographi 

ca  1 ly 

n 

•k 

irrelevant. 

xx 

*/ 

XX 

/* 

Do  the  first  partial  block  - i <=  7 */ 

XX 

memcpy ( ha s h+24,  buf,  i); 

XX 

hashC24  + i++]  = 0x80; 

Q 

i f 

(i  > 6)  { 

XX 

n 

mems e t ( h a s h+2 4+ i , 0,  8-i); 

n 

n 

CASTSStepTandemDMChash,  hash+24,  xkey); 

n 

D 

i = 0; 

n 

> 

n 

mems e t ( h a s h+2 4+ i , 0,  6-i); 

n 

hash[30]  = (byte)(len  >>  8); 

n 

hashC31]  = (byte)len; 

n 

CASTSStepTandemDHChash,  hash+24,  xkey); 

XX 

/* 

Re-schedule  the  key  */ 

XX 

CASTSscheduleCxkey,  hash); 

n memsetChash,  0,  s i z e o f ( h a s h ) ) ; 
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} 


/* 

* Define  a struct  Cipher  for  the  generic  cipher.  This  is  the 

* real  exported  thing  — everything  else  can  be  static,  since 

* is  referenced  through  function  pointers! 

*/ 


Struct 

PgpCi pher  const  ci 

pherCASTS 

= { 

□ 

"CASTS", 

c 

PGP_CIPHER_CAST5, 

n 

8 , n n n 

/* 

Blocksize  */ 

n 

1 6,n  n n 

/* 

Keysize  */ 

n 

CAST5_KEYBYTES,nn 

n 

□ 

n 

aLignof(word32), 

n 

castSKey, 

□ 

castSEncrypt, 

n 

castSWash 

/*  Priv  array 


>; 
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/* 

* pgpCASTS.h  - header  file  for  pgpCASTS.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpCASTS.h, V 1.2. 2.1  1 997/06/07  09:49:50  mhw  Exp  $ 

*/ 

#ifndef  PGPCASTS.H 
^define  PGPCASTS.H 

#incLude  "pgpCipher.h"n  n /*  for  struct  Cipher  */ 

#ifdef  cpLuspLus 

extern  "C"  C 
# e n d i f 

/* 

* This  is  the  definition  of  the  CASTS  cipher,  for  use  with  the 

* PGP  Generic  Cipher  code. 

*/ 

extern  struct  PgpCipher  const  cipherCASTS; 

#ifdef  ..cpLuspLus 

> 

#endi f 

#endif  /*  IPGPCASTS.H  */ 
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/* 

* pg p C A STBO X 5 . h - S-boxes  for  CASTS  cipher 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpCASTBoxS . h, V 1.2. 2.1  1997/06/07  09:49:50  mhu  Exp  $ 

*/ 

#ifndef  PGPC ASTB0X5_H 
^define  PGPC ASTB0X5_H 

#ifdef  __cpLuspLus 
extern  "C"  f 
#end i f 


/* 

* The  new  CASTS  S-boxes,  each  mapping  8 input  bits  to  32  output  bits. 

* These  boxes  are  at  the  heart  of  CAST's  security.  Random  boxes 

* wouLd  not  do  nearly  as  weLL! 

*/ 


s t a t i c 

word32  const 

Si:256]  = C 

□ 

0x30fb40d4, 

0x9fa0ff0b, 

0x6beccd2f, 

0x3f 258c7a, 

0x1 e21 3f 2f , 

0x9c004dd3 

□ 

0x6003e540, 

0xcf 9f c949. 

0xbf d4af 27, 

0x88bbbdb5, 

0xe2034090, 

0x98d09675 

n 

0x6e63a0e0, 

0x1 5c361 d2. 

0xc2e7661d, 

0x22d4f f 8e, 

0x28683b6f , 

0xc07f d059 

n 

0xf f 2379c8, 

0x775f 50e2, 

0x43c340d3, 

0xdf2f8656, 

0x887ca41a, 

0xa2d2bd2d 

n 

0xa 1 c9e0d6. 

0x346c481 9, 

0x61 b76d87. 

0x22540f 2f , 

0x2abe32e1 , 

0xaa54166b 

n 

0x22568e3a, 

0xa2d341 d0. 

0x66db40c8, 

0xa784392f  , 

0x004df f 2f , 

0x2db9d2de 

n 

0x97943f ac. 

0x4a97c1 d8. 

0x527644b7, 

0xb5f 437a7, 

0xb82cbaef , 

0xd751 d1 59 

n 

0x6ff7f0ed, 

0x5a097a1 f. 

0x827b68d0, 

0x90ecf52e, 

0x22b0c054, 

0xbc8e5935 

n 

0x4b6d2f 7f , 

0x50bb64a2, 

0xd266491 0, 

0xbee581 2d, 

0xb7332290, 

0xe93b1 59f 

□ 

0xb48ee41 1 , 

0x4bf f 345d, 

0xfd45c240, 

0xad31 973f , 

0xc4f6d02e, 

0x55f c81 65 

n 

0xd5b1 caad. 

0xa1 ac2dae. 

0xa2d4b76d, 

0xc1 9b0c50, 

0x882240f 2, 

0x0c6e4f38 

n 

0xa4e4bf d7. 

0x4f 5ba272, 

0x564c1 d2f , 

0xc59c5319, 

0xb949e354, 

0xb04669fe 

□ 

0xb1b6ab8a, 

0xc71358dd, 

0x6385c545, 

0x1 1 0f 935d, 

0x57538ad5, 

0x6a390493 

n 

0xe63d37  e0. 

0x2a54f 6b3, 

0x3a787d5f , 

0x6276a0b5, 

0x19a6fcdf, 

0x7a42206a 

n 

0x29f 9d4d5, 

0xf 61b1891 , 

0xbb72275e, 

0xaa508167, 

0x38901091 , 

0xc6b505eb 

n 

0x84c7cb8c, 

0x2ad75a0f , 

0x874a1 427, 

0xa2d1 936b, 

0x2ad286af, 

0xaa  56d291 

n 

0xd7894360, 

0x425c750d, 

0x93b39e26, 

0x187184c9, 

0x6c00b32d, 

0x73e2bb1 4 

n 

0xa0bebc3c, 

0x54623779, 

0x64459eab, 

0x3f328b82, 

0x771 8cf 82, 

0x59a2cea6 

n 

0x04ee002e, 

0x89fe78e6, 

0x3fab0950, 

0x325f f 6c2, 

0x81 383f 05, 

0x6963c5c8 

n 

0x76cb5ad6, 

0xd49974c9, 

0xca1 80dcf , 

0x380782d5, 

0xc7fa5cf6, 

0x8ac31 51 1 

s 

0x35e79e1 3, 

0x47da91 d0. 

0xf 40f 9086, 

0xa7e2419e, 

0x31366241 , 

0x051 ef 495 

a 

0xaa573b04, 

0x4a805d8d, 

0x548300d0, 

0x00322a3c, 

0xbf 64cddf , 

0xba57a68e 

n 

0x75c6372b, 

0x50a  f d341 , 

0xa7c13275, 

0x91 5a0bf 5, 

0x6b54bfab, 

0x2b0b1 426 

n 

0xab4cc9d7, 

0x449c  cd82. 

0xf 7f bf 265, 

0xab85c5f 3, 

0x1 b55db94. 

0xaad4e324 

n 

0xcfa4bd3f, 

0x2deaa3e2, 

0x9e204d02, 

0xc8bd25ac, 

0xeadf 55b3, 

0xd5bd9e98 

□ 

0xe31 231 b2. 

0x2ad5ad6c, 

0x954329de, 

0xadbe4528, 

0xd871 0f 69, 

0xaa51 c90f 

□ 

0xaa786bf 6, 

0x22513f1e, 

0xaa51 a79b. 

0x2ad344cc, 

0x7b5a41 f 0, 

0xd37cfbad 

□ 

0x1 b069505. 

0x41ece491, 

0xb4c332e6, 

0x032268d4, 

0xc9600acc, 

0xce387  e6d 

n 

0xbf6bb16c, 

0x6a70f b78. 

0x0d03d9c9, 

0xd4df 39de, 

0xe01063da, 

0x4736f 464 

n 

0x5ad328d8, 

0xb347cc96, 

0x75bb0f  c3. 

0x9851 1 bfb. 

0x4f f bcc35. 

0xb58bcf6a 

D 

0xe11f0abc, 

0xbf cSf e4a. 

0xa70aec1 0, 

0xac39570a, 

0x3f 04442f , 

0x61 88b1 53 

n 

0xe0397a2e, 

0x5727cb79, 

0x9ceb41 8f  , 

0x1 cacd68d. 

0x2ad37  c96. 

0x01 75cb9d 

n 

0xc69df f 09, 

0xc75b65f0, 

0xd9db40d8, 

0xec0e7779, 

0x4744ead4, 

0xb1 1 c3274 

n 

0xdd24cb9e, 

0x7e1 c54bd. 

0xf 01 1 44f 9, 

0xd2240eb1  , 

0x9675b3f d. 

0xa3a  c375  5 
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n 

0xd47 c27a  f , 

0x51 c85f 4d, 

0x56907596, 

0xa5bb1 566, 

0x580304f 0, 

0xca042cf 1 

n 

0x01 1 a37ea , 

0x8dbf aadb. 

0x35ba364a, 

0x3526ffa0, 

0xc37b4d09, 

0xbc3066d9 

n 

0x98a52666, 

0x5648f 725, 

0xff56569d, 

0x0c6d63d0, 

0x7c63b2cf, 

0x700b45e1 

n 

0xd5ea50f1 , 

0x85a92872, 

0xaf1 fbda7. 

0xd4234870, 

0xa7870bf 3, 

0x2d3b4d79 

n 

0x42604198, 

0x0cd06d67, 

0x26470db8, 

0xf 881 81 4c, 

0x474d6ad7, 

0x7c0c5e5c 

n 

0xd1 231 959, 

0x381 b7298. 

0xf5d2f4db, 

0xab838653, 

0x662f 1 623, 

0x8371 9c96 

□ 

0xbd91 6046, 

0x9a564566, 

0xdc39200c, 

0x20c8c571 , 

0x962bda 1c, 

0x6l 6696ff 

Q 

0xb141ab08, 

0x7cca89b9, 

0x1a696783, 

0x02  0 c4843. 

0xa2f7c579, 

0x4296f 47d 

a 

0x427b169c, 

0x5a  c9f 049, 

0xdd8f 0f 00, 

0x5c81 65bf 

>; 

static 

word32  const 

52:256:  = { 

n 

0x1 f 201 094, 

0x6f 0ba75b, 

0x6963cf76, 

0x393f4380, 

0xf661 cf7a. 

0x66c5207a 

n 

0x55889c94, 

0x72fc0651 , 

0xada7ef 79, 

0x461 d7235. 

0xd55a63c6, 

0xd60436ba 

Q 

0x99c4306f , 

0x5f 000794, 

0x1 8dcdb7d, 

0xa1d66ff3, 

0xa0b52f7b, 

0x59683605 

ta 

0X661 5b094, 

0x69f f d909. 

0xdc440086, 

0x6f 944459, 

0xba83ccb3, 

0x60c3cdfb 

n 

0xd1 da41 81 , 

0x3b092ab1 , 

0xf 997f 1 cl , 

0xa566cf7b, 

0x01 420ddb, 

0x64e76f5b 

□ 

0x25a1 f f 41  , 

0x6l 80f 806, 

0x1 f c41 080, 

0x1 79b667a, 

0xd37a  c6a9. 

0xf65830a4 

n 

0x98d68b7f , 

0x77683f46, 

0x79929269, 

0x24fa9f7b, 

0x6l13c85b, 

0xacc40083 

a 

0xd7503525, 

0xf76a615f, 

0x621431 54, 

0x0d554b63, 

0x5d681 121, 

0xc866c359 

n 

0x3d63cf 73, 

0xc66234c0, 

0xd4d87687, 

0x5c672b21 , 

0x071 f 61 81 , 

0x39f 7627f 

n 

0x36163084, 

0x646b573b, 

0x602f64a4, 

0xd63acd9c, 

0x1 bbc4635. 

0x9681 032d 

n 

0x2701 f 500, 

0x99847ab4, 

0xa063df 79, 

0xba6cf38c, 

0x10843094, 

0x2537a956 

n 

0xf 46f 6f f 6, 

0xa1 f f 3b1 f , 

0x208cfb6a, 

0x8f 458c74, 

0xd960a227, 

0x4ec73a34 

Q 

0xf c884f 69, 

0x3e4d68df, 

0X6f060088, 

0x3559648d, 

0x8a45388c, 

0x1 d804366 

D 

0x721d9bfd, 

0xa58684bb, 

0X68256333, 

0x84468212, 

0x1 28d8098, 

0xf 6d33f b4 

n 

0xce280ae1  , 

0x276l9ba5, 

0xd5a6c252, 

0x649754bd, 

0xc5d655dd, 

0x6b667064 

n 

0x77840b4d, 

0xa1 b6a801 , 

0x84db26a9, 

0x60b56714, 

0x21 f 043b7, 

0x65d05860 

n 

0x54f 03084, 

0x066ff472, 

0xa31aa153, 

0xdadc4755, 

0xb5625dbf , 

0x68561 b66 

n 

0x83ca6b94, 

0x2d66d23b, 

0x6ccf01db, 

0xa6d3d0ba, 

0xb6803d5c, 

0xaf77a709 

Q 

0x33b4a34c, 

0x397bc8d6, 

0x56622b95, 

0x5f 065304, 

0x81 6d6f 61 , 

0x20674364 

n 

0xb456l 378, 

0xd6l 8639b, 

0x881  cal  22, 

0xb96726d1 , 

0x8049a768, 

0x22b7da7b 

□ 

0x56552d25, 

0x5272d237, 

0x79d2951 0, 

0xc60d894c, 

0x488cb402, 

0x1ba4f65b 

n 

0xa4b09f 6b, 

0x1 ca81 5cf  , 

0xa20c3005, 

0x8871 df 63, 

0xb9d62fcb, 

0x0cc6c9e9 

n 

0x0beef f 53, 

0x63214517, 

0xb4542835, 

0x9f 63293c, 

0X6641 6729, 

0x66ld2d7c 

n 

0x50045286, 

0x1 66685f 3, 

0xf 33401 c6. 

0x30a22c95, 

0x31 a70850. 

0x60930f13 

n 

0x73f 9841 7, 

0xa1 269859, 

0x6c645c44, 

0x52c877a9, 

0xcdf f 33a6, 

0xa02b1 741 

n 0x7cbad9a2,  0x2180036f,  0x50d99c08,  0xcb3f4861,  0xc26bd765,  0x64a3f6ab, 

n 0x80342676,  0x25a75e7b,  0xe4e6d1fc,  0x20c710e6,  0xcdf0b680,  0x17844d3b, 

n 0x31eef84d,  0x7e0824e4,  0x2ccb49eb,  0x846a3bae,  0x8ff77888,  0xee5d60f6, 

n 0x7af75673,  0x2fdd5cdb,  0xa11631c1,  0x30f66f43,  0xb3faec54,  0x157fd7fa, 

n 0x6^857900,  0xd152de58,  0xdb2ffd5e,  0x8f32oe19,  0x306af97a,  0x02f03ef8, 

n 0x99319ad5,  0xo242fa0f,  0xa7e3ebb0,  0xo68e4906,  0xb8da230o,  0x80823028, 

n 0xdodef3o8,  0xd35fb171,  0x088a1bo8,  0xbeo0o560,  0x61a3o9e8,  0xboa8f54d, 

n 0xo72feffa,  0x22822e99,  0x82o570b4,  0xd8d94e89,  0x8b1o34bo,  0x301e16e6, 

n 0x273be979,  0xb0ffeaa6,  0x61d9b8o6,  0x00b24869,  0xb7ffoe3f,  0x08do283b, 

n 0x43daf65a,  0xf7e19798,  0x7619b72f,  0x8f1o9ba4,  0xdo8637a0,  0x16a7d3b1, 

n 0x9fo393b7,  0xa7136eeb,  0xo6boo63e,  0x1a513742,  0xef6828bo,  0x520365d6, 

n 0x2d6a77ab,  0x3527ed4b,  0x821fd216,  0x095o6e2e,  0xdb92f2-fb,  0x5eea29ob, 

n 0x145892f5,  0x91584f7f,  0x5483697b,  0x2667a8oo,  0x85196048,  0x8o4baoea, 

n 0x833860d4,  0x0d23e0f9,  0x6o387e8a,  0x0ae6d249,  0xb284600o,  0xd835731d, 

n 0xdob1o647,  0xao4o56ea,  0x3ebd81b3,  0x230eabb0,  0x6438bo87,  0xf0b5b1fa, 

n 0x8f5ea2b3,  0xfo184642,  0x0a036b7a,  0x4fb089bd,  0x649da589,  0xa345415e, 

n 0x5o038323,  0x3e5d3bb9,  0x43d79572,  0x7e6dd07o,  0x06dfdf1e,  0x6o6oo4ef, 

n 0x7160a539,  0x73bfbe70,  0x83877605,  0x4523eof1  >; 

statio  word32  oonst  S3C256II  = { 

n 0x8defo240,  0x25fa5d9f,  0xeb903dbf,  0xe810o907,  0x47607fff,  0x369fe44b, 

n 0x8o1fo644,  0xaeoeoa90,  0xbeb1f9bf,  0xeefboaea,  0xe8of1950,  0x51df07ae, 
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□ 

0x920e8806, 

0xf 0ad0548, 

0xe1 3c8d83, 

0x92701 0d5, 

0x11 1 07d9f , 

0x07647db9, 

Q 

0xb2e3e4d4, 

0x3d4f 285e, 

0xb9afa820, 

0xfad68260, 

0xa067268b, 

0x82727926, 

n 

0x553f b2c0. 

0x489ae22b, 

0xd4ef9794, 

0x1 2563fbc, 

0x21 f f f C66, 

0x825b1 bf d. 

n 

0x9255c5ed, 

0x1 257a240, 

0x4e1 a8302. 

0xba607f f f , 

0x52824667, 

0x86571406, 

□ 

0x3373f 7bf  , 

0x8c9f 81 88, 

0xa6fc4ee8, 

0xc982b5a5, 

0xa8c01db7, 

0x579f c264. 

n 

0x67094f 31 , 

0xf 2bd3f 5f , 

0x40fff7c1 , 

0x1 f b78df c. 

0x866bd2c1 , 

0x437b659b, 

u 

0x99b03dbf , 

0xb5dbc64b, 

0x638dc0e6, 

0x5581 9d99, 

0xa197c81c, 

0x4a01 2d66, 

a 

0xc5884a28, 

0xccc36f71 , 

0xb843c21 3, 

0x6c0743f 1 , 

0x8309893c, 

0x0f 6ddd5f  , 

u 

0x2f7fe850, 

0xd7c07f7e, 

0x02507fbf, 

0x5afb9a04, 

0xa747d2d0, 

0x16511 926, 

u 

0xaf70bf3e, 

0x58c31 380, 

0x5f 983026, 

0x727cc3c4, 

0x0a0f b402. 

0x0f 7f 6f 82, 

n 

0x8c96fdad, 

0x5d2c2aae, 

0x86699a49, 

0x50da88b8, 

0x8427f 4a0, 

0x1 6ac5790, 

□ 

0x796f b449. 

0x8252dc1 5, 

0x6fbd7d9b, 

0xa672597d, 

0xada840d8, 

0x45f 54504, 

n 

0xf a5d7403. 

0xe83ec305, 

0x4f 91 751  a. 

0x925669c2, 

0x236f6941 , 

0xa903f126, 

n 

0x60270df 2, 

0x0276e4b6, 

0x94f d6574. 

0x927985b2, 

0x8276dbcb, 

0x02778176, 

n 

0xf 8af 91 8d, 

0x4e48f79e, 

0x8f 61 6ddf , 

0x629d8406, 

0x842f 7d83, 

0x340c65c8, 

n 

0x96bbb682, 

0x93b4b1 48, 

0x6f303cab, 

0x984f af 28, 

0x779f af 9b, 

0x92dc560d, 

n 

0x224d1 e20. 

0x8437aa88, 

0x7d29dc96, 

0x2756d3dc, 

0x8b907c6e, 

0xb51 f d240. 

n 

0xe7c07ce3, 

0xe566b4a1 , 

0xc36961 56, 

0x3cf 8209d, 

0x6094d1 63, 

0xcd9ca341 , 

n 

0x5c76460e, 

0x00ea983b, 

0xd4d67881 , 

0xf d47572c. 

0xf76cedd9, 

0xbda8229c, 

n 

0x1 27dadaa, 

0x438a074e, 

0x1 f 97C090, 

0x081 bdb8a. 

0x93a076b6, 

0xb938ca1 5, 

£t 

0x97b03cff, 

0x3dc2c0f8, 

0x8d1ab26c, 

0x64380651  , 

0x68cc7bfb, 

0xd90f 2788, 

n 

0x1  24901  81  , 

0x5de5f f d4. 

0xdd76f 86a, 

0x76a2621 4, 

0xb9a40368, 

0x925d958f , 

a 

0x4b39f f f a. 

0xba39aee9, 

0xa4ffd30b, 

0xfaf 7933b, 

0x6d498623, 

0x1 93cbcf a. 

n 

0x27627545, 

0x825cf 47a, 

0x61 bd8ba0. 

0xd1 1 642d1 , 

0xc6ad04f 4, 

0x1276a392, 

n 

0x1 0428db7, 

0x8272a972, 

0x9270c4a8, 

0x1 27d650b, 

0x285ba1 c8. 

0x3c62f 44f , 

n 

0x35c0eaa5, 

0xe805d231  , 

0x428929f b. 

0xb4f cdf 82, 

0x4f b66a53. 

0x067dc1 5b, 

n 

0x1 f081 fab. 

0x1 0861 8ae, 

0xfcfd086d, 

0xf 9f f 2889, 

0x694bcc1 1 , 

0x236a5cae, 

n 

0x1 2deca4d, 

0x2c3f8cc5, 

0xd2d02df 6, 

0xf 86f 5896, 

0x64cf 52da, 

0x951 55b67, 

□ 

0x494a488c, 

0xb9b6a80c, 

0x5c8f 82bc, 

0x89d36b45, 

0x3a609437, 

0x6c00c9a9, 

a 

0x44715253, 

0x0a874b49, 

0xd773bc40, 

0x7  c34671  c , 

0x0271 76f 6, 

0x4f 6b5536, 

n 

0xa2d02f f f , 

0xd2bf 60c4, 

0xd43f 03c0, 

0x50b46f6d, 

0x07478cd1 , 

0x00661888, 

n 

0xa2e53f 55, 

0xb9e6d4bc, 

0xa204801 6, 

0x97573833, 

0xd7207d67, 

0xde0f 8f 3d, 

n 

0x72f 87b33, 

0xabcc4f33, 

0x7688c55d, 

0x7b00a6b0, 

0x947b0001 , 

0x570075d2, 

Q 

0xf 9bb88f 8, 

0x894201 9e, 

0x4264a5f f , 

0x85630260, 

0x72dbd92b, 

0X66971 b69. 

n 

0x6ea22fde, 

0x5f08ae2b, 

0xaf7a616d, 

0x65c98767, 

0xcf 1 f 6bd2, 

0x61 6f c8c2. 

n 

0xf1ac2571  , 

0xcc8239c2, 

0x6721 4cb8, 

0xb1 6583d1 , 

0xb7dc3662, 

0x7f10bdc6, 

n 

0xf 90a5c38, 

0x0ff 0443d, 

0x60666dc6, 

0x60543a49, 

0x5727c148, 

0x2b698a Id, 

a 

0x8ab41738, 

0x20e1 be24. 

0xaf 96da0f , 

0x68458425, 

0x99833b65, 

0x600d457d, 

n 

0x282f 9350, 

0x8334b362, 

0xd91 d1 120, 

0x2b6d8da0, 

0x642b1 631 , 

0x9c305a00, 

n 

0x52bce688, 

0x1 b03588a. 

0xf 7ba6f d5. 

0x4142ed9c, 

0xa431 5c1 1 , 

0x833236c5, 

n 

0xdf ef 4636, 

0xa1 33c501 , 

0x69d3531 c. 

0X66353783  3 

static 

word32  const 

54:2563  = { 

n 

0x9db30420, 

0x1 fb6e9de. 

0xa7b67b6f , 

0xd273a298, 

0x4a4f 7bdb, 

0x64ad8c57, 

n 

0x85510443, 

0xfa020ed1  , 

0x76287aff, 

0x660fb663, 

0x095f35a1 , 

0x796bf 120, 

n 

0xf d059d43. 

0x6497b7b1 , 

0xf 3641 f 63, 

0x24l64adf, 

0x28147f 5f , 

0x4f a2b8cd. 

u 

0xc9430040, 

0x0cc32220, 

0xf dd30b30. 

0xc0a5374f , 

0x1d2d00d9, 

0x24147b15, 

a 

0xee4d1 11a, 

0x0f ca51 67, 

0x71 ff904c. 

0x2d1 95f f 6, 

0x1a05645f, 

0X0c13f6f6, 

n 

0x081b08ca, 

0x05170121, 

0x80530100, 

0X683656f 6, 

0xac9af4f8, 

0x7f 672701 , 

a 

0xd2b8ee5f, 

0x06df 4261 , 

0xbb969b8a , 

0x72936a25, 

0xc684ffdf, 

0xf 571 8801 , 

a 

0x3dd64b04, 

0xa26f 263b, 

0x76d48400, 

0x54766b66, 

0x446d4ca0, 

0x6cf3d6f5, 

n 

0x2649abdf , 

0xaea0c7f5, 

0x36338cc1 , 

0x503f 7693, 

0xd3772061 , 

0x1 1 b6386l , 

n 

0x72500603, 

0xf80eb2bb, 

0xabe05026, 

0x6c8d77de, 

0x57971 681 , 

0x6l4f6746, 

n 

0XC9335400, 

0x692031 8f, 

0x081 dbb99. 

0xf f c304a5. 

0x4d351 805, 

0x7f 3d5c63, 

n 

0xa6c866c6, 

0x5d5bcca9, 

0xda6c6f 6a, 

0x9f 926f 91 , 

0x9f 46222f , 

0x3991 467d, 

Q 

0xa5bf6d8e, 

0x1 1 43c44f , 

0x43958302, 

0xd021 466b, 

0x022083b8, 

0x3fb6180c, 

n 

0x18f8931e, 

0x281 658e6, 

0x26486636, 

0x8bd78a70, 

0x747764c1 , 

0xb506607c, 

a 

0xf32d0a25, 

0x79098b02, 

0x646abb81 , 

0x281 23b23, 

0x69d6ad38, 

0x1574ca16, 
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n 

0xdf 871 b62. 

0x211 c40b7. 

0xa51a9ef9, 

0x0014377b, 

0x041 e8a  c8. 

0x09114003, 

Q 

0xbd59e4d2, 

0xe3d1 56d5, 

0x4f e876d5. 

0x2f91a340, 

0x557be8de, 

0x00eae4a7, 

n 

0x0ce5c2ec, 

0x4db4bba6, 

0xe756bdff, 

0xdd3369a  c. 

0xec1 7b035, 

0x06572327, 

n 

0x99a  f c8b0. 

0x56c8c391 , 

0x6b6581 1c, 

0x5e146119, 

0x6e85cb75, 

0xbe07c002, 

n 

0XC2325577, 

0x893ff4ec, 

0x5bbf  c92d. 

0xd0ec3b25, 

0xb7801 ab7. 

0x8d6d3b24, 

n 

0x20c763ef , 

0xc366a5f c. 

0x9c382880, 

0x0ace3205, 

0xaac9548a, 

0xeca1d7c7, 

n 

0x041afa32, 

0x1d16625a, 

0x6701902c, 

0x9b757a54, 

0x31 d477f 7, 

0x91 26b031 , 

n 

0x36cc6f db. 

0xc70b8b46, 

0xd9e66a48, 

0x56e55a79, 

0x026a4ceb, 

0x52437ef f , 

n 

0x2f 8f 76b4, 

0x0df 980a5, 

0x8674cde3, 

0xedda04eb, 

0x17a9be04, 

0x2c1 8f 4df , 

n 

0xb7747f 9d, 

0xab2af7b4, 

0xefc34d20, 

0x2e096b7c, 

0x1 741 a254. 

0xe5b6a035, 

n 

0x213d42f 6, 

0x2c1 c7c26. 

0x61 c2f 50f , 

0x6552daf 9, 

0xd2c231 f 8, 

0x251 30f 69, 

B 

0xd81 67f a2. 

0x041 8f2c8, 

0x001 a96a6. 

0x0d1 526ab, 

0x6331 5c21 , 

0x5e0a72ec, 

B 

0x49baf ef d. 

0x1 87908d9, 

0x8d0dbd86, 

0x311170a7, 

0x3e9b640c, 

0xcc3e10d7, 

B 

0xd5cad3b6, 

0x0caec388, 

0xf 73001  el , 

0x6c728aff, 

0x71 eae2a1 , 

0x1 f9af36e. 

B 

0xcf cbdl 2f  , 

0xc1 de841 7 , 

0xa  c07be6b. 

0xcb44a1d8, 

0x8b9b0f 56, 

0x01 3988c3, 

B 

0xb1 c52fca. 

0xb4be31 cd. 

0xd8782806, 

0x1 2a3a4e2, 

0x6f7de532, 

0x58f d7eb6. 

B 

0xd01 ee900. 

0x24adffc2, 

0xf 4990f c5. 

0x9711aac5, 

0x001 d7b95. 

0x82e5e7d2, 

B 

0x1 09873f 6, 

0x00613096, 

0xc32d9521 , 

0xada121ff, 

0x29908415, 

0x7f bb977f , 

B 

0xa  f 9eb3db, 

0x29c9ed2a, 

0x5ce2a465, 

0xa730f32c, 

0xd0aa3f e8. 

0x8a  5 c C091 , 

B 

0xd49e2ce7, 

0x0ce454a9, 

0xd60a  cd86. 

0x01 5f 1 91 9, 

0x77079103, 

0xdea03af6, 

B 

0x78a8565e, 

0xdee356df, 

0x21f05cbe, 

0x8b75e387, 

0xb3c50651 , 

0xb8a  5 c3ef , 

B 

0xd8eeb6d2, 

0xe523be77, 

0xc21 54529, 

0x2f 69ef df , 

0xaf e67af b. 

0xf470c4b2, 

B 

0xf3e0eb5b, 

0xd6cc9876, 

0x39e4460c, 

0x1 f da8538. 

0x1 987832f , 

0xca007367, 

fl 

0xa991 44f 8, 

0x296b299e, 

0x492f c295. 

0x9266beab, 

0xb5676e69, 

0x9bd3ddda , 

B 

0xdf 7e052f , 

0xdb25701 c. 

0x1b5e51ee, 

0xf 65324e6, 

0x6afce36c, 

0X0316CC04, 

B 

0x864421 3e, 

0xb7dc59d0, 

0x7965291f, 

0xccd6fd43, 

0x41823979, 

0x932bcdf 6, 

B 

0xb657c34d, 

0x4edf d282. 

0x7ae5290c, 

0x3cb9536b, 

0x851e20fe, 

0x9833557e, 

B 

0x13ecf0b0, 

0xd3f f b372. 

0x3f85c5c1 , 

0x0aef7ed2 

>; 

Static 

word32  const 

S5C256:  = { 

B 

0x7ec90c04, 

0x2c6e74b9, 

0x9b0e66df , 

0xa633791 1 , 

0xb86a7f f f , 

0x1dd358f 5, 

B 

0x44dd9d44, 

0x1731167f, 

0x08fbf1 fa. 

0xe7f51 1 cc. 

0xd2051 b00. 

0x735aba00, 

B 

0x2ab722d8, 

0x386381 cb. 

0xa  cf 6243a, 

0x69befd7a, 

0xe6a2e77f , 

0xf0c720cd, 

fl 

0XC449481 6, 

0xccf5c180, 

0x38851640, 

0x1 5b0a848, 

0xe68b1 8cb, 

0x4caadeff, 

B 

0x5f 480a01 , 

0x041 2b2aa, 

0x25981 4fc, 

0x41d0efe2, 

0x4e40b48d, 

0x248eb6f b. 

fl 

0x8dba1 cf e. 

0x41a99b02, 

0x1 a550a04. 

0xba8f 65cb, 

0x7251 f4e7. 

0x95a51725, 

B 

0xc1 06ecd7, 

0x97a5980a, 

0xc539b9aa, 

0x4d79fe6a, 

0xf 2f 3f 763, 

0x68af8040, 

fl 

0xed0c9e56, 

0x1 1 b4958b. 

0xe1 eb5a88. 

0x8709e6b0, 

0xd7e071 56, 

0x4e29f ea7. 

B 

0x6366e52d, 

0x02d1 C000, 

0xc4ac8e05, 

0x9377f 571  , 

0x0c05372a, 

0x578535f 2, 

fl 

0x2261 be02. 

0xd642a0c9, 

0xdf 13a280, 

0x74b55bd2, 

0x682199c0, 

0xd421 e5ec. 

fl 

0x53f b3ce8. 

0xc8adedb3, 

0x28a87fc9, 

0x3d959981 , 

0x5c1 f f 900, 

0xf e38d399. 

B 

0x0c4eff0b, 

0x062407ea, 

0xaa2f 4f b1  , 

0x4f b96976. 

0x90c79505, 

0xb0a8a774, 

fl 

0xef 55a1 f f , 

0xe59ca2c2, 

0xa6b62d27, 

0xe66a4263, 

0xdf 65001 f. 

0x0ec50966, 

B 

0xdf ddSSbc, 

0x29de0655, 

0x911e739a, 

0x17af8975, 

0x32c791 1 c. 

0x89f 89468, 

B 

0x0d01 e980. 

0x524755f 4, 

0x03b63cc9, 

0X0C  c844b2. 

0xbcf3f0aa, 

0x87ac36e9, 

B 

0xe53a7426, 

0x01 b3d82b. 

0x1a9e7449, 

0x64ee2d7e, 

0xcddbb1da, 

0x01 C94910, 

B 

0xb868bf 80, 

0x0d26f 3f d. 

0x9342ede7, 

0x04a5c284, 

0x636737b6, 

0x50f 5b616, 

fl 

0xf 24766e3, 

0x8eca36c1 , 

0x136e05db, 

0xf ef 1 8391 , 

0xf b887a37. 

0xd6e7f 7d4, 

fl 

0xc7fb7dc9, 

0x3063f cdf , 

0xb6f 589de, 

0xec2941da, 

0x26e46695, 

0xb756641 9, 

fl 

0xf654efc5, 

0xd08d58b7, 

0x48925401 , 

0xc1bacb7f, 

0xe5f f 550f , 

0xb6083049, 

B 

0x5bb5d0e8, 

0x87d72e5a, 

0xab6a6ee1 , 

0x223a66ce, 

0xc62bf3cd, 

0x9e0885f 9, 

B 

0x68cb3e47, 

0X086C01 0f , 

0xa21 de820. 

0xd1 8b69de, 

0xf3f 65777, 

0xfa02c3f6, 

B 

0x407edac3, 

0xcbb3d550, 

0x1 793084d, 

0xb0d70eba, 

0x0ab378d5, 

0xd951 fb0c. 

fl 

0xded7da56, 

0x41 24bbe4, 

0x94ca0b56, 

0x0f 5755d1  , 

0xe0e1 e56e. 

0x61 84b5be, 

fl 

0x580a249f , 

0x94f74bc0, 

0xe327888e, 

0x9f 7b5561  , 

0xc3dc0280, 

0x05687715, 

fl 

0x646c6bd7, 

0x44904db3, 

0x66b4f0a3, 

0xc0f 1648a, 

0x697ed5af, 

0x49e92f f 6, 

fl 

0x309e374f, 

0x2cb6356a, 

0x85808573, 

0x4991 f 840, 

0x76f0ae02, 

0x083be84d, 

fl 

0x28421 c9a. 

0x44489406, 

0x736e4cb8, 

0xc1 09291 0, 

0x8bc95fc6, 

0x7d869cf 4, 
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n 

0x1 34f 61 6f , 

0x2e77118d, 

0xb31 b2be1  , 

0xaa90b472, 

0x3ca5d717, 

0x7d1 61 bba 

n 

0x9cad901 0, 

0xaf462ba2, 

0x9f e459d2. 

0x45d34559, 

0xd9f2da13, 

0xdbc65487 

n 

0xf3e4f94e, 

0x176d486f , 

0x097c13ea, 

0x631da5c7, 

0x445f 7382, 

0x1 75683f 4 

n 

0xcdc66a97, 

0x70be0288, 

0xb3cdcf72, 

0x6e5dd2f 3, 

0x20936079, 

0x459b80a5 

a 

0xbe60e2db, 

0xa9c23101, 

0xeba531 5c, 

0x224e42f 2, 

0x1 c5c1 572, 

0xf 6721 b2c 

u 

0x1 ad2f f f 3, 

0x8c25404e, 

0x324ed72f , 

0x4067b7f d. 

0x0523138e, 

0x5ca3bc78 

n 

0xdc0fd66e, 

0x75922283, 

0x784d6b1 7, 

0x58ebb1 6e, 

0x44094f 85, 

0x3f 481 d87 

n 

0xfcfeae7b, 

0x77b5f f 76, 

0x8c2302bf , 

0xaaf 47556, 

0x5f46b02a, 

0x2b092801 

n 

0x3d38f 5f 7, 

0x0ca81 f 36, 

0x52af4a8a, 

0x66d5e7c0, 

0xdf 3b0874, 

0x9505511 0 

n 

0x1 b5ad7a8. 

0xf61 ed5ad. 

0x6cf6e479, 

0x20758184, 

0xd0cefa65, 

0x88f 7be58 

□ 

0x4a046826, 

0x0f f 6f 8f 3, 

0xa09c7f70, 

0x5346aba0, 

0x5ce96c28, 

0xe176eda3 

n 

0x6ba  c307 f , 

0x376829d2, 

0x85360f a9. 

0x1 7e3f e2a. 

0x24b79767, 

0xf5a96b20 

n 

0xd6cd2595, 

0x68f f 1 ebf , 

0x7555442c, 

0xf 1 9f 06be, 

0xf 9e0659a , 

0xeeb9491 d 

a 

0x34010718, 

0xbb30cab8, 

0xe822f el  5, 

0x88570983, 

0x750e6249, 

0xda627e55 

n 

0x5e76ffa8, 

0xb1 534546, 

0x6d47de08, 

0xefe9e7d4 

>; 

static 

word32  const 

S6[256:  = { 

a 

0xf 6f a8f 9d, 

0x2cac6ce1  , 

0x4ca34867, 

0xe2337f 7c, 

0x95db08e7, 

0x01 6843b4 

n 

0xeced5cbc, 

0x325553ac, 

0xbf 9f 0960, 

0xdfa1 e2ed. 

0x83f 0579d, 

0x63ed86b9 

n 

0x1ab6a6b8, 

0xde5ebe39, 

0xf 38f f 732, 

0x8989b1 38, 

0x33f 1 4961  , 

0XC01 937bd 

n 

0xf 506c6da, 

0xe4625e7e, 

0xa308ea99, 

0x4e23e33c, 

0x79cbd7cc, 

0x48a1 4367 

n 

0xa31 4961 9, 

0xfec94bd5, 

0xa114174a, 

0xeaa01 866, 

0xa084db2d, 

0x09a8486f 

n 

0xa88861 4a , 

0x2900af 98, 

0x01665991 , 

0xe1 992863, 

0xc8f30c60, 

0x2e78ef 3c 

a 

0xd0d51 932, 

0xcf0fec14, 

0xf7ca07d2, 

0xd0a82072, 

0xf d41 1 97e, 

0x9305a6b0 

□ 

0xe86be3da  , 

0x74bed3cd, 

0x372da53c, 

0x4c7f 4448, 

0xdab5d440, 

0x6dba0ec3 

a 

0x08391 9a7, 

0x9fbaeed9, 

0x49dbcf b0. 

0x4e670c53, 

0x5c3d9c01 , 

0x64bdb941 

a 

0x2c0e636a, 

0xba7dd9cd, 

0xea6f 7388, 

0xe70bc762, 

0x35f 29adb, 

0x5c4cdd8d 

a 

0xf0d48d8c, 

0xb881 53e2, 

0x08a1 9866, 

0x1 ae2eac8. 

0x284caf89, 

0xaa928223 

B 

0x9334be53, 

0x3b3a21 bf  , 

0x1 6434be3, 

0x9aea3906, 

0xef e8c36e. 

0xf 890cdd9 

B 

0x80226dae, 

0xc340a4a3, 

0xd'f7e9c09, 

0xa694a807, 

0x5b7c5ecc, 

0x221 db3a6 

B 

0x9a69a02f, 

0x6881 8a54, 

0xceb2296f , 

0x53c0843a , 

0xf 6893655, 

0x25bf e68a 

B 

0xb4628abc, 

0xcf222ebf, 

0x25ac6f48, 

0xa9a99387, 

0x53bddb65, 

0xe76ffbe7 

B 

0xe967f d78. 

0x0ba93563, 

0x8e342bc1 , 

0xe8a1 1 be9. 

0x4980740d, 

0xc8087dfc 

B 

0x8de4bf 99, 

0xa1 1 1 01 a0. 

0x7f d37975. 

0xda5a26c0, 

0xe81 f 994f , 

0x9528cd89 

B 

0xf d339f ed. 

0xb87834bf , 

0x5f04456d, 

0x22258698, 

0xc9c4c83b, 

0x2dc1 56be 

B 

0x4f628daa, 

0x57f 55ec5, 

0xe2220abe, 

0xd291 6ebf , 

0x4ec75b95, 

0x24f2c3c0 

B 

0x42d1 5d99, 

0xcd0d7f a0. 

0x7b6e27f f , 

0xa8dc8af0, 

0x7345c106, 

0xf 41 e232f 

B 

0x35162386, 

0xe6ea8926, 

0x3333b094, 

0x1 57ec6f2, 

0x372b74af , 

0x692573e4 

B 

0xe9a9d848, 

0xf 31 60289, 

0x3a62ef1d, 

0xa787e238, 

0xf 3a5f 676, 

0x74364853 

B 

0x20951063, 

0x4576698d, 

0xb6f ad407. 

0x592af 950, 

0x36f73523, 

0x4cfb6e87 

B 

0x7da4cec0, 

0x6c1 52daa, 

0xcb0396a8, 

0xc50dfe5d, 

0xf cd707ab. 

0x0921 c42f , 

B 

0x89df f 0bb, 

0x5fe2be78, 

0x448f 4f 33, 

0x754613c9, 

0x2b05d08d, 

0x48b9d585, 

B 

0xdc049441  , 

0xc8098f 9b, 

0x7dede786, 

0xc39a3373, 

0x42410005, 

0x6a091 751 , 

B 

0x0ef 3c8a6, 

0x890072d6, 

0x28207682, 

0xa9a9f7be, 

0xbf 32679d, 

0xd45b5b75, 

B 

0xb353fd00, 

0xcbb0e358, 

0x830f 220a, 

0x1 f 8f b21 4, 

0xd372cf 08, 

0xcc3c4a13, 

B 

0x8cf63166, 

0x061 c87be. 

0x88c98f 88, 

0x6062 e397. 

0x47cf 8e7a, 

0xb6c85283. 

B 

0x3cc2acfb, 

0x3f C06976, 

0x4e8f 0252, 

0x64d831 4d, 

0xda3870e3, 

0x1 e665459. 

B 

0xc1 0908f 0, 

0x513021a5, 

0x6c5b68b7, 

0x822f8aa0, 

0x3007cd3e, 

0x74719eef, 

B 

0xdc872681  , 

0x073340d4, 

0x7e432fd9, 

0x0c5ec241 , 

0x8809286c, 

0xf 592d891  , 

n 

0x08a930f 6, 

0x957ef305, 

0xb7fbffbd, 

0xc266e96f, 

0x6fe4ac98, 

0xb173ecc0, 

n 

0xbc60b42a  , 

0x953498da, 

0xfba1ae12, 

0x2d4bd736, 

0x0f 25f aab. 

0xa4f 3f ceb, 

B 

0xe29691 23, 

0x257f 0c3d, 

0x9348af 49, 

0x361 400bc, 

0xe881 6f 4a, 

0x381 4f 200, 

B 

0xa3f 94043, 

0x9c7a54c2, 

0xbc704f57, 

0xda41e7f9, 

0xc25ad33a, 

0x54f 4a084, 

B 

0xb17f 5505, 

0x59357  cbe. 

0xedbd1 5c8, 

0x7f 97c5ab, 

0xba5ac7b5, 

0xb6f6deaf, 

B 

0x3a479c3a, 

0x5302da25, 

0x653d7e6a, 

0x54268d49, 

0x51a477ea, 

0x501 7d55b, 

B 

0xd7d25d88, 

0x441 36c76, 

0x0404a8c8, 

0xb8e5a121, 

0xb81a928a, 

0x60ed5869, 
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□ 


n 


0xb0e93524,  0xbebb8fbd, 
0x48392905,  0xa65b1db8, 


0xa2d762cf,  0x49c92f54,  0x38b5f331, 
0x851c97bd,  0xd675cf2f  >; 


0x71 28a454 


static  word32  const 


□ 


n 

n 


0x85e0401 9, 
0xde6008a 1 , 
0x2cb2cb1 1 , 
0xe1 5021 0c, 
0x4d495001  , 
0x1286becf, 
0xc3b3ad66, 
0x0502aa8f , 
0x4e7b3af f , 
0xd0d854c0, 
0x0c5cbaf a, 
0x13749e67, 
0xc06eba30, 
0xc6e6fa14, 
0x821dba9f , 
0xaba68ced, 
0x0e0804e9, 
0x16746233, 
0x98f8f35a, 
0x3ec6d97b, 
0xb9068d78, 
0xbe8b9d2d, 
0x8d6b786f , 
0xa0eac280, 
0x271 1 f d60, 
0x488dcf 25, 
0xb65f 8de6, 
0xdd1 el 6c3, 
0x2ec01b9c, 
0x058745b9, 
0xb87242d1  , 
0xea082b2a, 
0x9883f e66, 
0xe4f 2df a6, 
0xa1 32234f , 
0x5e4f 9504, 
0xd3b5ab34, 
0xcfd2a87f, 
0XC36351 9b, 
0x2d57539d, 
0x91 da55f 4, 
0xc3c0bdae, 
0xf 2a279c7, 


$7:2563  = { 
0x332bf 567, 
0x2028da1 f , 
0xb232e75c, 
0xe24ef 1 bd, 
0x38be4341 , 
0xb6ea  cbl 9, 
0x281 36086, 
0x0bc0351 e, 
0x5f 43671 b, 
0xcb3a6c88, 
0x4437f 1 07, 
0x72fc081a, 
0x0721 1 b24, 
0xbae8584a, 
0xaf f 60f f 4, 
0x9a  c96f 78, 
0x55f 1 be56, 
0x3c034c28, 
0x1 626a49f , 
0x6e77a6a9, 
0xa33754f 4, 
0x7979f b06, 
0x5a631 7a6, 
0x08b9767a, 
0x438050e3, 
0x36c9d566, 
0x92aeaf 64, 
0x1 5e0d7f9, 
0x1 5488aa9, 
0x3453dc1 e, 
0x19de7eae, 
0x93eb2939, 
0x2ec40581 , 
0x693ed285, 
0x3d321 c5d, 
0x3ffafbbd, 
0xf 72bf 9b7, 
0x60aeb767, 
0x589dd390, 
0x569a58cf, 
0x40a230f 3, 
0x4958c24c, 
0x94e01 be8. 


0x662dbf f f , 
0x0227bce7, 
0x4b3695f 2, 
0xb1 68c381 , 
0x913cee1d, 
0x2660c200, 
0x0bd8df a8, 
0x1 66bf 52a, 
0x9cf 6e037, 
0x47bc2829, 
0xb6e79962, 
0xb1 d1 39f 7, 
0x45c28829, 
0xad4ebc46, 
0xea2c4e6d, 
0x06a5b79a, 
0xe7e5363b, 
0xda6d0c74, 
0xeed82b29, 
0xcb658b5c, 
0xf 430c87d, 
0xe7225308, 
0xfa5cf7a0, 
0xa3d9d2b0, 
0x069908a8, 
0x28e74e41  , 
0x3ac7d5e6, 
0x50b1 b887, 
0xd71 6e740, 
0xd699296e, 
0x053e561 a , 
0x1 7dcb0f 0, 
0x763953c3, 
0x74904698, 
0xc3f5e194, 
0x76f7ad0e, 
0x1 b0434c0, 
0x1814386b, 
0x5479f 8e6, 
0xe84e63ad, 
0xd1 988f 35, 
0x51 8f 36b2, 
0x9071 6f 4b, 


0xcfc65693, 
0x4d642916, 
0xb28707de, 
0xfde4e789, 
0x92a79c3f , 
0x7565bde4, 
0x356d1 cf2, 
0xeb1 2f f 82, 
0x4981  a c83, 
0x4725ba37, 
0x42d2d81 6, 
0xf 9583745, 
0xc95e31 7f , 
0x468f 508b, 
0x1 6e39264, 
0xb2856e6e, 
0xb3a1 f 25d, 
0x79aac56c, 
0x1 d382f e3, 
0xd45230c7, 
0xc8a71302, 
0x8b75cf 77, 
0x5dda0033, 
0x79d3421 7, 
0x3d7fedc4, 
0xc2610aca, 
0x9ea80509, 
0x2b9f 4f d5, 
0x40055a2c, 
0x496cf f 6f , 
0x1 5ad6f 8c, 
0x58d4f2ae, 
0x01 d6692e, 
0x4c2b0edd, 
0x4b269301 , 
0x296693f 4, 
0x4e72b567, 
0x30bcc33d, 
0x1 cb8d647, 
0x462e1 b78, 
0xb6e318d2, 
0x84b1d370, 
0x954b8aa3 


0x2a8d7f6f, 
0x1 8f ac300, 
0xa05fbcf6, 
0x5c79b0d8, 
0x089766be, 
0x64241 f 7a, 
0x1 07789be, 
0xe348691 1 , 
0x334266ce, 
0xa66ad22b, 
0x0a961 288, 
0xcf 19df 58, 
0xbc8ec51 1 , 
0x7829435f , 
0x92544a8b, 
0x1aec3ca9, 
0xf 7debb85, 
0x3ce4e1 ad, 
0x0c4fb99a, 
0x2bd1 408b, 
0xb96d8c32, 
0x11 ef 8da4, 
0xf28ebfb0, 
0x021a718d, 
0x826d2bef , 
0x3d49a9cf, 
0xf 22b017d, 
0x625aba82, 
0x93d29a22, 
0x1 c9f 4986, 
0x66626c1 c, 
0x9ea294fb, 
0xd3a0c108, 
0x4f 757656, 
0xc79f 022f , 
0x3d1 f ce6f , 
0x5592a33d, 
0x38a0c07d, 
0x97f d61 a9, 
0x6580f 87e, 
0x3ffa50bc, 
0x0f edce83, 
>; 


0xab9bc912 
0x50f 1 8b82 
0xcd4181e9 
0x1 e8bf d43 
0xbaeeadf4 
0x8248dca9 
0xb3b2e9ce 
0xd34d751 6 
0x8c9341 b7 
0x7ad61 f1 e 
0xe1 a5c06e 
0xbec3f756 
0x38bc46e9 
0xf 1 241 83b 
0x009b4f  c3 
0xbe838688 
0x61 f e033c 
0x51 f 0c802 
0xbb325778 
0x60c03eb7 
0xebd4e7be 
0xe083c858 
0xf 5b9c31 0 
0x9ac6336a 
0x4eeb8476 
0xbae3b9df 
0xa4173f70 
0x6a01 7962 
0xe32dbf 9a 
0xdfe2ed07 
0x71 54c24c 
0x52cf 564c 
0xa 1 e71 60e 
0x5d393378 
0x3c997e7e 
0xc61 e45be 
0xb5229301 
0xf d1 606f 2 
0xea7759f 4 
0xf3817914 
0x3d40f 021 
0x878ddada 


Static 

word32  const 

S8C256:  = { 

n 

0xe216300d, 

0xbbddfffc, 

0xa7ebdabd, 

n 

0x0e241 600, 

0x052ce8b5, 

0x1 1 a9cf b0. 

□ 

0x2a42931 c. 

0x76e38111, 

0xb12def3a, 

o 

0xbe197029, 

0x84a00940, 

0xbb243a0f, 

n 

0x0b1 5a1 5d, 

0x480d31 68, 

0x8bbbde5a, 

D 

0x72df191b, 

0x7580330d, 

0x94074251 , 

D 

0xb301d40a, 

0x02e7d1 ca. 

0x53571 dae. 

n 

0x176f43e8, 

0x71 f b46d4. 

0x38129022, 

n 

0x82f 3d055, 

0x66f b9767. 

0x1 5b80b4e, 

0x35648095 
0xe5952f 1 1 
0x37ddddf c 
0xb4d1 37cf 
0x669ded42 
0x5c7dcdfa 
0x7a31 82a2 
0xce949ad4 
0x1 d5b47a0 


0x7789f 8b7 
0xece7990a 
0xde9adeb1 
0xb44e79f 0 
0xc7ece831 
0xabbe6d63 
0x1 2a8ddec 
0xb84769ad 
0x4cfde06f 


0xe6c1121b 
0x9386d174 
0x0a0cc32c 
0x049eedfd 
0x3f 8f 95e7 
0xaa402164 
0xfdaa335d 
0x965bd862 
0xc28ec4b8 
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n 

n 

Q 

D 

n 

a 

n 

a 

Q 

n 

□ 

□ 

a 

n 

□ 

n 

D 

n 

n 

□ 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


# i f d e f 

> 

#end  i f 

Send i f 


0x57e8726e, 
0x5d0b00a3, 
0x980cf 42a, 
0x522f f f b1 , 
0x424f 761 8, 
0x09c467cd, 
0xd4de495a, 
0x264f 620f , 
0x7895cda5, 
0x7f 229b1 e, 
0x96f 5b1 95, 
0xa223736f , 
0x7 cdl 6ef  c , 
0x3cf7c899, 
0xf 1 907b75, 
0xb6f 2cf 3b, 
0xbae7df dc, 
0xcea4d428, 
0xc5068778, 
0x132a4f 94, 
0XC4248289, 
0x905281 5e, 
0x5889e9e1  , 
0x730edebc, 
0X60779695 , 
0x81 f 47c9f , 
0x4a0cdd61 , 
0xa0e736a0, 
0xdf 09822b, 
0x4cf 1 764f , 
0x36997b07, 
0xe97625a5, 
0xa466bb1 e, 
0x50b2ad80, 


0x647a78f c, 
0xae63aff2, 
0x9b6df 491 , 
0xd24708cc, 
0x35856039, 
0xc1 891 0b1 , 
0x64c6d006, 
0x24b8d2bf , 
0x859c1 5a5, 
0x31 842e7b, 
0xfd0af0fc, 
0x9f b4c428, 
0x1436876c, 
0x92ecbae6, 
0x20e3030f, 
0x9f 326442, 
0x42cbda70, 
0x79d130a4, 
0xe580b3e6, 
0x43b7950e, 
0xacf3ebc3, 
0x5e410fab, 
0xef d390f c, 
0x5b6431 13, 
0xf 9c1 7a8f , 
0xad1 1 63ed, 
0xad1 f 4603, 
0x5564a6b9, 
0xbd691 a6c, 
0x0d771 c2b, 
0x0e84093d, 
0x061 4d1 b7, 
0xf 8da0a82, 


0x99865d44, 
0x7e8bd632, 
0x9e7  edd53, 
0x1 c7e27cd, 
0x9d1 7dee7, 
0xe1 1 dbf 7b, 
0xbcc0c62c, 
0x15c1b79e, 
0xe6459788, 
0x24259f d7, 
0xb0fe134c, 
0x25d04979, 
0xf 1 5441 07, 
0xdd67016d, 
0x24d8c29e, 
0xcb1 5a4cc, 
0xcd7dae0a, 
0x3486ebfb, 
0x4e68b8f 4, 
0x2fee7d1 c, 
0x571 5f6b7, 
0xb48a2465, 
0xdd07d35b, 
0x9491 7e4f, 
0x7a5b21 21  , 
0xea7b5965, 
0x605bdf b0, 
0x10853209, 
0xaa12e4f2, 
0x67cdb1 56, 
0x4aa93e61 , 
0x0e25244b, 
0x04f19130, 
0x8db2a283, 


0x608bd593, 
0x701 08c0c, 
0x06918548, 
0xa4eb21 5b, 
0x27eb35e6, 
0x06cd1af8, 
0x3dd00db3, 
0x46a52564, 
0xc37bc75f, 
0xf 8bef 472, 
0xe2506d3d, 
0x34c713f 8, 
0xbedeee14, 
0x1 51682eb, 
0xe139673b, 
0xb01 a4504, 
0x57e85b7a, 
0x33d3cddc, 
0xc5c8b37e, 
0x22361 3bd, 
0xef 3478dd, 
0x2eda7fa4, 
0xdb485694, 
0x503c2fba, 
0xd187b896, 
0x1a00726e, 
0x9eedc364, 
0xc7eb8f 37, 
0x87451 c0f , 
0x350d8384, 
0x8360d87b, 
0X0C768347, 
0xba6e4ec0, 
0xea8bf 59e 


0x6c200e03, 
0xbbd35049, 
0x58cb7e07, 
0x3cf 1 d2e2, 
0xc9af f 67b, 
0x71 70C608, 
0x708f 8f 34, 
0xf8d7e54e, 
0xdb07ba0c, 
0x835f f cb8, 
0x4f9b12ea, 
0XC461 81 87, 
0x56e9af27, 
0xa842eedf , 
0xefa63fb8, 
0xf 1 e47d8d, 
0xd53f 5af 6, 
0x77853b53, 
0x0d809ea2, 
0xdd06caa2, 
0xf 26761 6f, 
0xe87b40e4, 
0x38d7e5b2, 
0x646f 1 282, 
0x29263a4d, 
0x11 403092, 
0x22ebe6a8, 
0x2de705ca, 
0xe0f 6a27a, 
0x5938fa0f, 
0x1 f a98b0c, 
0x589e8d82, 
0x99265164, 
>; 


0xeaee6801 

__cpLuspLus 

/*  ! PGPCASTB0X5_H  */ 


i::CHK:d037b5a64975345b00bd501e73066cefb771  777a5df404b:: 


0x39605^ f 6, 
0x2998df 04, 
0x3b74ef 2e, 
0x1 9b47a38, 
0x36baf5b8, 
0x2d5e3354, 
0x77d51 b42, 
0x3e3781 60, 
0x0676a3ab, 
0x6df 4c1 f 2, 
0xf 21 5f 225, 
0xea7a6e98, 
0xa04aa441 , 
0xfdba60b4, 
0x71873054, 
0x844a1be5, 
0x20cf4d8c, 
0x37e-f  f cb5, 
0x398feb7c, 
0x37df 932b, 
0xc148cbe4, 
0xe98ea084, 
0x57720101 , 
0x7523d24a, 
0xba510cdf, 
0x00da6d77, 
0xcee7d28a, 
0x8951 570f, 
0x3ada4819, 
0x42399ef 3, 
0x1 1 49382c, 
0x0d2059d1 , 
0x1 ee7230d. 
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/* 

* pgpCFB.c  - generic  cipher  feedback  encryption,  using  pgpCipher.h  ciphers. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpCFB.c, V 1.2. 2.1  1997/06/07  09:49:50  mhu  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end i f 


#incLude  <string.h> 


#i nc  Lude 
#incLude 
#i nc  Lude 
#incLude 
#i nc  Lude 


pgpDebug . h" 
pgpCFB.h" 
pgpCipher.h 
pgpHem. h" 
pgpUsuaLs.h 


/* 

* InitiaLize  context. 

* If  key  is  NULL,  the  current  key  is  not  changed. 

* if  iv  is  NULL,  the  IV  is  set  to  aLL  zero. 

*/ 

void 

pg p C f b I n i t ( s t r u c t Pg p C f b C on t ex t *cfb,  byte  const  *key,  byte  const  *iv) 
{ 

n pgpAssert(cfb); 

n pg  p A s s e r t ( c f b->  c i p h e r ) ; 

n if(key) 

n n pgpCipherKey(cfb-> cipher,  key); 

n mems e t C c f b-> i V , 0,  s i z eo f ( c f b-> i v ) ) ; 

n i f C i V ) 

n n memc py ( c f b-> i V,  iv,  c f b->c i p h e r-> c i ph e r->b L o c ks i z e ) ; 

n cfb->bufLeft  = 0; 

> 


void 

pgpC f bW i pe ( s t r uc t Pg p C f b C on t ex t *cfb) 

{ 

n struct  Pg p C i phe r C on t ex t *cipher; 

n ifCicfb) 

n n return; 

n cipher  = cfb->cipher; 

n if  (cipher) 

n n pgpC i phe rWi pe  (cipher); 

n memset(cfb,  0,  sizeof(*cfb)); 

n cfb->cipher  = cipher; 

} 


struct  PgpCf bContext  * 

pg p C f b C r e a t e ( s t r u c t PgpCipher  const  *c) 

{ 

n struct  PgpCf bContext  *cfb; 

:ECHK:6d2b7c66c633aa5993887f9c703746c1bad05550bdda88e3111abb23f70345a02:: 
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n struct  PgpCipherContext  *cipher; 

n if  (c->bLocksize  > PG P_C F B_M A XB LO C KS I Z E ) 

n n returnO; 


Q 

□ 

n 

D 

Q 

□ 

n 

n 

□ 

□ 

Q 

} 


cfb  = (struct  Pg p C f b C on t e X t * ) pg pH em A L L o c ( s i z eo f ( * c f b ) ) ; 
if  (cfb)  { 

n cipher  = pg p C i p h e r C r e a t e ( c ) ; 

a if(cipher){ 

n n memset  (cfb,  0,  sizeof  (*cfb)); 

n n cfb->cipher  = cipher; 

n n returncfb; 

n } 

n pg pHem F r e e ( c f b ) ; 

} 

return  0; 


struct  Pg p C f b C o n t ex t * 

pgpCfbCopy  (struct  Pg p C f b C on t e x t const  *cfb) 

{ 

a Struct  PgpCfbContext  *newcfb; 

n struct  PgpCipherContext  *cipher; 

n if(!cfb) 

n n returnNULL; 

n newcfb  = (struct  PgpCfbContext  * ) pg pH em A L L o c (sizeof  (*neHcfb)); 

n if  (!newcfb) 

n n returnNULL; 

n cipher  = pgpCipherCopy  (cfb->cipher); 

o if  (Icipher)  { 

n n pgpHemFree  (newcfb); 

a n returnNULL; 

n } 

n memcpy  (newcfb,  cfb,  sizeof  (*cfb)); 

n n e w c f b-> c i p h e r = cipher; 

n return  newcfb; 

} 


void 

pg p C f b D e s t r oy ( s t r u c t PgpCfbContext  *cfb) 
{ 


□ 

□ 

n 

Q 

□ 

n 

n 

n 

} 


if  (cfb)  { 

n if  ( c f b->c i p h e r ) { 

n n pgpCipherDestroy(cfb-> cipher); 

n n cfb->cipher  = NULL; 

n > 

a pg pC f b W i pe ( c f b ) ; 

n pg pMem F r e e ( c f b ) ; 

> 


/* 

* Encrypt  a buffer  of  data,  using  a block  cipher  in  CFB  mode. 

* There  are  more  compact  ways  of  writing  this,  but  this  is 
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* written  for  speed. 

*/ 

void 

pgpCf bEn c ry p t ( s t r u c t Pg p C f b C on t e x t *cfb,  byte  const  *src,  byte  *dest, 
n size_tLen) 

{ 

n unsigned  bLocksize  = c f b-> c i p h e r-> c i p h e r->b L o c ks i z e ; 

n unsigned  bufLeft  = c f b->bu f L e f t ; 

n byte  *bufptr  = cfb->iv  + b L o c k s i z e-b u f L e f t ; 

n pg p As s e r t ( c f b ) ; 

n pgpAssertCcfb->cipher); 


□ 

n 

n 

n 

n 

n 

□ 

Q 

n 

a 

a 

a 

n 

n 

n 

n 

D 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

> 


/* 

* If  there  are  no  more  bytes  to  encrypt  that  there  are  bytes 

* in  the  buffer,  XOR  them  in  and  return. 

*/ 

if  (len  <=  bufLeft)  { 

0 cfb->bufLeft  = bufLeft  - Len; 

a whiLe  (Len--)  { 

0 0 *dest  + + = *bufptr  + + ''=  *src  + +; 

n } 

a return; 

} 

Len  -=  buf  Left; 

/*  Encrypt  the  first  bufLeft  (0  to  7)  bytes  of  the  input  by  XOR 

* with  the  Last  bufLeft  bytes  in  the  iv  buffer. 

*/ 

whiLe  (bufLeft  — ) { 

n *dest++  = (*bufptr++  *src++); 

> 

/*  Encrypt  middLe  bLocks  of  the  input  by  cranking  the  cipher, 

* XORing  b L o c k s i z e-by t e bLocks,  and  repeating  untiL  the  Len 

* is  bLocksize  or  Less. 

*/ 

whiLe  (Len  > bLocksize)  { 
n bufptr  = cfb->iv; 

n mem c py ( c f b->p r e V , bufptr,  bLocksize); 

o pgpCipherEncrypt(cfb->cipher,  bufptr,  bufptr); 

n bufLeft  = bLocksize; 

0 Len  -=  bLocksize; 

0 do  { 

0 0 *dest++  = (*bufptr++  *src++); 

0 > whiLe  ( — bufLeft); 

) 

/*  Do  the  Last  1 to  bLocksize  bytes  */ 
bufptr  = cfb->iv; 

memc py ( c f b->p r e V,  bufptr,  bLocksize); 

pgpC i ph e r E n c ry p t ( c f b-> c i p h e r , bufptr,  bufptr); 

cfb->bufLeft  = bLocksi ze-Len; 

do  { 

n *dest++  = (*bufptr  + + *src  + +); 

} whiLe  ( — Len); 


/* 

* Decrypt  a buffer  of  data,  using  a cipher  in  CFB  mode. 
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* There  are  more  compact  ways  of  writing  this,  but  this  is 

* written  for  speed. 

*/ 

void 

pgpCf bDec rypt ( St ruct  Pg p C f b C on t e x t *cfb,  byte  const  *src,  byte  *dest, 
n s i ze_t  L en ) 

{ 

n unsigned  bLocksize  = cfb->cipher->cipher->bLocksize; 

n unsigned  bufLeft  = cfb->bufLeft; 

n static  byte  *bufptr; 

n b y t e t ; 

n pgpAssert(cfb); 

n pg p A s s e r t ( c f b->  c i p h e r ) ; 


n 

n 

□ 

□ 

n 

Q 

n 

n 

n 

a 

□ 

Q 

□ 

n 

n 

a 

n 

n 

n 

□ 

□ 

a 

□ 

n 

D 

Q 

D 

n 

a 

a 

n 

n 

n 

> 


bufptr  = cfb->iv  + ( b L o c k s i z e -b u f L e f t ) ; 
if  (Len  <=  bufLeft)  { 

n cfb->bufLeft  = bufLeft  - Len; 

a whiLe  (Len  — ) { 

n n t=*bufptr; 

n n *dest++  = t * C*bufptr++  = *src++); 

n } 

n return; 

> 

Len  -=  bufLeft; 
whiLe  (bufLeft--)  f 
n t=*bufptr; 

n *dest++  = t * (*bufptr++  = *src++); 

} 

whiLe  (Len  > bLocksize)  ■( 
n bufptr  = cfb->iv; 

n memc py ( c f b->p r e V , bufptr,  8); 

n pg p C i p h e r E n c r y p t ( c f b-> c i p h e r , bufptr,  bufptr); 

n bufLeft  = bLocksize; 

n Len  -=  bLocksize; 

n do  { 

n n t=*bufptr; 

n H *dest  + + = t (*bufptr  + + = *src  + +); 

a } whiLe  ( — bufLeft); 

} 

bufptr  = cfb->iv; 

mem c py ( c f b->p r e V , bufptr,  bLocksize); 
pg pC i ph e r En c ry p t ( c f b->c i p h e r , bufptr,  bufptr); 
cfb->bufLeft  = b L o c ks i z e- L e n ; 
do  { 

n t=*bufptr; 

n *dest  + + = t ''  (*bufptr  + + = *src  + +); 

} whiLe  (--Len); 


/* 

* Okay,  expLanation  time: 

* PhiL  invented  a unique  way  of  doing  CFB  that's  sensitive  to  semantic 

* boundaries  within  the  data  being  encrypted.  One  way  to  phrase 

* CFB  en /de c ry p t i on  on  an  8-byte  bLock  cipher  is  to  say  that  you  XOR 

* the  current  8 bytes  with  CRYPT ( previ ous  8 bytes  of  ciphertext). 

* NormaLLy,  you  repeat  this  at  8-byte  intervaLs,  but  PhiL  decided  to 

* resync  things  on  the  boundaries  between  eLements  in  the  stream  being 


[i:CHK:78691597dc77d662b987af12172c12c66e3ce9867136eb27221860be977476450:: 


292 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpCFB.c 


★ 

* 

★ 

★ 

* 

★ 

* 

★ 

* 

* 

★ 

* 

* 

* 

★ 

★ 

★ 

*/ 


encrypted. 

That  is,  the  Last  4 bytes  of  a 12-byte  field  are  en/decrypted  using 
the  first  4 bytes  of  C R Y PT ( p r e v i ou s 8 bytes  of  ciphertext),  but  then 
the  Last  4 bytes  of  that  CRYPT  computation  are  thrown  away,  and  the 
first  8 bytes  of  the  next  field  are  en/decrypted  using 
CRYPTClast  8 bytes  of  ciphertext).  This  is  equivalent  to  using  a 
shorter  feedback  Length  (if  you're  familiar  with  the  general  CFB 
technique)  briefly,  and  doesn't  weaken  the  cipher  any  (using  shorter 
CFB  Lengths  makes  it  stronger,  actually),  it  just  makes  it  a bit  unusua 

Anyway,  to  accomodate  this  behaviour,  every  time  we  do  an 
encrpytion  of  8 bytes  of  ciphertext  to  get  8 bytes  of  XOR  mask, 
we  remember  the  ciphertext.  Then  if  we  have  to  resync  things 
after  having  processed,  say,  2 bytes,  we  refill  the  iv  buffer 
with  the  Last  6 bytes  of  the  old  ciphertext  followed  by  the 
2 bytes  of  new  ciphertext  stored  in  the  front  of  the  iv  buffer. 


L . 


void 

pgpCf bSync ( st ruct  Pg pC f b C on t e x t *cfb) 

{ 

n unsigned  blocksize  = cfb->cipher->cipher->bLocksize; 

a unsigned  bufleft  = c f b->bu f L e f t ; 


i f (buf  lef t ) { 

n memmove(cfb->iv+bufLeft,  cfb->iv,  blocksize-bufleft); 

n memcpy(cfb->iv,  cfb->prev+bLocksize-bufLeft,  bufleft); 

n cfb->bufLeft  = 0; 


/* 

★ 

★ 

★ 

★ 

•k 

•k 

•k 

* 

* 

★ 

* 

* 


Cryptographically  strong  ps e udo- r a ndom-numbe r generator. 

The  design  is  from  Appendix  C of  ANSI  X9.17,  "Financial 
Institution  Key  Management  (Wholesale)",  with  IDEA 
substituted  for  tripLe-DES. 

This  generates  one  block  (64  bits)  of  random  number  R,  based  on  a 
key  K,  an  initial  vector  V,  and  a time-dependent  salt  I.  I need  not 
be  truly  random,  but  should  differ  for  each  block  of  output  R,  and 
contain  as  much  entropy  as  possible.  In  X9.17,  I is  enc rypt ( K, t i me ( ) ) , 
where  time()  is  the  most  accurate  time  available.  This  has  I supplied 
(from  the  true  random  number  pool,  which  is  based  on  similar  information) 
to  the  i deaRandCyc Le  function. 


c 


The  operation  of  i de a Ra nd Cy c L e is  straight  from  X9.17:: 

R = encrypt(K,  V^'I) 

V = encrypt(K,  R''I) 

One  thing  worth  noting  is  that,  given  fixed  values  of  K and  V, 
there  is  an  isomorphism  between  values  of  I and  values  of  R. 

Thus,  R always  contains  at  Least  as  much  entropy  as  is  in  I; 
if  I is  truly  completely  random,  it  does  not  matter  if  K and/or  V 
are  known.  Thus,  if  the  supplied  I (from  the  true  random  number  pool) 
are  good,  the  output  of  this  is  good. 
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/* 

* Fills  in  the  supplied  buffer  with  up  to  "count"  p s e u do- r a ndom  bytes. 

* Returns  the  number  of  bytes  filled  in.  If  less  than  "count", 

* pgpCf bRandCyc le  will  need  to  be  called  with  a new  random  salt  value 

* before  more  bytes  are  available.  pg p C f b Ra ndBy t e s will  return  0 until 

* that  is  done. 

*/ 

unsigned 

pg p C f bRa n d By t e s C s t r u c t Pg p C f b C on t e x t *cfb,  byte  *dest,  unsigned  count) 

{ 

n unsigned  bufleft  = cfb->bufleft; 

n if  (count  > bufleft) 

n n count=bufleft; 

n cfb->bufleft  = bufleft  - count; 

n memcpyCdest,  c f b->p r e v + c f b-> c i p h e r-> c i p h e r-> b I o c k s i z e-b u f I e f t , count); 

K return  count; 

} 

/* 

* Make  more  random  bytes  available  from  i d e a Ra ndBy t e s using  the  X9.17 

* algorithm  and  the  supplied  random  salt.  Expects  " c f b-> c i p h e r->b I o c k s i z e " 

* bytes  of  salt. 

*/ 

void 

pgpC f bRa ndCy c I e ( s t r u c t Pg p C f bC on t ex t *cfb,  byte  const  *salt) 

{ 

n unsigned  i; 

n struct  PgpCipherContext  *cipher  = cfb->cipher; 

n unsigned  blocksize  = c i p h e r-> c i p h e r-> b I o c ks i z e ; 

n for  (i  = 0;  i < blocksize;  i++) 

n n cfb->ivCi]  *=  saltCi]; 

n pg pC i ph e r En c rypt ( c i phe r , cfb->iv,  cfb->prev); 

n for  (i  = 0;  i < blocksize;  i++) 

n n cfb->ivCiD  = cfb->prevCiD  ^ saltCi]; 

a pgpCipherEncryptCcipher,  cfb->iv,  cfb->iv); 

n cfb->bufleft  = blocksize; 

} 


/* 

* "Wash"  the  random  number  state  using  an  irreversible  transformation 

* based  on  the  input  buffer  and  the  previous  state. 

*/ 

void 

pgpC f bRa nd Wa s h ( s t rue t Pg p C f b Co n t ex t *cfb,  byte  const  *buf,  unsigned  len) 
{ 

n struct  PgpCipherContext  *cipher  = cfb->cipher; 

n unsigned  blocksize  = cipher->cipher->blocksize; 

n unsigned  i,  j; 


n /*  Wash  the  key  (if  supported)  */ 

n if  ( c i p h e r-> c i p h e r-> wa s h ) 

n n pg pC i ph e r Wa s h ( c i p h e r , buf,  len); 

H /* 

n * Wash  the  IV  - a bit  ad-hoc,  but  it  works.  It's 

n * basically  a CBC-MAC. 
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n 

*/ 

s 

for 

(i 

= j = 0;  i < Len;  i++)  { 

n 

n 

c-fb->ivCjD  '^=  bufCi]; 

n 

Q 

if  (++j  ==  blocksize)  { 

n 

n 

n pg p C i p h e r En c ry p t ( c i p h e r , cfb->iv,  cfb 

n 

D 

n j = 0; 

n 

n 

> 

Q 

> 

n 

/* 

Pad 

with  typical  CBC  padding  indicating  the  length 

n 

while 

(j  < blocksize) 

n 

□ 

cfb->ivCj++D  (byte)len; 

Q 

pg pC i p h e r E n c r y p t ( c i p h e r , cfb->iv,  cfb->iv); 

s 

/* 

Set 

to  empty  */ 

n 

1 

c f b 

->bufLeft  = 0; 
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/* 

* pgpCFB.h  --  a Cipher  FeedBack  abstraction. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* This  is  a PubLic  API  Function  Header 

★ 

* $Id:  pgpCFB.h, V 1.3. 2.1  1997/06/07  09:49:51  mhw  Exp  $ 

*/ 

#ifndef  PGPCFB_H 
#define  PGPCFB.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

# e nd i f 

struct  PgpCipher; 

#ifndef  T Y P E_PG P C I P H E R 

^define  T Y P E_PG P C I P H E R 1 

typedef  struct  PgpCipher  PgpCipher; 

# end i f 


struct  Pg p C i p h e r C on t ex t ; 

#ifndef  T Y P E_PG PC  I PH E R CO  NT E XT 
Sdefine  T Y P E_PG P C I PH E R CONT E XT  1 

typedef  struct  PgpCipherContext  PgpCipherContext; 
#e  n d i f 


#define  PG P_C F B_M AXBLOC KS I Z E 20 
/* 

* This  structure  does  double  duty  for  CFB  e n c r y p t i on / d e c r y p t i o n , 

* and  for  X9.17  random  number  generation. 

* 

* When  used  for  CFB,  ivC]  is  used  as  a circular  buffer.  bufLeft  is 

* the  number  of  bytes  at  the  end  which  have  to  be  fiLLed  in  before  we 

* crank  the  bLock  cipher  again.  We  do  the  bLock  cipher  operation 

* LaziLy:  bufLeft  may  be  0.  When  we  need  one  more  byte,  we 

* crank  the  bLock  cipher  and  set  bufLeft  to  7. 

* 

* prevC!]  hoLds  the  previous  8 bytes  of  ciphertext,  for  use 

* by  i dea C f bSyn c ( ) and  PhiL's,  ahem,  unique  (not  insecure,  just 

* unusuaL)  way  of  doing  CFB  encryption. 

* 

* When  used  for  X9.17  random  number  generation,  ivC3  hoLds  the  V initiaL 

* vector,  and  prevCD  hoLds  the  R random  output.  bufLeft  indicates  how 

* much  of  R is  stiLL  avaiLabLe  before  the  generator  has  to  be  cranked  again. 
*/ 


struct  PgpCf bContext  { 

n struct  PgpCipherContext  *cipher; 

n byte  p r e v 11  PG  P_C  F B_H  AXB  LO  C KS  I Z E ] ; 

n byte  i v E PG P_ C F B_H AXB LO C KS I Z E 3 ; 

n unsigned  bufLeft; 

>; 

#ifndef  T Y PE_PG P C F B C ONT E XT 
^define  T YPE.PGPC FBCONTEXT  1 
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typedef  struct  PgpCfbContext  PgpCfbContext; 

#endi f 

/*  Initialize  a PgpCfbContext  with  the  key  and  iv  */ 

void  PGPExport  pg p C f b I n i t ( s t r u c t PgpCfbContext  *cfb,  byte  const  *key, 
n byte  const  *iv); 

/*  Clear  a PgpCfbContext  of  its  data  */ 

void  PGPExport  pg p C f b W i pe ( s t r u c t PgpCfbContext  *cfb); 

/*  Allocate  a new  PgpCfbContext  structure  */ 

struct  PgpCfbContext  PGPExport  *pg p C f b C r ea t e ( s t r u c t PgpCipher  const  *c); 

/*  Copy  an  allocated  PgpCfbContext  structure  */ 

struct  PgpCfbContext  PGPExport  *pgpCfbCopy  (struct  PgpCfbContext  const  *cfb); 

/*  Free  an  allocated  PgpCfbContext  structure  */ 

void  PGPExport  pg p C f b D e s t r oy ( s t r u c t PgpCfbContext  *cfb); 

void  PGPExport  pg p C f b E n c r y p t ( s t r u c t PgpCfbContext  *cfb,  byte  const  *src, 
n byte  *dest,  size_t  len); 

void  PGPExport  pg  p C f b D e c r y p t ( s t r u c t PgpCfbContext  *cfb,  byte  const  *srCy. 
n byte  *dest,  size_t  len); 

void  PGPExport  pg p C f bSy n c ( s t r u c t PgpCfbContext  *cfb); 

/*  Returns  as  many  bytes  as  are  available  before  more  salt  is  needed  */ 
unsigned  PGPExport  pg pC f bRa ndBy t e s ( s t r u c t PgpCfbContext  *cfb,  byte  *dest, 
n unsigned  len); 

/*  Supply  c f b-> c i p h e r-> c i ph e r->b I o c ks i z e bytes  of  salt  */ 

void  PGPExport  pg p C f bRa nd Cy c I e ( s t r u c t PgpCfbContext  *cfb,  byte  const  *salt); 
/*  Wash  the  state  with  the  given  buffer  of  entropy.  */ 

void  PGPExport  pg p C f bRa nd Wa s h ( s t r u c t PgpCfbContext  *cfb,  byte  const  *buf, 
n unsigned  len); 

#ifdef  __cplusplus 

} 

# e n d i f 

#endif  /*  !PGPCFB_H  */ 
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/* 

* pgpCipher.c  - header  file  for  generic  block  ciphers 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All 

* 

* $Id:  pg p C i p h e r . c , V 1.3. 2.1  1 997/06/07  09:49:51  mhw  Exp 
*/ 


rights 

$ 


reserved. 


#ifdef  HAVE  CONFIG  H 


#include  " 

config.h" 

#e  n d i f 

#include  " 

pgpCipher.h" 

#i nc lude  " 

pgpDES3. h" 

#include  " 

pgpIDEA. h" 

# i n c 1 ude  " 

pgpCASTS.h" 

/*#include 

"nullciph.h"*/ 

#i nc lude  " 

pgpMem. h" 

#include  " 

pgpEnv. h" 

* const  cipherListCD  = { 
*/ 


>; 


static  struct  PgpCipher  const 
n NULL,  /*  ScipherNULL, 

o ScipherlDEA, 

n &cipher3DES, 

n &cipherCAST5 


struct  PgpCipher  const  * 

pg p C i p h e r By N umbe r (unsigned  num) 

{ 

n if  (num  >=  sizeof  (cipherList)  / sizeof  ( c i p h e r L i s t C 0 D ) ) 

n n return0; 

n return  c i ph e r L i s t C n urn D ; 

} 


/*  Look  up  a cipher  by  name  (of  any  use?  Anyway,  I wrote  it.  */ 
struct  PgpCipher  const  * 

pgpCi pherByName  (char  const  *name,  size_t  namelen) 

{ 


n 

unsigned  i; 

D 

Struct 

PgpCi 

pher  const  *cipher; 

n 

for  ( i 

= 0; 

i < sizeof  (cipherList)  / sizeof  (cipherListC03); 

n 

la 

c i p h 

er  = c i p h e r L i s t C i D ; 

n 

n 

i f ( 

cipher  &S  Imemcmp  (name,  c i p h e r->na me , namelen)  &S 

n 

n 

ci pher->nameCname len3  ==  '\0') 

s 

n 

Q 

return  cipher;  /*  That's  it.  */ 

Q 

> 

n 

return 

0;n 

n /*not  found*/ 

} 

void 

pg p C i ph e r W i pe ( s t r u c t Pg p C i p h e r C on t ex t *cc) 

{ 

n memset(cc->priv,  0,  cc->cipher->context_size); 

} 

struct  Pg p C i p h e r C on t e X t * 
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pg p C i p h e r C r ea t e ( s t r u c t PgpCipher  const  *cipher) 

struct  PgpCipherContext  *cc; 
void  *priv; 

priv  = pgpMemALLoc(cipher->context_size); 
if  (!priv) 
n returnO; 

cc  = (struct  PgpCipherContext  * ) pg pMem A L L o c ( s i z eo f ( * c c ) ) ; 
if  ( !cc)  { 

n pg pMem F r e e ( p r i V ) ; 

a returnO; 

> 

memset  (priv,  0,  c i p h e r-> c o n t e x t _s i z e ) ; 
cc->cipher  = cipher; 
c c->p  riv  = priv; 
return  cc; 

struct  PgpCipherContext  * 

pg p C i p h e r C opy  (struct  PgpCipherContext  const  *cc) 

struct  PgpCipherContext  *newcc; 

newcc  = pgpCipherCreate  (cc->cipher); 
if  (!newcc) 
n return  NULL; 

memcpy  ( ne w c c->p r i v , cc->priv,  c c-> c i p h e r-> con t ex t _ s i z e ) ; 
return  newcc; 

void 

pgpC i phe r Des t roy ( s t r u c t PgpCipherContext  *context) 

{ 

n if  (context)  ( 

n n pg p C i p h e r W i p e ( c on t ex t ) ; 

n n pg pMem F r e e ( c on t e X t ->p r i V ) ; 

n n pg pMem F r e e ( c o n t e X t ) ; 

n > 

> 

/* 

* "Bulk"  refers  to  bulk  data.  "Key"  refers  to  other 

* keys  and  similar  small  things.  You  might  want  to 

* make  different  s pe ed / s e c u r i t y tradeoffs  for  the  two. 

*/ 

struct  PgpCipher  const  * 

pgpC i phe r Def a u I t Bu I k ( s t r u c t PgpEnv  const  *env) 

return  pgpC  i phe rByNumbe r ( pg pe n vG e 1 1 n t (env,  PGP E N V_ C I PH E R , 
n n n n n NULL,  NULL)); 


Choose  cipher  for  key  encryption.  Not  used  for  V2  compatible  keys. 
Override  pgpenv  defaults  with  our  own  default. 

*/ 
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struct  PgpCipher  const  * 

pg p C i p h e r D e f a u L t Key ( s t r u c t PgpEnv  const  *env) 

{ 

n int  ciphernum; 

n int  cipherpri; 

H ciphernum  = pgpenvGetInt  (env,  PG  P E N\/_  C I PH  E R , Scipherpri, 

n if  (cipherpri  < PG P E N V_ P R I _ C 0 N F I G ) 

n n ciphernum  = PG P_ C I P H E R_C A S T 5 ; 

n return  pg p C i p h e r By N umb e r (ciphernum); 

} 


/*  Use  this  for  old  pre-PGP3  key  encryption;  default  to  backwards 
struct  PgpCipher  const  * 

pgpCipherDefauLtKeyV2(struct  PgpEnv  const  *env) 

{ 

a int  ciphernum; 

a int  cipherpri; 

n ciphernum  = pgpenvGetInt  (env,  PGPENV_C I PH ER,  Scipherpri, 

n if  (cipherpri  < PG P E N V_ PR  I _C ON F I G ) 

n n ciphernum  = PGP_CIPHER_IDEA; 

n return  pg p C i ph e r By N umbe r (ciphernum); 

} 
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/* 

* pgpCipher.h  - header  file  for  generic  block  ciphers 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved 

★ 

* This  is  a Public  API  Function  Header 

★ 

* $Id:  pgpCi pher . h,v  1.5. 2.1  1 997/06/07  09:49:51  mhw  Exp  $ 

*/ 

#ifndef  PGPCIPHER.H 
#define  PGPCIPHER.H 

#include  "pgpUsuals.h"  /*  for  byte,  word16  */ 

#ifdef  ..cplusplus 
extern  "C"  { 

# e n d i f 


/*  A description  of  a cipher  */ 
struct  PgpCipher  { 
a 
n 
o 
□ 
n 


/*  PGP  Cipher  Type  Byte  */ 


char  const  *name; 
byte  type;n  n 

unsigned  blocksize; 
unsigned  keysize; 
unsigned  context. si ze; 
n unsigned  c on t ex t .a  I i g n ; 

n void  (*key)(void  *priv,  byte  const  *key); 

n void  (*encrypt)(void  *priv,  byte  const  *in,  byte  *out),- 

n void  (*wash)(void  *priv,  byte  const  *buf,  unsigned  len); 

>; 

#ifndef  T YPE.PG P C I PH E R 

^define  T YPE.PG PC  I PH E R 1 

typedef  struct  PgpCipher  PgpCipher; 

# e nd i f 

/* 

* A cipher's  private  context  is  an  extension  on  this  - 

* the  size  and  alignment  restrictions  for  the  type  are  documented 

* in  the  struct  Cipher. 

*/ 

struct  PgpCi pherContext  { 
n 
n 

>; 

#ifndef  T Y PE.PGPC I PH E RCONTE XT 
^define  TYPE.PGPCIPHERCONTEXT  1 

typedef  struct  Pgp C i p h e r Con t e x t Pg p C i p h e r C o n t e x t ; 

# e nd i f 


struct  PgpCipher  const  *cipher; 
void  *priv; 


/*  Macros  to  access  the  member  functions  */ 

^define  pg pC i ph e r Key ( c c , k)  ( ( c c ) -> c i p h e r-> key ( ( c c ) ->p r i v , k)) 

^define  pg pC i p h e r E n c r y p t ( c c , in,  out)  \ 

n n n ( ( c c ) -> c i ph e r->e n c ry p t ( ( c c ) ->p r i v , in,  out)) 

#define  pg pC i p h e r Wa s h ( c c , buf,  len)  ( ( c c ) -> c i p h e r ->wa s h ( ( c c ) ->p r i v , buf. 


/*  Wipe  out  a Pg pC i ph e r C on t e x t without  freeing  it  */ 
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void  PGPExport  pg p C i p h e r W i pe  (struct  PgpC  i p h e r Con t ex t *cc); 


/*  Lookup  ciphers  by  name  and  number  */ 

struct  PgpCipher  const  PGPExport  * pg p C i p h e r By N umbe r (unsigned  num); 
struct  PgpCipher  const  PGPExport  *p g p C i p h e r By N a me  (char  const  *name, 
n size_t  nameLen); 

/*  create  and  destroy  Cipher  Contexts  from  a cipher  */ 
struct  Pg p C i p h e r C o n t e X t PGPExport  *p g p C i p h e r C r e a t e ( 
n struct  PgpCipher  const  *cc); 

void  PGPExport  pg p C i p h e r D e s t r oy  (struct  Pg p C i p h e r C on t e x t *cc); 

struct  Pg p C i p h e r C o n t e X t PGPExport  *pg p C i p h e r C o py  ( 
n struct  PgpCi pherContext  const  *cc); 

/*  Cipher  Numbers  */ 

#define  PG P_ C I P H E R_N U L L 0 
#define  PG P_ C I PH E R_ I D E A 1 
#define  PGP_CIPHER_3DES  2 
^define  PG P_C I PH E R_C A ST  5 3 


/*  Get 
struct 
struct 
□ 

struct 

n 

struct 

Q 


the  default  ciphers  for  operations  */ 

PgpEnv; 

PgpCipher  const  PGPExport  *pg p C i p h e r D e f a u L t Bu L k ( 
struct  PgpEnv  const  *env); 

PgpCipher  const  PGPExport  *pg p C i p h e r D e f a u L t Key ( 
struct  PgpEnv  const  *env); 

PgpCipher  const  PGPExport  *pg p C i p h e r D e f a u L t Key V2 ( 
struct  PgpEnv  const  *env); 


/*  Static  buffer  size  for  keys  */ 

#define  PGP_CIPHER_HAXKEYSIZEn  32n  /*  256  bits  */ 


Sifdef  __cpLuspLus 

> 

# e nd i f 


#endif  /*  !PGPCIPHER_H  */ 
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/* 

* pgpDES3.c  - TripLeDES  EDE  Encryptor 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* pgpDES3.c  95/09/11  23:29:03  EOT  by  Richard  Outerbridge 

* 

* $Id:  pgpDES3.c,v  1.1. 2.1  1997/06/07  09:49:52  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 


#include 

//include 

//include 

//include 


pgpCipher.h 
pgpDES3. h" 
pgpHem. h" 
pgpUsua  L s . h 


/*  The  size  of  a scheduled  DES  key  */ 

^define  DES_KEYWORDS  32 

^define  DES_KEYBYTES  ( s i z eo f ( wo r d3 2 ) * D E S_KE Y WO R D S ) 
^define  D E S 3_KE Y WO R D S ( 3* D E S _KE Y WO R D S ) 

//define  DES3  KEYBYTES  ( s i z eo  f ( wo  r d32  ) *D  E S 3_KE  Y WO  R D S ) 


#define  DES3  USERKEYBYTES  24 


Static 

word32  const 

bigbyteC24]  = { 

a 

0x800000L,Q 

0x4000001, n 

0x200000L,  a 

0x100000L, 

B 

0x80000L,n 

0x40000L,n 

0x20000 L,n 

0x10000L, 

B 

0x8000L,n 

0x4000L,n 

0x2000L,n 

0x1 000L, 

n 

0x800L,nn 

0x400L,nn 

0x200L,nn 

0x1 00L, 

B 

0x80L,n  D 

0x40L,n  n 

0x20L,n  n 

0x1 0L, 

a 

0x8L,n  n 

0x4L,n  n 

0x2L,n  a 

0x1 Ln  >; 

/*  Use 

the  key  schedule  specified  in 

the  Standard  (ANSI 

X3. 92-1981 ) 

static  byte  const  pc1C56D  = { 


B 

56, 

00 

> 

40, 

32, 

24, 

16, 

8,n 

0, 

57, 

49, 

41, 

33, 

25, 

17 

B 

9, 

1, 

58, 

50, 

42, 

34, 

26, n 

18, 

10, 

2, 

59, 

51, 

43, 

35 

B 

62, 

54, 

46, 

38, 

30, 

22, 

14, n 

6, 

61, 

53, 

45, 

37, 

29, 

21 

B 

13, 

5, 

60, 

52, 

44, 

36, 

28, n 

20, 

12, 

4, 

27, 

19, 

11, 

3 

Static 

byte 

const  totrotC16] 

= 

{ 

n 

n 

2, 

4, 

6, 

8, 

10, 

12,  14, 

15, 

17, 

19, 

21, 

23, 

25, 

27 

static 

byte 

const  pc21I483  = 

{ 

n 

13, 

16, 

10, 

23, 

0, 

4, 

“ 2,  27, 

14, 

5, 

20, 

9, 

n 

22, 

18, 

11, 

3, 

25, 

7, 

“15,  6, 

26, 

19, 

12, 

1, 

n 

40, 

51, 

30, 

36, 

46, 

54, 

n29,  39, 

50, 

44, 

32, 

47, 

n 

43, 

48, 

38, 

55, 

33, 

52, 

n45,  41, 

49, 

35, 

28, 

31 

>; 

/* 

* This  is  a L e s s- t h a t -b r i L L i a n t key  scheduling  routine. 

* It  could  stand  optimization  some  time. 

* 

* cookey  "cooks"  the  key  into  the  desired  form,  from  the  basic  one  that 

* has  the  keys  for  S-boxes  1 through  8 in  adjacent  words  of  the 
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* "raw"  array.  I.e.  the  bits  start  out  Like  this: 

* xxxxxxxxlll 11 1222222333333444444 

* XXXXXXXX555555666666777777888888 

* We  actually  want  the  keys  to  Look  Like  this: 

1 1 1 1 1 1 xx333333xx555555xx777777xx 
222222xx444444xx666666xx888888xx 

Where  the  "xx"  patterns  are  set  to  01020300  for  use  by  the 
Lookup  code  in  the  main  encrypt  Loop. 


* 

★ 

* 

★ 

*/ 

static  void 

cookey  (word32  *raw,  word32  *cooked) 

{ 

n i n t i ; 


-box 


n 

for 

( i 

= 0 ; i < 16; 

i-n-,  raw  +=  Z,  cooked  -t 

C\J 

11 

n 

□ 

cookedC03 

= (rawC0]  S 0x00fc0000L) 

<< 

8; 

Q 

n 

cookedC0II  | 

= (rawC0]  & 0x00000fc0L) 

<< 

12; 

n 

B 

cooked[0]  1 

= (rawCi:  S 0x00fc0000L) 

>> 

8; 

n 

B 

cooked[0]  1 

= (rawCi:  8 0x00000fc0L) 

>> 

4; 

n 

B 

cooked[!03  | 

= 0x01020300; 

□ 

B 

cookedCI  ] 

= (rawC0]  & 0x0003f000L) 

<< 

14; 

n 

B 

cookedCID  | 

= (rawC0:  8 0x0000003fL) 

<< 

18; 

n 

B 

cookedCI 3 | 

= (rawCi:  8 0x0003f000L) 

>> 

2; 

a 

B 

cookedCI]  | 

= (rawCi:  8 0x0000003fL) 

<< 

2; 

Q 

B 

cookedCI ] | 

= 0x01020300; 

n 

} 

n 

> 

return; 

n 

static 

void 

des  key 

(byte 

const  *key,  int  decryptf,  word32  *outbuf) 

n 

i n t 

i y 

3 A L,  m,  n; 

n 

byte 

pc1mC56],  pcrC56]; 

n 

wo  r d3  2 

knC32]; 

n 

for 

c j 

= 0;  i < 56; 

j-t-t)  { 

n 

n 

L = pcICj]; 

n 

n 

m = L & 07; 

n 

n 

pcImCj]  = C 

keyCL  >>  33  >>  CL  8 7) 

) 8 

1; 

o 

> 

n 

for 

( i 

= 0 ; i < 16; 

i ++  ) { 

a 

n 

m = (decryptf  ? 15-i  : i)  <<  1; 

B 

n 

n = m -r  1 ; 

B 

n 

knCm]  = knCn]  = 0L; 

B 

n 

for  (j  = 0; 

j < 28;  j-r-t)  C 

B 

n 

n L = 

j -t  totrotCi]; 

B 

B 

n 1 f 

(L  >=  28) 

B 

B 

B B 

L -=  28; 

B 

B 

a pcrCj]  = pcImCL]; 

B 

B 

> 

B 

B 

for  Cj  = 28 

; j < 56;  j-r-t)  { 

B 

B 

a L = 

j -t  totrotCi]; 

B 

B 

a i f 

(L  >=  56) 

B 

B 

n D 

L -=  28; 

B 

B 

a pcrCj]  = pcImCL]; 

B 

B 

} 

B 

B 

for  (j  = 0; 

j < 2 4;  j ++ ) { 
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n 

D □ 

if  (pcrCpc2i:j3]) 

□ 

n □ 

□ 

kn  CmD  | = b i 

gbyteC jJ; 

n 

n Q 

if  (pcri:pc2i:j+24::) 

n 

□ n 

Q 

knCn3  |=  bi 

gbyteC j D; 

n 

n 

n } 

} 

n 

cookeyCkn, 

outbuf); 

n 

> 

return; 

/*  S- 

boxes  1 , 3,  5 , 

7,  plus  P permutation. 

rotated  */ 

static  word32  const 

SP0C512:  = i 

n 

0x004041 00, 

0X00000000, 

0x00004000, 

0x00404101 , 

n 

0x00404001 , 

0x000041 01 , 

0X00000001 , 

0x00004000, 

a 

0X00000100, 

0x004041 00, 

0x00404101 , 

0X000001 00, 

n 

0x004001  01  , 

0x00404001 , 

0x00400000, 

0X00000001 , 

n 

0X000001 01 , 

0x00400100, 

0x004001 00, 

0x000041 00, 

n 

0x00004100, 

0x00404000, 

0x00404000, 

0x004001 01 , 

n 

0x00004001  , 

0x00400001 , 

0x00400001 , 

0x00004001 , 

□ 

0X00000000, 

0X00000101 , 

0x00004101, 

0x00400000, 

□ 

0x00004000, 

0x00404101 , 

0X00000001 , 

0x00404000, 

n 

0x00404100, 

0x00400000, 

0x00400000, 

0X000001 00, 

n 

0x00404001 , 

0x00004000, 

0x000041 00, 

0x00400001 , 

u 

0X000001 00, 

0X00000001 , 

0x004001 01 , 

0x000041 01 , 

n 

0x00404101 , 

0x00004001 , 

0x00404000, 

0x004001 01 , 

a 

0x00400001 , 

0X000001 01 , 

0x00004101, 

0x004041 00, 

n 

0X000001 01 , 

0x004001 00, 

0x00400100, 

0X00000000, 

n 

0x00004001 , 

0x00004100, 

0X00000000, 

0x00404001 , 

n 

0x00000082, 

0x02008080, 

0X00000000, 

0x02008002, 

Q 

0x02000080, 

0X00000000, 

0x00008082 , 

0x02000080, 

n 

0x00008002 , 

0x02000002 , 

0x02000002, 

0x00008000, 

n 

0x02008082, 

0x00008002 , 

0x02008000, 

0x00000082 , 

n 

0x02000000, 

0x00000002 , 

0x02008080, 

0x00000080, 

D 

0x00008080, 

0x02008000, 

0x02008002, 

0x00008082, 

n 

0x02000082, 

0x00008080, 

0x00008000, 

0x02000082, 

n 

0x00000002, 

0x02008082, 

0x00000080, 

0x02000000, 

n 

0x02008080, 

0x02000000, 

0x00008002, 

0x00000082, 

n 

0x00008000, 

0x02008080, 

0x02000080, 

0X00000000, 

n 

0x00000080, 

0x00008002, 

0x02008082, 

0x02000080, 

n 

0x02000002, 

0x00000080, 

0X00000000, 

0x02008002, 

□ 

0x02000082, 

0x00008000, 

0x02000000, 

0x02008082, 

□ 

0x00000002, 

0x00008082, 

0x00008080, 

0x02000002, 

n 

0x02008000, 

0x02000082, 

0x00000082, 

0x02008000, 

n 

0x00008082, 

0x00000002, 

0x02008002, 

0x00008080, 

Q 

0x00000040, 

0x00820040, 

0x00820000, 

0x1 0800040, 

n 

0x00020000, 

0x00000040, 

0x1 0000000, 

0x00820000, 

n 

0x10020040, 

0x00020000, 

0x00800040, 

0x1 0020040, 

n 

0x10800040, 

0x1 0820000, 

0x00020040, 

0x1 0000000, 

n 

0x00800000, 

0x1 0020000, 

0x1 0020000, 

0X00000000, 

n 

0x10000040, 

0x10820040, 

0x10820040, 

0x00800040, 

n 

0x1 0820000, 

0x10000040, 

0X00000000, 

0x1 0800000, 

o 

0x00820040, 

0x00800000, 

0x10800000, 

0x00020040, 

n 

0x00020000, 

0x10800040, 

0x00000040, 

0x00800000, 

n 

0x10000000, 

0x00820000, 

0x1 0800040, 

0x1 0020040, 

a 

0x00800040, 

0x1 0000000, 

0x10820000, 

0x00820040, 

u 

0x10020040, 

0x00000040  , 

0x00800000, 

0x1 0820000, 

CCCHK 
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n 

0x10820040, 

0x00020040, 

0x1 0800000, 

0x10820040, 

n 

0x00820000, 

0X00000000, 

0x1 0020000, 

0x1 0800000, 

Q 

0x00020040, 

0x00800040, 

0x10000040, 

0x00020000, 

□ 

0X00000000, 

0x1 0020000, 

0x00820040, 

0x1 0000040, 

Q 

0x00080000, 

0x81 080000, 

0x81000200, 

0X00000000, 

Q 

0x00000200, 

0x81 000200, 

0x80080200, 

0x01080200, 

n 

0x81080200, 

0x00080000, 

0X00000000, 

0x81 000000, 

Q 

0x80000000, 

0X01 000000, 

0x81 080000, 

0x80000200, 

n 

0x01 000200, 

0x80080200, 

0x80080000, 

0x01000200, 

□ 

0x81 000000, 

0x01080000, 

0x01080200, 

0x80080000, 

n 

0x01 080000, 

0x00000200, 

0x80000200, 

0x81080200, 

□ 

0x00080200, 

0x80000000, 

0X01 000000, 

0x00080200, 

□ 

0X01 000000, 

0x00080200, 

0x00080000, 

0x81000200, 

Q 

0x81 000200, 

0x81 080000, 

0x81 080000, 

0x80000000, 

s 

0x80080000, 

0X01 000000, 

0x01000200, 

0x00080000, 

n 

0x01080200, 

0x80000200, 

0x80080200, 

0x01080200, 

Q 

0x80000200, 

0x81 000000, 

0x81080200, 

0x01 080000, 

□ 

0x00080200, 

0X00000000, 

0x80000000, 

0x81080200, 

n 

0X00000000, 

0x80080200, 

0x01 080000, 

0x00000200, 

Q 

0x81 000000, 

0x01000200, 

0x00000200, 

0x80080000  >; 

/* 

S-boxes  2,  4,  6, 

8,  plus  P permutation. 

rotated  */ 

static  word32  const 

spi:5i2:  = 

{ 

n 

0x20042008, 

0x20002000, 

0x00002000, 

0x00042008, 

n 

0x00040000, 

0x00000008, 

0x20040008, 

0x20002008, 

Q 

0x20000008, 

0x20042008, 

0x20042000, 

0x20000000, 

n 

0x20002000, 

0x00040000, 

0x00000008, 

0x20040008, 

□ 

0x00042000, 

0x00040008, 

0x20002008, 

0X00000000, 

□ 

0x20000000, 

0x00002000, 

0x00042008, 

0x20040000, 

□ 

0x00040008, 

0x20000008, 

0X00000000, 

0x00042000, 

n 

0x00002008, 

0x20042000, 

0x20040000, 

0x00002008, 

n 

0X00000000, 

0x00042008, 

0x20040008, 

0x00040000, 

n 

0x20002008, 

0x20040000, 

0x20042000, 

0x00002000, 

Q 

0x20040000, 

0x20002000, 

0x00000008, 

0x20042008, 

n 

0x00042008, 

0x00000008, 

0x00002000, 

0x20000000, 

n 

0x00002008, 

0x20042000, 

0x00040000, 

0x20000008, 

n 

0x00040008, 

0x20002008, 

0x20000008, 

0x00040008, 

Q 

0x00042000, 

0X00000000, 

0x20002000, 

0x00002008, 

n 

0x20000000, 

0x20040008, 

0x20042008, 

0x00042000, 

□ 

0x40200800, 

0x40000820, 

0x40000820, 

0x00000020, 

n 

0x00200820, 

0x40200020, 

0x40200000, 

0x40000800, 

Q 

0X00000000, 

0x00200800, 

0x00200800, 

0x40200820, 

Q 

0x40000020, 

0X00000000 , 

0x00200020, 

0x40200000, 

Q 

0x40000000, 

0x00000800, 

0x00200000, 

0x40200800, 

n 

0x00000020, 

0x00200000, 

0x40000800, 

0x00000820, 

n 

0x40200020, 

0x40000000, 

0x00000820, 

0x00200020, 

tt 

0x00000800, 

0x00200820, 

0x40200820, 

0x40000020, 

a 

0x00200020, 

0x40200000, 

0x00200800, 

0x40200820, 

n 

0x40000020, 

0X00000000, 

0X00000000, 

0x00200800, 

n 

0x00000820, 

0x00200020, 

0x40200020, 

0x40000000, 

n 

0x40200800, 

0x40000820, 

0x40000820, 

0x00000020, 

□ 

0x40200820, 

0x40000020, 

0x40000000, 

0x00000800, 

n 

0x40200000, 

0x40000800, 

0x00200820, 

0x40200020, 

n 

0x40000800, 

0x00000820, 

0x00200000, 

0x40200800, 

n 

0x00000020, 

0x00200000, 

0x00000800, 

0x00200820, 
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n 

0x08000004, 

0x081 00000, 

0X00001 000, 

0x081 01004, 

o 

0x081 00000, 

0x00000004, 

0x08101004, 

0X001 00000, 

n 

0x08001 000, 

0x00101004, 

0X001 00000, 

0x08000004, 

n 

0x001 00004, 

0x08001 000, 

0x08000000, 

0x00001004, 

n 

0X00000000, 

0x001 00004, 

0x08001004, 

0X00001 000, 

n 

0X001 01 000, 

0x08001 004, 

0x00000004, 

0x08100004, 

n 

0x08100004, 

0X00000000, 

0x00101 004, 

0x081 01 000, 

n 

0x00001 004, 

0X00101000, 

0x08101000, 

0x08000000, 

n 

0x08001 000, 

0x00000004, 

0x08100004, 

0X00101 000, 

n 

0x081 01004, 

0X00100000, 

0x00001004, 

0x08000004, 

□ 

0X001 00000, 

0x08001000, 

0x08000000, 

0x00001 004, 

n 

0x08000004 , 

0x08101004, 

0X00101 000, 

0x081 00000, 

n 

0x00101004, 

0x08101000, 

0X00000000, 

0x081 00004, 

n 

0x00000004, 

0X00001000, 

0x081 00000, 

0x001 01 004, 

n 

0X00001 000, 

0x001 00004, 

0x08001 004, 

0X00000000, 

n 

0x081 01 000, 

0x08000000, 

0x001 00004, 

0x08001 004, 

n 

0x04000410, 

0x00000400, 

0X0001 0000, 

0x04010410, 

o 

0x04000000, 

0x0400041 0, 

0X0000001 0, 

0x04000000, 

n 

0X00010010, 

0x0401 0000, 

0x04010410, 

0x0001 0400, 

n 

0x04010400, 

0x0001041 0, 

0x00000400, 

0X0000001 0, 

n 

0x0401 0000, 

0x0400001 0, 

0x04000400, 

0x00000410, 

n 

0x00010400, 

0X0001001 0, 

0x0401 001 0, 

0x04010400, 

s 

0x00000410, 

0X00000000, 

0X00000000, 

0x0401 0010, 

Q 

0x0400001 0, 

0x04000400, 

0x0001 041 0, 

0X00010000, 

n 

0x00010410, 

0X0001 0000, 

0x0401 0400, 

0x00000400, 

n 

0X0000001 0, 

0x04010010, 

0x00000400, 

0x00010410, 

u 

0x04000400, 

0X0000001 0, 

0x0400001 0, 

0x0401 0000, 

u 

0x04010010, 

0x04000000, 

0X0001 0000, 

0x04000410, 

n 

0X00000000, 

0x04010410, 

0X0001 0010, 

0x0400001 0, 

n 

0x04010000, 

0x04000400, 

0x0400041 0, 

0X00000000, 

n 

0x04010410, 

0x00010400, 

0x0001 0400, 

0x0000041 0, 

n 

/* 

0x00000410, 

0x0001001 0, 

0x04000000, 

0x04010400  >; 

* This  encryption  function  is  fairly  clever  in  the  way  it  does  its 

* s-box  lookup.  The  S-boxes  are  indexed  by  bytes,  rather  than 

* words,  because  that's  faster  on  many  machines,  and  shifting 

* everything  two  bits  to  do  the  multiply  by  4 is  trivial. 

* Then,  the  indexing  into  the  various  S boxes  is  done  by 

* adding  the  appropriate  offset  bits  into  the  key  array,  so  the 

* addition  is  done  by  the  XOR  with  the  key  rather  than  having  to 

* be  done  explicitly  here. 

*/ 

static  void 

des3DES  (byte  const  inblockC83,  byte  ou  t b I o c k C 8 !] , word32  const  *keys) 

< 

n word32  s,  t,  right,  leftt; 

n int  round,  iterate; 


H 

n 

lef ttn 

= ( ( wo r d3 2 ) i nb 1 0 c k C 0 ] 

<< 

24) 

1 ((word32)inblockCi: 

<< 

16) 

1 ( ( wo r d3 2 ) i nb 1 0 c k C 2 3 

<< 

8) 

1 (word32)inblockC33; 

n 

r i g h t n 

= ( ( wo r d32 ) i nb 1 0 c kC 43 

<< 

24) 

1 ( ( wo r d3 2 ) i nb 1 0 c k C 5 3 

<< 

16) 

1 ( C wo r d3 2 ) i nb 1 0 c k C 6 3 

<< 

8) 

1 Cword32)inblockC73; 
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a /*  Initial  permutation  IP  */ 

n t = (Cleftt  >>  4)  * right)  S 0x0f0f0f0fL; 

n right*=t; 

n Leftt''=(t<<4); 

n t = (Cleftt  >>  16)  ^ right)  S 0x0000ffffL; 

n right''=t; 

n leftt  (t  <<  16); 

n t = ((right  >>  2)  * leftt)  & 0x33333333L; 

a leftt  *=t; 

n right''=(t<<2); 

n t = ((right  >>  8)  ^ leftt)  & 0x00ff00ffL; 

n leftt''=t; 

n right*=(t<<8); 

n leftt  = ((leftt  >>  1)  | (leftt  « 31)); 

n t = (leftt  ^ right)  & 0x55555555L; 

a leftt''=t; 

n right*=t; 

n right  = ((right  >>  1)  | (right  <<  31)); 


n /*  The  main  encryption  loop  */ 

n iterate=3; 


n gotoDes0; 


n 

do 

{ 

n 

n 

t = right; 

n 

n 

right  = 

leftt 

f 

n 

Q 

leftt  = 

t; 

Des0  : n 

□ 

n 

for  (round 

= 

0; 

round  < 8 

; round++)  { 

Q 

□ 

D 

s 

= 

(right  & 0xfcfcfcfc)  ''  keysC0D; 

n 

Q 

a 

t 

= 

(((right  >> 

28)  1 (right  <<  4)) 

& 

0xf cf cf cf c ) 

n 

n 

n 

n 

* keysCi: 

H 

n 

n 

leftt 

A — 

* ( wo  rd32 

*)((char  *)SP0+C  s 

& 

0x3f  c ) ) 

n 

n 

□ 

A 

* ( wo  rd32 

*)((char  *)SP0+(Cs 

>> 

00 

& 

0x3f  c ) ) 

n 

n 

n 

A 

*(word32 

*)((char  *)SP0+(Cs 

>> 

16) 

& 

0x3f  c ) ) 

a 

D 

n 

A 

*(word32 

*)((char  *)SP0+(Cs 

>> 

24) 

S 

0X0f  c ) ) 

n 

n 

n 

A 

*(word32 

*)(Cchar  *)SP1+(  t 

S 

0x3f c)  ) 

n 

□ 

Q 

A 

*(word32 

*)C(char  *)SP1+C(t 

>> 

4^ 

00 

S 

0x3f c)  ) 

Q 

□ 

n 

A 

*(word32 

*) ( (char  *)SP1+( (t 

>> 

16) 

S 

0x3f c)  ) 

Q 

n 

D 

A 

* ( wo  rd32 

*)C(char  *)SP1+((t 

>> 

24) 

& 

0x0f  c ) ) ; 

n 

n 

□ 

s 

= 

(leftt  S 0xfcfcfcfc)  ^ keysC23; 

o 

u 

a 

t 

= 

(((leftt  >> 

28)  1 Cleftt  « 4)  ) 

& 

0xfcfcfcfc) 

Q 

n 

n 

n 

keys[3] 

r 

n 

Q 

Q 

right 

A — 

*(word32 

*)((char  *)SP0+(  s 

& 

0x3f c)  ) 

Q 

n 

n 

A 

*(word32 

*)(Cchar  *) S P0+ ( ( s 

>> 

00 

& 

0x3f c)  ) 

□ 

n 

n 

A 

*(word32 

*)((char  *)SP0+((s 

>> 

16) 

& 

0x3f c)  ) 

n 

n 

s 

A 

*(word32 

*)(Cchar  *)SP0+((s 

>> 

24) 

S 

0X0f  c ) ) 

n 

n 

D 

A 

*(word32 

*) ( (char  *)SP1+(  t 

S 

0x3f c)  ) 

n 

n 

□ 

A 

*(word32 

*)((char  *)SP1+((t 

>> 

8 ) 

S 

0x3f c)  ) 

n 

n 

n 

A 

*(word32 

*)((char  *)SP1+((t 

>> 

16) 

& 

0x3f  c ) ) 

n 

Q 

n 

A 

*Cword32 

*)((char  *)SP1+((t 

>> 

24) 

& 

0x0f  c ) ) ; 

Q 

n 

□ 

keys 

+ = 

4; 

□ 

n 

> 

n 

> 

while 

(--iterate) 

n 

/* 

Inverse  IP  * 

/ 

u 

leftt  = 

((  leftt 

<< 

1 ) 

1 

(leftt  >> 

31  ) ); 
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n t = CLeftt  ''  right)  & 0x55555555L; 

n Leftt''=t; 

n right‘'=t; 

n right  = ((right  <<  1)  | (right  >>  31)); 


n 

t = (deftt 

>>  8)  right) 

& 

0x00ff00ffL; 

□ 

right  *=  t; 

n 

leftt  *=  (t 

« 8); 

n 

t = ((leftt 

>>  2)  * right) 

& 

0X33333333L; 

n 

right  t; 

n 

leftt  (t 

« 2); 

n 

t = ((right 

» 16)  * leftt) 

& 

0x0000f f f f L 

n 

leftt  *=  t; 

n 

right  ''=  (t 

<<  16); 

□ 

t = ((right 

>>  4)  * leftt) 

& 

0x0f 0f 0f 0f L; 

□ 

leftt  *=  t; 

s 

right  *=  (t 

<<  4); 

n 

outblockL03 

= (byte)(right 

>> 

24); 

n 

outblockCI 2 

= (byte)(right 

>> 

16); 

n 

outblock[I2] 

= (byte)(right 

>> 

8); 

n 

outblockC3!] 

= (byte)(right 

); 

n 

outblockC4] 

= (byte)(leftt 

>> 

24); 

D 

outblockCS] 

= (byte)(leftt 

>> 

16); 

n 

outblockC63 

= (byte)(leftt 

>> 

8); 

□ 

outblockC7] 

= (byte)(leftt 

); 

n 

return; 

} 


/***  Externally  called  functions  ***/ 
static  void 

des3Key  (void  *priv,  byte  const  *key) 

{ 

n /*  EDE  triple-DES  */ 

n deskey  (key  , 0,  (word32  *)priv); 

n deskey  (key+  8,  1,  (word32  *)priv  + D E S _KE YWOR D S ) ; 

a deskey  (key+16,  0,  (word32  *)priv  + 2 * D E S _KE Y WOR D S ) ; 

n /*  To  decrypt,  do  DED  with  the  keys  in  the  opposite  order  */ 

n /*  Keep  a copy  of  the  unscheduled  key  for  Washing  purposes  */ 

n memcpy  ((byte  *)priv  + D E S 3_KE YB YT E S , key,  D E S 3_U S E R KE YB YT E S ) ; 

> 

static  void 

des3Encrypt  (void  *priv,  byte  const  *in,  byte  *out) 

{ 

n des3DES  (in,  out,  (word32  const  *)priv); 

> 

/* 

* Do  one  64-bit  step  of  a Triple  Tandem  Davies-Meyer  hash  computation. 

* The  hash  buffer  is  32  bytes  long  and  contains  H (0..7),  then  G (8.  .15), 

* then  F (16. .23),  then  8 bytes  of  scratch  space.  The  buf  is  8 bytes  long. 

* xkey  is  a temporary  key  schedule  buffer,  with  room  for  *4*  DES 

* keys,  i.e.  4 * D E S KE Y WOR D S words. 

* This  and  the  extra  data  in  the  hash  buffer  are  allocated  by  the 

* caller  to  reduce  the  amount  of  buffer-wiping  we  have  to  do. 

* (It's  only  called  from  des3Wash,  so  the  interface  can  be  a bit 
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* specialized.) 

★ 

* What  is  triple  Tandem  D a v i e s-M ey e r ? Well,  it's  a simple 

* extension  of  (double)  Tandem  Davies-Meyer,  which  goes 

* like  this,  to  hash  CH,G)  with  message  block  H: 

* H ' = E_{G,M}CH) 

* G'  = E_{H,H'>(G) 

* H H' 

* G G' 

* 

* The  extension,  to  a triple-width  hash  (H,G,F)  is  just: 

* H'  = E_{F,G,M>(H) 

* G'  = E_{F,H,H'>(G) 

* F'  = E_(M,G',H'}(F) 

* H H ' 

* G *=  G ' 

* F *=  F ' 

* 

* This  schedules  individual  DES  keys  to  avoid  having  to  copy  the 

* bits  to  contiguous  buffers  and  to  re-use  the  already-scheduled 

* leys.  F and  H'  are  used  twice  in  the  same  spot,  and  H is  scheduled 

* twice  for  encryption. 

*/ 

static  void 

des3S t epT r i p I e DM  ( by  t e *hash,  byte  const  *buf,  word32  *xkey) 

{ 

a i n t i ; 

n /*  Set  up  triple-DES  with  F,  G,  M */ 

n d e s key C ha s h+ 1 6 , 0,  xkey); 

n deskey(hash+  8,  1,  xkey  + D E S _KE Y WO R D S ) ; 

n deskeyCbuf,  0,  xkey  + 2*DES_KEYW0RDS); 

n /*  Compute  H'  and  new  H */ 

a d e s 3 D E S ( h a s h , hash+24,  xkey); 

n for(i=0;i<8;i++) 

n n hashCi3''=hashCi+24D; 

n /*  Copy  encryption  schedule  for  H out  of  harm's  way  */ 

n memcpyCxkey  +3* D E S _KE Y WO R D S , x key + 2 * D E S_KE Y WO R D S , D E S_KE YB YT E S ) ; 

n /*  Set  up  triple-DES  with  F,  M,  H'  */ 

n deskeyCbuf,  1,  xkey  + DES_KEYWORDS ) ; 

B deskey(hash  + 24,  0,  xkey  + 2 * D E S _KE Y WOR D S ) ; 

n /*  Compute  G'  and  new  G */ 

B d e s 3 D E S ( h a s h+8 , hash+24,  xkey); 

B for  (i  = 0;  i < 8;  i++) 

B B hashCi+8]  *=  hashCi+24D; 

B /*  Set  up  triple-DES  with  H,  G',  H'  */ 

B memcpyCxkey,  xkey+3*DES_KEYW0RDS,  DES_KEYBYTES); 

B deskey(hash  + 24,  1,  xkey  + D E S_KE Y WO R D S ) ; 

B /*  Compute  F'  and  new  F */ 

B d e s 3 D E S ( ha s h + 1 6 , hash  + 24,  xkey); 

B for(i=0;i<8;i++) 

B n hashCi+16D  ''=  hashCi+24D; 

} 
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/* 

* Munge  the  key  of  the  C i ph e r C on t e x t based  on  the  supplied  bytes. 

* This  is  for  random-number  generation,  so  the  exact  technique  is 

* unimportant,  but  it  happens  to  use  the  current  key  as  the 

* IV  for  computing  a t r i p L e-Ta ndem  Davies-Meyer  hash  of  the  bytes, 

* and  uses  the  output  as  the  new  key. 

*/ 

static  void 

d e s 3 W a s h ( VO i d *priv,  byte  const  *buf,  unsigned  Len) 

< 

n unsigned  i; 

n byte  tempCSD; 

n Hord32  xkey:4*DES_KEYW0RDS:; 

n /*  The  key  is  used  as  the  IV  for  the  hash  */ 


n 

n 

n 

□ 

Q 

a 

n 

n 

n 

n 

n 

n 

□ 

n 

a 

□ 

n 

□ 

n 

a 

n 

□ 

a 

D 

n 

□ 


/*  Do  the  initial  blocks  of  the  hash  */ 
i = len; 

while  (i  >=  8)  { 

n d e s 3 S t e pT r i p I e DM ( ( by t e * ) p r i v+ D E S 3_KE YB YT E S , buf,  xkey); 

n buf+=8; 

n i -=  8; 

} 

/* 

* At  the  end,  we  do  Da  mg  a r d-He r k I e strengthening,  just  like 

* HD5  or  SHA.  Pad  with  0x80  then  0 bytes  to  6 mod  8,  then 

* add  the  length.  We  use  a 16-bit  length  in  bytes  instead 

* of  a 64-bit  length  in  bits,  but  that  is  cryptographically 

* irrelevant,  as  long  as  the  length  is  there. 

*/ 

/*  Do  the  first  partial  block  - i <=  7 */ 
memcpyCtemp,  buf,  i); 
tempCi++]  = 0x80; 
if  (i  > 6)  { 

n memset(temp+i,  0,  8-i); 

n d e s 3 S t e pT r i p I e DM ( ( by t e * ) p r i v + D E S 3_KE YB YT E S , temp,  xkey); 

a i = 0 ; 

> 

memset ( temp+i , 0,  6-i); 
tempC6]  = (byte)(len  >>  8); 
tempC7D  = (byte)len; 

des3StepTripleDM((byte  *)priv+DES3_KEYBYTES,  temp,  xkey); 


a /*  Re-schedule  the  key  */ 

n deskey  ((byte  * ) p r i v + D E S 3_KE YB YT E S , 0, 

n (word32*)priv); 

n deskey  ((byte  * ) p r i v+D E S 3_KE YB YT E S+  8,  1, 

n (word32  *)priv  + D E S_KE Y WO R D S ) ; 

n deskey  ((byte  * ) p r i v+D E S 3_KE YB YT E S+1 6 , 0, 

a (word32  *)priv  + 2 * D E S_KE Y WO R D S ) ; 

a memset(temp,  0,  s i z eof ( t emp ) ) ; 

a memset(xkey,  0,  sizeof(xkey)); 

} 

/* 

* Define  a struct  Cipher  for  the  generic  cipher.  This  is  the  only  real 
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* exported  symbol  --  everything  else  can  be  static,  since  everything 

* is  referenced  through  function  pointers! 

*/ 

struct  PgpCipher  const  cipher3DES  = { 
n "3DES", 

n PGP_CIPHER_3DES, 

n 8,n  n n /*  Blocksize  */ 

n DES3_USERKEYBYTES,n  /*  Keysize  */ 

n DES3_KEYBYTES  + D E S 3_U S E R KE YB YT E S , 

n a L i g n o f ( wo r d 32  ) , 

n des3Key, 

n des3Encrypt, 

n des3Wash 

>; 


#if  UNITTEST 
/*  Validation  set: 
* 


* Do u b I e- I e ng t h key, 

* Key  : 0123  4567 

* Plain  : 0123  4567 

* Cipher  : 7f1d  0a77 


s i ng I e- I e n g t h plaintext  - 
89ab  cdef  fedc  ba98  7654  3210 
89ab  cde7 
826b  8aff 


* 


^include  <stdio.h> 

^include  <time.h> 

void 

p r i n t h e X ( u n s i g n ed  char  const  *buf,  unsigned  len) 
{ 

n while  (len--)  { 

B B p r i n t f ( " %0 2 X " , *buf++); 

B B putchar(len?'':'\n'); 

B } 

} 


i nt 

mainCvoid) 

{ 


n 

unsigned  i; 

n 

c L 0 c k_ 

t c; 

B 

static 

unsigned  char  const 

keyC245  = { 

B 

B 

0X01  , 

0x23,  0x45, 

0x67, 

0x89,  0xab, 

0x  c d , 

0x  e f 

B 

B 

0xf  e. 

0xdc,  0xba, 

0x98, 

0x76,  0x54, 

0x32  , 

0x10 

B 

B 

0X01  , 

0x23,  0x45, 

0x67, 

0x89,  0xab, 

0x  c d , 

0x  e f 

B 

>; 

B Static  unsigned  char  const  plainC8]  = { 

B B 0x01,  0x23,  0x45,  0x67,  0x89,  0xab,  0xcd,  0xe7 

B }; 

B Static  unsigned  char  const  cipherC8]  = { 

B B 0x7f,  0x1d,  0x0a,  0x77,  0x82,  0x6b,  0x8a,  0xff 

B }; 

B unsigned  char  outC85; 

B word32  xkeyCDES3_KEYW0RDS  + 6],- 
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n 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

□ 

□ 

n 


d e s 3Key ( X ke y , key); 

des3Encrypt(xkey,  plain,  out); 

printfC"  key="); 

p r i n t h ex ( key , 24); 

printfC"  pLain="); 

p r i n t h e X ( p I a i n , 8); 

printfC"  out="); 

printhexCout,  8); 

printfC "cipher="); 

p r i n t h e X C c i p h e r , 8); 

if  C mem c mp C c i p h e r , out,  8)  ==  0) 

n printfC "Test  successfuLXn") 

else 

a printfC"###  ERRORXn"); 


a printfC "Doing  test  encryptionsXn"); 

n c=cLockC); 

n for  Ci  = 0;  i < 100000;  i++) 

n n d e s 3 E n c r y p t C X ke y , out,  out) 

a c=cLockC)-c; 

n printfC"%u  encryptions  required  %Lu 

n n i,  Cunsigned  Long)c); 

n return0; 

} 


#en  d i f 
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/* 

* pgpDES3.h  - headers  for  TripLeDES 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* By  Richard  Outerbridge 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpDES3.h,v  1.2. 2.1  1997/06/07  09:49:53  mhw  Exp  $ 

*/ 

#ifndef  PGPDES3_H 
#define  PGPDES3_H 

#incLude  "pgpCipher.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

#e n d i f 

/*  This  is  the  definition  of  the  3DES  cipher,  for  use  with  the  PGP 

* Generic  Cipher  code. 

*/ 

extern  struct  PgpCipher  const  cipher3DES; 

#ifdef  __cpLuspLus 

> 

Send  i f 

Sendif  /*  PGPDES3_H  */ 
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/* 

* pgpDES3_68K. c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpDES3_68K. c,v  1.1. 2.1  1 997/06/07  09:49:54  nhw  Exp  $ 

*/ 


#incLude  <stdLib.h> 


#incLude  "PGPFoneUtiLs.h 
#incLude  "pgpDES3.h" 


static  void  deskeyCuchar  *,  short,  uLong  *); 


static  asm  void  deskeyCuchar  *key,  short  edf,  uLong  *buf) 


f r a L L o c 

+ 

movem . L 

d3-d5/a2-a3,-(a7) 

Lea 

a kpp, a 2 

L ea 

akp0,a0 

movea . L 

key , a 1 

moveq 

#0,d4 

moveq 

#1 5,d0 

movea.  L 

buf  ,a3 

cmp i . w 

#EN0,edf 

beq 

a c k s 1 

L ea 

120(a3),a3 

bra 

a c ks  1 

a kp p : 

d c . w 
a kp0  : 

dc  . b 
d c . b 
dc  . b 
d c . b 


//save  registers 

//tabLe  of  permutation  adjusts 

//tabLes  of  byte/bit  offsets 

//Load  address  of  nominaL  key 

//cLear  this  register 

//do  aLL  16  rounds 

//Load  address  of  key  register 

//are  we  encrypting 

//yes  - start  now 

//no  - adjust  backfiLL 

//now  start 


0,0,0,112,112,112,112,112,224,0,112,112,112,112,112,224 


6. 6. 1.6. 6. 5. 4. 6. 7. 4. 6. 7. 2. 7. 1.5. 0. 5. 4. 5. 3. 6. 3. 7. 5. 4. 7. 6 
0,1, 2, 2, 3, 4, 4, 1,6, 2, 4, 3, 0,4, 0,2, 7, 3, 2, 3, 4, 2, 7, 1,1, 1,2, 4 

5. 5. 4. 7. 7. 7. 0. 6. 1.7. 2. 5. 5. 6. 6. 4. 7. 5. 0.7. 4. 4. 3. 5. 2. 6. 5. 7 

5. 2. 5. 1.3. 2. 0. 3. 6. 3. 2. 1.3. 3. 1.4. 5. 3. 1.2. 1.3. 7. 2. 6. 1.3.1 


d c . b 
d c . b 
d c . b 
d c . b 


4. 0. 4. 3. 4. 6. 1.3. 5. 6. 5. 0.4. 2. 1.5. 0.2. 5. 2. 5. 1.0. 0.5. 3. 0.6 

7. 2. 7. 4. 3. 0. 7. 0.6. 6. 6. 0.3. 2. 3. 5. 6. 2. 7. 3. 6. 4. 7. 1.2. 6. 7. 6 

1.4. 1.2. 0. 1. 5. 5. 5. 4. 1.6. 0.3. 1.1. 0.4. 1.0. 4. 4. 4. 1.0. 5. 4. 5 

3. 3. 2. 3. 2. 5. 2. 4. 7. 5. 3. 1.3. 4. 2. 0. 2. 1.3. 6. 6. 3. 2. 2. 6. 5. 6.1 


d c . b 
dc  . b 
d c . b 
d c . b 
a c ks  1 : 

s u ba  . w 
moveq 
a c ks  2 : 

moveq 
moveq 
a c k s 3 : 

move  . b 
move  . b 
bt  s t 
beq  . s 
bs  e t 


0,3, 5, 5, 1,4, 5, 1,1, 1,4, 5, 5, 4, 0,2, 5, 6, 4, 1,0, 5, 4, 2, 4, 4, 4,0 
2, 2, 3, 6, 7, 6, 6, 1,3, 3, 3, 4, 7, 1,6, 2, 7, 5, 6, 3, 2, 5, 6, 5, 7, 2, 2,0 

5. 2. 0. 0. 5. 0.0. 4. 1.0. 1.5. 1.3. 5. 3. 4. 6. 0.6. 0.1. 1.6. 4. 3. 1.2 

6. 4. 7. 0. 7. 4. 3. 0.2. 1.2. 6. 7. 3. 3. 2. 6. 0.3. 5. 2. 4. 6. 6. 2. 3. 3.1 


(a2)+,a0 

#7,d1 


//correct  permutation 
//do  8 bytes  worth 


«6,d2 

#0,d3 


//do  7 bits  per  byte 
//cLear  a byte  to  fiLL 


(a0)+,d4 
Ca0)+,d5 
d5,0(a1,d4.w) 
a c ks 4 
d2,d3 


//get  a byte  number 
//get  a bit  number 
//test  bit  in  key  byte 
//if  no  bit  to  set 
//eLse  set  a bit 
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acksA : 

dbf 

d2,acks3 

//Loop  untiL  aLL  bits  done 

mo V e . b 

d3,(a3)+ 

//set  byte 

dbf 

d1 ,acks2 

//Loop  through  aLL  bytes 

Lea 

-8(a3),a1 

//reset  a1  to  Last  subkey 

cmp i . w 

#EN0,edf 

//check  mode 

beq  . s 

acksS 

/ /en  c rypt i on 

L ea 

-16(a3),a3 

//adjust  fiLLing 

a c k s 5 : 

dbf 

d0,acks1 

//for  aLL  rounds 

move  . L 

#0x3f 3f 3f 3f ,d1 

//Load  bit  mask 

movea  . L 

buf ,a0 

//reLoad  key  register 

moveq 

#1 5,d2 

//Load  Loop  index 

a c k s 6 : 

move  . L 

(a0),d0 

//next  raw  target 

a nd  . L 

d1  ,d0 

//cLear  bits 

r 0 L . L 

#4,d0 

//preaLLign 

move  . 1 

d0, (a0)+ 

//set  cooked  key  - even 

a n d . 1 

d1,(a0)+ 

//set  cooked  key  - odd 

dbf 

d2,acks6 

//aLL  32  Longs 

movem . 1 

(a7)+,d3-d5/a2-a3 

//restore  registers 

f rf  ree 

rt  s 

> 

void  d e s 3 key ( u c ha r *hexkey,  short  mode,  void  **ksa) 

< 

n uLong*ks; 

n uchar  *first,  *third; 

n short  revmod; 

n *ksa  = ks  = (uLong  * ) pg p_ma L L o c ( 96  * s i z eo f ( u L ong  ) ) ; 


n 

i f ( mod  e 

==  EN0) 

n 

{ 

n 

a 

revmod  = DEI; 

a 

D 

first  = hexkey; 

n 

n 

third  = &hexkeyC16D; 

□ 

> 

Q 

e L se 

□ 

{ 

n 

□ 

revmod  = EN0; 

□ 

□ 

first  = &hexkeyC16D; 

a 

□ 

third  = hexkey; 

u 

> 

deskeyCfi rst 

, mode,  ks); 

d e s key ( &h ex  key L 8 D , revmod,  &ksC323); 
d e s key  ( t h i r d , mode,  Sks[64!]); 

> 

void  D E S D Key Don e ( vo i d *ksa) 

{ 

° pg p_f r e e ( ( u L ong  *)ksa); 

> 

n 

asm  void  D3des(uchar  *in,  uchar  *out,  void  *ksa) 
fraLLoc  + 
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movem 

. L 

d3-d7/a2,-(a7) 

mo  V e a 

. L 

i n,a0 

move. 

L 

(a0)+,d3 

/* 

D3  = L */ 

move  . 

L 

(a0),d5 

/* 

D5  = R */ 

mo ve  . 

L 

d3,d2 

/* 

EXSHHSK(R,0x0f0f0f0f,L,4, 

t mp ) 

*/ 

L s r . L 

#4,d2 

eo r . L 

d5,d2 

a nd i . 

L 

tt0x0f  0f  0f  0f  ,d2 

eo  r . L 

d2,d5 

LsL  . L 

#4,d2 

eo  r . 1 

d2,d3 

swap 

d3 

/* 

EXSHHSK(R,0x0000ffff,L,16 

, t mp ) 

*/ 

mo  ve  . 

w 

d3,d2 

mo  ve  . 

w 

d5,d3 

move  . 

w 

d2,d5 

swap 

d3 

move  . 

L 

d5,d2 

/* 

EXSHMSKCL, 0x33333333, R, 2, 

tmp ) 

*/ 

L s r . L 

#2,d2 

eo  r . L 

d3,d2 

a n d i . 

1 

#0x33333333, d2 

eo r . 1 

d2,d3 

Isl  . L 

#2,d2 

e 0 r . 1 

d2,d5 

move  . 

L 

d5,d2 

/* 

EXSHHSK(L,0x00ff00ff,R,8, 

t mp ) 

*/ 

L s r . L 

#8,d2 

e 0 r . L 

d3,d2 

a nd  i . 

L 

#0x00f f 00f f ,d2 

eo  r . L 

d2,d3 

Is  L . L 

#8,d2 

eo  r . L 

d2,d5 

ro  1 . L 

#1  ,d5 

/* 

EXSHMSKCR, 0x55555555, L,1, 

tmp) 

*/ 

move  . 

L 

d3,d2 

eo  r . L 

d5,d2 

a nd  i . 

L 

#0xaaaaaaaa,d2 

eo r . L 

d2,d5 

e 0 r . L 

d2,d3 

r 0 L . L 

#1  ,d3 

Lea 

a S P 0 , a 0 

L ea 

aspi ,a1 

movea 

. L 

ks  a , a 2 

move  . 

L 

#0x03f 003f 0,d2 

moveq 

#2,d7 

bra 

ades0 

DC  . W 

0x0123  /*  alignment  slop  */ 

/*  On  a 68030  it  helps  _a_Lot_  if  SP0  (8  SP1)  are  Long  alLigned!  */ 
aSP0: 

DC.L  0x01010400,0x00000208,0x00000100,0x00200000 
DC.L  0x00000000,0x08020200,0x02080100,0x04200002 
DC.L  0x00010000,0x00000000,0x02080000,0x04000802 
DC.L  0x01010404,0x08020008,0x42000100,0x00000000 
DC.L  0x01010004,0x08000200,0x00080000,0x00000800 
DC.L  0x00010404,0x00000000,0x00000100,0x04000802 
DC.L  0x00000004,0x00020208,0x40000000,0x00200802 
DC.L  0x00010000,0x08000200,0x02080000,0x04200800 
DC.L  0x00000400,0x00020008,0x40080100,0x04200802 
DC.L  0x01010400,0x08000008,0x00080000,0x00200000 
DC.L  0x01010404,0x08000008,0x02000100,0x00000000 
DC.L  0x00000400,0x00020000,0x40080100,0x04000002 
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DC.L  0x01000404^0x08020208,0x42000100/0x00000002 
DC.L  0x01010004,0x00020008,0x42080000,0x04000000 
DC.L  0x01000000,0x08020000,0x00080100,0x04200002 
DC.L  0x00000004,0x00000208,0x40000000,0x00000802 
DC . L 0x00000404,0x08000000,0x02000000,0x04000800 
DC.L  0x01000400,0x00000008,0x40080000,0x00200802 
DC.L  0x01000400,0x08020200,0x40080000,0x00200002 
DC.L  0x00010400,0x00000200,0x00000000,0x04000800 
DC.L  0x00010400,0x00020200,0x40000100,0x04000002 
DC.L  0x01010000,0x08020000,0x42080100,0x04200000 
DC.L  0x01010000,0x08020008,0x42080100,0x04200800 
DC.L  0x01000404,0x00020208,0x02000100,0x00200002 
DC.L  0x00010004,0x08000208,0x42080000,0x04200000 
DC  . L 0x01  000004,0x00020200,0x400001  00,0x00000800 
DC.L  0x01000004,0x00020000,0x00000000,0x00000802 
DC.L  0x00010004,0x08000208,0x42000000,0x04200802 
DC.L  0x00000000,0x00000008,0x02080100,0x00200800 
DC.L  0x00000404,0x08020208,0x02000000,0x00000002 
DC.L  0x00010404,0x00000200,0x42000000,0x04000000 
DC.L  0x01000000,0x08000000,0x00080100,0x00200800 
DC.L  0x00010000,0x08020200,0x00080000,0x04000000 
DC.L  0x01010404,0x08000000,0x42000100,0x00200800 
DC.L  0x00000004,0x00020008,0x00000100,0x00200000 
DC.L  0x01010000,0x00000208,0x02000000,0x04000802 
DC.L  0x01010400,0x00020000,0x40000000,0x04000802 
DC.L  0x01000000,0x08020200,0x02080000,0x04200002 
DC.L  0x01000000,0x08000200,0x42000100,0x04200002 
DC.L  0x00000400,0x00000000,0x40080100,0x00000002 
DC.L  0x01010004,0x00000200,0x02000100,0x00200002 
DC.L  0x00010000,0x00020008,0x40000000,0x04000000 
DC.L  0x00010400,0x08020208,0x42080000,0x04000800 
DC.L  0x01000004,0x08000200,0x02080100,0x00200000 
DC.L  0x00000400,0x08000008,0x40080100,0x04200800 
DC  . L 0x00000004,0x00000200,0x000001  00,0x00000802 
DC.L  0x01000404,0x00000000,0x02000000,0x00200802 
DC.L  0x00010404,0x08020008,0x42080000,0x04200800 
DC.L  0x01010404,0x08000208,0x42080100,0x00000802 
DC.L  0x00010004,0x00020000,0x00080100,0x04000002 
DC.L  0x01010000,0x08000000,0x42000000,0x04200802 
DC.L  0x01000404,0x08020208,0x42080100,0x04200000 
DC.L  0x01000004,0x00000008,0x02080000,0x00200800 
DC.L  0x00000404,0x00020208,0x00000000,0x00000000 
DC  . L 0x00010404,0x00020200,0x40080000,0x00000002 
DC.L  0x01010400,0x08000008,0x42000000,0x04200802 
DC.L  0x00000404,0x08020000,0x00080100,0x00000000 
DC.L  0x01000400,0x08000208,0x02000100,0x00200802 
DC.L  0x01000400,0x00000208,0x40000100,0x04200000 
DC.L  0x00000000,0x08020000,0x00080000,0x00000800 
DC.L  0x00010004,0x00020208,0x00000000,0x04000002 
DC.L  0x00010400,0x00000008,0x40080000,0x04000800 
DC.L  0x00000000,0x08020008,0x02080100,0x00000800 
DC.L  0x01010004,0x00020200,0x40000100,0x00200002 

aspi  : 

DC.L  0x80108020,0x00802001,0x20000010,0x10001040 
DC.L  0x80008000,0x00002081,0x20400000,0x00001000 
DC  . L 0x00008000,0x00002081 ,0x00004000,0x00040000 
DC.L  0x00108020,0x00000080,0x20404010,0x10041040 
DC.L  0x00100000,0x00802080,0x20400000,0x10000000 
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DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 
DC.L  0x 


00000020, 0x 
801  00020, 0x 
80008020, 0x 
80000020, 0x 
80108020, 0x 
80108000, 0x 
80000000, 0x 
80008000, 0x 
001 00000, 0x 
00000020, 0x 
801 00020, 0x 
00108000, 0x 
00100020, 0x 
80008020, 0x 
00000000, 0x 
80000000, 0x 
00008000, 0x 
001 08020, 0x 
801 00000, 0x 
001 00020, 0x 
80000020, 0x 
00000000, 0x 
001 08000, 0x 
00008020, 0x 
801 08000, 0x 
801 00000, 0x 
00008020, 0x 
00000000, 0x 
00108020, 0x 
80100020, 0x 
001 00000, 0x 
80008020, 0x 
801 00000, 0x 
801 08000, 0x 
00008000, 0x 
801 00000, 0x 
80008000, 0x 
00000020, 0x 
801 08020, 0x 
001 08020, 0x 
00000020, 0x 
00008000, 0x 
80000000, 0x 
00008020, 0x 
801 08000, 0x 
001 00000, 0x 
80000020, 0x 
001 00020, 0x 
80008020, 0x 
80000020, 0x 
00100020, 0x 
001 08000, 0x 
00000000, 0x 
80008000, 0x 
00008020, 0x 
80000000, 0x 
801 00020, 0x 
801 08020, 0x 


00800081  , 
00800001 , 
00002001  , 
00000000, 
00802000, 
00802000, 
00802081 , 
00000081 , 
00000000, 
00800080, 
00800001 , 
00000001 , 
00002000, 
00800000, 
00802001 , 
00000080, 
00800000, 
00002001  , 
00002080, 
00800081 , 
00000001 , 
00002080, 
00800080, 
00002000, 
00802080, 
00802081 , 
00000081  , 
00800080, 
00800001 , 
00802000, 
00802081 , 
00000081 , 
00000000, 
00000000, 
00802000, 
00002080, 
00800080, 
00800081 , 
00000001 , 
00802001 , 
00002081 , 
00002081 , 
00000080, 
00802081 , 
00000081 , 
00000001 , 
00002000, 
00800001 , 
00002001 , 
00802080, 
00800081 , 
00002001 , 
00002080, 
00800000, 
00802001 , 
00000080, 
00800000, 
00002000, 


0x0000001 0, 
0x20404010, 
0x00400000, 
0x20004000, 
0x0040401 0, 
0x00400000, 
0x2000001 0, 
0x0040001 0, 
0x20004000, 
0x20000000, 
0x00004010, 
0x00000000, 
0x0040001 0, 
0x20004010, 
0x00004000, 
0x00404000, 
0x2000401 0, 
0x0000001 0, 
0x2040001 0, 
0x2040001 0, 
0x00000000, 
0x0040401 0, 
0x20404000, 
0x0000401 0, 
0x00404000, 
0x20404000, 
0x20000000, 
0x20004000, 
0x0000001 0, 
0x2040001 0, 
0x00404000, 
0x20404010, 
0x00400000, 
0x0000401 0, 
0x20000010, 
0x00400000, 
0x20004000, 
0x20000000, 
0x00004010, 
0x2000001 0, 
0x20404010, 
0x00404000, 
0x20400000, 
0x0040401 0, 
0x20404000, 
0x00000000, 
0x2040001 0, 
0x0000001 0, 
0x00004000, 
0x20400000, 
0x0040401 0, 
0x00004000, 
0x0040001 0, 
0x2000401 0, 
0x00000000, 
0x20404000, 
0x20000000, 
0x0040001 0, 


0x10001040 
0x00000040 
0x1 0000000 
0x00040040 
0x1 0040000 
0x10041040 
0x00041 000 
0x1 0041 000 
0x00041 040 
0x00001 000 
0x00000040 
0x1 0040000 
0x1 0000040 
0x1 0001000 
0x00001 040 
0x00041 000 
0x00040040 
0x1 0040040 
0x10041000 
0x00001 040 
0x00000000 
0x00000000 
0x1 0040040 
0x1 0000040 
0x1 0001000 
0x00041 040 
0x00040000 
0x00041040 
0x00040000 
0x10041000 
0x00001 000 
0x00000040 
0x1 0040040 
0x00001 000 
0x00041040 
0x10001000 
0x00000040 
0x1 0000040 
0x1 0040000 
0x1 0040040 
0x10000000 
0x00040000 
0x10001040 
0x00000000 
0x10041040 
0x00040040 
0x10000040 
0x1 0040000 
0x1 0001 000 
0x1 0001 040 
0x00000000 
0x10041040 
0x00041 000 
0x00041 000 
0x00001 040 
0x00001 040 
0x00040040 
0x1 0000000 
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DC.L  0x00108000,0x00802080,0x20004010,0x10041000 

0deslter: 

exg  d5,d3 

ades0 : 

moveq  #7,d1 
adesLoop: 


move. 

1 

(a2)+,d0 

e 0 r . L 

d5,d0 

mo ve  . 

L 

d0  , d6 

and  . L 

d2,d0 

move. 

L 

12(a0,d0.w),d4 

/* 

S6 

*/ 

swap 

d0 

0 r . L 

4(a0,d0.w),d4 

/* 

S2 

*/ 

r 0 r . L 

#8,d6 

a n d . L 

d2,d6 

0 r . L 

8(a0,d6.w},d4 

/* 

S4 

*/ 

swap 

d6 

0 r . L 

0(a0,d6.w>,d4 

/* 

S0 

*/ 

move  . 

L 

Ca2)+,d0 

eo r . L 

d5,d0 

move  . 

L 

d 0 , d 6 

1st  . L 

#4,d0 

a nd  . 1 

d2,d0 

0 r . L 

12(a1,d0.w),d4 

/* 

S7 

*/ 

swap 

d0 

0 r . 1 

4(a1,d0.w),d4 

/* 

S3 

*/ 

L s r . L 

#4,d6 

a n d . L 

d2,d6 

0 r . L 

8(a1,d6.w),d4 

/* 

S5 

*/ 

swap 

d6 

0 r . L 

0(a1,d6.w),d4 

/* 

SI 

*/ 

eo r . L 

d4,d3 

move. 

L 

Ca2)+,d0 

eo r . L 

d3,d0 

move  . 

t 

d0,d6 

and  . L 

d2,d0 

mo  ve  . 

L 

12Ca0,d0.w),d4 

/* 

S6 

*/ 

swap 

d0 

0 r . L 

4(a0,d0.w),d4 

/* 

S2 

*/ 

ro  r . L 

#8,d6 

a n d . L 

d2,d6 

0 r . L 

8(a0,d6.w),d4 

/* 

S4 

*/ 

swap 

d6 

0 r . L 

0(a0,d6.w),d4 

/* 

S0 

*/ 

move  . 

L 

(a2)+,d0 

eo  r . 1 

d3,d0 

move  . 

L 

d0,  d6 

LsL  . L 

#4,d0 

a nd  . L 

d2,d0 

0 r . 1 

12(a1,d0.w),d4 

/* 

S7 

*/ 

swap 

d0 

0 r . L 

4(a1,d0.w),d4 

/* 

S3 

*/ 

L s r . 1 

#4,d6 

a nd  . L 

d2,d6 

0 r . L 

8(a1,d6.w),d4 

/* 

S5 

*/ 

swap 

d6 

0 r . L 

0(a1,d6.w),d4 

/* 

SI 

*/ 

e 0 r . L 

d4,d5 
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dbf 

d1 ,adesLoop 

/* 

dbf 

d7,adeslter 

ro  r . 1 

#1  ,d5 

/* 

move  . 1 

d5,d2 

eo  r . 1 

d3,d2 

a nd i . 1 

#0xaaaaaaaa,d2 

eor  . 1 

d2,d3 

e 0 r . 1 

d2,d5 

r 0 r . 1 

#1  ,d3 

move  . 1 

d3,d2 

/* 

1 s r . 1 

#8,d2 

eo  r . 1 

d5,d2 

a nd i . 1 

#0x00-1  f 00f  f ,d2 

eo r . 1 

d2,d5 

Isl  . 1 

#8,d2 

eor  . 1 

d2,d3 

move  . 1 

d3,d2 

/* 

1 s r . 1 

#2,d2 

eo r . 1 

d5,d2 

a nd  i . 1 

#0x33333333, d2 

eo  r . 1 

d2,d5 

Is  1 . 1 

#2,d2 

eo  r . 1 

d2,d3 

swap 

d5 

/* 

move  . w 

d5,d2 

move  . w 

d3,d5 

move  . w 

d2,d3 

swap 

d5 

move  . 1 

d5,d2 

/* 

1 s r . 1 

#4,d2 

e 0 r . 1 

d3,d2 

a n d i . 1 

#0x0f 0f 0f 0f ,d2 

e 0 r . 1 

d2,d3 

Isl  . 1 

#4,d2 

e 0 r . 1 

d2,d5 

mo V e a . 1 

ou  t , a 0 

move.  1 

d5, Ca0)+ 

move.  1 

d3, (a0) 

movem . 1 

(a7)+,a2/d3-d7 

f rf  ree 
rt  s 


53  */ 

EXSHHSKCR, 0x55555555, L, 1 ,tmp)  */ 


EXSHMSK(L,0x00f f 00f f ,R,8,tmp)  */ 


EXSHHSKC 1,0x33333333, R, 2, tmp)  */ 


EXSHMSK(R,0x0000ffff,L,16,tmp)  */ 

EXSHnSK(R,0x0f 0f0f0f ,L,4,tmp)  */ 


/*  Validation  triples  - 
* 


★ 

Double-length 

key. 

single-length 

★ 

Key 

: 0123 

4567 

89ab 

cdef 

f e d c 

★ 

Plain 

: 0123 

4567 

89a  b 

cde7 

★ 

'fc 

Cipher  : 7f1d 

0a77 

826b 

8af  f 

it 

Triple-length 

key. 

single-length 

★ 

Key 

: 0123 

4567 

89ab 

cdef 

f e d c 

* 

Plain 

: 0123 

4567 

89a  b 

cde7 

* 

Cipher 

: de0b 

7c06 

ae5e 

0ed5 

* 


plaintext  - 
ba98  7654  3210 


plaintext  - 

ba98  7654  3210  89ab  cdef  0123  4567 


*/ 
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/* 

* pgpIDEA.c  - C source  code  for  IDEA  block  cipher. 

* Algorithm  developed  by  Xuejia  Lai  and  James  L.  Massey,  of  ETH  Zurich. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpIDEA.c, V 1.1. 2.1  1 997/06/07  09:49:54  mhw  Exp  $ 

* 

* There  are  two  adjustments  that  can  be  made  to  this  code  to  speed  it 

* up.  Defaults  may  be  used  for  PCs.  Only  the  -DIDEA32  pays  off 

* significantly  if  selectively  set  or  not  set.  Experiment  to  see  what 

* works  best  for  your  machine. 

* 

* Multiplication:  default  is  inline,  - D A VO  I D_ J UM P S uses  a different 

* n version  that  does  not  do  any  conditional  jumps  Ca  few  percent 

* n worse  on  a SPARC,  better  on  other  machines),  while 

* n - D S M A L L_ C A C H E takes  it  out  of  line  to  stay  within  a small 

* n on-chip  code  cache.  (Not  really  applicable  with  current  LI 

* n cache  sizes.) 

* Variables:  normally,  16-bit  variables  are  used,  but  some  machines  do 

* n not  have  16-bit  registers,  so  they  do  a great  deal  of  masking. 

* n -DUSE_IDEA32  uses  "int"  register  variables  and  masks  explicitly 

* a only  where  necessary.  On  a SPARC,  for  example,  this  boosts 

* n performance  by  30%. 

* 

* The  IDEA(tm)  block  cipher  is  covered  by  a patent  held  by  ETH  and  a 

* Swiss  company  called  Ascom-Tech  AG.  The  Swiss  patent  number  is 

* PC T / C H 9 1 / 00 1 1 7 . International  patents  are  pending.  IDEA(tm)  is  a 

* trademark  of  Ascom-Tech  AG.  There  is  no  license  fee  required  for 

* noncommercial  use.  Commercial  users  may  obtain  licensing  details  from 

* Dieter  Profos,  Ascom  Tech  AG,  Solothurn  Lab,  Postfach  151,  4502 

* Solothurn,  Switzerland,  Tel  +41  65  242885,  Fax  +41  65  235761. 

* 

* The  IDEA  block  cipher  uses  a 64-bit  block  size,  and  a 128-bit  key 

* size.  It  breaks  the  64-bit  cipher  block  into  four  16-bit  words 

* because  all  of  the  primitive  inner  operations  are  done  with  16-bit 

* arithmetic.  It  likewise  breaks  the  128-bit  cipher  key  into  eight 

* 16-bit  words. 

* 

* For  further  information  on  the  IDEA  cipher,  see  these  papers: 

* 1)  Xuejia  Lai,  "Detailed  Description  and  a Software  Implementation  of 

* the  IPES  Cipher",  Institute  for  Signal  and  Information 

* Processing,  ETH-Zentrum,  Zurich,  Switzerland,  1991 

* 2)  Xuejia  Lai,  James  L.  Massey,  Sean  Murphy,  "Markov  Ciphers  and 

* Differential  Cryptanalysis",  Advances  in  Cryptology  - EUR0CRYPT'91 

* 

* This  code  runs  on  arrays  of  bytes  by  taking  pairs  in  big-endian  order 

* to  make  the  16-bit  words  that  IDEA  uses  internally.  This  produces  the 

* same  result  regardless  of  the  byte  order  of  the  native  CPU. 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

Send  i f 

Sinclude  "pgpCipher.h" 

Sinclude  "pgpIDEA.h" 

Sinclude  "pgpHem.h" 
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#incLude  "pgpUsuals.h" 

/*  If  1DEA32  isn't  predefined  as  1 or  0,  make  a guess.  */ 

#ifndef  USE_IDEA32 
#if  UINT_MAX  > 0xffff 
#define  USE_IDEA32  1 

# e n d i f 
#endi  f 

ttii  USE_IDEA32n  /*  Use  >16-bit  temporaries  */ 

^define  Low16(x)  (Cx)  S 0xFFFF) 

typedef  unsigned  int  uint16;n  /*  at  LEAST  16  bits,  maybe  more  */ 
#e  L se 

#define  Low16(x)  (uint16)(x) 
typedef  word16  uint16; 

# e n d i f 

/*  A few  handy  definitions  */ 

^define  IDEA_ROUNDS  8 

^define  IDEA_KEYLEN  ( 6 * I D E A_R0U N D S + 4 ) 

//define  I D E A_KE  YB  YT  E S ( s i z eo  f ( wo  r d 1 6 ) * IDEA_KEYLEN) 

/*  Private  functions  */ 

/*  Expand  a 128-bit  user  key  to  a working  encryption  key  EK  */ 
static  void 

i d e a Ex  pa ndKey C by t e const  *userkey,  word16  *EK) 

{ 


D 

int 

i /■  j ; 

n 

for 

(j=0;  j<8;  j++)  { 

n 

B 

EKCjD  = ( u s e r key C 0 ] <<8 ) + userkeyCID; 

n 

B 

userkey  +=  2; 

n 

> 

n 

for 

(i=0;  j < IDEA_KEYLEN;  j++)  f 

n 

B 

i++; 

n 

B 

EKi:i+7:  = EKCi  & 73  « 9 | EK[(i+1)  & 

n 

B 

EK  +=  i 8 8; 

B 

B 

i 8=  7; 

B 

> 

> /*  i d ea E xpa nd Key  */ 

/* 

* HUL(x,y)  computes  x *=  y,  modulo  0x10001.  Requires  two  temps, 

* t16  and  t32.  x is  modified,  and  must  be  a s i d e-e f f e c t - f r e e Lvalue. 

* y may  be  anything,  and  is  guaranteed  to  be  evaluated  exactly  once, 

* but  unlike  x,  must  be  strictly  16  bits  even  if  low16()  is  //defined. 

* ALL  of  these  are  equivalent  - see  which  is  faster  on  your  machine. 
*/ 

//if  SMALL_CACHE 

//define  HUL(x,y)  (x  = mu  L ( L o w 1 6 ( x ) , y ) ) 
static  uint16 

muLCregister  uint16  a,  register  uint16  b) 

{ 

n register  word32  p; 
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n 

p = (word32)a 

* b; 

n 

if  ( p ) 

□ 

n 

b = 

1 0 w 1 6 ( p ) ; 

n 

n 

a = 

p>>1 6; 

n 

□ 

return 

(b  - a)  + (b  < a); 

□ 

> else 

{ 

n 

n 

return 

1 -a-b; 

n 

> 

> /* 

mu  L * / 

#eLif 

AVOID_JUMPS 

#def  i 

ne  MULCx, 

y)  ( 

X = 

lou16Cx-1),  t16  = low16((y)-1) 

n 

s 

t32 

= (word32)x*t16  + x + t16,  \ 

□ 

n 

X = 

low16(t32),  t16  = t32>>16,  \ 

n 

n 

X = 

(x-t16)  + (x<t16)  + 1 ) 

#e  L se 

/*  default  */ 

#define  MULCx, 

y)  (x 

= 

\ 

n 

n 

( 

( 

t32  = (word32)(x=lou16(x))*(t16 

n 

Q 

n 

X = low16(t32),  \ 

n 

n 

n 

t16  = (uint16)Ct32>>16),  \ 

n 

□ 

n 

(x-t16)+(x<t16)  \ 

u 

□ 

: \ 

n 

n 

n 

( u i n t 1 6 ) ( 1 -X- t 1 6 ) \ 

n 

Q 

) 

#end  i f 


0 ) ? \ 


/* 

* IDEA  e n c ry p t i on / d e c ry p t i on  algorithm.  In  and  out  may  be  the  same  buffer. 

* key  is  a pointer  to  IDEAKEYLEN  words.  (Borland  C 3.1  gives  an  error  if 

* you  declare  it  as  a "word16  const  key C I D E AKE Y LE N 3 " array.) 

*/ 


static  void 

i deaCi pherCbyte  const  inbufC83,  byte  outbufCS],  word16  const  *key) 
{ 


n 

register  uint16  x1,  x2. 

x3 

#if  ! 

SMALL_CACHE 

□ 

register  uint16  t16;n 

/* 

n 

register  word32  t32; 

#endi 

f 

n 

i n t 

r = IDEA.ROUNDS; 

n 

x1  = 

( u i n 1 1 6 ) i n bu f C 0 3 << 

8 

Q 

x2  = 

( u i n 1 1 6 ) i n b u f C 2 3 << 

8 

Q 

x3  = 

( u i n 1 1 6 ) i n b u f C 4 3 << 

8 

n 

x4  = 

( u i n 1 1 6 ) i n b u f C 6 3 << 

8 

n 

do  { 

n 

n 

MUL(x1 ,*key++); 

n 

n 

x2  +=  * key  + + ; 

n 

a 

x3  +=  *key++; 

n 

□ 

MllL(x4,  *key  + +); 

x4,  s2 , s3; 

Temporaries  needed  by  HUL  macro  */ 


1 inbufCIT; 
I inbufC33; 
I inbufC53; 
I inbufC7D; 


n n s3  = x3; 

n n x3  ''=  x1  ; 
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D 

n 

HLJL(x3,  *key  + +); 

□ 

a 

s 2 

= x2; 

O 

n 

x2 

*=  x4; 

n 

n 

x2 

+ = x3 ; 

n 

n 

MUL(x2,  *key++); 

Q 

n 

x3 

+ = X 2 ; 

□ 

n 

x1 

■'=  x2;  x4  ^ = 

x3; 

o 

n 

x2 

*=  s3;  x3 

s2; 

Q 

} while 

(-■ 

-r); 

n 

MUL(x1,  * 

key++ ) ; 

□ 

x3  +=  *key++ 

n 

x2  +=  *key++ 

/ 

n 

MUL(x4,  * 

key); 

a 

outbufE0^ 

= 

(byte)(x1»8); 

n 

outbufCI 1 

= 

(byte)xl; 

n 

outbuf C23 

= 

( by t e ) ( x3>>8  ) ; 

Q 

outbuf[33 

= 

(byte)x3; 

n 

outbuf[4D 

= 

(byte)(x2>>8); 

a 

outbuf C5D 

= 

(byte)x2; 

u 

outbuf C6] 

= 

( by t e ) ( x4>>8  ) ; 

n 

outbufC7D 

= 

(byte)x4; 

} /*  ideaCipher  */ 

/* 

* Exported  functions 
*/ 

static  void 

ideaKeyCvoid  *priv,  byte  const  *key) 

{ 

n ideaExpandKeyCkey,  (uord16  *)priv); 

> 

static  void 

i deaEncrypt ( voi d *priv,  byte  const  *in,  byte  *out) 

{ 

a i dea C i ph e r ( i n,  out,  (uord16  *)priv); 

} 

/* 

* Do  one  64-bit  step  of  a Tandem  Davies-Meyer  hash  computation. 

* The  hash  buffer  is  32  bytes  Long  and  contains  H (0..7),  then  G (8. .15), 

* then  16  bytes  of  scratch  space.  The  buf  is  8 bytes  Long. 

* xkey  is  a temporary  key  scheduLe  buffer. 

* This  and  the  extra  data  in  the  hash  buffer  are  aLLocated  by  the 

* caLLer  to  reduce  the  amount  of  buffer-wiping  we  have  to  do. 

* (It's  onLy  caLLed  from  ideaWash,  so  the  interface  can  be  a bit 

* speciaLized.) 

*/ 

static  void 

i dea S t epTandemDM ( by t e *hash,  byte  const  *buf,  word16  *xkey) 

{ 

n i n t i ; 

n /*  keyl  = G <<  64  + M,  remembering  that  IDEA  is  big-endian  */ 
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n memcpy(hash+16,  buf,  8); 

n i d ea Ex pa nd Ke y C h a s h + 8 , xkey); 

n /*  W = E_key1(H),  key2  = H <<  64  + W */ 

n i d e a C i p h e r ( h a s h , hash  + 24,  xkey); 

n i d e a E X pa n d Key C h a s h + 1 6 , xkey); 

n /*  V = E_key2(G)  */ 

a i d ea C i p h e r C h a s h + 8 , hash  + 16,  xkey); 

n /*  H *=  W,  G V */ 

n forCi=0;i<8;i++)t 

n a hashCiD  ■'=  hashCi+24D; 

n n hashCi+8!]  ■'=  hashCi  + 16]; 

n } 

} 


/* 

* Munge  the  key  of  the  C i p h e r C o n t e x t based  on  the  supplied  bytes. 

* This  is  for  random-number  generation,  so  the  exact  technique  is 

* unimportant,  but  it  happens  to  use  the  current  key  as  the 

* IV  for  computing  a tandem  Davies-Meyer  hash  of  the  bytes, 

* and  uses  the  output  as  the  new  key. 

*/ 


static  void 

i d ea Wa s h ( VO i d *priv,  byte  const  *buf,  unsigned  Len) 
{ 


n 

unsigned  i ; 

n 

byte  hashC323; 

n 

wo  r d 1 6 

*xkey  = Cword16  *)priv; 

s 

/*  Read  out  the  key  in  canonical  byte  order  for 

the  IV  */ 

Q 

for  ( i 

+ 

+ 

• 

00 

V 

» 

II 

n 

□ 

hashC2*iD  = ( by t e ) ( x key C i D >>8 ) ; 

n 

n 

hashC2*i+1D  = C by t e ) x key C i D ; 

□ 

} 

□ 

/*  Do 

the  initial  blocks  of  the  hash  */ 

□ 

i = len; 

n 

while 

00 

II 

A 

n 

D 

ideaStepTandemDHChash,  buf,  xkey); 

n 

□ 

buf  + = 8 ; 

u 

n 

i -=  8; 

□ 

> 

n 

/* 

n 

* At 

the  end,  we  do  Da  mg  a r d-H e r k 1 e strengthening,  just  like 

n 

* HD5 

or  SNA.  Pad  with  0x80  then  0 bytes  to  6 

mod  8,  then 

n 

* add 

the  length.  We  use  a 16-bit  length  in  bytes  instead 

n 

* of 

a 64-bit  length  in  bits,  but  that  is  cryptographically 

Q 

* irrelevant. 

n 

*/ 

n 

/*  Do 

the  first  partial  block  - i <=  7 */ 

n 

memo py ( h a s h+2 4 , buf,  i); 

Q 

hashC24  + i++3  = 0x80; 

n 

if  (i 

> 6)  { 

B 

B 

mem s e t ( h a s h+ 2 4+ i , 0,  8-i); 

B 

B 

ideaStepTandemDHChash,  hash+24,  xkey); 

B 

B 

i = 0; 

B 

> 

memse t ( ha s h+2 4+ i , 0,  6-i); 
hashC303  = (byte)(Len  >>  8); 
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n hashCSI]  = (byte)Len; 

n ideaStepTandernDMChash,  hash+24,  xkey); 

n /*  Re-scheduLe  the  key  */ 

n i d ea Expa nd Key ( h a s h , xkey); 

a memsetChash,  0,  s i z e o f ( ha s h ) ) ; 

} 

/* 

* Def 

* rea 

* i s 
*/ 

struct 
n 
□ 

□ 
n 
n 
n 
n 
n 
□ 

>; 

#if  UNITTESTn  /*  Currently  unused;  Left  in  in  case  of  future  need  */ 

/* 

* Compute  the  multiplicative  inverse  of  x,  modulo  65537,  using  Euclid's 

* algorithm.  It  is  unrolled  twice  to  avoid  swapping  the  registers  each 

* iteration,  and  some  subtracts  of  t have  been  changed  to  adds. 

*/ 

static  uint16 
muLInv(uint16  x) 
f 

n uint16t0,  t1; 

n uint16q,y; 


n 

if 

(x  < 

= 1 ) 

n 

D 

return 

X ; n / * 

0 and  1 are  self-inverse  */ 

n 

t1 

= 0X10001L 

/ x; n /* 

Since  x >=  2,  this  fits  into  16  bits  */ 

n 

y 

= 0X10001L  % 

x; 

a 

i f 

II 

= 1 ) 

n 

n 

return 

Low16(1-t1 ); 

o 

t0 

= 1; 

n 

do 

{ 

o 

n 

JS 

li 

X 

/ y; 

n 

n 

X = X 

% y; 

n 

n 

t0  + = 

q * t1; 

n 

n 

if  Cx 

==  1 ) 

n 

n 

n 

return  t0; 

n 

a 

II 

/ x; 

n 

o 

y = y 

% x; 

n 

n 

II 

+ 

q * t0; 

a 

> 

while 

II 

1 ); 

n return  Low16C1-t1); 

} /*  muLInv  */ 


ine  a struct  Cipher  for  the  generic  cipher.  This  is  the  only 
L exported  thing  --  everything  else  can  be  static,  since  everything 
referenced  through  function  pointers! 

PgpCipher  const  cipherlDEA  = { 

"IDEA", 

PGP_CIPHER_IDEA, 

8,n  n n /*  BLocksize  */ 

16, n n n /*  Keysize  */ 

IDEA_KEYBYTES, 
a L i gnof ( wo  rdl 6 ) , 
ideaKey, 
ideaEncrypt, 
ideaWash 
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/* 

* Compute  IDEA  decryption  key  DK  from  an  expanded  IDEA  encryption  key  EK 

* Note  that  the  input  and  output  may  be  the  same.  Thus,  the  key  is 

* inverted  into  an  internal  buffer,  and  then  copied  to  the  output. 

*/ 

static  void 

i deaInvertKey(word1 6 const  E KC I D E A_KE Y LE N : , word16  D KC I D E A_KE Y LE N D ) 

{ 


Q 

i nt 

i ; 

n 

uint16  t1,  t2,  t3; 

n 

word16  tempCIDEA_KEYLEN:; 

n 

word16  *p  = temp  + IDEA_KEYLEN 

n 

1 1 = 

mulInv(*E  K++ ) ; 

n 

t2  = 

-*EK++; 

n 

t3  = 

-*EK++; 

n 

*--p 

= mu  1 1 nv ( *EK++ ) ; 

n 

* — p 

= t3; 

n 

*--p 

= t2; 

n 

* — p 

= t1; 

n 

for 

(i  = 0;  i < I DEA_R0UNDS-1 ; 

n 

Q 

t1  = *EK++; 

n 

Q 

* — p = * E K+  + } 

n 

n 

*--p  = t1; 

n 

n 

t1  = mu  1 1 n V C * E K++ ) ; 

n 

n 

t2  = -*EK++; 

□ 

n 

t3  = -*EK++; 

n 

□ 

*--p  = mulInv(*EK++); 

n 

n 

*--p  = t2; 

n 

□ 

* — p = t3; 

n 

□ 

* — p = t1; 

n 

} 

n 

t1  = 

*EK++; 

n 

* — p 

= *EK++; 

n 

* — p 

= t1; 

Q 

t1  = 

mu  1 1 n V ( *EK++ ) ; 

n 

t2  = 

-*EK++; 

s 

t3  = 

-*EK++; 

Q 

* — p 

= mu  1 1 nv ( *EK++  ) ; 

Q 

* — p 

= t3; 

n 

*--p 

= t2; 

n 

* — p 

= t1; 

/*  Copy  and  destroy  temp  copy  */ 
n memcpy(DK,  temp,  sizeofCtemp)); 

n memsetCtemp,  0,  sizeof(temp)),- 

> /*  i d e a I n ve r t Key  */ 

/*  Test  driver  proper  starts  here  */ 

#i nc lude  <stdi o . h> 

//include  <time.h> 

/* 

* This  is  the  number  of  Kbytes  of  test  data  to  encrypt. 

* It  defaults  to  1 MByte. 

*/ 

#ifndef  BLOCKS 
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#ifndef  KBYTES 
#define  KBYTES  1024 
#endi f 

^define  BLOCKS  (64*KBYTES) 
# e nd i f 


i n t 

main(void) 


•Cn 

/ * Test 

driver  for  IDEA  cipher  */ 

n 

i nt  i , 

j y k; 

n 

byte  userkeyC163; 

n 

wo  rd 1 6 

eki;idea_keylen:,  DKCIDEA_KEYLEN]; 

n 

byte  XX[8],  YYC8D,  ZZC8:; 

□ 

c 1 0 c k_t 

start,  end; 

n 

long  1; 

n 

/ * Hake 

a sample  user  key  for  testing...  */ 

Q 

f 0 r ( i =0 

; i<16;  i++) 

Q 

n 

userkeyCiD  = i+1; 

n /*  Compute  encryption  subkeys  from  user  key...  */ 

n ideaExpandKeyCuserkey,  EK); 

n printf("\nEncryption  key  subbLocks: 


n 

for 

(j=0;  j<IDEA 

_R0UNDS+1;  j++) 

{ 

n 

n 

printfC” 

\nround  %d:  ", 

j + 1 ); 

n 

n 

if  (j  < 

I DEA_R0UNDS ) 

n 

n 

n 

for(i=0;  i<6;  i++) 

n 

n 

n 

n printf(" 

X 6 u " , 

EK(;j*6+i]); 

o 

n 

else 

n 

n 

n 

for(i=0;  i<4;  i++) 

□ 

Q 

n 

n printf(" 

Z6u", 

EKCj*6+i:); 

n 

> 

n /*  Compute  decryption  subkeys  from  encryption  subkeys...  */ 

n i dea I n ve r t Key ( EK,  DK); 

n printf("\nDecryption  key  subblocks: 


n 

for 

(j=0;  j<IDEA 

_R0UNDS+1;  j++)  { 

n 

n 

printf(" 

\nround  %d:  ",  j+1); 

n 

n 

i f ( 3 < 

IDEA_R0UNDS) 

n 

n 

o 

for(i=0;  i<6;  i++) 

D 

Q 

D 

n printf("  %6u". 

DK[ j *6  + i ] ) ; 

n 

n 

else 

n 

□ 

n 

for(i=0;  i<4;  i++) 

n 

n 

Q 

n printfC  %6u". 

DKCj*6+i3); 

n 

> 

n 

/* 

Hake  a sample 

plaintext  pattern  for 

testing. . . 

n 

for 

(k=0;  k<8;  k++) 

o 

n 

XXCkD  = 

k; 

n printf("\n  Encrypting  %d  bytes  (%ld  blocks)...",  BL0CKS*16,  BLOCKS); 

n fflush(stdout); 

n start  = clockC); 

n memcpyCYY,  XX,  8); 

n for  (1=0;  I < BLOCKS;  1++) 

n n i dea C i phe r ( Y Y,  YY,  EK);n/*  repeated  encryption  */ 

n memcpyCZZ,  YY,  8); 

n for  (1=0;  I < BLOCKS;  1++) 

i:CCHK:24cc445e4a15f51115dd94abf558ec411eb0a7765243dd96dd3c940fd73f886fd:] 
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n 

n ideaCi pherCZZ,  11,  DK) 

;n/*  repeated  decryption  */ 

n 

end  = clockC)  - 

start; 

n 

L = end  * 1 000  / 

CL0CKS_PER_SEC  + 1; 

B 

i = L/1000; 

B 

j = L%1000; 

B 

L = BLOCKS  * 16 

* CL0CKS_PER_SEC  / end; 

B 

printf("%d.%03d 

seconds  = %ld 

bytes  per  secondXn",  i 

, j,  L); 

B 

printf("\nX  %3u 

%3u  %3u  %3u 

%3u  %3u  %3u 

\n". 

B 

XX[0:,  XXC1], 

XXC2],  XX[3], 

xx[4:,  xxcs:. 

XXC6:, 

XXC7:); 

B 

printf("\nY  %3u 

%3u  %3u  %3u 

%3u  %3u  %3u 

\n". 

B 

YYC0],  YYEI], 

YY[2],  YYC3D, 

YYC4],  YYCS:, 

YYC6], 

YYC?]); 

B 

printf("\nZ  %3u 

%3u  %3u  %3u 

%3u  %3u  %3u 

\n". 

B 

ZZC0:,  ZZEI], 

zz:2],  ZZ[3], 

ZZ[4:,  ZZCSD, 

ZZC6:, 

Z Z C 7 : ) ; 

B 

/*  Now  decrypted 

11  should  be 

same  as  original 

XX  */ 

B 

for  (k=0;  k<8;  k++) 

B 

n if(XXCk]!=ZZ[:k]){ 

B 

n □ 

printf("\n\07Error!  NoninvertabLe  encryption 

B 

□ Q 

exi t (-1 );n 

/*  error  exit 

*/ 

B 

n } 

B 

printf("\nNorniaL 

e X i t . \ n " ) ; 

B 

return  0;n 

/*  normal  exit 

*/ 

> /* 

main  * / 

# e n d i 

f /*  0 */ 

CCCHK:d5bde9dd9ddd6664fe2e063ccdac0ec20]] 
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/* 

* pgpIDEA.h  - header  file  for  pgpIDEA.c 

•k 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

"k 

* $Id:  pgpIDEA.h, V 1.2. 2.1  1997/06/07  09:49:54  mhw  Exp  $ 

*/ 

#ifndef  PGPIDEA_H 
^define  PGPIDEA.H 

#incLude  " pgpC i p h e r . h " n n /*  for  struct  Cipher  */ 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end i f 

/* 

* This  is  the  definition  of  the  IDEA  cipher,  for  use  with  the 

* PGP  Generic  Cipher  code. 

*/ 

extern  struct  PgpCipher  const  cipherlDEA; 

Sifdef  __cpLuspLus 

> 

# e nd i f 

#endif  /*  IPGPIDEA  H */ 
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# 

# L i b / pg  p / c omp  r e s s / H a ke f i L e . i n 
U 

If  Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

It  $Id:  Ma  ke  f i I e . i n , V 1.1  2.2.4  1 997/06/07  09:49:55  mhu  Exp  $ 

n 

OBJS=n  pg pZ I n f L a t e . o 
SHAREDHDRS=  pg p C omp r e s s . h 
PRIVHDRS=  pgpZInf Late  . h 

a I L : : DONE 
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U 

tf  I i b / pg  p / c omp  r e s s / ma  k e f i L e . ms  c 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

U $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1997/06/07  09:49:55  mhw  Exp  $ 

U 

PGPLIB  = n.  . \.  . \pgpLib.  Lib 

C F L AG S = - 1 . . \ \ \ i n c L ud e - 1 . . \ . . \ i n c L u d e \ 

n -I..\..\..  -DHAVE_C0N FIG_H=1  SCDEBUG) 

aLL::D  d Lib 

headers : n i nc  L 

lincLude  "ma kef i L e . i n " 

i n c L : 


Q 

i f 

not 

"SCSHAREDHDRS)"==""  \ 

n 

□ 

for  %f  in  C S C S H AR E D H D R S ) 

) do  copy  %f  . . 

□ 

i f 

not 

"SCPRIVHDRS)"==""  \ 

a 

n 

for  %f  in  C SCPRIVHDRS)  ) 

do  copy  %f  ..\. 

. .\incLude 

DOSOBJ  SX 

= n 

SCOBJ  S : . 0= . ob j ) 

DOSOBJ  S = 

□ 

SCD0S0BJSX:Unix=Win32) 

L i b : n 

SCDOSOBJS) 

. c . ob  j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 

c L ea  n : 

n de  L * . ob j 

DONE  : 

n if  exist  SCPGPLIB)  L i b / ou t : $ < PG P L I B ) $(PGPLIB)  $(D0S0BJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P LI B ) SCDOSOBJS) 


Ci:CHK:3058ed991a77bbcc5579e111d744c338bb7826d7b75b:: 
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/* 

* pgpCompress.h  --  this  defines  the  compression  and  decompression 

* functions  for  PGP..  It  provides  a generalized  interface  to  the 

* compression  modules,  and  keeps  applications  from  requiring 

* knowledge  of  all  the  different  types  of  compression  that  may  be 

* supported. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  p g p C omp r e s s . h , V 1.1. 2.1  1997/06/07  09:49:56  mhw  Exp  $ 

*/ 

#ifndef  PGPCOMPRESS.H 
//define  PGPCOMPRESS.H 

/*  Defintions  for  known  compression  algorithms  */ 

//define  PGP.COMPRESSALG.ZIP  1 
//endif  /*  PGPCOMPRESS.H  */ 
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/* 

* inflate. c --  Not  copyrighted  1992,1993  by  Hark  Adler 

* Latest  hacking  on  this  version  by  Colin  Plumb 

* version  p3,  19  Oct  1995 

•k 

* $Id:  pgpZInf late . c, V 1.2  1997/01/24  23:35:54  mhu  Exp  $ 
*/ 


/* 

* 

★ 

* 

★ 

* 


You  can  do  whatever  you  like 
prefer  that  if  you  modify  it 
comments  to  that  effect  with 

History: 


with  this  source  file,  though  I would 
and  redistribute  it  that  you  include 
your  name  and  the  date.  Thank  you. 


★ 

vers 

date 

who 

what 

A 

a 

-- 

Feb 

92 

M . 

Adler 

used  full  (large,  one-step)  lookup  table 

* 

b1 

21 

Mar 

92 

M . 

Adler 

first  version  with  partial  lookup  tables 

★ 

b2 

21 

Mar 

92 

M . 

Adler 

fixed  bug  in  fixed-code  blocks 

* 

b3 

22 

Mar 

92 

M . 

Adler 

sped  up  match  copies,  cleaned  up  some 

★ 

b4 

25 

Mar 

92 

M . 

Adler 

added  prototypes;  removed  windowC]  (now 

* 

is  the  responsibility  of  u n z i p . h --a  1 s o 

* 

changed  name  to  slideCU),  so  needs  diffs 

* 

for  unzip. c and  unzip. h (this  allows 

★ 

compiling  in  the  small  model  on  MSDOS); 

* 

fixed  cast  of  q in  huft_build(); 

★ 

b5 

26 

Mar 

92 

M . 

Adler 

got  rid  of  unintended  macro  recursion. 

* 

b6 

27 

Mar 

92 

M . 

Adler 

got  rid  of  nextbyte()  routine.  fixed 

* 

bug  in  i nf 1 a t e_f i xed ( ) . 

* 

cl 

30 

Mar 

92 

M . 

Adler 

removed  Ibits,  dbits  environment  variables 

★ 

changed  BMAX  to  16  for  explode.  Removed 

* 

OUTB  usage,  and  replaced  it  with  flush()-- 

★ 

this  was  a 20%  speed  improvement!  Added 

* 

an  explode. c (to  replace  unimplode. c)  that 

★ 

uses  the  huft  routines  here.  Removed 

★ 

register  union. 

* 

c2 

4 

Apr 

92 

M . 

Adler 

fixed  bug  for  file  sizes  a multiple  of  32k 

★ 

c3 

1 0 

Apr 

92 

M . 

Adler 

reduced  memory  of  code  tables  made  by 

★ 

huft_build  significantly  (factor  of  two  to 

★ 

three)  . 

★ 

c4 

1 5 

Apr 

92 

M . 

Adler 

added  NOMEMCPY  do  kill  use  of  memcpy(). 

★ 

worked  around  a Turbo  C optimization  bug. 

* 

c5 

21 

Apr 

92 

M . 

Adler 

added  the  WSIZE  ^define  to  allow  reducing 

* 

the  32K  window  size  for  specialized 

* 

applications. 

★ 

c 6 

31 

May 

92 

M . 

Adler 

added  some  typecasts  to  eliminate  warnings 

★ 

c7 

27 

J u n 

92 

G . 

Roe  1 0 f s 

added  some  more  typecasts  (444:  MSC  bug). 

★ 

c8 

5 

Oct 

92 

J- 

1 . G a i 1 1 y 

added  ifdef'd  code  to  deal  with  PKZIP  bug. 

★ 

c9 

9 

Oct 

92 

M . 

Adler 

removed  a memory  error  message  ("line  416) 

★ 

cl  0 

1 7 

Oct 

92 

G . 

Roe  1 of  s 

changed  U LO NG / U WOR D / by t e to  ulg/ush/uch. 

★ 

removed  old  inflate,  renamed  i n f 1 a t e_e n t ry 

* 

to  inflate,  added  Mark's  fix  to  a comment. 

* 

cl  1 

2 

Jan 

93 

M . 

Adler 

fixed  bug  in  detection  of  incomplete 

★ 

tables,  and  removed  assumption  that  EOB  is 

★ 

the  longest  code  (bad  assumption). 

★ 

cl  2 

3 

Jan 

93 

M . 

Adler 

make  tables  for  fixed  blocks  only  once. 

★ 

cl  3 

5 

Jan 

93 

M . 

Adler 

allow  all  zero  length  codes  (pkzip  2.04c 

C:CHK:60f05d777e88c1e066f420eb7a4847602d3b8198245e12f10ba6cbd0475b9fe38:: 
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* 

★ 

outputs  one  zero  length  code  for  an  empty 

distance  tree). 

★ 

* 

c14 

1 2 

Mar 

93 

M . 

Adler 

made  inflate. c standalone  with  the 

introduction  of  inflate. h. 

* 

★ 

★ 

d0 

25 

Apr 

93 

M . 

Adler 

several  speedups  in  i n f L a t e_ c od e s of 
almost  20%  (suggested  by  Urban  Hueller)-- 
now  requires  the  use  of  b a c k f i 1 1 . C c h ] 

★ 

★ 

d1 

4 

May 

93 

H . 

Adler 

deleted  extraneous  statement  in  cheap  loop, 
optimized  common  copy  a Little  more. 

★ 

* 

d2 

5 

Hay 

93 

H . 

Adler 

calculate  number  of  cheap  loops,  a few 
other  small  optimizations. 

★ 

* 

★ 

pi 

Nov 

93 

C . 

Plumb 

Adpated  to  be  able  to  suspend  itself. 

Pretty  massive  reorganization. 

Many  comments  added. 

★ 

★ 

p2 

1 8 

Oct 

95 

C . 

Plumb 

Improved  interface  some  more.  Now 

nicely  re-entrant.  Still  more  comments. 

* 

* 

P3 

19 

Oct 

95 

C . 

Plumb 

Changed  inflnflate  core  function  so  that 
it  sucks  the  input  completely  dry  before 

* returning.  This  gets  rid  of  the  old  ad-hoc 

* technique  for  flushing  out  the  Last  Little 

* bit  of  a compressed  file  by  padding  it 

* with  some  dummy  data,  which  was  ugly. 

*/ 

/* 

* Inflate  deflated  (PKZIP's  method  8 compressed)  data.  The  compression 

* method  searches  for  as  much  of  the  current  string  of  bytes  (up  to  a 

* Length  of  258)  in  the  previous  32K  bytes.  If  it  doesn't  find  any 

* matches  (of  at  least  Length  3),  it  codes  the  next  byte.  Otherwise,  it 

* codes  the  Length  of  the  matched  string  and  its  distance  backwards  from 

* the  current  position.  There  is  a single  Huffman  code  that  codes  both 

* single  bytes  (called  "Literals")  and  match  Lengths.  A second  Huffman 

* code  codes  the  distance  information,  which  follows  a Length  code.  Each 

* Length  or  distance  code  actually  represents  a base  value  and  a number 

* of  "extra"  (sometimes  zero)  bits  to  get  to  add  to  the  base  value.  At 

* the  end  of  each  deflated  block  is  a special  end-of-block  (EOB)  Literal/ 

* Length  code.  The  decoding  process  is  basically:  get  a L i t e r a L / L e ng t h 

* code;  if  EOB  then  done;  if  a literal,  emit  the  decoded  byte;  if  a 

* Length  then  get  the  distance  and  emit  the  referred-to  bytes  from  the 

* sliding  window  of  previously  emitted  data. 

* 

* There  are  (currently)  three  kinds  of  inflate  blocks:  stored,  fixed,  and 

* dynamic.  The  compressor  outputs  a chunk  of  data  at  a time  and  decides 

* which  method  to  use  on  a c h u n k-by- c h u n k basis.  A chunk  might  typically 

* be  32K  to  64K,  uncompressed.  If  the  chunk  is  un c omp r e s s i b L e , then  the 

* "stored"  method  is  used.  In  this  case,  the  bytes  are  simply  stored  as 

* is,  eight  bits  per  byte,  with  none  of  the  above  coding.  The  bytes  are 

* preceded  by  a (16-bit)  count,  since  there  is  no  longer  an  EOB  code. 

* 

* If  the  data  is  compressible,  then  either  the  fixed  or  dynamic  methods 

* are  used.  In  the  dynamic  method,  the  compressed  data  is  preceded  by 

* an  encoding  of  the  L i t e r a L / L e n g t h and  distance  Huffman  codes  that  are 

* to  be  used  to  decode  this  block.  The  representation  is  itself  Huffman 

* coded,  and  so  is  preceded  by  a description  of  that  code.  These  code 

* descriptions  take  up  a Little  space,  and  so  for  small  blocks,  there  is 

* a predefined  set  of  codes,  called  the  fixed  codes.  The  fixed  method  is 

* used  if  the  block  ends  up  smaller  that  way  (usually  for  quite  small 

[CCHK:33652cdfbdf7c856e0e07dbbbc487fa 388045 94 65f8a793b1 787691 bf033cf31b:] 
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* chunks);  otherwise  the  dynamic  method  is  used.  In  the  Latter  case,  the 

* codes  are  customized  to  the  probabilities  in  the  current  block  and  so 

* can  code  it  much  better  than  the  p r e-d e t e r m i n ed  fixed  codes  can. 

* 

* The  Huffman  codes  themselves  are  decoded  using  a mutli-level  table 

* Lookup,  in  order  to  maximize  the  speed  of  decoding  plus  the  speed  of 

* building  the  decoding  tables.  See  the  comments  below  that  precede  the 

* LBITS  and  OBITS  tuning  parameters. 

*/ 


/* 

* Notes  beyond  the  1.93a  appnote.txt: 

* 


* 1 . 
* 

* 2 . 

* 3 . 

★ 

* 4. 

★ 

* 

* 5 . 

★ 

★ 

★ 

★ 

★ 

* 6. 
★ 

★ 

★ 

* 

★ 

* 

* 7. 

* 

* 8. 
* 

* 9. 

* 

★ 

★ 

* 10. 
★ 

*11. 
* 12. 
★ 

* 

* 

* 13. 

* 

★ 

* 

*/ 


Distance  pointers  never  point  before  the  beginning  of  the  output 
stream. 

Distance  pointers  can  point  back  across  blocks,  up  to  32k  away. 
There  is  an  implied  maximum  of  7 bits  for  the  bit  Length  table  and 
15  bits  for  the  actual  data. 

If  only  one  code  exists,  then  it  is  encoded  using  one  bit.  (Zero 
would  be  more  efficient,  but  perhaps  a little  confusing.)  If  two 
codes  exist,  they  are  coded  using  one  bit  each  (0  and  1). 

There  is  no  way  of  sending  zero  distance  codes--a  dummy  must  be 
sent  if  there  are  none.  (History:  a pre  2.0  version  of  PKZIP  would 
store  blocks  with  no  distance  codes,  but  this  was  discovered  to  be 
too  harsh  a criterion.)  Valid  only  for  1.93a.  2.04c  does  allow 

zero  distance  codes,  which  is  sent  as  one  code  of  zero  bits  in 
length  . 

There  are  up  to  286  L i t e ra L / L engt h codes.  Code  256  represents  the 
e n d-o f -b L o c k . Note  however  that  the  static  Length  tree  defines 
288  codes  just  to  fill  out  the  Huffman  codes.  Codes  286  and  287 
cannot  be  used  though,  since  there  is  no  Length  base  or  extra  bits 
defined  for  them.  Similarity,  there  are  up  to  30  distance  codes. 
However,  static  trees  define  32  codes  (all  5 bits)  to  fill  out  the 
Huffman  codes,  but  the  Last  two  had  better  not  show  up  in  the  data. 
Unzip  can  check  dynamic  Huffman  blocks  for  complete  code  sets. 

The  exception  is  that  a single  code  would  not  be  complete  (see  #4). 
The  five  bits  following  the  block  type  is  really  the  number  of 
Literal  codes  sent  minus  257. 

Length  codes  8,16,16  are  interpreted  as  13  Length  codes  of  8 bits 
(1+6+6).  Therefore,  to  output  three  times  the  Length,  you  output 
three  codes  (1+1+1),  whereas  to  output  four  times  the  same  Length, 
you  only  need  two  codes  (1+3).  Hmm. 

In  the  tree  reconstruction  algorithm.  Code  = Code  + Increment 
only  if  BitLength(i)  is  not  zero.  (Pretty  obvious.) 

Correction:  4 Bits:  # of  Bit  Length  codes  - 4 (4  - 19) 

Note:  Length  code  284  can  represent  227-258,  but  Length  code  285 
really  is  258.  The  Last  Length  deserves  its  own,  short  code 
since  it  gets  used  a lot  in  very  redundant  files.  The  Length 
258  is  special  since  258  - 3 (the  min  match  Length)  is  255. 

The  L i t e r a L / I en g t h and  distance  code  bit  Lengths  are  read  as  a 
single  stream  of  Lengths.  It  is  possible  (and  advantageous)  for 
a repeat  code  (16,  17,  or  18)  to  go  across  the  boundary  between 
the  two  sets  of  Lengths. 


#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h” 
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#end  i f 


#incLude  <string.h>n 


/*  for  memsetC)  */ 


#incLude  "pgpDebug.h" 

^include  "pgpMem.h" 

#incLude  "pgpUsuaLs.h" 

#incLude  "pgpZInfLate.h" 

/*  Increasing  these  only  wastes  space,  so  they  can  be  changed  if  necessary  */ 
typedef  word16  ush; 
typedef  word32  uLg; 

/*  Private  context  structure  for  use  by  all  functions.  */ 
struct  Inf LateContext  { 
n /*  Major  state  information  */ 

n i nt  state; 

n int  substate; 

n int  Lastblock; 


n 

/*  Output 

-related  informati 

on  * / 

n 

unsigned 

char  *sLide;n  /* 

Circular  output 

buffer  */ 

n 

unsigned 

char  *sLideend; 

a 

unsigned 

slidelen;  /* 

s L i deend-s  tide  - 

MUST  BE  POWER 

OF  2 */ 

n 

unsigned 

sLidemask;n  /* 

slideLen-1  */ 

n 

unsigned 

char  *outptr;n  /* 

Pointer  into  sLi 

de  */ 

n 

unsigned 

char  const  *readpt 

r;n  /*  Pointer 

into  slide  for 

reading 

n 

/*  Input- 

related  information  */ 

n 

unsigned 

char  const  *inptr; 

n /*  Input  pointer  */ 

a 

int  i n 1 en 

; n n / * 

Input  Length  */ 

a 

uLg  bitbuffer; 

a 

unsigned 

bufbits; 

a 

/*  The  L i t e ra 1 / L eng t h tree 

- also  used  for 

the  bit-length 

tree  * / 

a 

struct  huft  *tree1; 

o 

unsigned 

b i t s 1 ; 

n /*  The  distance  tree  */ 

n struct  huft  *tree2; 

n unsigned  bits2; 


/*  Encoded  huffman  tree  */ 
unsigned  char  b i t L en C 2 86+30 D ; 

/*  For  dynamic  trees  */ 
unsigned  bitLengths; 
unsigned  Litcodes; 
unsigned  distcodes; 


n 

n 

□ 

□ 

□ 

□ 

>; 


/*  Used  in  various  places  */ 
struct  huft  const  *t; 
unsigned  copylen; 
int  distbase; 

int  numbits;n  /*  # of  bits  in  dyn.  tree  repeat  and  after  dist.  code*/ 
unsigned  index;n/*  Position  in  dynamic  tree  bit  Lengths  we've  read  to*/ 
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/*  Opt i 

0 n s for 

# i f n d e f 

SECURE 

#def i ne 

SECURE 

#end  i f 

# i f nd  e f 

WSIZE 

#def i ne 

WSIZE 

#end  i f 

#i f ndef 

STRICT 

# d e f i n e 

STRICT 

#end  i f 

/* 

/*  Wipe  memory  before  freeing  it?  */ 


/*  Window  size  - 32768  for  PKZIP  compatibility  */ 


/*  Require  unused  bits  to  be  zero?  */ 


Huffman  code  Lookup  table  entry- 
that  have  16-bit  pointers  (e.g. 


-this  entry  is  four  bytes  for  machines 
PC's  in  the  small  or  medium  model). 


* 

Valid 

extra  bits  are  0..13. 

e ==  32  is  EOB 

(end 

of  block). 

e 

= = 16 

★ 

means 

that  V is  a Literal, 

e < 0 means  that 

V is 

a pointer 

t 0 

the  next 

•k 

table. 

which  codes  -e  bits. 

and  Lastly  e == 

-128 

indicates 

a n 

unused 

* 

code. 

If  a code  with  e == 

-128  is  Looked  up 

, t h i 

s implies 

a n 

error  in 

* the  data. 

*/ 

struct  huft  { 
n u n i o n { 


□ 

B 

struct  { 

Q 

B 

n signed 

c h a 

r exop;  /*  tt  of  ext 

ra 

bits  or 

operation 

*/ 

B 

B 

n c h a r b i 

ts; 

B /*#ofbits 

i n 

t h i 

s code/subcode 

*/ 

B 

B 

> w h a t ; 

B 

B 

char  *pad;n 

/* 

pad  structure  to  a 

power 

0 f 

2 (4  bytes 

for*/ 

B 

>word;nn  n 

/* 

16-bit,  8 bytes  for 

32- 

bit 

machines)  * 

/ 

B 

uni  on 

( 

B 

B 

ush  base;n 

/* 

Literal,  Length  base. 

o r 

distance  base 

*/ 

B 

B 

struct  huft  *next; 

/*  pointer  to  next 

Level 

0 f 

table  * / 

B 

> more; 

>; 

#def  i 

n e 

base 

more. base 

#def  i 

ne 

next 

more  . next 

#d e f i 

n e 

exop 

word . what . exop 

#de  f i 

ne 

bits 

word. what. bits 

/*  Function  prototypes  */ 

#ifndef  OF 

# if  d e f i n ed ( __ ST D C__ ) ||  definedC cpLuspLus) 

# define  0F(a)  a 

# else 

tt  define  0F(a)  () 

M end i f 
# e nd i f 

static  int  huft_build  OFCCunsigned  char  const  *,  unsigned,  unsigned, 

ush  const  *,  ush  const  *,  struct  huft  **, 
unsigned  *)); 

static  int  huft_free  OFClstruct  huft  *)); 

/* 

* The  inflate  algorithm  uses  a sliding  32K  byte  window  on  the  uncompressed 
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* stream  to  find  repeated  byte  strings.  This  is  implemented  here  as  a 

* circular  buffer.  The  index  is  updated  simply  by  incrementing  and  then 

* and'ing  with  0x7fff  (32K-1). 

*/ 


/*  Tables  for  deflate  from  PKZIP's  appnote.txt.  */ 


Static 

unsigned 

const  borderCI  = { /* 

Order  of  the  bit  length  code 

lengths  */ 

Q 

16, 

17, 

18,  0,  8,  7,  9,  6,  10, 

5,  11,  4,  12,  3, 

13,  2,  14, 

1,  15>; 

Static 

ush 

const 

cplensCD  = i /*  Copy 

lengths  for  literal  codes  257 

. .285  */ 

n 

1, 

2,  3, 

4,  5,  6,  7,  8,  9,  11,  13,  15,  17,  21, 

25,  29, 

□ 

33, 

41, 

49,  57,  65,  81,  97,  113,  129,  161,  193, 

225,  256,  0 

r 0>; 

n 

/* 

actually  lengths  - 2;  also 

see  note  #13  above 

about  258 

*/ 

static 

ush 

const 

cplextCD  = { /*  Extra 

bits  for  literal 

codes  257.. 

285  */ 

n 

0, 

0,  0, 

0,  0,  0,  0,  0,  1,  1, 

1,  1,  2,  2,  2,  2, 

n 

3, 

3,  3, 

3,  4,  4,  4,  4,  5,  5, 

5,  5,  0,  128,  128> 

; /*  128==i 

nvalid  */ 

static 

ush 

const 

cpdistCH  = { /*  Copy 

offsets  for  distance  codes  0. 

.29  */ 

n 

K 

2,  3, 

4,  5,  7,  9,  13,  17,  25,  33,  49,  65,  97, 

129,  193, 

s 

257 

, 385 

, 513,  769,  1025,  1537 

, 2049,  3073,  4097 

, 6145, 

n 

8193,  12289,  16385,  24577>; 

static 

ush 

const 

cpdextCD  = { /*  Extra 

bits  for  distance 

codes  * / 

n 

0, 

0,  0, 

0,  1,  1,  2,  2,  3,  3, 

4,  4,  5,  5,  6,  6, 

n 

7, 

7,  8, 

8,  9,  9,  10,  10,  11, 

11, 

□ 

12, 

12, 

13,  13>; 

/*  And ' 

' i ng 

with 

maskCnD  masks  the  lower  n bits  */ 

static 

unsigned 

const  maskC17!l  = { 

0x0000, 

0x0001,  0x0003,  0x0007,  0x000f,  0x001f,  0x003f,  0x007f,  0x00ff, 
0x01ff,  0x03ff,  0x07ff,  0x0fff,  0x1fff,  0x3fff,  0x7fff,  0xffff 


>; 


/*  Macros  for  inflateC)  bit  peeking  and  grabbing. 

* The  usage  is: 

* 

*n  NEEDBITS(j) 

*n  x=b8maskCj]; 

*n  DUHPBITS(j) 

* 

* where  NEEDBITS  makes  sure  that  b has  at  least  j bits  in  it,  and 

* DUMPBITS  removes  the  bits  from  b.  The  macros  use  the  variable  k 

* for  the  number  of  bits  in  b.  Normally,  b and  k are  register 

* variables  for  speed,  and  are  initialized  at  the  beginning  of  a 

* routine  that  uses  these  macros  from  a global  bit  buffer  and  count. 

* 

* It  is  allowed  for  more  bits  to  be  requested  than  actually  used. 

* The  remainder  stay  in  the  bit  buffer.  NOTE  that  a few  more 

* bytes  than  necessary  may  be  grabbed  at  the  end  of  input. 

* This  should  not  be  fatal  as  long  as  the  grabbed  bits  stay 

* in  the  bit  buffer.  The  wrapup  functions  should  check  for  this. 

* There  is  also  the  macro  GRABBITS  which  is  like  NEEDBITS,  but  uses 

* *g++  to  get  the  byte  without  checking  availability.  This  requires 

* using  AVAILBYTES  first  to  assure  that  the  needed  bytes  are  there 
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* already.  g is  set  to  inptr  and  then  inptr  is  restored  to  g around 

* this  usage. 

*/ 


/* 

* Variable  usage: 

* b = bit  buffer,  k I ea s t - s i g n i f i c a n t bits  valid 

* k = # of  bits  in  bit  buffer 

* g = grab  bits  pointer  (pointer  to  next  byte  to  add:  b 

* s = # of  bytes  available 

* ctx  = I n f I a t e C on t ex t 
*/ 


1=  *g++  <<  k) 


/*  Functions  to  save  the  state  of  the  bit  buffer  before  returning  */ 


# d e f i n e 

LOADBITBUF  \ 

n 

(b=ctx->bi tbuffer. 

k=ctx->buf bi ts. 

g=ctx->inptr. 

s=ctx->inlen) 

#def i ne 

SAVEBITBUF  \ 

Q 

(ctx->bitbuffer=b. 

ctx->buf bi ts=k. 

ctx->inptr=g. 

ctx->inlen=s) 

#def i ne 

SAVEBITBUFEMPTY  \ 

n 

(ctx->bitbuffer=b. 

ctx->buf bi ts=k. 

ctx->inptr=g. 

ctx->inlen=0) 

/* 

* A simple  macro  to  ensure 

that  at  least  ' 

’x"  bits  are  in 

the  bit  buffer 

* Does 

NOT  check  for  input 

underflow  (s  < 

0)  . 

*/ 

#def i ne 

GRABBITS(x)  \ 

s 

while  (k  < x)  f \ 

D 

a --s;  \ 

□ 

n b|=(ulg)* 

g++  <<  k;  \ 

n 

a k + = 8 ; \ 

□ 

} 

/* 

* Get  "x"  bits  in  the  input  buffer  or  execute  the  "whatif"  code. 

* NOTE  NOTE  NOTE  that  if  the  "whatif"  code  is  executed,  s is  set  to  -1! 

* (This  is  faster  on  a lot  of  machines.)  You  will  usually  have  to 

* reset  it  to  0 manually. 

*/ 


#def i ne 

GETBITS0R(x 

, whatif)  \ 

n 

while 

(k  < 

(unsigned )(x))  { \ 

□ 

n 

i f 

(--s  < 0)  { \ 

n 

a 

□ 

whatif;  \ 

n 

a 

> \ 

n 

a 

b 1 

= (ulg)*g++  <<  k;  \ 

n 

a 

k + 

= 8;  \ 

n 

> 

/* 

* A macro  to  ensure  that  there  are  at  least  "x"  bits  available  in  the 

* bit  buffer.  If  there  are  not,  the  bit  buffer  is  saved  back  into  the 

* context,  and  any  code  in  "savestate"  is  run  to  save  any  additional 

* context  that  might  be  needed.  Then,  "return  1"  means  that  more  input  is 

* needed . 

*/ 

#define  NEEDBITS(x,  savestate)  \ 

n GETBITSOR(x,  savestate;  SAVEBITBU F EMPTY;  return  1) 

/* 
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* NEEDBITS2  uses  two  figures  for  the  number  of  bits  required.  The  first, 

* X,  is  cheap  to  compute  and  is  used  unless  we  run  out  of  input  data. 

* If  that  happens,  the  more  expensive  value,  x2,  is  used. 

*/ 

^define  NEEDBITS2(x,  x2,  savestate)  \ 

n NEEDBITSCx,  if  Ck  >=  (unsigned)(x2))  {s=0;  break;}  savestate) 

#define  DUHPBITS(x)  (b  >>=  x,  k -=  x) 

/* 

* Huffman  code  decoding  is  performed  using  a multi-level  table  lookup. 

* The  fastest  way  to  decode  is  to  simply  build  a lookup  table  whose 

* size  is  determined  by  the  longest  code.  However,  the  time  it  takes 

* to  build  this  table  can  also  be  a factor  if  the  data  being  decoded 

* is  not  very  long.  The  most  common  codes  are  necessarily  the 

* shortest  codes,  so  those  codes  dominate  the  decoding  time,  and  hence 

* the  speed.  The  idea  is  you  can  have  a shorter  table  that  decodes  the 

* shorter,  more  probable  codes,  and  then  point  to  subsidiary  tables  for 

* the  longer  codes.  The  time  it  costs  to  decode  the  longer  codes  is 

* then  traded  against  the  time  it  takes  to  make  longer  tables. 

* 

* This  results  of  this  trade  are  in  the  values  LBITS  and  OBITS 

* below.  LBITS  is  the  number  of  bits  the  first  level  table  for  literal/ 

* length  codes  can  decode  in  one  step,  and  OBITS  is  the  same  thing  for 

* the  distance  codes.  Subsequent  tables  are  also  less  than  or  equal  to 

* those  sizes.  These  values  may  be  adjusted  either  when  all  of  the 

* codes  are  shorter  than  that,  in  which  case  the  longest  code  length  in 

* bits  is  used,  or  when  the  shortest  code  is  *longer*  than  the  requested 

* table  size,  in  which  case  the  length  of  the  shortest  code  in  bits  is 

* used . 

* 

* There  are  two  different  values  for  the  two  tables,  since  they  code  a 

* different  number  of  possibilities  each.  The  I i t e r a I / I e ng t h table 

* codes  286  possible  values,  or  in  a flat  code,  a little  over  eight 

* bits.  The  distance  table  codes  30  possible  values,  or  a little  less 

* than  five  bits,  flat.  The  optimum  values  for  speed  end  up  being 

* about  one  bit  more  than  those,  so  LBITS  is  8+1  and  OBITS  is  5+1. 

* The  optimum  values  may  differ  though  from  machine  to  machine,  and 

* possibly  even  between  compilers.  Your  mileage  may  vary. 

*/ 

^define  LBITS  9 /*  bits  in  base  I i t e r a I / I e n g t h lookup  table  */ 

^define  OBITS  6 /*  bits  in  base  distance  lookup  table  */ 

/*  If  BHAX  needs  to  be  larger  than  16,  then  h and  xC3  should  be  ulg.  */ 
^define  BMAX  15  /*  maximum  bit  length  of  any  code  (16  for  explode)  */ 

//define  N_f1AX  288  /*  maximum  number  of  codes  in  any  set  */ 

//if  definedC ST0C__)  ||  defined! cplusplus) 

static  int 

huf t_bui IdCunsi gned  char  const  *b,  unsigned  n,  unsigned  s,  ush  const  *d, 
n ush  const  *e,  struct  huft  **t,  unsigned  *m) 

//else 

static  int 

huf t_bui ld(b,  n,  s,  d,  e,  t,  m) 

unsigned  char  *b;  /*  code  lengths  in  bits  (all  assumed  <=  BMAX)  */ 

unsigned  n;  /*  number  of  codes  (assumed  <=  N_MAX)  */ 

unsigned  s;  /*  number  of  s i mp I e- va  I u ed  codes  (0..S-1)  */ 
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ush  const  *d; 
ush  const  *e; 
struct  huft  **t; 
unsigned  *ni; 

# e n d i f 
/* 


/*  List  of  base  values  for  non-simpLe  codes  */ 
/*  List  of  extra  bits  for  non-simpLe  codes  */ 
/*  result:  starting  table  */ 

/*  suggested  Lookup  bits,  returns  actual  */ 


* Given  a List  of  code  Lengths  and  a maximum  table  size,  make  a set  of 

* tables  to  decode  that  set  of  codes.  Return  values: 

* 0 = success 

* 1 = the  given  code  set  is  incomplete 

* (the  tables  are  still  built  in  this  case) 

* 2 = the  input  is  invalid 

* (all  zero  Length  codes  or  an  oversubscribed  set  of  Lengths) 

* 3 = not  enough  memory. 

*/ 

{ 


unsigned  a; 
unsigned  cCBMAX+1D; 
unsigned  f; 
i nt  g; 
i n t h ; 

register  unsigned  i; 
register  unsigned  j; 
register  int  k; 
i n t L ; 

register  unsigned  char  const 
register  unsigned  *p; 
register  struct  huft  *q; 
struct  huft  r; 
struct  huft  *uCBMAXD; 
unsigned  vCN_MAXD; 
register  int  w; 
unsigned  xCBMAX+ID; 
unsigned  *xp; 
int  y; 
unsigned  z; 


/*  counter  for  codes  of  Length  k */ 

/*  bit  Length  count  table  */ 

/*  i repeats  in  table  every  f entries  */ 

/*  maximum  code  Length  */ 

/*  table  level  */ 

/*  counter,  current  code  */ 

/*  counter  */ 

/*  number  of  bits  in  current  code  */ 

/*  bits  per  table  (returned  in  m)  */ 

*bp;n  /*  pointer  into  bC]  */ 

/*  pointer  into  cCD  or  vCD  */ 

/*  points  to  current  table  */ 

/*  table  entry  for  structure  assignment  */ 
/*  table  stack  */ 

/*  values  in  order  of  bit  length  */ 

/*  bits  before  this  table  ==  (L  * h)  */ 

/*  bit  offsets,  then  code  stack  */ 

/*  pointer  into  x */ 

/*  number  of  dummy  codes  added  */ 

/*  number  of  entries  in  current  table  */ 


/*  Generate  counts  for  each  bit  Length  */ 
memset(c,  0,  sizeof(c)),- 
bp  = b;  i = n; 
do  { 

cC*bp  + + !]+  + ; /*  assume  all  entries  <=  BHAX  */ 

> while  (--i); 

if  (cC03  ==  n)  /*  null  input--aLL  zero  Length  codes  */ 

{ 

*t  = (struct  huft  *)NULL; 

*m  = 0 ; 
return  0; 

} 


/*  Find  minimum  and  maximum  length,  bound  *m  by  those  */ 

L = * m ; 

for  (j  = 1;  j <=  BHAX;  j++) 
if  (cCj:) 
break; 

k=j;  /*minimumcodeLength*/ 
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if  ( ( uns i gned ) L < j ) 

L = i ; 

for  (i  = BMAX;  i ; i — ) 
if  (cCiD) 
break; 

g = i;  /*  maximum  code  Length  */ 

if  ( ( uns i gned ) L > i ) 

L = i ; 

* m = L ; 


/*  Adjust  last  Length  count  to  fiLL  out  codes,  if  needed  */ 
for  (y  = 1 <<  j;  j < i ; j++,  y <<=  1) 
if  ((y  -=  cCj3)  < 0) 

return  2;  /*  bad  input:  more  codes  than  bits  */ 

if  (Cy  -=  cCi!])  < 0) 
return  2; 
cCi]  +=  y; 


/*  Generate  starting  offsets  into  the  value  table  for  each  length  */ 
xCi:  = j = 0; 
p=c+1;  xp=x+2; 

while  ( — i)  { /*  note  that  i ==  g from  above  */ 

*xp++  = (j  +=  *p++); 

> 

/*  Make  a table  of  values  in  order  of  bit  Lengths  */ 
bp=b;  i =0; 
do  { 

if  ((j  = *bp++)  !=  0) 

vCxCjD  + + II  = i; 

> while  (++i  < n); 


/*  Generate  the  Huffman  codes  and  for  each,  make  the  table  entries  */ 


xC0]=i=0;  /* 
p = v;  /* 
h = -1;  /* 
w = - L ; / * 
uC0D  = (struct  huft  *)NULL;  /* 
q = (struct  huft  *)NL)LL;  /* 
z = 0;  /* 


first  Huffman  code  is  zero  */ 
grab  values  in  bit  order  */ 
no  tables  yet  — Level  -1  */ 
bits  decoded  ==  (L  * h)  */ 
just  to  keep  compilers  happy  */ 
ditto  */ 
ditto  */ 


/*  go  through  the  bit  Lengths  (k  already  is  bits  in  shortest  code)  */ 
for  (;  k <=  g;  k++ ) ( 
a = c C k D ; 
while  (a--)  ( 

/*  here  i is  the  Huffman  code  of  Length  k bits  for  value  *p  */ 

/*  make  tables  up  to  required  Level  */ 


while  (k  > 

w 

+ 

L)  i 

n 

h + + ; 

n 

w +=  1; 

/*  previous 

table  always 

L bits  */ 

D 

/*  compute 

m i 

n i mum 

size 

table  Less 

than 

or  equal 

to  1 bits  */ 

n 

z = (z  = 

g 

- 

A 

3 

( u n s i 

gned ) L ? 1 : 

z; 

/*  upper 

Limit  on  table  size 

D 

if  ((f  = 

1 

<< 

(j  = 

k - 

w) ) > a + 1 ) 

/ * try  a 

k-w  bit  table  */ 
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Q 

c 

/* 

too  few  codes  for 

k-w  bit  table 

*/ 

n 

f -=  a + 1 ; 

/* 

deduct  codes  from 

patterns  left 

*/ 

n 

X p = c + k ; 

n 

while  (++j  < z) 

{ 

/* 

try  smaller  tables 

up  to  z bits 

*/ 

n 

if  ( (f  «=  1 ) 

< = 

*-i-  + xp  ) 

a 

break; 

/* 

enough  codes  to  use  up  j bits  */ 

n 

f -=  *xp; 

/* 

else  deduct  codes 

f rom  patterns 

*/ 

a 

} 

n 

> 

n 

z 

= 1 <<  j; 

/* 

table  entries  for 

j-bit  table  */ 

Q 

/* 

allocate  and  1 

ink 

in  new 

table  */ 

□ 

i f 

((q  = (struct 

huft 

* ) pgpMemA 1 1 0 c ( ( z + 1 ) * s i z e o f ( s t r u c t huft))) 

° (struct  huft  *)NULL) 

n { 

n if  (h) 

° huft_free(uC03); 

n returns,-  /*notenoughmemory*/ 

n > 

#if  SECURE 


n 

q->b i t s = 

(char)j;n 

/* 

Track  size  for  free  */ 

#endi f 

□ 

*t  = q -t  1 

r 

/* 

link  to  list  for  huft_free()  * 

n 

*(t  = 8(q- 

>next))  = 

(struct  huft  *)NULL; 

Q 

u [ h D = -t  + q 

/* 

table  starts  after  link 

*/ 

□ 

/*  connect 

to  last 

table. 

if  there  is  one  */ 

s 

if  (h)  { 

s 

X C h 3 = i 

/* 

save  pattern  for  backing 

up  * / 

n 

r.bits  = 

( c ha  r ) 1 ; 

/* 

bits  to  dump  before  this 

table 

□ 

r . exop  = 

-(char)j 

; /* 

bits  in  this  table  */ 

a 

r . next  = 

q; 

/* 

pointer  to  this  table  */ 

s 

j = i » 

(w  - 1); 

/* 

(get  around  Turbo  C bug) 

*/ 

n 

u[h-i:Cj]  = r; 

/* 

connect  to  last  table  */ 

n > 

> 


/*  set  up  table  entry  in  r */ 
r.bits  = (char)(k  - w); 
if  Cp>=v+n)  { 

n r.exop  = -128;  /*  out  of  values  — invalid  code  */ 

> else  if  (*p  < s)  { 

o r.exop  = (char)C*p  < 256  ? 16  : 32);  /*  256  is  e n d-o f -b I o c k code  */ 

n r.base  = *p++;  /*  simple  code  is  just  the  value  */ 

> else  { 

n r.exop  = (char)eC*p  - s3;  /*  n o n- s i mp I e-- I oo k up  in  lists  */ 

n r.base  = dC*p++  - s3; 

> 


/*  fill  code-like  entries  with  r */ 
f = 1 « (k  - w); 
for  ( j = i >>  w ; j < z ; j +=  f) 
n q [ j : = r ; 

/*  backwards  increment  the  k-bit  code  i */ 
for  (j  = 1 <<  (k  - 1);  i & j;  j >>=  1) 
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/*  back  up  over  finished  tables  */ 
while  ((i  & C(1  <<  w)  - 1))  !=  xChD)  { 

n h--;  /*don'tneedtoupdateq*/ 

n w - = I ; 

> 

> 

} 

/*  Return  true  (1)  if  we  were  given  an  incomplete  table  */ 
return  y !=  0 88  g !=  1; 

> 


#if  definedC STDC__)  ||  d e f i n e d ( __ c p I u s p I u s ) 

static  int 

huf t _f r ee ( s t rue t huft  *t) 

#e  I se 

static  int 
huft_free(t) 

struct  huft  *t;  /*  table  to  free  */ 

#end  i f 
/* 

* Free  the  malloc'ed  tables  built  by  h u f t _b u i I d ( ) , which  makes  a linked 

* list  of  the  tables  it  made,  with  the  links  in  a dummy  -1st  entry  of 

* each  table. 

*/ 

register  struct  huft  *p,  *q; 

/*  Go  through  linked  list,  freeing  from  the  malloced  (tC-ID)  address.  */ 
P = t; 

while  (p  !=  (struct  huft  *)NULL) 

{ 

q = ( — p)->next; 

#if  SECURE 

memsetCp,  0,  (1+(1<<p->bits))  * sizeof(*p)); 

ffend  i f 

pgpMemFree(p)  ; 

P = q; 

> 

return  0; 

> 


/* 

* Colin's  new  code. 
*/ 


^define  STATE_STARTn  0 
#definenSTATE_ST0REDLENn1 
Sdefine  ST AT E_ST0 R E Dn  2 
#def i nenSTATE_DYN_HDRn  3 
#def i nenSTATE_DYN_BITSn  4 
^define  STATE_D YN_TREEn  5 
Sdefine  ST AT E_ I N F LAT En  6 
^define  STATE_DONEn  7 

C[CHK:c847af8000db111b89dc3e6a3be4d33bdfcd0f3d300222bbee62fe609f87db62f:: 


Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


347 


pgpZInflate.c 


#define  STATE_STOPn  8 

/* 

* ALL  these  functions  return 

* 2 if  the  output  buffer  is  fuLL 

* 1 if  the  input  buffer  is  empty 

* 0 if  things  shouLd  continue  with  the  new  ctx-> state,  and 

* <0  on  error. 

*/ 


static  int 

i n f S t o r ed Le n ( s t r u c t I n f L a t e C on t e x t *ctx) 

{ 

n u L g b ; 

a unsigned  k; 

n i n t s ; 

n unsigned  char  const  *g; 

n unsigned  t; 

n LOADBITBUF; 

n t = k & 7 ; 

#if  STRICT 

n if  (b  & maskCt!])n  /*  Require  unused  bits  are  zero  */ 

a a return  INFERR_BADINPUT; 

#e  nd i f 

n DUMPBITSCt); 

n NEEDBITSC32,  (void)0); 

n /*  At  this  point,  k is  exactLy  32  */ 

n ctx->copyLen  = (unsignedlb  & 0xffff; 

n t = ~(unsigned)(b>>16)  S 0xffff; 

n b = 0; 

n k = 0 ; 


n SAVEBITBUF; 

n if  (t  !=  ctx->copy Len) 

D n return  I N F E R R_B A D I N PUT ; n / * Two  Lengths  not  identicaL  */ 

a ctx->state  = S T AT E_ S TO R E D ; 

n c t x-> s u b s t a t e = 0; 


n return0; 

> 


/* 

* Process  the  data  in  a stored  bLock.  Copy  the  input  data  to 

* the  circuLar  buffer,  fLushing  it  as  necessary. 

*/ 

static  int 

i nf S t o r ed ( s t r u c t I n f L a t e C on t e x t *ctx) 

{ 

a int  Len;n  /*  # of  bytes  to  copy  */ 

n int  retvaL  = 1;n/*  Out  of  memory  */ 

n pg p A s s e r t C c t X ->b u f b i t s ==  0); 
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n 

n 

n 

n 

n 

n 

n 

a 

u 

n 


L en  = c t x->i n I en ; 

if  ( ( u n s i g n ed  ) L e n >=  c t x-> c opy L e n ) { 
n Len  = c t x-> c opy I e n ; n /*  Copy  done!  */ 

n ctx->state  = STATE_START; 

n retvaL=0; 

> 

if  (Len  > c t x-> s L i d e e nd- c t x->ou t p t r ) { 
n Len  = ( i n t ) ( c t x-> s L i de end- c t x->o u t p t r ) ; 

a retvaL  = 2;n  /*  Output  buffer  fuLL  */ 

> 


n menicpy(ctx->outptr,  ctx->inptr,  Len); 

n ctx->inptr  +=  Len; 

n ctx->inLen  -=  Len; 

n ctx->outptr  +=  Len; 

n ctx->copyLen  -=  ( un s i g n e d ) L en ; 

n /*  Return  2 if  output  fuLL,  1 if  input  empty,  0 otherwise  (copy  done)*/ 

n return  retvaL; 

> 


static  int 

i nf Dy nHd r ( s t r u c t I n f L a t e C on t e x t *ctx) 
{ 


n 

u Lg  b; 

□ 

unsigned  k; 

n 

int  s ; 

n 

unsigned  char  const  *g; 

n 

LOADBITBUF; 

n 

NEEDBITS(14,  (void)0); 

a 

c t x-> L i t c od e s = 257  + ((unsigned)b  & 

0x1f  ); 

a 

DUHPBITS ( 5 ) ; 

n 

c t x->d i s t c od e s = 1 + ((unsigned)b  & 

0x1 f); 

n 

DUHPBITS ( 5 ) ; 

n 

c t x->b i t L e n g t h s = 4 + ((unsigned)b  8 

0xf  ); 

n 

DUHPBITS(4); 

n 

SAVEBITBUF; 

#ifndef  PKZ 1 P_BUG _W0 RKAROUN D 

n if  ( c t x-> L i t c od e s > 286  | | c t x->d i s t c od e s > 30) 

n n return  I N F E R R_B A D I N PUT; n / * Bad  Lengths  */ 

#e nd i f 

a ctx->state  = ST AT E_D YN_B I T S ; 

n return0; 


> 


/*  Load  up  the  ctx->bitLen  array  with  the  bit  Lengths  for  the  encoded 
* trees.  Unpermute  them  according  to  the  borderC]  array. 

*/ 

static  int 

i n f Dy nBi t s ( s t r u c t I n f L a t e C on t e x t *ctx) 

{ 

n u L g b ; 

n unsigned  k; 

n i n t s ; 
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unsigned  char  const  *g; 
struct  huft  *t; 
int  i,  Lim; 


a LOADBITBUF; 

o i = c t x-> s u b s t a t e ; 

° Lim  = c t x->b i t I e ng t h s ; 


while  (i  < Lim)  { 

n NEEDBITS(3,  c t x-> s u b s t a t e= i ) 

n ctx->bitLenCborderCi++]]  = (unsigned)b  S 7; 

n DUMPBITS(3); 

> 

SAVEBITBUF; 


while  (i  < 19) 

n ctx->bitLen[borderCi++]D  = 0; 


n 

k = 

7;n  /* 

Bits  in  tree  table  */ 

n 

i = 

huft_buiLd(ctx->bitLen,  19,  19, 

NULL,  NULL 

, &t,  8k); 

n 

i f 

( i ) { 

n 

n 

i f 

( i ==  1 ) 

n 

□ 

□ 

huft_free(t);n  /* 

Incomplete 

code  set  */ 

□ 

□ 

return  i ==  3 ? INFERR_N0HEM  : INFERR_ 

BADINPUT; 

□ 

> 

n 

C t X 

->t  reel 

= t; 

□ 

C t X 

->b i t s 1 

= k; 

n 

C t X 

->state 

= STATE_DYN_TREE; 

n 

C t X 

->substate  = 0; 

n 

return  0; 

> 

/* 

The  static  tree 

(built  on  demand)  */ 

static  struct  huft  *fixed_tL  = NULL; 
static  struct  huft  *fixed_td; 
static  unsigned  fixed_bL,  fixed_bd; 

static  int 
infFixedTree(void) 

{ 

n inti; 

n unsigned  char  LC288]; 


Q 

i f 

( f i xed_t  L ) 

n 

□ 

return  0;n 

/*  All  okay 

□ 

/* 

Literal  table  */ 

a 

for 

( i 

= 0;  i < 144; 

i ++ ) 

n 

n 

• S 

00 

II 

n 

L_I 

u 

for 

(; 

i < 256;  i++) 

n 

Q 

LCi:  = 9; 

n 

for 

C; 

i < 280;  i ++ ) 

n 

n 

L[i:  = 7; 

n 

for 

(; 

i < 288;  i ++ ) 

/ * make  a 

u 

a 

LCi:  = 8; 

/*  make  a complete,  but  wrong  code  set  */ 
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n 

n 

□ 

n 

n 

n 


fixed_bL  = 7; 

i = huft_buiLd(L,  288,  257,  cpLens,  cpLext,  &fixed_tL,  &fixed_bL); 
if  Ci  !=  0)  { 
n f i xed_t  L = NULL; 

n return  INFERR.NOMEM; 

> 


n /*  d i s t a n c e t a b L e */ 

n for  (i  = 0;  i < 30;  i++)  /*  make  an  incomplete  code  set  */ 

a n LCi3=5; 

n fixed_bd=5; 

n i = huft_buiLd(L,  30,  0,  cpdist,  cpdext,  &fixed_td,  8fixed_bd); 

n if(i>1){ 

n n h u f t _ f r e e ( f i X ed_ t L ) ; 

n n fixed_tL=NULL; 

n n return  I N F ER R_N0 M E M ; 

n } 

n return0; 

> 


static  int 

i nf DynT r ee ( s t r u c t I n f L a t e C on t ex t *ctx) 

{ 

n u L g b ; 

a unsigned  k; 

n i n t s ; 

n unsigned  char  const  *g; 

n struct  huft  *tL,  *td; 

n unsigned  bl,  bd; 

a unsigned  i,  j,  L,  m,  Lim; 

n LOADBITBUF; 

n i = ctx->index; 

n L = c t x->numbi t s ; n /*  Previous  # of  bits  for  repeat  code  use  */ 

n Lim  = c t x-> L i t c od e s + c t x->d i s t c ode s ; 

n tl  = ctx->tree1; 

n bL=ctx->bits1; 

n m=maskCbl3; 


D 

n 

a 

a 

n 

n 

a 

a 

n 

n 

n 

D 

□ 

D 

n 

n 

n 

n 


s wi t c h ( c t x->s ubs t a t e ) { 
case  0 : 

n i = 0; 

n 1 = 0; 

n /*FALLTHROUGH*/ 

case  1 : 


D 

n 

n 

a 

a 

a 

n 

a 

a 

n 

a 


while  (i  < Lim)  { 

n NEE  OBITS  2 ( b L , t L C ( u n s i g n ed ) b 8 m].bits, 

n n c t x-> i nd ex  = i ; c t x->n umb i t s = L ; c t x-> s ub s t a t e = 1 ) 

n td  = tl  + ((unsigned)b  8 m); 

n j=td->bits; 

n DUMPBITS(j); 

n j=td->base; 

n if(j<16){ 

n a c t x->b i t L e n [ i ++ D = L = j; 

a > else  if  (j  ==  16)  {a  /*  3 to  6 repeats  */ 

a a /*FALLTHROUGH*/ 


case  2 : 
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□ 

B 

B 

B 

NEEDBITS(2,  ctx->index=i;  ctx->numbits=L 

Q 

B 

B 

B 

° n n c t x->s ubs t a t e = 2 ) 

Q 

B 

B 

B 

j = 3 + ((unsigned)b  & 3); 

n 

B 

B 

B 

DUMPS ITS(2); 

s 

B 

B 

B 

if  (i  + j > lim) 

n 

B 

B 

B 

a return  INFERR_BADINPUT; 

n 

B 

B 

B 

do  { 

n 

B 

B 

B 

n c t x-> b i t L e n C i ++ D = (unsigned  cha 

n 

B 

B 

B 

> while  (--j); 

n 

B 

B 

> else 

if  (j  ==  17)  {n  /*  3 to  10  zeros  */ 

n 

B 

B 

B 

/*FALLTHR0UGH*/ 

n 

case  3 : 

n 

B 

B 

B 

NEEDBITS(3,  c t x-> i n d e x= i ; c t x-> s u b s t a t e = 

n 

B 

B 

B 

j = 3 + ((unsigned)b  S 7); 

n 

B 

B 

B 

DUMPBITS(3); 

n 

B 

B 

B 

if  ( i + j > lim) 

n 

B 

B 

B 

a return  I N F E R R_B A D I N PUT ; 

n 

B 

B 

B 

do  { 

n 

B 

B 

B 

n ctx->bitlenCi++]  = 0; 

n 

B 

B 

B 

> while  (--j); 

Q 

B 

B 

B 

1 = 0; 

n 

B 

B 

> else 

■C°  /*  j ==  18  --  11  to  138  zeros  */ 

n 

B 

B 

B 

pgpAssert(j  ==  18); 

a 

B 

B 

B 

/*FALLTHR0UGH*/ 

n 

case  4 ; 

n 

B 

B 

B 

NEEDBITS(7,  ctx->index=i;  ctx->substate=' 

n 

B 

B 

B 

j = 11  + ((unsigned)b  S 127); 

Q 

B 

B 

B 

DUMPBITS(7); 

n 

B 

B 

B 

if  Ci  + j > lim) 

n 

B 

B 

B 

n return  INFERR_BADINPUT; 

Q 

B 

B 

B 

do  { 

n 

B 

B 

B 

n ctx->bitlen[Ii++]  = 0; 

n 

B 

B 

B 

} while  ( — j ) ; 

n 

B 

B 

B 

1 = 0; 

n 

B 

B 

} 

o 

B 

> 

n 

> 

n 

/* 

Input  f i ni shed  */ 

n 

SAVEBITBU  F; 

D 

huft_freeCtL); 

n 

ctx->t  reel  = 0 

r 

□ 

/* 

Now  build  the  trees 

- 1 i t e r a 1 / 1 eng t h,  then  distance  */ 

n 

bL 

= LB  ITS; 

n 

i 

= huf t _bu i L d ( c t x->b i t L en , c t x-> L i t c ode s , 257, 

a 

B 

cpLens, 

cplext,  &tl,  8bl); 

B 

i f 

(i  !=  0)  { 

B 

B 

if  ( i 

= = 1 ) 

B 

B 

B 

huft_free(tL); 

B 

B 

return 

i ==  3 ? 

INFERR_N0MEM  : I N F E R R_B A D I N PUT ; 

B 

> 

B 

bd 

= DBITS; 

B 

i 

= h u f t _bu i 1 d ( c t x->b i t L e n+ c t x-> L i t c ode s , c t x->d i s t c od e s , 0, 

B 

B 

cpdi st. 

cpdext,  &td,  Sbd); 

# i f d e f 

PKZIP_BUG_WORKA ROUND 

B 

i f 

( i > 1)  { 

C:CHK:ef562becca360f94965b9deb30842af08526cc7b055dd6dd2105df908077ed7c9:: 


352 


Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpZInflate.c 


^ e 1 s e 

n 

i f 

(i  !=  0)  { 

n 

□ 

if  (i 

= = 1 ) 

n 

Q 

n 

huft_free(td); 

#endi f 

n 

n 

huf  t_ 

free(tl); 

n 

n 

return  i ==  3 ? INFERR 

n 

> 

a 

C t X 

->  t r e e 1 = 

tl; 

n 

ctx 

->b i t s 1 = 

bl; 

n ctx->tree2  = td; 

n ctx->bits2  = bd; 


INFERR_BADINPUT; 


n ctx->state  = ST AT E_ I N F LAT E ; 

n c t x->s u b s t a t e = 0; 


n r'eturn0; 

> 


/* 

* This  is  the  heart  of  ZIP  inflation.  The  code  is  heavily  optimized 

* for  speed,  including  for  many  brain-damaged  compilers  that  can  only 

* optimize  one  statement  at  a time.  To  generate  better  code  from 

* such  idiot  compilers  (which  are  distressingly  common  on  platforms 

* such  as  MS-DOS),  expressions  are  made  big  and  complex,  and  intermediate 

* results  are  ssigned  to  variables  in  the  expression  where  possible 

* so  the  compiler  won't  try  to  use  a disjoint  temporary  and  have  to 

* spill.  This  makes  the  code  a little  hard  to  follow  at  times. 

* Sorry. 

* 

* Also,  due  to  the  deep  nesting  (it's  all  in  one  function,  again,  for 

* speed  even  on  systems  that  can't  inline),  the  indent  amount  is  only 

* two  spaces  and  variable  names  are  very  short. 

* 

* This  does  NOT  currently  detect  a reference  to  before  the  beginning  of 

* the  file.  It  just  blindly  uses  the  circular  buffer. 

*/ 

static  i nt 

i n f I n f I a t e ( s t r u c t I n f I a t e C on t ex t *ctx) 


ulg  b;n 

n 

/* 

Bit  buffer  info  - bit  buffer  itself 

*/ 

unsigned 

k;  n 

n 

/* 

Number  of  low0order  bits  of  b that 

are  valid  */ 

i n t s ; n 

n 

/* 

Bytes  of  valid  input  remaining  */ 

unsigned 

char 

const 

*g;n 

/*  Input  buffer  pointer  */ 

unsigned 

char 

*w;n 

/* 

Window  output  write  pointer  */ 

unsi gned 

r;n 

n 

/* 

Space  available  after  w (always  >0) 

*/ 

struct  huft  *tl,  *td 

;n/* 

Tree  info  (const  except  for  EOB  processing)  */ 

unsigned 

bl. 

bd; 

unsigned 

ml. 

md  ; 

struct  huft  const  *t 

;n/* 

Temporary  tree  pointer  */ 

unsigned 

char 

const 

*p;n 

/*  Copy  source  pointer  */ 

i n t i ; 

i n t e ; 

unsigned 

n,-n 

n 

/* 

Copy  length  */ 

unsigned 

d;n 

n 

/* 

Copy  distance  */ 
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LOADBITBUF;n  n /*  Load  b,  k,  s,  g */ 

w = ctx->outptr; 
r = ctx->s L i deend-w; 
pgpAssert ( r); 


t L 

= 

ctx->tree1 ;n 

/* 

Li  t e ra L / L eng t h tree  */ 

bl 

= 

ctx->bits1;n 

/* 

Number  of  bits  in 

top- 

Level 

table 

*/ 

m L 

= 

maskCbLT;n 

/* 

Mask  of  that  many 

bits 

*/ 

t d 

= 

ctx->tree2;n 

/* 

Distance  tree  */ 

bd 

= 

ctx->bi ts2;n 

/* 

Number  of  bits  in 

top- 

Level 

table 

*/ 

md 

- 

maskCbd];n 

/* 

Mask  of  that  many 

bits 

*/ 

/* 

★ 

We 

don't  always 

need 

all  of  these,  but  i 

t ' s 

easier 

to  always 

* 

Load  them  than 

to  do 

it  conditionally. 

*/ 

t = ctx->t; 
n = ctx->copyLen; 
d = ctx->distbase; 
e = ctx->numbits; 

switch  ( c t x-> s u b s t a t e ) { 
case  0 : 

for(;;){  /*dountiLendofbLock*/ 

/* 

* This  cheap  Loop  does  no  input  or  output  checking. 

* At  most  258  bytes  of  output  are  produced  per  iteration, 

* so  we  must  do  no  more  than  r/258  iterations. 

* Also,  at  most  15+5+15+13  = 48  bits  = 6 bytes  are  consumed 

* every  iteration,  so  we  can  do  no  more  than  s/6  iterations. 

* Also,  to  allow  for  starting  with  an  empty  bit  buffer  and 

* ending  with  a full  one,  subtract  4 bytes,  so  it's  (s-4)/6. 

* 

* These  are  approximated  by  r/256-1  and  Cs-2)/8,  respectively. 

* Note:  for  a file  that  compresses  to  258  bytes  per  symbol  (e.g.  all 

* the  same  character),  that  approximation  would  break  down  if 

* 

*n  r/256-1  > r/258 

* thus,n  258  * r - 256  * 258  > 256*r 

* thus,n  2 * r > 256  * 258 

* thus,n  r > 128  * 258  = 33024  > 32768 

* 

* Of  course,  the  window  is  <=  32768,  so  it's  not  a concern. 

★ 

* For  the  input  approximation  to  break  down,  you'd  have  to  have 

★ 

*n  (s-2)/8  > (s-4)/6 

* thus,n  6*s  - 12  > 8*s  - 32 

* thus,  20  > 2*s 

* thus,  10  > s 

* 

* But  for  s<10,  both  approximations  (since  this  is  integer  math) 

* return  0,  so  it's  not  a problem.  The  r/258  Limit  is  usually 

* hit  first,  so  the  crudeness  of  this  approximation  is  acceptable. 

*/ 
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n 

□ 


□ 

n 

c 

Q 

n 

a 

□ 

□ 

a 

n 

n 

□ 

n 

□ 

n 

n 

□ 

D 

□ 


while  (r  >=  512  &&  s >=  10)  t 

/*  Compute  number  of  iterations  we  can  do,  worst-case  */ 
if  ((e  = (s  - 2)  >>  3)  < (i  = (r  » 8)  - 1)) 
i = e; 

/* 

* This  is  the  cheap  Loop,  which  is  performed  i times  before 

* the  available  buffer  space  is  re-evaluated.  If  you  want  to 

* understand  how  the  inflation  process  works,  this  is  the  best 

* part  of  the  code  to  read,  since  it  isn't  cluttered  up  with 

* error  checking.  First  comes  a I i t e r a L / L e ng t h code,  which 

* can  be  either  a Literal  (0-255),  an  end  of  block  code  (256), 
*/ 

do  { 

GRABBITS(20)  /*  max  bits  for  L i t e r a I / L e n g t h code  */ 

t = tl  + ((unsigned)b  S ml); 
if  ((e  = t->exop)  < 0)  ( 
do  { 

if  (e  ==  -128) 

n return  INFERR_BADINPUT; 

DUMPBITS ( t->bi t s ) ; 
e = -e; 

t = t->next  + ((unsigned)b  & maskCeD); 

} while  ((e  = t->exop)  < 0); 

> 

DUMPBITS ( t->bi ts); 

if  (e  S 16)  { /*  then  it's  a Literal  */ 

*w++  = (unsigned  char)t->base; 
continue; 

> 

if  (e  S 32)  n /*  EOB  */ 

goto  E0B;n  /*  At  end  of  function  */ 


n /*  Else  Length  code  */ 


n /*  get  Length  of  block  to  copy  */ 

n n = t->base  + ((unsigned)b  S maskCe3); 

n DUMPBITS(e); 


D 

n 

n 

□ 

n 

n 

o 

n 

□ 

n 

□ 

n 

n 

Q 

□ 

n 


/*  decode  distance  of  block  to  copy  */ 

GRABBITS ( 15); 

t = td  + ((unsigned)b  S md); 
if  ((e  = t->exop)  < 0)  { 
do  { 

if  (e  ==  -128) 

n return  I N F E R R_B A D I N PUT ; 

DUMPBITS ( t->bi ts); 
e = -e; 

t = t->next  + ((unsigned)b  S maskCeD); 

> while  ((e  = t->exop)  < 0); 

} 

DUMPBITS(t->bits); 

GRABBITSl (unsigned)e)  /*  get  up  to  13  extra  bits  */ 

d = t->base  + ((unsigned)b  & maskCeD); 

DUMPBITS((unsigned)e); 


#i  f 

n 

n 


WSIZE  < 32768 

if  (d  > c t x->s L i de  I e n ) 
return  I N F E R R_B A D I N PUT ; 
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/*  do  the  copy  */ 

if  ( ( u n s i g n e d ) ( w - ctx->sLide)  >=  d)  { 
p = w - d; 

*w++  = *p++; 

*w++  = *p++; 
do  { 

*w++  = *p++; 

} while  (--n); 

> else  { 
n +=  2 ; 

p = w - d + ctx->sLideLen; 
do  { 

n -=  (e  = (unsigned)Ce  = ctx->sLideend  - (p>w?p:w))  > n ? n : e); 
do  { 

n *w++  = *p++; 

> while  (--e); 
if  (p  ==  c t x->s  I i d eend ) 
n p = ctx->slide; 

> while  (n); 

> 

> while  (--i); 

r = c t x->s I i deend  - w; 

> /*  while  (we  can  use  the  cheap  loop)  */ 

/* 

* Okay,  we've  fallen  through  from  the  cheap  loop  to  the 

* expensive  loop.  This  one  checks  each  time  it  gets  bits 

* from  the  input  or  writes  bytes  to  the  output  that  there 

* is  enough  room.  However,  there  are  two  versions  of 

* much  of  *this*,  too!  The  first  uses  worst-case  figures 

* for  the  amount  of  input  data  needed,  and  obtains  one  batch  of 

* input  bits  for  several  uses. 

* The  second  carefully  avoids  asking  for  any  more  bits  than  it  really 

* needs.  When  it  gives  up  and  returns,  it  is  really  not  possible 

* to  extract  any  more  symbols  from  the  input  data. 

*/ 

/*  Pessimistic  estimate  of  bits  for  I i t e r a I / I e ng t h : 15  + 5 */ 

G ETB I TS 0 R ( 2 0 , goto  g e t I i t I e ng t h 2 ) 
t = tl  + C(unsigned)b  S ml); 
if  (Ce  = t->exop)  < 0)  { 
n dot 

a if  (e  ==  -128) 

n return  INFERR_BADINPUT; 

n DUMPBITS C t->bi ts ) ; 

H e = -e ; 

o t = t->next  + C(unsigned)b  8 maskCe]); 

n > while  (Ce  = t->exop)  < 0); 

> 

DUMPBITS ( t->bi ts); 

if  Ce  & 16)  { /*  then  it's  a literal  */ 

n *w  + + = (unsigned  c ha r ) t ->ba s e; 

o if(--r==0){ 

SAVEBITBUF; 
ctx->outptr  = w; 

c t x-> s u b s t a t e = 0;n  /*  Restart  at  top  of  loop  */ 
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#end i f 

□ 

a 

H 

a 

n 

□ 

n 

a 

n 

Q 

n 

Q 

n 

□ 

Q 

a 

a 

n 

n 

□ 

a 

□ 
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return  2;n  /*  Output  buffer  fuLL  */ 

n } 

n continue; 

> 

if  (e  & 32) 

break;n  /*  Leave  infinite  Loop  */ 
goto  gotLength; 
getLitLength2: 

/*  Method  2:  We  don't  even  have  20  bits  available  - do  it  bit-by-bit.  */ 
t = tl  + ((unsigned)b  S ml); 

/* 

* See  if  higher-order  bits  we're  missing  actually  matter. 

* We  don't  have  to  try  to  fill  the  bit  buffer,  because  we  only  get 

* here  if  s (number  of  following  input  bytes)  is  supposed  to  be  zero. 

*/ 

if  (k  < ( u n s i g ne d ) t -> b i t s ) { 
ctx->outptr  = w; 
ctx->substate  = 0; 

SAVEBITBUFEMPTY; 
return  1 ; 

> 

/*  Actually,  s is  set  (see  GETBITSOR  comment)  to  -1,  so  reset  it  */ 
s = 0; 

if  ((e  = t->exop)  < 0)  { 
n do  { 

if  (e  ==  -128) 

return  INFERR_BADINPUT; 

DUHPBITS ( t->bi t s ) ; 
e = -e; 
t = t->next; 

NEEDBITS2(e,  t C ( uns i gned ) b & ma s k [ e 3 ] . b i t s , 

ctx->t=t;  ctx->outpt r=w;  c t x->numb i t s=e ; c t x-> s ub s t a t e= 1 ) 
t +=  (unsigned)b  & maskCe3; 
while  ((e  = t->exop)  < 0); 

DUMPBITS ( t->bi ts ) ; 

if  (e  & 16)  { /*  then  it's  a Literal  */ 

n *w++  = (unsigned  char)t->base; 

n if(  — r==0){ 

/*  We  just  filled  the  output  buffer  - return  */ 

SAVEBITBUF; 
ctx->outptr  = w; 

ctx->substate  = 0;n  /*  Restart  at  top  of  Loop  */ 

return  2;n  /*  Output  buffer  full  */ 

n > 

n cont i nue; 

} 

if  (e  & 32)n  /*  EOB  */ 

n break;n  /*  Leave  infinite  Loop  */ 

/*FALLTHROUGH*/ 
case  2 : 

NEEDBITS(e,  ctx->t  = t ; c t x->ou t p t r =w ; c t x->numb i t s =e ; c t x-> s u b s t a t e =2 ) 
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gotLength; 


/*  AIL  data  is  available  - compute  total  Length  of  block  to  copy  */ 
n = t->base  + ((unsigned)b  S maskCeD); 

DUMPBITS((unsigned)e); 

/*FALLTHROUGH*/ 
case  3 : 

/*  Get  distance  code  - 15  is  maximum  code  size  */ 

G ETBITSOR ( 1 5 , goto  g e t d i s t a n c e 2 ) 
t = td  + ((unsigned)b  & md); 

/*  Negative  t->exop  means  there's  a subtable  of  2''-e  entries  */ 
if  ((e  = t->exop)  < 0)  { 
n do  { 

B i f (e  ==  -1 28) 

n return  I N F E R R_B A D I N PUT ; n /*  Invalid  code  (static  table  case)  */ 

n DUHPBITS(t->bits); 

n e = -e ; 

n t = t->next  + ((unsigned)b  8 maskCeD); 

n > while  (Ce  = t->exop)  < 0); 

> 

goto  gotdistance; 


getdi stance2 : 

/*  We  don't  even  have  15  bits  available  - do  it  bit-by-bit.  */ 
t = td  + ((unsigned)b  S md); 

/* 

* See  if  higher-order  bits  we're  missing  actually  matter. 

* We  don't  have  to  try  to  fill  the  bit  buffer,  because  we  only  get 

* here  if  s (number  of  following  input  bytes)  is  supposed  to  be  zero. 
*/ 


B 

B 

B 

B 

B 

B 


if  (k  < ( uns i gned ) t->b i t s ) { 
ctx->outptr  = w; 
ctx->copyLen  = n; 
c t x-> s ub s t a t e = 3; 

SAVEBITBUFEHPTY; 
return  1; 

} 

/*  Actually  (see  GETBITSOR  comment)  s is  set 
s = 0; 

/*  Negative  t->exop  means  there's  a subtable 
if  ((e  = t->exop)  < 0)  { 
do  t 

if  (e  ==  -128) 

return  I N F ERR_BAD I NPUT; n /*  Invalid 
DUHPBITS(t->bits); 
e = -e; 
t = t->next; 

case  4 : 


to  -1,  so  reset  it 
of  2^-0  entries  */ 

code  (static  table 


*/ 


case) 


*/ 


NEEDBITS2(e,  t C ( uns i gned ) b & ma s kC e D 3 . b i t s , ctx->t=t;  c t x->ou t p t r =w ; 

ctx->copyLen  = n;  c t x->numb i t s=e ; c t x-> s u b s t a t e=4 ) 
n t +=  (unsigned)b  & maskCe]; 

a } while  ((e  = t->exop)  < 0); 

> 


gotdistance: 

/*  All  data  is  available  - compute  the  base  distance  */ 
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DUHPBITS ( t->bi t s ) ; 
d = t->base; 

/*FALLTHROUGH*/ 
case  5 : 

/*  e is  number  of  bits  extra  following  distance  code  (0..13)  */ 
NEEDBITSle,  c t x->o u t p t r = w ; c t x-> copy  I en  = n ; c t x->d i s t ba s e = d ; 

ctx->numbi ts=e;  ctx->substate=5) 
d +=  ((unsigned)b  S maskCe]); 

DUHPBITSC (unsigned)e); 


#if  WSIZE  < 32768 

if  (d  > c t x->s I i de L en ) 
n return  INFERR_BADINPUT; 

# e nd i f 

/*  do  the  copy,  with  handling  for  wrapping  around  end  of  buffer  */ 
if  ( C un s i g n e d ) ( w - ctx->slide)  >=  d &&  w + n < c t x-> s I i d e end  - 2)  { 
/*  Simple  case  - neither  source  nor  dest  cross  end  of  buffer  */ 


a 

p = w 

- d; 

n 

c 

II 

1 

(_ 

+ 2; 

n 

*w  + + = 

*p  + +; 

n 

*w  + + = 

*p  + +; 

n 

Q. 

O 

n 

*w  + + 

= *p  + + 

n } while  (--n); 

} else  { 

n n +=  2;n/*  # of  bytes  to  copy  */ 

n p = ctx->slide  + ((w  - ctx->slide  - d)  & ctx->slidemask);  /*  src  */ 

n do  { 


D 

□ 

n 

n 

D 

n 


/*  Set  e to  number  of  bytes  we  can  copy  at  once  */ 

n -=  (e  = (unsigned)(e  = c t x-> s I i d e e nd  - (p>w?p:w))  > n ? n : e); 
r -=  e; 
do  { 

*w++  = *p++ ; 

> while  (--e); 

if  (r  ==  0)  {n/*  Did  we  just  write  everything  we  could?  */ 
SAVEBITBUF; 


case  6 : 


n 

n 

D 

n 

□ 


> 


> 


ctx->outpt  r = w; 
ctx->copylen  = n; 

ctx->di stbase  = d;n  /*  Save  copy  distance  to  recompute  p */ 
c t x-> s u b s t a t e = 6; 

return  2;n  /*  Need  more  output  space  */ 

p = ctx->slide  + ((w  - ctx->slide  - d)  & ctx->slidemask); 

> 

if  (p  ==  c t x-> s I i de e n d ) 
p = ctx->slide; 
while  (n); 


> /*  for(;;)  */ 

> /*  s w i t c h ( c t x-> s u b c a s e ) */ 


EOB  : 

/*  End  of  Block  */ 
ctx->outptr  = w; 

SAVEBITBUF; 

ctx->state  = STATE_START; 
c t x-> s u b s t a t e = 0; 
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if  (tL  S&  tl  !=  fixed_tL) 
huft_free(tL); 
if  (td  8&  td  !=  fixed_td) 
huft_free(td) ; 
ctx->tree1  = 0; 
ctx->tree2  = 0; 

return  0; 


/* 

* Start  state  - read  3 bits,  which  are  Last  block  flag  (set  to  1 on 

* Last  block),  and  2 bits  of  block  type. 

*/ 

static  int 

i n f S t a r t ( s t ru c t I n f I a t e C on t ex t *ctx) 

{ 

n u L g b ; 

n unsi gned  k; 

o i n t s ; 

n unsigned  char  const  *g; 

n intretvaL=0; 

n if  ( c t x-> I a s t b L oc k ) { 

n n ctx-> state  = STATE_DONE; 

n n return0; 

n } 


n LOADBITBUF; 

n NEEDBITS(3,  (void)0); 

n c t x-> L a s t b L o c k = (int)Cb  S 1); 

n DUMPBITS(I); 


swi tchCb  & 3)  { 


n 

case 

0: 

\a/*  Stored 

*/ 

n 

Q 

ctx->state 

= STATE_STOREDLEN; 

□ 

n 

break; 

n 

case 

1 ; 

/*  Static 

- build  fixed  trees 

□ 

n 

retval  = i nf F i xedTree ( ) ; 

n 

a 

ctx->tree1 

= fixed_tL; 

n 

Q 

c t x->b i t s 1 

= f i xed_b  L ; 

n 

□ 

ctx->tree2 

= fixed_td; 

n 

□ 

ctx->bi ts2 

= fixed_bd; 

n 

Q 

ctx-> state 

= STATE_INFLATE; 

n 

n 

break; 

n 

case 

2 : 

/*  Dynamic 

*/ 

D 

a 

ctx->state 

= STATE_DYN_HDR; 

Q 

B 

break; 

n 

case 

3: 

/*  Illegal 

*/ 

o 

n 

retval  = I N F E R R_B A D I N PUT ; 

Q 

n 

break; 

a 

> 

n DUMPBITSC2); 

n SAVEBITBUF; 
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n ctx->substate  = 0; 

n return  retvaL; 

> 

/* 

* Get  a pointer  to  available  data  in  the  output  buffer 
*/ 

unsigned  char  const  * 

i n f G e t By t e s ( s t r u c t I n f I a t e C o n t e x t *ctx,  unsigned  *len) 

{ 

n *len  = ctx->outptr  - ctx->readptr; 

n return  *len  ? ctx->readptr  : 0; 

> 

/* 

* Mark  data  in  the  output  buffer  as  already  read.  We  don't  start 

* accepting  new  data  until  the  entire  output  buffer  has  been  read, 

* at  which  point  the  outptr  is  set  back  to  the  beginning  of  the 

* buffer. 

*/ 

void 

i n f S k i pBy t e s ( s t r u c t I n f I a t e C on t e x t *ctx,  unsigned  len) 

{ 

n pgpAssert ( len  <=  ( u n s i g n e d ) ( c t x->ou t p t r - c t x-> r e a d p t r ) ) ; 

n ctx->readptr  +=  len; 

n /*  If  at  end  of  buffer,  recirculate  */ 

n if  ( c t x-> r ea dpt r ==  c t x-> s I i de e n d ) { 

n n pg p As se r t ( c t x->ou t p t r ==  c t x-> s I i d e e nd  ) ; 

n n ctx->readptr  = ctx->outptr  = ctx->slide; 

n > 

> 


/* 

* Returns  number  of  bytes  written. 

* *error  < 0 on  error,  ==  0 if  no  error  (done  with  input  or  output  full) 

*/ 

s i ze_t 

i n f W r i t e ( s t r u c t I n f I a t e C on t e x t *ctx,  unsigned  char  const  *buf,  size_t  len, 
int  *error) 

{ 

a inti; 

n if  (ctx->outptr  ==  c t x-> s I i d e e nd ) ( 

n n *error  = (ctx->state  ==  STATE_STOP)  ? 0 : c t x->s ubs t a t e ; 

n n return  0;n  /*  Out  of  output  space!  */ 

n } 

n ctx->inptr  = buf; 

n /*  Decompression  code  can't  handle  more  than  INT_HAX  bytes  at  a time  */ 

a ctx->inlen  = len  > INT_MAX  ? INT_MAX  : (int)len; 

n do  { 

n n s w i t c h ( c t x-> s t a t e ) { 

n n case  STATE_START: 
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Q 

n 

n 

i = infStart(ctx); 

n 

u 

□ 

break; 

Q 

u 

case 

STATE_STOREDLEN : 

□ 

n 

n 

i = i nf S t 0 r ed Len ( c t X ) ; 

n 

a 

n 

break; 

□ 

n 

case 

STATE_ST0RED  : 

n 

□ 

n 

i = infStored(ctx); 

n 

n 

n 

break; 

Q 

D 

case 

STATE_DYN_HDR : 

□ 

□ 

n 

i = infDynHdr(ctx); 

n 

Q 

n 

break; 

n 

n 

case 

STATE_DYN_BITS : 

Q 

n 

n 

i = infDynBits(ctx); 

Q 

n 

a 

break; 

□ 

n 

case 

STATE_D YN_TREE : 

n 

□ 

n 

i = i nf DynTreeC ctx)  ; 

n 

n 

□ 

break; 

D 

□ 

case 

STATE_INFLATE: 

n 

n 

n 

i = i n f I n f 1 a t e ( c t X ) ; 

u 

□ 

n 

break; 

□ 

n 

case 

STATE_D0NE : 

s 

□ 

n 

if  (ctx->inlen  ||  ctx->bufbits  > 7) 

□ 

Q 

n 

n i = INFERR_L0NG; 

#if  STRICT 

n 

n 

n 

else  if  (ctx->bitbuffer  S mask[!ctx->bufbitsD) 

Q 

n 

n 

n i = I N F E R R_B A D I N PUT ; n /*  Unused  bits 

#end  i f 

n 

n 

□ 

else 

Q 

n 

tt 

n i = 2;n  /*  Read  output,  please  */ 

a 

n 

Q 

break; 

□ 

n 

case 

STATE_ST0P : 

n 

n 

n 

i = c t x-> s u b s t a t e ; 

□ 

n 

n 

break; 

□ 

n 

default: 

n 

n 

n 

pgpAssert(i=0);n/*  To  shut  up  compiler  warnings 

n 

n 

> 

□ 

} while 

(i  ==  0); 

n 

if  (i  < 

0)  { 

n 

n 

ctx->state  = STATE_ST0P; 

n 

n 

ctx->substate  = i; 

n 

n 

*e  r ro  r 

= i ; 

□ 

> else 

{ 

n 

n 

*e  r ro  r 

= 0; 

a 

> 

□ 

pgpAssert((size 

_t)(ctx->inptr  - buf)  ==  len  - ctx->inlen); 

n 

return 

C s i ze_ t ) ( c t x-> i np t r - buf);n  /*  Bytes  read  */ 

} 

/* 

* Signal  EOF,  detecting  truncated  messages. 

* If  another  error  has  been  reported,  this  just  repeats  it. 

*/ 

/*  New  version,  hopefully  useful.  */ 
i n t 

i n f EO F ( s t r u c t I n f I a t e C o n t e x t *ctx) 

{ 
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n /* 

n if 

n n 

n / * 

n if 

n n 

n / * 

n n 

> 

struct  I n f L a t e C o n t e X t * 
infALLoc(void) 

{ 

n struct  Inf LateContext  *ctx; 

n unsigned  char  *sLide; 

n slide  = (unsigned  char  * ) pg pM em A L L o c ( W S I Z E ) ; 

n if  (!sLide) 

n n return  0; 

n ctx  = (struct  I n f L a t e C on t ex t * ) pg pMem A L L o c ( s i z e o f ( * c t x ) ) ; 

n i f ( ! ctx)  { 

n n pgpMemFree(sLide); 

n n returnO; 

n } 

n ctx->sLide  = slide; 

n c t x-> s I i d e e nd  = slide  + WSIZE; 

n ctx->slidelen  = WSIZE; 

n c t x-> s I i d ema s k = WSIZE-1; 

n ctx->outptr  = slide; 

n ctx->readptr  = slide; 

n ctx->state  = STATE_START; 

n ctx -> substate  = 0; 

n ctx->inlen=0; 

n c t x->b i t bu f f e r = 0; 

n ctx->bufbits  = 0; 

n c t x-> I a s t b I o c k = 0; 

n ctx->tree1  =0; 

n ctx->tree2=0; 

n return  ctx; 

> 


If  processing  is  halted,  just  return  the  last  error  (if  any)  */ 
(ctx->state  ==  STATE_STOP) 
return  ctx -> substate; 

If  expecting  still  more  input,  we're  short  */ 

(ctx->state  !=  STATE_DONE) 
return  INFERR_SHORT; 

Otherwise,  all  is  well.  */ 
return  0; 


void 

i n f F r e e ( s t r u c t I n f I a t e C on t ex t *ctx) 
{ 


a 

n 

□ 

n 


if  (ctx->tree1  &&  ctx->tree1  != 
n h u f t _ f r e e ( c t x-> t r ee 1 ) ; 

if  (ctx->tree2  SS  ctx->tree2  != 
n huft_free(ctx->tree2); 


f i xed_t I ) 
fixed  td) 


n if  (ctx-> slide)  { 

#if  SECURE 

n n memset(ctx->slide,  0,  ctx->slidelen); 
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#end i f 

° n pgpMem F ree ( c t x->s I i de  ) ; 

n > 

#if  SECURE 

n memsetCctx,  0,  s i z eo f ( * c t x ) ) ; 

# e n d 1 f 

a pgpMemFree(ctx); 

> 
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/* 

* pgpZInf Late . h - inflate  a zip-compressed  stream  of  bytes. 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpZInf late . h,v  1.2  1996/12/19  20:26:34  mhw  Exp  $ 

*/ 

^include  <stddef.h>n  /*  For  si2e_t  */ 

#ifdef  cpLuspLus 

extern  "C"  { 

# end i f 

/*  Private  context  structure  */ 
struct  I n f I a t e Con t e X t ; 

struct  I n f I a t e C 0 n t e X t * i n f A L L o c ( vo i d ) ; 
void  i n f F r ee ( s t r u c t 1 n f L a t e C on t e x t *ctx); 

/*  Write  bytes.  Returns  bytes  written.  error  < 0 if  trouble  */ 
size_t  i nf Wr i te ( s t r uc t I n f L a t e C o n t e x t *ctx,  unsigned  char  const  *buf, 
n size_t  len,  int  *error); 

/*  Get  pointer  & Len  of  available  output  bytes  */ 

unsigned  char  const  *infGetBytes(struct  InflateContext  *ctx,  unsigned  *Len); 
/*  Tell  InflateContext  that  you've  read  "Len"  of  available  bytes  */ 
void  i nf S ki pBy t es ( s t r u c t InflateContext  *ctx,  unsigned  len); 

/*  Returns  0 for  okay,  or  <0  for  error  */ 
int  i nf EO F ( s t ru c t InflateContext  *ctx); 

#i  f def cplusplus 

> 

#e nd i f 


/ * Error 

codes 

returned.  */ 

#def i ne 

INFERR_ 

NONEn  0 

#def i ne 

INFERR. 

NOHEMn  -In 

/* 

Unable  to  allocate  as 

needed  */ 

#def i ne 

INFERR_ 

BADINPUTn-2n 

/* 

Corrupt  input 

*/ 

#def i ne 

INFERR_ 

SHORTn  -3n 

/* 

Unexpected  EOF 

*/ 

#de  f i n e 

INFERR_ 

LONGn  -4n 

/* 

Paddi ng  after 

expected 

EOF  */ 
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n 

# L i b / pgp/ ha s h / Ma kef i L e . i n 

U 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 


c 


n 


# $Id;  Makef i Le . i n,v  1.12.2.5  1997/06/07  09:49:56  mhw  Exp  $ 

# 

0BJS  = n pgpHash.o  pgpHD5.o  pgpSHA.o  pg p R I P EH D 1 60  . o 
SHAREDHDRS=  pgpHash.h 

all::  DONE 


c 


c 
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ft 

U L i b / pg p / h a s h / ma k e f i L e . ms c 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

U $Id:  makef i Le .msc,v  1.4. 2. 2 1997/06/07  09:49:57  mhw  Exp  $ 

n 


PGPLIB  = n.  .\.  .\pgpLib.  Lib 

CFLAGS=-I..\..\..\incLude  -I..\..\incLude  \ 
n -I..\..\..  -DHAVE_C0NFIG_H=1  $(DEBUG) 

a L L : : n n Lib 

headers:n  incL 

!incLude  " ma ke f i L e . i n " 


i n c L : 

K if  not  "$(SHAREDHDRS)"==""  \ 

° ° for  %f  in  ( SCSHAREDHDRS)  ) do  copy  %f  . . \ \ \ i n c L ud e 

n if  not  "$(PRIVHDRS)"==""  \ 

° ° for  %f  in  ( $(PRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L ud e 


DOSOBJSX=n  $ ( OB J S : . o= . ob j ) 

D0S0BJS=n  $ ( DOSOBJ SX : Uni x=Wi n32) 

Lib:n  $(D0S0BJS) 


. c . ob  j : 

n $(CC)  $(CFLAGS)  -17  -c  $< 


c L ea  n : 

n deL*.obj 

DONE  : 

n if  exist  $(PGPLIB)  L i b / ou t : $ ( PG P LI B ) SCPGPLIB)  SCDOSOBJS) 

n if  not  exist  $(PGPLIB)  L i b / ou t : $ ( PG P LI B ) SCDOSOBJS) 
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/* 

* pgpHash . c 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpHash. c,v  1.2. 2. 3 1 997/06/07  09:49:57  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 


# i n c L ude 

#end i f 

"config.h" 

#incLude 

<stddef . h> 

SincLude 

<string.h> 

# i n c L ude 

"pgpDebug . h" 

#incLude 

"pgpHash . h" 

#incLude 

"pgpMDS . h" 

#i nc  Lude 

" pgpSH A . h " 

# i n c L ud e 

"pgpRIPEMD160.h 

#i  nc  Lude 

"pgpMem. h" 

#incLude 

"pgpErr.h" 

#i nc  Lude 

" pgpUsua  L s . h " 

static  struct  Pg p H a s h C on t e x t * 

dohashinit  (struct  PgpHash  const  *h,  struct  Pg p H a s h C on t e x t *hc) 
{ 


n 

h c 

->priv  = pgpHemALLoc  (h->context 

n 

i f 

(hc->priv)  { 

n 

n 

hc->hash  = h; 

n 

n 

h->init  (hc->priv); 

n 

n 

return  he; 

s 

> 

a 

return  NULL; 

> 


/*  Generic  Hash  creation  code  */ 
struct  PgpHa shCont ext  * 

pgpHa s h C r ea t e (struct  PgpHash  const  *h) 
{ 

n struct  PgpHashContext  *hc; 


n 

D 

n 

n 

n 

n 

n 

□ 


he  = (struct  PgpHashContext  *)pgpMemALLoc  (sizeof  (*hc)); 
if  ( ! he) 

n return  NULL; 

if  (Idohashinit  (h,  he))  C 
n pgpMemFree  (he); 

n return  NULL; 

> 


n returnhc; 

> 


static  void 

hashWipe  (struct  PgpHashContext  *hc) 

{ 

n if  (he  SS  hc->priv)  { 
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° “ memset  (hc->priv,  0,  h c -> h a s h-> c o n t ex t _ s i z e ) ; 

° ° pg pHe m F r e e ( h c ->p r i V ) ; 

n } 

} 

void 

pgpHashDest roy  (struct  Pg p H a s h C o n t ex t *hc) 

{ 

a if  ( !hc) 

n n return; 

n hashWipe  (he); 

n memset  (he,  0,  sizeof  (*hc)); 

n pgpMemFree  (he); 

} 


struct  Pg p H a s h C on t e X t * 

pg p H a s h C L on e ( s t r u c t Pg p H a s h C on t e x t const  *hc) 

{ 

° struct  PgpHashContext  *dest; 

H dest  = pg pHa s h C r ea t e (hc->hash); 

n i f (dest  ) 

° n memepy  (dest->priv,  hc->priv,  hc->hash->context_size); 

° return  dest; 

} 

void 

pgpHa s h Copy ( s t ru c t PgpHashContext  *dest,  struct  PgpHashContext  const  *src) 
{ 

n pgpAssert(dest->hash  ==  src->hash); 

n memepy  (dest->priv,  src->priv,  s r c -> h a s h-> c o n t ex t _ s i z e ) ; 

} 


/*  Access  to  all  known  hashes  */ 

static  struct  PgpHash  const  * const  hashListC]  = { 
n NULL, 

a SHashMDS, 

a SHashSHA, 

n SHashRIPEMDI 60 

>; 

struct  PgpHash  const  * 

pg p H a s hBy N umbe r (byte  type) 

{ 

a if  (type  < s i z e o f ( h a s h L i s t ) / s i z eo f ( *h a s h L i s t ) ) 

° ° return  hashListCtypeD; 

n return  NULL; 

} 


/* 

* Given  a hash  name,  return  the  corresponding  hash. 

*/ 

struct  PgpHash  const  * 

pg pHa s h By N a me  (char  const  *name,  size_t  nameLen) 

{ 

n unsigned  i; 

n struct  PgpHash  const  *hash; 
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n 

Et 

n 

□ 

Q 

n 

□ 

> 


for  (i  = 0;  i < sizeof(hashList)/sizeof(hashListC0]);  i++)  { 

n hash  = hashListCi]; 

n if  (hash  &&  Imemcmp  (name,  hash->name,  nameLen)  && 

n h a s h->n a me C n a me L e n ] ==  '\0’) 

n n return  hash;n  /*  That's  it.  */ 

> 

return  NULL;n  /*  Not  found  * / 


/* 

* Given  a list  of  hash  identifiers,  create  a List  of  hash  contexts. 

* Ignores  unknown  algorithms.  Returns  the  number  of  Pg pH  a s h C on t e x t s 

* created  and  stored  in  the  "hashes"  buffer,  or  an  Error  (and  none  created) 

* on  error. 

*/ 


i n t 

pgpHashLi stCreate  (byte  const  *buf,  struct  Pg p H a s h C on t e x t **hashes, 
n n uns i gned  L en ) 

{ 

n i n t i ; 

n struct  PgpHash  const  *hash; 

n struct  PgpHashContext  *hashList; 


n if  (Ihashes) 

n n return  PG P E R R_B A D P A R AM ; 

n *hashes  = NULL; 


n if(!Len) 

n n return0; 

n hashlist  = (struct  PgpHashContext  * ) pg pMemA L L o c ( I e n * s i z e o f ( *h a s h L i s t ) ) ; 

a memset  (hashlist,  0,  Len  * sizeof  ( *h a s h L i s t ) ) ; 


n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


i = 0; 
while 
n 
□ 

D 

n 

n 

n 

n 

a 

a 

D 


( L en — ) { 

hash  = pg p H a s h By N umb e r (*buf++); 


i f 

( hash ) { 

B 

if  ( ! 

Idohashinit  (hash,  hashlist+i))  C 

B 

B 

while  (i--) 

B 

B 

n hashWipe  (hashlist+i); 

B 

B 

pgpHemFree  (hashlist); 

B 

B 

return  PGPERR_N0HEM; 

B 

> 

B 

i++; 

> 


} 


n *hashes  = hashlist; 

n returni; 

> 


void 

pgpHashLi stDestroy  (struct  PgpHashContext  *hashes,  unsigned  Len) 
( 

n while  (Len--) 

n n hashWipe  ( h a s h e s+ L e n ) ; 

n pgpHemFree  (hashes); 
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> 

struct  PgpHashContext  * 

pgpHash Li s t F i nd  (struct  PgpHashContext  *hashes,  unsigned  Len, 
° ° struct  PgpHash  const  *h) 

{ 

n while  (ten--)  { 

° ° if  (hashes->hash  ==  h) 

° n n return  hashes; 

“ n hashes++; 

n > 

n return  NULL; 

> 
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/* 

* pgpHash.h  --  An  abstraction  to  various  hash  types 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpHash.h, V 1.3. 2. 2 1997/06/07  09:49:57  mhw  Exp  $ 

*/ 

#ifndef  PGPHASH.H 
#define  PGPHASH.H 

#incLude  <stddef.h> 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi f 

/*  A static  description  of  a hash  */ 


struct 

PgpHash  { 

□ 

char  const  *name; 

n 

byte  type; 

n 

byte  const  *DERprefix;n  /* 

DER-encoded 

prefix 

*/ 

n 

unsigned  DERprefixsize;n/* 

DER-encoded 

prefix 

length 

*/ 

D 

unsigned  hashsize;n  /* 

Bytes  of  output  */ 

n 

unsigned  context.si ze; 

a 

unsigned  c on t ex t .a  1 i g n ; 

u 

void  (*init)  (void  *priv); 

n 

void  (*update)  (void  *priv. 

byte  const 

*buf  , 

s i ze.t 

len); 

n 

\ . 

byte  const  * (*final)  (void 

*p  r i V ) ; 

J / 

#i f ndef 

TYPE. PGPHASH 

#def i ne 

TYPE. PGPHASH  1 

typedef  struct  PgpHash  PgpHash; 

# e nd i f 

/*  A way  to  keep  the  two  together  */ 
struct  Pg pHa s h C on t e X t I 
n struct  PgpHash  const  *hash; 

n void*priv; 

>; 

#ifndef  T YPE.PG P H A S H C ONT E XT 
^define  TYPE.PGPHASHCONTEXT  1 

typedef  struct  PgpHashContext  Pg p H a s h C on t ex t ; 

#end i f 

/*  Macros  to  invoke  on  a struct  HashContext  */ 

#define  pgp H a s h I n i t ( h c ) ( h c ) ->h a s h-> i n i t ( ( h c ) -> p r i v ) 

#define  pg p H a s h U pda t e ( h c , buf,  Len)  ( h c ) ->h a s h->u pd a t e ( C h c ) ->p r i v,  buf,  Len) 
^define  pgpHa s h F i na L ( h c ) ( h c ) ->h a s h-> f i na L ( C h c ) ->p r i v ) 

/*  Allocate,  deallocate,  and  copy  a hash  context  */ 

struct  PgpHashContext  PGPExport  *pg pH  a s h C r ea t e (struct  PgpHash  const  *h); 
void  PGPExport  pg p H a s h D e s t r oy  (struct  PgpHashContext  *hc); 
struct  PgpHashContext  PGPExport  *pg pH  a s h C I on e ( 
n struct  PgpHashContext  const  *hc); 
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void  PGPExport  pgpHashCopy  (struct  PgpHashContext  *dest, 
n n struct  PgpHashContext  const  *src); 

/*  Return  a hash  struction  of  the  appropriate  number  */ 
struct  PgpHash  const  PGPExport  *pgpHashByNumber  (byte  type); 
struct  PgpHash  const  PGPExport  * p g p H a s h By N a me  (char  const  *name, 
n size_t  namelen); 

/*  Create  and  Destroy  a big  bunch  of  hashes  at  once.  */ 
int  PGPExport  pg p H a s h Li s t C r e a t e (byte  const  *buf, 
n struct  PgpHashContext  **hashes,  unsigned  Len); 

void  PGPExport  pg p H a s h L i s t D e s t r oy  (struct  PgpHashContext  *hashes, 
n unsigned  Len); 

/*  Find  the  context  of  a given  type  in  the  List  */ 
struct  PgpHashContext  PGPExport  *pg p H a s h L i s t F i nd  ( 

a struct  PgpHashContext  *hashes,  unsigned  Len,  struct  PgpHash  const  *h); 

#ifdef  __cpLuspLus 
} 

#e  n d i f 

/*  Hash  prefixes  and  Lengths  for  argument  Lists  (preprocessor  eviL)  */ 

#define  PGP_HASH_MD5  1 
#define  PGP_HASH_SHA  2 
#define  PG P_ H A S H _ R I P EH D 1 60n  3 

#endif  /*  PGPHASH  H */ 


CCCHK: 04465866 b4cfbb6ebb9744f0c552c43baa6D 3 


374 


Pretty  Good  Privacy  5.0’^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpMD5.c 


/* 

* pgpMD5 . c 

★ 

* This  code  impLements  the  MD5  message-digest  algorithm. 

* The  algorithm  is  due  to  Ron  Rivest.  This  code  was 

* written  by  Colin  Plumb  in  1993,  no  copyright  is  claimed. 

* This  code  is  in  the  public  domain;  do  with  it  what  you  wish. 

* 

* Equivalent  code  is  available  from  RSA  Data  Security,  Inc. 

* This  code  has  been  tested  against  that,  and  is  equivalent, 

* except  that  you  don't  need  to  include  two  pages  of  legalese 

* with  every  copy. 

* 

* To  compute  the  message  digest  of  a chunk  of  bytes,  declare  an 

* HDSContext  structure,  pass  it  to  HDSInit,  call  MDSUpdate  as 

* needed  on  buffers  full  of  bytes,  and  then  call  MDSFinal,  which 

* will  fill  a supplied  16-byte  array  with  the  digest. 

* 

* $Id:  pgpMD5.c,v  1.1. 2.1  1997/06/07  09:49:58  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#end i f 


^include  <string.h>n  n 


^include 
# i n c I u d e 
//include 


pgpHash.h" 
pgpHDS  . h " 
pgpUsuals.h 


//define  M D 5_BL0 C KB YT E S n 64 
//define  MDS.BLOCKWORDSn  16 


//define  HDS.HASHBYTESn  16 
//define  MD5  HASHWORDSn  4 


/*  for  memcpyC)  */ 


struct  MD5Context  { 

n word32  key C H D 5_B LOC KWO R D S 3 ; 

n word32  i v C M D 5_H AS H WO R D S 3 ; 

//if  HAVE64 

n word64  bytes; 

//else 

n word32  bytesLo,  bytesHi; 

//e n d i f 

>; 

/* 

* Shuffle  the  bytes  into  little-endian  order  within  words,  as  per  the 

* MD5  spec . 

*/ 

static  void 

H D 5 By t e S wa p ( wo r d32  *dest,  byte  const  *src,  unsigned  words) 

{ 


n 

do  { 

n 

n 

*dest++  = ( wo r d32 ) ( ( u n s i g n ed ) s r c C 3 3 <<  8 | 

1 src:23)  « 16 

n 

n 

( ( uns i gned  ) s r c C 1 3 <<  8 | 

1 srcC03); 

n 

Q 

s r c + = 4 ; 
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n } while  (--words); 

> 

/* 

* Start  HD5  accumulation.  Set  bit  count  to  0 and  buffer  to  mysterious 

* initialization  constants. 

*/ 

static  void 
MD5Init(void  *priv) 

{ 

n struct  MDSContext  *ctx  = (struct  HDSContext  *)priv; 


n ctx->i  vC0Il  = 

n ctx->ivC1]= 

n ctx->ivC2!]  = 

n ctx->i vC3]  = 

#if  HAVE64 

n ctx->bytes  = 

# e I s e 

n ctx->bytesHi 

# e n d i f 

> 


0x67452301 ; 
0xefcdab89; 
0x98badcfe; 
0x10325476; 


0; 

= ctx->bytesLo  = 0; 


/*  The 

four  core 

functions  - FI  is 

optimized  somewhat 

/*  #def 

ine  F1(x, 

y , 

z)  (x&y  1 "x 

& z)  */ 

# d e f i n e 

FI  (x. 

y , 

z) 

(z  ^ (x  & (y  * 

z)  )) 

#def i ne 

F2(x, 

y , 

z) 

F1(z,  X,  y) 

#d  e f i n e 

F 3 ( X , 

y f 

z) 

( X A y A z ) 

#def i ne 

F 4 ( X , 

y , 

z) 

(y  * (x  1 "z) ) 

/ * This 

is  the 

central  step  in  the 

riD5  algorithm.  */ 

#d  e f i n e 

MD5STEP(f 

x,y,z,in,s)  \ 

Q 

(w  + = 

f (x,y 

,z)  + in,  w = 

(w<<s  1 w>>(32-s)) 

/* 

* The  core  of  the  MD5  algorithm,  this  alters  an  existing  MD5  hash  to 

* reflect  the  addition  of  16  longwords  of  new  data.  HD5Update  blocks 

* the  data  and  converts  bytes  into  longwords  for  this  routine. 

* 

* NOTE  This  is  not  declared  as  static  because  pgpRndPool.c  references  it. 

* (Sorry  for  that  modularity  violation.) 

*/ 

void  MD5Transf orm(word32  *block,  word32  const  *key); 
void 

MD5Transf orm(word32  *block,  word32  const  *key) 

{ 

n register  word32  a,  b,  c,  d; 


n a=blockC0D; 
n b=blockC1D; 
n c=blockC2D; 
n d=blockC33; 


MD5STEP( FI , 

a. 

b. 

c. 

d. 

ke  y C 0 3 

+ 

0xd76aa478, 

7); 

HD5STEP( FI , 

d. 

a. 

b. 

c. 

keyCI 3 

+ 

0xe8c7b756, 

12); 

MD5STEP( FI , 

c. 

d. 

a. 

b. 

key:23 

+ 

0x242070db, 

17); 
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n 

MDSSTEPC  FI  , 

b. 

c. 

d. 

a. 

keyC3]  + 0xc1bdceee, 

22); 

n 

MDSSTEPC  FI , 

a. 

b. 

c. 

d. 

keyC4D  + 0xfS7c0faf, 

7); 

n 

MD5STEP(F1, 

d. 

a. 

b. 

c. 

keyCS]  + 0x4787c62a, 

12); 

n 

MDSSTEPC FI, 

c. 

d. 

a. 

b. 

keyC6]  + 0xa8304613, 

17); 

n 

MDSSTEPC  FI , 

b. 

c. 

d. 

a. 

keyCT:  + 0xfd469S01, 

22); 

Q 

MDSSTEPC FI, 

a. 

b. 

c. 

d. 

keyC8D  + 0x698098d8, 

7); 

n 

MDSSTEPC  FI , 

d. 

a. 

b. 

c. 

keyC9:  + 0x8b44f7af, 

12); 

□ 

MDSSTEPC  FI , 

c. 

d. 

a. 

b. 

keyC10D  + 0xffffSbb1, 

17); 

n 

MDSSTEPC  FI , 

b. 

c. 

d. 

a. 

keyCIID  + 0x89Scd7be, 

22); 

n 

MDSSTEPC FI, 

a. 

b. 

c. 

d. 

keyC12:  + 0x6b901122, 

7); 

n 

MDSSTEPC FI, 

d. 

a. 

b. 

c. 

keyCIS:  + 0xfd987193, 

12); 

n 

MDSSTEPC FI, 

c. 

d. 

a. 

b. 

keyC14:  + 0xa679438e, 

17); 

□ 

MDSSTEPC  FI  , 

b. 

c. 

d. 

a. 

keyCIS:  + 0x49b40821, 

22); 

□ 

MDSSTEPC  F2, 

a. 

b. 

C/. 

d. 

keyCi:  + 0xf61e2S62, 

5); 

n 

MDSSTEPC F2, 

d. 

a. 

b. 

c. 

keyC6D  + 0xc040b340, 

9); 

□ 

MDSSTEPC F2, 

c. 

d. 

a. 

b. 

keyCIID  + 0x26SeSaS1, 

14); 

n 

MDSSTEPC F2, 

b. 

c. 

d. 

a. 

keyC03  + 0xe9b6c7aa, 

20); 

Q 

MDSSTEPC  F2, 

a. 

b. 

c. 

d. 

keyCS]  + 0xd62f10Sd, 

5); 

n 

MDSSTEPC  F2, 

d. 

a. 

b. 

c. 

keyC10:  + 0X024414S3, 

9); 

n 

MDSSTEPC  F2, 

c. 

d. 

a. 

b. 

keyCIS:  + 0xd8a1e681, 

14); 

n 

MDSSTEPC  F2, 

b. 

c. 

d. 

a. 

keyC4D  + 0xe7d3fbc8, 

20); 

a 

MDSSTEPC  F2, 

a. 

b. 

c. 

d. 

keyC9D  + 0x21e1cde6, 

5); 

n 

MDSSTEPC  F2, 

d. 

a. 

b. 

c. 

key[14:  + 0xc33707d6, 

9); 

n 

MDSSTEPC  F2, 

c. 

d. 

a. 

b. 

key[3:  + 0xf4dS0d87, 

14); 

D 

MDSSTEPC  F2, 

b. 

c. 

d. 

a. 

keyC8D  + 0x4SSa14ed, 

20); 

Q 

MDSSTEPC  F2, 

a. 

b. 

c. 

d. 

keyC13D  + 0xa9e3e90S, 

5); 

a 

MDSSTEPC F2, 

d. 

a. 

b. 

c. 

keyC2D  + 0xfcefa3f8, 

9); 

n 

MDSSTEPC F2, 

c. 

d. 

a. 

b. 

keyC73  + 0x676f02d9, 

14); 

n 

MDSSTEPC  F2, 

b. 

c. 

d. 

a. 

keyC123  + 0x8d2a4c8a, 

20); 

n 

MDSSTEPC F3, 

a. 

b. 

c. 

d. 

keyCS:  + 0xfffa3942, 

4); 

Q 

MDSSTEPC  F3, 

d. 

a. 

b. 

c. 

keyC8:  + 0x8771f681, 

11); 

Q 

MDSSTEPC  F3, 

c. 

d. 

a. 

b. 

keyCIi:  + 0x6d9d6122, 

16); 

n 

MDSSTEPC  F3, 

b. 

c. 

d. 

a. 

keyC14D  + 0xfdeS380c, 

23); 

n 

MDSSTEPC  F3, 

a. 

b. 

c. 

d. 

keyCID  + 0xa4beea44, 

4); 

Q 

MDSSTEPC  F3, 

d. 

a. 

b. 

c. 

keyC4D  + 0x4bdecfa9, 

11); 

n 

MDSSTEPC  F3, 

c. 

d. 

a. 

b. 

keyC7]  + 0xf6bb4b60, 

16); 

Q 

MDSSTEPC F3, 

b. 

c. 

d. 

a. 

keyC10D  + 0xbebfbc70, 

23); 

D 

MDSSTEPC F3, 

a. 

b. 

c. 

d. 

keyC13D  + 0x289b7ec6, 

4); 

n 

MDSSTEPC F3, 

d. 

a. 

b. 

c. 

keyC0D  + 0xeaa127fa, 

11); 

n 

MDSSTEPC  F3, 

c. 

d. 

a. 

b. 

keyC3D  + 0xd4ef308S, 

16); 

n 

MDSSTEPC F3, 

b. 

c. 

d. 

a. 

keyC63  + 0x04881d0S, 

23); 

n 

MDSSTEPC F3, 

a. 

b. 

C/ 

d. 

keyC9D  + 0xd9d4d039, 

4); 

□ 

MDSSTEPC F3, 

d. 

a. 

b. 

c. 

keyC12D  + 0xe6db99eS, 

11); 

D 

MDSSTEPC  F3, 

c. 

d. 

a. 

b. 

keyC1S3  + 0x1fa27cf8, 

16); 

Q 

MDSSTEPC F3, 

b. 

c. 

d. 

a. 

keyC2D  + 0xc4acS66S, 

23); 

Q 

MDSSTEPC  F4, 

a. 

b. 

c. 

d. 

keyC0]  + 0xf4292244, 

6); 

n 

MDSSTEPC  F4, 

d. 

a. 

b. 

c. 

keyC73  + 0x432aff97, 

10); 

n 

MDSSTEPC  F4, 

c. 

d. 

a. 

b. 

key:i4:  + 0xab9423a7, 

IS); 

n 

MDSSTEPC  F4, 

b. 

c. 

d. 

a. 

keyCS:  + 0xfc93a039, 

21); 

n 

MDSSTEPC  F4, 

a. 

b. 

c. 

d. 

key:i2:  + 0x6SSbS9c3, 

6); 

n 

MDSSTEPC  F4, 

d. 

a. 

b. 

c. 

keyC3]  + 0x8f0ccc92, 

10); 

D 

MDSSTEPC  F4, 

c. 

d. 

a. 

b. 

keyC10D  + 0xffeff47d, 

15); 

□ 

MDSSTEPC  F4, 

b. 

c. 

d. 

a. 

keyCi:  + 0x8S84Sdd1, 

21); 

n 

MDSSTEPC  F4, 

a. 

b. 

c. 

d. 

keyC8D  + 0x6fa87e4f, 

6); 

□ 

MDSSTEPC F4, 

d. 

a. 

b. 

c. 

keyCISD  + 0xfe2ce6e0, 

10); 
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n 

MD5STEP( F4, 

c. 

d. 

a. 

b. 

key[I6D  + 

0xa301 431 4, 

15); 

n 

MD5STEP( F4, 

b. 

C, 

d. 

a. 

keyCI 3: 

+ 0x4e0811a1 

, 21); 

a 

MD5STEP( F4, 

a. 

b. 

c. 

d. 

key  C 4 ] + 

0xf 7537e82, 

6); 

a 

MD5STEP(F4, 

d. 

a. 

b. 

c. 

keyCI 1 ] 

+ 0xbd3af235 

, 10); 

a 

MD5STEP( F4, 

c. 

d. 

a. 

b. 

keyC2:  + 

0x2ad7d2bb, 

15); 

a 

MD5STEP( F4, 

b. 

c. 

d. 

a. 

keyi:9D  + 

0xeb86d391 , 

21  ); 

a 

bLockC03  += 

a; 

a 

bLockCI]  += 

b; 

a 

bLock[!2D  + = 

c; 

a 

bLock[3:  += 

d; 

> 


/* 

* Update  context  to  reflect  the  concatenation  of  another  buffer  full 

* of  bytes. 

*/ 

static  void 

M D 5 U pd a t e ( VO i d *priv,  byte  const  *buf,  size_t  Len) 

{ 


n struct  MDSContext  *ctx  = (struct  MDSContext  *)priv; 

n unsigned  i; 


#if  HAVE64 

i = ( u n s i g n e d ) c t x->by t e s % M D 5 _B LO C KB YT E S ; 
ctx->bytes  +=  Len; 


n 

n 

# e L s e 
n 
n 
D 

n 

#end  i f 


word32  t = ctx->bytesLo; 

if  ( ( c t x->by t e s Lo  = t + Len)  < t) 

n c t x->by t e s H i ++;  n /*  Carry  from  Low  to  high  */ 

i = (unsigned)t  % M D 5_B LO C KB YT E S ; n 


/*  Bytes  already  in  ctx->key  */ 


a 

i f 

a 

a 

a 

a 

a 

> 

a 

i f 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

> 

a 

/* 

a 

w h 

a 

a 

a 

a 

a 

a 

a 

a 

a 

> 

a 

/* 

a 

i f 

a 

a 

(MD5_BL0CKBYTES-i  > Len)  { 

mem c py ( ( by t e *)ctx->key  + i,  buf,  Len); 
return; 


(i)  {n  /*  First  chunk  is  an  odd  size  */ 

memcpyCCbyte  *)ctx->key  + i,  buf,  M D 5 _B LO C KB YT E S - i); 
HDSByteSwapC ctx->key,  (byte  *)ctx->key,  M D 5_B LO C KWO R D S ) ; 
M D 5 T r a n s f o r m ( c t x-> i V , ctx->key); 
buf  +=  MD5_BL0CKBYTES-i ; 

Len  -=  MD5_BL0CKBYTES-i ; 


M D 5 By t e S wa p ( c t x-> key , buf,  H D 5 _B LO C KWO R D S ) ; 
MD5Transform(ctx->iv,  ctx->key); 
buf  +=  HD5_BL0CKBYTES; 

Len  -=  MD5_BL0CKBYTES; 


memcpy ( ctx->key,  buf,  Len); 
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/* 

* Final  urapup  - pad  to  64-byte  boundary  with  the  bit  pattern 

* 1 0*  (64-bit  count  of  bits  processed,  LSB-first) 


static  byte  const  * 

HD5 F i na L ( voi d *priv) 

n struct  MDSContext  *ctx  = (struct  HDSContext  *)priv; 

n byte  *digest; 

#if  HAVE64 

n unsigned  i = ( un s i g ne d ) c t x ->by t e s % M D 5_B LO C KB YT E S ; 

# e L s e 

unsigned  i = (unsigned)ctx->bytesLo  ’/.  MD5_BL0CKBYTES; 


n 

#e nd i f 
n 


byte  *p  = (byte  *)ctx->key  + i;n/*  First  unused  byte  */ 
uord32  t; 


o /*  Set  the  first  char  of  padding  to  0x80.  There  is  always  room.  */ 

n *p++  = 0x80; 


/*  Bytes  of  padding  needed  to  make  64  bytes  (0..63)  */ 
i = MD5_BL0CKBYTES  - 1 - i ; 


if  (i  < 8)  {n  /*  Padding  forces  an  extra  block  */ 
n memset ( p,  0,  i ) ; 

n MD5ByteSwap(ctx->key,  (byte  *)ctx->key,  16); 

n H D 5T r a n s f o rm ( c t x-> i V,  ctx->key); 

n p = (byte  *)ctx->key; 

n i = 64; 

> 

memset(p,  0,  i-8); 

MD5ByteSwap(ctx->key,  (byte  *)ctx->key,  14); 


/*  Append  length  in  bits  and  transform  */ 


#if  HAVE64 


n 

n 

#e  I se 

n 

n 

#e nd i f 
□ 


ctx->keyC14D  = ( wo r d 32 ) c t x->by t e s <<  3; 
ctx->keyC153  = ( wo r d32 ) ( c t x->by t e s >>  29); 

ctx->keyC14]  = ctx->bytesLo  « 3; 

ctx->keyC15D  = ctx->bytesHi  « 3 | ctx->bytesLo  >>  29; 
HDSTransf orm( ctx->i V,  ctx->key); 

/*  Convert  digest  to  the  correct  byte  order  */ 


n 

digest 

= (byte  *)ctx->iv; 

Q 

for  ( i 

= 0;  i < HD5_HASHW0RDS 

i ++) 

Q 

n 

t = ctx->ivCi!]; 

n 

D 

digestC0) 

= (byte)t; 

a 

n 

digestCI] 

= (byte)(t 

>> 

8); 

a 

n 

digestC2] 

= (byte)(t 

>> 

16); 

n 

n 

digestC3!] 

= (byte)(t 

>> 

24); 

n 

n 

digest  += 

4; 

n 

} 

n 

/*  In 

case  it's  sensitive  */ 

/*  XXXn  memset(ctx->key,  0,  sizeof(ctx->key));  */ 
n return  (byte  const  *)ctx->iv; 

} 


CCCHK: 72d3804df f 43986eed55df f 6bcb577699874301  05f f a8ca485851  1 90dd5ae29f03: 


Pretty  Good  Privacy  5.0^"  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


379 


pgpMD5.c 


* The 

* are 
*/ 

static 


Basic  Encoding  Rules  (of  which  the  Distinguished  Encoding  Rules 
a simple  m i n i ma I - s i z ed  subset)  are  supposed  to  be  compact.  Humph. 

byte  const  M D 5 D E Rp r e f i x C 3 = ( 


n 

0x30, 

/*  Universal,  Constructed,  Sequence  */ 

n 

0x20, 

/*  Length  32  (bytes  following)  */ 

a 

□ 

0x30, 

/*  Universal,  Constructed,  Sequence  * 

/ 

B 

n 

0x0  c , 

/*  Length  12  */ 

B 

□ 

n 

0x06, 

/*  Universal,  Primitive,  ob j e c t - i d e n t i 

B 

n 

n 

0x08, 

/*  Length  8 */ 

B 

n 

n 

n 

0x2a,  /*  42  = ISO(1)*40  + Member  bod 

B 

B 

a 

n 

0x86,  0x48,  /*  840  = US  (ANSI)  */ 

B 

B 

n 

a 

0x86,  0xF7,  0X0D,  /*  113549 

= RSADSI 

B 

B 

n 

B 

0x02,  /*  2 = Hash  functions 

*/ 

□ 

B 

n 

n 

0x05,  /*  5 = MD5  */ 

a 

B 

n 

0x05, 

/*  Universal,  Primitive,  NULL 

*/ 

□ 

□ 

n 

0x00, 

/*  Length  0 */ 

n 

n 

0x04, 

/*  Universal,  Primitive,  Octet  string 

*/ 

n 

B 

0x10 

/*  Length 

16  */ 

n 

}; 

B 

n 

/*  16 

HD5  digest  bytes  go  here  */ 

struct 

PgpHash 

const 

HashMDS  = 

{ 

*/ 


"HD5",  PGP_HASH_MD5, 

MD50ERprefix,  sizeof(MD5DERprefix), 

MD5_HASHBYTES, 

s i z e o f ( s t r u c t MDSContext), 

s i z e o f ( s t r u c t { c h a r _a;  struct  MDSContext  _b;})  - 
n s i z e of ( s t r u c t MDSContext), 

MDSInit,  HDSUpdate,  HDSFinal 


#if  TESTMAIN 


^include  <stdio.h> 
#include  <string.h> 
#i nc lude  <t i me  . h> 


#define  TEST_BYTES  10000000 


static  char  const  * const  md  STe  s t Re  s u 1 1 s C !]  = { 
n "0cc175b9c0f1b6a831 c 399 e 2 69772 661  ", 

n "900150983cd24fb0d6963f7d28e17f72", 

n "7707d6ae4e027c70eea2a935c2296f21", 

a "7707d6ae4e027c70eea2a935c2296f21", 

n "7707d6ae4e027c70eea2a935c2296f21" 

>; 


static  int 

compa r eHDS r e su I t s ( by t e const  *hash,  int  level) 

{ 

n char  bufC33D; 

n unsigned  i; 

n for  (i  = 0;  i < M D 5 _H A S H S I Z E ; i++) 

n a sprintf(buf+2*i,  "%02x",  hashCiU); 
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n 

n 

□ 

n 

n 

n 

n 

n 

D 

} 


if  ( s t r cmp ( bu f , md 5 T e s t R e s u L t s C I e ve L -1 D ) ==  0)  { 
n printfC'Test  %d  passed,  result  = %s\n".  Level,  buf); 

n returnO; 

> else  { 

n printfl" Error  in  MD5  implementation;  test  %d  failedXn", 

n printfl"  Result  = %s\nExpected  = %s\n",  buf, 

n n md5TestResuLtsCLeveL-1!]); 

a return-1; 

> 


Level); 


i n t 

main(void) 

{ 


n c L oc  k_t  ticks; 

n struct  MDSContext  md5; 

n byte  h a s h C H D 5_ H A S H S I Z E D ; 

n byte  dataC1999D; 

a unsigned  i; 


n HD5Init(&md5); 

n M D 5 U pd a t e ( &md 5 , "a",  1); 

n MD5FinaL(Smd5,  hash); 

n if  ( c ompa r eH D 5 r e s u L t s ( ha s h , 1)  < 0) 

n n return-1; 


n HD5Init(&md5); 

n HD5L)pdate(&md5,  "abc",  3); 

Q nD5 Fi na I ( Smd5,  hash); 

n if  ( compa r eH D 5 r e s u I t s ( h a s h , 2)  < 0) 

a n return  -1; 

n /*  1,000,000  bytes  of  ASCII  'a',  by  64s  */ 

n HD5Init(&md5); 

n for  (i  = 0;  i < 15625;  i++)  { 

n n n D 5 U pda t e ( &md 5 , (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a \ 

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  64); 
n } 

n HD5 F i na I ( &md5,  hash); 

n if  ( c ompa r eH D 5 r e s u L t s C h a s h , 3)  < 0) 

n n return-1; 


n /*  1,000,000  bytes  of  ASCII  'a',  by  25s  */ 

n HD5Init(&md5); 

n for  (i  = 0;  i < 40000;  i++) 

n a HD5Update(&md5,  (byte  *)"aaaaaaaaaaaaaaaaaaaaaaaaa",  25); 

n H D 5 F i n a L ( &md 5 , hash); 

n if  ( c ompa r eH D 5 r e s u L t s ( h a s h , 4)  < 0) 

n n return-1; 


a /*  1,000,000  bytes  of  ASCII  'a',  by  125s  */ 

n HD5Ini t (Smd5  ) ; 

n for  (i  = 0;  i < 8000;  i++) 

Q n H D 5 U pd a t e ( &md 5 , (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a \ 

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ 
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  125); 
n HD5Final(8md5,  hash); 

n if  ( c ompa r e H D 5 r e s u L t s ( h a s h , 5)  < 0) 
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n n return-1; 

n mems e t ( da t a , 0,  s i z e of ( d a t a ) ) ; 

n ticks  = cLockC); 

n MD5Init(&md5); 

n for  (i  = 0;  i < T E ST_B YT E S / s i z e o f ( da t a ) ; i++) 

n n M D 5 U pd a t e C Smd 5 , data,  s i z eo f ( d a t a ) ) ; 

n MD5Update(&md5,  data,TEST_BYTES  X sizeof(data)); 

n 

n HD5FinaL(&md5,  hash); 

n ticks  = cLockC)  - ticks; 

n printfC" Elapsed  time  for  %Lu  characters:  %Lu  ticksXn", 

n n (unsigned  L o ng ) T E ST_B YT E S , (unsigned  Long)ticks); 

n return0; 

} 

#endif  /*  TESTMAIN  */ 
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/* 

* pgpMD5.h  --  The  HD-5  Message  Digest. 

★ 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpHD5.h,v  1.2  1996/12/19  20:26:35  mhu  Exp  $ 

*/ 

#ifndef  PGPHD5_H 
^define  PGPMD5_H 

#include  "pgpHash.h" 

#ifdef  __cplusplus 
extern  "C"  { 

#endi f 

extern  struct  PgpHash  const  HashHD5; 

#ifdef  __cplusplus 

> 

#e  nd i f 

#endif  /*  !PGPMD5  H */ 
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/* 

* pg p R I P E H D 1 6 0 . c - European  RIPE  Message  Digest,  160  bit  (RIPEHD-160) 

★ 

* The  algorithm  is  by  Hans  Dobbertin,  Antoon  Bosselaers,  and  Bart  PreneeL. 

•k 

* The  code  below  is  based  on  the  reference  implementation  by  Bosselaers. 

* It  is  available  at  the  time  of  writing  from 

* http://www.esat.kuleuven.ac.be/~bosselae/ripemd160.html 

* 

* $Id:  pgpRIPEHDI 60 . c,v  1.1. 2. 3 1997/05/22  22:53:50  hal  Exp  $ 

*/ 


«ifdef  HAVE_C0NFI6_H 
//include  "config.h" 
#end  i f 


#include  <string.h> 

//include  "pgpHash.h" 

//include  "pgpRIPEMD160.h" 

#include  " pg p U s ua I s . h " 

#define  R I P EH D 1 60_B LO C KB YT E S n 64 
#define  R I P EM D 1 60_B LO C KWO R D S n 16 

//define  R I P EM  D 1 60_  H A S H B YT  E S n2  0 
//define  RIPEMD1  60_HASHWORDSn5 

struct  R I P EM D 1 60 C on t e X t { 
n word32  key C R I P E M D 1 60_B LO C KWO R D S ] ; 
n word32  iv:RIPEMDl60_HASHWORDSD; 

n word32  bytesHi,  bytesLo; 

>; 


/*  Define  types  used  in  the  reference  code  based  on  PGP  library  types  */ 

/*  typedef  bytenn  byte;n  n C*  unsigned  8-bit  integer  *D  */ 

typedef  word16n  n word;n  n /*  unsigned  16-bit  integer  */ 

typedef  word32n  n dword;n  n /*  unsigned  32-bit  integer  */ 

/*★***********★***★**★★**  File  rmd160.h  **********************/ 

/*  Extracted  from  rmd160.h  in  the  reference  implementation  */ 

/*  macro  definitions  */ 


/*  ROLCx 

, n) 

cy  c 1 i 

cally  rotates 

X over  n bits  to 

the  left 

*/ 

/*  X must  be 

0 f 

a n 

unsigned  32 

bits  type  and  0 <= 

n < 32. 

*/ 

#def i ne 

ROLC 

X, 

n ) 

( ( (x) 

« (n))  1 ((x)  » 

{32-(n) ) ) ) 

/*  the  three 

basic 

functions  F(),  G()  and  H()  */ 

#d  e f i n e 

F ( X , 

y , 

z) 

C Cx) 

> 

> 

N 

//define 

G ( X, 

y , 

z) 

( ( (x) 

& (y))  1 (~(x)  S 

(z)  ) ) 

//define 

H ( X , 

y , 

z) 

( ( (x) 

1 ~(y))  ^ (z)) 

//define 

I ( X , 

y , 

z) 

( ( (x) 

& (z))  1 (Cy)  S ~ 

(z)  ) ) 

//define 

J ( X, 

y , 

z) 

( (x) 

^ C(y)  1 ~(z))) 
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/*  the  eight  basic  operations  FF()  through  III()  */ 

^define  FF(a,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  F((b),  (c),  (d))  + Cx);\ 

(a)  = ROLC(a),  (s))  + (e);\ 

(c)  = ROLCCc),  10);\ 

} 

//define  GG(a,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  GCCb),  (c),  (d))  + (x)  + 0 x 5 a 82 7999 U L; \ 
(a)  = ROLCCa),  (s))  + (e);\ 

(c)  = R0L( Cc),  10);\ 

> 

//define  HHCa,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  H((b),  (c),  (d))  + (x)  + 0x 6 e d 9 e ba 1 U L; \ 
(a)  = R0L((a),  (s))  + (e);\ 

(c)  = ROLCCc),  10) ;\ 

> 

#define  IlCa,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  I((b),  (c),  (d))  + (x)  + 0x8f 1 bbcdcUL; \ 

(a)  = R0L((a),  (s))  + (e);\ 

(c)  = ROLCCc),  10) ;\ 

} 

//define  JJ(a,  b,  c,  d , e,  x,  s)  {\ 

(a)  +=  J((b),  (c),  (d))  + (x)  + 0xa953f d4eUL; \ 
(a)  = R0L((a),  (s))  + ( e ) ; \ 

(c)  = ROLC (c),  10);\ 

> 

#define  FFFCa,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  F(Cb),  (c),  (d))  + (x);\ 

(a)  = ROLCCa),  (s))  + ( e ) ; \ 

(c)  = ROL( (c),  10);\ 

} 

#define  GGGCa,  b,  c,  d,  e,  x,  s)  {\ 

(a)  +=  G((b),  (c),  (d))  + (x)  + 0x 7a 6d 76 e9U L ; \ 
(a)  = ROLCCa),  Cs))  + Ce);\ 

Cc)  = ROLCCc),  10), -X 

> 

//define  HHHCa,  b,  c,  d,  e,  x,  s)  i\ 

Ca)  +=  HCCb),  Cc),  Cd))  + Cx)  + 0 x 6d703e f 3U L; \ 
Ca)  = ROLCCa),  Cs))  + C e ) ; \ 

Cc)  = ROLCCc),  10), -X 

} 

//define  IlICa,  b,  c,  d,  e,  x,  s)  fX 

Ca)  +=  ICCb),  Cc),  Cd))  + Cx)  + 0x 5 c 4dd 1 2 4U L; X 
Ca)  = ROLCCa),  Cs))  + Ce);X 

Cc)  = ROLCCc),  10);X 

} 

#define  JJJCa,  b,  c,  d,  e,  x,  s)  fX 

Ca)  +=  JCCb),  Cc),  Cd))  + Cx)  + 0x 5 0a 2 8 b e6U L; X 
Ca)  = ROLCCa),  Cs))  + Ce);X 

Cc)  = ROLCCc),  10);X 

} 


File  rnd160.c 

/*  Extracted  from  rmd160.c  in  the  reference  implementation  */ 
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/* 


* initializes  MDbuffer  to  "magic 


*/ 


static  void  RMDi ni t (dword  *HDbuf) 


HDbufCOIl 

MDbufC13 

MDbufCZ] 

MDbufC3II 

MDbufC4D 


0x67452301 UL; 
0xefcdab89UL; 
0x98badc'feUL; 
0x1 0325476UL; 
0xc3d2e1 f0UL; 


constants 


return; 

> 


* the  compression  function. 

* transforms  MDbuf  using  message  bytes  XC0D  through  XC153 
*/ 

static  void  RH D c omp r e s s ( d wo r d *MDbuf,  dword  *X) 

{ 


dword 

aa  = 

MDbufCOIl 

f 

bb 

= MDbufCI],  cc  = HDbufCZ], 

dd  = 

HDbufC3] 

e e 

= MDbufC4]; 

dwo  rd 

a a a 

= MDbufC0D, 

bbb 

= MDbufCI],  ccc  = MDbufCZ], 

ddd 

= MDbufC3D, 

eee 

= HDbufC4]; 

/*  round  1 

*/ 

FFCaa, 

bb. 

c c , 

dd. 

ee. 

X[ 

0], 

11); 

F F ( e e , 

a a , 

bb. 

c c , 

dd. 

x: 

1], 

14); 

FFCdd, 

ee. 

a a , 

bb. 

c c , 

x: 

2], 

15); 

FF(cc, 

dd. 

ee. 

a a , 

bb. 

x: 

3:, 

12); 

FF(bb, 

c c , 

dd. 

ee. 

aa  , 

x: 

4], 

5); 

FFCaa, 

bb. 

c c , 

d d , 

ee. 

x: 

5], 

8); 

FFCee, 

a a , 

b b , 

c c , 

dd. 

xc 

6], 

7); 

FFCdd, 

ee. 

aa. 

bb. 

c c , 

xt 

7], 

9); 

F F ( cc. 

dd. 

ee. 

a a , 

bb. 

xc 

00 

s 

11); 

FFCbb, 

c c , 

dd. 

ee. 

a a , 

xc 

9], 

13); 

FFCaa, 

bb. 

c c , 

dd. 

ee. 

XC10:, 

14); 

FFCee, 

a a , 

bb. 

c c , 

dd. 

XC1 1 ], 

15); 

FFCdd, 

ee. 

aa  , 

bb. 

c c , 

XC1 2:, 

6); 

FFCcc, 

dd. 

ee. 

a a , 

bb. 

XC13:, 

7); 

FFCbb, 

c c , 

dd. 

ee. 

aa  , 

XC14:, 

9); 

FFCaa, 

bb. 

c c , 

dd. 

ee. 

XC1 5:, 

8); 

/*  round  2 

*/ 

GGCee, 

a a , 

bb. 

c c , 

dd. 

xc 

7], 

7); 

GGCdd, 

ee. 

a a , 

bb. 

c c , 

xc 

4], 

6); 

GG  C c c , 

dd. 

ee. 

a a , 

bb. 

XC13], 

8); 

GGCbb, 

c c , 

dd. 

ee. 

a a , 

xc 

1], 

13); 

GG  C a a , 

bb. 

c c , 

dd. 

ee. 

XC1 0:, 

11); 

GGCee, 

a a , 

bb. 

c c , 

dd. 

xc 

6], 

9); 

GGCdd, 

ee. 

aa. 

bb. 

c c , 

XC1 5:, 

7); 

GG  C c c , 

dd. 

ee. 

aa. 

bb. 

xc 

3:, 

15); 

GGCbb, 

c c , 

dd. 

ee. 

aa. 

XC1 2:, 

7); 

GG  C a a , 

bb. 

c c , 

dd. 

ee. 

xc 

0], 

12); 

GGCee, 

aa. 

bb  , 

c c , 

dd. 

xc 

93, 

15); 

GGCdd, 

ee. 

a a , 

bb. 

c c , 

xc 

53, 

9); 

G G C c c , 

dd. 

ee. 

a a , 

bb. 

xc 

23, 

11); 
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GGCbb, 

c c , 

dd. 

ee. 

a a , 

xni4]. 

7); 

GG ( a a , 

bb^ 

c c , 

dd. 

ee. 

xm  1 :, 

13); 

GG ( ee. 

a a ^ 

bb. 

c c , 

dd. 

XC  83, 

12); 

/*  round  3 

*/ 

HHCdd, 

ee. 

aa  , 

bb. 

c c , 

XC  33, 

11); 

HHCcc, 

dd. 

ee. 

a a , 

bb. 

xm  0], 

13); 

HH ( bb. 

c c , 

dd. 

ee. 

a a , 

xm4]. 

6); 

HHCaa, 

bb. 

c c , 

dd. 

ee. 

XC  4], 

7); 

HH (ee. 

a a , 

bb. 

c c , 

dd. 

XC  93, 

14); 

HHCdd, 

ee. 

aa  , 

bb. 

c c , 

XC1 53, 

9); 

HHCcc, 

dd. 

ee. 

aa. 

bb. 

XC  83, 

13); 

HH  C bb. 

c c , 

dd. 

ee. 

a a , 

XC  13, 

15); 

HHCaa, 

bb. 

c c , 

dd. 

ee. 

XC  23, 

14); 

HH  Cee, 

aa. 

bb. 

c c , 

dd. 

XC  73, 

8); 

HHCdd, 

ee. 

a a , 

bb. 

c c , 

XC  03, 

13); 

HHCcc, 

dd. 

ee. 

a a , 

bb. 

XC  63, 

6); 

HH  C bb. 

c c , 

dd. 

ee. 

aa. 

XC133, 

5); 

HHCaa, 

bb. 

c c , 

dd. 

ee. 

XC11 3, 

12); 

HHCee, 

a a , 

bb. 

c c , 

dd. 

XC  53, 

7); 

HHCdd, 

ee. 

aa  , 

bb. 

c c , 

xm  23, 

5); 

/*  round  4 

*/ 

II C cc. 

dd. 

ee. 

aa. 

bb. 

XC  13, 

11); 

IlCbb, 

cc. 

dd. 

ee. 

aa. 

XC  93, 

12); 

1 1 C a a , 

bb. 

c c , 

dd. 

ee. 

xm  1 3, 

14); 

II  Cee, 

aa. 

bb. 

c c , 

dd. 

XC103, 

15); 

IlCdd, 

ee. 

a a , 

bb. 

cc. 

XC  03, 

14); 

IICcc, 

dd. 

ee. 

a a , 

bb. 

XC  83, 

15); 

IlCbb, 

c c , 

dd  , 

ee. 

aa. 

xm  23, 

9); 

1 1 C a a , 

bb. 

c c , 

dd. 

ee. 

XC  43, 

8); 

IlCee, 

aa. 

bb. 

c c , 

dd. 

XC133, 

9); 

II Cdd, 

ee. 

a a , 

bb. 

cc. 

XC  33, 

14); 

IICcc, 

dd. 

ee. 

a a , 

bb. 

XC  73, 

5); 

IlCbb, 

c c , 

dd. 

ee. 

aa. 

xm  53, 

6); 

1 1 C a a , 

bb. 

c c , 

dd. 

ee. 

XC143, 

8); 

IlCee, 

aa. 

bb. 

c c , 

dd. 

XC  53, 

6); 

IlCdd, 

ee. 

aa. 

bb. 

cc. 

XC  63, 

5); 

IICcc, 

dd. 

ee. 

a a , 

bb. 

XC  23, 

12); 

/*  round  5 

*/ 

J J C bb. 

c c , 

dd. 

ee. 

a a , 

XC  43, 

9); 

J J C aa , 

bb. 

c c , 

dd. 

ee. 

XC  03, 

15); 

J J C e e , 

aa. 

bb. 

c c , 

dd. 

XC  53, 

5); 

J J Cdd, 

ee. 

a a , 

bb. 

c c , 

XC  93, 

11); 

J J C c c , 

dd  , 

ee. 

aa. 

bb. 

XC  73, 

6); 

J J Cbb, 

cc. 

dd. 

ee. 

aa  , 

xm  23, 

8); 

J J C a a , 

bb. 

c c , 

dd. 

ee. 

XC  23, 

13); 

J J C e e , 

aa. 

bb. 

c c , 

dd. 

xm  03, 

12); 

J J Cdd, 

ee. 

a a , 

bb. 

c c , 

xm  43, 

5); 

J J C c c , 

dd. 

ee. 

a a , 

bb. 

XC  13, 

12); 

J J Cbb, 

c c , 

dd. 

ee. 

a a , 

XC  33, 

13); 

J J C aa , 

bb. 

c c , 

dd. 

ee. 

XC  83, 

14); 

J J C e e , 

a a , 

bb. 

cc. 

dd. 

xm  1 3, 

11); 

J J Cdd, 

ee. 

aa  , 

bb. 

c c , 

XC  63, 

8); 

J J C c c , 

dd. 

ee. 

a a , 

bb. 

xm  53, 

5); 

J J C bb. 

c c , 

dd. 

ee. 

a a , 

xm  33, 

6); 
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/*  paraLLeL  round  1 */ 


JJJCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

x:  51, 

00 

> t 

JJJCeee, 

a a a , 

bbb. 

c c c , 

ddd. 

XC1 4:, 

9); 

JJJCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC  71, 

9); 

JJJCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  01, 

11); 

J J J ( bbb. 

c c c , 

ddd. 

eee. 

aaa. 

x:  91, 

13); 

JJJCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  21, 

15); 

JJJCeee, 

a a a , 

bbb. 

c c c , 

ddd. 

XC1 1 ], 

15); 

J J J ( ddd. 

eee. 

aaa. 

bbb. 

c c c , 

XC  4], 

5); 

JJJCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC1 3J, 

7); 

J J J Cbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC  6], 

7); 

JJJCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC1 s:. 

8); 

JJJCeee, 

aaa. 

bbb. 

c c c , 

ddd. 

X 

n 

00 

LJ 

s 

11); 

JJJCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC  M, 

14); 

JJJCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC1 03, 

14); 

J J J C bbb. 

c c c , 

ddd. 

eee. 

aaa. 

XC  33, 

12); 

JJJCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC1 23, 

6); 

/*  parallel  round 

2 */ 

III Ceee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  63, 

9); 

III Cddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC1 1 3, 

13); 

IIiCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  33, 

15); 

IlICbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC  73, 

7); 

IllCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  03, 

12); 

1 1 1 C eee. 

aaa. 

bbb. 

c c c , 

ddd. 

XC1 33, 

8); 

IllCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC  53, 

9); 

IIiCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC103, 

11); 

IlICbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC1 43, 

7); 

IllCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC1 53, 

7); 

IllCeee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  83, 

12); 

IllCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC1 23, 

7); 

IIiCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  43, 

6); 

IlICbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC  93, 

15); 

IllCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  13, 

13); 

III Ceee, 

aaa. 

bbb. 

c c c. 

ddd. 

XC  23, 

11); 

/*  parallel  round 

3 */ 

HHH  Cddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC1 53, 

9); 

HHHCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  53, 

7); 

HHH  C bbb. 

c c c , 

ddd. 

eee. 

aaa. 

XC  13, 

15); 

HHHCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  33, 

11); 

HHHCeee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  73, 

8); 

HHHCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC1 43, 

6); 

HHHCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  63, 

6); 

HHH  C bbb. 

c c c , 

ddd. 

eee. 

aaa. 

XC  93, 

14); 

HHHCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC1 1 3, 

12); 

HHHCeee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  83, 

13); 

HHHCddd, 

eee. 

aaa. 

bbb. 

c c c , 

XC1 23, 

5); 

HHHCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  23, 

14); 

HHHCbbb, 

c c c , 

ddd. 

eee  , 

aaa. 

XC1 03, 

13); 

HHHCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  03, 

13); 

HHHCeee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  43, 

7); 

HHHCddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC1 33, 

5); 

/*  parallel  round 

4 */ 

GGGCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  83, 

15); 

GGGCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC  63, 

5); 

GGG  Caaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  43, 

8); 
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GGG ( eee. 

aas  , 

bbb. 

c c c , 

ddd. 

x:  13, 

11); 

GGGCddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC  33, 

14); 

GGGCccc, 

ddd. 

eee. 

aaa. 

bbb. 

x:i 1 3, 

14); 

GGGCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

xm  53, 

6); 

GGGlaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  03, 

14); 

GGG ( eee. 

aaa. 

bbb. 

c c c , 

ddd. 

XC  53, 

6); 

GGGCddd, 

eee. 

aaa. 

bbb. 

ccc. 

x:i 23, 

9); 

GGGCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  23, 

12); 

GGGCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC133, 

9); 

GGGlaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  93, 

12); 

GGGleee, 

aaa. 

bbb. 

c c c , 

ddd. 

XC  73, 

5); 

GGGCddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC1 03, 

15); 

GGGCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC1 43, 

8); 

/*  parallel  round 

5 */ 

F F F ( bbb. 

c c c , 

ddd. 

eee. 

aaa. 

XC123  , 

8); 

FFFCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC153  , 

5); 

FFFCeee, 

aaa. 

bbb. 

ccc. 

ddd. 

XC103  , 

12); 

FFFCddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC  43  , 

9); 

FFFCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  1 3 , 

12); 

FFFCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC  53  , 

5); 

FFFCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC  83  , 

14); 

FFFCeee, 

aaa. 

bbb. 

ccc. 

ddd. 

XC  73  , 

6); 

FFFCddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC  63  , 

8); 

FFFCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  23  , 

13); 

FFFCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC133  , 

6); 

FFFCaaa, 

bbb. 

c c c , 

ddd. 

eee. 

XC143  , 

5); 

FFFleee, 

aaa. 

bbb. 

ccc. 

ddd. 

n 

LJ 

X 

15); 

FFFlddd, 

eee. 

aaa. 

bbb. 

ccc. 

XC  33  , 

13); 

FFFCccc, 

ddd. 

eee. 

aaa. 

bbb. 

XC  93  , 

11); 

FFFCbbb, 

c c c , 

ddd. 

eee. 

aaa. 

XC113  , 

11); 

/*  combine  results  */ 

ddd  +=  cc  + MDbufCID;  /*  final  result  for  MDbufC0D  */ 


MDbufC13 

= MDbufC23 

+ 

dd 

+ 

eee; 

MDbufC23 

= MDbufC33 

+ 

ee 

+ 

aaa; 

MDbufC33 

= MDbufC43 

+ 

a a 

+ 

bbb; 

MDbufC43 

= MDbufC03 

+ 

bb 

+ 

c c c ; 

HDbuf C03 

= ddd; 

return; 

> 


appends  length 

msu  I en  ) . 
in  strptr. 


/* 

* 

puts  bytes  from 

strptr 

* 

and  finally,  compresses 

* 

note:  length  in 

bits  == 

* 

note:  there  are 

(Iswlen 

*/ 

static  void  RHDf i n i s h ( d wo r d 

dword  i ; 

dword  XC1 63; 


into  X and  pad  out; 
the  last  blockCs) 

8 * (Iswlen  + 2*32 
mod  64)  bytes  left 

*MDbuf,  byte  *strptr. 


dword  Iswlen,  dword  mswlen) 

/*  counter  */ 

/*  message  words  */ 


memsetCX,  0,  16*sizeof(dword)); 


/*  put  bytes  from  strptr  into  X */ 
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for  (i=0;  i < ( L sw L en&63 ) ; i++)  { 

/*  byte  i goes  into  word  XCi  div  4]  at  pos.  8*(i  mod  4)  */ 

XCi>>23  Cdword)  *strptr  + + <<  (8  * Ci&3)); 

} 

/*  append  the  bit  m_n  ==  1 */ 

X C C L s w I e n>> 2 ) & 1 5 3 *=  (dword)l  <<  ( 8* ( L s u I e n&3 ) + 7); 

if  ( ( Lswlen  S 63)  > 55 ) { 

/*  Length  goes  to  next  block  */ 

RH D c omp r e s s ( M Dbu f , X); 
memset(X,  0,  16*sizeof(duord)); 

> 

/*  append  Length  in  bits*/ 

XC14D  = LswLen  <<  3; 

XC15I1  = (Lswlen  >>  29)  | (mswLen  <<  3); 

RHDcompressCMDbuf,  X); 

return; 

} 

/★***★*** *************** * end  of  file  rind160.c  **********************/ 

/*  Remainder  provides  common  interface  used  by  PGP  Library  */ 


/* 

* Shuffle  the  bytes  into  L i t t L e-en d i a n order  within  words,  as  per  the 

* RIPEMD-160  spec  (which  follows  MD4  conventions). 

*/ 

static  void 

r md 1 60By t e S wa p ( wo r d32  *dest,  byte  const  *src,  unsigned  words) 

{ 

a do  { 

n n *dest++  = ( wo r d3 2 ) ( ( u n s i g n ed ) s r c C 3 3 <<  8 | srcC2])  <<  16  | 

n n ( ( uns  i g ned  ) s r c C 1 3 <<  8 | src[!0D); 

n n src+=4; 
a > while  (--words); 

} 


/*  Initialize  the  RIPEMD-160  values  */ 
static  void 

rmd 1 60 1 n i t ( VO i d *priv) 

{ 

n struct  R I P E H D 1 60 C on t e X t *ctx  = (struct  R I PEM D 1 60 C on t e x t *)priv; 

n /*  Set  the  h-vars  to  their  initial  values  */ 

a RHDinit  (ctx->iv); 

n /*  Initialise  bit  count  */ 

Cl  ctx->bytesHi  = 0; 

n ctx->bytesLo  = 0; 

} 

/*  Update  the  RIPEMD-160  hash  state  for  a block  of  data.  */ 


CCCHK:fd6dd2eedecd770d122eaae333f29a053f0570888ff2cedd833285eeeef170649D3 
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static  void 

rmd 1 60 U pda t e ( VO i d *priv,  byte  const  *buf,  size_t  Len) 

n struct  RIPEHDl60Context  *ctx  = (struct  RIPEMD160Context  *)priv; 
n unsigned  i; 

n /*  Update  bitcount  */ 


n word32  t = ctx->bytesLo; 

n if  ( ( ctx->bytesLo  = t + Len  ) < t ) 

n n c t x->by t e s H i ++ ; n / * Carry  from  Low  to  high  */ 


n i = (unsigned)t  % R I P EM D 1 60_B LO C KB YT E S ; /*  Bytes  aLready  in  ctx->key  */ 

n /*  i is  aLways  Less  than  R I P E H D 1 60_B LO C KB YT E S . */ 
n if  (RIPEMD160_BLOCKBYTES-i  > Len)  { 
n n memcpy((byte  *)ctx->key  + i,  buf,  Len); 
n n return; 

n } 

n if  (i)  {n  /*  First  chunk  is  an  odd  size  */ 

n n memcpy((byte  *)ctx->key  + i,  buf,  R I P E M D 1 60_B LO C KB YT E S - i); 
n a rmd160ByteSwap(ctx->key,  (byte  *)ctx->key,  RIPEMD160_BLOCKWORDS); 
n n RHDcompress(ctx->iv,  ctx->key); 

n n buf  +=  RI  PEHD1 60_BLOCKBYTES-i ; 

n n Len  -=  R I P E H D 1 60_B LO C KB YT E S- i ; 

n > 

n /*  Process  data  in  64-byte  chunks  */ 
n whiLe  (Len  >=  R I P EH D 1 60_B LO C KB YT E S ) i 

a n rmd 1 60By t e S wa p ( c t x-> key , buf,  R I P EM D 1 60_B LO C KWO R D S ) ; 

n n RHDcompress ( ctx->i V,  ctx->key); 

n a buf  +=  RIPEMD160_BLOCKBYTES; 

a a Len  -=  R I P E M D 1 60_B LO C KB YT E S ; 

a > 


a /*  HandLe  any  remaining  bytes  of  data.  */ 
a if  (Len) 

a a memcpy ( c t x-> key , buf,  Len); 

> 


/*  FinaL  wrapup  - MD4  styLe  padding  on  Last  bLock.  */ 

static  byte  const  * 
rmdl 60 F i na L ( VO i d *priv) 

{ 

a struct  R I PEM D 1 60  Co n t ex t *ctx  = (struct  R I P E M D 1 60 C on t ex t *)priv; 
a byte  *digest; 

a i n t i ; 

n word32  t; 

a RMDfinish(ctx->iv,  (byte  *)ctx->key,  ctx->bytesLo,  ctx->bytesHi); 

a digest  = (byte  *)ctx->iv; 

a for  (i  = 0;  i < R I P E H D 1 60_ H A S H W 0 R D S ; i++)  C 

a a t = ctx->i vCi D; 

a a digestC0D  = (byte)t; 
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a 

B 

digestC13 

= 

(byte)(t 

>> 

8); 

□ 

B 

digestC2Il 

= 

(byte)(t 

>> 

16); 

n 

B 

digestC33 

= 

( by t e ) ( t 

>> 

24); 

n 

B 

digest  += 

n 

> 

B 

/* 

In  case  it' 

' s 

sensitive 

*/ 

/*  XXXn  memset(ctx,  0,  s i z eo f ( c t x ) ) ; */ 
a return  (byte  const  *)ctx->-iv; 

> 


/* 

* RIPEN  OID  is  1.3.36.3.2.1,  from  URL  above. 

* The  rest  of  the  format  is  stolen  from  HD5.  Do  we  need  the  a#$a$ 

* NULL  in  there? 

*/ 


s t a t 
n 
□ 
n 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 

>; 


i c byte 
0x30,  /* 
0x21,  /* 
n 0x30 
n 0x09 

□ D 
D n 

□ □ 

□ □ 


n D 


D D 


n n 


const  R I P EH D 1 60 D E Rp r e f i X C D = { 

Universal,  Constructed,  Sequence  */ 

Length  33  (bytes  following)  */ 

, /*  Universal,  Constructed,  Sequence  */ 

, /*  Length  9 */ 

0x06,  /*  Universal,  Primitive,  ob j e c t - i d en t i f i e r 
0x05,  /*  Length  8 */ 
a 43,  /*  43  = ISO(1)*40  + 3 */ 
n 36, 
n 3 , 

° 2, 

n 1 , 


n n 0x05,  /*  Universal,  Primitive,  NULL  */ 

n n 0x00,  /*  Length  0 */ 


n 0x04,  /*  Universal,  Primitive,  Octet  string  */ 
n 0x14  /*  Length  20  */ 

a n /*  20  RIPEMD-160  digest  bytes  go  here  */ 


*/ 


struct  PgpHash  const  H a s h R I P EM D 1 60  = { 
n "RIPEnD160",  PGP_HASH_RIPEHD1 60, 

B RIPEHD160DERpref ix,  s i z eo f ( R I P E H D 1 60 D E Rp r e f i x ) , 
n RIPEMD1 60_HASHBYTES, 
n s i z eof ( s t r u c t R I P EH D 1 60 C on t ex t ) , 

n sizeofCstructCchar  _a;  struct  RIPEMD160Context  _b;})  - 
B a s i zeof C s t r u c t RI PEH D1 60Con t ex t ) , 

B rmd160Init,  r md 1 60 Upd a t e , rmd160Final 

>; 


#if  TESTMAIN 

/* RHD160  Test  code  */ 

#include  <stdio.h> 

#include  <s t d I i b . h>n / * For  exitC)  */ 

#include  <time.h> 

/*  Size  of  buffer  for  RMD160  speed  test  data  */ 

#define  T E S T_B LO C K_ S I Z En ( R I P EM D 1 60_H AS H B YT E S * 100  ) 
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/*  Number  of  bytes  of  test  data  to  process  */ 

#define  TEST_BYTESn  10000000L 

^define  T E S T_B LO C KSn ( TEST_BYTES  / T E ST_B LO C K_ S I Z E ) 
static  char  const  * rmd 1 60T e s t R e s u L t s C ] = { 


n 

"9C1185A5C5E9FC54612808977EE8F548B2258D31' 

’ ,aa 

/* 

" " */ 

n 

"0BDC9D2D256B3EE9DAAE347BE6F4DC835A467FFE' 

' ,aa 

/* 

"a"  */ 

□ 

"8EB208F7E05D987A9B044A8E98C6B087F15A0BFC' 

•,ao 

/* 

" a b c " 

*/ 

n 

"5D0689EF49D2FAE572B881B123A85FFA21595F36' 

• ,an 

/* 

"message  digest" 

*/ 

a 

"F71C27109C692C1B56BBDCEB5B9D2865B3708DBC' 

' , nn 

/* 

" a . . z " 

*/ 

a 

"1  2A053384A9C0C88E405A06C27DCF49ADA62EB2B' 

',nn 

/* 

"abcdbcde. , 

. . nopq" 

*/ 

u 

"B0E20B6E3116640286ED3A87A5713079B21F5189' 

' , nn 

/* 

" A . . Za 

. . z0  , 

. .9"  */ 

n 

"9B752E45573D4B39F4DBD3323CAB82BF63326BFB' 

' ,na 

/* 

8 * "1234567890" 

*/ 

□ 

"52783243C1697BDBE16D37F97F68F08325DC1528' 

' , nn 

/* 

1,000, 

000  ' 

'a"  */ 

n 

"52783243C1697BDBE16D37F97F68F08325DC1528' 

• ,uu 

/* 

1,000, 

000  ' 

■a"  */ 

u 

"52783243C1697BDBE16D37F97F68F08325DC1528' 

' >;° 

/* 

1,000, 

000  ' 

■a"  */ 

static  int 

compa reRHDI 60 re s u 1 1 s ( by t e const  *hash,  int  Level) 
{ 

n char  bufC41]; 
n int  i ; 

n for  (i  = 0;  i < R I P EM D 1 60_ H A S H B YT E S ; i++) 


D 

Q 

sprintf(buf+2*i. 

"%02X", 

hashCiD); 

H 

i f 

(strcmpCbuf,  rmd160TestResuLtsCleveL-13) 

= = 0)  { 

n 

n 

p r i n t f ( 

"Test  %d 

passed. 

result  = %s\n". 

level,  buf); 

n 

a 

return 

0; 

n 

> 

else  { 

Q 

□ 

p r i n t f ( 

"Error  in 

RMD1 60 

implementation: 

Test  %d  failedXn", 

n 

n 

pri ntf ( 

" Result 

= % s \ n " 

, buf  ) ; 

n 

n 

p r i n t f ( 

"Expected 

= %s\n" 

, r mdl  60T e s t Re s u L t s [ 1 e V e L - 1 ] ) ; 

n 

n 

return 

-1; 

n 

> 

> 


int 

main(void) 

{ 

n struct  R I PEN D 1 60 C on t ex t rmd160; 
n byte  da t a C T E ST_BL0C K_S I Z E ] ; 
n byte  const  *hash; 
n cLock_t  ticks; 
n long  i ; 

n / * 

n * Test  output  data,  based  on  URL  above, 

n */ 

n rmd160Init(&rmd160); 

n rmd160Update(8rnd160,  (byte  *)"",  0); 
n hash  = rmd160Final(8rmd160); 
n if  ( c ompa r e RM D 1 60 r e s u L t s ( h a s h , 1)  < 0) 
n n exit  (-1); 

B r md  1 60 1 n i t ( 8 r md 1 60  ) ; 
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n rmd160UpdateC&rmd160,  (byte  *)"a",  1); 
n hash  = rmd 1 60 F i n a L ( 8 rmd 1 60  ) ; 
n if  C c ompa r e R M D 1 60 r e s u L t s ( h a s h , 2)  < 0) 
n n exit  (-1); 

n rmd160Init(8rmd160); 

n rmd160UpdateC8rmd160,  (byte  *)"abc",  3); 
n hash  = rmd 1 60 F i na L ( 8 rmd 1 60 ) ; 
n if  ( c ompa r e R M D 1 60 r e s u L t s ( h a s h , 3)  < 0) 

a n exi t (-1  ); 

a rmd160Init(8rmd160); 

n r md 1 60U pda t e ( 8 r md 1 60 , (byte  *)"message  digest",  14); 

n hash  = rmd  1 60 F i n a L ( 8 r md 1 60  ) ; 
a if  ( c ompa r e RM D 1 60 r e s u L t s ( h a s h , 4)  < 0) 
n n exit  (-1); 

a r md 1 60 1 n i t ( 8 r md 1 6 0 ) ; 

n r md  1 60 Upda t e ( 8 r md 1 60 , (byte  * ) " a b c d e f g h i j k L mn  o pq  r s t u v wxy z " , 26); 

n hash  = rmd  1 60 F i na L ( 8 r md 1 60  ) ; 
n if  ( c ompa r e RH D 1 60 r e s u 1 1 s ( h a s h , 5)  < 0) 
a a exit  (-1); 

a rmd160Init(8rmd160); 

a r md 1 60 Upda t e ( 8 r md  1 60 , (byte  * ) " a b c d b c d e c d e f d e f g e f g h f g h i g h i j h i j k i j k L \ 

j k L m k L mn L mnomno p nopq " , 56); 
a hash  = rmd 1 60 F i na I ( 8 r md 1 60 ) ; 
a if  ( compa r eRHD 1 60 resu L t s ( ha s h , 6)  < 0) 
a a exit  (-1); 

a rmdl 60Ini t (8rmd1 60); 

a rmd160Update(8rmd160,  (byte  * ) " ABC D E F G H IJ KLMNO PfiR S T U V W X Y Z \ 
abcdefghijkLmnopqrstuvwxyz0123456789",  62); 
a hash  = rmd 1 60 F i na L ( 8 rmd 1 6 0 ) ; 
a if  ( compa r e RM D 1 60 r e s u L t s ( h a s h , 7)  < 0) 
a a exit  (-1); 

a rmdl 601 ni t ( 8 rmdl 60  ) ; 

a rmd160Update(8rmd160,  (byte  *)" 1 2 34 567890 1 2 34 5 67890 1 2 34 567890 1 2 34 567890 \ 
1234567890123456789012345678901234567890",  80); 
a hash  = r md 1 60 F i na L ( 8 rmd 1 60 ) ; 
a if  ( compa r eRH D1 60 r e su L t s ( ha s h , 8)  < 0) 
a a exit  (-1); 

a /*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  64's  */ 

a rmd160Init(8rmd160); 
a for  (i  = 0;  i < 15625;  i++) 

a a rmdl 60Upda t e ( 8 rmdl 60,  (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a \ 

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  64); 
a hash  = rmd 1 60 F i n a L ( 8 r md 1 60  ) ; 
a if  ( c ompa r e RM D 1 60 r e s u L t s ( ha s h , 9)  < 0) 
a a exit  (-1); 

a /*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  25's  */ 

a rmdl 601 n i t ( 8 rmdl 60 ) ; 
a for  (i  = 0;  i < 40000;  i++) 

a a r md 1 60 U pd a t e ( 8 r md 1 60 , (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a " , 25); 

n hash  = r md 1 60 F i n a L ( 8 r md 1 60  ) ; 
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n if  ( compa re RM D 1 60 resu L t s ( ha s h , 10)  < 0) 
n n exit  (-1); 

n /*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  125's  */ 
n rmd160Init(&rmd160); 
n for  (i  = 0;  i < 8000;  i++) 

n D r md 1 60U pd a t e ( S r md 1 60 , (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a \ 

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaX 
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  1 25)  ; 
n hash  = rmd 1 60 F i n a I ( & r md 1 60 ) ; 
n if  ( compa r e RM D 1 60 r e s u L t s ( h a s h , 11)  < 0) 
n n exit  (-1); 

n /*  Now  perform  time  trial,  generating  MD  for  10MB  of  data.  First, 
n initialize  the  test  data  */ 

n memset(data,  0,  TEST_BLOCK_SIZE); 

n /*  Get  start  time  */ 

a printf("RMD160  time  trial.  Processing  %ld  characters. ..\n",  TEST_ 

a ticks  = clock(); 

n /*  Calculate  RMD160  message  digest  in  T E S T_B LO C K_ S I Z E byte  blocks 
o r md 1 60 1 n i t ( & r md 1 60  ) ; 
n for  (i  = TEST_BLOCKS;  i > 0;  i — ) 

n n rmd160Update(&rmd160,  data,  TEST_BLOCK_SIZE); 

n hash  = r md 1 60 F i na I ( & r md 1 60 ) ; 

n /*  Get  finish  time  and  print  difference  */ 
n ticks  = clock()  - ticks; 

n printf(" Ticks  to  process  test  input:  %lu\n",  (unsigned  long)ticks) 

n return  0; 

} 

#endif  /*  Test  driver  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpRI PEMD1 60 . h --  RIPEMD-160  message  digest 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpRIPEMDI 60 . h,v  1.1. 2. 2 1997/05/21  19:06:48  mhw  Exp  $ 

*/ 

#ifndef  PG P R I P E H D 1 6 0_ H 
//define  PG  PR  I P E M D 1 60_  H 

#include  "pgpHash.h" 

//ifdef  __cplusplus 
extern  "C"  { 

//  e n d i f 

extern  struct  PgpHash  const  HashRIPEMD160; 

//ifdef  __cplusplus 

> 

#end  i f 

//endif  /*  ! PG  P R I P E M D 1 60_  H */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpSHA.c  - NIST  Secure  Hash  Algorithm,  FIPS  PUB  180  and  180.1. 

* The  algorithm  is  by  spook(s)  unknown  at  the  U.S.  National  Security  Agency. 

* 

* Written  2 September  1992,  Peter  C.  Gutmann. 

* This  implementation  placed  in  the  public  domain. 

* 

* Modified  1 June  1993,  Colin  Plumb. 

* Modified  for  the  new  SHS  based  on  Peter  Gutmann's  work, 

* 18  July  1994,  Colin  Plumb. 

* 

* Renamed  to  SHA  and  comments  updated  a bit  1 November  1995,  Colin  Plumb. 

* These  modifications  placed  in  the  public  domain. 

* Hacked  on  some  more  for  PGP  3,  December  1995,  Colin  Plumb. 

* You  probably  don't  *want*  these  modifications. 

* 

* Comments  to  pg u t 1 3 c s . a u ku n i . a c . n z 

* 

* $Id:  pgpSHA.c, V 1 . 1 . 2.1  1 997/05/1  9 00  : 59:57  hal  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
//include  "config.h" 
//endi  f 


//include  <string.h> 


//include 
//include 
//i  nc  lude 


pgpHash  . h" 
pgpSHA.h" 
pgpUsua I s . h 


/* 

* Define  to  1 for  FIPS  180.1  version  (with  extra  rotate  in  p r e s c h ed u I i ng  ) , 

* 0 for  FIPS  180  version  (with  the  mysterious  "weakness"  that  the  NSA 

* isn't  talking  about). 

*/ 

//define  SHA.VERSION  1 

//define  S H A_B LOC KB YT E Sn  64 
//define  S H A_B  LOC  KWOR  D Sa  16 

//define  SHA_HASHBYTESn  20 
//define  S H A_H A S H WO R D Sa  5 

struct  SHAContext  ( 

a word32  key C S H A_B LOC KWO R D S ] ; 

a word32  i v C S H A_H AS H WO RD S ] ; 

#if  HAVE64 

a word64  bytes; 

//else 

a word32  bytesHi,  bytesLo; 

//end  i f 

>; 

/* 

* Shuffle  the  bytes  into  big-endian  order  within  words,  as  per  the 

* SHA  spec . 

*/ 
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static  void 

shaByteSwap(uord32  *dest,  byte  const  *src,  unsigned  words) 
{ 


Q 

do  -C 

n 

a 

*dest++  = ( wo rd32 ) ( ( un s i g ned ) s r c C03  <<  8 | 

srcCI])  << 

□ 

n 

( ( uns i gned  ) s r c C2 D <<  8 | 

srcC3II)  ; 

n 

n 

s r c +=  4; 

n 

> while 

(--words); 

> 

/*  Initialize  the  SHA  values  */ 


static  void 
shalnitCvoid  *priv) 

{ 

n struct  SHAContext  *ctx  = (struct  SHAContext  *)priv; 

n /*  Set  the  h-vars  to  their  initial  values  */ 

n ctx->ivC0D  = 0x67452301; 

n ctx->ivC1II  = 0XEFCDAB89; 

n ctx->ivC2]  = 0x98BADCFE; 

n ctx->ivC3]  = 0x10325476; 

n ctx->ivC4]  = 0XC3D2E1F0; 

n /*  Initialise  bit  count  */ 

#ifdef  HAVE64 
n ctx->bytes=0; 

# e I s e 

a ctx->bytesHi  = 0; 

n ctx->bytesLo  = 0; 

# e n d i f 
} 


/* 

* The  SHA  f()-functions.  The  f1  and  f3  functions  can  be  optimized  to 

* save  one  boolean  operation  each  - thanks  to  Rich  Schroeppel, 

* rcsScs.arizona.edu  for  discovering  this. 

* The  f3  function  can  be  modified  to  use  an  addition  to  combine  the 

* two  halves  rather  than  OR,  allowing  more  opportunity  for  using 

* associativity  in  optimization.  (Colin  Plumb) 

* 

* Note  that  it  may  be  necessary  to  add  parentheses  to  these  macros 

* if  they  are  to  be  called  with  expressions  as  arguments. 

*/ 


/*  f1  is  a bit-select  function.  If 

( X ) then 

y else 

z 

*/ 

/*#define  f1(x,y,z)n 

( (x  & y)  1 

Cx  S z) 

) n n 

// 

Rounds 

0-19 

*/ 

#define  f1(x,y,z)n 

( z * (x  & 

N 

< 

X 

) n a 

/* 

Rounds 

0-19 

*/ 

//define  f2(x,y,z)n 

N 

< 

>s 

< 

X 

) n n 

a 

/* 

Rounds 

20-39 

*/ 

/*  f3  is  a majority  function  */ 

/*//define  f3(x,y,z)n 

( (x  & y)  1 

( y 8 z ) 1 

(z  8 

x) 

)n// 

Rounds 

40-59 

*/ 

/*//define  f3(x,y,z)n 

( (x  & y)  1 

(z  8 (x  1 

y)  ) 

) n 

// 

Rounds 

40-59 

*/ 

//define  f3(x,y,z)n 

((x&y)+ 

(z  8 (x  * 

y)  ) 

) n 

/* 

Rounds 

40-59 

*/ 

//define  f4(x,y,z)n 

( X * y * z 

) n n 

n 

/* 

Rounds 

60-79 

*/ 

/*  The  SHA  Mysterious  Constants.  */ 

#define  K2n  0x5A827999Ln  /*  Rounds  0-19  - f I oo r ( s q r t ( 2 ) * 2^30)  */ 
#define  K3n  0x6ED9EBA1Ln  /*  Rounds  20-39  - f I oo r ( s q r t ( 3 ) * 2^30)  */ 
#define  K5n  0x8F1BBCDCLn  /*  Rounds  40-59  - f I oo r ( s q r t ( 5 ) * 2*30)  */ 
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^define  K10n  0xCA62C1D6Ln  /*  Rounds  60-79  - f I oo r ( s q r t ( 1 0 ) * 2*30)  */ 

/*  I wonder  why  not  use  K7=0x A9 5 3 F D 4 E , K1 1 =0 x D 443949 F or  K1 3=0 x E 6C 1 5 A2 3 */ 

/*  32-bit  rotate  Left  - kLudged  with  shifts  */ 

^define  R0TL(n,X)  ( (X  <<  n)  | (X  >>  (32-n))  ) 

/* 

* The  initial  expanding  function 

* 

* The  hash  function  is  defined  over  an  80-word  expanded  input  array  W, 

* where  the  first  16  are  copies  of  the  input  data,  and  the  remaining  64 

* are  defined  by  WCiD  = WCi-16]  * WCi-14D  * WCi-8D  * WCi-31.  This 

* implementation  generates  these  values  on  the  fly  in  a circular  buffer. 

* 

* The  new  "corrected"  FIPS  180.1  added  a 1-bit  Left  rotate  to  this 

* computation  of  WCiD. 

* 

* The  expandxC)  version  doesn't  write  the  result  back,  which  can  be 

* used  for  the  Last  three  rounds  since  those  outputs  are  never  used. 

*/ 

#if  SHA.VERSIONn/*  FIPS  180.1  */ 

^define  expandx(W,i)  (t  = WCi&IS:  * w:(i-14)&15]  * WC(i-8)&153  * WC(i-3)815:,  \ 

ROTLCI,  t)) 

#define  expand(W,i)  (WCi&ISD  = e x pa nd x ( W , i ) ) 

#eLsen  /*  Old  FIPS  180  */ 

//define  expandx(W,i)  (WCiSIS:  * WC(i-14)&15:  * Wi:(i-8)815]  * WC(i-3)&153) 

//define  expand(W,i)  (WCi&IS:  *=  WH  ( i -1  4 ) 81  5 ] * WC(i-8)815:  * WC(i-3)815:) 

//endi  f 

/* 

* The  prototype  SHA  sub-round 

* 

* The  fundamental  sub-round  is 

* a'  = e + R0TL(5,a)  + fCb,  c,  d)  + k + data; 

* b'  = a; 

* c'  = ROTL(30,b); 

* d'  = c; 

* e'  = d; 

* ...  but  this  is  implemented  by  unrolling  the  Loop  5 times  and  renaming 

* the  variables  (e,a,b,c,d)  = ( a ' , b ' , c ' , d ' , e ' ) each  iteration. 

*/ 

//define  subRoundCa,  b,  c,  d,  e,  f,  k,  data)  \ 

n ( e +=  R0TL(5,a)  + f(b,  c,  d)  + k + data,  b = ROTL(30,  b)  ) 

/* 

* The  above  code  is  replicated  20  times  for  each  of  the  4 functions, 

* using  the  next  20  values  from  the  WCD  array  for  "data"  each  time. 

*/ 

/* 

* Perform  the  SHA  transformation.  Note  that  this  code.  Like  HD5,  seems  to 

* break  some  optimizing  compilers  due  to  the  complexity  of  the  expressions 

* and  the  size  of  the  basic  block.  It  may  be  necessary  to  split  it  into 

* sections,  e.g.  based  on  the  four  subrounds 

* 

* Note  that  this  corrupts  the  sha->key  area. 

*/ 
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static  void 

s haT ra n s f o rm ( s t ru c t SHAContext  *sha) 

{ 

n register  word32  A,  B,  C,  D,  E; 

#if  SHA  VERSION 


Q 

# e nd i f 


register  word32  t; 


/*  Set  up  first  buffer  */ 


sha->ivC0]; 
sha->ivC1 ]; 
sha->ivC23; 
sha->ivC3D; 
sha->ivC4!]; 


Q 

/*  Heavy 

mangling. 

i n 

4 

s u b- 

rounds  of  20  interations 

each 

n 

subRoundC 

A, 

Br 

Cr 

Or 

Br 

iTr 

K2r 

sha->keyC  03  ); 

n 

subRound  C 

E, 

A, 

Br 

Cr 

Or 

K2r 

sha->keyC  13  ); 

u 

subRound ( 

0, 

Br 

A, 

Br 

Cr 

K2r 

sha->key[I  23  ); 

□ 

subRound ( 

c. 

Or 

E, 

l^r 

Br 

K2r 

sha->keyC  33  ); 

n 

subRound  C 

B, 

Cr 

Or 

Br 

A, 

K2r 

sha->key[I  43  ); 

n 

subRound ( 

A, 

Br 

Cr 

Or 

Br 

K2r 

sha->key[  53  ); 

n 

subRound  ( 

E, 

A, 

Br 

Cr 

Or 

K2r 

sha->keyC  63  ); 

n 

subRound ( 

0, 

Br 

A, 

Br 

Cr 

K2r 

sha->keyC  73  ); 

n 

subRound ( 

c. 

Or 

Br 

f^r 

Br 

K2r 

sha->keyC  83  ); 

n 

subRound ( 

B, 

Cr 

Or 

Br 

A, 

K2r 

sha->keyll  93  ); 

n 

subRound ( 

A, 

Br 

Cr 

Or 

E, 

fir 

K2r 

sha->keyC103  ); 

n 

subRoundC 

E, 

l^r 

Br 

Cr 

Or 

fir 

K2r 

sha->keyC113  ); 

n 

subRoundC 

Or 

Br 

A, 

Br 

Cr 

fir 

K2r 

sha->keyC123  ) ; 

c 

subRound ( 

c. 

Or 

Br 

A, 

B, 

fir 

K2r 

sha->keyC133  ); 

n 

subRoundC 

Br 

Cr 

Or 

Br 

A, 

fir 

K2r 

sha->keyC143  ); 

n 

subRound ( 

f^r 

Br 

Cr 

Or 

E, 

fir 

K2r 

sha->keyC1 53  ) ; 

a 

subRoundC 

E, 

t^r 

B, 

Cr 

Or 

fir 

K2r 

expandCsha->key, 

16) 

); 

n 

subRoundC 

D, 

Br 

A, 

Br 

Cr 

fir 

K2r 

expandCsha->key, 

17) 

); 

n 

subRoundC 

c. 

Or 

Br 

f^r 

Br 

fir 

K2r 

expandCsha->key, 

18) 

); 

n 

subRound  C 

B, 

Cr 

Or 

Br 

A, 

fir 

K2r 

expandCsha->key, 

19) 

n 

subRound  C 

A, 

Br 

Cr 

Or 

Br 

f2r 

K3, 

expandCsha->key, 

20) 

); 

n 

subRound  C 

E, 

t^r 

Br 

Cr 

Or 

f2r 

K3, 

expandCsha->key, 

21  ) 

); 

n 

subRound  C 

0, 

Br 

A, 

Br 

Cr 

f2r 

K3, 

expandCsha->key, 

22) 

); 

n 

subRound  C 

c. 

Or 

Br 

l^r 

Br 

f2r 

K3, 

expand Csha->key, 

23) 

); 

□ 

subRoundC 

Br 

Cr 

Or 

Br 

A, 

f2r 

K3, 

expandCsha->key, 

24) 

); 

s 

subRound  C 

l^r 

Br 

Cr 

Or 

E, 

f2r 

K3, 

expandCsha->key, 

25) 

); 

n 

subRound  C 

Br 

Kr 

Br 

Cr 

Or 

f2r 

K3, 

expandCsha->key, 

26) 

); 

n 

subRound  C 

Or 

Br 

A, 

Br 

Cr 

f2r 

K3, 

expandCsha->key, 

27) 

); 

n 

subRound  C 

c. 

Or 

Br 

Kr 

Br 

f2r 

K3, 

expandCsha->key, 

28) 

); 

n 

subRoundC 

B, 

Cr 

Or 

Br 

A, 

f2r 

K3, 

expandCsha->key, 

29) 

); 

n 

subRound  C 

A, 

Br 

Cr 

Or 

Br 

f2r 

K3, 

expandCsha->key, 

30) 

); 

n 

subRound  C 

E, 

Kr 

Br 

Cr 

Or 

f2r 

K3, 

expandCsha->key, 

31  ) 

); 

□ 

subRound  C 

Or 

Br 

f^r 

Br 

Cr 

f2r 

K3, 

expandCsha->key, 

32) 

); 

n 

subRound  C 

Cr 

Or 

Br 

f^r 

Br 

f2r 

K3, 

expand Csha->key, 

33) 

); 

n 

subRound  C 

Br 

Cr 

Or 

Br 

A, 

f2r 

K3, 

expandCsha->key, 

34) 

); 

n 

subRound  C 

t^r 

Br 

Cr 

Or 

Br 

f2r 

K3, 

expandCsha->key, 

35) 

); 

n 

subRound  C 

Br 

A, 

Br 

Cr 

Or 

f2r 

K3, 

expandCsha->key, 

36) 

); 

n 

subRound  C 

Or 

Br 

A, 

Br 

Cr 

f2r 

K3, 

expandCsha->key, 

37) 

); 

n 

subRound  C 

Cr 

Or 

Br 

A, 

Br 

f2r 

K3, 

expandCsha->key, 

38) 

); 

n 

subRoundC 

Br 

Cr 

Or 

E, 

A, 

f2r 

K3, 

expandCsha->key, 

39) 

); 

*/ 
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n 

subRound ( 

A, 

B, 

c. 

Dr 

Er 

f3r 

K5, 

expand ( sha->key,  40) 

); 

n 

subRound  C 

E, 

A, 

B, 

Cr 

Dr 

f3r 

K5, 

expand ( sha->key,  41) 

); 

n 

subRound ( 

0, 

E, 

A, 

Br 

Cr 

f3. 

K5, 

e xpa n d ( s h a -> key  , 42) 

); 

Q 

subRound ( 

C, 

D, 

E, 

Ar 

Br 

f3. 

K5, 

expa n d ( s ha -> key , 43) 

); 

n 

subRound ( 

B, 

c. 

D, 

Er 

Ar 

f3. 

K5r 

e X pa nd ( s h a -> key , 44) 

); 

n 

subRoundC 

A, 

B, 

c. 

Dr 

Er 

f3. 

K5, 

e X pa nd ( s h a-> key , 45) 

); 

n 

subRoundC 

E, 

A, 

B, 

Cr 

Dr 

f3. 

K5, 

expa nd ( s h a-> ke y , 46) 

); 

n 

subRound ( 

0, 

E, 

A, 

Br 

Cr 

f3. 

K5, 

e X pa n d ( s h a -> key , 47) 

); 

n 

subRound ( 

c. 

0, 

E, 

Ar 

Br 

f3. 

K5, 

exp  a n d ( s h a -> key , 48) 

); 

n 

subRound ( 

B, 

c. 

Dr 

Er 

Ar 

f3r 

K5, 

e X pa nd ( s ha -> key , 49) 

); 

n 

subRound ( 

A, 

B, 

Cr 

Dr 

Er 

f3r 

K5, 

e X pa nd ( s h a -> key , 50) 

); 

n 

subRound ( 

E, 

A, 

B, 

Cr 

Dr 

f3. 

K5, 

expand ( sha->key,  51) 

); 

n 

subRound ( 

0, 

E, 

A, 

Br 

Cr 

f3. 

K5, 

e xpa n d ( s ha -> key , 52) 

); 

n 

subRound ( 

c. 

D, 

E, 

Ar 

Br 

f3. 

K5r 

expa nd ( s ha-> key , 53) 

>; 

n 

subRound ( 

B, 

c. 

D, 

Er 

Ar 

f3r 

K5, 

e X pa n d ( s ha -> key , 54) 

); 

n 

subRoundC 

A, 

B, 

c. 

Dr 

Er 

f3. 

K5, 

expand ( sha->key,  55) 

n 

subRound ( 

E, 

A, 

B, 

Cr 

Dr 

f3. 

K5, 

e X pa nd ( s h a-> ke y , 56) 

); 

n 

subRound ( 

0, 

E, 

A, 

Br 

Cr 

f3. 

K5, 

expand ( sha->key,  57) 

); 

□ 

subRoundC 

c. 

D, 

E, 

Ar 

Br 

f3. 

K5, 

e xpa n d ( s h a -> key , 58) 

); 

n 

subRound ( 

B, 

c. 

D, 

Er 

Ar 

f3. 

K5, 

expa nd ( s ha->key , 59) 

); 

n 

subRound ( 

A, 

B, 

c. 

Dr 

Er 

K1  0, 

e X pa nd ( s ha -> key , 60) 

); 

Q 

subRound ( 

E, 

A, 

Br 

Cr 

Dr 

K1  0, 

expand(sha->key,  61) 

); 

n 

subRoundC 

0, 

E, 

A, 

Br 

Cr 

K1  0, 

ex  pa n d ( s h a -> key , 62) 

); 

n 

subRound ( 

c. 

D, 

Er 

Ar 

Br 

K1  0, 

expa nd ( s ha-> key , 63) 

); 

n 

subRoundC 

B, 

c. 

Dr 

Er 

Ar 

fA, 

K10, 

e X pa n d ( s h a -> key , 64) 

); 

□ 

subRound ( 

A, 

B, 

Cr 

Dr 

Er 

fA, 

K10, 

expand C sha->key,  65) 

); 

n 

subRound ( 

E, 

A, 

Br 

Cr 

Dr 

fA, 

K10, 

e xpa nd ( s h a-> key , 66) 

); 

□ 

subRound ( 

0, 

E, 

Ar 

Br 

Cr 

fA, 

K10, 

e X pa nd C s h a-> key , 67) 

); 

n 

subRound ( 

c. 

0, 

Er 

Ar 

Br 

fA, 

K10, 

expand ( sha->key,  68) 

); 

n 

subRound ( 

B, 

c. 

Dr 

Er 

Ar 

fA, 

K10, 

e X pa nd ( s h a-> key , 69) 

); 

n 

subRound ( 

A, 

B, 

Cr 

Dr 

Er 

fA, 

K10, 

expa nd ( sha->key , 70) 

); 

n 

subRound ( 

E, 

A, 

Br 

Cr 

Dr 

fA, 

K10, 

ex  pa nd ( s ha -> key , 71) 

); 

n 

subRound ( 

0, 

E, 

Ar 

Br 

Cr 

fA, 

K1  0, 

expandC sha->key,  72) 

); 

s 

subRound ( 

c. 

D, 

Er 

Ar 

Br 

fA, 

K1  0, 

expa n d ( s ha -> key , 73) 

); 

Q 

subRoundC 

B, 

c. 

Dr 

Er 

Ar 

fA, 

K1  0, 

expa nd ( s ha-> key , 74) 

); 

s 

subRoundC 

A, 

B, 

Cr 

Dr 

Er 

fA, 

K1  0, 

expa n d ( s h a -> key , 75) 

); 

n 

subRoundC 

E, 

A, 

Br 

Cr 

Dr 

fA, 

K10, 

expa n d ( s h a -> key , 76) 

); 

n 

subRound ( 

0, 

E, 

Ar 

Br 

Cr 

fA, 

K10, 

expa ndx ( s ha-> key , 77)  ); 

D 

subRound ( 

c. 

0, 

Er 

Ar 

Br 

+ A, 

K10, 

e X pa n dx ( s ha -> key , 78)  ); 

D 

subRound ( 

B, 

c. 

Dr 

Er 

Ar 

fA, 

K10, 

expandx(sha->key,  79)  ); 

a /*  Build  message  digest  */ 

n sha->ivC0D  +=  A; 

a sha->ivC1D+=B; 

a sha->ivC2D  +=  C; 

n sha->ivC3D+=D; 

a sha->ivC4Il  +=  E; 

> 

/*  Update  SNA  for  a block  of  data.  */ 
static  void 

s h a Upda t e ( VO i d *priv,  byte  const  *buf,  size_t  len) 

{ 

n struct  SHAContext  *ctx  = (struct  SHAContext  *)priv; 

n unsigned  i; 
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n /*  Update  bitcount  */ 


Sifdef  HAVE64 


n i = ( u n s i g n e d ) c t x->by t e s % S H A_B LO C KB YT E S ; 

n ctx->bytes  +=  Len; 

# e L s e 

n word32  t = c t x-> by t e s Lo ; 

n if  ( ( ctx->bytesLo  = t + Len  ) < t ) 

n n c t x->by t e s H i ++ ; n / * Carry  from  Low  to  high  */ 


n i = (unsigned)t  % SHA_BLOCKBYTES;  /*  Bytes  aLready  in  ctx->key  */ 

#endi  f 


n /*  i is  aLways  Less  than  S H A_B LO C KB YT E S . */ 

n if  (SHA_BLOCKBYTES-i  > Len)  { 

n n memcpyCCbyte  *)ctx->key  + i,  buf,  Len); 

n n return; 

n } 


□ 

n 

a 

□ 

□ 

n 

Q 


if  (i)  {n  /*  First  chunk  is  an  odd  size  */ 

n memcpyCCbyte  *)ctx->key  + i,  buf,  SHA_BLOCKBYTES  - i); 

n s h a By t e S wa p ( c t x-> k ey , (byte  *)ctx->key,  S H A_B LO C KWO R D S ) ; 

n shaTransform(ctx); 

n buf  +=  SHA_BLOCKBYTES-i ; 

n Len  -=  S H A_B LO C KB YT E S- i ; 

} 


n 

Q 

Q 

a 

n 

Q 

n 


/*  Process  data  in  64-byte  chunks  */ 
whiLe  (Len  >=  S H A_B LO C KB YT E S ) { 

n shaByteSwap( ctx->key,  buf,  S H A_B LO C KWO R D S ) ; 

n s h a T r a n s f o r m ( c t X ) ; 

n buf  +=  SHA.BLOCKBYTES; 

a Len  -=  S H A_BL0 C KB YT E S ; 

> 


□ 

n 

n 


} 


/*  HandLe  any  remaining  bytes  of  data.  */ 
if  (Len) 

n memcpy( ctx->key,  buf,  Len); 


I* 

* FinaL  wrapup  - pad  to  64-byte  boundary  with  the  bit  pattern 

* 1 0*  (64-bit  count  of  bits  processed,  MSB-first) 

*/ 

static  byte  const  * 
s h a F i na L ( VO i d *priv) 

{ 

n struct  SHAContext  *ctx  = (struct  SHAContext  *)priv; 

n byte  *digest; 

#if  HAVE64 

n unsigned  i = ( u n s i g n e d ) c t x->by t e s % S H A_B LO C KB YT E S ; 

# e L s e 

n unsigned  i = ( un s i g n ed ) c t x->by t e s Lo  % S H A_B LO C KB YT E S ; 

#end  i f 

n byte  *p  = (byte  *)ctx->key  + i;n/*  First  unused  byte  */ 

n word32t; 
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n /*  Set  the  first  char  of  padding  to  0x80.  There  is  always  room.  */ 

n *p++  = 0x80; 

n /*  Bytes  of  padding  needed  to  make  64  bytes  (0..63)  */ 

n i = SHA_BLOCKBYTES  - 1 - i ; 


□ 

if  C i < 

8)  {b  /*  Padding  forces  an  extra  block  */ 

El 

n 

memset(p,  0,  i); 

n 

n 

shaByteSwap(ctx->key,  (byte  *)ctx->key,  16); 

Et 

n 

shaT  ransform( ctx)  ; 

n 

□ 

p = (byte  *)ctx->key; 

n 

0 

i = 64; 

D 

> 

n 

memset ( p 

, 0r  i-8); 

□ 

shaByteSwap(ctx->key,  (byte  *)ctx->key,  14); 

n /*  Append  Length  in  bits  and  transform  */ 

#if  HAVE64 

n ctx->keyC14D  = (word32)(ctx->bytes  >>  29); 

n ctx->keyC15Il  = ( wo  r d3  2 ) c t x->by  t e s <<  3; 

#e  L se 

n ctx->keyC14]  = ctx->bytesHi  <<  3 | ctx->bytesLo  >>  29; 

B ctx->keyC15D  = ctx->bytesLo  <<  3; 

#endi  f 

B s h aT r a n s f o r m ( c t X ) ; 


0 

digest 

= (byte  *)ctx->iv; 

0 

for  ( i 

= 0;  i < SHA_HASHW0RDS 

r 

i ++ ) 

0 

0 

t = ctx->ivCi3; 

0 

0 

digestC03  = (byte)(t 

>> 

24); 

0 

0 

digestC13  = (byte)(t 

» 

16); 

o 

0 

digestC23  = (byte)(t 

» 

8); 

0 

0 

digest[33  = (byte)t; 

0 

0 

di gest  +=  4; 

0 

> 

0 

/*  In 

case  it's  sensitive  */ 

/* 

XXXb  memset(ctx,  0,  sizeof(ctx)); 

*/ 

0 

return 

(byte  const  *)ctx->iv; 

> 

#if  0 
/* 

* Nobody  knows  an  SHA  format,  so  we  make  one  up  out  of  the 

* context-dependent  tag  space. 

*/ 

static  byte  const  S H A D E Rp r e f i x C 3 = { 

B 0x82, B /*  context-specific  C23,  primitive  */ 

B 0x14b  /*  Length  20  */ 

B B /*  20  SHA  digest  bytes  go  here  */ 

>; 

Seise 

/* 

* Actually,  there  is  one.  SHA.1  has  an  DID  of  1.3.14.3.2.26 

* (From  the  1994  Open  Systems  Environment  Implementor's  Workshop  (OIW)) 

* The  rest  of  the  format  is  stolen  from  MD5.  Do  we  need  the  aS$a$ 

* NULL  in  there? 

*/ 

static  byte  const  S H A D E Rp r e f i x C 3 = { 
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n 

□ 

n 

n 

a 

n 

n 

n 

n 

a 

n 

n 

Q 

n 

n 

n 

>; 

#end  1 f 


0x30,  /*  Universal,  Constructed,  Sequence  */ 

0x21,  /*  Length  33  (bytes  following)  */ 

0x30,  /*  Universal,  Constructed,  Sequence  */ 


0x09, 

□ 

Q 

D 

D 

n 

D 

□ 

n 

n 


/*  Length  9 */ 


0x06, 

0x05, 

□ 

a 

□ 

n 

n 

0x05, 

0x00, 


/*  Universal,  Primitive,  ob j e c t - i d e n t i f i e r */ 
/*  Length  8 */ 

43,  /*  43  = ISOd  )*40  + 3 */ 

14, 

3, 

2, 

26, 


/*  Universal,  Primitive,  NULL  */ 
/*  Length  0 */ 

0x04,  /*  Universal,  Primitive,  Octet  string  */ 
0x14  /*  Length  20  */ 

n /*  20  SHA.1  digest  bytes  go  here  */ 


struct  PgpHash  const  HashSHA  = f 
n "SHA1",  PGP_HASH_SHA, 

n S H A D E R p r e f i X , s i z e o f ( S H A D E R p r e f i x ) , 

n SHA_HASHBYTES, 

n s i z eo f ( s t r u c t SHAContext), 

n s i z eo f ( s t r u c t { c h a r _a;  struct  SHAContext  _b;})  - 

n n s i z eo f C s t r u c t SHAContext), 

n shalnit,  shaUpdate,  shaFinaL 

>; 

#if  TESTMAIN 


/* SHA  Test  code  */ 

^include  <stdio.h> 

//include  <stdlib.h>n  /*  For  exit()  */ 

//include  <time.h> 

/*  Size  of  buffer  for  SHA  speed  test  data  */ 

//define  T E S T_B  LO  C K_  S I Z En  ( S H A_  H A S H B YT  E S * 100  ) 

/*  Number  of  bytes  of  test  data  to  process  */ 

//define  TEST_BYTESn  1 0000000L 

//define  TEST_BLOCKSn  ( TEST_BYTES  / T E ST_B  LO  C K_S  I Z E ) 

#if  SHA_VERSION 

static  char  const  * s h a T e s t R e s u L t s C 3 = { 
a "A9993E364706816ABA3E25717850C26C9CD0D89D", 

n "84983E441C3BD26EBAAE4AA1F95129E5E54670F1", 

a "34AA973CD4C4DAA4F61EEB2BDBAD2731 653401 6F", 

a "34AA973CD4C4DAA4F61 E EB2 B DB A D 2 73 1 6 5 340 1 6 F " , 

a "34AA973CD4C4DAA4F61 EEB2BDBAD2731 653401 6F"  >; 

Uei.se 

static  char  const  *s hale s t Re su I t s C 3 = { 
a "0164B8A914CD2A5E74C4F7FF082C4D97F1EDF880", 

n "D2516EE1ACFA5BAF33DFC1C471E438449EF134C8", 

n "3232AFFA48628A26653B5AAA44541FD90D690603", 

n "3232AFFA48628A26653B5AAA44541FD90D690603", 

[[CHK:e23dffaef6fd058d0bbe28b339155ff881aa881122277af9f76f3362d65144b0c33 


404 


Pretty  Good  Privacy  S.Cf"*  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpSHA.c 


a "3232AFFA48628A26653B5AAA44541 FD90D690603"  }; 

#endi f 

static  int 

compa reS H A resu I t s ( by t e const  *hash,  int  Level) 

{ 


Q 

char 

b u f C 4 1 3 ; 

n 

int 

i ; 

a 

for 

( i = 0 ; i < 

SHA_HASHBYTES;  i++) 

n 

n 

sprintf(buf+2*i. 

"%02X",  hashCi3); 

n 

if  (st  rcmp(buf , 

s hale s t Re su L t s C L e ve L -1 3 ) ==  0)  { 

a 

n 

p r i n t f ( 

"Test  %d 

passed,  result  = %s\n".  Level,  buf); 

a 

n 

return 

0; 

a 

> eL 

s e { 

n 

n 

p r i n t f ( 

"Error  in 

SHA  implementation:  Test  %d  faiLed\n", 

a 

n 

pri ntf ( 

" Result 

= %s\n",  buf); 

a 

n 

p r i n t f ( 

"Expected 

= %s\n",  shaTestResuLtsElevel-13); 

a 

n 

return 

-1; 

Q 

> 

int 

ma i n ( voi d ) 

{ 

n struct  SHAContext  sha; 

n byte  d a t a C T E ST_BLOC K_ S I Z E 3 ; 

n byte  const  *hash; 

n cLock_t  ticks; 

n L o ng  i ; 


/* 

* Test  output  data  (these  are  the  only  test  data  given  in  the 

* Secure  Hash  Standard  document,  but  chances  are  if  it  works 

* for  this  it'Ll  work  for  anything) 

*/ 

shalnit(Ssha); 

shaUpdate(&sha,  (byte  *)"abc",  3); 
hash  = shaFinaL(&sha); 
if  ( compa r eS H A r e su I t s ( ha s h,  1)  < 0) 
n exit(-l); 


Q shalnit(Ssha); 

n shaUpdate(&sha,  (byte  *)"abcdbcdecdefdefgefghfghighijhijki\ 

j k L j k L m k L mn I mn omnopnopq " , 56); 
n hash  = s h a F i na L ( &s ha ) ; 

n if  ( c ompa r e S H A r e s u L t s ( h a s h , 2)  < 0) 

n n exit(-l); 


/*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  64's  */ 

shalnit(Ssha); 

for  (i  = 0;  i < 15625;  i++) 

n shaUpdate(&sha,  (byte  *)"aaaaaaaaaaaaaaaaaaaaaaaaa\ 


aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  64) ; 


hash  = s ha F i na I ( &sha ) ; 

if  ( compa r e S H A resu L t s ( ha s h , 3)  < 0) 
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n n exi t (-1  ) ; 


n /*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  25's  */ 

n shalnitC&sha); 

n for  (i  = 0;  i < 40000;  i++) 

n □ shaUpdateC&sha,  (byte  *)"aaaaaaaaaaaaaaaaaaaaaaaaa",  25); 

n hash  = s h a F i na L ( & s h a ) ; 

n if  ( c ompa re S H A r e s u L t s ( h a s h , 4)  < 0) 

a a exit(-l); 


n /*  1,000,000  bytes  of  ASCII  'a'  (0x61),  by  125's  */ 

n shalnit(&sha); 

n for  (i=0;i  <8000;  i++) 

□ □ s h a U pda t e ( Ss h a , (byte  *)" a a a a a a a a a a a a a a a a a a a a a a a a a \ 

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ 
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",  125); 
n hash  = s h a F i n a L ( 8 s h a ) ; 

n if  ( c ompa r e S H A r e s u I t s ( h a s h , 5)  < 0) 

a a exit(-l); 


n /*  Now  perform  time  trial,  generating  MD  for  10MB  of  data.  First, 

n initialize  the  test  data  */ 

n memset(data,  0,  T E ST_B LO C K_ S I Z E ) ; 


□ 

/*  Get 

start  time  */ 

tt 

p r i n t f ( 

"SHA  time  trial. 

Processing 

%ld  characters. 

. . . \n",  TEST_BYTES); 

□ 

ticks  = 

clock(); 

□ 

/*  Calculate  SHA  message 

digest  in 

TEST_BLOCK_SIZE 

byte  blocks  */ 

n 

shalnit(8sha); 

n 

for  ( i 

= TEST_BL0CKS;  i 

> 0 ; i - - ) 

n 

□ 

s h a U p d a t e ( 8 s h a , 

data,  TEST_ 

BL0CK_SIZE); 

□ 

hash  = 

shaFinal(8sha); 

n /*  Get  finish  time  and  print  difference  */ 

n ticks  = clock()  - ticks; 

n printf(" Ticks  to  process  test  input:  %lu\n",  (unsigned  long)ticks); 

n return0; 

} 

#endif  /*  Test  driver  */ 
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/* 

* pgpSHA.h  --  NIST  Secure  Hhash  Algorithm 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpSHA.h, V 1.2  1996/12/19  20:26:35  mhw  Exp  $ 

*/ 

#ifndef  PGPSHA.H 
^define  PGPSHA.H 

^include  "pgpHash.h" 

#ifdef  ..cplusplus 
extern  "C"  { 

#e n d i f 

extern  struct  PgpHash  const  HashSHA; 

#ifdef  ..cplusplus 

> 

#e nd i f 

#endif  /*  IPGPSHA  H */ 
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helper/ 


src/lib/pgp/helper/ 


i 

I 

I 
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Makefile.in 


c 


OBJS=n  pgpAnno t a t e . o pg pBy t e F I F 0 . o pgpCharMap.o  pgpFIFO.o  pgpGLobaLs.o  \ 
n pg p Pa s s C a c h . o pg p P i p e F i L e . o pgpErr.o  pgpFiLe.o  pgpMemFiLe.o  pgpHsg.o  \ 

n pgpStr2Key.o  pg pT i me D a t e . o pg p F i I e F I F 0 . o pg p F I ex F I F 0 . o pgpMem.o  \ 

n pgpDebug.o  pgpLeaks.o  pgpFiLeNames.o  pgpFileRef.o 

SHAREDHDRS=  pgpFIFO.h  pg p Pa s s C a c h . h pgpFiLe.h  pgpStrZKey.h  pg pT i me  Da t e . h \ 
a pgpHem.h  pgpDebug.h  pgpLeaks.h  pgpTypes.h  pg p F i L e N a me s . h \ 

B pgpFileRef.h 

PRIVHDRS=  pg pBy t e F I F 0 . h pgpCharMap.h 
a L L : : DONE 


U 

# L i b /pgp/he L pe r /Ha ke f 1 L e . i n 

n 

tt  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

# $Id:  Hakef i Le . i n,v  1.28.2.4  1997/06/07  09:49:58  mhw  Exp  $ 
tt 
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makefile. msc 


U 

# I i b / pgp/ he L pe r /ma kef i L e . ms c 

# 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

# $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1997/06/07  09:49:59  mhw  Exp  $ 

n 

PGPLIB=n ..\..\pgpLib.Lib 

C F L AG S = -I . . \ \ \ i n c L ude  - 1 . . \ . . \ i n c L ud e \ 
n -I..\..\..  -DHAVE_C0NFIG_H=1  SCDEBUG) 

a L L : : n n Lib 

headers : n i nc  L 

!incLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

a n for  %f  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ i n c L ud e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( $(PRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L u d e 

D0S0BJSX  = n $ ( OB J S : . o= . o b j ) 

D0S0BJS=n  $( DOSOBJ SX : Uni x=Wi n32) 

Lib:n  $(D0S0BJS) 

. c . ob  j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 

c Lean  : 

n deL*.obj 

DONE  : 

n if  exist  ${PGPLIB)  L i b / ou t : $ ( PG P LI B ) $(PGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / o u t : $ ( PG P LI B ) $(D0S0BJS) 
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/* 

* pgpAnnotate.c  — convert  an  annotation  type  to  a string. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r L o r dSM I T . E D U> 

* 

* $Id:  pgpAnnotate . c,v  1.3. 2.1  1997/06/07  09:49:59  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
SincLude  "config.h" 

#end  i f 

#incLude  "pgpAnnotate. h" 

const  char  * 
pgpScopeName  (int  type) 

{ 

n if  ( ! PGP_IS_BEGIN_SCOPE  (type)) 

a n return  "Not  a Begin  Scope  type"; 


n 

switch  (type)  { 

□ 

case 

PGPANN_UNKNOWN_BEGIN: 

n 

B 

return  "Unknown"; 

n 

case 

PGPANN_LITERAL_BEGIN: 

n 

fl 

return  " Literal ";n 

n 

case 

PGPANN_CIPHER_BEGIN: 

n 

fl 

return  "Encrypted"; 

n 

case 

PGPANN_COMPRESSED_BEGIN: 

n 

fl 

return  "Compressed"; 

n 

case 

PGPANN_COMHENT_BEGIN: 

n 

B 

return  "Comment"; 

B 

case 

PGPANN_SIGNED_BEGIN: 

B 

fl 

return  "Signed"; 

B 

case 

PGPANN_NONPACKET_BEGIN: 

B 

B 

return  "Non"; 

fl 

case 

PGPANN_NONPGP_BEGIN: 

B 

B 

return  "Unprotected"; 

B 

case 

PGPANN_ARHOR_BEGIN: 

B 

B 

return  "Ascii  Armored"; 

B 

case 

PGPANN_CLEARSIG_BEGIN: 

B 

fl 

return  "CLearsigned"; 

B 

case 

PGPANN_PGPKEY_BEGIN: 

B 

fl 

return  "PGP  Key"; 

B 

case 

PGPANN_INPUT_BEGIN : 

B 

B 

return  "Input"; 

B 

case 

PGPANN_FILE_BEGIN: 

B 

B 

return  "File"; 

B 

default: 

B 

fl 

return  "HUH?  Weird  Packet 

B 

> 

} 
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pgpByteFIFO.c 


/* 


pgpByteFIFO.c  - an  i n f i n i t e L y-e xpa nda b L e FIFO  structure  for  bytes. 
Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 


* $Id:  pg pBy t e F I FO . c , V 1.3. 2.1  1997/06/07  09:49:59  mhw  Exp  $ 
*/ 

#ifdef  H AVE_C0N FIG_H 
#incLude  "config.h" 

# e nd i f 

#incLude  <stdio.h>n 


/*  For  BUFSIZ  */ 


#incLude  "pgpDebug.h" 
SincLude  "pgpByteFIFO.h" 
#incLude  "pgpMem.h" 
#incLude  "pgpUsuaLs.h" 


#if  (BUFSIZ  < 16384)  SS  (MACINTOSH  ||  WIN32) 
#define  kPG P F I F 0 Pa g e S i z e n 1 6384 

# e L s e 

#define  kPGP F I FOPag e S i z en  BUFSIZ 

ttend  i f 


struct  ByteFifoPage  { 
n struct  ByteFifoPage  *next; 

n byte  b u f C kPG P F I F 0 Pa g e S i z e- s i z e o f ( s t r u c t ByteFifoPage  *)3; 

>; 


struct 

Q 

□ 

c 

Q 

>; 


PgpFi f oContext  { 

struct  ByteFifoPage  *head,  *taiL; 
byte  *putp; 
byte  const  *getp; 
unsigned  pages; 


s t a t i c 

void 

by t e F i 

{ 

foInit(struct 

n 

f i f o->head 

a 

fifo->tai L 

n 

f i f o->putp 

n 

f i f o->getp 

n 

fi fo-> pages 

PgpFi f oContext  *fifo) 

0; 

0; 

0; 

0; 

= 0; 


void 

by t e F i f o F L u s h ( s t r u c t Pg p F i f oC on t e x t *fifo) 

{ 

n struct  ByteFifoPage  *page; 

n whiLe  ((page  = fifo->head)  !=  0)  { 

n n fifo->head  = page->next; 

n n mens e t ( pa g e , 0,  s i z e o f ( pa g e ) ) ; 

n n pg pMem F r e e ( pa g e ) ; 

n } 

n fifo->taiL=0; 

n fifo->putp=0; 
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n ■fifo->getp  = 0; 

n f i f o->pages  = 0; 

> 

unsigned  Long 

by t e F i f oS i ze ( s t rue t Pg p F i f o Con t e x t const  *fifo) 
{ 

n unsigned  long  space; 

n i f ( ! f i f o->pages  ) 


Q 

n 

return  0; 

n 

space 

= (fifo->putp  - fi 

f 0 

->ta i l->buf ) + 

Q 

n 

(fifo->head->buf 

+ 

s i z eof ( f i f o->head->bu f ) - fifo->getp); 

□ 

space 

+ = ( f i f o->pa g e s- 1 ) 

* 

si zeof ( f i fo->head->buf ) ; 

n 

return 

space  - sizeof(fi 

f o 

->head->buf); 

> 

struct  PgpFi f oContext  * 
byteFifoCreate(void) 

{ 

n struct  Pgp F i f oCon t ex t *fifo; 

n fifo  = (struct  Pg p F i f o C o n t e x t * ) pg pM em A L L o c ( s i z eo f C * f i f o ) ) ; 

n if(fifo) 

n n byteFifoInit(fifo); 

n return  fifo; 

> 

void 

by t e F i f oDes t roy ( s t r uc t Pg p F i f o C o n t e x t *fifo) 

{ 

n by t e F i f 0 F L u s h ( f i f o ) ; 

n pgpHemFree(fifo); 

> 


byte  * 

by t e F i f oGe t Spa ce ( s t rue t Pg p F i f o C on t ex t *fifo,  unsigned  *Len) 

{ 

n uns i gned  a va i L ; 

n struct  ByteFifoPage  *page; 


a 

a 

a 

a 

a 

a 

n 

□ 

D 

n 

n 

n 

n 

n 

D 

D 

n 

D 


if  ( f i f o->head ) { 
n pgpAssert(fifo->putp); 

n avail  = f i f o-> t a i L ->bu f + s i z eo f ( f i f o-> t a i L ->bu f ) - fifo->putp; 

n if(avaiL){ 

n n *Len=avaiL; 

n n return  fifo->putp; 

n > 

> 


page  = (struct  ByteFifoPage  *)pgpf1etiiALloc(sizeof(struct  ByteFifoPage)); 
if  (Ipage)  (n  /*  Out  of  memory  */ 
n *Len=0; 

n return0; 


} 


fifo->pages++; 
if  (fifo->head)  { 

n pgpAss e r t ( f i f o->page s > 1); 

n f i f o-> t a i L ->n e X t = page; 

} else  { 
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n n pg p A s s e r t ( f i f o->p a g e s ==  1); 

n n fifo->head  = page; 

n n fifo->getp  = page->buf; 

n > 

n fifo->tail  = page; 

n page->next  = 0; 

n *Len  = s i z eo f C f i f o->h ea d-> b u f ) ; 

n return  fifo->putp  = page->buf; 

} 

void 

by t e F i f oS k i pS pa c e ( s t r u c t Pg p F i f o C on t e x t *fifo,  unsigned  Len) 

{ 

n ifClLen) 

n n return; 

n 

a pg p A s s e r t ( f i f o->h e a d ) ; 

n pgpAssert(fifo->putp); 

n pg p A s s e r t ( L e n <=  ( u n s i g n ed ) C f i f o-> t a i L ->bu f + s i z e o f ( f i f o-> t a i I -> b u f ) 

B - f i f o->pu  t p ) ) ; 

B fifo->putp  +=  Len; 

} 

byte  const  * 

by t e F i f o Pe e k ( s t r u c t Pgp F i f oCont ext  *fifo,  unsigned  *Len) 

{ 

B if  ( ! f i f o->h e a d ) { 

B B *Len=0; 

B B return  0;b  /*  No  bytes  available  */ 

B > 

B pgp As se r t ( f i f o->ge t p ) ; 

B /*  Head  and  tail  on  same  page?  */ 

B if  (fifo->tail  ==  fifo->head) 

B B *Len  = fifo->putp  - fifo->getp; 

B else 

a B *Len  = f i f o-> h ea d->b u f + s i z e o f ( f i f o->h e a d-> bu f ) - fifo->getp; 

B return  *Len  ? fifo->getp  : 0; 

} 


void 

by t e F i f o S e e k ( s t r u c t Pg p F i f o C on t e x t *fifo,  unsigned  Len) 

{ 

B Struct  ByteFifoPage  *page; 

B ifCllen) 

a B return; 

B pg p A s s e r t ( f i f o-> h ea d ) ; 

B pgpAs se rt ( L en  <=  ( u n s i g n ed ) C f i f o-> h ea d->bu f + s i z eo f ( f i f o->h ea d->bu f ) 

B - f i f o->g  e t p ) ) ; 


B 

B 

B 

B 

B 

B 


if  (fifo->head  ==  fifo->taiL)  { 

B pg p A s s e r t ( f i f o-> pa g e s ==  1); 

B pg p A s s e r t ( f i f o-> h ea d-> n ex t ==  0); 

B pgpAssert ( Len  <=  ( un s i gned ) ( f i f o->pu t p - f i f o->g e t p ) ) ; 

B if  (Len  < ( u n s i g n e d ) ( f i f o->pu t p - fifo->getp))  < 

B B fifo->getp  +=  Len; 
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n 

n 

> else 

Q 

n 

n 

memse t ( f i f o->h ea d , 0,  s 

D 

n 

n 

pgpMemFree(fifo->head); 

n 

n 

n 

byteFifoInit(fifo); 

a 

n 

> 

□ 

n 

return; 

n pg p A s s e r t ( f i f o->pa g e s > 1); 

n if  (Len  < ( u n s i g n ed ) ( f i f o->h e a d->b u f + s i z eo f ( f i f o-> h e a d-> bu f ) 

n -fifo->getp)) 

n { 


□ 

a 

fifo->getp  +=  Len; 

ri 

> else 

{ 

□ 

a 

page  = fifo->head; 

n 

a 

fifo->head  = fifo->head->next; 

□ 

a 

pgpAssert(fifo->head); 

n 

a 

memsetCpage,  0,  sizeof(*page)); 

□ 

a 

pgpMemFreeCpage) ;n 

a 

a 

f i f o->pages--; 

a 

a 

pgpAssert ( fi fo->pages) ; 

a 

a 

fifo->getp  = f i f o->head->buf ; 

n > 

> 


si z e_t 

by t e F i f oW r i t e ( s t ru c t Pgp F i f o C on t e x t *fifo,  byte  const  *buf,  size_t  Len) 

< 


a 

unsigned  avaiL; 

a 

byte  * 

pt  r; 

a 

s i ze_t 

Len0  = Len; 

a 

whi  le 

(Len)  { 

a 

a 

ptr  = by t e F i f oG e t S pa c e ( f i f 0 , SavaiL); 

a 

a 

if  ( ! pt  r ) 

a 

a 

n return  Len0  - Len; 

a 

a 

if  (avaiL  > Len) 

a 

a 

n avaiL=Len; 

a 

a 

memc py ( p t r , buf,  avaiL); 

a 

a 

byteFifoSkipSpace(fifo,  avaiL); 

a 

a 

buf  +=  avaiL; 

a 

a 

Len  -=  avaiL; 

a 

> 

a 

return 

L e n 0 ; 

> 


si z e_  t 

by t e F i f oRead ( s t ru c t Pg p F i f o C on t ex t *fifo,  byte  *buf,  size_t  Len) 

{ 


a 

unsigned  ava 

i L; 

a 

byte  const  * 

ptr; 

a 

s i ze_t  L en0 

= Len; 

a 

whiLe  (Len) 

{ 

a 

n ptr 

= byteFifoPeek  (fifo,  SavaiL); 

a 

n i f ( 

! p t r ) 

a 

n n 

return  Len0  - Len; 
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13 

B 

if  (avail  > len) 

U 

B 

n avail=len; 

n 

B 

memcpy  (buf,  ptr,  avail); 

n 

B 

buf  +=  avail; 

Q 

B 

len  -=  avail; 

n 

B 

byteFifoSeek  (fifo,  avail); 

□ 

> 

n 

return 

1 e n 0 ; 

> 

Ui 

f UNITTEST 

/* 

Test  driver 

*/ 

#i 

ncLude  <stdi 

0 . h> 

static  void 

by t e F i f 0 Dump C s t r u c t Pg p F i f o C on t e x t *fifo) 

{ 

n 

byte  const  *ptr; 

n 

unsigned  avail; 

n 

while 

((ptr  = by t e F i f 0 Pe e k ( f i f 0 , Savail)) 

B 

B 

fwrite(ptr,  1,  avail,  stdout); 

B 

B 

byteFifoSeek(fifo,  avail); 

B 

} 

> 

i nt 

mainCint  argc,  char  **argv) 

{ 

n struct  Pg p F i f oCon t e X t fifo; 

n byteconstc=''; 

n inti,j; 


B 

by t e F i 

foInit(&fifo); 

B 

for  ( i 

= 1;  i < 

argc;  i++)  { 

B 

B 

for  ( j 

= 1;  j <=  i;  j++)  { 

B 

B 

Q 

byteFifoWrite(&fifo,  argvCjD,  strlen(argvCjT)); 

B 

B 

n 

if  ( i ! = j ) 

B 

B 

D 

n by t e F i f oW r i t e ( &f  i f 0,  &c,  1); 

B 

B 

} 

B 

B 

p r i n t f ( 

"argvC1..%d3  = (%lu)  \"",  i,  by t e F i f o S i z e ( 8 f i f o ) ) ; 

B 

B 

byteFifoDump(&fifo); 

B 

B 

put  s ( " \ 

„ „ ) ; 

B 

> 

B 

return 

0; 

> 

#e  nd i f 
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/* 

* pgpByteFIFO.h  --  A f i r s t - i n-f i r s t -o u t pipe  of  bytes. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpByte FI FO . h, V 1.2. 2.1  1997/06/07  09:50:00  mhw  Exp  $ 

*/ 

#ifndef  PGPBYTEFIFO.H 
#define  PGPBYTEFIFO.H 

#incLude  " pg pU s ua L s . h " 

#ifdef  ..cpLuspLus 
extern  "C"  { 

Send i f 

struct  Pgp F i f oCon t ex t ; 

struct  Pg p F i f oC on t ex t *by t e F i f o C r ea t e (void); 
void  byteFifoDestroy  (struct  PgpFifoContext  *fifo),- 

byte  *byteFifoGetSpace  (struct  PgpFifoContext  *fifo,  unsigned  *Len); 
void  by t e F i f oS k i p S pa c e (struct  PgpFifoContext  *fifo,  unsigned  Len); 

byte  const  *by t e F i f o Pe e k (struct  PgpFifoContext  *fifo,  unsigned  *Len); 
void  byteFifoSeek  (struct  PgpFifoContext  *fifo,  unsigned  Len); 

size.t  by t e F i f o W r i t e (struct  PgpFifoContext  *fifo,  byte  const  *buf, 
n n size.tLen); 

size.t  byteFifoRead  (struct  PgpFifoContext  *fifo,  byte  *buf,  size.t  Len); 
void  by t e F i f o F L u s h ( s t r u c t PgpFifoContext  *fifo); 

unsigned  Long  byteFifoSize  (struct  PgpFifoContext  const  *fifo); 

Sifdef  cpLuspLus 

> 

Sen  d i f 

Sendif  /*  PGPBYTEFIFO.H  */ 
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/* 

* pgpCharMap.c  --  Mapping  tables  between  different  character  sets. 

* 


* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  coLin  Plumb. 

★ 

* $Id:  p g p C h a r M a p . c , V 1.1. 2.1  1 997/06/07  09:50:00  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
Send  i f 


SincLude  <ctype.h> 


SincLude  "pgpCharMap.h 
SincLude  "pgpErr.h" 


/*  *INDENT-OFF*  */ 


unsi gned 

char 

const 

charMapIdentityC256!] 

= { 

0, 

1, 

2, 

3, 

4, 

5, 

6, 

7, 

8, 

9, 

10, 

11, 

12, 

13, 

14, 

1 5 

16, 

17, 

18, 

19, 

20, 

21, 

22, 

23, 

24, 

25, 

26, 

27, 

28, 

29, 

30, 

31 

32, 

33, 

34, 

35, 

36, 

37, 

38, 

39, 

40, 

41, 

42, 

43, 

44, 

45, 

46, 

47 

00 

N 

49, 

50, 

51, 

52, 

53, 

54, 

55, 

56, 

57, 

58, 

59, 

60, 

61, 

62, 

63 

64, 

65, 

66, 

67, 

68, 

69, 

70, 

71, 

72, 

73, 

74, 

75, 

76, 

77, 

78, 

79 

80, 

81, 

82, 

83, 

84, 

85, 

86, 

87, 

88, 

89, 

90, 

91, 

92, 

93, 

94, 

95 

96, 

97, 

98, 

99, 

1 00, 

101, 

102, 

103, 

1 04, 

105, 

106, 

107, 

1 08, 

109, 

110, 

1 1 1 

112, 

1 13, 

1 14, 

1 15, 

116, 

1 1 7, 

118, 

119, 

120, 

121, 

1 22, 

123, 

124, 

125, 

126, 

127 

128, 

1 29, 

130, 

131  , 

132, 

133, 

1 34, 

135, 

136, 

137, 

1 38, 

139, 

140, 

141  , 

142, 

143 

1 44, 

145, 

1 46, 

147, 

1 48, 

149, 

1 50, 

151, 

152, 

153, 

154, 

155, 

1 56, 

157, 

1 58, 

1 59 

160, 

161  , 

1 62, 

1 63, 

1 64, 

165, 

1 66, 

1 67, 

168, 

1 69, 

170, 

171  , 

172, 

173, 

174, 

1 75 

1 76, 

177, 

1 78, 

1 79, 

180, 

181  , 

182, 

1 83, 

1 84, 

185, 

186, 

187, 

188, 

189, 

190, 

191 

1 92, 

1 93, 

1 94, 

195, 

1 96, 

1 97, 

1 98, 

1 99, 

200, 

201  , 

202, 

203, 

204, 

205, 

206, 

207 

208, 

209, 

210, 

211, 

212, 

123, 

214, 

215, 

216, 

217, 

218, 

219, 

220, 

221  , 

222, 

223 

224, 

225, 

226, 

227, 

228, 

229, 

230, 

231, 

232, 

233, 

234, 

235, 

236, 

237, 

238, 

239 

240, 

241, 

242, 

243, 

244, 

245, 

246, 

247, 

248, 

249, 

250, 

251, 

252, 

253, 

254, 

255 

>; 

/*  *INDENT-0N*  */ 


/*  Conversion  table  from  'Latini'  charset  to  'cp850'  charset. 

* Generated  mechanically  by  GNU  recode  3.4. 

* 

* The  recoding  should  be  reversible. 

*/ 

static  unsigned  char  const  I a t i n 1 _ t o_ c p8 5 0 C 2 5 6 3 = 

{ 


0, 

1, 

2, 

3, 

4, 

5, 

6, 

7,n 

/* 

0 - 

7 

*/ 

8, 

9, 

10, 

11, 

12, 

13, 

14, 

1 5,n 

/* 

8 - 

1 5 

*/ 

16, 

17, 

18, 

19, 

20, 

21, 

22, 

23, a 

/* 

16  - 

23 

*/ 

24, 

25, 

26, 

27, 

28, 

29, 

30, 

31  , a 

/* 

24  - 

31 

*/ 

32, 

33, 

34, 

35, 

36, 

37, 

38, 

39, a 

/* 

32  - 

39 

*/ 

40, 

41, 

42, 

43, 

44, 

45, 

46, 

47, a 

/* 

40  - 

47 

*/ 

00 

s 

49, 

50, 

51, 

52, 

53, 

54, 

55, a 

/* 

48  - 

55 

*/ 

56, 

57, 

58, 

59, 

60, 

61, 

62, 

63, a 

/* 

56  - 

63 

*/ 

64, 

65, 

66, 

67, 

68, 

69, 

70, 

71, n 

/* 

64  - 

71 

*/ 

72, 

73, 

74, 

75, 

76, 

77, 

78, 

79, a 

/* 

72  - 

79 

*/ 

C[CHK:63fb215233353399b0074e6539e670d3bef1b96aae57913b19118b22a1164c3bc]: 
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80, 

81, 

00 

rv> 

s 

83, 

84, 

85, 

86, 

87, n 

/* 

80 

- 

87 

*/ 

S 

00 

00 

89, 

90, 

91, 

92, 

93, 

94, 

95, n 

/* 

88 

- 

95 

*/ 

96, 

97, 

98, 

99, 

100, 

101  , 

102, 

1 03,h 

/* 

96 

- 

1 03 

*/ 

104, 

105, 

106, 

107, 

108, 

1 09, 

1 10, 

1 1 1 ,n 

/* 

104 

- 

1 1 1 

*/ 

112, 

113, 

1 14, 

115, 

1 16, 

1 17, 

1 18, 

1 1 9,n 

/* 

1 1 2 

- 

1 1 9 

*/ 

120, 

121, 

122, 

123, 

124, 

125, 

126, 

1 27, n 

/* 

120 

- 

127 

*/ 

195, 

1 79, 

218, 

200, 

1 86, 

203, 

213, 

204, n 

/* 

1 28 

- 

135 

*/ 

219, 

217, 

254, 

1 80, 

238, 

1 78, 

1 96, 

1 97, n 

/* 

136 

- 

1 43 

*/ 

201  , 

230, 

202, 

1 94, 

247, 

242, 

185, 

191  ,n 

/* 

1 44 

- 

151 

*/ 

223, 

205, 

220, 

1 76, 

250, 

177, 

206, 

1 59, n 

/* 

152 

- 

159 

*/ 

255, 

173, 

1 89, 

1 56, 

207, 

1 90, 

221  , 

245, n 

/* 

160 

- 

1 67 

*/ 

249, 

184, 

1 66, 

174, 

170, 

240, 

169, 

1 87, n 

/* 

1 68 

- 

175 

*/ 

248, 

241, 

253, 

252, 

239, 

1 93, 

244, 

1 92,n 

/* 

1 76 

- 

1 83 

*/ 

1 88, 

251, 

1 67, 

175, 

172, 

171  , 

243, 

1 68, n 

/* 

184 

- 

191 

*/ 

1 83, 

181  , 

182, 

1 99, 

142, 

143, 

1 46, 

1 28,n 

/* 

192 

- 

1 99 

*/ 

212, 

1 44, 

210, 

211, 

222, 

214, 

215, 

21  6, n 

/* 

200 

- 

207 

*/ 

209, 

165, 

227, 

224, 

226, 

229, 

153, 

1 58, n 

/* 

208 

- 

215 

*/ 

157, 

235, 

233, 

234, 

154, 

237, 

231, 

225, n 

/* 

216 

- 

223 

*/ 

133, 

160, 

131, 

1 98, 

132, 

134, 

145, 

1 35,n 

/* 

224 

- 

231 

*/ 

138, 

130, 

1 36, 

137, 

141  , 

161, 

1 40, 

1 39, n 

/* 

232 

- 

239 

*/ 

208, 

1 64, 

1 49, 

1 62, 

147, 

228, 

1 48, 

246, n 

/* 

240 

- 

247 

*/ 

155, 

>; 

151, 

1 63, 

1 50, 

1 29, 

236, 

232, 

1 52n 

/* 

248 

— 

255 

*/ 

/*  Conversion 

table 

from 

' cp850  ' 

charset  to  ' 

1 a t i n 1 

' charset. 

* Generated  mechanically  by  GNU  recode  3.4. 

* 

* The  recoding  should  be  reversible. 

*/ 

static  unsigned  char  const  c p8 5 0_ t o_  I a t i n 1 C 2 5 6 ] = 
{ 


0, 

1, 

2, 

3, 

4, 

5, 

6, 

7,n 

/* 

0 

- 

7 

*/ 

8, 

9, 

10, 

11, 

12, 

13, 

14, 

15, n 

/* 

8 

- 

1 5 

*/ 

16, 

17, 

18, 

19, 

20, 

21, 

22, 

23, n 

/* 

1 6 

- 

23 

*/ 

24, 

25, 

26, 

27, 

28, 

29, 

30, 

31,° 

/* 

24 

- 

31 

*/ 

32, 

33, 

34, 

35, 

36, 

37, 

38, 

39, n 

/* 

32 

- 

39 

*/ 

40, 

41, 

42, 

43, 

44, 

45, 

46, 

47, n 

/* 

40 

- 

47 

*/ 

48, 

49, 

50, 

51, 

52, 

53, 

54, 

55,° 

/* 

48 

- 

55 

*/ 

56, 

57, 

58, 

59, 

60, 

61, 

62, 

63,° 

/* 

56 

- 

63 

*/ 

64, 

65, 

66, 

67, 

68, 

69, 

70, 

71,° 

/* 

64 

- 

71 

*/ 

72, 

73, 

74, 

75, 

76, 

77, 

78, 

79, n 

/* 

72 

- 

79 

*/ 

80, 

81, 

82, 

83, 

84, 

85, 

86, 

87, n 

/* 

80 

- 

87 

*/ 

S 

00 

00 

89, 

90, 

91, 

92, 

93, 

94, 

95,° 

/* 

88 

- 

95 

*/ 

96, 

97, 

98, 

99, 

1 00, 

101, 

102, 

103,° 

/* 

96 

- 

103 

*/ 

1 04, 

105, 

106, 

107, 

108, 

109, 

110, 

1 1 1 ,n 

/* 

104 

- 

1 1 1 

*/ 

112, 

113, 

1 1 4, 

115, 

116, 

1 17, 

118, 

1 1 9,n 

/* 

112 

- 

1 1 9 

*/ 

120, 

121, 

122, 

123, 

124, 

125, 

126, 

127,° 

/* 

120 

- 

127 

*/ 

1 99, 

252, 

233, 

226, 

228, 

224, 

229, 

231  ,° 

/* 

128 

- 

135 

*/ 

234, 

235, 

232, 

239, 

238, 

236, 

1 96, 

1 97,n 

/* 

136 

- 

143 

*/ 

201, 

230, 

198, 

244, 

246, 

242, 

251, 

249, n 

/* 

144 

- 

151 

*/ 

255, 

214, 

220, 

248, 

1 63, 

216, 

215, 

1 59, n 

/* 

152 

- 

1 59 

*/ 

225, 

237, 

243, 

250, 

241, 

209, 

1 70, 

186,° 

/* 

160 

- 

1 67 

*/ 

191, 

174, 

172, 

189, 

188, 

161, 

171, 

187,° 

/* 

168 

- 

175 

*/ 

155, 

157, 

141  , 

1 29, 

139, 

1 93, 

1 94, 

192, n 

/* 

1 76 

- 

1 83 

*/ 

1 69, 

1 50, 

132, 

175, 

1 84, 

162, 

165, 

1 51  ,n 

/* 

1 84 

- 

191 

*/ 

1 83, 

181  , 

147, 

128, 

142, 

143, 

227, 

195, n 

/* 

192 

- 

199 

*/ 

131, 

1 44, 

1 46, 

133, 

135, 

153, 

1 58, 

1 64, n 

/* 

200 

- 

207 

*/ 

240, 

208, 

202, 

203, 

200, 

134, 

205, 

206,° 

/* 

208 

- 

215 

*/ 

CCCHK:a03b6e745bb2b4ff0148ac2241415c016fd002d2b4d8aafdd9b3b85e126419f17:: 
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207, 

137, 

1 30, 

1 36, 

154, 

166, 

204, 

1 52,n 

/* 

216 

- 

223 

*/ 

211, 

223, 

212, 

210, 

245, 

213, 

145, 

222, n 

/* 

224 

- 

231 

*/ 

254, 

218, 

219, 

217, 

253, 

221  , 

1 40, 

1 80, n 

/* 

232 

- 

239 

*/ 

173, 

177, 

1 49, 

190, 

182, 

167, 

247, 

1 48, n 

/* 

240 

- 

247 

*/ 

1 76, 

>; 

1 68, 

156, 

185, 

1 79, 

178, 

1 38, 

1 60n 

/* 

248 

255 

*/ 

/*  Conversion 

t a b 1 

e from  'lat 

ini' 

charset  to 

' ebcdi 

c ' 

charset . 

Generated 

mechanically  by 

GNU 

recode 

3.4. 

The  recoding  should 

*/ 

be  reversi 

b 1 e . 

static  unsigned  char  const  latini 

_ t o_ e b c d i c C 2 5 6 3 = 

0, 

K 

2, 

3, 

55, 

45, 

46, 

47, n 

/* 

0 

- 

7 

*/ 

22, 

5, 

37, 

11, 

12, 

13, 

14, 

1 5,n 

/* 

8 

- 

15 

*/ 

16, 

17, 

18, 

19, 

60, 

61, 

50, 

38, n 

/* 

16 

- 

23 

*/ 

24, 

25, 

63, 

39, 

28, 

29, 

30, 

31  ,n 

/* 

24 

- 

31 

*/ 

64, 

79, 

127, 

123, 

91, 

108, 

80, 

1 25,n 

/* 

32 

- 

39 

*/ 

77, 

93, 

92, 

78, 

107, 

96, 

75, 

97, n 

/* 

40 

- 

47 

*/ 

240, 

241, 

242, 

243, 

244, 

245, 

246, 

247, n 

/* 

48 

- 

55 

*/ 

248, 

249, 

122, 

94, 

76, 

126, 

110, 

1 1 1 ,n 

/* 

56 

- 

63 

*/ 

124, 

193, 

1 94, 

195, 

1 96, 

1 97, 

1 98, 

1 99, n 

/* 

64 

- 

71 

*/ 

200, 

201  , 

209, 

210, 

211, 

212, 

213, 

21  4, n 

/* 

72 

- 

79 

*/ 

215, 

216, 

217, 

226, 

227, 

228, 

229, 

230, n 

/* 

80 

- 

87 

*/ 

231, 

232, 

233, 

74, 

224, 

90, 

95, 

109, n 

/* 

88 

- 

95 

*/ 

121, 

1 29, 

1 30, 

131, 

132, 

1 33, 

1 34, 

135, n 

/* 

96 

- 

103 

*/ 

136, 

137, 

145, 

1 46, 

147, 

1 48, 

1 49, 

1 50, n 

/* 

1 04 

- 

1 1 1 

*/ 

151, 

152, 

153, 

1 62, 

1 63, 

1 64, 

165, 

1 66, n 

/* 

1 1 2 

- 

1 1 9 

*/ 

1 67, 

168, 

1 69, 

1 92, 

1 06, 

208, 

161  , 

7,n 

/* 

120 

- 

127 

*/ 

32, 

33, 

34, 

35, 

36, 

21, 

6, 

23, n 

/* 

128 

- 

135 

*/ 

40, 

41, 

42, 

43, 

44, 

9, 

10, 

27, n 

/* 

1 36 

- 

143 

*/ 

48, 

49, 

26, 

51, 

52, 

53, 

54, 

8,n 

/* 

1 44 

- 

151 

*/ 

56, 

57, 

58, 

59, 

4, 

20, 

62, 

225, n 

/* 

152 

- 

159 

*/ 

65, 

66, 

67, 

68, 

69, 

70, 

71, 

72, n 

/* 

1 60 

- 

167 

*/ 

73, 

81, 

82, 

83, 

84, 

85, 

86, 

87, a 

/* 

1 68 

- 

175 

*/ 

00 

00 

s 

89, 

98, 

99, 

1 00, 

101, 

102, 

1 03,  a 

/* 

1 76 

- 

183 

*/ 

1 04, 

105, 

1 12, 

113, 

114, 

115, 

116, 

1 1 7,a 

/* 

1 84 

- 

191 

*/ 

1 18, 

119, 

120, 

1 28, 

1 38, 

1 39, 

140, 

141  , a 

/* 

1 92 

- 

199 

*/ 

142, 

143, 

1 44, 

154, 

155, 

156, 

157, 

1 58, a 

/* 

200 

- 

207 

*/ 

1 59, 

160, 

170, 

1 71  , 

172, 

173, 

174, 

175, a 

/* 

208 

- 

215 

*/ 

1 76, 

177, 

178, 

1 79, 

180, 

181  , 

182, 

1 83, a 

/* 

216 

- 

223 

*/ 

1 84, 

185, 

186, 

1 87, 

188, 

1 89, 

190, 

1 91  ,a 

/* 

224 

- 

231 

*/ 

202, 

203, 

204, 

205, 

206, 

207, 

218, 

21  9, a 

/* 

232 

- 

239 

*/ 

220, 

221, 

222, 

223, 

234, 

235, 

236, 

237, a 

/* 

240 

- 

247 

*/ 

238, 

239, 

250, 

251, 

252, 

253, 

254, 

255, a 

/* 

248 

- 

255 

*/ 

>; 


/*  Conversion  table  from  'ebcdic'  charset  to  'Latini'  charset. 
Generated  mechanically  by  GNU  recode  3.4. 


The  recoding  should  be  reversible. 

*/ 


static  unsigned  char  const  ebcd i c_t o_ I a t i n1 C 2 563  = 
{ 


0,  1,  2,  3,  156,  9,  134,  127, n /*  0 - 7 */ 

i:[;CHK:37f0c996224bb8781  7aa923cef93a908eacde45ed4f81d2112dd1  994a97d64252:: 
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151, 

141, 

142, 

11, 

12, 

13, 

14, 

15, n 

/* 

8 

- 

1 5 

*/ 

16, 

17, 

18, 

19, 

157, 

133, 

8, 

135, n 

/* 

1 6 

- 

23 

*/ 

24, 

25, 

146, 

143, 

28, 

29, 

30, 

31  ,n 

/* 

24 

- 

31 

*/ 

128, 

129, 

130, 

131, 

132, 

10, 

23, 

27, n 

/* 

32 

- 

39 

*/ 

1 36, 

137, 

138, 

139, 

1 40, 

5, 

6, 

7,° 

/* 

40 

- 

47 

*/ 

1 44, 

145, 

22, 

147, 

148, 

149, 

1 50, 

4,n 

/* 

48 

- 

55 

*/ 

152, 

153, 

154, 

155, 

20, 

21, 

1 58, 

26, n 

/* 

56 

- 

63 

*/ 

32, 

160, 

161, 

162, 

1 63, 

1 64, 

165, 

166, n 

/* 

64 

- 

71 

*/ 

1 67, 

168, 

91, 

46, 

60, 

40, 

43, 

33, n 

/* 

72 

- 

79 

*/ 

38, 

169, 

170, 

1 71  , 

172, 

173, 

174, 

1 75,n 

/* 

80 

- 

87 

*/ 

176, 

177, 

93, 

36, 

42, 

41, 

59, 

94, n 

/* 

88 

- 

95 

*/ 

45, 

47, 

178, 

179, 

1 80, 

181  , 

182, 

1 83, n 

/* 

96 

- 

1 03 

*/ 

00 

s 

185, 

124, 

44, 

37, 

95, 

62, 

63, n 

/* 

104 

- 

1 1 1 

*/ 

1 86, 

187, 

188, 

189, 

1 90, 

191  , 

1 92, 

1 93, a 

/* 

1 1 2 

- 

1 1 9 

*/ 

194, 

96, 

58, 

35, 

64, 

39, 

61, 

34, a 

/* 

120 

- 

127 

*/ 

195, 

97, 

98, 

99, 

1 00, 

101, 

102, 

1 03, a 

/* 

128 

- 

135 

*/ 

104, 

105, 

1 96, 

1 97, 

198, 

1 99, 

200, 

201  , a 

/* 

136 

- 

143 

*/ 

202, 

106, 

107, 

108, 

109, 

1 10, 

111, 

1 1 2, a 

/* 

1 44 

- 

151 

*/ 

113, 

114, 

203, 

204, 

205, 

206, 

207, 

208, a 

/* 

152 

- 

1 59 

*/ 

209, 

1 26, 

115, 

116, 

1 17, 

1 18, 

119, 

1 20, a 

/* 

1 60 

- 

1 67 

*/ 

121, 

122, 

210, 

211, 

212, 

213, 

214, 

21  5, a 

/* 

168 

- 

175 

*/ 

216, 

217, 

218, 

219, 

220, 

221  , 

222, 

223, a 

/* 

176 

- 

1 83 

*/ 

224, 

225, 

226, 

227, 

228, 

229, 

230, 

231  , a 

/* 

1 84 

- 

191 

*/ 

123, 

65, 

66, 

67, 

68, 

69, 

70, 

71  , a 

/* 

1 92 

- 

1 99 

*/ 

72, 

73, 

232, 

233, 

234, 

235, 

236, 

237, a 

/* 

200 

- 

207 

*/ 

125, 

74, 

75, 

76, 

77, 

78, 

79, 

80, a 

/* 

208 

- 

215 

*/ 

81, 

82, 

238, 

239, 

240, 

241, 

242, 

243, a 

/* 

216 

- 

223 

*/ 

92, 

1 59, 

83, 

84, 

85, 

86, 

87, 

88, a 

/* 

224 

- 

231 

*/ 

89, 

90, 

244, 

245, 

246, 

247, 

248, 

249, a 

/* 

232 

- 

239 

*/ 

S 

00 

49, 

50, 

51, 

52, 

53, 

54, 

55, a 

/* 

240 

- 

247 

*/ 

56, 

57, 

250, 

251, 

252, 

253, 

254, 

255, a 

/* 

248 

- 

255 

*/ 

/*  Crude,  non-invertibLe  accent-dropping  mapping  from  Latini  to  Ascii  */ 
static  unsigned  char  const  I a t i n 1 _ t o_a s c i i C 2 56 D = 

{ 


0, 

K 

2, 

3, 

4, 

5, 

6, 

7, a 

/* 

0 

- 

7 

*/ 

8, 

9, 

10, 

11, 

12, 

13, 

14, 

15, a 

/* 

8 

- 

1 5 

*/ 

16, 

17, 

18, 

19, 

20, 

21, 

22, 

23, a 

/* 

16 

- 

23 

*/ 

24, 

25, 

26, 

27, 

28, 

29, 

30, 

31  , a 

/* 

24 

- 

31 

*/ 

32, 

33, 

34, 

35, 

36, 

37, 

38, 

39, a 

/* 

32 

- 

39 

*/ 

40, 

A1, 

42, 

43, 

44, 

45, 

46, 

47, a 

/* 

40 

- 

47 

*/ 

00 

49, 

50, 

51, 

52, 

53, 

54, 

55, a 

/* 

48 

- 

55 

*/ 

56, 

57, 

58, 

59, 

60, 

61, 

62, 

63, a 

/* 

56 

- 

63 

*/ 

64, 

65, 

66, 

67, 

68, 

69, 

70, 

71  , a 

/* 

64 

- 

71 

*/ 

72, 

73, 

74, 

75, 

76, 

77, 

78, 

79, a 

/* 

72 

- 

79 

*/ 

00 

s 

81, 

82, 

83, 

84, 

85, 

86, 

87, a 

/* 

80 

- 

87 

*/ 

00 

00 

\ 

89, 

90, 

91, 

92, 

93, 

94, 

95, a 

/* 

88 

- 

95 

*/ 

96, 

97, 

98, 

99, 

100, 

101, 

102, 

1 03, a 

/* 

96 

- 

1 03 

*/ 

104, 

105, 

1 06, 

1 07, 

108, 

109, 

110, 

1 1 1 ,a 

/* 

104 

- 

1 1 1 

*/ 

112, 

1 1 3, 

114, 

115, 

116, 

1 17, 

118, 

1 1 9,a 

/* 

1 1 2 

- 

1 1 9 

*/ 

120, 

* 

121, 

122, 

123, 

124, 

125, 

126, 

1 27,a 

/* 

1 20 

- 

1 27 

*/ 

* The  high  128  characters: 

★ 

* / 

dec 

0 c t 

hex 

c h 

ISO 

_8859 

-1 : 1 987 

0,  /* 

1 28 

200 

80 

PA 

pa  d d i ng 

character 

(pad) 

*/ 

» 0 * / ★ 

■ r • 

1 29 

201 

81 

HO 

high  octet  preset 

( hop ) 

*/ 
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i 7 

1 

/ 

/* 

130 

202 

82 

BH 

break  permitted  here  (bph)  */ 

1 7 

1 

/ 

/* 

131 

203 

83 

NH 

no  break  here  (nbh)  */ 

1 7 

1 

r 

/* 

132 

204 

84 

IN 

index  Cind)  */ 

1 9 1 

1 

/ 

/* 

1 33 

205 

85 

NL 

next  Line  (net)  */ 

1 9 1 

1 

/* 

1 34 

206 

86 

SA 

start  of  selected  area  (ssa)  */ 

1 9 1 

f 

/* 

135 

207 

87 

ES 

end  of  selected  area  (esa)  */ 

1 9 1 

f 

/* 

1 36 

210 

88 

HS 

character  tabulation  set  (hts)  */ 

1 9 1 

1 

f 

/* 

1 37 

211 

89 

H J 

character  tabulation  with  justification  (htj)  */ 

1 9 1 

/* 

1 38 

212 

8a 

VS 

Line  tabulation  set  (vts)  */ 

1 9 1 

1 

/ 

/* 

1 39 

213 

8b 

PD 

partial  Line  forward  (pld)  */ 

1 9 1 

1 

r 

/* 

140 

214 

8c 

PU 

partial  Line  backward  (pLu)  */ 

1 9 1 

r 

/ 

/* 

141 

215 

8d 

RI 

reverse  line  feed  Cri)  */ 

1 9 1 

1 

f 

/* 

142 

216 

8e 

S2 

single-shift  two  (ss2)  */ 

1 9 1 

\ 

f 

/* 

1 43 

217 

8f 

S3 

single-shift  three  (ss3)  */ 

1 9 1 

1 

/ 

/* 

144 

220 

90 

DC 

device  control  string  (dcs)  */ 

1 9 1 

t 

r 

/* 

145 

221 

91 

PI 

private  use  one  (pul)  */ 

1 9 1 

t 

/ 

/* 

1 46 

222 

92 

P2 

private  use  two  (pu2)  */ 

1 9 1 

t 

r 

/* 

1 47 

223 

93 

TS 

set  transmit  state  (sts)  */ 

I 9 1 

t 

/ 

/* 

1 48 

224 

94 

CC 

cancel  character  Ccch)  */ 

1 9 1 

t 

/ 

/* 

1 49 

225 

95 

MW 

message  waiting  (mw)  */ 

1 9 1 

t 

/ 

/* 

1 50 

226 

96 

SG 

start  of  guarded  area  (spa)  */ 

1 9 1 

r 

/* 

151 

227 

97 

EG 

end  of  guarded  area  (epa)  */ 

1 9 1 

1 

/ 

/* 

1 52 

230 

98 

SS 

start  of  string  (sos)  */ 

1 9 1 

1 

r 

/* 

1 53 

231 

99 

GC 

single  graphic  character  introducer  (sgci)  */ 

1 9 1 

1 

/ 

/* 

1 54 

232 

9a 

SC 

single  character  introducer  (sci)  */ 

1 9 1 

1 

/ 

/* 

1 55 

233 

9b 

Cl 

control  sequence  introducer  (csi)  */ 

1 9 1 

1 

/ 

/* 

1 56 

234 

9c 

ST 

string  terminator  (st)  */ 

1 9 1 

1 

/ 

/* 

157 

235 

9d 

oc 

operating  system  command  (osc)  */ 

1 9 1 

1 

/ 

/* 

158 

236 

9e 

PM 

privacy  message  (pm)  */ 

I 9 1 

1 

/ 

/* 

1 59 

237 

9f 

AC 

application  program  command  (ape)  */ 

1 1 

1 

/ 

/* 

160 

240 

a0 

NS 

no-break  space  */ 

1 1 ■ 

1 

/ 

/* 

161 

241 

a1 

! I 

inverted  exclamation  mark  */ 

' c ' 

1 

r 

/* 

162 

242 

a 2 

Ct 

cent  sign  */ 

' # ' 

1 

/ 

/* 

1 63 

243 

a3 

Pd 

pound  sign  */ 

' $ ' 

1 

f 

/* 

1 64 

244 

a 4 

Cu 

currency  sign  */ 

. Y 1 

I 

/ 

/* 

165 

245 

a 5 

Ye 

yen  sign  */ 

' 1 ' 

r 

/* 

1 66 

246 

a 6 

BB 

broken  bar  */ 

' S ' 

/* 

1 67 

247 

a7 

SE 

section  sign  */ 

1 tt  1 

/* 

1 68 

250 

a8 

1 . 

diaeresis  */ 

' C ' 

1 

/ 

/* 

1 69 

251 

a9 

Co 

copyright  sign  */ 

' a ' 

f 

/* 

1 70 

252 

a a 

-a 

feminine  ordinal  indicator  */ 

' < ' 

/ 

/* 

171 

253 

a b 

<< 

L e f t -po i n t i n g double  angle  quotation  mark  */ 

I ~ 1 

1 

r 

/* 

172 

254 

a c 

NO 

not  sign  */ 

1 ^ 1 

1 

/* 

1 73 

255 

a d 

-- 

soft  hyphen  */ 

' R ' 

1 

/ 

/* 

1 74 

256 

a e 

Rg 

registered  sign  */ 

1 1 

1 

/ 

/* 

175 

257 

a f 

1 _ 

overline  */ 

* 0 ' 

1 

/ 

/* 

1 76 

260 

b0 

DG 

degree  sign  */ 

1 9 1 

1 

/ 

/* 

1 77 

261 

b1 

+ - 

plus-minus  sign  */ 

' 2 ' 

1 

r 

/* 

1 78 

262 

b2 

2S 

superscript  two  */ 

'3' 

1 

r 

/* 

1 79 

263 

b3 

3S 

superscript  three  */ 

1 

/ 

/* 

1 80 

264 

b4 

1 1 

acute  accent  */ 

' u ' 

1 

/ 

/* 

181 

265 

b5 

My 

micro  sign  */ 

■ p 1 

1 

f 

/* 

182 

266 

b6 

PI 

pilcrow  sign  */ 

1 1 

1 

/ 

/* 

1 83 

267 

b7 

. M 

middle  dot  */ 

1 1 

1 

/ 

/* 

1 84 

270 

b8 

1 

r 

cedilla  */ 

I T , 

1 

/ 

/* 

185 

271 

b9 

1 S 

superscript  one  */ 

' 0 ' 

1 

r 

/* 

1 86 

272 

ba 

“0 

masculine  ordinal  indicator  */ 

' > ' 

/ 

/* 

1 87 

273 

bb 

>> 

r i g h t - po i n t i n g double  angle  quotation  mark  */ 
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? 

1 

r 

/* 

1 88 

274 

be 

1 4 

V u L g a 

r f r a c t i 

on  one 

quarter 

*/ 

? 

1 

r 

/* 

189 

275 

bd 

12 

vu  L ga 

r f r a c t i 

on  one 

haLf  */ 

9 

1 

/ 

/* 

1 90 

276 

be 

34 

V u L g a 

r f r a c t i 

on  three 

quarters  */ 

9 

1 

✓ 

/* 

191 

277 

bf 

?I 

inverted  question  mark 

*/ 

A 

1 

/ 

/* 

192 

300 

C0 

A ! 

Latin 

capi ta  L 

Letter 

a 

with 

grave  * / 

A 

1 

/ 

/* 

1 93 

301 

cl 

A ' 

Latin 

c a p i t a L 

Letter 

a 

with 

acute  * / 

A 

1 

/ 

/* 

1 94 

302 

c2 

A> 

Latin 

c a p i t a L 

Letter 

a 

with 

circumfLex  */ 

A 

1 

/* 

195 

303 

c3 

A? 

Latin 

capi ta  L 

Letter 

a 

with 

t i L d e * / 

A ’ 

1 

r 

/* 

1 96 

304 

c 4 

A : 

Latin 

c a p i t a L 

Letter 

a 

with 

diaeresis  */ 

A ' 

r 

/ 

/* 

1 97 

305 

c 5 

AA 

Latin 

capi ta  L 

Letter 

a 

with 

ring  above  */ 

E ' 

/* 

198 

306 

c 6 

AE 

Latin 

c a p i t a L 

Letter 

a e * / 

C ' 

1 

/ 

/* 

199 

307 

c7 

c. 

Latin 

c a p i t a L 

Letter 

c 

with 

cediLLa  */ 

E ' 

1 

/ 

/* 

200 

310 

c8 

E ! 

Latin 

c a p i t a L 

Letter 

e 

with 

grave  * / 

E ' 

1 

/ 

/* 

201 

311 

c9 

E ' 

Latin 

c a p i t a L 

Letter 

e 

with 

acute  */ 

E ' 

/ 

/* 

202 

312 

c a 

E> 

Latin 

c a p i t a L 

Letter 

e 

with 

circumfLex  */ 

E ' 

r 

/* 

203 

313 

cb 

E : 

Latin 

c a p i t a L 

Letter 

e 

with 

di aeresi s */ 

I ' 

1 

r 

/* 

204 

314 

c c 

I ! 

Latin 

capi ta  L 

Letter 

i 

with 

grave  * / 

I ' 

1 

/* 

205 

31  5 

c d 

I ' 

Latin 

c a p i t a L 

Letter 

i 

with 

acute  * / 

I ' 

\ 

f 

/* 

206 

31  6 

ce 

I> 

Latin 

c a p i t a L 

Letter 

i 

with 

ci rcumf  Lex  */ 

I ' 

I 

/* 

207 

317 

c f 

I : 

Latin 

c a p i t a L 

Letter 

i 

with 

diaeresis  */ 

D ' 

f 

/* 

208 

320 

d0 

D- 

Latin 

c a p i t a L 

Letter 

eth  (iceLandic)  */ 

N ' 

/ 

/* 

209 

321 

d1 

N? 

Latin 

capi ta  L 

Letter 

n 

with 

t i Lde  */ 

0 ' 

/ 

/* 

210 

322 

d2 

0 ! 

Latin 

c a p i t a L 

Letter 

0 

with 

grave  */ 

0 ■ 

/ 

/* 

211 

323 

d3 

0 ' 

Latin 

capi ta  L 

Letter 

o 

with 

acute  * / 

0 ■ 

/* 

212 

324 

d4 

0> 

Latin 

c a p i t a L 

Letter 

o 

with 

c i r c umf  Lex  * / 

O' 

/* 

213 

325 

d5 

0? 

Latin 

capi ta  L 

Letter 

0 

with 

t i L d e * / 

0 ' 

/* 

214 

326 

d6 

0: 

Latin 

ca p i t a L 

Letter 

0 

with 

diaeresis  */ 

X ' 

/ 

/* 

215 

327 

d7 

*X 

mu L t i p L i ca t i on  sign  ' 

*/ 

0 ' 

f 

/* 

216 

330 

d8 

0/ 

Latin 

capi ta  L 

Letter 

0 

with 

stroke  */ 

U ' 

/ 

/* 

217 

331 

d9 

U ! 

Latin 

c a p i t a L 

Letter 

u 

with 

grave  * / 

U ' 

r 

/* 

218 

332 

d a 

u ■ 

Latin 

capi ta  L 

Letter 

u 

with 

acute  * / 

U ' 

f 

/* 

219 

333 

db 

U> 

Latin 

c a p i t a L 

Letter 

u 

with 

circumfLex  */ 

U ’ 

/* 

220 

334 

d c 

U : 

Latin 

capi ta  L 

Letter 

u 

with 

di  aeresi s */ 

Y ' 

/ 

/* 

221 

335 

dd 

Y' 

Latin 

c a p i t a L 

Letter 

y 

with 

acute  */ 

T ' 

f 

/* 

222 

336 

d e 

TH 

Latin 

c a p i t a L 

Letter 

thorn  1 

CiceLandic)  */ 

s 

1 

/ 

/* 

223 

337 

df 

s s 

Latin 

sma  L L 

Letter 

sharp 

s (german) 

a 

1 

/ 

/* 

224 

340 

e0 

a ! 

Latin 

sma  L L 

Letter 

a 

with 

grave  */ 

a 

1 

/* 

225 

341 

el 

a * 

Latin 

sma  L L 

Letter 

a 

with 

acute  * / 

a ' 

1 

/* 

226 

342 

e2 

a> 

Latin 

sma  L L 

Letter 

a 

with 

ci rcumf  Lex 

a ' 

1 

r 

/* 

227 

343 

e3 

a? 

Latin 

sma  L L 

Letter 

a 

with 

t i L d e * / 

a ' 

1 

/ 

/* 

228 

344 

e4 

a : 

Latin 

s ma  L L 

Letter 

a 

with 

diaeresis 

a ' 

1 

f 

/* 

229 

345 

e 5 

a a 

Latin 

s ma  L L 

Letter 

3 

with 

ring  above 

e ' 

t 

/ 

/* 

230 

346 

e6 

a e 

Latin 

sma  L L 

Letter 

a e 

1 */ 

e ' 

t 

/ 

/* 

231 

347 

e7 

c. 

Latin 

sma  L L 

Letter 

c 

with 

cediLLa  */ 

e' 

t 

/ 

/* 

232 

350 

e8 

e ! 

Latin 

sma  L L 

Letter 

e 

with 

grave  * / 

e ' 

r 

/* 

233 

351 

e9 

e * 

Latin 

sma  L L 

Letter 

e 

with 

acute  */ 

e ' 

t 

r 

/* 

234 

352 

ea 

e> 

Latin 

sma  L L 

Letter 

e 

with 

circumfLex 

e ' 

1 

/* 

235 

353 

e b 

e : 

Latin 

s ma  L L 

Letter 

e 

with 

diaeresis 

i ' 

1 

r 

/* 

236 

354 

ec 

i ! 

Latin 

sma  L L 

Letter 

i 

with 

grave  */ 

i ' 

1 

/ 

/* 

237 

355 

ed 

i ' 

Latin 

sma  L L 

Letter 

i 

with 

acute  * / 

i ' 

1 

/ 

/* 

238 

356 

ee 

1 > 

Latin 

sma  L L 

Letter 

i 

with 

c i r c umf  Lex 

i ' 

1 

/ 

/* 

239 

357 

e f 

1 : 

Latin 

sma  L L 

Letter 

i 

with 

diaeresis 

d ' 

t 

/ 

/* 

240 

360 

f 0 

d- 

Latin 

sma  L L 

Letter 

eth  ( i 

ceLandic)  * 

n ' 

r 

/* 

241 

361 

f 1 

n? 

Latin 

sma  L L 

Letter 

n 

with 

ti Lde  */ 

0 ' 

1 

/ 

/* 

242 

362 

f 2 

0 ! 

Latin 

sma  L L 

Letter 

0 

with 

grave  * / 

0 ' 

1 

/* 

243 

363 

f 3 

o* 

Latin 

s ma  L L 

Letter 

0 

with 

acute  * / 

0 ' 

1 

/* 

244 

364 

f 4 

o> 

Latin 

s ma  L L 

Letter 

0 

with 

ci rcumfLex 

o' 

1 

/* 

245 

365 

f 5 

0? 

Latin 

sma  L L 

Letter 

0 

with 

t i L de  * / 

CnCHK:fadd61fd55bb3aabe4af47b221f2fb8454d9ebfecd832a030eb07cd1673467d1d:D 


Pretty  Good  Privacy  5.0'^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


423 


pgpCharMap.c 


' 0 

t 

/* 

246 

366 

f 6 

0 : 

1 a t i n 

small 

letter 

0 

with 

diaeresi s 

*/ 

' / 

\ 

/* 

247 

367 

f 7 

d i V i s i 

on  sign  */ 

' 0 

\ 

r 

/* 

248 

370 

f 8 

0 / 

1 a t i n 

small 

letter 

0 

with 

stroke  */ 

' u 

/ 

/* 

249 

371 

f 9 

u ! 

1 a t i n 

small 

letter 

u 

with 

grave  * / 

' u 

/ 

/* 

250 

372 

fa 

u * 

1 a t i n 

small 

letter 

u 

with 

acute  * / 

' u 

/ 

/* 

251 

373 

f b 

u> 

1 a t i n 

sma  1 1 

letter 

u 

with 

c i r cumf 1 ex 

*/ 

' u 

1 

/ 

/* 

252 

374 

f c 

u : 

1 a t i n 

sma  1 1 

letter 

u 

with 

diaeresis 

*/ 

' t 

1 

/ 

/* 

253 

375 

f d 

y* 

1 a t i n 

sma  1 1 

letter 

y 

with 

acute  * / 

' t 

1 

/ 

/* 

254 

376 

f e 

t h 

1 a t i n 

sma  1 1 

letter 

thorn 

(icelandic) 

*/ 

■y 

>; 

1 

/* 

255 

377 

f f 

y : 

1 a t i n 

small 

letter 

y 

with 

diaeresis 

*/ 

/* 

★ 

Characters 

not 

recogni zed 

(mapped 

to  ' ? 

' ) : 

★ 

- 

Control  characters 

129- 

1 59 

* 

- 

Plus 

-mi nus  (Mappi ng 

t 0 

either  + 

or  - 

could  be 

★ very 

* misleading!) 

* 

- 

Fractions 

1/4 

, 1/2, 

3/4 

★ 


* Differences  from  PGP  2.x's  encoding: 

* - 128  (pad)  is  mapped  to  0 (nuL),  the  usual  pad  character 

* - <<  and  >>  are  mapped  to  '<'  and  '>'  instead  of  and 

* - PiLcrow  (paragraph  symbol)  is  mapped  to  'P'  rather  than 

* - AE  and  ae  are  mapped  to  'E'  and  'e'  rather  than  'A'  and  'a',  based 

* on  english  conventions  like  encyclopaedia  ->  encyclopedia 
*/ 

/*  *INDENT-0N*  */ 


/*  Charset  tables  */ 
static  struct  ConfMapping  { 
n char  const  *name; 

n unsigned  char  const  *toLatin1,  *toLocal; 


> 

c on f Ma pp i ng s C 3 = { 

n 

{ 

"noconv",n 

charHapIdenti ty,n 

charMapIdenti ty 

n 

{ 

" ascii ",n 

charMapIdenti ty,n 

1 a t i n1 

_t  o_a  s c i i 

y. 

Q 

{ 

"cp850",n 

cp850_to_latin1,n 

1 a t i n 1 

_to_cp850 

>, 

n 

{ 

"ebcdi c",n 

ebcdic_to_latin1,n 

1 a t i n1 

_to_ebcdi 

c >, 

a 

{ 

(char  const 

*)0,  0,  0 > 

>; 


/*  C a s e- i n s e n s i t i ve  memory  compare  */ 
static  i nt 

xmemicmp  (char  const  *in1,  char  const  *in2,  int  len) 
{ 


n 

n 

n 

Q 

n 

n 

□ 

} 


while 

1 

1 

c 

0) 

n 

if  (tolower(*i 

□ 

n return 

a 

i n 1 ++; 

a 

i n2++ ; 

y 

return 

0; 

n1  ) !=  t o I o w e r ( * i n 2 ) ) 

1; 


int 

pgpCharmaps  (char  const  *charset,  int  setlen, 

n byte  const  **toLocalP,  byte  const  **toLatin1P) 

{ 

n inti; 
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n if  (!charset  ||  ItoLocaLP  ||  ItoLatinlP) 

n n return  PGPERR_BADPARAH; 


□ 

□ 

n 

n 


for  (i=0;  c on f Ma pp i n g s n i D . n a me ; i++)  { 

n if  ( ( s i z e_ t ) s e t I e n !=  strLen  ( c on f Ma pp i ng s C i 3 . name ) || 
n xmemicmp  (charset,  c on f Ma pp i ng s C i D . na me , setLen)  ! 
a n continue; 


□ 

D 

a 

n 

n 

> 


n *toLocaLP  = confMappingsCiD.toLocaL; 

a *toLatin1P  = c on f Ha p p i n g s C i D . t o La t i n 1 ; 

n return  PGPERR_0K; 

} 

return  PG P E R R_C H ARM A P_U N KN 0 WN ; 


void 

pgpCharmapConvert 
Q n 

{ 


(byte  const  *input,  size_t  inLen,  byte  *output, 
byte  const  *charmap) 


D 

n 

> 


while  (inLen — ) 

a outputCinlenD  = charmapCinputCinLenDD; 
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/* 

* pgpCharMap.h  --  Mapping  tables  between  different  character  sets. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg p C h a r Ma p . h , V 1.2  . 2 . 1 1 997/06/07  09:  50:01  mhw  Exp  $ 

*/ 

#ifndef  PGPCHARMAP.H 
#define  PGPCHARMAP.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  ..cpluspLus 
extern  "C"  C 
#end  i f 

struct  PgpEnv; 

/*  The  identity 
extern  unsigned 

/* 

* FiLLs  in  the 

* or  returns  a 

* invalid. 

*/ 

int  pgpCharmaps 
n a 

/* 

* Converts  a string  from  one  charset  to  another  using  the  input 

* charmap.  The  input,  of  size  inLen,  is  converted  through  the  map 

* and  put  into  output. 

*/ 

void  pgpCharmapConvert  (byte  const  *input,  size.t  inLen,  byte  *output, 
n n n byte  const  *charmap); 

/*  Two  macros  to  convert  strings  between  the  Local  and  Latini  charsets  */ 
//define  PG  P.CON  V E RT.TO.  LO  C A L ( i n , L e n , ou  t , e n v ) \ 
n pgpCharmapConvert  ( i n , L e n , ou t , \ 

n n pgpenvGetPoi nter  (env,  PG P E N V.C H A RM A PTO LO C A L, N U LL) ) 

#define  PG P.CON V E RT.TO. LAT I N 1 ( i n , L e n , ou t , e nv ) \ 
n pgpCharmapConvert  ( i n , L e n , ou t , \ 

n n pgpenvGetPoi nter  (env,  PG PE N V.C H A RM A PTO L AT  I N 1 , N U L L) ) 

//ifdef cpLuspLus 

} 

//end i f 

#endif  /*  PGPCHARMAP.H  */ 


charmap;  maps  aLL  characters  onto  themselves  */ 
char  const  c h a r M a p I d e n t i t y C 2 5 6 II  ; 

charmaps  associated  with  the  charset  and  returns  0 
PGP  error  if  the  set  isn't  found  or  a paramter  is 

(char  const  *charset,  int  setlen, 
byte  const  **toLocaL,  byte  const  **toLatin1); 
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/* 

* pgpDebug.c  --  Assertion  support  routines 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpDebug.c, V 1.13.2.1  1997/06/07  09:50:01  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
tfincLude  "config.h" 

# e n d i f 


#incLude 
#incLude 
#incLude 
#incLude 
#i nc  Lude 
#incLude 


<string.h> 
<stdarg  . h> 

< L i mi t s . h> 
"pgpTypes  . h 
"pgpDebug.h 
"pgpMem. h" 


#if  DEBUG  S&  ! PGP_DEBUG_STACK_BUFFERS 

ucharn  pg pa D e bu g Bu f C PG P_ D EBUG_B U F_ S I Z E * PG P_ D EBUG_N U M_BU F S 3 ; 
uchar  *npg pa D e bu g Bu f S t a c k = pgpaDebugBuf  + s i z e o f ( pg pa D e b ug Bu f ) ; 
#e  n d i f 


n static  void 
AppendCharsC 


n 

uchar 

*nn  n 

d e s t , 

n 

i nt  *n 

n a 

offset. 

□ 

i ntnn 

D n 

max. 

D 

BooLeanDD  n 

canoni caLizeNLs, 

n 

char  const  *n 

s r c , 

Q 

r 

i ntnn 

□ □ 

Len) 

\ 

n 

i ntnn 

n □ 

destlndex  = *offset; 

n 

i ntnn 

n n 

srcindex  = 0; 

n 

pgpaCpgpaAddrVaL 

id(src,  char)); 

n 

if  ( c a non i c a L i z e N Ls ) 

□ 

{ 

n 

n whiLe  (srcindex  < Len  &&  destlndex  < max) 

n 

D n 

switch  ( s r c C s r c I nde X ] ) 

n 

a D 

Q 

□ n 

n case 

■ \r'  : 

n 

Q n 

n n 

if  (srcindex  + 1 < Len  &&  srcCsrcIndex 

n 

n n 

D n 

n srclndex++; 

n 

a a 

D n 

/*  FaLL  through  */ 

n 

n a 

n case 

' \n  ' : 

#if 

MACINTOSH 

n 

n Q 

n s 

destCdestIndex++]  = '\r'; 

#eLif  d e f i ned ( W I N3 2 ) 


n 

n 

n 

n 

n 

de s t C d e s t I nd ex++ D = ' 

\r'; 

n 

n 

n 

n 

a 

if  (destlndex  < max) 

n n 

#e  1 s e 

n 

n 

□ 

n d e s t C de s t I nd ex++ 3 

= 'Xn'; 

n 

n 

n 

n 

n 

d e s t C d e s t I nd e X++ ] = ' 

\n'; 

■ \n  ' ) 
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Sendi  f 


□ 

Q n 

Et 

a srclndex++; 

n 

n n 

n 

n break; 

s 

n n 

s 

default: 

n 

n n 

n 

a d e s t C d e s t I n d e X++ ] = s r c C s r c I n d ex++ ] 

n 

n u 

n 

n break; 

n 

□ n 

> 

n 

> 

n 

else 

□ 

{ 

u 

n wh  i 

L e 

(srcindex  < len  &&  destindex  < max) 

n 

a n 

d e s t C d e s 1 1 n d e X + + ] = s r c C s r c I n d ex  + + ] ; 

u 

> 

u 

} 

*0  f f s e t 

= 

destindex; 

□ 

static 

void 

AppendUnsignedNumberC 

□ 

uchar  *nn 

n dest. 

n 

i n t *n 

n 

n offset. 

n 

i ntnn 

n 

□ max. 

Q 

i ntnn 

n 

n radix. 

Q 

r 

u 1 ongn 

n 

a num) 

\ 

n 

static 

charnconst  digitC17D  = "0123456789ABCDEF"; 

n 

c h a r n 

n 

buf C36]; 

n 

i n t nn 

Q 

i = sizeof(buf); 

□ 

n pg p As s e r t M s g ( ra d i X >=  2 &S  radix  <=  16,  "Invalid  radix"); 

Q do 
n { 

n n pgpAssert ( i > 0)  ; 
n n bufC--i]  = digitCnum  % radix]; 
n n num  /=  radix; 

n } while  (num  > 0); 

n Ap pe nd C ha r s ( d e s t , offset,  max,  FALSE,  buf  + i,  sizeof(buf)  - i); 
} 

n static  void 
Appends ignedNumber( 


a 

uchar  *nn 

Q 

dest. 

n 

i nt  *n 

n 

n 

offset 

n 

i ntnn 

n 

n 

max. 

n 

i n t nn 

n 

n 

radix. 

D 

1 ongn 

□ 

n 

num) 

{ 

Q 

if  (num 

< 

0) 

n { 

n n AppendC ha r s ( de s t , offset,  max,  FALSE,  1); 

n n AppendUnsignedNumberCdest,  offset,  max,  radix,  -num); 

n } 
n else 

n n AppendUnsignedNumberCdest,  offset,  max,  radix,  num); 

> 

/* 

* Formats  a string  into  the  given  <buffer>,  similarly  to  sprintf. 
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ilr 

★ 

★ 

* 

★ 

★ 

★ 

★ 

•k 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*n 

*/ 


If  <putLengthPref i x>  is  true,  a pascaL-styLe  length  prefix  is  put  at  the 
beginning  of  the  string.  If  <p u t N u I L Te r m i n a t o r>  is  true,  a 0 byte  is 
added  to  the  end.  This  allows  creation  of  C strings,  Pascal  strings,  or 
hybrid  strings  which  are  both.  <bufferSi2e>  indicates  the  size  of  the 
buffer,  ie,  the  total  number  of  bytes  which  can  be  modified,  including 
length  prefix  size  and  nu 1 1 - 1 e r m i na t o r . In  all  cases,  the  length  of  the 
string  in  actual  characters  is  returned. 

Recognizes  the  following  special  sequences  in  the  format  string: 


Q 

%%n 

Replaced 

with 

a s 

ngle 

n 

%cn 

Replaced 

with 

the 

char  argument 

□ 

%sn 

Replaced 

with 

the 

C string 

argument 

n 

%Sn 

Replaced 

with 

the 

Pascal  string  argument 

n 

%Bn 

Replaced 

with 

the 

memory  buffer  as  a string 

a 

n 

Q (two 

a rg  s 

Length  (int) 

, buffer) 

a 

%lBnRepLaced 

with 

the 

memory  buffer  as  a string 

a 

a 

a (two 

a rg  s 

Length  (Long),  buffer) 

a 

%dB 

Replaced 

with 

the 

signed  integer  value  (base  10) 

a 

%LdnRepLaced 

with 

the 

signed  Long  value  (base  10) 

a 

%un 

Replaced 

with 

the 

unsigned 

integer  value  (base  10) 

a 

%LuQReplaced 

with 

the 

unsigned 

Long  value  (base  10) 

a 

%xn 

Replaced 

with 

the 

unsi gned 

integer  value  (base  16) 

a 

%LxnRepLaced 

with 

the 

unsi gned 

long  value  (base  16) 

a 

%on 

Replaced 

with 

the 

unsigned 

integer  value  (base  8) 

a 

%LoDRepLaced 

with 

the 

unsigned 

long  value  (base  8) 

a 

%bn 

Replaced 

with 

the 

unsigned 

integer  value  (base  2) 

a 

% L bnRep  Laced 

with 

the 

unsi gned 

Long  value  (base  2) 

a 

%pn 

Replaced 

with 

the 

pointer  value,  printed  in  hex 

n i nt 

pgpFormatVAStrC 


n 

uchar  *nn 

n 

n 

i ntnn  n 

n 

n 

Booleannn 

a 

n 

Boo  1 eanna 

n 

s 

Boo  L eannn 

n 

n 

char  const 

*n 

a 

va_ 1 i stun 

u 

buffer, 
buf f erSi ze, 
putLengthPrefi x, 
putNuLlTerminator, 
canoni ca li zeNLs, 
f o rma  t S t r , 
a r g s ) 


o 

Q 

n 

n 

Q 

S 

n 

n 

n 

n 

n 


i ntnn 

□ 

n 

bufferindex  = putLengthPrefi x ? 1 

: 0; 

i ntnn 

n 

n 

formatStrIndex; 

i ntnn 

D 

D 

stringLength; 

pgpa ( ( 

a pgpa Add r Va I i d ( buf f e r , uchar), 
a pg pa As s e r t ( bu f f e r S i z e >= 

a a n n n pu t Leng t h P r e f i x + ( pu t N u I I Te r mi n a t o r ? 

a pgpa Add r Va I i d ( f o r ma t S t r , char), 

a pgpaMsgC" Invalid  parameters  to  pgpaFormatVAStr"))); 


0)), 


a for  ( formatSt r Index  = 0;  f o r ma t S t r C f o r ma t S t r I n d ex D !=  *\0*; 
a a n f o r ma t S t r I n d e x++ ) 

a { 

a a if  ( f o r ma t S t r C f o r ma t S t r I nd e x D !=  *%*) 

nan  App end C ha r s ( bu f f e r , &b u f f e r I nd ex , bufferSize, 

a a n n n n canonicalizeNLs,  &formatStrCformatStrIndexD,  1); 

a a else  if  ( f o r ma t S t r C f o r ma t S t r I nd e x + ID  !=  *\0*) 

n n { 
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Q 

B 

fl 

i n t nn 

n cmdStartIndex  = formatStrIndex; 

□ 

B 

B 

BooLeannn  LongFLag  = FALSE; 

Q 

B 

B 

i n t nn 

n radix; 

n 

B 

B 

formatStrIndex++; 

n 

B 

fl 

i f 

( f 0 r ma  t S t r C f 0 rma  t S t r I n d e X 11  ==  'L') 

n 

B 

fl 

n 

B 

B 

□ 

LongFLag  = TRUE; 

n 

n 

fl 

n 

formatStrIndex++; 

n 

B 

B 

> 

□ 

B 

B 

switch  (formatStrCformatStrIndex]) 

n 

B 

B 

□ 

B 

fl 

fl 

case 

: '%':n  /*  LiteraL  */ 

n 

B 

B 

fl 

fl 

A p pe n d C h a r s ( b u f f e r , &bu f f e r I nd ex , bufferSize, 

n 

B 

fl 

fl 

fl 

n n n FALSE,  8f o r ma t S t r C f o rma t S t r I nd e x 3 , 1); 

Q 

B 

fl 

fl 

fl 

break; 

n 

B 

B 

fl 

fl 

n 

B 

B 

fl 

case 

'c':n  /*  SingLe  character  */ 

a 

B 

fl 

fl 

{ 

Q 

B 

B 

fl 

fl 

charn  n n ch  = va_arg(args,  char); 

□ 

B 

B 

fl 

fl 

n 

B 

B 

fl 

fl 

A pp e n d C h a r s ( b u f f e r , &bu f f e r I nd ex , bufferSize, 

u 

B 

fl 

fl 

fl 

n n n canonicaLizeNLs,  &ch,  1); 

n 

B 

fl 

fl 

fl 

break; 

n 

B 

B 

fl 

> 

n 

B 

fl 

fl 

case 

's';n  /*  C string  argument  */ 

n 

B 

B 

fl 

{ 

n 

B 

B 

fl 

fl 

char  const  *n  str  = va_argCargs,  char  const  *); 

□ 

B 

B 

fl 

fl 

n 

B 

B 

fl 

fl 

pgpa(pgpaAddrVaLid(str,  char)); 

□ 

B 

B 

fl 

fl 

AppendC ha r s C buf f e r , &b u f f e r I n d e x , bufferSize, 

n 

B 

fl 

fl 

fl 

n n n c a no n i c a L i z e N Ls , str,  s t r L e n C s t r ) ) ; 

□ 

B 

fl 

fl 

fl 

break; 

n 

B 

B 

fl 

> 

n 

fl 

fl 

fl 

case 

'S':n  /*  PascaL  string  argument  */ 

n 

B 

fl 

fl 

{ 

n 

B 

B 

fl 

fl 

uchar  const  *n  pstr  = va_arg(args,  uchar  const  *); 

B 

B 

B 

fl 

fl 

B 

fl 

fl 

fl 

fl 

pgpaCpgpaAddrVaLidCpstr,  uchar)); 

B 

B 

B 

fl 

fl 

Ap pend C h a r s ( b u f f e r , &bu f f e r I nd ex , bufferSize, 

B 

fl 

B 

fl 

fl 

n n n canonicaLizeNLs,  (char  *)(pstr  + 1),  pstrC0]); 

B 

B 

B 

fl 

fl 

break; 

B 

fl 

B 

fl 

> 

B 

B 

B 

fl 

case 

'B':n  /*  String  buffer  argument  (Length,  buf)  */ 

B 

B 

fl 

fl 

i 

B 

B 

fl 

fl 

fl 

Longn  n n Length; 

B 

fl 

fl 

fl 

fl 

char  const  *n  buf; 

B 

B 

fl 

fl 

fl 

if  (LongFLag) 

B 

B 

fl 

fl 

fl 

n Length  = va_arg(args.  Long); 

B 

B 

fl 

fl 

fl 

e L s e 

B 

fl 

fl 

fl 

fl 

n Length  = va_arg(args,  int); 

B 

B 

fl 

fl 

fl 

buf  = va_arg(args,  char  const  *); 

B 

B 

fl 

fl 

fl 

pgpa  ( ( 

B 

B 

fl 

fl 

fl 

n pg pa  A s s e r t ( L e n g t h >=  0), 

B 

fl 

fl 

fl 

fl 

n pgpaAddrVa L i d(buf  , char))); 
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n 

B 

Q 

n 

n 

if  (Length  > INT_HAX) 

n 

B 

n 

n 

n 

n Length  = INT_MAX; 

n 

B 

n 

B 

n 

Append C ha r s ( bu f f e r,  &buf f erindex,  bufferSize, 

n 

B 

n 

B 

n 

n n n canonicaLizeNLs,  buf.  Length); 

a 

B 

o 

B 

n 

break; 

o 

B 

n 

B 

> 

a 

Q 

n 

B 

case  'p':n  /*  pointer  argument  */ 

D 

Q 

n 

B 

n 

pg p A s s e r t ( s i z e 0 f ( u L ong ) ==  sizeofCvoid  *)); 

n 

n 

n 

B 

n 

Ap pe nd C h a r s ( bu f f e r , &bu f f e r I n d e x , bufferSize, 

n 

B 

n 

n 

□ 

n n n FALSE,  "0x",  2); 

a 

B 

B 

n 

n 

LongFLag  = TRUE; 

□ 

B 

B 

Q 

B 

radix  = 16; 

B 

B 

B 

n 

B 

goto  doUInt; 

B 

n 

B 

n 

B 

B 

□ 

n 

n 

case 

1 'x':n  /*  unsigned  int  argument,  base  16  */ 

B 

B 

B 

n 

case 

1 ' X ■ : 

B 

B 

B 

n 

n 

radix  = 16; 

B 

B 

a 

n 

n 

goto  doUInt; 

B 

B 

B 

D 

n 

B 

B 

B 

Q 

case 

'o':n  /*  unsigned  int  argument,  base  8 */ 

B 

B 

B 

n 

B 

radix  = 8; 

B 

B 

B 

n 

B 

goto  doUInt; 

B 

B 

B 

Q 

B 

B 

Q 

B 

n 

case 

'b':n  /*  unsigned  int  argument,  base  2 */ 

B 

B 

B 

n 

B 

radix  = 2; 

B 

D 

n 

n 

B 

goto  doUInt ; 

B 

B 

n 

n 

B 

B 

B 

□ 

n 

case 

'u':n  /*  unsigned  int  argument,  base  10  */ 

B 

B 

n 

n 

n 

radix  = 10; 

B 

B 

B 

B 

doU 1 n t : 

B 

B 

B 

B 

B 

{ 

B 

B 

B 

B 

a 

n uLonga  o a num; 

B 

B 

n 

n 

a 

n if  (LongFLag) 

B 

B 

n 

n 

B 

n n num  = va_arg(args,  uLong); 

B 

B 

n 

n 

B 

n else 

B 

B 

□ 

D 

B 

n n num  = va_arg(args,  uint); 

B 

B 

n 

B 

B 

n Appe nd U n s i g n ed N umb e r ( bu f f e r , &bu f f e r I nd ex , bufferSize 

B 

B 

n 

B 

B 

n n n n n n radix, num); 

B 

B 

n 

B 

B 

> 

B 

B 

D 

B 

a 

break; 

B 

□ 

B 

D 

n 

B 

n 

B 

n 

case 

'd':n  /*  signed  integer  argument,  base  10  */ 

B 

n 

B 

Q 

{ 

B 

□ 

Q 

n 

B 

Longn  n n num; 

B 

n 

Q 

B 

B 

B 

B 

B 

B 

B 

if  (LongFLag) 

B 

B 

B 

B 

a 

n num  = va_arg(args.  Long); 

B 

B 

B 

B 

a 

else 

B 

B 

B 

n 

B 

n num  = va_arg(args,  int); 

B 

B 

B 

n 

B 

B 

B 

B 

Q 

B 

A ppe nd S i g n e d N umbe r ( bu f f e r , &b u f f e r I n d e x , bufferSize, 

B 

B 

B 

D 

B 

n n n n n 10,num); 

B 

B 

B 

□ 

n 

break; 

B 

B 

B 

O 

> 

B 

B 

B 

Q 

default : 

B 

O 

n 

n 

{ 
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n 

a 

a 

a 

a 

charn  n n e r r o r Bu  f C 32  11 ; 

n 

a 

a 

a 

a 

a 

a 

a 

a 

a 

pg p F 0 r ma t S t r ( e r r 0 r B u f , s i z e o f ( e r r o r Bu f ) , FALSE, 

a 

a 

a 

a 

a 

B n n "CINVALID  %B3", 

a 

a 

a 

a 

a 

a a a f o r ma t S t r I n d e x - cmd S t a r t I n d e x + 1, 

a 

a 

a 

a 

a 

B B B formatStr  + c md S t a r t I nd ex ) ; 

a 

a 

a 

a 

a 

Append C h a r s ( buf f e r , 8 b u f f e r I n d ex , bufferSize, 

a 

a 

a 

a 

a 

B B B canoni ca L i zeNLs,  errorBuf,  s t r 1 en ( e r r o r Bu f ) ) ; 

a 

a 

a 

a 

a 

break; 

a 

a 

a 

a 

> 

a 

a 

a 

> 

a 

a 

> 

a 

a 

> 

a 

if 

(putNuL  LTermi 

n a 1 0 r ) 

a 

a 

a 

i f 

(bufferindex  >=  bufferSize) 

n n n bufferindex  = bufferSize  - 1; 
n n buf f erCbuf f erlndexD  = '\0'; 

n } 
n 

n stringLength  = bufferindex  - (putLengthPrefix  ? 1 : 0); 

n 

n if  (putLengthPrefix) 

n n bufferC0]  = (stringLength  <=  255)  ? stringLength  : 255; 
n 

n return  stringLength; 

> 


n u c h a r * 

pg  p F o rma  t H S t r ( 
n u c ha  r *nn  n 

n i ntnn  n n 

n Booleannn  n 

n char  const  *n 

n . . . ) 

{ 

n va_l i stnn  n 


buffer, 
buf f erSi ze, 
canoni ca  L i zeNLs, 
f ormatSt  r. 


a r g s ; 


□ 

n va_s t a r t ( a r g s , formatStr); 

n pg p F o r ma t V A S t r ( bu f f e r , bufferSize,  TRUE,  TRUE,  c a non i c a I i z e N Ls , 

n n n n n formatStr,  args); 
n va_end(args); 
n return  buffer; 

} 


n ucha  r * 
pgpFormatPStr( 


a 

ucha  r *bb 

a 

buffer. 

a 

i ntnB  B 

a 

bufferSi ze. 

a 

BooLeannB 

a 

canonicaLizeNLs 

a 

char  const 

*B 

formatStr, 

a 

. . . ) 

{ 

a 

va_Li stnB 

a 

args; 

n 

n va _s t a r t ( a r g s , formatStr); 

n pgpFormatVASt r(buf f er,  bufferSize,  TRUE,  FALSE,  c a non i c a L i z eN Ls , 
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n 

a a o a 

formatStr,  args); 

n 

va_end(args) ; 

□ 

return  buffer; 

> 

D 

ucha  r * 

pgpFormatPStr255( 

□ 

u c ha  r *nn  n 

buffer. 

n 

Boo  Leannn  n 

canonicaLizeNLs, 

Q 

char  const  *n 

formatStr, 

n 

. . . ) 

{ 

n 

Q 

va_L i stun  n 

a r g s ; 

n 

va_start(args. 

formatStr); 

n 

pg p Fo rma t V AS t r ( bu f f e r , 256,  TRUE,  FALSE, 

Q 

va_end(args) ; 

n 

return  buffer; 

> 

n 

char  * 

pgpFormatStrC 

n 

char  *n  n n 

buffer. 

n 

i n t nn  n n 

bufferSi ze. 

Q 

BooLeannn  n 

canoni ca  L i zeNLs, 

n 

char  const  *n 

formatStr, 

n 

. . . ) 

i 

n 

va_  L i stnn  n 

args; 

n 

va_start(args. 

formatStr) ; 

n 

pgp Fo rma t VAS t r C ( u cha r *)buffer,  bufferSi: 

n 

D □ n n 

formatStr,  args); 

n 

va_end(args); 

a 

return  buffer; 

> 

DEBUGn  /*  C */ 

n 

u c ha  r * 

pgpDebugFormatHStrC 

a 

uchar  *nn  n 

buffer. 

a 

i ntnn  n n 

bufferSi ze. 

a 

char  const  *n 

formatStr, 

a 

. . . ) 

< 

a 

va_  L i stnn  n 

a r g s ; 

a 

va_start(args. 

formatStr) ; 

n 

pgp Forma t VAS t r ( bu f fe r,  bufferSize,  TRUE, 

a 

va_endCargs) ; 

a 

return  buffer; 

> 

n 

uchar  * 

pgpDebugPrefixFornatHStrC 

a 

uchar  *nn  n 

buffer. 

a 

i ntnn  n a 

bufferSi ze. 
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n 

char 

const 

*n 

formatStr, 

n 

i 

. . . ) 

n 

va_li stnn 

n 

args; 

n 

intnn 

□ 

n 

origSize ;n  /* 

Including 

null,  but  not  length 

prefix 

n 

intnn 

n 

n 

origOffset; 

n 

intnn 

n 

Q 

prefixSize;n/* 

Including 

length  prefix,  no  nu 

1 1 */ 

a 

intnn 

n 

n 

totalLen; 

n 

n 

/* 

n * Move  the  original  string  (except  length  prefix)  to  the  end  of  the 
n * buffer, 

n * / 

a origSize  = bufferCOD  + 1; 

n if  (origSize  ==  256) 

n n origSize  = strlen((char  const  *)buffer  + 1)  + 1; 
n origOffset  = bufferSize  - origSize; 

n pgpCopyMemory(buf f er  + 1,  buffer  + origOffset,  origSize); 

n /*  Format  the  new  prefix,  without  n u I I - 1 e rm i n a t o r */ 
n va _ s t a r t ( a r g s , formatStr); 

n prefixSize  = 1 + pg p F o r ma t V A S t r ( b u f f e r , origOffset,  TRUE,  FALSE,  TRUE, 
nnnnnnnnn  formatStr,  args); 
n va_end(args); 

n /*  Add  a separating  string  */ 

n AppendChars(buffer,  SprefixSize,  origOffset,  TRUE,  ":\n  ",  4); 

n /*  Move  the  original  part  back  so  that  it's  adjacent  to  the  prefix  */ 

n pgpCopyMemory(buffer  + origOffset,  buffer  + prefixSize,  origSize); 

n /*  Set  the  length  prefix  */ 

n totalLen  = (origSize  - 1)  + (prefixSize  - 1); 
n bufferC0]  = (totalLen  <=  255)  ? totalLen  : 255; 

n return  buffer; 

} 

n void 

pgpDebugFi I lHemory( 
n void  *n  n n buffer, 

n size_tn  n n length) 

{ 

n p g p F i I I Memo r y ( b u f f e r , length,  0xDD); 

> 

n static  char 

pgpMemAccessTest( 
n void  const  *n  addr) 

{ 

n return  *(volatile  char  const  *)addr; 

> 

□ Boolean 

pgpaInternalAddrValid( 
n pg  pa  Ca  I I P r ef  i X D e f , 

n void  const  *n  addr, 

n intnn  n n alignSize, 
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n char  const  *n  varName) 

{ 

#if  MACINTOSH 

n /*  XXX  aLignofC)  doesn't  match  up  with  r ea L i t y . . . b umme r */ 
n if  (aLignSize  > 2) 

n n aLignSize  = 2; 

#endi f 
n 

a pgpaAssertCaddr  !=  NULL); 

a pgpaAssertCaLignSize  > 0); 

a pg pa A s s e r t ( a I i g n S i z e ==  1 {|  (uLong)addr  % aLignSize  ==  0); 

#if  MACINTOSH 

a pgpa As se r t ( ( u L ong ) add r >=  256); 

#e  n d i f 

a pg  pa  Fmt  M sg  ( ( pg  pa  Fmt  Pref  i X, 

a a n "pgpaAddrVaLidALigned  failed  on  %s  (%p)  (aLign  %d)", 

a a n varName,  addr,  aLignSize)); 

a if  ( ! pgpa  Fa i L ed ) 

a a pgpMemAc ces sTes t ( add r ) ; 

a return  pgpaFaiLed; 

} 


a Boo  L ea  n 

pgpainterna  LStrLenVa  Li d( 
a pgpa Ca L L Pref i X De f , 


n 

char  const 

*0 

str. 

n 

u L onga  n 

0 

minLen, 

n 

u L onga  n 

0 

maxLen, 

n 

char  const 

*0 

varName) 

Q 

u 

u L onga  n 

0 

i ; 

n 

pgpaAddrVaL 

i d ( St 

r,  char); 

n 

for  (i  = 0; 

IpgpaFaiLed  &&  strCiD  !=  '\0';  i++) 

Q 

D 

a pgpa  Fai LIf  ( i 

>=  maxLen,  (pgpaFmtPrefix, 

n 

n 0 n 

"Longer  than  XLu  chars",  maxLen)); 

a a pgpa Fa i L I f ( ( uc ha r ) ( s t r C i 3 ) < '\b',  C pgpa Fmt Pref i x, 
a a n n "suspicious  char  OxXx  at  index  %Lu",  strCiD,  i)); 
a > 


a pgpaFaiLIfCi  < minLen,  (pgpaFmtPrefix,  "shorter  than  %Lu  chars",  minLen)); 
a pgpaFmtHsg((pgpaFmtPrefix,  "pgpaStrLenVaLid  faiLed  on  %s  (%p)", 
a a n a varName,  str)); 
a 

a return  pgpaFaiLed ; 

} 

a BooLean 

pgpaInternaLPStrLenVaLidC 
a pg pa C a L L P r e f i X D e f , 


0 

uchar 

const 

*0 

str. 

0 

i ntan 

0 

0 

mi nLen, 

o 

i ntan 

0 

0 

maxLen, 

0 

char 

const 

*0 

va  rName ) 
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{ 

n intnn  n n Len; 

n intnn  n n i; 

n 

n pg  pa ( ( 

n n pg pa  A s s e r t ( m i n Le n >=  0), 

a n pg pa  A s s e r t ( ma X Le n <=  255  ), 

n n pgpaMsg(" Invalid  parameters  to  pgpaPStrLenValid"))); 

n 

n pgpaAddrValidCstr,  uchar); 

n if  ([pgpaFailed) 

n { 

n n ten  = strCBD; 

n n pgpa Fa i L I f ( L en  > maxLen,  ( pg pa F m t P r e f i x , 
n n n n n "Longer  than  %d  chars",  maxLen)); 

n n pgpa F a i L I f ( L e n < minLen,  ( pg pa F m t P r e f i x , 
n n n n n "shorter  than  %d  chars",  minLen)); 

n n for  (i  = 1;  !pgpaFaiLed  SS  i <=  Len;  i++) 

n n n pg pa F a i L I f ( s t r C i 3 < '\b',  C pg pa F m t P r e f i x , 

n n n n n "suspicious  char  0x%x  at  index  %d",  strCiU,  i)); 

n n pgpaFaiLIfCi  < minLen,  ( pg pa F m t P r e f i x , 
n n n n "shorter  than  %Lu  chars",  minLen)); 

n } 

n pgpa Fmt Msg (( pgpa Fmt P ref i X, 

n n n "pgpaPStrLenValid  failed  on  %s  (%p)",  varName,  str)); 

n return  pgpaFailed ; 

} 

n void 

pgpDebugHook(void) 

{ 

> 

#endifn  /*  ] DEBUG  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpDebug.h  --  Assertion  macro  headers 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpDebug.h, V 1.13.2.2  1997/06/07  09:50:02  mhu  Exp  $ 

*/ 

#ifndef  PGPDEBUG_Hn  n /*  C */ 

//define  PGPDEBUG_H 

//incLude  <stdLib.h> 

//incLude  <stdarg.h> 

#ifdef  WIN32 
//incLude  <crtdbg.h> 

//eLif  !MACINTOSH 
//incLude  <stdio.h> 

//endi  f 

//if  PRAGHA_IHPORT_SUPPORTED 
//pragma  import  on 
//endi  f 

//incLude  "pgpTypes.h" 


/* 

* pg p F i xBe f o r e S h i p is  a macro  which  forces  a compiLe  error  unLess 

* the  U N F I N I S H E D_C 0 D E_ A LLOU E D macro  is  non-zero. 

* ExampLe:  pg p F i xBef o r e S h i p ( " Doe s this  reaLLy  work?") 

*/ 

#if  UNFINISHED_CODE_ALLOWED 
//define  pgp  F i xBef  o r eSh  i p ( msg  ) 

Uelse 

//define  pgp  F i xBe  f o reS  h i p ( msg  ) n aSSiaaa  //msg  aaaaaa 
//endi  f 


/* 

* DEBUG_STRUCT_CONSTRUCTOR  defines  a nuLL  constructor  for  a struct 

* which  initiaLizes  the  structure  which  aLL  0xDDs  if  DEBUG  is  non-zero, 

* or  does  nothing  otherwise.  It  requires  C++.  It  shouldn't  be  used 

* for  anything  with  virtual  methods,  because  it  wiLL  overwrite  the 

* virtual  dispatch  tabLe  pointer. 

* ExampLe:  struct  foo  { int  a;  D E BUG_STRU CT_C 0 N ST RU C TO R ( f oo ) } 

*/ 

//if  de  f i ned  (__cp  L usp  L us  ) &S  DEBUG 

//define  D EBUG_ST  RU  CT_C  ON  S TRU  CTO  R ( t y pe  ) n n n n n n \ 
n n type(void)n  nnnnnnnnnn\ 

nn{nnnnnnnnnnnnn\ 

“ “ n pgpDebug F i L L Memo r y ( t h i s , s i z eof ( * t h i s ) ) ; n n \ 

n n > 

//e  L se 

#define  DEBUG_STRUCT_CONSTRUCTOR(type) 

//endi  f 

//ifdef cpLuspLus 

extern  "C"  { 
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#endi f 

/* 

* ALL  the  FmtMsg  macros  accept  the  following  special  sequences: 


*n 

n 

%%n 

Replaced 

w i 

t h 

a si 

n g 1 e ' % ' 

*n 

Q 

%cn 

Replaced 

w i 

t h 

the 

char  argument 

*n 

n 

%sn 

Replaced 

w i 

t h 

the 

C string 

argument 

*n 

n 

%Sn 

Replaced 

w i 

t h 

the 

Pascal  string  argument 

*n 

Q 

%Bn 

Replaced 

H 1 t h 

the 

memory  buffer  as  a string 

*n 

n 

B 

B (two 

a rgs 

: length  (int) 

, buffer) 

*n 

a 

%lBBReplaced 

w i 

t h 

the 

memory  buffer  as  a string 

*n 

n 

B 

B (two 

a rgs 

: length  (long),  buffer) 

*n 

B 

%dn 

Replaced 

w i 

t h 

the 

signed  integer  value  (base  10) 

*n 

B 

%ldBReplaced 

w i 

t h 

the 

signed  long  value  (base  10) 

*n 

B 

%UB 

Replaced 

w i 

t h 

the 

unsigned 

integer  value  (base 

10) 

*n 

B 

%luBReplaced 

w i 

t h 

the 

unsigned 

long  value  (base  10) 

*n 

B 

%XB 

Replaced 

w i 

t h 

the 

unsi gned 

integer  value  (base 

16) 

*n 

B 

%lxBReplaced 

w i 

t h 

the 

unsigned 

long  value  (base  16) 

*n 

B 

%OB 

Replaced 

w i 

t h 

the 

unsigned 

integer  value  (base 

8) 

*n 

B 

%loBReplaced 

w i 

t h 

the 

unsigned 

long  value  (base  8) 

*n 

B 

%bB 

Replaced 

w i 

t h 

the 

unsigned 

integer  value  (base 

2) 

*n 

B 

%lbBReplaced 

w i 

t h 

the 

unsi gned 

long  value  (base  2) 

*n 

*/ 

B 

%pB 

Replaced 

w i 

t h 

the 

pointer  value,  printed  in  hex 

f 

DEBUGb 

BBS 

/ 

* Q * 

/ 

#define  PG P_ D EBU G_BU F _ S I Z Eb  b 256 


#if  PGP. 

_DEBUG_STACK_BUFFERSBn 

/*  L */ 

#def i ne 

PGP_DEBUG_ALLOC_BUFBn 

B B B B B 

fl  B 

B 

B \ 

n □ 

ucharB  pg pa B u f C PG P_ D E BU G_BU F_ S I Z E 3 ; b n 

fl  B 

fl 

B \ 

n n 

intBn  pgpaBufSize  = 

si zeof(pgpaBuf) ; 

#def i ne 

PGP_DEBUG_DEALLOC_BUF 

#e  1 se 

#def i ne 

PGP_DEBUG_NUM_BUFSb  n 

2 

#def i ne 

PGP_DEBUG_ALLOC_BUFBn 

□ □ Q n n 

B fl 

fl 

B \ 

n □ 

intan  pgpaBufSize  = 

PGP_DEBUG_BUF_SIZE,-b 

fl  B 

fl 

B \ 

□ a 

ucharB  *pgpaBuf  = ( pg pa D e bug Bu f S t a c k -=  PGP 

_DEBU6_ 

BUF 

-SIZE); 

#def i ne 

PGP_DEBUG_DEALLOC_BUFb 

B B B B B 

fl  fl 

fl 

B \ 

B n pg pa D e bu g Bu f S t a c k +=  PG P_ D EBUG_BU F _S I Z E ; 

extern  PGPExport  ucharB  pg  pa  D e bu  g Bu  f C PG  P_  D EBUG_Bll  F_S  I Z E * PG  P_  D E BUG_N  IIM_BU  F S 5 ; 
extern  PGPExport  uchar  *b  pg pa D e b ug Bu f S t a c k; 

#endifB  /*  1 PG P_ D EBUG_ST ACK_BU F F E RS  */ 

#if  MACINTOSHb  b n /*  C */ 

#define  pg p D e b ug P S t r ( p S t r ) b n D e bu g S t r ( p S t r ) 

Sdefine  pgpDebugHybridStr(hStr)BpgpDebugPStr(hStr) 

^define  pg pDebugMsg ( me s sa ge ) b nnnnBnnnB  \ 

n B doB  nBBBnnnnnnnnnnX 

nnfnBB  nnnnBQnBnnnn  \ 
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n 

n 

a 

ucharn  PGP__msg_bufC256D;n  n 

a a 

a 

a 

a 

a 

\ 

n 

n 

a 

a 

a a a a a 

a a 

a a 

a 

a 

a 

a 

\ 

n 

□ 

a 

pgpFormatPStr(PGP__msg 

_buf,  sizeof(PGP_ 

_msg_ 

bu  f ) , n 

a 

\ 

n 

n 

a 

a 

n n n TRUE, 

"%s",  (message)); 

aa 

a 

a 

a 

\ 

n 

a 

a 

pgpDebugPStrlPGP msg_ 

buf ) ; an 

a a 

a 

a 

a 

a 

\ 

Q 

a 

> while 

(0) 

#eli  f 

de f i ned ( WI N32  ) n /*  D C */ 

#def  i 

ne  pgpDebugMsg ( me s sage ) n n 

a a 

a a 

a 

a 

a 

a 

\ 

Q 

a 

don 

a 

a a a a a 

a a 

a a 

a 

a 

a 

a 

\ 

n 

a 

{a 

a 

a a a a a 

a a 

a a 

a 

a 

a 

a 

\ 

s 

a 

a 

if  ( 

_CrtDbgReportC_CRT 

.ASSERT, 

NULL,  0, 

NULL 

M 

/ 

\ r \ n % s " 

n 

a 

a 

a 

a a a a a 

a a 

(message))== 

1 )n 

a 

a 

\ 

n 

a 

a 

a 

_CrtDbgBreak( ) ;nB 

a a 

a a 

a 

a 

a 

a 

\ 

} while  (0) 


n n 

Sdefine  pg p Deb ug Hy b r i d S t r ( h S t r ) npg p De bu g H s g ( ( c ha r *)(hStr)  + 1) 
#eLsen  /*  1 t */ 


#d  e f i n e 

pgpDebugMsg(message)n 

a 

a 

a 

a 

a 

a 

a 

a 

a 

\ 

a a 

doa 

a a a a a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

\ 

a a 

■Ca 

a a a a a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

\ 

a a 

a 

fprintfCstderr,  " 

% s \ n " , 

(char 

*)(message)); 

aa 

a 

a 

\ 

a a 

a 

pgpDebugHookC ) ;na 

a 

a 

a 

a 

a 

a 

a 

a 

a 

\ 

n n } while  (0) 

#define  pgpDebug Hy b r i d S t r ( hS t r ) npgpDebugH sg ( ( c ha r *)(hStr)  + 1) 
#endi f n /*  D */ 


#def i ne 
n a 

D D 

a n 
n a 
n Q 
n n 
n D 


pgpDebugFmtnsg(params)Q 

a 

a 

a 

a 

a 

a 

a 

don 

a a 

a a a 

a 

a 

a 

a 

a 

a 

a 

■Ca 

a a 

a a a 

a 

a 

a 

a 

a 

a 

a 

a 

u c h a ra 

pgpaBufE2563 

;b  a 

a 

a 

a 

a 

a 

a 

1 ntnn 

pgpaBuf Si ze 

= s i z 

eof ( pgpaBuf ) ;n 

a 

a 

a 

a a 

a a a 

a 

a 

a 

a 

a 

a 

a 

n pgpDebugHybridStrCpgpDebugFormatHStr  params);Q 
> while  (0) 


D 

Q 

n 

n 

D 

n 

a 


n 

□ 

n 

D 

D 

D 

D 


\ 

\ 

\ 

\ 

\ 

\ 

\ 


#def i ne 

pgpDebugNsglf(condition,  message)^ 

a 

a 

a 

a 

a 

a 

a 

don 

a 

n □ n n a n 

a 

a 

a 

a 

a 

a 

a 

a 

■Ca 

a 

n D n □ n n 

a 

a 

a 

a 

a 

a 

a 

a 

a 

i f 

(condition)n  n n n 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

pgpDebugMsg(mes5age);n 

a 

a 

a 

a 

a 

a 

a 

a 

} while 

(0) 

n 

n 

□ 

n 

D 


\ 

\ 

\ 

\ 

\ 


/* 

* The  first  couple  parameters  which  must  always  be 

* passed  as  the  beginning  of  a format  list. 

*/ 

^define  pg pa Fm t P r e f i xn  nnnnnnnnnnn\ 
Q n pgpaBuf,  pgpaBufSize 


/* 

* The  general  pgpa  command  to  check  a condition  and 

* print  out  a formatted  message  if  it's  not  true. 
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*/ 

#if  IMACINTOSHn  /*  C */ 


//define 

pgpaFai lIf(condition, 

pa  rams )n  n a n n 

n 

n Q 

X 

□ 

D 

((void)(pgpaFai led 

1 1 

[(condition)  ||n  n n 

n 

n n 

X 

□ 

□ 

n ((pgpaFailed  = 

TRUE),  ( pg p D e b u g F 0 r ma t H S t r 

params)))) 

#eLsen  /*  : !HACINTOSH  [ */ 


/*  XXX:  This  is  a workaround  for  a CU11  68k  codegen  bug  */ 

//define  pg  pa  F a i L 1 f ( c ond  i t i on  , params)n  nnnnnnnX 
n n ((void)(pgpaFaiLed  ||  [((condition)  ? 1 : 0)  ||nn  n n \ 

n n n ((pgpaFaiLed  = TRUE),  ( pg p D e bug F o rma t H S t r params)))) 

#endifn  /*  ] [MACINTOSH  */ 

/* 


* A simple  pgpa  command  to  assert 

/ 

a given 

condition. 

" / 

//define 

pg pa  As s e r t ( c ond i t i on ) n n 

Q □ 

anno 

n 

n 

X 

n Q 

pgpaFai llf( [ (condition), n 

n n 

Q n n a 

n 

n 

X 

n □ 

n (pgpaFmtPrefix,  "(%s) 

not  true 

",  ^condition)) 

/* 

* Used 

to  add  more  formatted  information 

to  an  assertion 

f a i lure 

//define 

pg pa Fm t M s g ( pa r a ms ) n n n 

n n 

Q □ n Q 

n 

n 

X 

□ □ 

( ( VO i d ) ( pg pa F a i 1 ed  &S  ( pg p D e bu g P r e f i x F o rma t H S t r params))) 

#def  i ne 

pg  pa  M sg  ( me  s s a g e ) H n n 

n n 

n Q n n 

n 

Q 

X 

n n pg pa Fmt Msg ( ( pg pa Fmt P r e f i X,  "%s",  message)) 

/* 

* The  first  couple  parameters  which  must  always  be 

* passed  as  the  beginning  of  a pgpaCall  parameter  list. 

*/ 

//define  pgpa  Ca  I I P r e f i xn  nnnnnnnnnnnX 
Q D pgpaBuf,  pgpaBufSize,  pgpaFailed 

//define  pgpa  Ca  I I P r e f i xDef  n nnnnnnnnnnX 
n n uchar  *pgpaBuf,  int  pgpaBufSize,  Boolean  pgpaFailed 

/* 

* The  general  pgpa  command  to  call  a pgpa-style  function. 

*/ 

//define  pg  pa  C a I I ( f u n c t i on  , params)n  nnnnnnnnX 
n n ( ( VO i d ) ( pg pa F a i I ed  ||  ((pgpaFailed  = (function  params))  [=  FALSE))) 

/* 

* The  main  pgpa  macro  from  which  all  the  pgpa 

* macros  must  be  used  as  parameters. 

*/ 


//def  i ne 

pgpa(assertions)n 

n 

n 

n 

n 

n 

n 

D 

B 

B 

B 

X 

n 

□ 

don 

Q n n □ 

n 

n 

n 

Q 

n 

a 

n 

B 

B 

B 

X 

n 

n 

■Cn 

n Q n n 

n 

Q 

n 

n 

□ 

n 

n 

B 

B 

B 

X 

n 

n 

n 

Booleanan  pgpaFailed 

= 

FALSE; 

nn 

n 

s 

B 

B 

B 

X 

n 

n 

a 

PGP_DEBUG_ALLOC 

_BU  Fnn 

n 

Q 

□ 

n 

n 

B 

B 

B 

X 

n 

n 

n 

anna 

n 

□ 

n 

n 

s 

n 

n 

B 

B 

B 

X 

u 

ct 

n 

(assertions);n 

D 

□ 

Q 

a 

n 

□ 

□ 

B 

B 

B 

X 

n 

n 

n 

pgpaFmtHsg( (pgp 

aFmtPrefix 

, n n 

D 

n 

□ 

B 

B 

B 

X 
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n n 

n n n n "ASSERTION  FAILED  at  %s 

line 

% L d " , 

B B 

B 

\ 

n n 

n n n n FILE , (long) LINE, 

BB 

B 

fl 

B 

\ 

n n 

n if  ( pgpa Fa i 1 ed ) nn  n n n n 

B 

B 

B 

B 

B 

\ 

n n 

n n pgpDebug Hy b r i dS t r ( pgpaBuf ) ; nn 

B 

B 

B 

B 

B 

\ 

n n 

n PGP_DEBUG_DEALLOC_BUFn  n n n 

B 

B 

B 

B 

fl 

\ 

n n 

} while  (0) 

#def i ne 

pg pa  Ad d r Va 1 i d ( a dd r , po i n t ed A t Ty pe ) n n 

B 

B 

B 

B 

fl 

\ 

n n 

pgpaCall(pgpaInternalAddrValid,nn  n 

B 

B 

B 

B 

B 

\ 

n n 

n n ( pgpa Ca 1 1 P r ef i X,  addr,  a 1 i g no f ( po i n t ed A t Ty pe  ) , 

//addr) ) 

#def i ne 

pgpa S t r LenVa  1 i d ( s t r , minLen,  maxLen)n 

B 

B 

B 

B 

fl 

\ 

n Q 

pgpaCalL(pgpaInternalStrLenValid,Q  n 

B 

B 

B 

B 

B 

\ 

n n 

n n ( pg pa Ca 1 1 P r e f i X , str,  minLen,  maxLen, 

//str)) 

#def i ne 

pgpa PS t r LenVa 1 i d ( ps t r,  minLen,  maxLen)n 

B 

B 

B 

B 

B 

\ 

n n 

pgpaCallCpgpaInternalPStrLenValid,n  n 

B 

B 

B 

fl 

fl 

\ 

n n 

n n ( pg pa Ca 1 1 Pr e f i X,  pstr,  minLen, 

maxLen 

, //pstr)) 

/*  pgpaStrVaLid  currently  assumes  an  arbitrary 

reasonable 

length  */ 

#def i ne 

pgpa S t r Va  1 i d ( s t r ) n n n n n n 

B 

B 

B 

fl 

B 

\ 

n □ 

pgpa S t r Le n Va 1 i d ( s t r , 0,  32767) 

#d  e f i n e 

pgpa PS t r Va 1 i d ( ps t r ) nn  n n n n 

B 

B 

B 

fl 

B 

\ 

n n 

pgpa PS t r LenVa  1 i d ( ps t r , 0,  255) 

#eLse  /*  : DEBUG  C */ 

#d  e f i n e 

pgpa(assertions) 

#d  e f i n e 

pgpDebugMsg I f ( cond,  msg) 

//define 

pgpDebugPStr(pStr) 

//define 

pgpDebugFmtMsg(params) 

//define 

pgpDebugNsg(msg) 

//end  i f 

/*  : DEBUG  */ 

/* 

* Convenient  short-hands  follow 

*/ 

#def i ne 

pgpAsse r t ( cond i t i on ) n n n n n 

B 

B 

B 

fl 

B 

\ 

n □ 

pgpaCpgpaAssertCcondition)) 

#def i ne 

pgp As se r t Msg ( cond i t i on,  message)n  n 

B 

B 

B 

fl 

B 

\ 

o □ 

pgpa((nn  n n n n n n n 

B 

B 

B 

B 

B 

\ 

n n 

n pgpaAssert ( condi t i on ) ,n  n n n 

B 

B 

B 

B 

B 

\ 

n n 

n pg pa M s g ( me s sa g e ) ) ) 

# d e f i n e 

pgpAs se r t Add r Va  1 i d ( p t r , type)n  n n 

B 

B 

B 

B 

fl 

\ 

n Q 

pgpa ( pgpa Add rVa  1 i d ( pt r,  type)) 

#def i ne 

pgp As se r t Add rVa 1 i dMsg ( p t r , type,  message)n 

B 

B 

B 

B 

\ 

n n 

pgpaCCnn  n n n n n n n 

B 

B 

B 

B 

fl 

\ 

a n 

n pg pa  Add rVa 1 i d ( p t r , type),n  n a 

B 

B 

B 

B 

B 

\ 

Q n 

n pg paMsg ( me s sage ) ) ) 

#def i ne 

pgpAs se r t S t r LenVa 1 i d ( s t r,  minLen,  maxLen)n 

B 

B 

fl 

fl 

\ 

B B 

pgpa ( pgpa S t r LenVa 1 i d ( s t r,  minLen,  maxLen)) 

^define  pg p A s s e r t S t r Len Va L i d H s g ( s t r , minLen,  maxLen,  message)n  n \ 
n n pgpaCCn  nnnnnnnnnnnnn\ 

° n n pg pa S t r LenVa L i d ( s t r,  minLen,  maxLen),n  n n n n \ 

n n n pg pa M s g ( me s s a g e ) ) ) 
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#define  pg p A s s e r t PS t r Le n Va L i d ( p s t r , minLen,  maxLen)nn  n n n 

n n pg pa ( pg pa P S t r Le n Va L i d C p s t r , minLen,  maxLen)) 

#de-fine  pg  p A s s e r t PS  t r Len  Va  L i d M s g ( p s t r , minLen,  maxLen,  niessage)nn 
n a pgpaCCn  nnnnnnnnnnnnn 
n n n pg pa  PS t r Le n Va L i d ( p s t r , minLen,  maxLen),nn  n n n 

a D a pg pa M s g ( me s s a g e ) } } 


#define  pg p A s s e r t S t r Va I i d ( s t r ) n n n n n n 
n n pg  pa  ( pg  pa  S t r Va  L i d ( s t r ) ) 

#define  pg p A s s e r t S t r Va I i dH s g ( s t r , msg)n  n n n 
n n pgpa((n  nnnnnnnnn 
n n n pgpa St rVa L i d ( St r,  minLen,  maxLen),n  n 
□ an  pg pa n s g ( me s s a g e ) ) > 


#define  pg p A s s e r t PS t r Va L i d ( p s t r ) n n n n n 

a n pg  pa  ( pg  pa  PS  t r Va  L i d C p s t r ) ) 

#define  pg p A s s e r t PS t r Va L i d M s g ( p s t r , message)n  n 
n a pgpaCCn  nnnnnnnnn 
n n n pg pa  PS t r Va L i d ( p s t r , minLen,  maxLen),n 
n n n pg pa M s g ( me s s a g e ) > ) 


i n t nn 


pgp Fo rma t VAS t r C u c ha r *buffer,  int  bufferSize, 


n 

n 

n 

n 

n 

Q 

Boolean 

putLengthPrefi x 

n 

la 

D 

a 

o 

n 

Boolean 

canonicalizeNLs 

□ 

Q 

n 

n 

a 

u 

va  _ 1 i s t 

a rgs  ) ; 

uchar  *nn  pg p F o rma t H S t r ( u c h a r *buffer,  int  bufferSize, 

n n n n n n Boolean  c a non i c a L i z e N L s , char  const  *formatStr, 

uchar  *nn  pg p F o rma t P S t r ( u c h a r *buffer,  int  bufferSize, 

n n n n n n Boolean  c a non i c a I i z e N Ls , char  const  *formatStr, 

uchar  *nn  pg p F o r ma t P S t r 2 5 5 ( u c h a r *buffer.  Boolean  c a non i c a I i z e N Ls , 
n n n n n n char  const  *formatStr,  ...); 

char  *n  n pg p F o r ma t S t r ( c h a r *buffer,  int  bufferSize,  Boolean  c a no n i c a I i z e N Ls , 
n n n n n n char  const  *formatStr, 

#if  DEBUGn  /*  C */ 


uchar  PGPExport  *n  n 
n n n n n n 
uchar  PGPExport  *n  n 
n n n n n n 


pgpDebug Fo rma t H S t r ( uc ha r *buffer,  int  bufferSize, 
n n char  const  *formatStr, 
pgpDebugPrefixFormatHStrCuchar  *buffer, 
n n int  bufferSize,  char  const  *formatStr,  ...); 


/* 

* These  are  internal  routines  which  should  only  be  called  by  the  above  macros 
*/ 


void  PGPExportn  n 
BooleannPGPExportn 
n n n n n 

n n n n n 

BooleannPGPExportn 
n n n n n 

D a n n n 

BooleannPGPExportn 

□ n n n n 

□ □ n n n 


pgpDebugFillHemoryCvoid  *buffer,  size_t  length); 
pgpaInternalAddrValidCpgpaCallPrefixDef, 
n n n n void  const  *addr,  int  alignSize, 

n n n n char  const  *varName); 

pgpaInternalStrLenValidCpgpaCallPrefixDef, 
n n n n char  const  *str,  ulong  minLen, 

n n n n ulong  maxLen,  char  const  *varName); 
pgpaInternalPStrLenValidCpgpaCallPrefixDef, 
n n n n uchar  const  *str,  int  minLen, 

n n n n int  maxLen,  char  const  *varName); 


/* 

* Except  on  the  Mac,  when  debugger  messages  are  printed  or  assertions 
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* fail,  this  routine  will  always  be  called.  Its  only  purpose  is  to  be 

* used  as  a breakpoint  location,  to  catch  failed  assertions  from  the 

* debugge  r . 

*/ 

voidn  n pg p D e bu g H oo k ( vo i d ) ; 

#endif  /*  ] DEBUG  */ 

#ifdef  __cplusplus 

> 

# e nd i f 

#if  PRAGHA_IMPORT_SUPPORTED 
//pragma  import  reset 
//end  i f 


#endif  /*  3 PGPDEBUG_H  */ 
/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpErr.c 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpErr.c, V 1.3. 2.1  1997/06/07  09:50:02  mhw  Exp  $ 

*/ 

#incLude  <stdio.h>n  /*  For  sprintfC)  */ 

#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h" 

# e n d i f 


/*  List  of  aLL  error  codes  */ 
struct  pgperr_t  { 
n interror; 

n char  const  *string; 

>; 


static  struct  pgperr_t  const  pgperrListC]  = { 

#define  PGPERRCerr,  string)  { err,  string  }, 

#incLude  "pgpErr.h" 

n { 0,  0 >n  /*  End-of-List  pLacehoLder  */ 

>; 

/*  Get  rid  of  warning  from  gcc  about  missing  prototype  */ 
char  const  PGPExport  *n  pgperrStringCint  code); 


char  const  * 

pg p e r r S t r i ng ( i n t code) 

{ 

n unsigned  i; 

n static  char  bufC3  = "Unknown  error  code  -xxxxxxxxx"; 

n /*  1234567890123456789  */ 


n for  (i  = 0;  i < sizeof(pgperrList)/sizeofC*pgperrList);  i++)  { 

n n if  ( pg pe r r L i s t C i D . e r r o r ==  code) 

n n n return  pg pe r r L i s t C i D . s t r i ng ; 

n } 

n s p r i n t f ( bu f +2 0 , "%+d",  code); 

n return  buf; 

} 
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/* 

* pgpFIFO.c  --  This  is  just  an  abstraction  on  top  of  the  bytefifo. 

* Yes,  I am  forcing  the  issue.  I don't  care,  since  the  bytefifo 

* is  going  to  be  there  anyways,  so  I might  as  well  put  this  code 

* here. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpFIFO.c, V 1.1. 2.1  1 997/06/07  09:50:02  mhw  Exp  $ 

*/ 


#i  f def  HAVE_CONFIG_H 
#incLude  "config.h" 

#endi f 

#incLude  "pgpByteFIFO.h" 
#incLude  "pgpFIFO.h" 


struct 

a 

n 

Q 

n 

a 

o 

n 

n 

□ 

>; 


PgpFifoDesc  const 
"Byte  F i f o " , 
byteFi f oCreate, 
byteFi foRead, 
byteFi foWri te, 
byteFi foPeek, 
byteFi f oSeek, 
byteFifoFLush, 
byteFi foDestroy, 
byteFifoSize 


pgpByteFi foDesc 


{ 


c 

CCCHK:6305458c0338e44f8842bb7e50539e5e7974]] 


Pretty  Good  Privacy  5.0'^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


445 


pgpFIFO.h 


/* 

* pgpFIFO.h  --  A general  interface  to  a First-In  First-Out  system  used 

* by  PGP.  There  can  be  many  FIFO  implementations,  and  this  is  the 

* interface  that  each  must  support. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpFIFO.h, V 1.3. 2.1  1997/06/07  09:50:03  mhw  Exp  $ 

*/ 


#ifndef  PGPFIFO.H 
#define  PGPFIFO.H 

#include  "pgpUsuals.h 

#ifdef  ..cplusplus 
extern  "C"  f 
# e n d i f 


struct  Pgp F i f oCon t ex t ; 

#ifndef  T Y P E. PG P F I F 0 CONT E XT 
#define  T Y P E. PG P F I F 0 C ONTE XT  1 

typedef  struct  PgpFifoContext  PgpFifoContext; 
#end  i f 


struct  PgpFifoDesc  f 
n char  const  *name; 

a struct  PgpFifoContext  * (*create)  (void); 


n size.t  (*read)  (struct  PgpFifoContext  *fifo,  byte  *buf,  size.t  len); 

B size.t  (*write)  (struct  PgpFifoContext  *fifo,  byte  const  *buf, 

B B B size.tlen); 


B byte  const  * (*peek)  (struct  PgpFifoContext  *fifo,  unsigned  *len); 

B void  (*seek)  (struct  PgpFifoContext  *fifo,  unsigned  len); 


B void  (*flush)  (struct  PgpFifoContext  *fifo); 

B void  (*destroy)  (struct  PgpFifoContext  *fifo); 


B unsigned  long  (*size)  (struct  PgpFifoContext  const  *fifo); 

>; 

#ifndef  T Y P E. PG P F I F 0 D E S C 

//define  TYPE.PGPFI  FODESC  1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

//endi  f 


//define 
//define 
//def  i ne 
//def  i ne 
//define 
//def  i ne 
//define 
#def  i ne 


pg  p F i f o C r ea t e ( f d ) ( f d ) -> c r e a t e ( ) 

pgpFifoRead(fd,f,b,l)  (fd)->read(f,b,l) 
pgpFifoWrite(fd,f,b,l)  (fd)->write(f,b,l) 
pgpFifoPeek(fd,f,l)  Cfd)->peek(f,l) 
pgpFifoSeek(fd,f,l)  (fd)->seek(f,l) 
pgpFifoFlush(fd,f)  (fd)->flush(f) 
pgpFifoDestroy(fd,f)  (fd)->destroy(f) 
pg p F i f o S i z e ( f d , f ) ( f d ) -> s i z e ( f ) 


extern  struct  PgpFifoDesc  const  PGPExport  pg pBy t e F i f o D e s c ; 
extern  struct  PgpFifoDesc  const  PGPExport  pg p F i I e F i f o D e s c ; 
extern  struct  PgpFifoDesc  const  PGPExport  pgpFlexFifoDesc; 
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#i f def  cpLuspLus 

} 

#end i f 

#endif  /*  PGPFIFO  H */ 
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/* 

* pgpFiLe.c  --  An  abstraction  to  files 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r L o r d SM 1 T . E D Ll> 

★ 

* $Id:  pgpFile.c, V 1.5. 2. 2 1997/06/07  09:50:03  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#incLude  <errno.h> 

#incLude  <stdio.h> 

#ifdef  MACINTOSH 
#i nc  Lude  <uni x . h> 

//include  <stat.h> 

#e  L se 

#incLude  <sy s / t y p e s . h>n  n 
#incLude  <sys/stat.h> 

#end i f 

#incLude  "pgpDebug.h" 

#incLude  "pgpFile.h" 

#incLude  "pgpCFB.h" 

#incLude  "pgpHem.h" 

//include  "pgpErr.h" 

#incLude  "pgpUsuals.h" 


/*  required  for  ULtrix  */ 


struct  File  { 

n int  (*doCLose)  (FILE  *fiLe,  void  *arg); 
a void  *cLoseArg; 
n struct  PgpFileError  err; 

a struct  PgpCfbContext  *cfb; 

n FILE  *f; 

n int  error; 

n int  flags; 

n Long  maybeSize;nn  /*  Size  or  -1  if  not  a regular  file,  for  sizeAdvise  */ 

>; 


* These  are  the  different  flags,  which  define  the  various  operations 

* * * and  types. 

*/ 

//define  FLAGS_READn  1 
//define  F L AG  S _W  R I T En2 
#define  FLAGS_FILEn  4 
#define  FLAGS_PROCn  8 

#define  PGP_FILE_READn  { F L AG S_ F I LE | F L AG S_ R E A D ) 

//define  PG  P_  F I LE_  W R I T En  ( F LAG  S_  F I LE  | F L AG  S_  W R I T E ) 

//define  PG  P_  P RO  C _ W R I T En  ( F LAG  S_  PRO  C | F L AG  S_U  R I T E ) 


/*  Stdio  Functions  */ 
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static  void 

setError  (struct  PgpFiLe  *file,  int  code) 

{ 

n struct  File  *fp  = (struct  File  *)fiLe->priv; 

n f p->e  r r . f = f i L e ; 

n fp->err.syserrno  = errno; 
n f p->e r r . e r ro r = code; 

n fp->error  = terror  (fp->f); 
n i f ( f p->e  r ro  r ) ( 

n n fp->err.fpos  = pgpFiLeTelL  (file); 
n > 

} 


static  size_t 

stdioRead  (void  *ptr,  size_t  size,  struct  PgpFiLe  *file) 
{ 


n 

struct  File  *fp  = (struct 

File  *)fiL  e->p  r i v; 

n 

size 

_t  ret; 

a 

if  ( 

! (fp->fLags  8 FLAGS_READ))  { 

n 

n 

setError  (file,  PGPERR 

_FILE_BAD0P); 

D 

n 

fp->error  = PG P E R R_ F I LE_B A D 0 P ; 

n 

n 

return  0; 

n 

> 

n 

ret 

= fread  (ptr,  1,  size. 

f p->f  ) ; 

□ 

if  ( 

! ret ) 

n 

□ 

setError  (file,  PGPERR 

_FILE_0PFAIL); 

□ 

return  ret; 

> 


static  size_t 

stdioWrite  (void  const  *ptr,  size_t  size,  struct  PgpFiLe  *fiLe) 
{ 

n struct  File  *fp  = (struct  File  *)fiLe->priv; 

n size_t  ret; 

n if  (!  (fp->fLags  S F L AG S _W R I T E ) ) ( 
n n setError  (file,  PG P E R R_ F I LE_B ADOP ) ; 
n B fp->error  = PGPERR_ FI LE_BAD0P; 

B B return  0; 

n } 

n ret  = fwrite  (ptr,  1,  size,  fp->f); 
n if  (!ret) 

n B setError  (file,  PG P E R R_ F I LE_0P F A I L ) ; 

n return  ret; 

> 


static  int 

stdioFlush  (struct  PgpFiLe  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  *)fiLe->priv; 
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n 

i nt 

ret  ; 

a 

i f 

(!  (fp->fLags  & FLAGS.WRITE)  ) 

□ 

B 

return  PG P E R R_ F I LE_B A DO P ; 

B 

ret 

= ffLush  (fp->f); 

B 

i f 

(ret)  { 

B 

B 

ret  = PGPERR_FILE_OPFAIL; 

B 

B 

setError  (fiLe,  ret); 

B 

B 

fp->error  = ret; 

n } 


n return  ret; 

> 

static  Long 

stdioTeLL  (struct  PgpFiLe  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  * ) f i L e->p r i v ; 

n return  fteLL  (fp->f); 

> 

static  int 

stdioSeek  (struct  PgpFiLe  *fiLe,  Long  offset,  int  whence) 
{ 

n struct  FiLe  *fp  = (struct  FiLe  *)fiLe->priv; 
n int  code ; 

n if  (!  (fp->fLags  & FLAGS_READ)) 
n n return  PG P E R R_ F I LE_B A D 0 P ; 

n code  = fseek  (fp->f,  offset,  whence); 

n if  (code)  { 

n n code  = PG P E RR_ F I L E_0 P F A I L ; 
n n setError  (fiLe,  code); 

n n fp->error  = code; 

n } 

n return  code; 

} 


/*  Non-specific  functions  (stdio  or  encrypted)  */ 


static  int 

fiLeCLose  (struct  PgpFiLe  *fiLe) 

{ 

n struct  FiLe  *fp  = (struct  FiLe  * ) f i L e->p r i v; 
n int  code  =0; 

n if  (fp->fLags  & FLAGS.FILE) 

n n code  = fcLose  (fp->f); 
n eLse  if  (fp->fLags  & FLAGS_PROC)  { 
n n if  ( f p->do C L o s e ) 

n n n code  = fp->doCLose  (fp->f,  f p-> c L o s e A r g ) ; 
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n n /*  We  may  not  be  able  to  'close'  here..  I hope  that  is  ok  */ 

n > 

n i f ( code  ) { 

n n code  = PG P E R R_ F I LE_0 P F A 1 L ; 
n n setError  (file,  code); 

n n fp->error  = code; 

n n return  code; 

a y 

a if  (fp->cfb) 

n n pgpCf bDest roy  (fp->cfb); 

n memset  (fp,  0,  sizeof  (*fp)); 
n pgpHemFree  (fp); 

n memset  (file,  0,  sizeof  (*file)); 

n pgpMemFree  (file); 

n return  code; 

> 

static  i nt 

fileEof  (struct  PgpFile  const  *file) 

{ 

n struct  File  *fp  = (struct  File  * ) f i I e->p r i v; 

n return  feof  (fp->f); 

} 

static  long 

f i I e S i z e Ad V i s e (struct  PgpFile  const  *file) 

{ 

B struct  File  *fp  = (struct  File  * ) f i I e->p r i v ; 

B return  f p->may be S i z e ; 

} 

static  struct  PgpFileError  const  * 
fileError  (struct  PgpFile  const  *file) 

{ 

B struct  File  *fp  = (struct  File  * ) f i I e->p r i v; 

B if  (fp->error) 

B B return  &(fp->err); 

B return  NULL; 

} 

static  void 

f i I eC I ea r E r ro r (struct  PgpFile  *file) 

{ 

B Struct  File  *fp  = (struct  File  * ) f i I e->p r i v; 

B clearerr  (fp->f); 

B fp->error  = 0; 

} 

/*  Converts  a writing  file  to  a reading  file  */ 
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static  int 

f i L e W r i t e 2 r e a d (struct  PgpFiLe  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  * ) f i L e -> p r i v ; 

n if  (fp->fLags  !=  PG P_ F I L E_ W R I T E ) 
n n return  PGPERR_FILE_BADOP; 

n fp->fLags  = PG P_ F I LE_ R E A D ; 

n /*  XXX  --  should  I rewind  this  file?  */ 
a /*  return  pgpFileSeek  (file,  0,  SEEK_SET);  */ 

n return  0; 

> 

/*  Creates  a new  Pg p C f b C o n t e x t and  returns  it.  Returns  NULL  otherwise  */ 
static  struct  PgpCf bContext  * 
fileCfb  (struct  PgpFiLe  const  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  * ) f i L e-> p r i v ; 
n if  (fp->cfb) 

n n return  pgpCfbCopy  (fp->cfb); 

n return  NULL; 

} 


/*  Open  functions  */ 


/*  take  a FILE*  and  convert  it  to  a PgpFiLe*  */ 

static  struct  PgpFiLe  * 

doOpen  (FILE  *fiLe,  int  ffLags) 

{ 

n struct  PgpFiLe  *fp; 

n struct  File  *ffp; 

n struct  stat  buf; 


n if  ( ! f i L e ) 

n n return  NULL; 

n fp  = (struct  PgpFiLe  *)pgpf1emALLoc  (sizeof  (*fp)); 
n if  ( ! f p) 
n n return  NULL; 

n f f p = (struct  File  * ) pg pHem A L L o c (sizeof  (*ffp)); 
n if  ( ! f f p)  { 

n n pgpHemFree  (fp); 

n n return  NULL; 

n > 


n memset  (ffp,  0,  sizeof  (*ffp)); 
n memset  (fp,  0,  sizeof  (*fp)); 

n if  (fstat  (fiLeno  (file),  &buf)  ==  0 88 
n n n (S_IFHT  8 buf.st_mode)  ==  S_IFREG) 
n n f f p->ma y be S i z e = buf.st_size; 

n else 
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n n f f p->ma y b e S i z e = -1; 
n 

n rewind  (file); 

n ffp->f  = file; 

n ffp->fLags  = ffLags; 

n fp->priv  = ffp; 

n fp->read  = stdioRead; 

n fp->write  = stdioWrite; 

n fp->fLush  = stdioFlush; 

n fp->cLose  = fileCLose; 

n fp->teLl  = stdioTeLL; 

n fp->seek  = stdioSeek; 

n fp->eof  = fiLeEof; 
n f p-> s i z e Ad V i s e = f i L e S i z e Ad v i s e ; 

n fp->error  = fiLeError; 
n fp->cLearError  = fileCLearError; 
n f p-> w r i t e 2 r e a d = f i L e W r i t e 2 r e a d ; 

n fp->cfb  = fiLeCfb; 

n return  fp; 

} 

/*  Convert  a FILE*  to  PgpFiLe*  in  Write  Mode  */ 
struct  PgpFiLe  * 

pg p F i L e W r i t eOpe n (FILE  *fiLe,  struct  Pg p C f b C o n t ex t *cfbp) 

( VO i d ) c f b p ; nn  /*  Avoid  warning  */ 

pgpAssert  (cfbp  ==  NULL); 
return  doOpen  (file,  PGP_ F I LE_WRITE ) ; 

/*  Convert  a FILE*  to  PgpFiLe*  in  Read  Mode  */ 
struct  PgpFiLe  * 

pgpFiLeReadOpen  (FILE  *fiLe,  struct  PgpUICb  const  *ui,  void  *ui_arg) 
{ 

n (void)ui; 
n (void)ui_arg; 
n / * 

n * We  stiLL  need  to  check  the  fiLe  for  encryption  and  obtain 
n * the  decryption  key,  somehow, 

n * / 

n return  doOpen  (fiLe,  PG P_ F I LE_R E A D ) ; 

> 


struct  PgpFiLe  * 

pg p F i L e P r o c W r i t e Op e n (FILE  *fiLe,  int  (*doCLose)  (FILE  *fiLe,  void  *arg), 
n n void*arg) 

{ 

a struct  PgpFiLe  *fp; 
n struct  FiLe  *f; 

n fp  = doOpen  (fiLe,  PGP_PROC_WRITE ) ; 

n f = (struct  FiLe  *)fp->priv; 
n pgpAssert  (f); 

n f->doCLose  = doCLose; 
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n f->cLoseArg  = arg; 
n return  fp; 

> 

/* 

* Local  Variables: 

* tab-wi dth  : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpFiLe.h  --  an  abstraction  to  files 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  By:n  Derek  Atkins  < wa  r I o r dcDH  I T . E D U> 

* 

* $Id:  pgpFile.h, V 1.6. 2.1  1997/06/07  09:50:03  mhw  Exp  $ 

*/ 

#ifndef  PGPFILE.H 
^define  PGPFILE.H 

#include  "pgpTypes.h" 

#ifdef  ..cplusplus 
extern  "C"  { 

#end  i f 

struct  PgpUICb; 

#ifndef  TYPE. PGPUICB 

#define  TYPE. PGPUICB  1 

typedef  struct  PgpUICb  PgpUICb; 

#end i f 

struct  Pg pC f b C o n t e X t ; 

#ifndef  TYPE.PGPC FBCONTEXT 
#define  T Y PE.PG P C F BC ONT E XT  1 

typedef  struct  PgpCfbContext  PgpCfbContext; 

#end  i f 

struct  PgpPipeline; 

Sifndef  T YP E.PG PP I P E LI N E 

#define  TYPE. PGPPIPELINE  1 

typedef  struct  PgpPipeline  PgpPipeline; 

#end i f 

struct  PgpFile; 

#ifndef  TYPE. PGPFILE 

^define  TYPE. PGPFILE  1 

typedef  struct  PgpFile  PgpFile; 

#end i f 

struct  PgpFileError  { 


Q 

struct 

PgpFile  *f;n 

/* 

The 

PgpFile  for  I/O  Errors  */ 

n 

1 ongn 

f pos ;n  n 

/* 

file 

position  */ 

n 

i ntn 

error ;n  n 

/* 

PGP 

error  code  (PGPERR.*)  */ 

n 

>; 

i n t n 

syserrno;n 

/* 

don  ' 

t use  errno;  that's  a macro!  */ 

#ifndef  T YPE.PG P F I LE E R RO R 
//define  T YPE.PG  P F I LE  E R ROR  1 

typedef  struct  PgpFileError  PgpFileError; 

//end  i f 

struct  PgpFile  { 
n void*priv; 

n size.t  (*read)  (void  *ptr,  size.t  size,  struct  PgpFile  *file); 

n size.t  (*write)  (void  const  *ptr,  size.t  size,  struct  PgpFile  *file); 
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n int  C*fLush)  (struct  PgpFiLe  *fiLe); 

n int  (*cLose)  (struct  PgpFiLe  *fiLe); 

n Long  (*teLL)  (struct  PgpFiLe  *fiLe); 

n int  (*seek)  (struct  PgpFiLe  *fiLe,  Long  offset,  int  whence); 

n int  (*eof)  (struct  PgpFiLe  const  *fiLe); 

n Long  ( * s i z e Ad v i s e ) (struct  PgpFiLe  const  *fiLe); 

n struct  PgpFiLeError  const  * (*error)  (struct  PgpFiLe  const  *fiLe); 

n void  ( * c L ea r E r r o r ) (struct  PgpFiLe  *fiLe); 

a int  ( * w r i t e 2 r ea d ) (struct  PgpFiLe  *fiLe); 

a struct  PgpCfbContext  * (*cfb)  (struct  PgpFiLe  const  *fiLe); 


>; 

#ifndef  TYPE_PGPFILE 
#define  TYPE_PGPFILE  1 
typedef  struct  PgpFiLe  PgpFiLe; 
#end  i f 


struct 

a 

struct 

a 


PgpFiLe  PGPExport  *pg p F i L e Rea dOpe n (FILE  *fiLe, 
struct  PgpUICb  const  *ui,  void  *ui_arg); 

PgpFiLe  PGPExport  *pg p F i L e W r i t eOpe n (FILE  *fiLe, 
struct  PgpCfbContext  *cfb); 


struct 

a 

a 


Pg  p F i L e 
a 
a 


PGPExport  *pg p F i L eP roc W r i t eOpen  (FILE  *fiLe, 
a a int  (*doCLose)  (FILE  *fiLe,  void  *arg), 

a a void*arg); 


struct 

struct 


PgpFiLe  PGPExport 
PgpFiLe  PGPExport 


*pg p F i L e P i pe L i n eO p e n (struct  PgpPipeLine  *head); 
* pg p F i L eM emRea do p e n (void  *base,  size_t  Len); 


#ifdef cpLuspLus 

} 

#end  i f 


#d  e f i n e 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def i ne 


pgpFi LeRead(p,s,f)  (f)->read(p,s,f) 
pgpFi LeWrite(p,s,f)  (f)->write(p,s,f) 
pg p F i L e F L u s h ( f ) ( f ) -> f L u s h ( f ) 
pg p F i L eC L ose ( f ) ( f ) -> c L o s e ( f ) 

pg p F i L eTe L L ( f ) (f)->teLL(f) 
pgpFi LeSeek(f,o,w)  (f)->seek(f,o,w) 
pg p F i L e E o f ( f ) (f)->eof(f) 

pgpFiLeSizeAdvise(f)  (f)->sizeAdvise(f) 
pg p F i L e E r r o r ( f ) ( f ) ->e r ro r ( f ) 

pgpFi LeCLearError(f)  (f)->cLearError(f) 
pgpFi LeWrite2Read(f)  (f)->urite2read(f) 
pg p F i L e C f b ( f ) (f)->cfb(f) 


#endif  /*  PGPFILE_H  */ 
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/* 

* pg p F i L e F I FO . c --  Use  a disk  file  as  a fifo. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* FiLe  grows  indefiniteLy  untiL  fifo  empties,  at  which  pointers  reset 

* to  the  beginning.  (FiLe  never  shrinks  though.) 

* So  fiLe  size  wiLL  be  the  maximum  of  the  number  of  bytes  written  since 

* the  previous  time  the  fifo  was  empty. 

* 

* $Id:  pgpFi LeFIFO. c,v  1.7. 2. 2 1997/06/07  09:50:04  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 


#incLude 

"config.h" 

#end i f 

#incLude 

<stdio.h>n  /*  For 

#incLude 

"pgpDebug.h" 

#incLude 

"pgpCFB.  h" 

#incLude 

"pgpCipher.h" 

#incLude 

" pgp  F I FO  . h " 

#incLude 

"pgpMem.h" 

ttincLude 

"pgpUsuaLs.h" 

#i nc  Lude 

"pgpErr.h" 

/tincLude 

"pgpRndom  . h" 

/tincLude 

"pgpFi LeRef.h" 

BUFSIZ 


*/ 


#if  (BUFSIZ  < 16384)  8&  (MACINTOSH  ||  WIN32) 
^define  kPG P F I F OBu f S i z enn  16384 

#e  L se 

^define  kPGPFI FOBuf Si  zenn  BUFSIZ 
#e nd i f 


/*  Use  this  cipher  for  encrypting  data  to  disk, 
^define  D E F AU LTC I PH E Rn  n PG P_C I PH E R_C AS T 5 


*/ 


/* 

★ 

putoff  is  offset  in 

fiLe 

where  next 

•k 

getoff  is  offset  in 

fiLe 

where  next 

★ 

peekof f-getof f is  tt 

bytes 

in  buf  we 

* 

1 

written  byte  wiLL  go 
read  byte  wiLL  come  from 
have  read  and  decrypted 


struct  PgpFi foContext  ( 
n FILE  *f; 

n PGPFiLeRef  *fiLeRef; 
n byte  *buf; 

n unsigned  Long  putoff,  getoff,  peekoff; 
n struct  Pg pC f b C on t ex t *rdcfb,  *wrcfb; 

>; 


static  void 

f i L e F i f o F L ush ( s t ru c t Pg p F i f o C on t ex t *fifo) 
{ 

n fifo->putoff  = 0; 

n fifo->getoff  = 0; 

n f i f o->peekof f = 0; 

} 
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static  unsigned  Long 

f i L e F i f oS i z e ( s t ru c t Pg p F i f o C o n t e x t const  *fifo) 

{ 

n return  (unsigned  L ong ) ( f i f o->p u t o f f - f i f o->g e t o f f ) ; 

> 

static  void 

f i L e F i f o F r eeC f bs ( s t r u c t Pg p F i f o C on t e x t *fifo) 

{ 

n pg p C f b D e s t r oy ( f i f o-> r d c f b ) ; 
n p g p C f b D e s t r oy ( f i f o->w r c f b ) ; 

} 

/*  Return  negative  on  error,  0 on  success  */ 
static  int 

f i L e F i f ol n i t C f b s C s t r u c t Pg p F i f o C o n t e x t *fifo) 

{ 

n struct  Pg p Ra nd omC on t e X t *rc; 
a struct  PgpCipher  const  *cipher; 
n unsigned  cfbkeysize; 
n byte  *cfbkey; 

a byte  cfbiv[PGP_CFB_HAXBLOCKSIZE:; 

n /*  XXX  Interface  doesn't  provide  env  to  choose  dfLt  cipher  */ 
n cipher  = pg p C i ph e r By N umbe r ( D E F A U LT C I P H E R ) ; 
n if  ([cipher)  ( 
n n return  PG P E R R_G E N E R I C ; 
n > 

n cfbkeysize  = c i p h e r-> key s i z e ; 
n cfbkey  = pgpMemALLoc(cfbkeysize); 
n if  (Icfbkey)  { 
n n return  PG P E R R_G E N E R I C ; 
n > 

n rc  = pgpRandomCreate(); 
n pgpAssert(rc); 

n pgpRandomGetBy tes ( rc,  cfbkey,  cfbkeysize); 

n pgpRandomGetBytes(rc,  cfbiv,  sizeof(cfbiv)); 

n pgpRandomDestroy(rc); 

n fifo->rdcfb  = pgpCfbCreate(cipher); 
n pgpCfbInit(fifo->rdcfb,  cfbkey,  cfbiv); 
n pgpC L ea rHemo ry ( c f b key , cfbkeysize); 
n pgpC L ea rMemo ry ( c f b i V,  s i z eo f ( c f b i v ) ) ; 
n pgpMemFree(cfbkey); 

n fifo->wrcfb  = pgpCfbCopy(fifo->rdcfb); 
a if  ( I f i f o->w r c f b ) { 
n n f i L e F i f o F r ee C f b s ( f i f o ) ; 
n n return  PG P E R R_G EN E R I C ; 
n } 

n return  0; 

} 

static  struct  Pgp F i f oCont ext  * 
fileFifoCreate() 

{ 

n struct  PgpFi f oContext  *fifo; 

B fifo  = (struct  PgpFifoContext  *)pgpMemALLoc(sizeof(*fifo)); 
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n if  (!fifo) 
n n return  NULL; 

n fifo->buf  = (byte  * ) pg pM em A L L o c ( kPG P F I F OBu f S i z e ) ; 
n if  (!fifo->buf)  { 
n n pg pM em F r e e ( f i f o ) ; 

n n return  NULL; 

n } 

B if  ( f i L e F i f ol n i t C f b s C f i f o ) < 0)  { 

B B pg pH em F r e e ( f i f o-> bu f ) ; 

B B pg pHem F r e e C f i f o ) ; 

B B return  NULL; 

B } 

B fifo->f  = pg p S t d I OOpenT emp F i L e ( & f i f o-> f i L e R e f , NULL); 
B if  (!fifo->f)  { 

B B f i L e F i f o F r e e C f b s ( f i f o ) ; 

B B pgpHemFreeCfifo->buf); 

B a pg pHem F r e e ( f i f o ) ; 

B B return  NULL; 

B } 

B fifo->putoff  = 0; 

B fifo->getoff  = 0; 

B f i f o->pe e ko f f = 0; 

D a 

B return  fifo; 

} 

static  void 

f i L e F i f o D e s t r oy ( s t r u c t Pg p F i f o C on t e x t *fifo) 

{ 

B fcLose(fifo->f); 

B if  ( f i f o-> f i L e R e f !=  NULL) 

B { 

B B pg p De L e t e F i L e ( f i f o-> f i L e Re f ) ; 

B B pgpFreeFiLeRef(fifo->fiLeRef); 

B } 

B fiLeFifoFreeCfbs(fifo); 

B pg p C L ea r Memo r y ( f i f o->bu f , k PG P F I F OBu f S i z e ) ; 

B pgpMemFree(fifo->buf); 

B pg pMem F r e e ( f i f o ) ; 

> 


/*  This  could  definitely  use  some  optimizing  */ 
static  byte  const  * 

f i I e F i f o Pee k ( s t r u c t Pg p F i f o C on t e x t *fifo,  unsigned  *len) 
{ 

B unsigned  dsklen; 

B if  ( f i f o->pu t o f f ==  f i f o->g e t o f f ) { 

B n *len=0; 

B B return  NULL; 

B > 


B if  ( f i f o->pee kof f > f i f o->g e t of f ) { 

B B /*  Have  peeked  data  in  buffer  already  */ 

B n *len  = f i f o->p e e ko f f - f i f o->g e t of f ; 

B B return  fifo->buf; 

B } 
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n if  ( f i f o->p u t o f f - fifo->getoff  > kPG P F I F OB u f S i z e ) 
n n dskLen  = kPG P F I F 0 Bu f S i z e ; 
n else 

n n dskLen  = C u n s i g n ed ) ( f i f o->pu t o f f - f i f o->g e t o f f ) ; 

n if  ( f s e e k ( f i f o->f , f i f o->g e t o f f , SEEK_SET)  !=  0)  { 
n n *Len=0; 

n n return  NULL; 

n } 

n if  ( f r ea d ( f i f o->b u f , 1,  dskLen,  fifo->f)  !=  dskLen)  { 
n n *Len=0; 

n n return  NULL; 

n } 


n pg p C f b D e c r y p t ( f i f o-> r d c f b , fifo->buf,  fifo->buf,  dskLen); 

n f i f o->p e e ko f f = fifo->getoff  + dskLen; 

n *Len  = dskLen; 

n return  fifo->buf; 

} 


static  void 

f i L e F i f o S e e k ( s t r u c t Pg p F i f o C o n t e x t *fifo,  unsigned  Len) 

{ 

a if  (!Len) 
n n return; 

n pgp As se r t ( f i f o->pu t of f - fifo->getoff  >=  (Long)Len); 

n pg p A s s e r t ( f i f o->pe e ko f f - fifo->getoff  >=  (Long)Len); 

n pgp As se r t ( f i f o->pu t of f >=  f i f o->p e e ko f f ) ; 


n fifo->getoff  +=  Len; 

n if  ( f i f o->g e t o f f < f i f o->p e e ko f f ) { 
n n /*  Move  data  in  fifo  down  */ 

n n pg p Co py Memo r y ( f i f o->b u f + L e n , fifo->buf,  f i f o-> pe e ko f f - f i f o->g e t o f f ) ; 

n > 

n /*  If  fifo  becomes  empty,  reset  pointers  to  beginning  of  fiLe  */ 
n if  ( f i f o->putof f ==  f i f o->ge t of f ) 

n n fifo->putoff  = fifo->getoff  = f i f o->pe e ko f f = 0; 

> 

static  size_t 

f i L e F i f o W r i t e ( s t r u c t Pg p F i f o C on t e x t *fifo,  byte  const  *buf,  size_t  Len) 

{ 

a size_t  LenLeft; 

a size_t  bufLen; 

a if  (fseek(f ifo->f,  f i f o->pu t o f f , SEEK_SET)  !=  0) 
a a return  PGPERR_FILEFIFO_SEEK; 

a LenLeft  = Len; 

a whiLe  (LenLeft)  { 

a a bufLen  = (LenLeft  < kPG P F I F OBu f S i z e ) ? LenLeft  : k PG P F I F OBu f S i z e ; 

a a pg p C f b E n c r y p t ( f i f o-> w r c f b , buf,  fifo->buf,  bufLen); 

a a if  ( f w r i t e ( f i f o->buf , 1,  bufLen,  fifo->f)  !=  bufLen) 
a a a return  PGPERR_FILEFIFO_WRITE; 
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buf  +=  bufLen; 


c 


c 


c 


n 

a 

lenleft  -=  buflen; 

n 

a 

fifo->putoff  +=  buflen; 

□ 

} 

Et 

> 

return  ten; 

static 

si ze_t 

f i L e F i f 0 R ea d ( s t r u c t PgpFi f oContext  *fifo. 

byte 

□ 

size_t  avail; 

n 

/* 

First  get  data  out  of  peekahead  buffer  i 

n 

if 

( f i f o->pe e ko f f > f i f o->g e t o f f ) -C 

n 

n 

avail  = f i f o->peekof f - f i f o->g e t o f f ; 

n 

n 

if  (avail  > len) 

□ 

□ 

n avail  = len; 

Q 

B 

pg p Copy Memo ry { f i f o->b u f , buf,  avail); 

n 

B 

len  -=  avail; 

n 

B 

buf  +=  avail; 

a 

B 

fifo->getoff  +=  avail; 

n 

B 

if  ( f i f o->pee kof f > f i f o->g e t o f f ) 

{ 

a 

B 

n /*  Move  data  in  fifo  down  */ 

n 

B 

n pg p C 0 py Memo ry ( f i f o->bu f +a va i 1 

, fifo 

a 

B 

n fifo->peekoff-fifo->getoff); 

a 

B 

> 

a 

n 

if  (len  ==  0) 

o 

s 

n return  avail; 

a 

> 

n 

avail  = fifo->putoff  - f i f o->g e t o f f ; 

o 

i f 

(avail  > len) 

D 

Q 

avail  = len; 

a 

if 

( f seek ( f i f o->f , f i f o->g e t of f , SEEK 

_SET) 

a 

B 

return  PG P E R R_ F I LE F I F0_S E E K; 

n 

i f 

(fread(buf,  1,  avail,  fifo->f)  != 

a va i 1 ) 

n 

B 

return  PG P E RR_ F I LE F I F 0_R E A D ; 

a 

pgpC f bDe c ryp t ( f i f o->rd cf b,  buf,  buf. 

a va  i 1 ) 

n 

fifo->getoff  +=  avail; 

n 

i f 

( f i f o->pu 1 0 f f ==  f i f o->g e 1 0 f f ) 

n 

n 

fifo->putoff  = fifo->getoff  = 0; 

a 

} 

return  avail; 

struct 

PgpFifoDesc  const  pgp F i 1 e F i f oDes c 

= { 

□ 

"Fi 

le  Fifo", 

0) 


n fileFifoCreate, 
n fiLeFifoRead, 
n fiLeFifoWrite, 
n fiLeFifoPeek, 
n fiLeFifoSeek, 
n fiLeFifoFLush, 
n f i L e Fi f oDest roy , 

n fileFifoSize 
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>; 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpFileNames.c 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Utility  functions  to  work  with  filenames  in  different  OS's 

* These  functions  all  return  newly  allocated  character  arrays 

* which  it  is  the  responsibility  of  the  caller  to  free. 

* 

* Based  on  pgpAppFile, 

* written  byinColin  Plumb  and  Derek  Atkins  <wa r L o r dSM I T . E D U> 

* 

* $Id:  pg p F i I e Na me s . c , V 1.6. 2. 2 1997/06/07  09:50:04  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#endi f 


n c 1 ud  e 

<stdarg.h> 

nc  Lude 

<stdi 0 . h> 

n c 1 ude 

<string.h> 

n c 1 u d e 

"pgpDebug.h" 

nc  Lude 

"pgpFi LeNames 

n c L u d e 

"pgpMem.h" 

/* 

* DIRSEPS  is  a string  of  possible  d i r e c t o r y- s e pa r a t i on  characters 

* The  first  one  is  the  preferred  one,  which  goes  in  between 

* PGPPATH  and  the  file  name  if  PGPPATH  is  not  terminated  with  a 

* directory  separator. 

* 

* PATHSEP  is  a the  directory  separator  within  a PATH  of  directories. 

* Only  one  character  per  platform,  please 
*/ 

#if  d e f i n ed ( MS  DO S ) ||  def i ned ( ATARI ) ||  de f i n e d ( _W I N 32 ) 

static  char  const  DIRSEPSCD  = "\\/:"; 

^define  PATHSEP  ' ; ' 

^define  SINGLE_EXT  1 

#eLif  def i ned(UNIX) 

static  char  const  DIRSEPSCD  = "/"; 

//define  PATHSEP 

//elif  d e f i n ed  ( AM  I G A ) 

static  char  const  DIRSEPSCH  = "/:"; 

//define  PATHSEP 

//elif  de  f i n e d ( VMS  ) 

static  char  const  DIRSEPSCD  = "D:";n  /*  Any  more?  */ 

//define  PATHSEP 
//define  SINGLE_EXT  1 


//elif  def  ined(MACINTOSH) 
static  char  const  DIRSEPSCD  = 
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#define  PATHSEP  ' ; ' 

# e L s e 

terror  Unknown  operating  system  - need  one  of\ 

UNIX,  MSDOS,  AMIGA,  ATARI,  VMS,  or  MACINTOSH. 

# e n d i f 

/* 

* Build  a path  name  out  of  a number  of  segments. 

* Each  segment  is  separated  from  the  next  with  DIRSEPSC0!]  if 

* it  does  not  end  in  a directory  separator  already. 

* 

* A first  pass  over  the  argument  list  adds  up  the  length  of  the  result, 

* then  space  is  allocated  for  it,  then  a second  pass  copies  the  result 

* to  the  allocated  space. 

* 

* The  first  pass  records  in  "flag"  whether  the  previous  segment  did  NOT  end 

* in  a directory  separator  and,  if  the  current  segment  exists,  adds  space 

* for  a separator  if  flag  is  true. 

* 

* Then,  if  there  was  only  one  segment  of  note,  that  is  returned  directly. 

* Otherwise,  space  is  allocated  in  the  MiscPool. 

* Finally,  the  loop  is  repeated,  copying  to  the  allocated  space  and  inserting 

* directory  separators  as  needed. 

* 

* This  function  always  returns  a newly  allocated  buffer.  It  is  the 

* responsibility  of  the  caller  to  free  it  when  finished. 

*/ 

char  * 

pgp F i I eNameBu i I d ( c ha r const  *seg,  ...) 


n 

va_ 

list 

ap; 

n 

unsigned 

seglen,  Len,  flag; 

a 

char  const  *curseg,  *prevseg; 

B 

char  *p. 

* r e t ; 

B 

/* 

Start 

by  counting  the  length  of  the  result 

*/ 

B 

va  _ 

start 

( a p , s e g ) ; 

B 

prevseg 

= 0; 

B 

L e n 

= seglen  = flag  = 0; 

B 

for 

(curseg  = seg;  curseg;  curseg  = va_arg(ap. 

char  const  *))  { 

B 

B 

seglen  = strlen  (curseg); 

B 

B 

if  (Iseglen) 

B 

B 

n continue; 

B 

B 

prevseg  = curseg; 

B 

B 

len  +=  seglen  + flag; 

B 

B 

/*  Does  curseg  need  a directory  separator 

added?  */ 

B 

B 

flag  = ( s t r ch r ( D I RS EPS  , c u r s eg C s eg  1 en- 

13) 

= = 0); 

B 

> 

B 

va_ 

end  Cap); 

B 

/* 

Allocate  space  for  the  combined  string  */ 

B 

P = 

(char  * ) pg pM emA 1 1 0 c (len+1);n  /*  +1 

for 

trailing  null 

B 

if 

( ! p) 

B 

B 

return  0; 

B 

ret 

= p; 

B 

/* 

Combine  the  elements  together  */ 
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n 

va_ 

start  (ap,  seg); 

□ 

flag  = 0; 

n 

for 

(curseg  = seg;  curseg;  curseg  = va_arg  (ap,  char  const  *)) 

a 

Q 

seglen  = strLen  (curseg); 

n 

n 

if  (IsegLen) 

n 

n 

n continue; 

n 

n 

if  (flag) 

n 

n 

n *p++  = DIRSEPSC0:; 

n 

n 

memepy  (p,  curseg,  seglen); 

n 

n 

p +=  seglen; 

n 

n 

/*  Does  curseg  need  a directory  separator 

added? 

*/ 

n 

n 

flag  = (strehr  (DIRSEPS,  c u r s e g C s eg L e n-1 3 ) 

= = 0); 

n 

> 

n 

va_ 

end(ap); 

n 

*P 

= '\0';n  /*  N u L L - t e r mi n a t e the  string  */ 

n 

> 

return  ret; 

char 

* 

pgpFi 

LeNameExtend  (char  const  *base,  char  const  *ext) 

n 

char  *name  = (char  * ) pg pM em A L L o c (strLen  (base)  + 

StrLen 

(ext) 

n 

if 

( ! name ) 

n 

n 

return  NULL; 

n 

strcpy  (name,  base); 

n 

street  (name,  ext); 

n 

return  name; 

char  * 

pg p F i L eN a me  Con t r a c t (char  const  *base) 

{ 

a char  *name  = (char  * ) pg  pHemA  1.  L oc  (strLen  (base)  + 1); 

n char*p; 

n i f ( ! name  ) 

n n returnNULL; 

n strcpy  (name,  base); 

n /*  remove  an  ending  */ 

n p = strrchr  (name,  '.'); 

n i f ( p ) 

n n *p='\0'; 

n return  name; 

} 


/*  Return  the  directory  part  of  the  path  holding  the  file  */ 
char  * 

pg p F i L eNa me D i r e c t o r y (char  const  *base) 

{ 


Q 

char 

*end1 

=0,  *end2=0; 

n 

char 

const 

*ds  = DIRSEPS; 

Q 

char 

c; 
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n 

char 

* d i r ; 

n 

while 

((c  = *ds++)  ! 

= ' \0  ' ) 

{ 

D 

n 

if  ( ( end2  = 

s t r r c h r 

(base,  c))  != 

□ 

u 

n i f ( 

! endl  | | 

endl  < end2) 

s 

n 

n Q 

endl 

= e n d 2 ; 

n 

El 

} 

n 

> 

s 

/*  If 

no  path  info. 

return  . 

*/ 

n 

i f ( ! 

e n d 1 ) { 

n 

□ 

dir  = (char 

* ) pg pM em A L L o c (2); 

n 

n 

di  ri;0]  = ' . ' 

t 

n 

n 

di  rCI : = ' \0 

f 

a 

a 

return  dir; 

n 

y 

Q 

dir  = 

(char  *)  pgpMemALLoc  (endl  - base  + 

n 

strncpy  (dir,  base. 

endl-base); 

n 

d i r C e nd 1 -ba s e ] = ' \0 

1 . 
r 

n 

return  dir; 

char  * 

pgp F i L eNameNex t D i re c t o ry  (char  const  *path,  char  const  **rest) 
{ 

char  const  *d; 
char  *name; 
unsigned  Len; 


d = strchr  (path,  PATHSEP); 
if  (d)  { 

n Len  =d-  path; 

n d + + ; 

> else 

n Len  = strLen  (path); 


n if(rest) 

n n *rest=d; 


name  = (char  *)pgpHemAL Loc  (Len  + 1); 
if  ( ! name ) 

n return  NULL; 


Q 

Q 

D 

> 


memcpy  (name,  path,  Len); 
nameCLenD  = '\0'; 

return  name; 


char  * 

pgpFi LeNameExtendPath  (char  const  *path,  char  const  *dir,  int  front) 
{ 

n char*p,*t; 

n pgpAssert  (di r); 


p = (char  *)pgpMemAL Loc  ((path  ? strLen  (path)  : 0)  + strLen  (dir) 
n n n + 2 ) ; 

if  (p)  { 
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n 

B 

t 

= p; 

Q 

B 

i i 

(front) 

{ 

□ 

B 

fl 

memcpy  (t,  dir,  strlen  (dir)); 

□ 

B 

fl 

t + 

= strlen  (dir); 

n 

B 

B 

i f 

(path)  { 

n 

fl 

B 

n 

*(t++)  = PATHSEP; 

□ 

B 

B 

a 

memcpy  (t,  path,  strlen 

Q 

B 

B 

n 

t +=  strlen  (path); 

n 

B 

fl 

} 

n 

B 

fl 

*t 

= '\0'; 

n 

B 

> 

else  { 

Q 

B 

B 

i f 

(path)  { 

n 

B 

B 

n 

memcpy  (t,  path,  strlen 

H 

B 

B 

n 

t +=  strlen  (path); 

n 

B 

B 

n 

*(t++)  = PATHSEP; 

n 

B 

B 

} 

n 

B 

B 

memcpy  (t,  dir,  strlen  (dir)); 

B 

fl 

B 

t + 

= strlen  (dir); 

B 

fl 

B 

*t 

= ' \ 0 ' ; 

B 

B 

> 

B 

> 

n return  p; 

> 


(path)); 


(path)); 


/* 

* This  returns  the  filename  (not  including  directory  path) 

* It  returns  a pointer  within  <path>,  rather  than  dynamically  allocating  it 
*/ 

char  * 


pgp  F i L eNameT ail 
r 

(char 

const  *path) 

fl 

char 

const  *n 

tail; 

fl 

char 

const  *n 

lastTail  = 

path; 

fl 

char 

const  *n 

d i r S e p ; 

fl 

for 

(di rSep  = 

DIRSEPS;  *dirSep; 

di rSep++) 

B 

{ 

B 

n 

tail  = 

strrchr(  lastTail, 

*di rSep)  ; 

B 

□ 

if  ( t a 

i 1 ! = NULL) 

fl 

n 

c 

lastTail  = 

tail 

+ 1; 

fl 

> 

B 

return 

(char  * 

)lastTail; 

> 
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/* 

* pgpFileNames.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Utility  functions  to  work  with  filenames  in  different  OS's 

★ 

* Based  on  pgpAppFile, 

* written  by:nCoLin  Plumb  and  Derek  Atkins  < wa r L o r d I T . E D U> 

* 

* $Id:  pg p F i L e Na me s . h , V 1.3. 2.1  1 997/06/07  09:50:05  mhw  Exp  $ 

*/ 

#ifdef  __cpluspLus 
extern  "C"  { 

#e  nd i f 

char  PGPExport  * 

pgpFileNameBuild  (char  const  *seg,  ...); 
char  PGPExport  * 

pgpFileNameExtend  (char  const  *base,  char  const  *ext); 
char  PGPExport  * 

pg p F i L e Na me C on t r a c t (char  const  *base); 
char  PGPExport  * 

pg p F i L e N a me D i r e c t o r y (char  const  *base); 
char  PGPExport  * 

pg p F i L e N ame N e X t D i r e c t o r y (char  const  *path,  char  const  **rest); 
char  PGPExport  * 

pgpFileNameExtendPath  (char  const  *path,  char  const  *dir,  int  front); 

/* 

* This  returns  the  filename  (not  including  directory  path) 

* It  returns  a pointer  within  <path>,  rather  than  dynamically  allocating  it 
*/ 

char  PGPExport  * 

pgpFileNameTail  (char  const  *path); 

#ifdef  __cpLuspLus 

> 

# e nd i f 
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/* 

* pgpFileRef.c  --  Platform  independent  filename  handling  module 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg p F i I e R e f . c , V 1.35.2.4  1 997/06/07  09:50:05  mhw  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


#i nc  lude 

"config.h" 

# e nd i f 

#if  HAVE 

_UNISTD_H 

#i nc lude 

<uni std . h> 

# e n d i f 

#if  HAVE 

_PATHS_H 

#include 

<pa  t h s . h> 

# e nd i f 

#if  UNIX 

1 1 WIN32 

#i nc lude 

<sys/types . h> 

#include 

<sys/stat . h> 

#if  HAVE 

_FCNTL_H 

#i nc lude 

<fcntl.h> 

#end i f 

#endi f 

/^include 

<e  r rno . h> 

#include 

<stdi 0 . h> 

#include 

<string.h> 

#if  MACINTOSH 

Mine  lude 

<un i X . h> 

# e nd i f 

ttinclude 

"pgpFileRef.h" 

#i nc  lude 

"pgpFileNames.h" 

fti  nclude 

"pgpErr.h" 

# i nc 1 ude 

"pgpTypes . h" 

//include 

"pgpDebug.h" 

//include 

"pgpMem. h" 

//if  MACINTOSH 

//include 

"MacFi les.h" 

Mine lude 

"MacStrings.h" 

//include 

"pgpMacFi le.h" 

//include 

"pgpMacUti  Is . h" 

//endi  f 

//if  ! def  i ned(_PATH_TMP)  &S  UNIX 

//define 

_PATH_TMPn  "/tmp/" 

//  e n d i f 

//define 

kPGP F i 1 eRe f Mag i cn  n 

//define 

kPGPExternalFi  leRefMagii 

HAVE  MKSTEHP 


0x251 DEA9B 
0XD8AB1093 


typedef  enum  PGP Fi I eRef Type 
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t 

n kPGPFi leRef FuL LPath  = 1, 
n kPGPFi LeRef HacVI 
> PGPFiLeRefType; 

struct  PGPFiLeRef_ 

{ 

B uLongB  b b magic; 

B size_tBB  B size; 

B PG P F i L e Re f Ty p eB  type; 

>; 


#d  e f i n e 

pg p F i L e R e f D a t a ( f i L e Re f , type)B  ((type 

*)((fi  LeRef) 

+ 

1 ) ) 

#def i ne 

pg pa PG P F i L e Re f Va L i d ( f i L e R e f ) B b b 

n 

n 

d 

d 

d 

\ 

□ n 

pgpaAddr\/aLid(fi  leRef,  PGPFi  LeRef), bb 

n 

n 

n 

d 

d 

\ 

n n 

pg pa  A s s e r t ( f i L e R e f ->ma g i c ==  k PG P F i L e R e f Ma g 

i c ) 

# d e f i n e 

pg pa PG P F i L e Ty peVa L i d ( f i L eTy pe ) B b b 

n 

n 

n 

d 

d 

\ 

n tt 

pg pa  As s e r t ( f i L eTy pe  > kPG P F i L eTy p e N on e b 

□ 

n 

n 

d 

d 

\ 

B B n B &&  fiLeType  < k PG P F i L eTy p e N umTy pe s ) 


/*  These  must  be  kept  in  sync  with  the  PGPFiLeType  decL  in  pgpFiLeRef.h  */ 
#if  MACINTOSHb  /*  : */ 


static  struct  Ma c F i L eTy pe E n t ry 
{ 

B OSTypeB  creator,  type; 

> sMa c F i L eTy peTa b L e C kPGP F i L eTy peNumTy pe s D = { 

B { 0L,  0L  >,BB  B B B B B B B 

B { 'pgpK',  'pref'  >,Bn  n B B B b 

B { 'pgpK',  'pgPR'  },bb  b b b b b 

B { 'pgpK',  'pgRR'  >,bb  n b b n n 

B { 'pgpH',  kPG PMa c F i L eTy pe D e t a c h ed S i g >,bb 
B { 'pgpK',  'pgRS'  >,bb  b n b b b 

B { 'pgpK',  'TEXT'  },bb  b b b b b 

B { 'pgpH'/  kPG PMa c F i L eTy p e A r mo r F i L e >,b  b 
B { 'pgpH',  kPGPMa c F i L eTy pe En c ry pt ed Da t a >,b 
/*  XXX:  The  below  should  be  user  preferences  */ 


d 

{ 

* ttxt  ' , 

'TEXT'  >,BB  ana 

d 

d 

d 

{ 

1 0 0 9 0 > 
....  / 

'BINA'>,bb  b b b 

d 

d 

d 

>; 

{ 

* pgpM  * , 

kPGPHacFi LeTypeSignedData 

>d 

d 

/*  kPGP F i L eTypeNone  */ 

/*  kPG P F i L eTy p e P r e f s */ 

/*  kPGP F i L eTypePubR i ng  */ 

/*  k PG P F i L eTy p e P r i V R i n g */ 

/*  kPG P F i L eTy pe De t a chedS i g */ 

/*  k PG  P F i L eTy p e Ra  nd omS e e d */ 

/*  k PG P F i L eTy pe E xpo r t e d Key s */ 
/*  kPG P F i L eTy pe A rmo r F i L e */ 

/*  kPG P F i L eTy pe E n c r y p t e d D a t a */ 

/*  kPG P F i L eTy pe D e c r y p t e dTex t */ 
/*  kPGP F i L eTy pe De c rypt edBi n */ 
/*  kPG P F i L eTy pe S i g n ed Da t a */ 


#endifB  /*  ] MACINTOSH  */ 

#if  UNIXb  /*  : */ 

static  struct  L)  n i x F i L eTy  pe  E n t r y 
{ 

B mode_tB  mask;B  /*  umask  value  for  permissions  */ 
> s Un i X F i L eTy p eTa b L e C kPG P F i L eTy p e N umTy pe s D = { 


d 

{ 

0 },B 

B 

/* 

k PG P F i L eTy p eNon e */ 

d 

{ 

0077 

>,B 

/* 

kPGPFi LeTypePrefs  */ 

d 

{ 

0077 

>,B 

/* 

kPGP F i L eTy pePubR i ng  */ 

d 

{ 

0077 

>/■“ 

/* 

kPG P F i L eTy pe P r i vR i n g */ 

d 

{ 

0077 

/* 

kPGPFi LeTypeDetachedSig 
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s 

{ 

0077 

},n 

/* 

D 

{ 

0077 

},n 

/* 

n 

{ 

0077 

/* 

n 

{ 

0077 

/* 

n 

{ 

0077 

>,n 

/* 

n 

{ 

0077 

/* 

n 

{ 

0077 

>n 

/* 

>; 

#endi f n /* 

: UNIX 

*/ 


*/ 

*/ 

*/ 


n PGPFiLeRef  * 

pgpNewFi LeRefFromFuLLPathC 

n char  const  *n  n path) 

{ 

n PGPFiLeRef  *n  fiLeRef; 

n size_tn  n n size  = sizeof(PGPFiLeRef)  + strLenCpath)  + 1; 

Q 

n fiLeRef  = (PGPFiLeRef  * ) pg p A L L o c ( s i z e ) ; 
n if  (fiLeRef) 
n { 

n n f i L e Re f ->ma g i c = k PG P F i L e R e f Ma g i c ; 

n n f i L e Re f -> s i z e = size; 

n n fiLeRef->type  = kPGPFiLeRefFuLLPath; 

n n s t r c py ( pg p F i L e Re f Da t a ( f i L e Re f , char),  path); 

n } 

n return  fiLeRef; 

> 


n PGPError 
pgpFuL  LPathFromFi LeRef( 
n PGPFiLeRef  const  *n  fiLeRef, 

n char  **nn  n n fuLLPathPtr) 

{ 

a pgpa(pgpaPGPFiLeRefVaLid(fiLeRef)); 


□ 

n 

□ 

□ 

□ 

a 

n 

Q 

n 

□ 

n 

n 

D 

D 

#i  f 


*fuLLPathPtr  = NULL; 
switch  (fiLeRef->type) 

{ 

n case  kPGPFiLeRefFuLLPath: 
n { 

n n char  const  *n  path; 

n n size_tnn  n size; 

n a 

n n path  = pg p F i L e R e f Da t a ( f i L e Re f , char); 
n n size  = strLen(path)  + 1; 

n n *fuLLPathPtr  = (char  * ) pg p A L L o c ( s i z e ) ; 
n n pg p C opy Memo r y ( pa t h , *f u L L Pa t h P t r , size); 

n n break; 

n } 

MACINTOSHn  /*  C */ 


n a 
n n 
n n 
a □ 
□ □ 
n □ 
□ n 


case  k PG P F i L e Re f Ma c V 1 : 

n ucharn  n pathC256D; 
n 

u if  ( F S pGe t F u L L Pa t h ( pg p F i L e Re f Da t a ( f i L e Re f , FSSpec),  path) 
n n return  PG P E R R_N0_ F I LE ; 

n *fuLLPathPtr  = (char  * ) pg p A L L o c ( pa t h C 0 ] + 1); 


I = 
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n n n pg p C opy M emo r y ( pa t h + 1,  * f u L I Pa t h P t r , path[03); 

n n n ( *f u L L Pa t h P t r ) C pa t h C 0 D 3 = '\0'; 

n n n break; 

n n } 

#endifn  /*  ] MACINTOSH  */ 
n n default: 

n a n pgpAssertHsg(0,  "Unsupported  PGPFiLeRef  type"); 

a a n return  PGPERR_NO_FILE; 

n } 

n return  PGPERR_OK; 

} 

#if  MACINTOSHn  /*  C */ 

n PGPFiLeRef  * 
pgpNewFi LeRefFromFSSpecC 
n FSSpec  const  *n  n spec) 

{ 

n PGPFiLeRef  *n  fiLeRef; 

n size_tn  n n size  = s i z eo f ( PG P F i L e Re f ) + s i z eo f ( F S S p e c ) ; 


fiLeRef  = (PGPFiLeRef  * ) pg p A L L o c ( s i z e ) ; 
if  (fiLeRef) 

{ 

n f i L e R e f ->ma g i c = k PG P F i L e R e f Ma  g i c ; 
fiLeRef -> size  = size; 
f i I e Re f -> t y pe  = kPG P F i L e Re f Ma c V 1 ; 

pg p C opy M emo r y ( s pe c , pg p F i L e Re f D a t a ( f i L e Re  f , FSSpec),  s i z e o f ( F S S pe c ) ) ; 


return  fiLeRef; 


n PGPError 
pgpFSSpecFromFi LeRefC 
n PGPFiLeRef  const  *n  fiLeRef, 

n FSSpec  *n  n a spec) 

{ 

n pgpa(pgpaPGPFi  LeRefVaLidtfi LeRef)); 


n switch  ( f i L eRef ->t ype  ) 
n { 

#ifdef  NOTYET 

n n case  kPG P F i L e R e f F u L L Pa t h : 
n n break; 


n n 
# end  i f 
□ □ 


case  kPGPFi LeRef MacVI : 

a pg p Co py Memo r y ( pg p F i L e R e f D a t a ( f i L e Re f , FSSpec),  spec, 

n n n n n sizeof(*spec)); 
n break; 
default : 

n pgpAssertMsg(0,  "Unsupported  PGPFiLeRef  type"); 
n return  PG P E R R_N0_ F I LE ; 


return  PGPERR_0K; 


#endifn  /*  T MACINTOSH  */ 
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n PGPFiLeRef  * 
pgpCopyFi LeRefC 

n PGPFiLeRef  const  *n  fiLeRef) 

{ 

n PGPFiLeRef  *n  n neuFiLeRef; 

n 

n pgpaLpgpaPGPFi LeRefVaLidCfi LeRef)); 
n 

n / * 

n * XXX  In  the  future  if  PGPFiLeRefs  contain  pointers, 
n * this  wiLL  need  to  be  changed, 

n * / 

n newFiLeRef  = (PGPFiLeRef  * ) pg p A L L o c ( f i L e R e f -> s i z e ) ; 
n if  (newFiLeRef  !=  NULL) 

n n pg pCopy Memo r y ( f i L e R e f , newFiLeRef,  f i L e Re f -> s i z e ) ; 

n return  newFiLeRef; 

> 


a void 
pgpFreeFi LeRef( 

B PGPFiLeRef  *n  a fiLeRef) 

{ 

B pgpa(pgpaPGPFi LeRefVaLid(fi LeRef)); 

B 

B pg p C L e a r Memo r y ( ( VO i d *)fiLeRef,  f i L e Re f -> s i z e ) ; 

B pg p F r e e ( f i L e R e f ) ; 

} 


/* 

* pgpGe t F i L eRe f Name  returns  a string  aLLocated  with  pgpALLoc(), 

* which  the  caLLer  is  responsibLe  for  freeing. 

*/ 


B char  * 
pgpGetFi LeRefName( 

B PGPFiLeRef  const  *b  fiLeRef) 

{ 


n 

char 

const 

*n 

name  ; 

□ 

size 

_t  B B 

n 

nameLen; 

D 

char 

*n  B 

o 

aLLocName; 

B 


B pgpa(pgpaPGPFiLeRef\/aLid(fiLeRef)); 

B 


B 

B 

B 

B 

B 

B 

B 

B 

n 

B 

n 

#i  f 


switch  ( f i L e Re f -> t y pe ) 

{ 

B case  kPG P F i L eRef Fu L L Pa t h : 

B { 

B B char  const  *b  path; 

B n 

B B path  = pgpFiLeRefData(fiLeRef,  char); 

B B name  = (char  const  *)pgpFiLeNameTaiL(path); 

B B nameLen  = st r L en ( name ) ; 

B B break; 

B > 

MACINTOSHb  /*  C */ 


B B case  kPG P F i L e R e f Ma c V 1 : 
n n { 


B B n FSSpec  const  *b  spec; 
Ban 
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n 

n 

spec  = 

pgpFi LeRefData(fi LeRef,  FSSpec); 

a 

n 

name  = 

(char  const  *)spec->name  + 1; 

n 

a 

nameLen 

= s pe c->na me C 0 D ; 

n 

a 

break; 

a 

} 

#endifn  /*  : MACINTOSH  */ 
n n default: 

o n n pgpAssertHsg(0,  "Unsupported  PGPFileRef  type"); 

n n n return  NULL; 

n } 

Q 

n alLocName  = (char  *)pgpALLoc(nameLen  + 1); 
n if  (alLocName  !=  NULL) 
n { 

n n pg p C o py Memo r y ( n a me , alLocName,  nameLen); 

n n a L L o c N a me C na me Le n ] = '\0'; 

n } 

n return  alLocName; 

} 


n PGPError 
pgpSetFi LeRefNameC 


n 

PGPFi LeRef 

* * n 

B fileRefl, 

□ 

r 

char  const 

*n 

B newName ) 

\ 

Q 

PGPFi LeRef 

*n 

fileRef  = *fiLeRef1 

□ 

PGPErrorB 

Q 

result  = PGPERR_0K; 

n 

size_tB  B 

n 

nameLen; 

Q 


n pgpa(( 

a a pg pa PG P F i L e R e f Va L i d ( f 1 L e Re f ) , 
□ n pg  pa  S t r Va  I i d ( n e wN  a me  ) ) ) ; 

Q 

a nameLen  = strlenCnewName); 
o switch  ( f i L e R e f -> t y p e ) 
n { 


n □ 

Q □ 

n n 

Q a 

D □ 

□ □ 

□ □ 

a D 


case  k PG P F i L e R e f F u L I Pa t h : 

{ 

n char  *n  n path; 

n size_tn  n nameOffset; 

n size_tn  n newSize; 

D 

n path  = pgp F i L eRef Da t a ( f i L eRef , char); 
n nameOffset  = pg p F i L e NameTa i L ( pa t h ) - path; 


n n n newSize  = s i z e o f ( PG P F i L e R e f ) + nameOffset  + nameLen  + 1; 

n n n result  = pgpRealLocCCvoid  **)fiLeRef1,  newSize); 

n n a fileRef  = *fiLeRef1; 


n n B if  (result  ==  PGPERR_0K) 

B B B { 

B B B B path  = pgpFiLeRefData(fiLeRef,  char); 

B B B n strcpy(path  + nameOffset,  newName); 

B B B B f i LeRef->si ze  = newSize; 

B B B } 

B B B break; 

B B } 

#if  HACINTOSHb  /*  C */ 


CCCHK:2b50064b0442464e2677de8d2b7aa2111bb4920fddbff9299969c83d79061957f:: 


474 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpFileRef.c 


case  k PG P F i L e Re f Ma c V 1 : 
FSSpec  *n  spec; 


if  ( name  Len  >=  64 ) 

n return  PG P E R R_K E Y DB_ V A LU ETOO LON G ; 
spec  = pg p F i L e Re f D a t a ( f i I e R e f , FSSpec); 
s p e c ->n a me C 0 D = nameLen; 

p g pC opy M emo r y ( n e wN a me , (char  *)spec->name  + 1,  nameLen); 
break; 


#endifn  /*  D MACINTOSH  */ 


default  : 

n pgpAssertMsg(0,  "Unsupported  PGPFileRef  type"); 
n return  PGPERR_BADPARAM; 


n n 
n n 
n □ 
n } 

n return  result; 


n u c h a r * 

pgpExportFi  leRefC 

n PGPFileRef  const  *n  fileRef, 

n size_t  *n  n n size) 

{ 


n 

n 

Q 

n 

□ 

a 

n 

n 

□ 

n 

a 

n 

n 

n 

n 

n 

n 

n 

D 

Q 

n 

a 

n 

n 

n 

#i  f 


PGPFileRef  *n  e x t e r n F i I e Re f = NULL; 
size_tn  n n externSize; 

pg pa  ( ( 

n pg pa PG P F i I e R e f Va  I i d ( f i I e Re f ) , 

n pgpa Add rVa I i d ( s i ze,  size_t))); 

*size  = 0; 

/* 

* XXX  In  the  future  if  PGPFileRefs  contain  pointers, 

* this  will  need  to  be  changed. 

*/ 

switch  ( f i I eRef->type ) 

{ 

a case  k PG P F i I e Re f F u I I Pa t h : 
n n externSize  = fileRef->size; 

n n externFileRef  = (PGPFileRef  *)pgpAlloc(externSize); 

n n if  (externFileRef  !=  NULL) 

n n { 

n n n pg p C opy Memo r y ( f i I e Ref , externFileRef,  externSize); 

n n n ex t e r n F i I e R e f ->ma g i c = kPG P Ex t e r na I F i I e R e f Ma g i c ; 

n n n *size  = externSize; 

n n > 

n n break; 

MACINTOSHn  /*  C */ 


n n 
n a 
a a 
a □ 
n □ 
n □ 
□ D 

n n 


case  k PG P F i I e Re f Ma c V 1 : 

{ 

n FSSpec  const  *n  spec; 
n ucharB  n b vo I ume Na me L 2 5 6 ] ; 

B H Vo  I ume Pa r amB  pb; 

n 

B spec  = pg p F i I e Re f Da t a ( f i I e Re f , FSSpec); 
B pb.ioNamePtr  = volumeName; 
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□ 

n 

□ 

pb. 

ioVRefNum  = s p e c -> v Re f N urn; 

u 

n 

Q 

pb  . 

ioVolIndex  = 0; 

u 

n 

a 

i f 

( PBHGe t V I n f oSy n c ( ( H Pa rmB L kP t r ) &pb ) ==  noErr) 

Q 

a 

n 

{ 

□ 

n 

n 

B 

externSize  = f i L e Re f ->s i z e + vo L ume N a me C 0 D + 1; 

n 

n 

n 

B 

e X t e r n F i L e R e f = (PGPFileRef  * ) pg p A L L o c ( e x t e r n S i z e ) ; 

Q 

n 

n 

B 

i f 

( e X t e r n F i L e Re f !=  NULL) 

n 

n 

□ 

B 

{ 

n 

n 

Q 

B 

B 

pg p C opy H emo r y ( f i L e R e f , e x t e r n F i L e R e f , f i L e R e f -> s i z e ) ; 

a 

n 

o 

B 

B 

pgpCopyHemory(voLumeName, 

□ 

n 

n 

B 

B 

ana  (uchar  * ) e x t e r n F i L e R e f + f i L e Re f ->s i z e , 

n 

n 

B 

B 

B 

a a a vo L umeName C0D  + 1); 

u 

n 

B 

B 

B 

e X t e r n F i L e R e f ->ma g i c = k PG P E x t e r n a L F i L e R e f Ha g i c ; 

u 

n 

B 

B 

B 

*size  = externSize; 

n 

n 

B 

B 

> 

n 

□ 

B 

> 

Q 

n 

B 

break; 

n 

□ 

> 

#end i fa 

/* 

] HACINTOSH  */ 

a 

n 

default 

Q 

n 

B 

pgpAssertHsg(0,  "Unsupported  PGPFileRef  type"); 

n 

□ 

B 

break; 

n 

> 

n return  (uchar  * ) ex t e r n F i L e Re f ; 
} 


a PGPFi LeRef  * 
pgpImportFi LeRefC 
n uchar  const  *a  n buffer, 

n size_tnn  n n size) 

{ 


n 

□ 

□ 

n 

Q 

D 

□ 

n 

n 

n 

□ 

n 

□ 

n 

n 

a 

Q 

□ 

n 

n 

□ 


PGPFileRef  *n  fiLeRef; 

pgpaCpgpaAddrVaLidCbuffer,  uchar)); 
fiLeRef  = (PGPFileRef  * ) pg p A L L o c ( s i z e ) ; 
if  (fiLeRef  !=  NULL) 

{ 

n pgpCopyMemory(buffer,  fiLeRef,  size); 
n if  (size  < s i z eo f ( PG P F i L e Re f ) || 

n n n f i L e Re f ->ma g i c !=  kPG P Ex t e r na L F i L e Re f Ha g i c | | 

n n n f i I e R e f -> s i z e > size) 

n { 

n n pg p F r e e ( f i L e Re f ) ; 
a a return  NULL; 
a } 

a f i I e R e f ->ma g i c = kPG P F i L e R e f Ha g i c ; 
a pgpa(pgpaPGPFi  LeRefVaLid(fi LeRef)); 
a 

a / * 

a * XXX  In  the  future  if  PGPFiLeRefs  contain  pointers, 
a * this  will  need  to  be  changed, 

a * / 


a a switch  ( f i L e Re f -> t y p e ) 
a a { 

a a a case  kPG P F i L e R e f F u L L Pa t h : 

a a a a break; 

#if  HACINTOSHa  /*  [ */ 


a a a case  kPGP F i L eRef Ha c VI  : 
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o 

B 

B 

i 

n 

B 

B 

B 

FSSpec  *n  a spec; 

n 

B 

B 

B 

ucharn  n n voLumeNameC256!]; 

n 

B 

fl 

fl 

uchar  *nn  n s t o r e d Vo L N a me ; 

D 

B 

B 

fl 

HVo L umePa ramn  pb; 

□ 

B 

fl 

B 

D 

B 

fl 

fl 

spec  = pg p F i L e Re f Da t a ( f i 1 e R e f , FSSpec); 

n 

B 

B 

fl 

storedVoLName  = (uchar  *)(spec  + 1); 

n 

B 

B 

B 

pg p A s s e r t ( s i z e >=  s i z e of ( PG P F i L e Re f ) + 

u 

B 

B 

B 

fl 

n n n n s i z eo f ( F S S p e c ) + 

n 

B 

B 

fl 

B 

n n n n s t o r e d V o L Na me C 0 D + 1); 

n 

B 

fl 

fl 

/* 

u 

B 

B 

B 

* 

Check  to  see  if  the  vRefNum  stored  in  the 

u 

B 

B 

B 

★ 

fileRef  has  the  correct  volume  name. 

n 

B 

B 

fl 

*/ 

n 

B 

fl 

B 

pb  . 

ioNamePtr  = volumeName; 

n 

B 

fl 

fl 

pb. 

ioVRefNum  = s pe c-> vRe f N urn; 

□ 

B 

B 

B 

pb  - 

ioVolIndex  = 0; 

n 

B 

B 

B 

i f 

( PBHGe t VI nf oSy nc ( ( HPa rmB 1 kP t r ) &pb ) !=  noErr  || 

n 

B 

fl 

fl 

fl 

n ! PS t r i ng s A r e Eq ua 1 ( VO  1 umeNa me , s t o r e d Vo  1 N ame ) ) 

n 

B 

fl 

B 

i 

n 

B 

B 

B 

fl 

/* 

o 

B 

B 

B 

B 

* The  volume  name  didn't  match.  Try  to  look  up 

B 

B 

B 

fl 

B 

* the  vRefNum  from  the  volume  name. 

B 

B 

fl 

fl 

fl 

*/ 

B 

B 

fl 

B 

fl 

CopyPStringCstoredVolName,  volumeName); 

B 

B 

fl 

fl 

B 

VO  1 umeName C + + VO 1 umeName C 0 D D = 

B 

B 

B 

B 

fl 

pb.ioNamePtr  = volumeName; 

B 

B 

fl 

B 

B 

pb. ioVRefNum  = -1; 

B 

B 

fl 

B 

fl 

pb.ioVolIndex  = -1; 

B 

B 

B 

fl 

B 

if  ( PBHGe t V I n f oSyn c ( ( H Pa rmB 1 kPt r ) &pb ) !=  noErr  || 

B 

B 

fl 

B 

B 

n n ! PS t r i ng s A r e Equa 1 ( VO  1 umeName , s t o r ed Vo  1 Name ) ) 

B 

B 

fl 

B 

fl 

{ 

B 

B 

fl 

B 

B 

n / * 

B 

B 

fl 

fl 

fl 

n * It  couldn't  find  the  volume  by  name.  If 

B 

B 

fl 

B 

B 

n * it  used  to  be  the  boot  volume  (vRefNum  ==  -1), 

B 

B 

B 

fl 

fl 

n * use  the  current  boot  volume.  Otherwise,  fail. 

B 

B 

fl 

B 

B 

n * / 

B 

B 

fl 

B 

fl 

n if  ( s pe c -> V Re f Num  !=  -1) 

B 

B 

fl 

B 

fl 

n { 

B 

B 

fl 

B 

B 

n n pgpFree(fileRef); 

B 

B 

fl 

B 

B 

n n return  NULL; 

B 

B 

fl 

B 

fl 

n > 

B 

B 

fl 

B 

B 

> 

B 

B 

B 

fl 

fl 

else 

B 

B 

fl 

B 

B 

n spec->vRef Num  = pb . i o V R e f N urn; 

B 

B 

B 

B 

> 

B 

B 

fl 

fl 

break; 

B 

B 

fl 

> 

«endifn  /*  : MACINTOSH  */ 


a 

n 

n 

n 

n 

n 

a 

Q 


n n default: 

n n n p g p A s s e r t M s g C 0 , "Unsupported  PGPFileRef  type"); 

n n n pg p F r e e ( f i L e R e f ) ; 

n a n return  NULL; 

n > 

> 

if  (fileRef  !=  NULL) 

n pgpRealLocCCvoid  **)&fiLeRef,  fiLeRef->size); 
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n return  fiLeRef; 

} 

#if  MACINTOSHb  /*  : */ 

n PGPError 
pgpCaLcFileSizeC 

n PGPFiLeRef  const  *n  fiLeRef, 
n PG P F i L eO p e n F L a g s n flags, 
n size_t  *n  n n fiLeSize) 

{ 

n return  pgpHacCaLcFiLeSizeCfiLeRef,  flags,  fileSize); 
} 


n PGPError 

pgpCreateFi Le( 

n PGPFiLeRef  const  *n  fiLeRef, 
n PG P F i L eTy penn  n fiLeType) 

{ 

n PGPErrorn  result  = PGPERR_0K; 

n OSErrn  n macResuLt; 

n FSSpecn  n spec; 

n 

n pgpa ( ( 

n n pgpaPGPFiLeRefValid(fiLeRef), 
n n pg pa PG P F i L e Ty p e Va L i d ( f i L e Ty pe ) ) ) ; 

n 


n 

n 

□ 

a 

n 

Q 

□ 

n 

} 


if  ((result  = pg p F S S pe c F r om F i L e Re f ( f i L e R e f , Sspec))  ==  PGPERR_0K) 

{ 

a if  ((macResuLt  = H C r e a t e ( s p e c . v Re f N um,  spec.parlD,  spec. name, 
n n n n n n n s Ha c F i L eTy peTa b L e C f i L eTy pe ] . c r ea t o r , 

o a a a a n n s Ha c F i L eTy peTa b I e C f i L eTy p e D . t y p e ) ) !=  noErr) 

n n result  = pgpErrorFromHacError(macResult,  PGPERR_NO_FILE); 

> 

return  result; 


n 

PGPError 

pgpDeleteFi Le( 

n 

f 

PGPFi LeRef 

const  *n  B fiLeRef) 

\ 

D 

PGPErrorn 

result  = PGPERR_0K; 

□ 

OSErrn  n 

macResuLt; 

□ 

FSSpecn  n 

spec; 

Q 

pgpa(pgpaPGPFi LeRefVaLid(fi leRef)); 

D 

if  ((result 

= pg p F S S pe c F r om F i L e Re f ( f i L e R e f , 

&spec))  ==  PGPERR_0K) 

n 

{ 

□ 

n if  ((macResuLt  = H D e L e t e ( s pe c . v Re f Num, 

spec.parlD, 

n 

n n n 

n n n n spec. name))  ! = 

noE  r r ) 

a 

n n result  = pg p E r r o r F r omHa c E r r o r ( ma c Re s u L t , PG P E R R_N0_ F I LE ) ; 

□ 

} 

n return  result; 

> 


n PGPError 
pgpRename  F i L e ( 
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a 

□ 

{ 

n 

□ 

n 

n 

□ 

a 

n 

n 

D 

□ 

□ 

n 

a 

n 

□ 

□ 

n 

a 

Q 

n 

> 


PGPFiLeRef  const  *n  oLdRef, 
PGPFiLeRef  const  *n  newRef) 


PGPErrorn 
OSErrn  n 
FSSpecn  n 
FSSpecn  n 


result  = PGPERR_0K; 
macResuLt; 
o L d S p e c ; 
newSpec; 


pgpa ( ( 

n pg pa  PG P F i L e R e f Va  L i d ( o L d R e f ) , 
n pg pa  PGP F i L e R e f Va L i d ( n e w R e f ) , 

n pg pa  A s s e r t ( o L d R e f -> t y pe  ==  n e w R e f -> t y p e ) ) ) ; 

if  ((result  = pg p F S S p e c F r om F i I e R e f ( o I d Re f , &oldSpec))  ==  PGPERR_OK  S8 

n (result  = pg p F S S p e c F r om F i I e R e f ( n e w R e f , SnewSpec))  ==  PGPERR_0K) 

{ 

a pg p A s s e r t ( o I d S pe c . vR e f N urn  ==  n e wS p e c . v R e f N urn  && 
n n n o I d S pe c . pa r I D ==  n e w S pe c . pa r I D ) ; 

n if  ((macResult  = H R e n a me ( o I d S pe c . v R e f N urn,  o I d S pe c . pa r 1 D , 
n n n n n n n o I d S pe c . name , n e wS p e c . n a me ) ) !=  noErr) 

n n result  = pg p E r r o r F r omMa c E r r o r ( ma c R e s u I t , PG P E R R_ N 0_ F I LE ) ; 

> 

return  result; 


n FILE  * 

pgpStdIOOpenTempFi le( 

n PGPFileRef  **n  n tempFileRef, 

n PGPError  *n  n n errorCode) 

{ 


n 

n 

n 

n 

a 


FSSpecn  n 
FILE  *n  n 
PGPErrorn 
OSErrn  n 
I ongn  n 


spec; 

stdIOFile  = NULL; 
result  = PGPERR_0K; 
macResult; 

i ; 


n 


n pg pa ( pg pa  Ad d r Va I i d ( t emp F i I e R e f , PGPFileRef  *)); 


n 


n *tempFileRef  = NULL; 

n if  ((macResult  = F i nd Fo I de r ( kOn Sy s t em D i s k , kTempo r a ry F o I de r Ty p e , 
nnnnnnnn  k C r e a t e F o I d e r , & s pe  c . v R e f N urn, 

nnnnnnnn  & s pe c . pa r I D ) ) !=  noErr) 

n n goto  macError; 

n 

n for(i=0;;i++) 
n { 

n n pg p Fo r ma t PS t r ( s pe c . n a me , s i z eof ( s pe c . n a me ) , 0,  "PGP  Temp  %d",  i); 
n n macResult  = H C r ea t e ( s pe c . v R e f N urn,  spec.parlD,  spec. name, 

n n n n n n n '????',  'BINA'); 

n n if  (macResult  ==  noErr) 

n n n break; 

n n else  if  (macResult  !=  dupFNErr) 

n n n goto  macError; 

n } 


n if  ( ( * t emp F i I e Re f = pg p N e w F i I e R e f F r om F S S pe c ( & s pe c ) ) ==  NULL) 
n { 

n n result  = PGPERR_NOHEM; 
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n n goto  error; 

n > 

□ 

n return  pg p F i L e Re f S t d I OOpe n ( * t emp F i L e R e f , kPG P F i L eOp e n S t d U pd a t e F L a g s , 
n n n n n n n n kPGPFileTypeDecryptedBin,  errorCode); 

D 

ma  c E r ro  r : 

n result  = p g p E r r o r F r omM a c E r r o r C ma c R e s u L t , PG P E R R_NO_ F I LE ) ; 
error: 

a if  C * t emp F i L e R e f !=  NULL) 
n f 

n n pgpFreeFiLeRef(*tempFiLeRef); 

n n *tempFiLeRef  = NULL; 

n } 

o if  (errorCode  !=  NULL) 
n { 

a a pg p A s s e r t Add r Va L i d ( e r r o r C od e , PGPError); 

n B *errorCode  = result; 

D } 

n return  NULL; 

} 

#elsen  /*  : MACINTOSH  [ */ 

n PGPError 
pgpCalcFi leSizeC 

n PGPFileRef  const  *n  fileRef, 
n PG P F i I e Ope n F I a g sn  flags. 


a 

f 

s i ze_t  *B 

n 

n fileSize) 

□ 

PGPE  r ro  rn 

a 

result  = PGPERR_0K; 

a 

char  *B  B 

n 

fullPath  = NULL; 

n 

struct  statBB 

statBuf; 

B 


n pgpa  ( ( 

n B pg pa PG P F i I e Re f Va I i d ( f i I e Re f ) , 

B B pgpaAddrValidCfileSize,  size_t))); 

B 

n (void)flags;n  /*  Avoid  warning  */ 
n *fileSize  = 0;n  /*  In  case  there's  an  error  */ 

B 

n if  ((result  = pg p F u I I Pa t h F r om F i 1 e Re f ( f i I e R e f , fifullPath))  ==  PGPERR_0K) 
n { 

n B /*  XXX  Maybe  make  this  more  portable.  Does  this  work  on  MSDOS?  */ 
n B if  ( s t a t ( f u I I Pa t h , SstatBuf)  !=  0) 

a a a result  = PG P E R R_N0_ F I L E ; 

n B else  if  ((S_IFMT  S s t a t Bu f . s t _mode ) ==  S_IFREG) 
n B B *fileSize  = s t a t Bu f . s t _ s i z e ; 

n B /*  XXX  Maybe  return  a special  result  if  it's  not  a regular  file  */ 

n } 

n pg pMem F r e e ( f u I I Pa t h ) ; 
n return  result; 

} 

n PGPError 
pgpCreateFi le( 

n PGPFileRef  const  *n  fileRef, 
n PG P F i I eTy penB  b fileType) 
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{ 

n PGPErrorn  result  = PGPERR_0K; 
n char  *n  n fuLLPath  = NULL; 
n 

D pgpa ( ( 

n n pg pa  PG P F i L e Re f Va  L i d ( f i L e R e f ) , 

n n pgpaPGPFiLeTypeVaLid(fiLeType))); 
n 

n if  ((result  = pg p F u I I Pa t h F r om F i I e R e f ( f i I e R e f , &fullPath))  ==  PGPERR_0K) 
n { 

#if  UNIXn  /*  C */ 


n 

n 

intnn  n fileDes; 

n 

n 

n 

n 

/* 

n 

n 

* 

XXX  Beware  that  calling  this  routine  could  be  a 

security 

flaw 

n 

n 

* 

because  there  is  a window  between  creating 

and 

openi ng 

Q 

n 

★ 

the  file,  in  between  which  the  file  might  have 

been 

moved 

n 

n 

★ 

out  of  the  way,  thus  possibly  having  you  open  a 

new 

file 

a 

a 

* 

with  the  wrong  permissions. 

a 

a 

*/ 

n 

n 

fileDes  = o p e n ( f u 1 1 Pa t h , 

D 

n 

n 

n n n 0_WR0NLY  | 0_CREAT  | 0_EXCL, 

Q 

a 

n 

n n n s Un i x F i 1 eTy peTa b 1 e C f i 1 eTy pe 3 . ma s k ) 

r 

Q 

n 

i f 

(fileDes  > 0) 

n 

n 

Q 

close(fi leDes); 

a 

a 

else 

o 

n 

a 

result  = PGPERR_NO_FILE;n  /*  XXX  Use  better 

error  * / 

#e 1 sen 

/* 

3 UNIX  : */ 

n 

n 

FILE  *n  n stdIOFi le; 

n 

n 

a 

n 

stdIOFile  = f o pe n ( f u 1 1 Pa t h , "ab+"); 

a 

n 

if 

(stdIOFi le  !=  NULL) 

a 

n 

Q 

fclose(stdI0Fi  le); 

o 

Q 

else 

n 

n 

a 

result  = PGPERR_NO_FILE;n  /*  XXX  Use  better 

error  * / 

#endifn  /*  3 UNIX  */ 

n > 

n pg pHem F r e e ( f u I I Pa t h ) ; 
n return  result; 

} 

n PGPE  r ro  r 
pgpDeleteFi le( 

a PGPFileRef  const  *n  n fileRef) 

{ 

n PGPErrorn  result  = PGPERR_OK; 
n char  *n  n fullPath  = NULL; 
n 

n pgpa(pgpaPGPFi leRefValid(fi leRef)); 
n 

n if  ((result  = pg p F u I I Pa t h F r om F i I e R e f ( f i I e R e f , &fullPath))  ==  PGPERR_0K) 
n { 

n n if  ( r emo V e ( f u I I Pa t h ) !=  0) 

n n n result  = PG P E R R_NO_ F I L E ; n /*  XXX  Use  better  error  */ 

n > 

n pgpnemFree(fullPath); 
n return  result; 

> 
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n PGPError 
pgpRenameFi Le( 

n PGPFiLeRef  const  *n  oLdRef, 
n PGPFiLeRef  const  *n  newRef) 
{ 


n PGPErrorn  result  = PGPERR_0K; 
n char  * a n oLdPath  = NULL; 

n char  *n  n newPath  = NULL; 


n 


n pgpa ( ( 

n n pg pa PG P F i L e R e f Va L i d ( o L d R e f ) , 

n n pg  pa  PG  P F i L e R e f Va  L i d ( n e w R e f ) , 

n n pgpaAssert(oLdRef->type  ==  newRef->type))); 

□ 

n if  ((result  = pg p F u L I Pa t h F r om F i L e R e f ( o L d Re f , SoLdPath))  ==  PGPERR_0K  SS 

n n (result  = pg p F u L I Pa t h F r om F i L e Re f ( n eu Re f , SnewPath))  ==  PGPERR_0K) 

n { 

a a size_tn  n n nameOffset; 

a n 

n n nameOffset  = pgpFiLeNameTaiL(oLdPath)  - oldPath; 

n n pgpa(( 

n n n pg pa  A s s e r t ( n e w Pa t h + nameOffset  ==  pg p F i L e Na meTa i L ( n e w Pa t h ) ) , 

n n n pg pa  A s s e r t ( p g pMemo r y E q u a L ( o L d Pa t h , newPath,  nameOffset)))); 

n n if  ( rename ( o L d Pa t h , newPath)  !=  0) 

n n n result  = PGPERR_NO_FILE;n  a /*  XXX  Improve  error  */ 

n } 

n pg pMem F r e e ( o L d Pa t h ) ; 
n pgpMemFree(newPath); 
n return  result; 

} 


a FILE  * 

pgpStdIOOpenTempFi Le( 

a PGPFiLeRef  **n  n tempFileRef, 

n PGPError  *n  n n errorCode) 

{ 

n charn  n f i L e N a me C L_ t mpna m D ; 
n PGPErrorn  result  = PGPERR_0K; 
n FILE  *n  n stdlOFile  = NULL; 
a 

n pg pa ( pg p a Ad d r Va L i d ( t emp F i L e Re f , PGPFiLeRef  *)); 

n 

n *tempFiLeRef  = NULL; 


#if  def ined(_PATH_TMP)  &&  H A V E_MKST EH Pn  /*  C */ 
n { 

n n intnn  n fd=-1; 


n 

n 

□ 

□ 

a 

n 

□ 

n 


n strncpy(fiLeName,  _PATH_THP  "ptmpXXXXXX",  sizeof(fiLeName)); 

n fiLeNameCsizeof(fiLeName)  - ID  = '\0'; 

n if  ((fd  = mks t emp ( f i L eName ) ) ==  -1  || 

n n n (stdlOFile  = fdopen(fd,  "w+b"))  ==  NULL) 

n { 

n n i f (fd  !=  -1  ) 

n n n cLose(fd); 

n n goto  fileError; 
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n n > 

n n i -f  ( ( * t emp  F i L e Re  f = pg  pN  e w F i L e R e f F r om  F u L L Pa  t h ( f i L e N a me  ) ) 

n n { 

n n n result  = PG P E R R_NOM E M ; 

n n n gotoerror; 

n n } 

n > 


NULL) 


#eLsen  /*  : d e f i n e d ( _ P AT H_TM P ) &&  HAVE_HKSTEMP  C */ 
□ 

n if  ( t mpna m ( f i L e N ame ) !=  fileName) 

n n goto  fileError; 


n if  ( ( * t emp F i L e R e f = pg pN e w F i L e Re f F rom F u L L Pa t h ( f i L e N a me  ) ) ==  NULL) 
n f 

n n result  = PG P E RR_N0M EM ; 
n n goto  error; 
n } 

D 

a /*  XXX  Perhaps  check  for  an  error  and  retry  if  necessary  */ 
n stdIOFile  = pg p F i I e Re f S t d I OOpe n ( * t emp F i I e R e f , kPG P F i I e Op e n S t d U pda t e F I a g s , 
nnnnnnnnn  k PG P F i I eTy pe D e c r y p t e d B i n , errorCode); 


#endifn  /*  1 d e f i n ed ( _P AT H _TM P ) &&  HAVE_MKSTEMP  */ 

n if  (stdIOFile  ==  NULL) 

n { 

n fileError; 

n n result  = PGPERR_NO_FILE; 

n n goto  error; 

n > 

n return  stdIOFile; 

Q 

error: 

n if  ( * t emp F i I e R e f !=  NULL) 

n { 

n n pg p F r ee F i I e Re f ( * t emp F i I e Re f ) ; 

n n *tempFileRef  = NULL; 

n } 

n if  (errorCode  !=  NULL) 

n { 

n n pgp As s e r t Add r Va  I i d ( e r r o r C ode , PGPError); 

n n *errorCode  = result; 

n } 

n return  NULL; 

> 


#endifn  /*  : MACINTOSH  */ 

n PgpFile  * 
pgpFi leRefOpen( 


n 

PGPFileRef  const 

*n 

fi  leRef, 

n 

PGPFi  leOpenFlagsn 

■flags. 

n 

PGPFi  leTypenn 

n 

f i 1 eType, 

n 

r 

PGPError  *n  n 

n 

errorCode) 

\ 

n 

FILE  *n  n n 

stdIOFi  le; 

C[CHK:f2431 1 446666641 3cddbe00ff3cd1 62233d f8bb6735667ccdd1d9870675e6af24]] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


483 


pgpFileRef.c 


#if  MACINTOSHn  /*  [ */ 

n switch  (flags  8 ( kPG P F i L eOp e n Re  a d W r i t e Pe r m | 

a n n n n kPG  P F i L e Op e n A p pe  nd  | kPG  P F i L eO pe  nT  r u n c a t e | 

a n n n n k PG P F i L e Op e n C r ea t e | k PG P F i L e 0 p e nT e x t Hod e ) ) 

a { 

a a case  k PG P F i L eO p e n R e a d Pe rm : 

a a n return  pg p F i L e R e f Ha c R ea d 0 p e n ( f i L e Re f , flags,  errorCode); 

a a case  k PG P F i I e 0 p e n S t d W r i t e F L a g s : 

ana  return  pg p F i I e Re f Ha c W r i t e Ope n ( f i I e R e f , fileType,  flags, 
a a a a a a a a a a a errorCode); 

a a default: 

a a a break; 

a } 

a pgp  As  se  r t Hsg  ( ( f I ag  s 8 ( k PG P F i L e 0 p e n Ha y b e Lo  c a L E n c o d e | 

a a a a a a a k PG  P F i L e 0 p e n F o r c e Lo  c a L E n c od  e ) ) ==  0, 

a a a a "This  combination  of  flags  not  currently  supported"); 

#endifa  /*  ] HACINTOSH  */ 
a 

a stdIOFile  = pgpFileRefStdIOOpenCfiLeRef,  flags,  fileType,  errorCode); 
a if  (stdIOFile  ==  NULL) 
a a return  NULL; 

a 

a switch  (flags  8 k PG P F i I e Op e n R ea d W r i t e Pe r m ) 
a { 

a a case  k PG P F i I e 0 p e n R ea d Pe r m : 

a a a return  pgpFileReadOpen(stdIOFile,  NULL,  NULL); 

a a case  kPG P F i L eOp e n W r i t e Pe r m : 

a a a return  pg p F i L e W r i t e Op e n ( s t d 1 0 F i L e , NULL); 

a a default: 

a a a pgpAssertHsg(0,  "No  support  for  simultaneous  read/write  yet"); 

a a a break; 

a } 

a fcLose(stdlOFile); 
a return  NULL; 

} 


a PgpFileRead  * 
pgpFi  leRefReadCreate( 
a PGPFileRef  const  *b  fileRef, 
a PGP F i I eOpen F L ag SB  flags, 

a PGPError  *b  a a errorCode) 

{ 

a PgpFile  *b  a pgpFile; 

a PgpFileRead  *b  pgpFileRead; 

a 

a if  ((pgpFile  = pg p F i L e R e f 0 pe n ( f i L e R e f , flags, 

aaaaaaaa  kPGP F i L eTypeNone,  errorCode))  ==  NULL) 
a a return  NULL; 

a 

a if  ((pgpFileRead  = pg pPG P F i L e Re  a d C r ea t e ( pg p F i L e , TRUE))  ==  NULL) 
a { 

a a pg p F i I e C I o s e ( pg p F i I e ) ; 
a a return  NULL; 

a } 

a return  pgpFileRead; 

} 
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/*  XXX  Compa t i b i L i t y routines  follow,  intended  to  be  phased  out  */ 


c 


/* 

* pgpFi leRef StdIOOpen  is  currently  the  heart  of  the  implementation 

* for  opening  files,  but  this  may  change  later. 

*/ 


c 


n 

FILE  * 

pgpFi leRefStdlOOpenC 

D 

PGPFi leRef 

const  *n 

fi  leRef, 

n 

PGPFi leOpenFlagsn 

flags. 

n 

PGPFi leType 

Eia  n 

fi leType, 

n 

r 

PGPError  *n 

n n 

errorCode) 

\ 

U 

cha  rn  n 

mod  e [ 5 D 

/ 

n 

FILE  *n  n 

stdlOFile  = NULL; 

n 

PGPErrorn 

result 

= PGPERR_0K 

s 

#i  f 

DEBUG 

□ 
n 
D 

#endi f 
n 


pgpaCpgpaPGPFi LeRefVaLidCfi LeRef)); 
if  (flags  & kPG P F i L e Ope n C r ea t e ) 
n pgpaCpgpaPGPFi LeTypeVaLidCfi LeType)); 


n 

Q 

n 

n 

n 

n 

Q 

D 

t2 

n 

D 

D 

□ 

n 

Q 

n 

n 

Q 

Q 

a 

n 

n 

n 

n 

n 

o 

Q 

D 

D 


swi tch  (f lags  & 


' ( kPG P F i I eOpenTex t Mod e | 
kPGPFi leOpenMaybeLocaLEncode  | 
k PG P F i L eOpe n F o r c e Lo c a I E n c od e | 
kPGPFi LeOpenLocalEncodeHashOnly  | 
kPGPFi LeOpenNoMacBinCRCOkay)) 


D n s Q 

n n n n 

n n n n 

n Q n □ 

{ 
n 
□ 
n 

D 

n 

Q 
Q 

n 
n 
s 
n 
n 

EX 
Et 
Q 
D 

n 
n 
EX 
EX 
n 
□ 

> 

if  C!(flags  & kPGPFi  leOpenTextMode ) ) 
n s t r ca t ( mod e , "b"); 


case  kPGPFi leOpenReadPerm: 
n strcpyCmode,  "r"); 
n break; 

case  kPGPFi leOpenStdWriteFLags: 
n strcpy(mode,  "w"); 
n brea  k; 

case  kPG P F i I eOpe n S t d Appe nd F L a g s : 
n strcpyCmode,  "a”); 

EX  break; 

case  kPGPFi leOpenReadWritePerm: 
n strcpyCmode,  "r+"); 
n break; 

case  kPG P F i L eO pen S t dUpda t e F L a g s : 
n StrcpyCmode,  "w+"); 
n brea  k; 

case  kPGPFi leOpenStdAppendFlags  | kPGPFi leOpenReadPerm: 
n StrcpyCmode,  "a+"); 

EX  break; 
default: 

n pgpAssertMsgCO,  "Unsupported  open  mode"); 
n result  = PGPERR_BADPARAM; 
n goto  error; 


#if  WIN32 

n strcat  (mode,  "c");nn  ex  /*  C omm  i t - 1 o-d  i s k mode,  flushes  writes  out  */ 
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# e n d 1 f 


#if  MACINTOSHn  /*  C */ 


F S S p e c n 

shortn 

SIntSn 


spec; 
r e f N um ; 
permission; 


□ 

B 

0 S E r r n 

n macResuLt; 

n 

B 

n 

B 

1 f 

( pgp  F S S pe  c F r om  F i L e Re  f C f i L e Re  f , &spec)  ==  PGPERR_0K) 

Q 

B 

i 

n 

B 

B 

1 f 

(flags  & kPG P F i L e 0 p e n C r e a t e ) 

n 

B 

B 

{ 

n 

B 

B 

fl 

macResuLt  = H C r e a t e ( s p e c . v R e f N um,  spec.parlD,  spec. 

n 

B 

B 

B 

H n n s M a c F i L eTy p e Ta b L e C f i L eTy pe D . c r e a t 0 r , 

n 

B 

B 

B 

n n n sMacFileTypeTableCfileTypeD.type); 

n 

B 

B 

B 

if  (macResuLt  !=  noErr  &&  macResuLt  !=  dupFNErr) 

□ 

B 

B 

fl 

{ 

n 

B 

B 

B 

n result  = pg p E r r o r F r omH a c E r r o r ( ma c Re s u L t , PGPERR 

Q 

B 

B 

B 

n goto  error; 

n 

B 

B 

B 

> 

n 

B 

B 

> 

□ 

B 

B 

s w i 

tch  (flags  S kPGP F i L eOpe n ReadW r i t ePe rm ) 

n 

B 

B 

{ 

B 

B 

B 

B 

case  kPG P F i L e 0 pe n R e a d Pe r m : 

B 

B 

B 

B 

n permission  = fsRdPerm; 

B 

B 

B 

B 

n break; 

B 

B 

B 

B 

case  k PG P F i L e 0 pe n W r i t e Pe r m : 

B 

B 

B 

fl 

n permission  = fsWrPerm; 

B 

B 

B 

B 

n break; 

B 

B 

B 

B 

case  kPG P F i L e 0 pe n R e a d W r i t e Pe r m : 

B 

B 

B 

B 

n permission  = fsRdWrPerm; 

B 

B 

B 

fl 

n break; 

B 

B 

B 

B 

default: 

B 

B 

B 

fl 

n pg pAs se r t Msg ( 0,  "Unsupported  open  mode"); 

B 

B 

B 

fl 

n result  = PGPERR_BADPARAH; 

B 

B 

fl 

B 

n goto  error; 

B 

B 

fl 

> 

B 

B 

B 

i f 

((macResuLt  = FSpOpenDF(&spec,  permission,  SrefNum)) 

B 

B 

B 

i 

B 

B 

B 

B 

result  = pgp E r r 0 r F r omHa c E r r 0 r ( ma c Re su L t , PGPERR_N0_ 

B 

fl 

fl 

B 

goto  error; 

B 

B 

B 

> 

B 

B 

fl 

stdIOFiLe  = fdopenCrefNum,  mode); 

B 

B 

B 

i f 

(stdIOFi Le  ==  NULL) 

B 

B 

B 

fl 

FSCLose(refNum); 

B 

B 

> 

B 

> 

#e  L sen 

/* 

] MACINTOSH  C */ 

B 

{ 

B 

n 

char  *n 

n fuLLPath  = NULL; 

#i  f 

UNIX 

noE  r r ) 


n n mode_tn  n oLdHask; 

#e n d i f 
□ a 

n n if  ( pgp Fu L L Pa t h F rom F i L e Re f ( f i L eRe f , SfuLLPath)  ==  PGPERR_0K) 
n n { 

#if  UNIX 
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n 

n 

n 

oldHask  = uma s k ( s U n i x F i 1 eTy peTa b 1 e C f i 1 eTy p e 3 

#end i f 

Et 

n 

n 

StdIOFile  = fopen(fullPath,  mode); 

□ 

□ 

n 

i f 

(stdIOFi le  ==  NULL) 

□ 

n 

n 

{ 

n 

n 

a 

B 

if  (errno  ==  EACCES 

# i f d e f 

EROFS 

n 

n 

D 

a 

B II  errno  ==  EROFS 

#endi f 

n 

a 

n 

n 

B ) 

n 

a 

n 

n 

{ 

u 

n 

n 

Q 

B result  = PGPERR_FILE_PERMISSIONS; 

Q 

a 

n 

s 

> 

n 

n 

n 

□ 

else 

Q 

u 

n 

n 

D 

n 

n 

n 

B result  = PGPERR_N0_FILE; 

n 

a 

n 

n 

} 

Q 

n 

□ 

> 

f 

UNIX 

n 

n 

D 

umask(oldMask); 

#end i f 

Q 

n 

Q 

pgpMemFree(fullPath); 

D 

□ 

n 

i f 

(stdIOFi le  ==  NULL) 

Q 

n 

n 

n 

goto  error; 

n 

n 

> 

Q 

} 

#endifn  /*  D MACINTOSH  */ 


a i f (stdIOFi  Le  ==  NULL) 

B { 

B B result  = PGPERR_NO_FILE; 

B B goto  error; 

B > 

B return  stdIOFiLe; 


error: 

B if  (errorCode  !=  NULL) 

B { 

B B pgpAs se r t Add rVa L i d ( e r ro r Code , PGPError); 

B B *errorCode  = result; 

B > 

B return  NULL; 

} 


I* 

* Due  to  the  way  memory  is  handled  on  WIN32  systems  with  static  linking, 

* fclose  must  be  called  from  the  same  library  which  called  fopen. 

* This  function  servers  that  purpose.  It  should  be  called  by  external 

* libraries  and  apps  to  close  FILE  * handles  returned  by  this  module. 

*/ 

B PGPError 
pgpStdIOCloseC 

B FILE*nB  B stdIOFile) 

{ 

B if  (fclose  (stdIOFile))  { 

B B return  PGPERR_FILE_OPFAIL; 

B } 
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n return  PGPERR_OK; 

> 


n Pgp  F i I e * 
pgpFi LeRefReadOpenC 
n PGPFiLeRef  const  *n  fiLeRef, 
n PgpUICb  const  *aa  ui, 

n void  *n  n n n ui_arg, 

n PGPError  *n  n n errorCode) 

{ 

n pgpAssertCui  ==  NULL  &&  ui_arg  ==  NULL); 

n Cvoid)ui;n  n /*  Avoid  warnings  */ 

n (void)ui_arg; 
a 

n return  pg p F i L e R e f Ope n ( f i L e R e f , k PG P F i L eOpe n R e a d P e r m,  k PG P F i I eTy pe No n e , 
n n n n n n n errorCode); 

} 

n PgpFiLe  * 
pgpFi  LeRefWriteOpenC 
n PGPFiLeRef  const  *n  fiLeRef, 
n PG P F i L eTy penn  n fiLeType, 

n Pg p C f b C o n t ex t *nn  cfb, 

n PGPError  *n  n n errorCode) 

{ 

a pg p A s s e r t ( c f b ==  NULL); 
n (void)cfb;n  n /*  Avoid  warning  */ 
n 

n return  pg p F i L e R e f 0 p e n ( f i L e Re f , k PG P F i L e Ope n S t d W r i t e F L a g s , fiLeType, 
n n n n n n n errorCode); 

} 


n PgpFiLe  * 

pgpFi LeRefProcWriteOpenC 


□ 

PGPFi LeRef 

const 

*n 

fi LeRef, 

Q 

PGPFi LeType 

nn 

n 

fi LeType, 

a 

i ntnn  n 

□ 

n 

(*doCLose)n  (FILE  *fiLe, 

n 

void  *n  D 

n 

n 

arg. 

□ 

PGPError  *n 

n 

n 

errorCode) 

{ 

n FILE  *n  n stdIOFi Le; 

n PgpFiLe  *n  pgpFiLe; 

□ 

n if  ((stdIOFiLe  = p g p F i L e Re f S t d I 00 pe n ( f i L e R e f , 
nnnnnnnnnn  fiLeType, 
n n return  NULL; 


void  *arg). 


kPGPFi LeOpenStdWriteFLags, 
errorCode))  ==  NULL) 


n 


n if  ((pgpFiLe  = pg p F i L e P r o c W r i t e 0 pe n ( s t d 1 0 F i L e , doCLose,  arg))  ==  NULL) 
n { 

n n fcLose(stdlOFiLe); 

n n if  (errorCode  !=  NULL) 

n n { 

n n n pgpAssertAddrVaLid(errorCode,  PGPError); 

n n n *errorCode  = PG P E R R_ N0_ F I LE ; 
n n > 

a n return  NULL; 

n } 
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n return  pgpFiLe; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpFiLeRef.h  --  Platform  independent  filename  handling  module 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpFi  leRef . h,v  1.20.2.2  1 997/06/07  09:50:06  mhw  Exp  $ 

*/ 


#ifndef  PG P F I L E R E F _Hn  /*  L */ 

#define  PGPFILEREF.H 

#i nc lude  <stdi o . h> 

#include  "pgpFile.h" 

#include  "pgpFileHod.h" 

#include  "pgpErr.h" 

#if  MACINTOSHn  /*  [ */ 


^define  kPG PMa c F i I eTy p e A r mo r F i I en  n 
#define  kPGPMacFi leTypeEncryptedDatan 
#define  kPG PMa c F i I eTy pe S i g ne d Da t a n n 
#define  k PG PMa c F i I eTy p e D e t a c h e d S i gn  n 


' TEXT ' 
■pgEF' 
■pgSF' 
' pgDS ' 


#endifn  /*  ] 


MACINTOSH  */ 


/*  This  must  be  kept  in  sync  with  the  tables  in  pgpFileRef.c  */ 
typedef  enum  PGPFileType. 

{ 

o k PG P F i I e Ty pe N on e , 

n k PG P F i I eTy pe P r e f s , 

n kPG P F i I eTy pe Pub R i ng  , 

n kPG P F i I eTy pe P r i V R i n g , 

n k PG P F i I e Ty pe D e t a c h e d S i g , 

n k PG P F i I eTy p e Ra ndomS e e d , 

a k PG P F i I eTy pe Expo r t e dKey s , 

n kPG P F i I eTy pe A r mo r F i I e , 

n kPG P F i I eTy peEn c ry p t edDa t a , 

n k PG P F i I eTy p e D e c r y p t edT e X t , 

n kPGP F i I eTy pe De c ry p t edBi n, 

n k PG P F i I eTy pe S i g ne d Da t a , 

n kPG P F i I eTy pe NumTy pe s 

> PGPFileType; 


typedef 

struct 

PGPFi  leRef _n  n 

PGPFi leRef; 

typedef 

int  PG P F i 1 e Ope n F 1 a g s ; 

#d  e f i n e 

kPGPFi 

leOpenReadPermn 

n 

□ 

0X001 

//define 

kPGPFi 

leOpenWritePermn 

n 

n 

0x002 

//def  i ne 

kPGPFi 

leOpenReadUritePermn 

n 

( k PG P F i 1 e 0 pe n Rea d P e r mn  n 

\ 

a □ 

n □ 

n □ n n 

n 

n 

1 kPGPFi 

leOpenWri tePerm) 

#def i ne 

kPGPFi 

1 eOpenAppendn  n 

n 

tt 

0x004 

#def i ne 

kPGPFi 

leOpenT  runcaten 

n 

n 

0x008 

//define 

kPGPFi 

leOpenCreaten  n 

n 

n 

0X010 

//define 

kPGPFi 

leOpenT  extModen 

n 

n 

0x020n 

/* 

XXX 

To  be  phased 

out 

//def  i ne 

kPGPFi 

leOpenMaybeLoca lEncoden 

0x040n 

/* 

eg. 

MacBin  on  Mac 

*/ 

//define 

kPGPFi 

leOpenForceLoca lEncoden 

0x080n 

/* 

eg. 

MacBin  on  Mac 

*/ 

/* 
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* The  following  flag  modifies  one  of  the  two  flags  above  to  strip  out 

* volatile  information  such  as  dates,  filenames,  icon  colors,  etc. 

* It  is  not  necessarily  suitable  for  recreating  a file,  and  should  only 

* be  used  for  detached  signatures. 

*/ 

^define  kPGPFi leOpenLocalEncodeHashOnlyn0x100 
/* 

* The  following  flag  modifies  the  behavior  of  LocalEncode  on  the 

* Mac  (MacBinary)  to  accept  a CRC  of  0 in  the  header. 

*/ 

^define  kPG P F i I eO pe nNoMa c B i n C R C 0 ka y nn  0x200 

^define  kPG P F i I eO pe n S t d W r i t e F I a g sn  ( kPGP F i I e Ope n W r i t e Pe r mn  n n \ 

nnnnnnnnn  | kPG  P F i I e Op  e nT  r u n c a t en  n n \ 

nnnnnnnnn  | kPG  P F i I e Op  e n C r e a t e ) 

^define  kPG P F i I eOpe n S t d Appe nd F I a g s n ( kPG P F i I e Op e n W r i t e Pe r mn  n n \ 

nnnnnnnnn  | kPGP F i I eOpenAppendn  n n \ 

nnnnnnnnn  | kPG  P F i I e 0 p e n C r e a t e ) 

^define  kPG P F i I eOpe n S t d U pda t e F I a g s n ( kPG P F i I e 0 p e n S t d W r i t e F I a g s n n \ 
nnnnnnnnn  | kPG  P F i I e 0 p e n Rea  d Pe  r m ) 


#ifdef  __cplusplus 
extern  "C"  { 

#endi f 


PGPFileRef  PGPExport  *n 
PGPError  PGPExportn  n 
n n n n n n 
PGPFileRef  PGPExport  *n 
void  PGPExportn  n n 


pgpNewFileRefFromFullPathCchar  const  *path); 

pg p F u I I Pa t h F r om F i I e Re f ( PG P F i I e R e f const  *fileRef, 

n n char  **fullPathPtr); 

pg pC opy F i I e Re f ( PG P F i I e Re f const  *fileRef); 
pgpFreeFi leRefCPGPFi leRef  *fi  leRef); 


#if  MACINTOSHn  /*  C */ 

PGPFileRef  PGPExport  *n  pg pN e w F i I e Re f F r om F S S p e c ( F S S pe c const  *spec); 
PGPError  PGPExportn  n pg p F S S pe c F r om F i I e R e f ( PG P F i I e R e f const  *fileRef, 

nnnnnnnn  FSSpec  *spec); 

#endifn  /*  3 MACINTOSH  */ 


uchar  PGPExport  *n  n pg p E x po r t F i I e Re f ( PG P F i I e Re f const  *fileRef, 

nnnnnnnn  size_t  *size); 

PGPFileRef  PGPExport  *n  pg p I mpo r t F i I e Re f ( u c ha r const  *buffer, 
n n n n n n n n size_tsize); 


/* 

* pgpGe t F i I eRef Name  returns  a string  allocated  with  pgpAllocC), 

* which  the  caller  is  responsible  for  freeing. 

*/ 

char  PGPExport  *n  n pg pG e t F i I e Re f Name ( PG P F i I e Re f const  *fileRef); 
PGPError  PGPExportn  n pg p S e t F i I e Re f Name ( PG P F i I e Re f **fileRef, 
nnnnnnnn  char  const  *newName); 


PGPError  PGPExportn  n 
n n n n n n 
PGPError  PGPExportn  n 
n n n n n n 
PGPError  PGPExportn  n 


pg p C a I c F i I e S i z e ( PG P F i I e R e f const  *fileRef, 

n n PGPFileOpenFlags  flags,  size_t  *fileSize); 

pg p C r e a t e F i I e ( PG P F i I e R e f const  *fileRef, 

n n PGPFileType  fileType); 

pg p De  I e t e F i I e ( PG P F i I e R e f const  *fileRef); 


/*  oldRef  and  newRef  must  be  the  same  PG P F i I e R e f Ty pe  and  directory  */ 
PGPError  PGPExportn  n pg p R e na me F i I e ( PG P F i I e R e f const  *oldRef, 
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nnnnnnnn  PGPFiLeRef  const  *newRef); 


/* 

* Create  and  open  a temporary  file  in  a p L a t f o r m- s a a vy  manner. 

* The  caLLer  is  responsible  for  deleting  the  file  when  finished. 
*/ 


FILE  PGPExport  *n  n pgpStdIOOpenTempFileCPGPFileRef  **tempFileRef, 

n n n n n n n n PGPError*error); 


PgpFile  PGPExport  *nn  p g p F i I e R e f 0 p e n C PG P F i I e R e f const 

nnnnnnnn  PG P F i I eO p e n F I a g s flags, 
nnnnnnnn  PGPFileType  fileType, 
n n n n a a a a PGPError*error); 
PgpFileRead  PGPExport  *npg p F i I e R e f R e a d C r ea t e ( PG P F i I e R e f 
nnaaaaaa  PG P F i I e Ope n F I a g s flags. 


*fi leRef, 


const  *fi  leRef, 
PGPError  *error); 


/*  XXX  Compatibility  routines  follow,  intended  to  be  phased  out  */ 


PGPExport  *n  a 
a a a a 

a a a a 

ror  PGPExportn  a 
le  PGPExport  *na 
a a a a 

a a a a 

le  PGPExport  *nB 


FILE 
a a 
a a 
PGPEr 
PgpFi 
a a 
a a 
PgpFi 

a a a a a a 
a a a a a a 
PgpFile  PGPExport  *na 


a a 

a a 

a a 


a a 

a a 

a a 


pg p F i I e R e f S t d I OOpe n C PG P F i I e R e f const  *fileRef, 

B a PGPFileOpenFlags  flags, 

B a PGPFileType  fileType,  PGPError  *error); 

pgpS t d I OC  I os e ( F I LE  *stdIOFile); 

pg p F i I e R e f R ea do p e n ( PG P F i I e R e f const  *fileRef, 

B B PgpUICb  const  *ui,  void  *ui_arg, 

B a PGPError  *error),- 

pgp F i I e Re f W r i t eOpe n ( PG P F i I e Re f const  *fileRef, 

B B PGPFileType  fileType, 

B B Pg p C f b C on t e X t *cfb,  PGPError  *error); 

pgp F i I e Re f P r OC W r i t eOpen ( PGP F i I eRe f const  *fileRef, 
B a PGPFileType  fileType, 

B a a int  C*doClose)  (FILE  *file,  void  *arg), 

a a a void  *arg,  PGPError  *error); 


#ifdef  __cplusplus 

> 


# en d i f 


#endifB  /*  ] PGPFILEREF.H  */ 
/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* 

* 

* 

* 

* 

* 

*/ 


pgpFlexFIFO.c  --  Use  a memory  buffer  as  a fifo  unless  it 
at  which  point  we  switch  to  a disk  file 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  ri 

$Id:  pgpF lexFI FO . c,v  1.4. 2.1  1997/06/07  09:50:06  mhw  Exp 


runs 

fifo 

g h t s 

$ 


out. 


reserved. 


#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

#endi f 

^include  <stdio.h>n  /*  For  BUFSIZ  */ 

#ifdef  HAVE_UNISTD_H 

^include  <unistd.h>n  /*  For  unlinkC)  */ 

# e n d i f 


# i nc  I ude 
^include 
//include 
//include 
//i  nc  I ude 


pgpDebug . h" 
pgpFIFO.h" 
pgpErr . h" 
pgpMem . h " 
pgpUsua  I s . h 


//if  (BUFSIZ  < 16384)  &S  (MACINTOSH  ||  WIN32) 

//define  kPG  P F I F OBu  f S i z enn  16384 

#e  I se 

//define  kPG  P F I F OBu  f S i z enn  BUFSIZ 

// end i f 

/* 

* Size  at  which  we  will  switch  from  byte  to  disk  fifos.  Will  also 

* do  so  if  we  run  out  of  memory  so  set  this  very  large  to  switch  only 

* in  that  case . 

*/ 

//define  HAXBYTEFI FOSIZE  (48*1  024L)n  /*  We  might  want  to  adjust  this  */ 


struct  PgpFifoDesc  const  *bf  = &pg pBy t e F i f o D e s c ; 
struct  PgpFifoDesc  const  *ff  = &pg p F i I e F i f o D e s c ; 


struct 

n 

n 

n 

n 

n 

>; 


PgpFifoContext  { 

struct  PgpFifoContext  *bytefifo; 
struct  PgpFifoContext  *filefifo,- 
byte  infile; 
size_t  by t e f i f os i z e ; 
size_t  maxbytef i f osi ze; 


static  void 

f I ex F i f o I n i t ( s t r u c t PgpFifoContext  *fifo) 

{ 

n f i f o->by t e f i f o = NULL; 

n f i f o->f i I e f i f o = NULL; 

n fifo->infile  = 0; 

n f i f o->bytef i f osi ze  = 0; 

n f i f o->maxbytef i f osi ze  = M AXB YT E F I F 0 S I Z E ; 

} 
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static  void 

f L e X F i f o F I u s h ( s t r u c t Pg p F i f o C o n t e x t *fifo) 

{ 

n if  Cfifo->infiLe) 

° n pg p F i f o F L us h ( f f , f i f o->f i L e f i f o ) ; 

n else 

° n pgpFifoFlushCbf,  fifo->bytefifo); 

n f L e X F i f o I n i t ( f i f o ) ; 

} 


static  unsigned  long 

flexFifoSizeCstruct  PgpFifoContext  const  *fifo) 
{ 


n 

if  ( f i 

fo->infi Le) 

n 

n 

return  pgpFifoSizeCff,  fifo->fiLefifo); 

n 

else 

n 

> 

n 

return  pgpFifoSizeCbf,  fifo->bytefifo); 

static 

struct 

PgpFifoContext  * 

f L ex  F i 

/ 

foCreateC) 

\ 

n 

Struct 

PgpFifoContext  *fifo; 

B 

f i f o = 

(struct  PgpFifoContext  * ) pg pH em A L L o c ( s i z e o f ( * f i 

B 

if  (f  i 

f o)  { 

B 

n 

fifo->infile  = 0; 

B 

n 

f i f o->f i L ef i f 0 = NULL; 

B 

n 

fifo->bytefifo  = pgpFifoCreateCbf); 

B 

B 

if  ( ! f i f o->by t e f i f 0 ) { 

B 

B 

n pg pHem F r ee ( f i f 0 ) ; 

B 

B 

n return  NULL; 

B 

B 

> 

B 

B 

fifo->bytefifosize  = 0; 

B 

B 

f i fo->maxbytef i fosi ze  = HAXBYTEFIFOSIZE; 

B 

> 

B 

} 

return 

f i f o ; 

Static 

void 

fLexFifoDestroyCstruct  PgpFifoContext  *fifo) 

f 

B 

if  (f  i 

fo->infi Le) 

B 

n 

pgpFifoDestroyCff,  fifo->fi Lefifo); 

B 

else 

B 

n 

pgpFifoDestroyCbf,  fifo->bytefifo); 

B 

pgpMemFreeCfifo); 

static  byte  const  * 

flexFifoPeekCstruct  PgpFifoContext  *fifo,  unsigned  *Len) 

{ 

n if  (fifo->infiLe) 

n n return  pgpFifoPeekCff,  fifo->fiLefifo,  Len); 

n else 

n n return  pgpFifoPeekCbf,  fifo->bytefifo,  Len); 
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} 


static  void 

f L ex F i f o S e e k ( s t r u c t Pg p F i f o C o n t e x t *fifo,  unsigned  Len) 
{ 


n 

if  (f  i 

fo->infi Le) 

n 

n 

pg p F i f 0 S e e k ( f f , f i f o->f i L e f i f o , 

Len); 

n 

e L se  { 

n 

D 

pg p F i f 0 S e e k ( b f , f i f o->by t e f i f o , 

Len); 

n 

□ 

f i f o-> by t e f i f o s i z e -=  Len; 

D 

> 

> 

stati  c 

s i ze_t 

f L e x F i f o R e a d ( s t r u c t Pg p F i f o C on t e x t *fifo,  byte  *buf,  size_t  Len) 
{ 


a 

□ 

a 

n 

n 

□ 

n 

n 

> 


if  (fifo->infiLe) 

n return  pg p F i f o R e a d ( f f , f i f o-> f i L e f i f o , buf,  Len); 

e L se  { 

n size_t  nread  = pg p F i f o R e a d ( b f , f i f o->by t e f i f o , buf, 

n if  (nread>0) 

n n fifo->bytefifosize  -=  nread; 

n return  nread; 

> 


L e n ) ; 


/* 

* If  bytefifo  faiLs  to  take  the  requested  data,  assume  that  memory  is 

* fuLL.  Switch  to  using  a fiLe  fifo  and  transfer  aLL  data  from  the 

* byte  fifo  to  the  fiLe.  HopefuLLy  this  wiLL  free  up  enough  memory 

* that  we  can  compLete. 

* 

* We  can  aLso  be  configured  to  have  a maximum  size  for  the  byte  fifo 

* and  if  we  exceed  that  we  wiLL  switch  over. 

*/ 

static  size_t 

f L e X F i f oW r i t e ( s t r u c t Pg p F i f o C on t e x t *fifo,  byte  const  *buf,  size_t  Len) 
{ 

n byte  *xbuf  = NULL; 

n size_t  written; 

n unsigned  Long  n; 

n Longerr; 

n i f ( f i f o-> i nf i L e ) 

n n return  pg p F i f o W r i t e ( f f , f i f o->f i L ef i f o,  buf,  Len); 


□ 

n 

n 

n 

n 

n 

D 

Q 

a 

D 

□ 

□ 


written  = 0; 

if  ( f i f o->by t e f i f o s i z e + Len  <=  f i f o->ma x by t e f i f o s i z e ) 
n written  = pg p F i f o W r i t e ( b f , f i f o->by t e f i f o , buf,  Len); 

fifo->bytefifosize  +=  written; 
if  (written  < Len)  ( 
n /*  switch  to  fiLe  fifo  */ 

n if  (xbuf  ==  NULL)  { 

n n xbuf  = (byte  *)pgpALLoc(kPGPFIFOBufSize  * 2); 

n n if  (xbuf  ==  NULL) 

n n n return  PG P E R R_N0M E H ; 

n } 

n /*  Try  to  free  up  some  memory  from  byte  fifo  */ 
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c 

n 

Q 

n 

n 

n 

n 

u 

n 

n 

u 

□ 

Q 

n 

n 

n 

u 

Q 

□ 

n 

□ 

□ 

n 

n 

n 

u 

u 

y 


n 

a 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


n = pg p F i f oRea d ( bf , f i f o->by t e f i f o , xbuf,  s i zeof ( xbuf  ) ) ; 
fifo->fiLefifo  = pgpFifoCreateCff); 
if  ( ! f i f o->f  i L e f i f o ) -C 
n pgpMemF ree (xbuf ) ; 

a pgpFifoDestroyCbf,  fifo->bytefifo); 

n return  PGPERR_NOMEM; 

> 

/*  Transfer  data  from  byte  to  file  fifo  */ 
do  { 

n pgpAssert  (n  <=  sizeof(xbuf)); 

n err  = (Long)pgpFifoWrite(ff,  fifo->fiLefifo,  xbuf,  n); 

n if(err<0) 

n { 

n n pg pM em F r e e ( X bu f ) ; 

n n return  (size_t)err; 

n > 

> while  C(n  = pgp F i f oRead ( bf , f i f o-> by t e f i f o , xbuf, 
n H n sizeof(xbuf)))>0); 

pgpFifoDestroyCbf,  fifo->bytefifo); 
f i f o->by t e f i f o = NULL; 
fifo->bytefifosize  = 0; 
f i f o-> i nfile  = 1; 

written  +=  pgpFifoWriteCff,  fifo->fiLefifo,  buf+written, 
n H n L e n-w r i t t e n ) ; 


pgpMemFreeCxbuf ) ; 
return  written; 


struct  PgpFifoDesc  const  pg p F L ex F i f oDe s c 
n "Flex  Byte/FiLe  Fifo", 

n flexFifoCreate, 

n flexFifoRead, 

n flexFifoWrite, 

n flexFifoPeek, 

n flexFifoSeek, 

n flexFifoFLush, 

n f L e x F i f o D e s t r oy  , 

n flexFifoSize 

>; 


C[CHK:9182350353acb41c116b9065a1addfafafd690693074cab3: 


496 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpGiobals.c 


/* 

* pgpGLobaLs.c  --  A file  containing  global,  constant  values. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r I o r dSH I T . E D U> 

* 

* $Id:  pg pG I oba I s . c , V 1.4. 2. 3 1997/06/07  09:50:07  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#end  i f 

Sinclude  "pgpUsuals.h" 

char  const  pg p L i b V e r s i on S t r i n g C D = 

#if  PGP_FREEWARE 

n "PGPfreeware  5.0  for  n o n- c omme r c i a I use  <http://uww.pgp.com>"; 

# e I s e 

n "PGP  for  Personal  Privacy  5.0"; 

# e nd i f 
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/* 

* pgpLeaks.c  --  Leak  tracking  module  for  memory  allocation  routines 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpLeaks.c, V 1.13.2.2  1997/06/07  09:50:07  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
//include  "config.h" 
//end  i f 


^include 

//include 

//include 

//include 

//include 

//include 


<std  I i b . h> 
<limits.h> 
<st  ri ng  . h> 
"pgpMem. h" 
"pgpLeaks.h 
"pgpTypes  . h 


//if  USE_PGP_LEAKSn  /*  C */ 


//ifdef  _WIN32 
#define  inline 
#e n d i f 


typedef  struct  LeaksSessionnn  LeaksSession; 
struct  LeaksSession 
{ 

n LeaksSession  *n  prevSession; 

a char  const  *n  name; 

n Leakitemn  n dummyltem; 

>; 

static  DECLARE_LEAKDEALLOCTYPE(kSessionDummyDeallocType, 
nnnnonnn  "Session  dummy  dealloc"); 

static  D E C L A R E_ LE AKA LLO CT Y P E ( kS e s s i on D ummy A I I o cTy pe , "Session  dummy  alloc", 
aaaaannn  kS e s s i o n D ummy D e a I I o c Ty p e ) ; 

/* 

* In  order  to  avoid  allocating  memory  until  ue  have  the  first  session 

* initialized,  we  use  this  static  variable  for  the  first  session. 

*/ 

static  LeaksSessionnn  s I n i t i a I S e s s i on  = { 


Q 

NULL,n  n n n 

n 

n 

n 

D 

n 

D 

/* 

prevSessionn 

*/ 

a 

"init",nn  n n 

a 

n 

a 

a 

a 

D 

/* 

namean  n 

*/ 

a 

{n  n n n n 

n 

n 

a 

a 

a 

a 

/* 

d ummy 1 1 ema 

*/ 

n 

kLeakItemMagi c,nn 

n 

a 

a 

a 

D 

□ 

/* 

mag i ca  n 

*/ 

n 

SLeakStructNameCkSess 

i on  DummyA  1 1 

ocType) 

/* 

a L LocTypea 

*/ 

n 

0,n  n n n a 

n 

n 

a 

n 

D 

n 

/* 

s i z ea  a 

*/ 

a 

FALSE, n ana 

n 

n 

a 

n 

n 

n 

/* 

i gno  reaa 

*/ 

n 

SsInitialSession. 

dummyltem. 

aa 

n 

n 

n 

/* 

prevB  a 

*/ 

D 

&sInitialSession. 

dummyltem. 

aa 

□ 

n 

□ 

/* 

nexta  n 

*/ 

Q 

FILE ,a  a a 

n 

n 

a 

n 

n 

Q 

/* 

f i L eNamea 

*/ 

n 

LINE ,a  a a 

n 

n 

a 

n 

n 

n 

/* 

lineNumbera*/ 

a 

SsInitialSessiona 

n 

n 

Q 

n 

n 

n 

/* 

memo  ryaa 

*/ 

n } 

>; 
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static 

LeaksSession 

*n 

s C u r r e n t S es s i on  = & s I n i t i a 1 S e s s i o n ; 

static 

i ntn  a 

n 

n 

sNumllnallocatedSessions  = 0; 

static 

i ntn  a 

n 

Q 

sSuspendCount  = 0; 

n void 

pgpLeaksSuspendCvoi d> 

{ 

n ++sSuspendCount; 

> 

n void 

pgpLeaksResumeCvoid) 

{ 

n pg p As se r t M s g ( s S u s p e nd C ou n t >=  1, 

a n "pgpLeaksResume:  not  currently  suspended"); 

n --sSuspendCount; 

> 

n static  inline  Boolean 
pgpLeaksSuspended(void) 

{ 

n return  sSuspendCount  !=  0; 

> 


a static  void 
pgpLeakslgnorelfSuspendedl 
n Leakitem  *n  n leak) 

< 

n if  ( pgpLea ks Sus pended () ) 
n n pgp Lea ks I g no r e I t em ( I e a k ) ; 

> 


n static  void 
pgpLeaksLinkItemC 

n Leakitem  *n  n e x i s t i n g I t em, 

n Leakitem  *n  u newitem) 

{ 


n pgpa  ( ( 

n n pgpa Lea kl t emVa I i d ( ex i s t i ng 1 1 em ) , 

n n pgpaMsgC" Invalid  existing  item"))); 

n n e w I t em->p r e vn  n n = e x i s t i ng I t em; 

n newltem->nextn  n n = e x i s t i ng 1 1 em->n e x t ; 

n n e w I t em->p r e v->n e X t na  = newitem; 

n newltem->next->prevnn  = newitem; 
n pgpalpgpaLeakItemValidCnewItem)); 


n static  void 
pgpLeaksUnlinkItemC 
n Leakitem  *n  a item) 

{ 

n pgpa  ( ( 

n a pg pa  Lea k 1 1 emVa I i d ( i t em ) , 
n a pgpa Lea k 1 1 emVa I i d ( i t em->p r e V ) , 
a a pgpa Lea k I t emVa I i d ( i t em->n e X t ) , 
a a pgpaMsg ( " I nva  I i d item  or  item  links"))); 
n i t em->p r e v->ne X t = item->next; 
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n i t e m->n e X t ->p r e V = item->prev; 

> 

#define  pg p a Le a ks S e s s i o n Va L i d ( s e s s i o n ) n n n n n n \ 
n n p g pa C a L L ( pg pa  I n t e r n a L Le a k s S e s s i on Va L 1 d , ( p g pa C a L I P r e f i x , session)) 

#if  DEBUGn  /*  C */ 

n static  Boolean 

pgpainterna  L LeaksSessi  onVa  L i d ( 

n pg  pa  C a L L P r e f i X D e f , 

n const  LeaksSession  *n  session) 

{ 

n / * 

n * pg p Lea k s No t i f y I t emMo V e d assumes  this  routine 
a * won't  check  the  prev  and  next  Links 
n * / 

n pgpaAddrVaLid(session,  LeaksSession); 
n pgpaLeakItemVaLid(&session->dummyItem) ; 

n pgpaAssert(session->dummyItem.aLLocType  ==  kSessionDummyALLocType); 
n pgpaMsg("pgpaLeaksSessionVaLid  failed"); 

n return  pgpaFailed; 

} 

Sendifn  /*  : DEBUG  */ 


n static  void 

pgpLeaksInitLinkItemC 

n 

Leakitem  *n  n 

u 

item. 

□ 

LeakAl  LocType 

*nn 

a L LocType, 

n 

void  const  *n 

n 

memo  ry , 

n 

u L ongn  n n 

n 

size. 

□ 

char  const  *n 

n 

fi LeName, 

Q 

Longn  a a 

n 

L i neNumbe  r ) 

{ 

Q pgpa ( ( 

n n pgpa Add rVa L i d ( i t em,  Leakitem), 
n n pg pa  Lea kA I L ocTy pe Va L i d ( a L L ocTy pe ) , 
n n pg pa  Add r Va L i d C memo r y , VoidALign), 

a n pgpa S t rVa L i d ( f i L eName ) , 
n n pgpaHsg ( " I nva L i d parameters"))); 


□ 


□ 

i t em->mag i cnn 

n 

= 

kLeakltemHagi c; 

u 

i t em->a  L LocType 

nn 

= 

aLLocType; 

n 

i t em->s i zen  n 

□ 

= 

size; 

u 

item->ignoren 

n 

= 

FALSE; 

n 

item->prevn  n 

n 

= 

item; 

a 

i t em->n ex t a n 

n 

= 

item; 

n 

i t em->f i LeNamen 

□ 

= 

fi LeName; 

n 

i t em->  L i neNumbe 

rn 

= 

LineNumber; 

n 

i t em->memo  ryn 

n 

= 

memory ; 

} 

n void 

pgpLeaksBeginSessionC 

n char  const  *n  n sessionName) 

{ 
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n 

n 

□ 

n 

n 

n 

□ 

n 

n 

n 

a 

□ 

n 

□ 

n 

n 

n 

n 

Q 

□ 

n 

a 

n 

□ 

n 

a 

n 

n 

n 

n 

> 


LeaksSession  *n  n newSession  = NULL; 
pgpa  ( ( 

n pg pa S t r Va L i d ( s e s s i on N a me ) , 
n pgpaMsgC "Invalid  parameters"))); 

/* 

* If  we  can't  allocate  a new  session,  we  just  increment  the 

* sNumUna I I o c a t edSes s i on s counter,  so  we  keep  using  the  parent  session 

* instead.  In  addition,  if  we're  already  in  a session  which  couldn't 

* be  allocated  ( s NumUna I I o c a t e d S e s s i on s > 0),  we  won't  even  try  to 

* allocate  this  one,  because  it  would  be  more  complicated  to  keep  track 

* of  than  it's  worth. 

*/ 

if  ( s NumUna I I o c a t edSe s s i on s <=  0) 

n newSession  = (LeaksSession  * ) pg pM em A I I o c ( s i z eo f ( Le a ks S e s s i on ) ) ; 

if  (newSession  ==  NULL) 

{ 

n s NumU n a I I o c a t ed S e s s i o n s + + ; 

n pgpDebugMsg(" Unable  to  allocate  new  leaks  session"); 

> 

else 

{ 

n newSession->prevSession  = sCurrentSession; 
n n e wS e s s i o n->name  = sessionName; 

n pgpLeaksInitLinkItem(&newSession->dummyItem,  kSessionDummyAllocType, 

n n n n n n (void  * ) n e w S e s s i o n , 0,  __FILE__,  LINE__); 

n sCurrentSession  = newSession; 

} 


n static  ulong 
pgpLeaksCountLeaks( 

n const  LeaksSession  *n  n session) 


{ 

n 

n 

D 

Q 

a 

a 

□ 

n 

n 

n 

n 

n 

□ 

D 

n 

} 


ulongn  n n n numLeaks  = 0; 

Leakitem  const  *n  item; 

pgpa ( ( 

a pgpaLeaksSessionValid(session), 
n pgpaNsg ( " I nva I i d LeaksSession"))); 

for  (item  = session->dummyItem.next;  item  !=  &session->dummyItem; 
a n item  = item->next) 

{ 

n pgpa(pgpaLeakItemValid(item)); 
n if  ( ! i t em-> i g no r e ) 

Q n ++numLeaks; 

> 

return  numLeaks; 


n static  void 
pgpLeaksShowSessi onLeaks( 

n const  LeaksSession  *n  n session) 

< 

n ulongn  n n n numLeaks; 
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n 

n 

n 

a 

n 

n 

□ 

D 

a 

a 

Q 

D 

a 

□ 

n 

D 

n 

n 

Q 

n 

Q 

n 

Q 

n 

□ 

n 

n 

n 

> 


Leakitem  const  *n  item; 

□ 

pgpa  ( ( 

n pgpaLeaksSessionVaLid(session), 
n pgpaMsg ( " I nva L i d Lea k s S e s s i o n " ) ) ) ; 


numLeaks  = pgpLeaksCountLeaks(session); 
if  C numLea  ks  ! = 0 ) 

{ 

n pg pDebug Fmt Msg ( ( pgpa Fmt P re f i X , 

n n a n h "Ending  session  %s  with  %Lu  Leaks:", 

n n n n n s e s s i o n->na me , numLeaks)); 


□ 

n 

n 

n 

n 

□ 

□ 

□ 

n 

n 

n 

□ 

n 

□ 

} 


for  (item  = s e s s i on->d ummy I t em . n e x t ; item  !=  Ss e s s i on->d ummy I t em; 
n n item  = item->next) 

{ 


pgpaCpgpaLeakItemValidCitem)); 
if  (!item->ignore) 

{ 

pgpDebugFmtHsg((pgpaFntPrefix, 


n n n n "LEAK  at  %p  of  %Lu  bytes  from  %s  " 

o n n n "Line  %Ld  (%s),  session  %s", 

n n n n i t em->memo ry , item->size, 

n n n n i t em-> f i L eName , i t em-> L i ne Numb e r , 

n n n n i t em->a L L o cTy pe->n a me , s e s s i on->na me ) ) ; 


n void 

pgpLeaksEndSession(void) 

{ 


n if  (sNumUnaLLocatedSessions  > 0) 
n n sNumUnaLLocatedSessions--; 

n e L s e 

n { 

n n LeaksSession  *n  oLdSession; 

□ Q 

n n pgpaCpgpaLeaksSessionVaLidCsCurrentSession)); 

n n oLdSession  = s C u r r e n t S e s s i o n ; 

n n s C u r re n t S e s s i on  = o L d S e s s i o n->p r e v S e s s i on ; 

n n pgpLeaksShowSessionLeaks(oLdSession); 

n n if  (oLdSession  !=  & s I n i t i a L S e s s i on ) 

o n n pg pMem F r e e ( o L d S e s s i on ) ; 

n } 

} 


n void 

pgpLeaksRememberItem( 
a Leakitem  *n  a n 
n Lea kA L LocType  *nn 
n voi d const  *n  n 
n uLonga  a n n 
n char  const  *n  n 
n Longn  n n n 
{ 


item, 

type, 

memory, 

size, 

f i L eName, 

L i neNumbe  r ) 


n pgpa(pgpaLeaksSessionVaLid(sCurrentSession)); 
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D 

“ pgpa ( ( 

n n pgpa Add rVa L i d ( 1 t em,  Leakitem), 

n n pgpa Lea k A L L o cTy pe Va M d ( t y pe ) , 

n n pg pa  Add rVa L i d ( memo ry , VoidALign), 

n n pgpa S t r Va L i d ( f i L eName  ) , 

a a pgpaMsgC" Invalid  parameters"))); 
n pgpaCpgpaLeaksSessionValidCsCurrentSession)); 

n pgpLeaksInitLinkltemlitem,  type,  memory,  size,  fileName,  LineNumber); 
n pgpLeaksLinkItem(8sCurrentSession->dummyItem,  item); 

0 

n pgpLeaksIgnorelfSuspended(item); 

> 

n void 

pgpLeaksIgnoreltemC 
n Leakitem  *n  n item) 

{ 

° pgpa  ( ( 

n n pg pa Le a kl t em Va L i d ( i t em ) , 

n n pgpaHsgC" Invalid  parameters"))); 

□ 

n item->ignore  = TRUE; 

1 

n void 

pgpLeaksIgnoreMemoryC 
n const  void  *n  memory) 

{ 

n pgpAssertAddrValidlmemory,  VoidAlign); 
n pgpLeaksIgnoreltemlpgpLeaksFindltemCmemory)); 

> 


void 

pgpLeaksForgetItemC 
n Leakitem  *n  n n item, 

n Lea kDea I I ocType  *n  deallocType) 

{ 


□ 

□ 

□ 

n 

n 

n 

n 

a 

n 

n 

n 

D 

} 


pg  pa  ( ( 

n pgpa Lea kl t emVa I i d ( i t em ) , 

n pgpaLeakDeallocTypeValid(deallocType), 
n pgpaMsgC" Invalid  parameters"))); 
pgpa ( ( 

n pg pa  As s e r t ( i t em->a I I o cTy p e->d ea I I o c Ty p e ==  deallocType), 

n pgpa Fmt Msg (( pgpa Fmt P re f i X, 

n n "Block  deallocated  incorrectly  with  %s  instead  of  %s\n" 

n n " from  %s  in  %s  line  Zld", 

n n d ea I I o cTy pe->n ame  , i t em->a I I o c Ty pe->d e a I I o c Ty pe->n a me , 

n n i t em->a I I o cTy pe->n a me , i t em-> f i I e Na me , i t em->  I i n e N umbe r ) ) ) ) ; 

pgpLeaksUnlinkltem(item); 


a Leakitem  * 
pgpLeaksFindItemC 
n void  const  *o  memory) 
f 

n LeaksSession  const  *n  session; 
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n Leakitem  *nn  n n item; 


Q 

n 

n 

Q 

□ 

n 

□ 

n 

n 

Q 

□ 

□ 

n 

n 

n 

D 

> 


pgpa ( ( 

n pg pa  Ad d rV a L i d ( memo ry , VoidAlign), 
n pgpaMsg ( " Inva L i d parameters"))); 
for  (session  = s C u r r e n t S e s s i on ; session  !=  NULL; 
n n session  = s e s s i on->p r e v S e s s i o n ) 

{ 

n pgpaCpgpaLeaksSessionVaLidCsession)); 

n for  (item  = s e s s i o n->d ummy I t em . ne x t ; item  !=  &s e s s i on->d ummy I t em; 
a a a item  = item->next) 

n { 

n n pgpa(pgpaLeakItemVaLid(item)); 

n n if  ( i t em->memo ry  ==  memory) 

n a a return  item; 

n } 

} 

return  NULL; 


n void 

pgpLeaksNoti fyltemMoved( 
n Leakitem  const  *n  oLdItem, 

n Leakitem  *n  n n newitem) 

{ 

n /*  Assumes  that  the  assertion  won't  check  the  Links  */ 
Q p g pa  ( ( 

n n pgpa Lea kl t emVa L i d ( newl t em ) , 

n n pg pa M s g ( " I n va L i d parameters"))); 

□ 

n if  ( n e w I t em->p r e V ==  oLdItem) 
n { 

n n /*  This  is  the  only  item  in  the  List  */ 

a a n e w I t em->p r e V = n e w I t em->n ex t = newitem; 

n > 
n e L s e 
n C 

n n n e w I t em->p r e v->n e X t = newitem; 

n n ne w I t em->n e X t -> p r e V = newitem; 

a y 

I 


#endif  /*  ] USE  PGP  LEAKS  */ 


/* 

* LocaL  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpLeaks.h  --  Leak  tracking  module  for  memory  allocation  routines 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpLeaks.h, V 1.11.2.1  1997/06/07  09:50:08  mhw  Exp  $ 

*/ 

#ifndef  PGPLEAKS_H 
#define  PGPLEAKS.H 

#if  PRAGMA_IHPORT_SUPPORTED 
#pragma  import  on 
Send i f 

Sinclude  "pgpTypes.h" 

Sinclude  "pgpDebug.h" 

Sifndef  U S E_ PG P_ L E A KS 

Sdefine  U S E_PG P_ L E AKSn  n DEBUG 

Sendi f 


Sifdef  cplusplus 

extern  "C"  { 

Send i f 


Sif  USE_PGP_LEAKSn  /*  C */ 


/* 

* WARNING:  The  leaks  library  is  currently  not  thread-safe 
*/ 


Sdefine  k Lea kD ea I I o cTy peHa g i cn  0xD073A915 
Sdefine  k Lea k A I I o c Ty pe Ha g i c nn  0xE19C834B 
Sdefine  k Lea kl t emHa g i cn  n n 0xB74D951F 


typedef  struct  LeakDea I locType.  constn  Le a k 0 e a I I o cTy pe ; 
struct  LeakDea I locType. 

{ 

n ulongn  n n n magic; 

n char  const  *n  n name; 

>; 


typedef  struct  LeakAllocType.  constnLeakAllocType; 
struct  Lea k A I I o cTy pe_ 

{ 

n ulongn  n n n magic; 

n char  const  *n  n name; 

n LeakDea  I locType  *n  deallocType; 

>; 

Sdefine  Lea kS t r u c t N a me ( name ) n name  SS struct 


Sdefine  D E C LAR E_ LE AKD E A LLO CT Y P E ( va r Name , nameStr)n  n n n 
n n Lea kDea I I o cTy p e Le a kS t r u c t Na me ( va r Na me ) = {nn  n n 
n n n n n n n kLea kD ea I I o c Ty p eMa g i c , n n n n 
n n n n n n n nameStr  >,n  n n n n n n 
n n n n n n *varName  = 8 Lea kS t r u c t Na me ( va r Na me ) 


\ 

\ 

\ 

\ 
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#define  D E C L A R E_ L E AK A L LO C T Y PE ( va r Na me , nameStr,  d e a I L o c Ty p e ) n \ 
n a Lea kA L L o cTy pe  Lea kS t r u c t N a me ( va r Na me  ) = {n  n n n \ 
n n n n n n n k Lea  k A L L o cTy  p e Ma  g i c , n n n n \ 
n n n n n n n nameStr,n  n n n n n n \ 
n n n n n n n & Le a k S t r u c t Na me C d e a L L o cTy p e ) >,nn  \ 
n n n n n n *varName  = 8 Le a k S t r u c t N a me ( va r Na me ) 


* The  Leakitems  form  a c i r c u L a r L y- L i n ke d List. 

* Each  session  has  its  own  List,  each  with  its  own  dummy  eLement. 


*/ 

typedef  struct  Leakltem_n 
struct  Leakltem_ 

{ 


Leakitem; 


n 

u Longn  n n 

magic; 

n 

Lea  kA  L L ocT ype 

*naLLocType; 

□ 

u L ongn  n n 

size; 

n 

BooLeanna  a 

ignore; 

a 

Leakitem  *n  n 

prev; 

□ 

Leakitem  *n  n 

next ; 

n 

char  const  *n 

fi LeName; 

Q 

Longn  n n 

L i neNumbe  r ; 

n 

>; 

void  const  *n 

memory; 

^define  pg pa  Lea k D e a L L o cTy p e Va L i 

ypeJn  nnnnnnnnn\ 
n n pgpa Fa i L I f C ( t y pe ) ==  NULL  {|  ( t y p e ) ->ma g i c !=  kLe a k D e a L L o c Ty p eMa g i c , \ 
n n n a a ( pg pa Fm t P r e f i x , "InvaLid  Le a k D ea L L o c Ty p e magic")) 

#define  pg pa Le a k A L L o cTy p e Va L i d ( t y p e ) n nnnnnnnnn\ 
n n pgpa Fa i L I f ( ( t y pe  ) ==  NULL  |{  ( t y pe ) ->ma g i c !=  k Le a k A L L o cTy p e Ma g i c , n \ 
a u n n n ( pg pa Fm t P r e f i x , "InvaLid  Lea k A L L o cTy pe  magic")) 

Sdefine  pg pa  Lea k 1 1 emVa L i d C i t em ) nn  nnnnnnnnnn\ 
n n pg pa F a i L I f ( ( i t em ) ==  NULL  | | ( i t em ) ->ma g i c !=  kLea k 1 1 emHa g i c , n n \ 
n n n n n CpgpaFmtPrefix,  "InvaLid  Leakinfo  magic")) 


void  PGPExportn  pg p Lea ks Beg i n S e s s i o n C c h a r const  * s e s s i o n N a me ) ; 
void  PGPExportn  pg p Lea ks End S e s s i o n ( vo i d ) ; 


void  PGPExportn 
□ n n n 

naan 
n n n D 

void  PGPExportn 
void  PGPExportn 
void  PGPExportn 


pg p Le a ks Remembe r I t em ( Le a kl t em  *item.  Lea kA L L ocType  *type. 


n 

a 

a 

a 

□ 

void 

const 

♦memory,  unsigned  Long  size. 

a 

a 

a 

n 

n 

char 

const 

*fi LeName, 

a 

a 

a 

n 

a 

Long 

L i neNumbe  r ) ; 

pgpLeaksIgnoreltemCLeakItem  *item); 

pg p Lea k s I g no r eHemo ry C const  void  * memory); 

pg p Lea k s F o r g e t I t em ( Le a k I t em  *item.  Lea kDea L L ocType  *type); 


Leakitem  PGPExport  *n  pg p Le a ks F i n d I t em ( vo i d const  *memory); 


/* 

* CaLL  this  whenever  a Leakitem  moves  in  memory.  <oLdItem>  wi L L not  be 

* referenced  and  need  not  contain  any  vaLid  data.  It  need  onLy  indicate 

* where  the  item  used  to  be  in  memory. 

*/ 

void  PGPExportn  pgpLea ksNot i f y I t emMoved ( Lea kl t em  const  *oLdItem, 
nnnnnnnnnn  Leakitem  *newltem); 
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void  PGPExportn  pgpLeaksSuspend(void); 
void  PGPExportn  pgpLeaksResume(void); 


#eLse  /*  : USE  PGP  LEAKS  C */ 


#d  e f i ne 
#def i ne 
#def i ne 
#d  e f i n e 
#d  e f i n e 
#d  e f i n e 
#d  e f i n e 
#d  e f i n e 


pgpLeaksBeginSessionCname) 
pgpLeaksEndSessionC ) 

pgpLea ks Remembe r I t em ( i t em,  type,  memory,  fiLeName, 

pgpLeaksIgnoreltem(item) 

pgpLeaksIgnoreHemory(memory) 

pg p Lea ks F o r g e 1 1 1 em ( i t em,  type) 

pgpLeaksSuspendC ) 

pgpLeaksResumeC ) 


LineNumber) 


#endif  /*  2 U S E_ PG P_ LEAKS  */ 


Sifdef  __cpLuspLus 
} 

# e n d i f 


#if  PRAGMA_IMPORT_SUPPORTED 
#pragma  import  reset 
#e n d i f 

#endif  /*  PGPLEAKS_H  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi : ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpMacFile.c  --  PgpFiLe  implementation  for  HacBinary  translation 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg pMa c F i I e . c , V 1.9. 2. 3 1 997/06/07  09:50:08  mhw  Exp  $ 

*/ 


Sifdef  HAVE_C0N FIG_H 

# i n c 1 ud  e 

"config.h" 

#endi f 

#i  nc  lude 

<e  r rno . h> 

^include 

<stdio.h> 

#include 

"MacStrings.h" 

#include 

"pgpTypes  . h" 

# i n c 1 ud  e 

"pgpFi le.h" 

#i nc lude 

"pgpHacFile.h" 

#i nc lude 

"pgpHacUti  Is.h 

#include 

"pgpFi leRef.h" 

#include 

"pgpFi leMod.h" 

//include 

"pgpCFB.h" 

#i nc  lude 

"pgpMem. h" 

//include 

"pgpErr.h" 

^include 

"pgpUsuals.h" 

/*  XXX 

Is  this  stuff 

still  necessary?  */ 

//define 

DESKTOPnn 

0X0001 B 

// 

1 

//def  i nenCOLORn  n 

0X000EB 

// 



//define 

INITEDn  n 

0x01 00s 

// 

T 

#def i ne 

CHANGEDnn 

0X0200S 

// 

— 1_ 

//define 

BUSYn  n 

0X0400B 

// 

_i__ 

//define 

BOZOn  n 

0X0800S 

// 

1 — 

//define 

SYSTEMS  n 

0x1000s 

// 

— 1 

#def i ne 

BUNDLES  B 

0x2000s 

// 

— 

//def  i ne 

INVISIBLES 

0x4000b 

// 

_1__ 

//def  i ne 

LOCKEOs  B 

0x8000s 

// 

T 

#def i ne 

NOMODI FYs 

(DESKTOP 

1 

INITED  1 CHANGED  | BUSY) 

Up ragma 

options  align=mac68k 

t y ped  e f 

struct  Ma c B i n a r y H e a d e r _ 

n 

u c h a r B 

f i 1 1 e r ; 

n 

u c h a r B 

oldVersion;BB 

a 

/*  000 

Must  be  zero  for  compatibility  */ 

n 

u c h a r B 

nameC64] ;n 

a 

a 

/*  001 

Pascal  string  */ 

n 

F I n f OB 

info1;n  n 

a 

a 

/*  065 

Original  Finder  info:  */ 

a 

B B 

ana 

a 

a 

/ *n  B 

File  type  (long)  */ 

a 

D a 

a a a 

a 

a 

/ *n  n 

File  creator  (long)  */ 

a 

n n 

a a a 

a 

a 

/ *B  B 

Flags  (word,  low  byte  must  be  zero)  */ 

a 

B B 

a a a 

a 

a 

/ *B  B 

File's  location  (Point)  */ 

a 

B B 

a a a 

a 

a 

/ *B  B 

File's  window  (short)  */ 

a 

u c h a r B 

protectedBi t 

a 

/*  081 

Low  order  bit  */ 

a 

u c h a r B 

zerol ;n  a 

a 

a 

/*  082 

Must  be  zero  for  compatibility  */ 

a 

longs 

dLength;n 

a 

a 

/*  083 

Data  fork  length  (in  bytes)  */ 
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□ 

L 0 ngn 

rLength;n  n 

o 

/* 

087 

Resource  fork  Length  (in  bytes)  */ 

Q 

u 1 ongn 

creation;n  a 

n 

/* 

091 

Creation  date  */ 

n 

u 1 ongn 

modification;n 

n 

/* 

095 

Modification  date  */ 

n 

shortn 

getInfoLength;n 

□ 

/* 

099 

nGet  info  Length  */ 

n 

ucha  rn 

info2;n  n n 

n 

/* 

101 

Finder  flags.  Low  byte  */ 

n 

u c ha  rn 

dummyl ; 

n 

u c h a r n 

dummy  2 C 1 8 3 ; nn 

n 

/* 

1 03 

Not  used  */ 

n 

u c h a r n 

dummy3; 

n 

u c h a r n 

new\/ersion;nn 

n 

/* 

122 

Uploading  program  version  number  */ 

n 

u c ha  rn 

minimumVersion; 

sn 

/* 

1 23 

Minimum  version  number  needed  */ 

n 

u c ha  rn 

c r c 1 ; 

□ 

u c h a r n 

c r c 2 ; 

□ 

ucha  rn 

endFi  LLer[!23;n 

Q 

/* 

To  pad  out  to  128  bytes  */ 

> MacBinaryHeader; 

^pragma  options  aLign=reset 


static  struct  B i n a ryTy p e Re c 
{ 


□ 

□ 

□ 

□ 

> 


OSTypen  n 
OSTypen  n 
i ntnn  n 
uchar  *nn 
smartBinRecsCD 


creator; 
type; 
Length; 
i d e n t ; 

= { 


Q 

{ 

' pZIP' 

f 

'pZIP', 

2, 

"PK"  }, 

Q 

{ 

' LZI V 

' ZIVU ' , 

3, 

"\x1 F\x9D\x90"  }, 

n 

{ 

'MIDI' 

f 

'Midi ', 

4, 

"MThd"  }, 

n 

{ 

' PAK  ' 

'PAK  ', 

2, 

"\x1A\x0A" 

>, 

n 

{ 

' BOOZ  ' 

F 

'ZOO  ', 

4, 

"ZOO  " }, 

n 

{ 

' J VWR ' 

f 

'GIFf, 

4, 

"GIF8"  }, 

a 

{ 

' SIT  ! ' 

f 

' SIT ! ' , 

4, 

"SIT!"  }, 

Q 

{ 

' CPCT ' 

PACT' , 

2, 

"\x01 \x01  " 

□ 

{ 

'arc*' 

' mA  r c ' , 

2, 

"\x1 A\x08" 

>, 

n 

{ 

'arc*' 

' mA  r c ' , 

2, 

"\x1 A\x09" 

D 

{ 

' JVWR ' 

r 

'JPEG', 

10, 

"\xFF\xD8\xFF\xE0\0\x10JFIF 

n 

{ 

0,  0r 

0, 

NULL  } 

>; 

static  OSType  no n Ma c B i na ry Ty p e s C 3 = { 

n 'TEXT',  'pZIP',  'ZIVU',  'Midi',  'PAK  ',  'ZOO  ',  'GIFf, 
>; 


'mArc',  'JPEG', 


#define  kPGPMacReadnn  n 0x01L 
#define  kPGPHacWri ten  □ 0x02L 
//define  kPG  PHa  c B i nMod  en  n 0x04L 

n /*  For  write  mode  only:  whether  we  should  check  */ 
//define  kPGPCheckMacBi  nnn  0x08L 

n /*  Strip  out  volatile  information  for  detached  sig  */ 
//define  kPGPMa  c B i n H a s h On  L yn  0x10L 
n /*  CRC  0 in  MacBin  header  is  okay  */ 

//define  kPGPNoMacBinCRCOkayn0x20L 


/*  This  is  the  private  data  for  macfiles  */ 
typedef  struct  HacFile_ 

{ 


n 

u L ongn 

n 

n 

flags; 

n 

shortn 

□ 

n 

dataRef,  resRef; 

n 

L ongn 

□ 

ta 

dataOffset,  resOffset,  totalSize; 
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Longn  n n 
PgpFi LeErrorn 
PGPErrorn  n 
PGPFileRef  *n 
PGPFi LeTypenn 


f i I e P o s ; 

err; 

error; 

■fi  LeRef; 
f i L e T y p e ; 


MacBinaryHeadernmacBinHeader; 
M a c F i L e ; 


static  PGPError  P r e pa r eTo W r i t e ( Pg p F i L e *fiLe); 
static  PGPError  S e t F i L e I n f o C Pg p F i L e *fiLe); 


n static  void 

macSetErrorC 

n PgpFiLe  *n  n file, 

n PGPErrorn  n code) 

{ 

n MacFiLe  *n  mf  = (HacFile  *)fiLe->priv; 


n mf->err.f  = file; 
n mf ->e r r . f po s = mf->fiLePos; 
n mf->error  = mf->e r r . e r ro r = code; 
n mf ->e r r . s y s e r r n o = 0; 

> 


n stati c OSErr 
macFi LeReadForkf 


□ 

Pgp  F i 1 e *n 

Q 

file. 

n 

shortn  n 

n 

refNum, 

n 

longn  n 

n 

forkOffset, 

n 

longn  n 

□ 

forkEnd, 

u 

long  *n  n 

n 

si zeLeftPtr, 

n 

{ 

void  **nn 

n 

pt  rPt  r ) 

Q 

MacFile  *n 

mf 

= (MacFile  *)file 

□ 

longn  n 

chunkSi ze; 

n 

OSErrn  n 

result  = noErr; 

n 

lOPa  ramnn 

pb; 

n 

if  (mf->filePos 

>=  forkOffset  SS 

n n (chunkSize  = m i n ( * s i z e Le f t P t r , forkEnd  - mf->f i I ePos ) ) > 0) 
n { 

n n pb.ioRefNum  = refNum; 

n n pb.ioBuffer  = ( Pt r ) *pt rPt r ; 

n n pb . i oR eq Co u n t = chunkSize; 

n n pb.ioPosMode  = f s F r omS t a r t ; 

n n p b . i o Po s Of f s e t = mf->fiLePos  - forkOffset; 
n n result  = PBR e a d Sy n c ( C Pa r mB L kP t r ) &pb  ) ; 
n n mf->fiLePos  +=  pb . i o A c t C ou n t ; 

n n *(Ptr  *)ptrPtr  +=  pb . i o A c t C ou n t ; 

n n *sizeLeftPtr  -=  p b . i o A c t C o u n t ; 

n n if  ((mf->fLags  S kPGPMa cBi nHode ) S&  result  ==  eofErr) 


n n 

D Q 
n □ 
n n 
n n 
n n 
n □ 


{ 

H /* 

n * Clear  any  memory  which  was  beyond  the  EOF.  This  is  expected 

n * in  MacBinary  because  each  fork  is  padded  to  a multiple  of 

n * 1 28-bytes . 

n * / 

n chunkSize  -=  pb . i o A c t C o u n t ; 
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n 

Q n 

pgpClearMemory((uchar  *)*ptrPtr,  chunkSize); 

n 

n a 

mf->filePos  +=  chunkSize; 

n 

n a 

*(Ptr  *)ptrPtr  +=  chunkSize; 

n 

n Q 

*sizeLeftPtr  -=  chunkSize; 

a 

a a 

result  = noErr; 

n 

n > 

n 

n else 

if  (result  !=  noErr) 

n 

n n 

macSetError(file,  PGPERR_FILE_OPFAIL); 

n 

> 

Q 

return  result; 

> 

D 

static  si ze_t 

mac 

Fi leRead( 

D 

void  *n 

n n ptr. 

n 

si z e_t  n 

n n size. 

n 

f 

Pgp  F i 1 e 

*n  n file) 

1. 

n 

Ma  c F i 1 e 

*n  mf  = (MacFile  * ) f i 1 e->p r i v ; 

n 

1 ongn 

n sizeLeft  = (long)size; 

n 

1 ongn 

n chunkSize; 

t2 

OS  E r rn 

n result  = noErr; 

n 

n 

pg  p A s s e r t ( mf ->  f i 1 e Po  s >=  0); 

n 

if  ( ! (mf 

->flags  8 kPG PMa c R e a d ) ) 

Q 

macSetErrorCfiLe,  PG P E R R_ F I LE_B A DOP ) ; 
return  0; 


/*  Handle  portion  in  the  MacBinary  header,  if  any  */ 
if  ((chunkSize  = mi n ( s i z e Le f t , mf ->da t a Of f s e t - mf->f i L ePos  ) ) > 


0) 


pg pC opy Memo r y ( ( u c ha r * ) &mf ->ma c B i n H ea d e r + 1 + mf->fiLePos, 

n n n n ptr,  chunkSize); 

mf->fiLePos  +=  chunkSize; 

ptr  = (void  *)((Ptr)ptr  + chunkSize); 

sizeLeft  -=  chunkSize; 


/*  Handle  portion  in  the  data  fork,  if  any  */ 
if  (result  ==  noErr  &&  sizeLeft  > 0) 

n result  = ma c F i I e Rea d F o r k ( f i I e , mf->dataRef,  mf ->da t a 0 f f s e t , 
n n n n n n n mf->resOffset,  SsizeLeft,  &ptr); 


Handle  zeroing  the  first  128  bytes  of  the  resource  fork, 
but  only  if  kPG PHa c B i n H a s hOn I y is  set. 


/* 

* 

* 

*/ 

if  (result  ==  noErr 

n n 88  (mf->flags  8 kPGPMa cBi nHode ) 88  (mf->flags  8 k PG PMa cB i n H a s h On  I y ) 
n 88  (chunkSize  = m i n ( s i z e Le f t , 

n n n n n n m i n ( mf -> r e s 0 f f s e t + 128,  mf -> t o t a I S i z e ) 
nnnnnnnnn-  mf->f i I ePos ) ) > 0) 


pgpClearMemory(ptr,  chunkSize); 
mf->filePos  +=  chunkSize; 
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n n ptr  = (void  *)((Ptr)ptr  + chunkSize); 

n n sizeLeft  -=  chunkSize; 

n > 

n 

n /*  Handle  portion  in  the  resource  fork,  if  any  */ 

n if  (result  ==  noErr  &S  sizeLeft  > 0 &&  (mf->flags  8 k PG PMa c B i nHo d e ) ) 

n n result  = ma c F i I e R e a d F o r k ( f i I e , mf->resRef,  mf -> r e s Of f s e t , 
nnnnnnnn  mf -> t o t a I S i z e , SsizeLeft,  Sptr); 

n 

n return  ( s i z e_ t ) ( s i z e - sizeLeft); 

> 


n static  OSErr 
macFi leWriteFork( 


□ 

Pg  p F i 1 e 

*n 

n 

file. 

tt 

s h 0 r t a 

n 

n 

refNum, 

n 

1 onga 

a 

□ 

forkOffset, 

n 

longa 

u 

n 

forkEnd, a /* 

Ignored 

unless 

kPGPMacBi nMode 

flag  set 

*/ 

n 

1 onga 

n 

n 

forkLen, a /* 

Ignored 

unless 

kPGPHacBi nMode 

flag  set 

*/ 

n 

long  *a 

n 

n 

sizeLeftPtr, 

n 

j" 

void  const 

* * n 

pt  rPt  r ) 

V 

a 

MacFi  1 e 

*n 

mf 

= (MacFile  *)fi 

1 e->p  r i v; 

n longn  a chunkSize; 

n OSErrn  o result  = noErr; 

n lOParamnn  pb; 

n 

n chunkSize  = *sizeLeftPtr; 
a if  (mf->flags  8 kPG PMa c B i nHod e ) 

a n chunkSize  = mi  n ( c h u n kS  i z e , forkEnd  - mf->f i I ePos  ) ; 

n 

n if  (mf->filePos  >=  forkOffset  88  chunkSize  > 0) 
a { 

a a pb.ioRefNum  = refNum; 

a a pb.ioBuffer  = ( P t r ) *p t r P t r ; 

a n pb.ioPosHode  = fsFromStart; 

a a pb . i o Po s 0 f f s e t = mf->filePos  - forkOffset; 

a a pb.ioReqCount  = chunkSize; 

a a if  (mf->flags  8 k PG PMa c B i n Mode ) 

a a n pb.ioReqCount  = m i n ( pb . i o R eq C ou n t , forkLen  - pb . i o Po s 0 f f s e t ) ; 

a a result  = PB W r i t e Sy n c ( ( Pa r mB I k P t r ) 8pb  ) ; 
n a mf->filePos  +=  chunkSize; 

a a *(Ptr  *)ptrPtr  +=  chunkSize; 

a n *sizeLeftPtr  -=  chunkSize; 

a n if  (result  !=  noErr) 

a a n ma c S e t E r r o r ( f i I e , PG P E R R_ F I LE_0 P F A I L ) ; 

a } 

a if  ( mf -> t o t a I S i z e < mf->filePos) 
a a mf -> t o t a I S i z e = mf->filePos; 

a return  result; 

} 


a static  size_t 
macFi leWrite( 


□ 

void  const 

*n 

ptr. 

□ 

si z e_t  a 

Q 

n 

size. 

n 

Pgp  F i 1 e 

*n 

n 

file) 
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n 

MacFi  1 e 

*n 

mf  = (MacFile  *)file->priv; 

□ 

longn 

n 

sizeLeft  = (long)size; 

n 

longn 

n 

chunkSize; 

n 

OSErrn 

n 

result  = noErr; 

n 


n pg  p A s s e r t ( tnf ->f  i I e Po  s >=  0); 

□ 

n if  ( ! ( tnf ->  f L a g s S kPGPMa  cW  r i t e ) ) 

n { 

n n macSetErrorCf i le,  PG P E R R_ F I LE_B A DO P ) ; 
n a return  0; 

n > 

D 

n /*  Handle  portion  in  the  MacBinary  header,  if  any  */ 

n if  (CchunkSize  = m i n ( s i z e Le  f t , mf ->da  t a 0 f f s e t - nif->f  i L ePos  ) ) > 0) 

n { 

n n pg p As s e r t ( mf -> f i L e Po s + chunkSize  <=  128); 

n n pg pC opy Memo r y C p t r , (uchar  * ) 8mf ->ma c B i n H e a d e r + 1 + mf->fiLePos, 

n n n n n n chunkSize); 
n n mf->fiLePos  +=  chunkSize; 

n n ptr  = (void  *)((Ptr)ptr  + chunkSize); 

n n sizeLeft  -=  chunkSize; 

n n if  ( mf -> t o t a L S i z e < mf->fiLePos) 

n n n mf -> t o t a L S i z e = mf->fiLePos; 

n } 


n 

n /*  Handle  portion  in  the  data  fork,  if  any  */ 
a if  (result  ==  noErr  &&  sizeLeft  > 0) 
n { 

n n P r e pa r eToW r i t e ( f i I e ) ; 

n n result  = ma c F i I e W r i t e Fo r k ( f i I e , mf->dataRef,  mf ->d a t a 0 f f s e t , 
nnnnnnnn  mf -> r e sO f f s e t , mf ->ma cB i n H ea d e r . d Leng t h , 

n n n n b b b b &sizeLeft,&ptr); 
n } 

B 

n /*  Handle  portion  in  the  resource  fork,  if  any  */ 

n if  (result  ==  noErr  &&  sizeLeft  > 0 &&  (mf->flags  & kPGPMa cBi nHode ) ) 

B B result  = ma c F i I eW r i t e Fo r k ( f i I e,  mf->resRef,  mf -> r e s 0 f f s e t , 

BBBBBBBB  m f “ > t o 1 3 I S i z c , m f - > m 3 c B i n H e 3 d e r . r L e n g t h , 

BBBBBBBB  SsizeLeft,  &ptr); 

B 

a return  ( s i z e_ t ) ( s i z e - sizeLeft); 
n return  0; 

> 


n static  int 
macFi  leFlush( 
n PgpFile  *n  n file) 

n MacFile  *n  mf  = (MacFile  * ) f i I e->p r i v; 

n lOParamnB  pb; 

B 

n pb.ioRefNum  = mf->dataRef; 
n PBFlushFi  leSync((ParmBlkPtr)&pb); 
n pb.ioRefNum  = mf->resRef; 
n PBFlushFi  leSync((ParmBlkPtr)&pb); 
n return  PGPERR_0K; 

> 


CCCHK:cf46600235eccf39fd9990df22ccff0fe771e462209aab12e211d30aa25891089:] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


513 


pgpMacFile.c 


n static  int 

macFi LeCLoseC 

n PgpFiLe  *n  n file) 

{ 

o MacFiLe  *n  mf  = (MacFiLe  * ) f i L e->p r i v; 

n P r e pa r e To W r i t e ( f i L e ) ; 

n if  ( m f ->d a t a Re f !=  0) 

n n FSCLose(nif->dataRef); 

n if  (mf->resRef  !=  0) 

n n FSCLose(mf->resRef); 

n S e t F i L e I n f o ( f i L e ) ; 

n pg p F r e e F i I e R e f ( mf -> f i L e R e f ) ; 

n pg p C I e a rM e mo ry ( ( VO i d *)mf,  s i z eo f ( *mf  ) ) ; 

n pgpFree(mf); 

n pgpFree(fiLe); 

n return  PGPERR_0K; 

} 


n static  Long 
macFiLeTelLC 


□ 

PgpFiLe  *n 

n 

f i L e ) 

n 

MacFiLe  *n 

mf 

= (MacFi 

a 

return  mf- 

>fi LePos; 

} 

n 

stati c int 

macFi LeSeekC 

n 

PgpFiLe  *n 

n 

f i L e , 

□ 

L ongn  h 

□ 

offset. 

D 

i ntnn  n 

a 

whence) 

Q 

MacFiLe  *n 

mf 

= (MacFi 

*)fi Le->priv; 


*)fi Le->priv; 


□ 

switch 

(whence) 

n 

n 

D 

case  SEEK_SET: 

a 

n 

□ 

/*  offset 

is  correct,  as  is  */ 

n 

Q 

n 

break; 

a 

n 

case  SEEK_CUR: 

n 

B 

B 

offset  += 

mf->f i LePos; 

a 

B 

B 

break; 

a 

B 

case  SEEK_END: 

a 

B 

B 

offset  += 

mf->totaLSize; 

a 

n 

B 

break; 

B 

> 

B 

i f 

(offset  < 0 II 

offset  > mf->tota L S i ze ) 

B 

B 

n 

macSetError(fi 

Le,  PGPERR_FILE_OPFAIL) 

B 

n 

return  PGPERR_ 

FILE_0PFAIL; 

B 

> 

B 

mf 

->f  i 

LePos  = offset; 

B 

return 

PGPERR_0K; 
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> 

n static  int 
macFi  LeEofC 

n PgpFiLe  const  *nfile) 

{ 

a MacFiLe  *n  tnf  = (MacFiLe  * ) f i L e->p  r i v; 
n / * 

n * XXX  This  wiLL  always  return  TRUE  when  writing  files, 
n * Is  that  semantically  correct? 

n * / 

n return  mf->filePos  >=  mf -> t o t a I S i z e ; 

> 

n static  long 
macFi leSizeAdviseC 
n PgpFile  const  *nfile) 

{ 

n MacFile  *n  mf  = (MacFile  * ) f i I e->p r i v ; 

n return  mf -> t o t a I S i z e ; 

> 

n static  PgpFileError  const  * 
macFi leErrorC 
n PgpFile  const  *nfile) 

{ 


n 

MacFile  *n 

mf 

= (MacFile  * ) f i 1 e->p r i v ; 

n 

if  (mf->error  ! 

= PGPERR_0K) 

n 

n return 

&mf- 

> e r r ; 

□ 

else 

n 

n return 

NULL 

f 

> 

Q 

static  void 

macFi leClearErrorC 

n 

PgpFile  *n 

a 

file) 

i 

n 

MacFile  *n 

mf 

= (MacFile  * ) f i 1 e->p r i v ; 

n 

mf->e  r ror  = 

PGPERR_0K; 

> 

n static  int 
macFi leWri te2ReacK 
n PgpFile  *n  n file) 

{ 

n ma c S e t E r r o r ( f i I e , PGPERR_ F I LE_BAD0P) ; 

n return  PGPERR_FILE_BADOP; 

> 

n static  Pg pC f bC o n t ex t * 
macFi  leCfbC 

n PgpFile  const  *nfile) 

{ 

n ( VO i d ) f i I e ; n / * Quiet  compiler  warning  */ 
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n /*  XXX:  I'm  not  really  sure  what  should  be  done  here  */ 
n return  NULL; 

} 

#ifndef  __powerc 

static  ushort  asm  C a I c C R C 1 6 C on t i n ( u s h o r t start,  void  *data,  long  len) 


n 

f r a 1 1 0 c 

+ 

Q 

move. In 

D3, 

-CSP) 

n 

move . wn 

#0x1021,  D3 

a 

c 1 r . In 

D0 

u 

move . wn 

start,  D0 

n 

move  . 1 n 

data 

, A0 

n 

move.  In 

len. 

D2 

n 

b rann 

Loopi 

Loop0  : 

□ 

move . bn 

(A0)+,  D1 

n 

L s L . wn 

#8, 

D1 

n 

eo  r . wn 

D1, 

D0 

n 

moveqn 

nr. 

D1 

ShiftLoop0: 

D 

1 s 1 . wn 

#1, 

D0 

n 

b c c nn 

Shi ftLoopI 

n 

e 0 r . wn 

D3, 

D0 

ShiftLoopI  : 

n 

d b r a n 

D1, 

Shi ftLoop0 

Loopi  : 

a 

dbran 

D2, 

Loop0 

a 

move.  In 

(SP)+,  D3 

n 

f r f r e e 

#if  GENERATINGCFM  ||  definedC CFM68K ) 

a rtdnn  #12 
# e I s e 

rt  s 

#end  i f 
} 

static  uchar  asm  Ca I c C he c ks umSCon t i n ( u c ha r start,  void  *data,  long  len) 
{ 


□ 

FRALL0Cn+ 

n 

CLR . Ln 

D0 

n 

HOVE . Bn 

start,  D0 

B 

MOVE . Ln 

data,  A0 

n 

MOVE . Ln 

len,  D 1 

a 

BRAnn 

Loopi 

Loop0 : 

□ 

ADD . Bn 

(A0)+,  D0 

Loopi  : 

n 

DBRAn 

D1 , Loop0 

Q 

FR  FREE 

#if  GENERATINGCFM  ||  definedC CFM68K ) 

n rtdnn  #12 
# e I s e 

r t s 

#endi f 
} 
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static  uLong  asm  C a L c C R C 32 ( vo i d *data.  Long  Len) 


i 

n 

fra  L Locn  + 

n 

move  . L n 

data,  A0 

n 

c L r . Ln 

D0 

n 

move . L n 

Len,  D 1 

□ 

L s r . L n 

U2,  D1 

n 

b rann 

Loopi 

Loop0 : 

n 

ro  L . Ln 

#1,  D0 

D 

add  . Ln 

(A0)+,  D0 

Loopi  : 

n 

dbran 

D1 , Loop0 

Q 

moveqn 

#3,  D2 

n 

move  . L n 

Len,  D 1 

n 

and. L n 

D2,  D1 

n 

L s L . wn 

D2,  D1 

n 

c L r . L n 

D2 

n 

not  . Ln 

D2 

n 

L s r . L n 

D1  , D2 

n 

not  . Ln 

D2 

n 

and. L n 

(A0),  D2 

n 

r 0 L . L n 

#1,  D0 

□ 

add. L n 

D2,  D0 

n 

f r f r e e 

ffii  GENERATINGC FM  ||  definedC CFM68K ) 

n rtdnn  U8 
#e  L s e 

r t s 

#e  nd i f 

> 

#e  L s e 

static  ushort  CaLcCRC16Contin(ushort  crc,  void  *data.  Long  Len) 
{ 

n char  *dp=(char  *)data; 
n short  i; 
n 

n whiLeCLen — ) 

n { 


n 

D 

c r c 

A — 

( u s h 0 r t ) ( *dp++ ) <<  8; 

Q 

n 

for 

(i 

= 0; 

A 

00 

+ 

+ 

n 

n 

n 

D 

□ 

i f 

( c r c 

& 0x8000) 

n 

□ 

n 

n 

c r c 

= (crc  « 1)  ^ 0x1021; 

Q 

c 

a 

e L 

se 

n 

n 

n 

n 

c r c 

A 

A 

M 

Q 

n 

> 

n > 

a return(crc); 

> 

static  uchar  Ca L c C he c ksumSCon t i n ( u cha r start,  void  *data.  Long  Len) 

{ 

n char  *dp=(char  *)data; 

Q 

n whiLeLLen — ) 
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n a sta rt+=*dp++; 

n return  start; 

} 

static  uLong  C a I c C R C 32 ( vo i d *data,  register  Long  Len) 

{ 

n register  ulong  *dp=(uLong  *)data; 

n register  uLong  crc=0,  x; 

n register  long  Len2; 

n u Long  highSet; 

□ 

a Len2=Len; 

n Len>>=2; 

n whiLeC  — Len>  = 0) 

n { 

n n highSet=(crc  & 0x80000000); 

n n crc<<=1; 

n n if(highSet) 

n n n crc|=1; 

a n crc+=*dp++; 

n > 

o x = 3; 

n Len2  &=x; 

n L en2<<  = x ; 

n X = 0 ; 

n X = ” X ; 

n x>>=Len2; 

n X = ~ X ; 

n X 8=  *dp; 

n highSet=(crc  8 0x80000000); 

n crc<<  = 1 ; 

n if(highSet) 

a n crc|=1; 

n c rc  + = x ; 

n return  crc; 

> 

#endi  f 

static  uchar  Ca LcChecksum8( voi d *data.  Long  Len) 

{ 

n return  CaLcChecksum8Contin(0,  data,  Len); 

} 

static  ushort  C a L c C R C 1 6 ( vo i d *data.  Long  Len) 

{ 

n return  C a L c C R C 1 6 C o n t i n ( 0 , data,  Len); 

} 

/* 

* This  routine  is  called  each  time  before  writing  to  an  actual  fork.  If 

* the  kPGPCheckMacBi n flag  is  set,  it  determines  whether  or  not  it's  a 

* valid  MacBinary  header.  If  so,  it  creates  the  file  and  opens  both  the 

* data  and  resource  forks.  Otherwise  it  creates  and  opens  the  data  fork, 

* and  writes  false  header  information  to  the  data  fork,  using  whatever 

* hints  it  can  find  to  create  the  file  with  the  correct  type  and  creator. 
*/ 

n static  PGPError 

CCCHK: b7008dd61 fffddddi  f8ea96f379239ba2efdd33ef666f0cffda1 eec866ba1 e871 D3 


518 


Pretty  GcxdcI  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpMacFile.c 


PrepareToWriteC 
n PgpFile  *n  n fiLe) 

{ 

n HacFiLe  *n  n mf  = (MacFiLe  *)fiLe->priv; 
n FSSpecn  n n spec; 

HParamBlockRecn  hio; 

PGPErrorn  n result  = PGPERR_0K; 

OSErrn  n n macResuLt; 


n 

n 

n 

n 

n 

□ 

n 

□ 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

D 

n 

n 

n 

n 

n 

n 

n 

Q 

n 

Q 

a 

n 

n 

n 

n 

n 

n 

a 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

a 

D 

n 


if  C ! C mf -> f L a g s & kPG PMa c W r i t e ) ) 
n return  PGPERR_0K; 


if  Cmf->fLags  & kPG P C h e c kMa c B i n ) 

if  ((result  = pg p F S S pe c F r om F i I e Ref ( mf -> f i I e R e f , &spec))  !=  PGPERR_0K) 
n goto  error; 

mf->flags  &=  " ( kPG PMa c B i nMode  | kPG P C h e c kMa c B i n ) ; 
if  (mf->tota  ISi ze  >=  126  &&  mf ->ma c B i n H ea de r . o I d V e r s i o n ==  0 && 
n n n mf ->ma cBi nHeade r . mi n i mumVe r s i on  <=  129  && 

n n ( mf ->ma cBi n H eade r . i nf o1 . f d F I ag s & 0xFF)  ==  0 && 

n n mf ->ma c B i n H e a d e r . z e r o1  ==  0 && 

n n mf “>macBi nHeader . nameC0D  < 64) 


ushortn  n crc; 

pg p A s s e r t ( s i z eo f ( c r c ) ==  2); 

pgpCopyMemory(&mf->macBinHeader.crc1,  &crc,  sizeof(crc)); 
if  (crc  ==  C a I c C R C 1 6 ( ( u c h a r * ) &mf ->ma cB i n H ea d e r + 1,  124) 
n n II  ((mf->flags  & kPG PNoMa c B i n C R C 0 kay ) &&  crc  ==  0)) 
n mf->flags  |=  kPGPMacBinMode; 


if  (mf->dataRef  !=  0) 
n return  PGPERR^OK; 

if  ((result  = pg p F S S pe c F r om F i I e Re f ( mf ->f i I e Re f , Sspec))  !=  PGPERR_0K) 
n goto  error; 


i f 

n 

Q 

n 

n 

n 

n 

Q 

n 

n 

n 

n 

D 

n 

n 

n 

n 

n 


(mf->flags  & kPGPMacBinMode) 

/*  XXX  Reconsider  using  a different  file  type  for  this  */ 
if  ((result  = pgpCreateFile(mf->fileRef,  kPGPFileTypeDecryptedBin)) 
n n n !=  PGPERR_0K) 
n goto  error; 

h i o . f i I e Pa r a m . i oNa me P t r = spec. name; 
h i o . f i I e Pa r a m . i oVR e f Num  = spec . vRef Num; 
h i o . f i I e Pa r a m . i o D i r I D = spec.parlD; 
h i o . i o Pa r a m . i oPe r ms s n = fsWrPerm; 
if  ((macResult  = PBH Open D F Syn c ( & h i o ) ) !=  noErr) 

n goto  macError; 

mf->dataRef  = hio.ioParam.ioRefNum; 

h i o . f i I e Pa r a m . i oNa me P t r = spec. name; 
h i o . f i I e Pa r a m . i oVR e f N urn  = spec . vRef Num; 
h i o . f i I e Pa r a m . i o D i r I D = spec.parlD; 
h i o . i oPa r a m . i o Pe r ms s n = fsWrPerm; 
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n 

n 

□ 

n 

n 

n 

n 

Q 

n 

n 

□ 

n 

□ 

Q 

n 

a 

n 

n 

n 

n 

n 

n 

u 

u 

n 

Q 

n 

u 

n 

□ 

n 

n 

a 

o 

u 

u 

n 

n 

Q 

n 

n 

n 

n 

Q 


n if  ((macResuLt  = PBH 0 pe n R F Sy n c ( &h i o ) ) !=  noErr) 

n n goto  macError; 

n mf->resRef  = hio.ioParam.ioRefNum; 
n 

n mf ->da t a 0 f f s e t = 128; 
n mf -> r e s 0 f f s e t = mf ->da t a 0 f f s e t + 


n 

n n 

n 

tt 

( mf ->ma c B i n Hea de r . d Leng t h + 

127) 

& 

"127L; 

tt 

mf->totalSize  = 

mf->resOffset  + 

n 

tt  n 

n 

tt 

( mf ->ma  c B i n H e a d e r . r Le ng  t h + 

127) 

& 

■ 1 2 7 L ; 

> 

else 


n 

BooLeannn 

created  = FALSE; 

Q 

i n t nn 

n 

i ; 

□ 

n 

for 

(i 

ii 

s ■ 

s ma r t B i n Re c s C i ] . i d e n t !=  NULL;  i++) 

n 

n 

i f 

( pg pHemo ry Eq u a L ( ( u c h a r * ) Smf ->ma c B i n H e a d e r + 1, 

n 

tt 

□ 

n 

n n n sma r t B i n R e c s C i D . i d e n t , 

Q 

tt 

Q 

n 

n n n sma  r t B i n R e c s C i 3 . L e ng  t h ) ) 

tt 

n 

{ 

tt 

tt 

tt 

i f 

((macResult  = H C rea t e ( s pe c . vRef Num,  spec.parlD 

a 

tt 

tt 

n 

n n spec. name,  sma r t B i n R e c s C i 3 . c r e a t o r , 

tt 

a 

a 

n 

n n s ma r t B i n R e c s C i 3 . t y p e ) ) !=  noErr) 

tt 

tt 

tt 

n 

goto  macError; 

tt 

□ 

tt 

created  = TRUE; 

tt 

n 

a 

break; 

tt 

□ 

> 

n i f ( ! created) 

n n if  ((result  = pg p C r ea t e F i I e ( mf -> f i I e R e f , mf ->f i I eTy p e ) ) 
n n n n n H !=  PGPERR_0K) 

n n n gotoerror; 

n 

n hio.fileParam.ioNamePtr  = spec. name; 
n h i 0 . f i I ePa r am . i o VRef Num  = spec . vRef Num; 
n h i o . f i I ePa r am . i o D i r I D = spec.parlD; 
n h i 0 . i 0 Pa r am . i o Pe r ms s n = fsWrPerm; 
n if  ((macResult  = PBH 0 pe n D F Sy n c ( & h i o ) ) !=  noErr) 

n n goto  macError; 

n mf->dataRef  = hio.ioParam.ioRefNum; 
n 

n mf->dataOf f set  = mf -> r e s 0 f f s e t = 0; 

Q 

n i 

n n lOParamnn  i o; 


tt 

tt 

tt 

io.ioRefNum  = 

mf->dataRef  ; 

tt 

a 

tt 

i 0 . i oBuf  f e r = 

(Ptr)&mf->macBinHeader  + 1; 

tt 

tt 

tt 

i 0 . i oPosHode  = 

fsFromStart; 

tt 

a 

a 

io. ioPosOffset 

= 0; 

tt 

tt 

tt 

io.ioReqCount 

= mf->totalSize; 

tt 

□ 

tt 

pgpAssert(mf->totaLSi2e  <=  128); 

tt 

tt 

tt 

if  ((macResult 

= PBW r i t e Sy n c ( ( Pa rmB 1 kPt r ) & i o ) ) 

tt 

a 

a 

n goto  macError; 

tt 

a 

> 

tt 

tt 

> 

tt 

return 

PGPERR_0K; 

macError: 


noErr) 
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n result  = pg p E r r o r F r omHa c E r r o r ( ma c Re s u L t , PG P E R R_ F I LE_0 P F A I L)  ; 
error: 

n ma c Se t E r ro r ( f i L e , result); 

B return  result; 

} 


/* 

* This  routine  is  called  after  closing  a HacBinary  file  for  writing. 

* sets  the  finder  information  including  type  and  creator. 

*/ 


B static  PGPError 
SetFi leInfoC 

B PgpFile  *b  b file) 
{ 


n 

B 

B 

B 

B 

B 


MacFile  *n  b 
FSSpecB  B B 
H F i I ePa  ramB  b 


mf  = (MacFile  *)file->priv; 

spec; 

pb; 


if  (!(mf->flags  & kPG PMa c W r i t e ) | | !(mf->flags  & kPGPMa cBi nMode  ) ) 

B return  PGPERR_0K; 


n 

B if  ( pg p F S S pe c F r om F i I e Re f ( mf -> f i I e Re f , &spec)  !=  PGPERR_OK) 
B B goto  error; 

B 

B pb.ioNamePtr  = spec. name; 

B pb.ioVRefNum  = spec . vRef Num; 

B pb.ioDirlD  = spec.parlD; 

B pb.ioFlCrDat  = mf ->ma c B i n H ea de r . c r ea t i on ; 

B pb.ioFlHdDat  = mf ->ma c B i n H ea de r . mod i f i c a t i on ; 

B pg p C opy Memo r y ( 8mf ->ma c B i n H e a d e r . i n f o 1 , &p b . i o F I F nd r I n f o , 

B B B B n s i z e o f ( p b . i o F I F nd  r I n f o ) ) ; 

B pb . i o F I F nd r I n f o . f d F I a g s 8=  0xFF00; 

B pb.ioFlFndrlnfo.fdFlags  |=  mf->macBinHeader.info2; 

B pb.ioFlFndrlnfo.fdFlags  8=  "NOMODIFY; 

B pb.ioFlFndrlnfo.fdLocation.h  = 0; 

B pb  . i o F I F nd  r I n f o . f d Lo ca  t i on  . V = 0; 

B pb  . i o F I F nd r I nf o . f d F I d r = 0; 

B if  ( PBHSe t F I nf oSyn c ( ( HPa rmB I kPt r ) 8pb ) !=  noErr) 

B B goto  error; 


B 

B return  PGPERR_0K; 

B 

error: 

B /*  XXX  Improve  error  reporting  */ 

B macSetErrorCf i le,  PG PE R R_ F I LE_0 P F A I L) ; 
B return  PG P E R R_ F I LE_0 P F A I L; 

> 


It 


/* 

* It  should  be  noted  that  writing  to  MacBinary  files  won't  work  if  seeking 

* is  used  in  certain  ways.  The  MacBinary  header  only  interpreted  the  first 

* time  data  is  written  past  the  first  128  bytes,  and  then  the  fork  lengths 

* and  offsets  are  fixed  and  immutable.  This  could  be  fixed  at  some  point, 

* but  there's  no  need  for  it  now. 

* 

* The  filename  used  to  create  the  file  is  always  the  <fileRef>  passed  in, 

* not  the  name  in  the  MacBinary  header. 

*/ 
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n Pg  p F i L e * 

pgpFi  LeRefMacWn'teOpenC 
n PGPFiLeRef  const  *n  fiLeRef, 
n PG P F i I eTy penn  n fiLeType, 

n PG P F i L eO pe n F L a g sn  flags. 


n 

r 

PGPE  r ro  r *n 

B 

n errorCode) 

X. 

n 

PgpFile  *n 

B 

file  = NULL; 

□ 

MacFile  *n 

B 

mf  = NULL; 

a 

FSSpecn  n 

B 

spec; 

B 

PGPErrorn 

B 

result  = PGPERR 

n if  ((file  = (PgpFile  * ) pg p A L L o c ( s i z e o f C * f i L e ) ) ) ==  NULL) 
n { 

n n result  = PG P E R R_N OM E M ; 

n n goto  error; 

n } 

n if  (Cmf  = (MacFile  * ) pg p A I I o c ( s i z eo f ( *mf ) ) ) ==  NULL) 
n { 

n n result  = PGPERR_NOMEM; 

n n goto  error; 

n } 


n p g p C I e a r H emo r y ( mf , s i z e o f ( *mf ) ) ; 

n pg pC  I ea rMemo ry ( f i I e,  s i z eo f ( * f i I e ) ) ; 

□ 

n mf->f  i leRef  = pg  p C o py  F i I e R e f ( f i I e Re  f ) ; 

n if  ((result  = pg p F S S pe c F r om F i I e R e f ( mf ->f i I e R e f , Sspec))  !=  PGPERR_OK) 
n n goto  error; 
n mf->fileType  = fileType; 

Q 

n /*  Try  to  delete  the  file  first,  in  case  it  already  exists  */ 

n /*  XXX  Maybe  we  should  check  the  error,  and/or  truncate  the  file  instead  */ 

n H De  I e t e ( spe c . vRef Num,  spec.parlD,  spec. name); 

D 

n pgpAssert(sizeof(mf->macBinHeader)  >=  129); 

n pgpAs se r t ( ( f I a g s & k PG P F i I eOp e n Lo c a I E n c ode  Ha s h 0 n I y ) ==  0); 

n 

n mf->flags  = kPG PHa c W r i t e ; 

D 

n if  (flags  S ( kPG P F i I eOpenHaybe Lo ca  I En code  | kPG P F i I eOpe n F o r c e Lo ca I E n c od e ) ) 
n { 

a n mf->flags  |=  k PG P C h e c kMa c B i n ; 
n n if  (flags  & kPG P F i I eO pe n N o Ma c B i n C R C 0 ka y ) 
a a a mf->flags  |=  k PG PNoMa c B i n C R C 0 ka y ; 

n n mf->dataOf f set  = mf -> r e s Of f s e t = 128; 

n } 

n else 

n n mf->dataOffset  = mf->resOffset  = 0; 

□ 

n mf->dataRef  = mf->resRef  = 0; 

n mf->totalSize  = 0; 

a mf->filePos  = 0; 

Q 

n file->priv  = mf; 

a file->read  = macFileRead; 

n file->urite  = ma c F i I e W r i t e ; 
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fiLe->fLush  = macFileFLush; 
fiLe->cLose  = ma c F i L e C L o s e ; 
fiLe->teLl  = ma c F i L eTe L L ; 
fiLe->seek  = ma c F i L e See k; 
fiLe->eof  = macFiLeEof; 
f i L e->s 1 ze Adv i se  = ma c F i L e S i z e Ad v i s e ; 
fiLe->error  = ma c F i L e E r r o r ; 
f i L e-> c I e a r E r r o r = ma c F i L e C L e a r E r ro r ; 
f i Le->wri teZread  = ma c F i I e W r i t e 2 R ea d ; 
fiLe->cfb  = macFiLeCfb; 

if  (!{mf->fLags  & kPG PC h e c kHa c B i n ) ) 
n if  (CresuLt  = PrepareToWriteCfile)) 
n n goto  error; 


error: 
n 


return  file; 

NULL) 


if  ( mf  ! : 

{ 

if  (mf->fiLeRef  !=  NULL) 
n pgpFreeFiLeRef(mf->fileRef); 
pgpFreeCmf); 


a 

n 

□ 

} 

i f 

D 


(file  ! = NULL) 
pgpFreeCfi Le); 
if  CerrorCode  !=  NULL) 
{ 


!=  PGPERR_0K) 


n a pgpAs se r t Add rVa L i d ( e r ro r Code,  PGPError); 

n n *errorCode  = result; 
n } 

n return  NULL; 

} 


n 

PgpFile  * 

pgpFi leRefNacReadOpen( 

n 

PGPFi  leRef 

const  *n 

fi leRef, 

n 

PGPFi  leOpenFlag 

sn 

flags. 

Q 

r 

PGPError  *n 

n 

n 

errorCode) 

a 

PgpFile  *n 

B 

file 

= NULL; 

B 

HacFile  *n 

B 

mf  = 

NULL; 

B 

FSSpecn  n 

B 

spec 

r 

B 

H F i 1 ePa  ramn 

B 

pb; 

B 

HParamBlockRecn 

i o; 

B 

ushortn  n 

B 

c r c ; 

B 

PGPErrorn 

B 

result  = PGPERR 

D 

n if  ((file  = (PgpFile  * ) pg p A L L o c ( s i z eo f ( * f i L e ) ) ) ==  NULL) 
n { 

n n result  = PG P E R R_NOH EH ; 
n n goto  error; 
n } 


□ 

o 

n 

n 


n 


if  ((mf  = (HacFile  * ) pg p A I I o c ( s i z eo f ( *mf ) ) ) 
{ 

n result  = PG P E R R_NOH E H ; 
a goto  error; 

} 


NULL) 


CCCHK: c2d21 3e04eee45  529c822ea44e4f 64c663303851  3f ebc880b2cf f 71  del 5e55f 053: 


Pretty  Good  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


523 


pgpMacFile.c 


n pg p C L e a r M emo ry ( mf , s i zeof ( *mf  ) ) ; 
n pgpCLearHemoryCfiLe,  sizeof(*fiLe)); 


□ 

n 

n 

n 

n 

n 

a 

B 

B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


mf -> f i L e R e f = pg p C o py F i L e R e f ( f i L e R e f ) ; 

if  ((result  = p g p F S S p e c F r om F i L e R e f ( m f -> f i L e R e f , Sspec))  !=  PGPERR_0K) 
n goto  error; 

mf->fileType  = kPG P F i L e Ty p e No n e ; 

pb.ioNamePtr  = spec. name; 
p b . i oV Re f N um  = s pe c . v Re f N u m; 
pb.ioDirlD  = spec.parlD; 
p b . i o F D i r I n d e X = 0; 

if  ( PBH G e t F I n f o S y n c ( ( H Pa r mB L kP t r ) Spb  ) !=  noErr) 

{ 

n result  = pg p E r r o r F r omMa c E r r o r ( p b . i o Re s u I t , PG P E R R_ N0_ F I L E ) ; 
n goto  error; 

> 

pgpAssert(sizeof(mf->macBinHeader)  >=  129); 

pgpClearHemory(&mf->macBinHeader,  sizeof(mf->macBinHeader)); 

CopyPString(spec.name,  mf->macBinHeader.name); 

mf ->ma c B i n H e a d e r . i n f o2  = pb . i o F I F nd r I n f o . f d F I ag s S 0X00FF; 

p b . i o F I F n d r I n f o . f d F I a g s &=  0xFF00; 

pb . i o F I Fnd r I nf o . f dLoca t i on . h = 0; 

pb . i o F I F n d r I n f o . f d Lo c a t i o n . V = 0; 

pb.ioFlFndrlnfo.fdFldr  = 0; 

m f ->ma c B i n H e a d e r . i n f o 1 = pb . i o F I Fnd r I n f o; 

mf->macBi nHeader . dLength  = pb.ioFlLgLen; 

mf ->ma c B i n H e a d e r . r Len g t h = pb . i o F I R Lg Le n ; 

mf ->ma cB i n Hea de r . c r ea t i on  = pb . i o F I C r Da t ; 

mf ->ma cB i n H e a d e r . mod i f i ca t i on  = p b . i o F I Md D a t ; 

mf->macBi nHeader . neuVersi on  = 129; 

mf->macBinHeader.minimumVersion  = 129; 

crc  = CalcCRC16((uchar  *)8mf->macBinHeader  + 1,  124); 
pgpAssert(sizeof(crc)  ==  2); 

pg p C opy M emo r y ( & c r c , &mf ->ma c B i n H e a d e r . c r c 1 , s i z e o f ( c r c ) ) ; 
mf->flags  = kPGPMacRead; 

if  (flags  & kPGP F i I eOpenHay be Loca I En code  ) 

{ 

B i ntnB  i ; 

a mf->flags  |=  kPGPMa cBi nHode; 

n for  (i  = 0;  nonHacBinaryTypesCiD  !=  0;  i++) 
n B if  ( p b . i o F I F nd r I n f o . f dTy p e ==  no nHa c B i na r y Ty pe s C i D ) 

B B { 

n B B mf->flags  &=  ” kPG PMa c B i n Mod e ; 

B B B break; 

B B > 

} 

else  if  (flags  8 kPG P F i I e Ope n F o r c e Lo c a I E n c od e ) 
n mf->flags  |=  kPG PMa c B i nMod e ; 

i o . f i I ePa ram . i oNamePt r = spec. name; 
i o . f i I e Pa r a m . i o VR e f N um  = s pe c . v R e f N um; 
i o . f i I e Pa r a m . i o D i r I D = spec.parlD; 
i o . i oPa r a m . i oPe r ms s n = fsRdPerm; 
if  ( PBHOpenD F Sy nc ( 8 i o ) !=  noErr) 
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n 

n 

n 

□ 

n 

a 

n 

□ 

n 

n 

□ 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

a 

n 

n 

o 

n 

o 

n 

a 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

D 

a 

n 

n 

n 

n 

n 

u 

a 

Q 

n 

n 

n 

B 

B 

B 


n result  = pg  p E r r o r F romMa  c E r ro  r ( i o . i o Pa  r a m . i o Re  s u L t , PG  P E R R_N0_  F I L E ) ; 
n goto  error; 

> 

mf->dataRef  = i o . i oPa r am . i oRef Num; 


if  (mf->fLags  & kPGPMa cBi nHode ) 

{ 

n io.fileParam.ioNamePtr  = spec. name; 

B io.fileParam.ioVRefNum  = spec.vRefNum; 

B i o . f i L e Pa r am . i 0 D i r I D = spec.parlD; 

B io.ioParam.ioPermssn  = fsRdPerm; 

B if  ( PBH Op e n R F Sy n c ( & i o ) !=  noErr) 

B { 

B B result  = pg p E r r o r F r omMa c E r r o r ( i o . i o Pa r a m - i oR e s u 1 1 , PGPERR_N0_ FI LE ) ; 
B B goto  error; 

B } 

B mf->resRef  = io.ioParam.ioRefNum; 


B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

> 

else 

{ 

fl 

fl 

B 

> 


mf->dataOf f set  = 128; 

mf->resOf f set  = mf ->d a t a 0 f f s e t + ( pb  . i o F I Lg Len  + 127)  & "127L; 
mf->tota I S i ze  = mf -> r e s 0 f f s e t + ( p b . i o F I R Lg Le n + 127)  & "127L; 
if  (flags  & kPG P F i I eOpen Loca L En codeHa s h On L y ) 

{ 

B mf->flags  |=  k PG PMa c B i n H a s h On  I y ; 

B /*  Clear  the  finder  flags  */ 

B mf->macBi nHeader . i nf o1 . f dF Lags  = 0; 

B mf->macBi nHeader . i nfo2  = 0; 

B /*  Clear  the  creation  and  modification  dates  */ 

B mf “>ma cB i n H ea de r . c r ea t i o n = 0; 

B mf ->ma cBi nHea de r , mod i f i ca t i on  = 0; 

B /*  Clear  the  filename  */ 

B pgpCLearHemory(mf->macBinHeader.name, 

B B B B s 1 z eo f ( mf “>ma c B i n H e a d e r . na me ) ) ; 

B /* 

B * Clear  the  CRC  so  that  if  this  output  gets  used  to 

B * recreate  a file  (which  it  shouldn't),  it  won't  work 

B * properly  and  someone  will  notice  the  problem. 

B * / 

B pgpClearMemory(&mf->macBinHeader.crc1,  sizeof(crc)); 

> 


mf->resRef  = 0; 
mf->dataOf f set  = 0; 

mf->tota LSi ze  = mf->resOf f set  = pb . i o F L Lg Len; 


mf->f ilePos  = 0; 


f i L e->p  r i v 
f i L e->r ead 
f i I e->w  rite 
f i le->f  lush 
f i I e-> c lose 
f i I e->t  e I I 
f i I e->  s ee  k 


mf  ; 

macFi leRead; 
macFi LeUrite; 
macFi  leFlush; 
macFi  leClose; 
macFi leTell; 
macFi leSeek; 
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a fiLe->eof  = ma c F i L e Eo f ; 
n fiLe->si2eAdvise  = macFiLeSizeAdvise; 
a fiLe->error  = ma c F i L e E r r o r ; 
n f i I e ->  c I ea  r E r ro  r = ma  c F i L e C L e a r E r ro  r ; 
n fiLe->write2read  = macFiLeWriteZRead; 
n fiLe->cfb  = macFiLeCfb; 
n returnfiLe; 
error: 

o if  ( mf  ! : 


□ 

n 

D 

D 

n 

a 

n 

D 

n 

□ 

Q 

□ 

a 

> 


NULL) 


if  (mf->fileRef  !=  NULL) 

n pg p F r e e F i L e R e f C mf -> f i L e R e f ) ; 

pgpFree(mf); 


{ 

Q 

n 
a 

y 

if  (file  !=  NULL) 
n pgpFree(fiLe); 
if  (errorCode  !=  NULL) 

{ 

n pg p A s s e r t Ad d r V a L i d ( e r r o r C od e , PGPError); 
n *errorCode  = result; 

} 

return  NULL; 


n PGPError 
pgpMacCalcFi LeSizeC 
n PGPFileRef  const  *n  fileRef, 
a PGP F i L eOpen F L a g sn  flags. 


n 

f 

s i ze_t  *n 

Q 

n fileSize) 

\ 

D 

FSSpe  cn  n 

n 

s p e c ; 

Q 

HFi  leParamn 

n 

pb; 

n 

Booleannn 

Q 

macBinHode; 

n 

PGPErrorn 

n 

result  = PGPERR_0K; 

n 

*f i leSi ze  = 

0; 

n /*  In  case  there's  an  error 

*/ 

n 

if  ((result 

= 

pgpFSSpecFromFi leRef(fi leRef, 

&spec)  ) 

n 

n return  result; 

n 

pb  . i oNamePt  r 

= 

spec. name; 

n 

pb.ioVRefNum 

= 

spec . vRef Num; 

n 

pb.ioDirlD  = 

spec.parlD; 

a 

pb.  ioFDi rindex 

= 0; 

PGPERR  OK) 


if  ( PB H G e t F I n f o S y n c ( ( H Pa r mB I k P t r ) &pb ) !=  noErr) 

n return  pg p E r r o r F r omHa c E r r o r C pb . i oR e s u 1 1 , PG P E R R_N0_ F I LE ) ; 

macBinHode  = FALSE; 

if  (flags  S kPGP F i I eOpe nMay be Lo ca I En code ) 

{ 


n 

n 

i n t nn 

i ; 

n 

n 

Q 

n 

macBinHode  = TRUE; 

n 

D 

for 

( i 

= 0;  non  Ha c B i na r y Ty pe s C 

n 

Q 

n 

i f 

(pb.ioFlFndrlnfo.fdType 

n 

n 

n 

( 

□ 

n 

n 

n 

macBinHode  = FALSE; 

n 

n 

n 

D 

break; 

nonMacBinaryTypesCi]) 
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else  if  (flags  & kPGP F i L eOpen Fo r c e Loca L En c ode  ) 


Q 

Q 

macBi nHode 

= TRUE; 

n 

n 

if 

(macBinHode) 

n 

i 

n 

s 

*f i leSi  ze  = 

128  +nnnnnnnn 

/* 

MacBi nary 

header  */ 

n 

□ 

□ □ a 

( ( pb . i 0 F 1 Lg Le n + 127)  & ”127L)  +n 

/* 

Data  fork 

*/ 

n 

n 

n □ □ 

( ( pb . i 0 F 1 RLg Len  + 127)  & “127L);n 

/* 

Resource 

fork  * / 

Q 

> 

n 

else 

n 

n 

*fileSize  = 

pb. ioFlLgLen; 

return  PGPERR_0K; 


/* 

* Local  Variables: 

* t a b-w i d t h : 4 

* End  : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpMacFile.h  --  Header  for  Ma c B i na r i z i n g PgpFile  implementation 

★ 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $ld:  pgpMa c F i le . h, V 1.4. 2.1  1 997/06/07  09:50:09  mhw  Exp  $ 

*/ 

#ifndef  PG PM AC F I LE_ H n /*  L */ 

#define  PGPMACFILE.H 

#include  "pgpTypes.h" 

#include  "pgpFileRef.h" 

#include  "pgpFile.h" 

#include  "pgpFileMod.h" 

#ifdef  __cplusplus 
extern  "C"  { 

#end i f 


/* 

* The  <flags>  params  below  are  only  used  to  convey  HacBinary  mode: 
*n  n kPGP F i I eOpenMay be Lo ca I En code  or  k PG P F i I e Op e n F o r c e Lo c a I E n c od e 

*/ 


PgpFile  PGPExport  *aa 
a n n a a a 
n □ n n D n 
PgpFile  PGPExport  *nn 
n n n n □ a 
PGPError  PGPExportn  b 

B B B B B B 


pg p F i I e R e f Ma c W r i t eOp e n ( PG P F i I e R e f const  *fileRef, 
n B PGPFileType  fileType, 

B B PG P F i I e 0 p e n F I a g s flags,  PGPError  *error); 

pgp F i I e Ref Ma c ReadOpen ( PGP F i I eRef  const  *fileRef, 

B B PG P F i I eOpe n F I a g s flags,  PGPError  *error); 

pg pMa c Ca I c F i I e S i z e ( PGP F i I e Ref  const  *fileRef, 

B B PG P F i I eOpe n F I a g s flags,  size.t  *fileSize); 


#ifdef  __cplusplus 
} 

# e nd i f 


#endifB  /*  : PGPMACFILE.H  */ 
/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpMacUtils.c  --  Various  Macintosh  utilities 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpMa c U t i I s . c , V 1.2. 2.1  1997/06/07  09:50:09  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

#end i f 

SincLude  "pgpErr.h" 

#incLude  " pg pHa c U t i I s . h " 

typedef  struct  Ma c E r r o r E n t r y _ 

{ 

n OSErrn  n macError; 

n PGPErrorn  pgpError; 

> MacErrorEntry; 

static  MacErrorEnt ryn  ma c E r r o r Ta b L e C D = { 

n { opWrErr,n  n n PG P E R R_ F I LE_ W R I T E LO C K E D >, 

n { permErr,n  n a PG P E R R_ F I LE_ PE RM I S S I 0 N S >, 

n { a f p A c ce  s s D e n i e d , n PG  P E R R_  F I L E_  P E RH I S S I 0 N S >, 

n { 0,  0 } 

>; 

a PGPError 

pgpErrorFromMacErrorl 
n OSErrn  h macError, 

n PGPErrorn  de f a u I t E r r o r ) 

{ 

n i n t n n i ; 

n 

n if  (macError  ==  noErr) 
n n return  PGPERR_0K; 

n for  (i  = 0;  macErrorTabletiD. macError  !=  0;  i++) 
n n if  ( ma cE r ro rTab I e C i 3 . ma c E r ro r ==  macError) 
n n n return  macErrorTableCil. pgpError; 

n return  de f a u I t E r r o r ; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


CCCHK:68c3c366dd44fcc5bcd11e8177ccb0ad44428210a995c2dc94676b8b4:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


529 


pgpMacUtils.h 


/* 

* pg pMa c U t i L s . h — Various  Macintosh  utilities 

★ 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg pMa cU t i L s . h , V 1.1. 2.1  1 997/06/07  09:50:09  mhw  Exp  $ 

*/ 

#ifndef  PG PM AC UT I LS_ H n /*  [ */ 

#define  PG PM A C UT I LS_ H 

#incLude  "pgpErr.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 

PGPError  PGPExportn  n pg p E r r o r F r omMa c E r r o r C 0 S E r r macError, 

nnnnnnnn  PGPError  d e f a u L t E r r o r ) ; 

#ifdef  __cpLuspLus 

> 

# e n d i f 

#endifn  /*  : PGPMACUTILS.H  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpMem.c  — pgpMemALLoc 

* 

* Copyright  (C)  1996,1997 

★ 

* $Id:  pgpMem.c, V 1.9. 2. 3 
*/ 


and  friends  with  debugging  support 
Pretty  Good  Privacy,  Inc.  ALL  rights 
1997/06/07  09:50:10  mhw  Exp  $ 


reserved. 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i f 


//incLude 

<std  L i b . h> 

#i nc  Lude 

<Limits.h> 

#incLude 

<string.h> 

//i  nc  Lude 

"pgpTypes . h" 

//incLude 

"pgpMem. h" 

#incLude 

"pgpErr.h" 

//incLude 

"pgpDebug  . h" 

#incLude 

"pgpLeaks . h" 

/*  Fi  L Ls 

aLLocated/deaLLocated 

memory 


with 


0x D D ' s 


*/ 


#ifndef  D EBUG_ F I LL_H E M 

^define  D EBUG_ F I LL_H E Mn  n n DEBUG 
#end i f 


/*  Puts  a uLong-sized  magic  number  before  the  start  of  each  bLock  */ 

#ifndef  D EBUG_M EH_ H E A D_M AG  I C 

#define  DEBUG_MEH_HEAD_MAGICn  DEBUG 

/^end  i f 


/*  Puts  magic  bytes  after  the 
#ifndef  DEBUG_MEM_TAIL_MAGIC 
#if  DEBUG 

^define  DEBUG_HEM_TAIL_MAGICn 
#e  L se 

#define  DEBUG_HEM_TAIL_MAGICn 
#end  i f 
# e n d i f 


end  of  each  bLock  */ 


4 

0 


/*  Makes  pgpMemRea L L oc  aLways  move  a growing  bLock  */ 
#ifndef  DEBUG_ALWAYS_MOVE 
^define  DEBUG_ALUAYS_MOVEn  n DEBUG 
# e n d i f 


#if  DEBUG_FILL_MEM 

^define  May be F i L L Mem ( p,  size)n  pg p F i L L Memo r y ( ( vo i d *)(p),  (size),  0xDD) 
# e L s e 

^define  May be F i L L Mem ( p,  size) 

#endi f 


/*  This  is  a usefuL  macro  to  find  the  minimum  of  two  vaLues  */ 
#ifndef  min 

//define  min(x,y)  C((x)<(y))  ? (x)  : (y)) 

//end  i f 

#define  kMemHeaderMagi cnn  0xD837C51E 
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typedef  struct  MemHeader  MemHeader; 
struct  MemHeader 
{ 

#if  DEBUG_FIND_LEAKS 

n Leakitemn  Leakltem;n  /*  Information  for  the  Leaks  package  */ 

# e n d 1 f 

n size_tn  n size;n  n /*  Size  of  the  user  area  of  the  block  */ 

#if  DEBUG_MEH_HEAD_MAGIC 

n ulongn  n magic;n  n /*  Trailing  magic  number  */ 

# e n d i f 

>; 


#def i ne 
Q n 

#def i ne 

Q □ 

#def i ne 
□ n 


U s e r P t r ToM emH ea d e r ( u s e r P t r ) nn  \ 

((MemHeader  *)((char  *)(userPtr)  - s i z eo f ( MemH ea d e r ) ) ) 

M emH  ea  d e r Toll  s e r Pt  r ( h d r P t r ) n n \ 

((void  *)((char  *)(hdrPtr)  + s i zeof ( MemHeade r ) ) ) 

F u L L B I o c kS i z e ( u s e r S i z e ) nn  n \ 

( s i z eo  f ( M emH  e a d e r ) + (userSize)  + D EB  LIG_M  EM_T  A I L MAGIC) 


/* 

* Defines  the  sequence  of  tail  magic  bytes.  We  want  every  byte  to  be 

* odd  to  catch  memory  references,  but  also  each  should  be  distinct. 

*/ 

#define  Ta i I Ma g i c By t e ( i ) n n n n \ 
n n ((char)(34  * (i)  + 0x3D)) 


#if  DEBUG_FIND_LEAKS 

static  DECLARE_LEAKDEALLOCTYPE(kPGPFree,  "pgpFree"); 

static  DECLARE_LEAKALLOCTYPE(kPGPAL Loc,  "pgpAlLoc",  kPGPFree); 

# e n d i f 


/* 

Platform  specific  routines 


*/ 


/* 

* These  platform-specific  routines  can  be  very  simple.  They  needn't 

* deal  with  NULL  pointers  or  perform  any  assertion  checking.  They  will 

* never  be  passed  a zero  size,  because  a MemHeader  will  always  be  included. 

* pgpPLatf ormRea I Loc  should  never  move  the  block  itself;  instead  it  should 

* just  return  PG P E R R_N0M EM , causing  the  p L a t f o r m- i nd e pe nd e n t routine  to 

* allocate  a new  block  and  move  the  memory  itself. 

*/ 

static  void  *pgpPLatformALLoc(size_t  size); 

static  PGPError  pg p P L a t f o rmRea L L o c ( vo i d **ptrRef,  size_t  oLdSize, 
nnnnnnnnn  size_t  newSize); 
static  void  pgpPLatformFree(void  *ptr); 

#if  MACINTOSHn  n /*  C */ 

/* 

* Macintosh  specific  routines 
*/ 


n void 
pgpCopyMemory ( 
n void  const  *n  src, 

n void*nn  n dest, 
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n si ze_tn  n n size) 

{ 

« pgpa ( ( 

n n pgpa Add rVa L i d ( s r c , VoidALign), 
a n pgpa Add rVa L i d C de s t , VoidALign), 
n n pg pa  A s s e r t ( s i z e >=  0))); 

n 

n BLockMoveDataCsrc,  dest,  (Size)size); 

} 

n static  void  * 
pgpPLatformAL  Loc( 
n size_tn  n size) 

{ 

n pgpa ( ( 

n n pgpa Ass e r t (( S i z e ) s i z e >=  0), 

n n pg  pa  Msg  ( ( pg  pa  Fmt  P r e f i X , 

n n n n " pg p P L a t f o rm A L L o c : size  negative  or  too  Large")))); 

D 

#undef  NewPtrn  /*  We  don't  want  D e bugT r a p s _N e w P t r tracking  this  */ 
n return  (void  * ) N e w P t r ( ( S i z e ) s i z e ) ; 

> 


a static  PGPError 
pgpPLatformReaLLocC 
a void  **an  ptrRef, 

a size_ta  n oLdSize, 

a size_ta  n newSize) 


n Ptran  n ptr  = ( Pt r ) *pt rRef ; 

a size_ta  n actuaLSize; 

□ 

n / * 

a * We  need  to  perform  this  additionaL  assertion,  because  the  Mac  uses  a 

a * signed  Long  instead  of  an  unsigned  Long  (size_t)  for  memory  aLLocation 

n * / 
a pg  pa ( ( 

a n pg pa As s e r t ( ( S i z e ) ne w S i z e >=  0), 

a a pgpaMsg C ( pgpa Fmt P ref i X, 

n n a a "pgpPLatformReaLLoc:  size  negative  or  too  Large")))); 

D 


a ( VO i d ) o L dS i ze ; a n /*  Avoid  warning  */ 
a SetPtrSizeCptr,  CSize)neuSize); 
a actuaLSize  = GetPtrSize(ptr); 
a if  (actuaLSize  !=  newSize) 
a n return  PGPERR_NOHEH; 

a e L s e 

a a return  PGPERR_0K; 


> 


a static  void 
pgpPLatformFree( 
a void*an  ptr) 

{ 

#undef  DisposePtra  /*  We  don't  want  De bug T r a p s _ D i s pos e P t r tracking  this  */ 
a DisposePtr((char  *)ptr); 

> 
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#eLsen  /*  ] MACINTOSH  i */ 

/* 

* A N S I - s p e c i f i c routines  (for  non-Macs) 
*/ 

n void 

pgpCopyMemoryC 
n void  const  *n  src, 

n void*nn  n dest, 

n size_tnn  n size) 

{ 

n pgpa  ( ( 

a a pg pa  Add r Va L i d ( s r c , VoidALign), 

n n pgpa Add rVa L i d ( de s t , VoidALign), 

n n pgpa As s e r t ( s i z e >=  0))); 

n 

n memmo ve ( de s t , src,  size); 

} 

n static  void  * 

pgpPLatformALLocC 
n size_tn  o size) 

{ 

n return  (void  *)malLoc(size); 

} 

n static  PGPError 
pgpPLatformReal LocC 


n 

void  **nn 

PP, 

n 

s i ze_tn  n 

0 L dS i ze , 

n 

{ 

s i ze_tH  n 

newSi ze) 

n 

void  *n  n 

oLdP  = *pp; 

□ 

n 

void  * n n 

n e w P ; 

Q 

if  (newSize 

> 0 L dS i z e ) 

□ 

n return 

PGPERR_NOHEM; 

n 

newP  = rea L Loc (oLdP,  newS 

B 

if  ( newP  == 

NULL) 

n n return  PG P E R R_NOM EM ; 
a 

n *pp  = newP ; 
n return  PGPERR_0K; 

} 

n static  void 
pgpPlatformFreeC 

n void*nn  p) 

{ 

n free(p); 

> 

#endi f n /*  ] */ 

/* 

Platform  independent  routines 


*/ 
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#if  DEBUGn  /*  [ */ 

a Boolean 

pgpalnternaLMemBLockValidC 
n pg pa  C a L L P re  f i X D e f , 

n void  *n  n n userPtr) 

{ 

n MemHeader  *nn  header  = U s e r P t rToHemH ea d e r ( u s e r P t r ) ; 

□ 

n pg pa  As se r t ( u s e r P t r !=  NULL); 

n pg pa  Add r Va L i d ( h ea d e r , MemHeader); 

#if  DEBUG_FIND_LEAKS 

n pgpaLeakItemVaLid(&header->LeakItem); 

#endi  f 

#if  DEBUG_HEM_HEAD_MAGIC 

n pg pa  A s s e r t ( h e a de r->ma g i c ==  kM emH ea de r Ma g i c ) ; 

#end i f 

#if  DEBUG_MEM_TAIL_MAGIC 
n { 

n n char  *n  n tailMagic  = (char  *)userPtr  + h ea de r -> s i z e ; 

n n intnn  n i; 

D n 

n B for  (i  = 0;  IpgpaFailed  &S  i < D EBUG_M E M_T A I L_H AG  I C ; i++) 

B B B pg pa  A s s e r t ( t a i L Ha g i c C i D ==  Ta i I Ma g i c By t e ( i ) ) ; 

B } 

#endi f 

B return  pgpaFaiLed; 

} 

B static  void 
pgpMemSetTai LMagi c( 

B MemHeader  *Bheader) 

{ 

#if  DEBUG_MEM_TAIL_MAGIC 

B char  *B  B tailMagic  = (char  *)header  + s i z eo f ( HemH ea d e r ) + h ea de r-> s i z e ; 

B in  tBn  n i ; 

B 

B for  (i  = 0;  i < D EBUG_M EM_T A I L_M AG  I C ; i++) 

B B tailMagicCi]  = TailMagicByte(i); 

#endi f 
} 

#endifB  /*  D DEBUG  */ 

B void* 

PGP_INTERNAL_ALLOC ( 

B s i ze_tB  n B size 

B PGPALLOC_CONTEXT_PARAMS_DEF)b  /*  fileName  and  lineNumber  */ 

{ 

B MemHeader  *bb  header; 

B void  *B  B B userPtr; 

B 

B header  = (MemHeader  * ) pg p P I a t f o r m A I I o c ( F u I I B I o c k S i z e ( s i z e ) ) ; 
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n if  (header  ==  NULL) 

n n return  NULL; 

□ 

n Ha y be F i I L Hem ( h e a d e r , F u L L B L o c k S i z e ( s i z e ) ) ; 

n userPtr  = H em H e a d e r To U s e r P t r ( h e a d e r ) ; 
n 

#if  DEBUG_FIND_LEAKS 

n pgpLea ks Remembe r I t em ( 8hea de r-> L ea kl t em,  kPGPALloc, 

n n n n n n userPtr,  size,  fileName,  LineNumber); 
#end  i f 

n header->size  = size; 
n 

#if  DEBUG_HEH_HEAD_HAGIC 
n heade r->mag i c = kHemH e a d e r Ha g i c ; 

# e nd  i f 

#if  DEBUG_HEH_TAIL_HAGIC 
n pg pH emS e t Ta i L Ha g i c ( h e a d e r ) ; 

# e n d i f 

n return  userPtr; 

> 


n PGPError 
pgpRealLocC 


n 

VO i d **na 

n 

userPtrRef, 

n 

j" 

s i ze_tn  a 

a 

newSi ze) 

□ 

size_tn  n 

n 

oldSize; 

n 

void  *n  n 

n 

oldUserPtr  = *userPtrRef; 

n 

HemHeader 

*nn 

oldHeader  = U s e r P t r ToH emH e a d e r ( o 1 d U s e r P t r ) ; 

n 

void  *n  n 

n 

newUserPtr; 

n 

HemHeader 

*nn 

newHeader; 

n 

PGPErrorn 

n 

result; 

Q 


n pgpaCpgpaHemBLockVaLid(oLdUserPtr)); 
n oLdSize  = o L d H e a d e r -> s i z e ; 
n if  (newSize  ==  oLdSize) 

n n return  PGPERR_0K; 

n 

#if  DEBUG_FI LL_HEH 

n /*  If  we're  shrinking  the  block,  wipe  the  tail  end  before  resizing  */ 
a if  (newSize  < oLdSize) 

n n Ha y be F i L L Hem ( ( c h a r *)oLdUserPtr  + newSize,  oLdSize  - newSize); 

#end i f 
n 

n newHeader  = oLdHeader; 

n /*  Always  move  growing  blocks  if  D EBUG_ A LW A Y S_H0\/ E is  set  */ 
n if  ( DEBUG_ALWAYS_HOVE  &8  newSize  > oldSize) 
n n result  = PG P E R R_N OH  EH ; 
n else 

n n result  = pg p P I a t f o r mR e a I I o c ( ( vo  i d ** ) &n e wH ea d e r , 

n n n n n n F u I I B I o c k S i z e ( o I d S i z e ) , F u I I B I o c kS  i z e C n e w S i z e ) ) ; 


n 

a if  (result  ==  PG P E RR_N OH  EH ) 
n { 

an/*  pgpP I a t f o rmRea I I o c failed,  try  allocating  a new  block  and  moving  */ 
n n pg  pa  ( ( 
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n B n pg pa  A s s e r t ( ne w S i z e > oLdSize), 

B B B pgpaMsg("pgpPLatformReaLLoc  failed  to  shrink  block"))); 

B B neuHeader  = (MemHeader  *)pgpPlatformAlloc(FullBlockSize(newSize)); 

B B if  (newHeader  ==  NULL) 

B B B return  PG PE R R_N OM E M ; 

B B p g p C o py M e mo r y ( ( v o i d *)oldHeader,  (void  *)newHeader, 

B B B B B sizeof(MemHeader)  + oldSize); 

B B Ma y be  F i I I H e m ( o I d H ea  d e r , F u I I B I o c k S i z e ( o I d S i z e ) ) ; 

B B pg  p P I a t f o r m F r e e ( o I d H e a d e r ) ; 

n } 

B else  if  (result  !=  PGPERR_0K) 

B B return  result; 

B 

n newUserPtr  = MemHeaderToUserPtr(neuHeader); 

B 

#if  DEBUG_FILL_MEM 

n /*  If  we're  growing  the  block,  wipe  the  newly-allocated  portion  */ 

B if  (newSize  > oldSize) 

B B MaybeFillMemCCchar  *)newUserPtr  + oldSize,  newSize  - oldSize); 

# e nd i f 

B 

B if  (newHeader  !=  oLdHeader) 
n { 

#if  DEBUG_FIND_LEAKS 

B B p g p Le a k s N o t i f y 1 1 emM o V e d ( & o I d H e a d e r -> I e a k 1 1 e m,  &n e w H e a d e r — > I ea kl t e m ) ; 

#end i f 

B B *userPtrRef  = newUserPtr; 

B } 

n newHeader -> size  = newSize; 

B 

#if  DEBUG_MEM_TAIL_MAGIC 
n pgpMemSetTai IHagic(newHeader); 

#end i f 

B return  PGPERR_OK; 

} 

n void 
pgpFree( 

B void  *B  B B userPtr) 

{ 

n MemHeader  *nB  header  = U s e r P t r ToMemH e a d e r ( u s e r P t r ) ; 

B 

n pgpa(pgpaMemBlock\/alid(userPtr)); 

#if  DEBUG_FIND_LEAKS 

a pg p Lea ks F o r g e 1 1 1 em ( &h ea d e r->  I ea k 1 1 em,  kPGPFree); 

#end i f 

n Hay b e F i I I Hem ( h ea d e r , F u I I B I o c kS i z e ( h e a d e r-> s i z e ) ) ; 

n pg  p P I a t f o rm  F r e e ( h ea  d e r ) ; 

> 

/* 

Backward-compatible  wrapper  routines, 
which  treat  NULL  like  a 0-sized  block. 

*/ 


B void* 

PGP_INTERNAL_HEHALLOC( 
n size_tnB  a size 
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n PG P A LLO C_ C ONT E XT_ P A R AM S_ D E F ) H /*  fileName  and  LineNumber  */ 

{ 

n if  (size  ==  0) 
n n return  NULL; 

n else 

n 33  return  PGP_INTERNAL_ALLOC(size  PGPALLOC_CONTEXT_PASS_PARAMS); 

> 

33  void* 

PGP_INTERNAL_MEHREALLOC( 

33  void  *33  n n userPtr, 

n size_tn  n n newSize 

33  PG  P A L LO  C _C  0 NT  E XT_  P A R AM  S_  0 E F ) n /*  fileName  and  LineNumber  */ 

{ 

n if  (userPtr  ==  NULL) 

n n return  PG P_ I NT E RN A L_M EM A LLO C ( n e w S i z e PG P A L LO C_ C 0 NT E XT_ P A S S_ P A R AM S ) ; 
33  else  if  (newSize  ==  0) 

n { 

33  n pgpMemFree(userPtr); 

33  33  return  NULL; 

33  > 

n else  if  ( pg p R e a L L o c ( &u s e r P t r , newSize)  !=  PGPERR_0K) 

33  33  return  NULL; 

33  else 

33  33  return  userPtr; 

> 

33  void 

pgpMemFreeC 

33  void  *n  n 33  userPtr) 

{ 

33  if  (userPtr) 

n 33  pgpFree(userPtr); 

> 

o void 

pgpCopyPattern( 


n 

const 

void 

*n 

pattern. 

Q 

s i ze_ 

tn 

□ 

n 

patternLength, 

n 

void 

*n 

n 

Q 

buffer. 

n 

s i z e_ 

t n 

Q 

□ 

bufferLength) 

{ 

33  size_tn  count; 

33  size_t33  remaining33  = b u f f e r Le  ng  t h ; 

33  size_tn  doneSoFarn  = 0; 

n 

33  pg  pa  ( ( 

n n pgpa Add r Va L i d ( pa t t e rn , VoidALign), 

33  n pg  pa  A s s e r t ( pa  1 1 e r n Le  ng  t h > 0), 

n 33  pg  pa  Add  rVa  L i d ( buf  f e r , VoidALign), 

n n pgpaAssert(bufferLength  >=  0))); 

33 

33  //  copy  the  pattern  once  first 

33  count  = min(patternLength,  bufferLength); 

33  pgpC  opyMemo  ry  ( pa  1 1 e r n , buffer,  count); 

33  remainingn  -=  count; 

33  doneSoFar33  +=  count; 

a 
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while 

{ 


( rema i n i ng  ! = 0 ) 


//  replicate  the  pattern  we  have  produced  so  far 
//  because  the  original  pattern  might  be  small  (say 
count  = m i n ( done S o F a r , remaining); 

pg p Copy M emo r y ( bu f f e r , ((uchar  *)buffer)  + doneSoFar, 


byte) 

count); 


remainingn 
doneSo  Fa  rn 


-=  count; 
+ = count ; 


#if  MACINTOSHn  /*  [ */ 


/* 


Fill  memory  with  a byte  pattern. 


Obviously,  this  routine  can  be  optimized. 

*/ 


□ 

static 

inline  void 

Fi 

1 lBytes( 

n 

void  *n 

buffer. 

n 

s i z e_ t n 

length. 

n 

u c h a r n 

fi llChar) 

{ 

n 

char  *n 

cur  = (char  *)buffer; 

a 

UInt32n 

remaining  = length; 

n 

n 

while  ( 

remaining--  > 0) 

n 

a *cur++  = fillChar; 

/*. 

n 

□ 

a 

a 

a 


Fast  fill  routine.  Highly  efficient  for  fills  of  as  little  as  16  bytes. 

Testing  on  PPC  604  shows  that  filling  more  than  4 bytes  (one  long)  per  loop 
iteration  does  not  produce  any  measurable  speed  improvement.  That  fact, 
coupled  with  the  fact  that  using  byte  fills,  even  on  small  chunks,  is 

*/ 


D 

slow,  means  that 

unrolling  it  substantially  is  not  a win. 

n 

void 

pgpFi 1 lMemory( 

a 

void  *n  n n 

buffer. 

a 

const  si ze_tn 

length. 

D 

const  uchar nn 

fillChar) 

a 

const  UInt32n 

kAlignSizen  n n = 

sizeof(UInt32); 

a 

const  UInt32n 

klinrol  lBytesPerItern  = 

8;n  //  must  be  power 

n 

uchar  *nn  n 

curns  a a a = 

(uchar  *)buffer; 

Q 

UInt32n  n n 

remainingn  n n = 

length; 

a 

pgpa ( ( 

a 

n pgpaAddrVa 1 i 

d(buffer,  VoidAlign), 

n 

n pgpaAssert(length  >=  0))); 

n 

if  ( length  >=  kUn ro 1 1 By t e s Pe r 1 1 e r ) 

n 

{ 

n 

n UInt32n  n 

D fillPattern; 

n 

n UInt32n  n 

Q oddballCount; 
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curLong; 

numChunks; 


n 

n 

n 

n 

□ 

n 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

□ 

n 

n 

□ 

a 

n 

n 

Q 

n 

u 

D 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


n UInt32  *n  n 
n UInt32n  b b 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


pgpAssertC  Length  >=  kALignSize  ); 


//  create  the  fill  pattern 
pgpAssertC  sizeof(fiLLPattern) 
fiLLPattern  = filLChar; 
fiLLPattern  |=  (fiLLPattern  << 
fiLLPattern  |=  (fiLLPattern  << 


= = 4 * s i z e o f ( f i L L C h a r ) ); 

8); 

16); 


//  aLign  address  to  kALignSize  byte  boundary 

oddba L L Countn  = kALignSize  - ( ( ( U I n 1 32 ) c u r ) % kALignSize  ); 

pgpAssert(  oddbaLLCount  <=  remaining  ); 

FiLLBytes(  cur,  oddbaLLCount,  fiLLChar  ); 
remainingn  -=  oddbaLLCount; 
curBB  B +=  oddbaLLCount; 

pgpAssert(  remaining  ==  0 ||  (((UInt32)cur)  % kALignSize)  ==  0 ); 


B //  fiLL  aLL  the  chunks 

B curLongBB  = (UInt32  *)cur; 

n numChunksn  = remaining  / kU n r o L L By t e s Pe r I t e r ; 
B whiLe  ( numChunks--  !=  0 ) 

B { 

B B //  CAUTION:  this  Loop  must  move  a totaL  of 

n n //  * kU n r o L L By t e s Pe r I t e r * bytes 

B B *curLong++H  = fiLLPattern; 

B B *curLong++B  = fiLLPattern; 

B > 

B 

B //  any  remaining  bytes  get  fiLLed  beLow... 

B curnB  B = (Byte  *)curLong; 

B remainingB  &=  ( kU n r o L L By t e s Pe r I t e r - 1 ); 

> 

B 

FiLLBytes(  cur,  remaining,  fiLLChar  ); 


//  verify  that  at  Least  first  and  Last  bytes  have  been  set  properLy 
pgpAssert(  Length  ==  0 | | 
a ( ((Byte  *)buffer)C  0 ] == 

n B B fiLLChar  &&  ((Byte  *)buffer)C  Length  - 1 2 ==  fiLLChar)  ); 


/* 

n Return  true  if  memory  bLocks  are  equaL,  faLse  otherwise. 

B 

n Note:  not  yet  optimized;  this  version  is  sLow. 


B Boo  L ea  n 

pgpMemoryEqua  L ( 
n const  void  *b 

B const  void  *n 

n si ze_tn  b b 

B si Ze_tB  B B 

n const  ucha  r *n 

n const  ucha  r *b 

B 


b1, 

b2. 

Length) 

remainingn  = Length; 
curin  = (uchar  *)b1; 

cur2n  = (uchar  *)b2; 


*/ 
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pg  pa  ( ( 

n pgpa Add rVa L i d ( b1  , VoidALign), 
n pgpa Add rVa L i d ( b2,  VoidALign), 
n pg pa  A s s e r t ( L e n g t h >=  0))); 

while  (remaining--  > 0) 
n if  (*cur1++  !=  *cur2++) 

a n return  FALSE; 

return  TRUE; 

#endifn  /*  ] MACINTOSH  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpMem.h  --  Memory  aLLocation  routines  with  debugging  support 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpMem.h, V 1.9. 2. 3 1997/06/07  09:50:10  mhw  Exp  $ 

*/ 

#ifndef  PGPMEM_H 
#define  PGPMEM.H 

#incLude  <stdLib.h> 

#if  PRAGMA_IHPORT_SUPPORTED 
#pragma  import  on 
Send  i f 

SincLude  "pgpTypes.h" 

SincLude  "pgpErr.h" 

SincLude  "pgpDebug.h" 

SincLude  "pgpLeaks.h" 

Sifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 


/* 

* 

* 

* 

* 

* 

* 

*n 

*n 

*n 

* 

*n 

* 

*n 

* n 

★ 

* n 

* 

*n 

*/ 


There  are  five  macros  which  controL  the  debugging  features  of  pgpmem. 
UnLess  expLicitLy  set,  they  defauLt  to  the  vaLue  of  the  DEBUG  macro. 

NOTE:  There's  no  need  to  set  these  expLicitLy  for  most  purposes. 


DEBUG.FI LL.MEMn 
n □ n n 

n n D 

□ n n 


a 

a 

DEBUG 

n 

DEBUG 

n 

□ 

DEBUG 

n 

DEBUG 

n 


Q If  set,  aLL  aLLocated  memory  wi L L be  set  to  0xDD 

n before  use,  and  aLL  deaLLocated  memory  wiLL  be  set 

n to  0xDD  before  being  freed.  This  is  aLso  done  when 
n resizing  bLocks. 


_M E M_H E A D_M AG  I Cn I f set,  a uLong-byte  magic  number  is  pLaced  immediateLy 
n a n n before  each  bLock,  to  detect  buffer  overruns. 

_M EM_T A I L_M AG  I C a I f set,  magic  numbers  are  pLaced  after  the  end  of  each 
bLock  to  detect  buffer  overruns.  The  vaLue  of  the 
macro  determines  the  number  of  bytes  added. 

If  set,  a List  is  kept  of  aLL  aLLocated  bLocks  which  is 
used  to  detect  memory  Leaks  on  program  exit. 

If  set,  memory  bLocks  are  aLways  moved  when  increasing 
the  size  of  a bLock. 


□ non 
n n n □ 

_FIND_LEAKSan 
n n n D 

_ALWAYS_MOVEa 
n n n n 


#ifndef  D EBUG_ F I N D_ LE AKS 
#define  DEBUG_FIND_LEAKSa 
# e n d i f 


USE_PGP_LEAKSa  /*  Find  memory  Leaks  */ 


#if  DEBUG  FIND  LEAKS 


#define  PGPALLOC.CONTEXT.PARAMSan  n 
#def i ne  PGPALLOC_CONTEXT_PARAMS_DEFan 
#define  PGPALLOC_CONTEXT_PASS_PARAMSb 
#define  PGP  INTERNAL  ALLOCa  n n n 


, char  const  *fiLeName,  Long  LineNumber 
, fiLeName,  LineNumber 
pgpInternaLContextAL  Loc 
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Sdef-ine  PGP_INTERNAL_MEMALLOCn  n n pg  p I n t e r n a L C o n t e x t M emA  L L o c 

#define  PGP_INTERNAL_HEMREALLOCnn  n pg p I n t e r na L C o n t ex t MemR e a I L o c 

#e  L se 


#def i ne 
#def i ne 
#def i ne 
#def i ne 
#d  e f i n e 
//define 


PGPALLOC_CONTEXT_PARAHS 
PGPALLOC_CONTEXT_PARAHS_DEF 
PGPALLOC_CONTEXT_PASS_PARAMS 
PGP_INTERNAL_ALLOCn  n n n 

PGP_INTERNAL_MEHALLOCn  n n 

PGP  INTERNAL_HEnREALLOCnn  n 


pgpInternaLAL  Loc 
pgpInternaLMemAL  Loc 
pgplnterna  LHemRea  L Loc 


#en  d i f 


/* 


* These  functions  won't  return  NULL  for  0-sized  bLocks, 

* and  wiLL  faiL  assertions  if  NULL  is  passed  in. 

* pgpReaLLoc  aLso  has  a different,  cLeaner  caLLing  convention. 
*/ 


//definen  n n 

n D D n Q 

//define  n n n 

n n n a □ 

PGPError  PGPExportn 
void  PGPExportn  n 


pg  p A L L oc  ( s i ze  ) n nnnnnnnnn 
PGP_INTERNAL_ALLOC(size  PGPALLOC_CONTEXT_PARAHS) 
p g p N e w ( t y p e ) n nnnnnnnnQ 
((type  * ) pgp A L L oc ( s i z eof ( t y pe ) ) ) 

pgpReaLLoc(void  **userPtrRef,  size_t  neuSize); 
pgpFree(void  *userPtr); 


□ 


□ 


\ 

\ 


/* 

* These  functions  WILL  return  NULL  for  0-sized  bLocks,  and 

* deaL  with  NULL  passed  in  as  if  it  was  a 0-sized  bLock, 

* for  backward  c ompa t i b i L i t y . They  have  the  same  semantics 

* as  ma L L o c / r e a L L o c / f r ee . 

*/ 


//def  i ne  n n 

□ non 
//define  n n 

n n n n 

Sdefine  n n 

naan 
n n n n 

void  PGPExportn 


n 

n 

n 

n 

n 

n 

n 

n 


pg pMemA L L o c ( s i z e ) nnnnnnnnnn 
PGP_INTERNAL_MEMALLOC(size  PGPALLOC_CONTEXT_PARAMS) 
pgpMemNew(type)nn  nnnnnnnnn 
((type  *)pgpMemALloc(sizeof(type))) 

pgpMemRea L L o c ( use r Pt r , newSize)  n n n n n n 

PGP_INTERNAL_HEMREALLOC(userPtr,  newSizen  n n n 

n n n n n n PG P A L LO C _ C ONT E XT_ P AR AM S ) 

pg pHem F r ee ( VO i d *userPtr); 


\ 

\ 

\ 

\ 


//definenn  n 
n n n n 
n n n n 


n pg  pa  HemB  L o c kVa  L i d ( u s e r P t r ) n n n n n 
Q pg pa C a L L ( pg pa  I n t e r na L MemB L o c k Va L i d , nn  n 
n n n n ( pg pa C a I L P r e f i x , userPtr)) 


n n n \ 

n n n \ 


/*  Memory  copy  routine  optimized  for  Large  bLocks,  overLapping  okay  */ 
void  PGPExportn  n pg p Copy M emo r y ( vo i d const  *src,  void  *dest,  size_t  size); 


//if  MACINTOSHn  /*  [ */ 


BooLean  PGPExportn 
n n n n n 
void  PGPExportn  n 


pg pMemo r y E q u a L ( c on s t void  *b1,  const  void  *b2, 
n size_t  Length); 

pgpFiLLMemory(void  *buffer,  size_t  Length,  uchar  fiLLChar); 


//eLsen  /*  D MACINTOSH  Z */ 


//definenn  n n pg  pHemo  r y E q u a L ( b 1 , b2,  Length)n  n n n n n n \ 

n n n n n ( memcmp ( ( vo i d *)(b1),  (void  *)(b2),  (Length))  ==  0) 
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#definenn  n n p g p F i L I Memo ry ( bu f f e r , Length,  fiLLChar)nn  b b n \ 

n B B B B ( ( VO  i d ) mems e t ( ( VO i d *)Cbuffer),  CfiLLChar),  (Length))) 


#endifn  /*  ] MACINTOSH  */ 


#definen  n b 

B B B B B 


pg p C L e a rMemo ry ( b u f f e r , byteCount)n  b b b b b \ 
pg p F i L L Memo ry ( C buf f e r ) , (byteCount),  '\0') 


void  PGPExportn  b pg p C opy Pa t t e r n ( c on s t void  *pattern,  size_t  pa t t e r n Le n g t h , 

BBBBBBBBB  void  *buffer,  size_t  bu f f e r Le ng t h ) ; 


/*  Lookie 

here! 

An  A N S I - c omp L i a n t alignment  finder!  */ 

# i f nd e f n 

Q 

n aLignof 

#def i ne  n 

n 

n aLignof(type)  (sizeofCstructItype  _x;  char  _y;>)n 

□ 

B B B 

#end  i f 

n 

B B B B B - s i z eof ( t y pe  ) ) 

\ 


/* 


* WARNING:  These  shouLd  onLy  be  used  by  the  above  macros 
*/ 


void  PGPExport  *n 

B B B B B 

void  PGPExport  *n 

B B B B B 

void  PGPExport  *n 

B B B B B 


PGP_INTERNAL_ALLOC ( si ze_t  size 

a B B B B PGPALLOC_CONTEXT_PARAMS_DEF); 

PGP_INTERNAL_MEMALLOC(size_t  size 

n B B B B B PGPALLOC_CONTEXT_PARAMS_DE F ) ; 

PG P_ I NT E R N A L_M E M R E A L LO C ( VO i d *userPtr,  size_t  newSize 
n B B B B B PGPALLOC_CONTEXT_PARAMS_DE F ) ; 


#if  DEBUG 

Boolean  PGPExportn  pg pa  I n t e r n a L M emB L o c kVa L i d ( pg pa C a L L P r e f i x D e f , 

BBBBBBBBBBBB  void  *userPtr); 
#end  i f 


#ifdef  __cpLuspLus 
} 

#endi f 


#if  PRAGMA_IMPORT_SUPPORTED 
^pragma  import  reset 
# e n d i f 


#endif  /*  PGPMEM_H  */ 
/* 

* LocaL  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpMemFile.c  — PgpFile  implementation  for  memory  files 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg pHem F i I e . c , V 1.6. 2.1  1997/06/07  09:50:11  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 

#i nc  lude 

"config.h" 

# end i f 

#i nc lude 

<errno. h> 

# i n c 1 ude 

<stdio.h> 

#i nc  lude 

"pgpFile.h" 

#include 

"pgpCFB.h" 

#include 

"pgpMem. h" 

#include 

"pgpErr. h" 

ttinclude 

"pgpUsuals.h" 

/*  This 

is  the  private 

typedef 

struct  MemFile 

□ 

char  *n  n 

D 

char  *n  n 

n 

char  *n  n 

□ 

PgpFi leErrorn 

□ 

PGPErrorn 

> MemFile; 


data  for  memfiles  */ 


n 

base; 

n 

end; 

n 

cur; 

err; 

n 

error; 

static  long  mem F i I e T e I I ( Pg p F i I e *file); 


n static  void 

memSe t E r ror ( Pgp F i I e *file,  PGPError  code) 

{ 

n MemFile  *n  mf  = (MemFile  *)file->priv; 

n mf->err.f=file; 

n mf->err.fpos  = mem F i I e T e I I ( f i I e ) ; 

n mf->error  = mf->err . error  = code; 

n mf ->e r r . sy s e r r n o = 0; 

> 

n static  size_t 


memFi leReadCvoid 

*pt  r. 

size_t  size,  PgpFile  *file) 

n 

MemF i 1 e 

*n 

mf  = (MemFile  * ) f i 1 e-> p r i v ; 

n 

i f 

(size 

> (si 

ze_t ) (mf->end  - mf->cur)) 

n 

n 

size  = 

mf->end  - mf->cur; 

n 

i f 

(size 

A 

ii 

n 

i 

n 

n 

memSetError(file,  PGPERR_FILE_OPFAIL); 

n 

n 

return 

0; 

Q 

> 

n 

e L 

se 
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n { 

n n pg p C opy Memo ry ( mf -> c u r , ptr,  size); 

n n mf->cur+=size; 

n n returnsize; 

n > 

> 

n static  size_t 

mem F i L e W r i t e ( VO i d const  *ptr,  size_t  size,  PgpFiLe  *fiLe) 
{ 

n (void)ptr;n  /*  Quiet  the  compiler  warnings  */ 

n (void)size; 

n memS e t E r r o r ( f i L e , PG P E R R_ F I L E_B A DO P ) ; 

n returnO; 

> 

n staticint 

mem F i L e F L u s h ( Pg p F i L e *fiLe) 

{ 

n (void)fiLe;n  /*  Quiet  compiler  warning  */ 

n /*  Does  nothing  */ 

n return  PGPERR_0K; 

> 

n staticint 

memF i I eC I ose ( Pgp F i I e *file) 

{ 

n HemFile  *n  mf  = CMemFile  * ) f i I e->p r i v; 

a pgpFreeCmf); 

n pgpFree(file); 

a return  PGPERR_0K; 

} 

n static  long 

mem F i I eT e I I ( Pg p F i I e *file) 

{ 

n MemFile  *n  mf  = CMemFile  * ) f i I e->p r i v ; 

n return  mf->cur  - mf->base; 

} 

a staticint 

mem F i I e S e e k ( Pg p F i I e *file,  long  offset,  int  whence) 

{ 


□ 

M em  F i L e 

*n 

mf  = (MemF 

ile  *)file->priv; 

n 

switch 

(whence) 

n 

C 

Q 

n 

case 

SEEK_SET: 

n 

n 

n 

/*  offset 

is  correct,  as  is  */ 

n 

D 

Q 

break; 

Q 

n 

case 

SEEK_CUR : 

□ 

n 

n 

offset  += 

mf->cur  - mf->base; 

Q 

□ 

n 

break; 

□ 

□ 

case 

SEEK_END : 
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n n n offset+=mf->end-mf->base; 

n n n break; 

n > 

n if(offset  < 0 I I offset  > mf->end  - mf->base) 

n { 

n n memS e t E r ro r ( f i L e , PG P E R R_ F I L E_0 P F A I L) ; 

n n return  PG P E R R_ F I LE_0 P F A I L; 

n > 

n inf->cur  = mf->base  + offset; 

n return  PGPERR_0K; 

> 

n staticint 

mem F i L e Eof ( Pg p F i L e const  *fiLe) 

f 

n HemFile  *n  mf  = (MemFiLe  * ) f i L e->p r i v ; 

n return  mf->cur  >=  mf->end; 

> 

n stati c Long 

memF i L eS i ze Advi se ( Pgp F i L e const  *fiLe) 

{ 

n MemFile  *n  mf  = (HemFiLe  *)fiLe->priv; 

n return  mf->end  - mf->end; 

> 

n static  PgpFiLeError  const  * 

mem F i L eE r ro r ( Pgp F i L e const  *fiLe) 

{ 

n MemFile  *n  mf  = (MemFile  * ) f i L e->p r i v; 

n if  (mf->error  !=  PGPERR_OK) 

n n return  &mf->err; 

□ else 

n n return  NULL; 

> 

Q staticvoid 

mem F i L e C L ea r E r ro r ( Pgp F i L e *fiLe) 

{ 

n MemFile  *a  mf  = (MemFile  * ) f i L e->p r i v ; 

n mf->error  = PGPERR_0K; 

> 

n staticint 

memF i L eW r i t eZRead ( Pg p F i L e *fiLe) 

{ 

n memSetError(f i le,  PG P E RR_ F I LE_B A DO P ) ; 

n return  PG PE R R_ F I LE_B A DOP ; 

} 

n static  Pg p C f b C on t e x t * 

mem F i L e C f b ( Pg p F i I e const  *fiLe) 
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{ 

n Cvoid)fiLe;n  /*  Quiet  compiler  warning  */ 

n /*  XXX:  I'm  not  really  sure  what  should  be  done  here  */ 

n return  NULL; 

} 


n PgpFile* 

pgp F i I eHemReadOpen ( VO i d *base,  size_t 
{ 

n PgpFile*n  file; 

n MemFile*n  mf; 


I e n ) 


a file  = (PgpFile  *)pgpAlloc(sizeof(*file)); 

n if  (file  ==  NULL) 

a n returnNULL; 


n 

□ 

Q 

n 

D 

n 


mf  = (MemFile  * ) pg p A I I o c ( s i z e o f ( *m f ) ) ; 
if  (mf  ==  NULL) 

( 

n pgpFree(file); 

n return  NULL; 

> 


n pgpClearMemory(mf,  sizeof(*mf)); 

n pgpClearMemory(file,  sizeof(*file)); 

n mf->base  = mf->cur  = (char  *)base; 

n mf->end  = mf->base  + len; 

n file->priv  = mf; 

n file->read  = memFileRead; 

n file->write  = memFileWrite; 

n file->flush  = memFileFlush; 

n file->close  = mem F i I e C I o s e ; 

a file->tell  = memFileTell; 

n file->seek  = memFileSeek; 

n file->eof  = memFileEof; 

n f i I e->s i ze Advi se  = mem F i I e S i z e Ad v i s e ; 

n file -> error  = memFileError; 

n f i I e->c I ea r E r ro r = mem F i I e C I ea r E r ro r ; 

n f i I e-> w r i t e 2 r e a d = mem F i I e W r i t e 2 Re  a d ; 

n file->cfb  = memFileCfb; 

n return  file; 

> 
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/* 

* pgpMsg.c  — a way  to  obtain  the  List  of  PGP  Messages 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < w a r L o r d SM I T . E D U> 

* 

* $Id:  pgpMsg.c, V 1.3. 2.1  1997/06/07  09:50:11  mhu  Exp  $ 

*/ 

#incLude  <stdio.h>n  /*  For  sprintfC)  */ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#e nd i f 


^define  PGPHSGCmsg,  string)  { 'iisg,  string  >, 


/*  List  of  aLL  message  codes  */ 
struct  pgpmsg_t  { 
n intmsg; 

n char  const  *string; 

>; 


static  struct  pgpmsg_t  const  pgpmsgListC]  = { 

#incLude  "pgpHsg.h" 

n { 0,  0 >n  /*  End-of-List  pLacehoLder  */ 

>; 

/*  Get  rid  of  warning  from  gcc  about  missing  prototype  */ 
char  const  PGPExport  * pg pms g S t r i ng  (int  code); 


char  const  * 
pgpmsgString  (int  code) 

{ 

n unsignedi; 

n static  char  bufCD  = "Unknown  msg  code  xxxxxxxxx"; 

n /*  123A567890123456789  */ 


n for  (i  = 0;  i < sizeof  (pgpmsgList)/sizeof  (*pgpmsgList);  i++)  ( 

n n if  ( pg  pmsg  L i s t C i I]  . ms  g ==  code) 

n n n return  pg pms g L i s t C i ] . s t r i ng ; 

n > 

n sprintf  (buf+19,  "%+d",  code); 

n return  buf; 

> 
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/* 

* pgpPassCach.c  — A Passphrase  Cache  — keep  a cache  of  passphrases  and 

* try  them  against  ESKs  and  Secret  Keys.  This  way  you  only  have  to 

* type  your  passphrase  once,  it  gets  cached,  and  then  it  gets  used 

* again  and  again. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa r L o r dSM I T . E D U> 

* 

* $Id:  pgpPassCach . c, V 1 . 2. 2.1  1 997/06/07  09:  50:  1 1 mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i f 

#incLude  <stdio.h> 


//include 
# i n c L ude 
#incLude 
//include 
//include 
#i nc  lude 


pgpESK.h" 
pgpMem. h" 
pgpPassCach. h 
pgpErr.h" 
pgpPubKey . h " 
pgpUsuals.h" 


struct  PgpPass  { 
n char*pass; 

n size_t  passlen; 

n struct  PgpPass  *next; 

>; 


struct  PgpPassCache  { 
n struct  PgpEnv  const  *env; 

n struct  PgpPass  *passlist; 

>; 


struct  PgpPassCache  * 

pg pPa ss C a c heC r ea t e (struct  PgpEnv  const  *env) 

{ 

n struct  PgpPassCache  *cache; 

n cache  = (struct  PgpPassCache  *)  pgpMemAlloc  (sizeof  (*cache)); 

o if(cache){ 

n n memset  (cache,  0,  sizeof  (*cache)); 

n n cache->env  = env; 

a } 

D n 

n return  cache; 

> 


void 

pgpPassCacheDest roy  (struct  PgpPassCache  *cache) 

{ 

n struct  PgpPass  *p,  *t; 

n if  (Icache) 

n n return; 
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n 

for  (p 

= cache->passList;  p;  p = t)  { 

n 

n 

t = p->next; 

n 

n 

memset  (p->pass,  0,  p->passLen); 

n 

o 

pgpMemFree  (p->pass); 

□ 

n 

memset  (p,  0,  sizeof  (*p)); 

n 

n 

pgpMemFree  (p); 

n 

> 

n 

memset 

(cache,  0,  sizeof  (*cache)); 

n 

pgpMemFree  (cache); 

> 

i n t 

pg p Pa s s C a c h e Add  (struct  PgpPassCache  *cache,  char  const  *pass,  size_t  passLen) 
{ 

n struct  PgpPass  *p; 

n char*buf; 

n if  (Icache  ||  Ipass  ||  ! passLen) 

n n return  PGPERR_BADPARAM; 

a p = (struct  PgpPass  *)  pgpMemALLoc  (sizeof  (*p)); 

n i f ( ! p ) 

n n return  PGPERR_NOMEH; 

n buf  = (char  * ) pg pMem A L L o c (passLen  + 1); 

n if(!buf){ 

n n pgpMemFree  (p); 

n n return  PG P E R R_NOH E H ; 

n } 

n memcpy  (buf,  pass,  passLen); 

n bufCpassLenD  = '\0'; 

n memset  (p,  0,  sizeof  (*p)); 

n p->pass=buf; 

n p->passLen  = passLen; 

n p->next  = c a c h e->pa s s L i s t ; 

n cache->passList  = p; 

n return0; 

> 


/* 

* Returns: 

* < 0 : error 

* = 0 : no  phrases  worked 

* > 0 : a pass  phrase  worked  --  session  key  in  key,  size  in  keyLen 
*/ 

i nt 

pg p Pa s s C a c h eT r y E s k (struct  PgpPassCache  const  *cache,  struct  PgpESK  const  *esk, 
n n int  (*tryKey)  (void  *arg,  byte  const  *key,  size_t  keyLen), 

n n void  *tryarg,  byte  *key,  size_t  *keyLen) 

{ 

n struct  PgpPass  *p; 

n inti; 
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n if  (!cache  ||  !esk  ||  !key  ||  IkeyLen  |{  ItryKey) 

a n return  PGPERR_BADPARAM; 


if  (pgpEskType  (esk)  !=  PG P_ E S KT Y P E_P AS S PH R A S E ) 


a 

B 

return 

PGPERR_BADPARAM; 

a 

for  ( p 

= cache- 

>passList;  p;  p 

= p->next ) { 

a 

B 

= pg p E s kC on V D e c r y p t (esk,  cache->env 

n 

B 

n 

□ 

key); 

n 

B 

f 

( i < 

0 } n n 

/*  error  */ 

B 

B 

B 

return  i; 

B 

B 

f 

( i > 

0 ) (n  n 

/*  got  a key  - 

□ 

B 

Q 

*keyLen  = i; 

B 

B 

B 

i = tryKey  (tryarg,  key,  *keyL 

B 

B 

B 

if  ( ! i ) nn 

/*  it  worked  * 

B 

B 

B 

n return 

1; 

B 

B 

> 

B 

} 

B 

/*  none 

0 f 

the 

cached  passphrases  worked  */ 

B 

} 

return 

0; 

/* 

* Returns : 

* < 0 

: error 

* = 0 

: could 

not 

unlock  key 

* > 0 

: success  - 

- key 

unlocked 

*/ 

i n t 

pgpPassCacheTryKey 

(struct  PgpPassCache 

const  *cache. 

struct  PgpPass  * 
i n t i ; 


p; 


n if  (!cache  ||  !seckey) 

n n return  PGPERR_BADPARAM; 

n for  (p  = cache->passList;  p;  p = p->next)  { 

n n i = pgpSecKeyUnLock  (seckey,  cache->env,  p->pass,  p->passLen); 

a a i f ( i ) 

n n n returni; 

n } 

n return0; 

} 
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/* 

* pgpPassCach.h  — A Passphrase  Cache 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa  r L o r dSH  I T . E D Ll> 

* 

* $Id:  p g p P a s s C a c h . h , V 1.4. 2.1  1 997/06/07  09:50:1  2 mhw  Exp  $ 

*/ 

#ifndef  PGPPASSCACH.H 
#define  PGPPASSCACH.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  < 

#end i f 

struct  Pg p Pa s s Ca c h e ; 

#ifndef  T Y P E.PG PP A S S C AC H E 

^define  T Y P E.PG P P A S S C A C H E 1 

typedef  struct  PgpPassCache  PgpPassCache; 

# e nd i f 


struct  PgpEnv; 

#ifndef  TYPE. PGPENV 

#define  TYPE. PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#end i f 

struct  PgpESK; 

#ifndef  TYPE. PGPESK 

#define  TYPE. PGPESK  1 

typedef  struct  PgpESK  PgpESK; 

#end i f 

struct  PgpSecKey; 

#ifndef  TYPE. PGPSECKEY 
^define  T YPE.PG P S E C KE Y 1 
typedef  struct  PgpSecKey  PgpSecKey; 
#endi f 


struct  PgpPassCache  PGPExport  *pg p Pa s s C a c h e C r ea t e (struct  PgpEnv  const  *env); 
void  PGPExport  pg p Pa s s C a c h e De s t r oy  (struct  PgpPassCache  *cache); 
int  PGPExport  pg p Pa s s C a c h e Add  (struct  PgpPassCache  *cache,  char  const  *pass, 
n n size.t  passLen); 

int  PGPExport  pg p Pa s s C a c h eT r y E s k (struct  PgpPassCache  const  *cache, 
n n n struct  PgpESK  const  *esk, 

n n n int  (*tryKey)  (void  *arg,  byte  const  *key, 

n n n n size.t  keylen), 

n n n void  *tryarg,  byte  *key,  size.t  *keyLen); 

int  PGPExport  pg p Pa s s C a c h eT ry Key  (struct  PgpPassCache  const  *cache, 
n n n struct  PgpSecKey  *seckey); 


#ifdef  cpLuspLus 

> 

#end  i f 
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#endif  /*  PGPPASSCACH.H  */ 
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/* 

* pgpPi pe F 1 L e . c --  a PgpFile  interface  to  write  to  Pipelines 

* 

* Copyright  CO  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r L o r dSH I T . E D U> 

* 

* $Id:  pg pP i pe F i L e . c , V 1.2. 2.1  1997/06/07  09:50:12  mhu  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
^include  "config.h" 
//end  i f 

//include  <stdio.h> 


//include 
//i  nc  Lude 
//include 
//include 
//include 


pgpFi Le.h" 
pgpMem. h" 
pgpPipeline.h 
pgpErr.h" 
pgpUsuals.h" 


struct  File  { 

n struct  PgpFileError  err; 

n struct  PgpPipeline  *head; 

n interror; 

>; 


static  void 

setError  (struct  PgpFile  *fiLe,  int  code) 

{ 

n struct  File  *fp  = (struct  File  * ) f i L e->p r i v ; 

n f p->err . f = f i Le; 

n f p->e r r . e r ro r = code; 

n fp->error  = code; 

> 

static  size_t 

pipeRead  (void  *ptr,  size_t  size,  struct  PgpFile  *fiLe) 
{ 

n (voi d)  pt  r; 

n (void)  size; 

n setError  (file,  PG P E R R_ F I LE_B A D 0 P ) ; 

n return0; 

} 


static  size_t 

pipeWrite  (void  const  *ptr,  size_t  size,  struct  PgpFile  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  *)  fiLe->priv; 

n intcode=0; 

a size  = f p-> h ea d-> w r i t e (fp->head,  (byte  const  *)ptr,  size,  &code); 

n setError  (file,  code); 

n return  size; 

} 
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static  i n t 

pipeFLush  (struct  PgpFiLe  *fiLe) 

n struct  File  *fp  = (struct  File  *)  fiLe->priv; 

n intcode; 

n code  = fp->head->fLush  (fp->head); 

n setError  (file,  code); 

n return  code; 

> 


static  i n t 

pipeCLose  (struct  PgpFiLe  *fiLe) 

{ 

n struct  File  *fp  = (struct  File  *)  fiLe->priv; 

n intcode=0; 


n code  = f p->head->si zeAdvi se  (fp->head,  0); 

n setError  (file,  code); 

n if(code) 

n a returncode; 


n f p->head->tea rdown  (fp->head); 

n memset  (fp,  0,  sizeof  (*fp)); 

n pgpMemFree  (fp); 

a memset  (file,  0,  sizeof  (*fiLe)); 

n pgpMemFree  (file); 

n return0; 

} 


static  Long 

pipeTeLL  (struct  PgpFiLe  *fiLe) 
{ 

n (void)  fiLe; 

n return0; 

} 


static  i nt 

pipeSeek  (struct  PgpFiLe  *fiLe,  Long  offset,  int  whence) 

{ 

a (void)  fiLe; 

n (void)  offset; 

n (void)  whence; 

a return  PGPERR_FILE_BADOP; 

} 

static  int 

pipeEof  (struct  PgpFiLe  const  *fiLe) 

{ 

n (void)  fiLe; 

n return0; 

> 

static  struct  PgpFiLeError  const  * 
pipeError  (struct  PgpFiLe  const  *fiLe) 

{ 
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n 

struct 

FiLe  *fp  = (struct  FiLe 

*) 

f i L e->p  r i v; 

n 

if  ( f p 

->e  r ro  r ) 

n 

□ 

return  &(fp->err); 

n 

return 

NULL; 

> 

static 

void 

pipeCLearError 

(struct  PgpFiLe  *fiLe) 

n 

struct 

FiLe  *fp  = (struct  FiLe 

*) 

fi Le->priv; 

n fp->error=0; 

> 


static  int 

p i pe W r i t e 2 r e a d (struct  PgpFiLe  *fiLe) 
{ 


n (void)  file; 

n return  PGPERR_FILE_BADOP; 

> 


static  struct  Pg p C f bC o n t e x t * 
pipeCfb  (struct  PgpFiLe  const  *fiLe) 
{ 

n (void)  file; 

n return  NULL; 

> 


struct  PgpFiLe  * 

pg p F i L e P i pe L i n eO pe n (struct  PgpPipeLine  *mod) 


n 

struct  PgpFiLe  *fp; 

D 

struct  FiLe  *ffp; 

n 

i f 

( ! mod  ) 

n 

□ 

return  NULL; 

Q 

f P 

= (struct  PgpFiLe  *)pgpMemALLi 

n 

i f 

( ! f p) 

n 

n 

return  NULL; 

n 

f f p 

= (struct  FiLe  * ) pg pH emA L L o c 

a 

i f 

( ! f f p)  1 

n 

a 

pgpMemFree  (fp); 

a 

a 

return  NULL; 

Q 

} 

n 

memset  (ffp,  0,  sizeof  (*ffp)); 

Q 

memset  (fp,  0,  sizeof  (*fp)); 

□ 

f f p 

->head  = mod; 

□ 

f p- 

>priv  = ffp; 

n 

f p- 

>read  = pipeRead; 

n 

f p- 

>write  = pipeUrite; 

n 

f p- 

>fLush  = pipeFLush; 

Q 

f P- 

>cLose  = pipeCLose; 
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n fp->teLL  = pipeTeLL; 

n fp->seek  = pipeSeek; 

n fp->eof  = pipeEof; 

n fp->error  = pipeError; 

n fp->cLearError  = pipeCLearError; 

n fp->write2read  = pipeWrite2read; 

n fp->cfb  = pipeCfb; 

n returnfp; 

> 


[[CHK:f69709cc66b4e5cdc33 


558 


Pretty  Good  Privacy  5.0^"  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpStr2Key.c 


/* 

* pgpStr2Key.c  --  A prototype  s t r i ng- t o- key  framework. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  p g p S t r 2 K e y . c , V 1.4. 2.1  1997/06/07  09:50:12  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 


#incLude 

# e n d i f 

"config.h" 

#i nc  Lude 

<string.h> 

#incLude 

<stddef.h>n  /*  For 

offsetof()  */ 

/tincLude 

"pgpDebug . h" 

#i nc  Lude 

"pgpStr2Key. h" 

#incLude 

"pgpHash.h" 

^incLude 

" pg  pHem . h " 

#incLude 

"pgpErr. h" 

#i nc  Lude 

"pgpRndom. h" 

#incLude 

" pgpUsua  L s . h " 

/*  Numbe 

r of  chars  to  hash  when 

creating  defauLt 

#d  e f i ne 

SALT_CHARS_DEFAULTn 

n 32768 

*/ 


/*  It  turns  out  that  they  aLL  use  the  same  private  context  structure  */ 
struct  S t r i ngToKey P r i V { 
n struct  PgpEnv  const  *env; 

n struct  PgpHash  const  *hash; 

n byte  bufC13;n  /*  VariabLe-sized  */ 

>; 


/*  And  it  can  be  destroyed  with  a common  routine  */ 
static  void 

s2 kOes t roy ( s t r u c t Pg p S t r i ngToKey  *s2k) 

{ 

n struct  StringToKeyPriv  *priv  = (struct  StringToKeyPriv  *)s2k->priv; 

n memset(priv,  0,  s2k->encodeLen+offsetof(struct  StringToKeyPriv,  buf)); 

n pg pHem F r e e ( p r i V ) ; 

a memset(s2k,  0,  sizeof(*s2k)); 

n pg pMem F r e e ( s 2 k ) ; 

} 


static  struct  PgpSt ri ngToKey  * 

s2kAL LocLstruct  PgpEnv  const  *env,  struct  PgpHash  const  *h,  unsigned  size) 
{ 

n struct  StringToKeyPriv  *priv; 

n struct  Pg p S t r i ngToKey  *s2k  = NULL; 


D 

□ 

a 

□ 

n 

a 

n 

n 


p r i V = 
n 

if  ( p r i 
n 
a 
□ 

□ 

n 


(struct  StringToKeyPriv  *) 

pgpHemALLoc(offsetof(struct  StringToKeyPriv,  buf)  + size); 
v)  { 

s2k  = (struct  PgpSt r i ngToKey  * ) pg pMem A L L o c ( s i z eo f ( *s 2 k ) ) ; 
if  (s2k)  { 

n s2k->priv  = priv; 

n s2k->encoding  = priv->buf; 

n s 2 k->e n c od e L en  = size; 
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Q 

n 

n 

s2k->destroy 

= s2kDestroy; 

n 

n 

n 

priv->env  = 

env; 

n 

□ 

Q 

priv->hash  = 

h; 

n 

n 

n 

p r i v->buf  HID 

= h->type; 

n 

□ 

> 

n 

> 

n 

return 

s 2 k; 

> 


/*  Allocate  an  array  of  "num"  hash  private  buffers,  all  sharing  the  same  hash*/ 
static  void  ** 

mu  1 1 i Ha s h C r ea t e ( s t r u c t PgpHash  const  *h,  unsigned  num) 

{ 


n 

void 

**v  ; 

n 

void 

*p; 

a 

unsi gned  i 

/■  j ; 

n 

byte 

const 

b = 0; 

n 

V = 

(void 

**  ) pgpMemA 1 1 oc ( num  * sizeof(*v)) 

r 

u 

if  ( 

! v) 

Q 

n 

return  NULL; 

n 

for 

( i = 0 

; i < num;  i++)  { 

n 

Q 

P 

= pg pMem A 1 1 0 c ( h-> c 0 n t e X t _ s i z e ) ; 

n 

n 

i f 

( ! p)  { 

n 

n 

n 

while  ( i ) { 

n 

o 

n 

a memset (vC — i D,  0, 

h->cont  ext 

n 

n 

n 

n pgpMemFree(vCiD); 

□ 

n 

n 

} 

n 

o 

n 

pgpMemFree(v); 

n 

n 

n 

return  NULL; 

n 

n 

> 

n 

□ 

h- 

>init(p); 

□ 

n 

/* 

Initialze  the  Pg p H a s h C on t ex t wi 

th  leading 

n 

n 

for  (j  = 0;  j < i;  j++) 

n 

n 

n 

h->update(p,  &b,  1); 

n 

D 

V : i ] = p ; 

n 

> 

n 

return  v; 

> 


_ s i z e ) ; 


nu  I I bytes 


*/ 


/*  Update  an  array  of  hash  private  buffers,  all  sharing  the  same  hash  */ 
static  void 

mu  1 1 i Ha s h U pda t e ( s t r u c t PgpHash  const  *h,  void  * const  *v,  unsigned  num, 
n byte  const  *string,  size_t  len) 

{ 


□ 

n 

> 


while  (num--) 

n h->update(*v++,  string,  len); 


/* 

* Extract  the  final  combined  string  from  an  array  of  hash  private  buffers, 

* then  wipe  and  free  them. 

*/ 

static  void 

mu  1 1 i H a s h F i na  I ( s t r u c t PgpHash  const  *h,  void  **v,  byte  *key,  size_t  klen) 

{ 

n void**v0=v; 
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n unsigned  hsize  = h->hashsize; 


□ 

while 

(kLen  > hsize)  { 

□ 

n 

memcpy(key,  h->f i na L ( *v ) , hsize); 

a 

n 

key  +=  hsize; 

n 

n 

kLen  -=  hsize; 

n 

D 

memset(*v,  0,  h-> c on t e x t _s i z e ) ; 

a 

n 

pgpMemFree(*(v++)); 

n } 

n memcpy(key,  h->finaL(*v),  kLen); 

n memset(*v,  0,  h->context_size); 

n pg pM em F r e e ( * V ) ; 

n pg pMem F r e e ( v0  ) ; 

> 

static  int 

s 2 kS i mp L e ( s t ru c t Pg p S t r i ngToKey  const  *s2k,  char  const  *str, 
n size_t  sLen,  byte  *key,  size_t  kLen) 

{ 

n unsigned  num; 

n struct  S t r i n gTo Key P r i V const  *priv; 

n struct  PgpHash  const  *h; 

n voi d **v ; 

n pg  p A s s e r t ( s 2 k->en  c od  e L e n ==  2); 

n if(!kLen) 

n n return  0;n  /*  Okay,  I guess...  */ 

n priv  = (struct  StringToKeyPriv  *)s2k->priv; 

n h=priv->hash; 

n pgpAs se rt ( h->type  ==  p r i v->bu f C 1 D ) ; 

n num  = ( k L e n- 1 ) / h->ha s h s i z e + 1; 

n V = mu L t i H a s h C r ea t e ( h , num); 

n i f ( ! V ) 

n n return  PGPERR_NOHEM; 

n muLtiHashUpdate  (h,  v,  num,  (byte  const  *)str,  sLen); 

n mu L t i H a s h F i na L ( h , v,  key,  kLen); 

n return0; 

> 


static  int 

s2 kSa L t ed ( s t ru c t Pg p S t r i ngToKey  const  *s2k,  char  const  *str, 
n size_t  sLen,  byte  *key,  size_t  kLen) 

( 

n unsigned  num; 

n struct  StringToKeyPriv  const  *priv; 

n struct  PgpHash  const  *h; 

n void  **v ; 

n pg p A s s e r t ( s 2 k->e n c od e L e n ==  10); 

n if(!kLen) 

n n return  0;n  /*  Okay,  I guess...  */ 
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n priv  = (struct  StringToKeyPriv  *)s2k->pn'v; 

n h = priv->hash; 

D pg p A s s e r t ( h -> t y pe  ==  p r i v->b u f C 1 U ) ; 

n num  = ( k L e n- 1 ) / h -> h a s h s i z e + 1; 

a V = mu L t i H a s h C r e a t e ( h , num); 

n i f ( ! V ) 

o n return  PG P E R R_ NOM E M ; 

n muLtiHashUpdate  (h,  v,  num,  priv->buf+2,  8); 

n muLtiHashUpdate  (h,  v,  num,  (byte  const  *)str,  sLen); 

n muLtiHashFinaL(h,  v,  key,  klen); 

n return0; 

> 


/* 

* The  count  is  stored  as  4.4  bit  normalized  floating-point.  The  high 

* 4 bits  are  the  exponent  (with  a bias  of  6),  and  the  Low  4 bits 

* are  the  mantissa.  0x12  corresponds  to  (16+0x2)  <<  (0x1+6). 

* The  minimum  value  is  (16+0)  <<  (0+6)  = 0x400  = 1024. 

* The  maximum  is  (16+0xf)  <<  (0xf+6)  = 0x3e00000  = 65011712. 

* These  functions  convert  between  the  expanded  count  and  a 

* floating-point  approximation. 

*/ 

#define  EXPBIASn6 
static  word32 
c_ t o_by t e s ( by t e c) 
f 

n return  ((word32)16  + (c  & 15))  <<  ((c  >>  4)  + EXPBIAS); 

} 


static  byte 

by t e s _ t o_ c ( wo r d 32  bytes) 

{ 

n unsigned  c; 

n if  (bytes  <=  (word32)16  <<  EXPBIAS) 

n n return0; 

n if  (bytes  >=  (word32)31  <<  ( 1 5 + EXPBI AS ) ) 

n n return0xff; 

n /*  Normalize  mantissa  to  32. .63  */ 

n c = 0 ; 

n for  (bytes  >>=  EXPBIAS-1;  bytes  >=  64;  bytes  >>=  1) 

n n C++; 

a /*  Round  to  4 bits  by  adding  in  Low-order  bit  */ 

n bytes  +=  (bytes  S 1); 

a /*  Add  exponent  and  mantissa  */ 

n return  ( by t e ) ( ( c<<4  ) + ( ( u n s i g ned  ) by t e s >>  1)); 

> 


static  i nt 

s2 kl t e r Sa L t ( s t r uc t Pg p S t r i ng ToKey  const  *s2k,  char  const  *str. 


n 

{ 

si ze_t 

sLen,  byte  *key,  size_t  klen) 

n 

unsigned  num; 

tt 

struct 

S t r i ngToKey P r i V const  *priv; 

n 

struct 

PgpHash  const  *h; 

□ 

wo  r d3  2 

by t es  ; 

a 

void  ** 

v; 
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n pg p A s s e r t ( s 2 k->en cod e L en  ==  11); 


n if(!klen) 

n n return  0;n  /*  Okay,  I guess...  */ 


n priv  = (struct  S t r i n gTo Key P r i v *)s2k->priv; 

n h=priv->hash; 

n pg p A s s e r t ( h -> t y pe  ==  p r i v->bu f C 1 D ) ; 

n num  = (kLen-1)/h->hashsize  + 1; 

n V = mu L t i H a s h C r ea t e ( h , num); 

n i f ( ! V ) 

n n return  PG PE R R_N0M E M ; 

n /*  Find  the  Length  of  the  material  to  hash  */ 

n bytes  = c _ t o_by t e s ( p r i v->b u f C 1 0 D ) ; 

a /*  Always  hash  a Least  the  whole  passphrase!  */ 

n if  (bytes  < sLen  + 8) 

n n bytes  = ( wo rd32 ) ( s L en  + 8); 


n /*  Hash  Len  bytes  of  (salt,  passphrase)  repeated...  */ 


n 

w h 

ile  (bytes  > sLen  + 8) 

{ 

n 

B 

muLtiHashUpdate 

(h. 

V, 

num. 

priv->buf+2,  8); 

Q 

B 

multiHashUpdate 

(h. 

V, 

num. 

(byte  const  *)str. 

n 

B 

bytes  -=  sLen  + 

8; 

n 

> 

n 

if 

(bytes  <=  8)  { 

n 

B 

multi HashUpdate 

(h. 

V, 

num. 

priv->buf+2,  (size 

n 

> 

else  { 

n 

B 

multi HashUpdate 

(h. 

V, 

num. 

priv->buf+2,  8); 

n 

B 

multi HashUpdate 

(h. 

V, 

num. 

(byte  const  *)str. 

n 

B 

n Q 

( s 

i z e_ 

t )bytes-8)  ; 

B 

> 

B 

mu L t i H a s h F i n a L ( h , v,  key 

, k L en ) 

s L e n ) ; 


t)  bytes); 


n return0; 

} 


/*  Encoded  as  \000  + hash  specifier  */ 
struct  PgpS t r i ngToKey  * 

pgpS2Ks i mp L e ( s t r u c t PgpEnv  const  *env,  struct  PgpHash  const  *h) 

{ 

n struct  Pg p S t r i ngToKey  *s2k; 

n byte  *buff; 

n s2k  = s 2 k A L L o c ( en V , h,  2); 

n if  (s2k)  { 

n n s 2 k->s t r i ngToKey  = s2kSimpLe; 

n n buff  = ((struct  S t r i ngToKey P r i v * ) s 2 k->p r i v ) ->bu f ; 

n n buffC0D=0; 

n > 

n return  s2k; 

} 


/*  Encoded  as  \001  + hash  specifier  + salt8  */ 
struct  PgpS t r i ngToKey  * 

pgpS 2 Ksa L t ed ( s t r u c t PgpEnv  const  *env,  struct  PgpHash  const  *h, 
n byte  const  *salt8) 

{ 
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o struct  PgpStn'ngToKey  *s2k; 

n byte  *buff; 


□ 

□ 

□ 

a 

□ 

n 

a 

n 

} 


s2k  = s 2 k A L L o c ( e n V , h,  10); 
if  (s2k)  f 

n s2k->stringToKey  = s2kSaLted; 

n buff  = ((struct  S t r i ng To  Key P r i v * ) s 2 k->p r i v ) ->bu f ; 

n buffCO]  = 1; 

n mem c p y ( bu f f +2 , saLtS,  8); 

> 

return  s2k; 


/*  Encoded  as  \003  + hash  specifier  + saLtS  + (compressed)  count  */ 
static  struct  Pg p S t r i n g To  Key  * 

pg pS2Ki t e r i n t e r n ( s t r u c t PgpEnv  const  *env,  struct  PgpHash  const  *h, 
° n byte  const  *saLt8,  byte  c) 

{ 


□ 

struct 

PgpStringToKey  *s2k; 

Q 

byte  *buff; 

n 

s 2 k = 

s 2 k A L 1 o c ( e n V , h,  11); 

□ 

if  (s2k)  { 

a 

n 

s2 k->s t r i ngToKey  = s2kIterSaLt 

n 

n 

buff  = ((struct  S t r i n g ToKey P r i 

□ 

n 

buffC0:  = 3; 

□ 

n 

memcpy (buf f+2,  salt8,  8); 

a 

n 

buffC10:  = c; 

n 

> 

a 

return 

s2  k; 

} 


*)s2k->priv)->buf; 


struct  PgpS t r i ngToKey  * 

pgpS 2 Ki  t e r sa L t ( s t r u c t PgpEnv  const  *env,  struct  PgpHash  const  *h, 
n byte  const  *saLt8,  word32  bytes) 

{ 

a return  pgpS2Kiterintern(env,  h,  saLt8,  bytes_to_c(bytes)); 

> 


/* 

* Returns  either  an  error  <0  or  the  Length  >=0  of  the  encoded 

* string2key  data  found  in  the  buffer.  If  s2k  is  non-NULL,  a 

* structure  is  allocated  and  returned. 


*/ 
i n t 

pg p S 2 Kd e c ode ( s t r u c t PgpSt r i ngToKey  **s2kp,  struct  PgpEnv  const  *env, 
n byte  const  *buff,  size_t  Len) 

( 

n struct  PgpHash  const  *h; 

n int  prefix; 

a i f ( ! I en ) 

a n return  PGPERR_BAD_STRING2KEY; 

n if  (buffC0:  > 3 II  buffC0:  ==  2) 

n n return  PG P E R R_U N K_ S T R I N G 2 KE Y ; 

n if(Len<2) 

n n return  PG P E R R_B A D_ S T R I N G 2 K E Y ; 

n h = pg p H a s h By N umb e r ( b u f f C 1 D ) ; 

n i f ( 1 h) 
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n 

n 

n 

n 

n 

n 

n 

n 

n 

u 

n 

□ 

n 

□ 

n 

n 

a 

n 

a 

□ 

n 

n 

n 

a 

> 


return  PG P E R R_B A D_H A S H N UM ; 

(buffCO:)  { 

0: 

if  (!s2kp  II  (*s2kp  = pgpS2Ks i mp L e ( env,  h))  !=  0) 

n return2; 

break; 

1 : 

if  (Len  < 10) 

n return  PG P E R R_B AD_ST R I NG2 KE Y ; 

if  (!s2kp  II  (*s2kp  = pg p S 2 Ks a 1 1 ed ( e n v , h,  buff  + 2))  ! = 
n return10; 

break; 
case  3 : 

prefix  = 11; 
if  (Len  < 11) 

n return  PGPERR_BAD_STRING2KEY; 

if  (!s2kp  II  (*s2kp  = pg p S 2 K i t e r i n t e r n ( e n v , h,  buff+2, 
n n n n buffC10D)) 

!=  0) 

n returnll; 

break; 


a 

switch 

case 

□ 

n 

o 

case 

□ 

□ 

a 

□ 

□ 


0) 


/*  Tried  to  allocate  and  failed  */ 
return  PGPERR_NOMEM; 


/* 

* Return  the  default  StringToKey  based  on  the  setting  in  the 

* environment.  This  is  expected  to  be  the  usual  way  to  get 

* such  structures. 

*/ 

struct  PgpSt r i ngToKey  * 

pgpS 2Kde f a u L t ( s t r u c t PgpEnv  const  *env,  struct  Pgp Ra ndomC on t e x t const  *rc) 

{ 
n 

a 

n 
n 
n 
> 

/* 

* Return  the  default  StringToKey  for  PGP  version  2.X 
*/ 

struct  PgpSt ri ngToKey  * 

pg  p S 2 Kde  f a u L t \/2  ( s t r u c t PgpEnv  const  *env,  struct  Pg  pRa  nd  omC  o n t e x t const  *rc) 
{ 

n /*  Kludge  for  now  */ 

n (void)rc; 

n return  pg  p S 2 Ks  i mp  I e ( en  v , pg  pHa  s h By  N umbe  r ( PG  P_  H A S H _f1  D 5 ) ) ; 

> 


byte  saltCSD; 
pgpAssert  (rc); 

pg p Ra n domG e t By t e s ( r c , salt,  s i zeof ( sa L t ) ) ; 

return  pg p S 2 Ki t e r sa L t ( e n v , pg p H a s hBy N umbe r ( PG P_H A S H _S H A ) , 
n salt,  SA LT_CHARS_DE FAULT); 


/*  Returns  1 if  this  is  simpLe/md5,  0 otherwise  */ 
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int  p g p S 2 Ki s 0 I d Ve r s (struct  PgpS t r i ngToKey  const  *s2k) 
{ 

n byte  const  *ptr; 

n if  ( s 2 k->en code L en  !=  2) 

n n returnO; 

n ptr  = s2k->encoding; 

n if  (ptr[0]  ==  0 SS  ptrCID  ==  PG P_ H A S H _H D 5 ) 

n n returni; 

n return0; 

> 
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/* 

* pgpStr2Key.h  --  A PGP  String  to  Key  Conversion  System 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pg p S t r 2Key . h , V 1.4. 2.1  1 997/06/07  09:50:1  3 mhw  Exp  $ 

*/ 

#ifndef  PGPSTR2KEY_H 
#define  PGPSTR2KEY_H 

#incLude  "pgpUsuaLs.h"n  /*  For  byte  */ 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 


struct  PgpEnv; 

Sifndef  TYPE_PGPENV 

#define  TYPE_PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#e nd i f 

struct  Pg  p Ra  nd  omC  o n t e X t ; 

#ifndef  T YP E_PG PR AN DOMC ONT E XT 
#define  TYPE_PGPRANDOMCONTEXT  1 

typedef  struct  Pg p R a n domCon t ex t Pgp Ra ndomCo n t e x t ; 
#end  i f 


struct  PgpHash; 

#ifndef  TYPE_PGPHASH 
#define  TYPE_PGPHASH  1 
typedef  struct  PgpHash  PgpHash; 
#e n d i f 


struct 

n 

Q 

□ 

n 

n 

n 

>; 


PgpStringToKey  { 
void  *priv; 

byte  const  *encoding;n  /*  For  transmission  */ 
unsigned  encodelen; 

void  (*destroy)  (struct  PgpStringToKey  *s2k); 

int  ( *s t r i ngToKey ) (struct  PgpStringToKey  const  *s2k,  char 

n n size_t  sLen,  byte  *key,  size_t  kLen); 


#ifndef  T Y P E_PG P S T R I NGTOKE Y 
#define  T Y P E_PG P S T R I NGTOKE Y 1 

typedef  struct  PgpStringToKey  PgpStringToKey; 
#end i f 


const 


*st  r. 


/*  Deallocate  the  structure  */ 

^define  pg pS 2 Kd e s t r oy ( s 2 k ) ( s 2 k ) ->d e s t r oy ( s 2 k ) 

/*  Turn  a string  into  a key  */ 

#define  pgpStringToKey(s2k,s,sl,k,kl)  (s2k)->stringToKey(s2k,s,sl,k,kl) 

/* 

* Decodes  a byte  string  into  a PgpStringToKey  object.  Returns  either  an 

* error  <0  or  the  length  >=0  of  the  encoded  string2key  data  found  in 

* the  buffer.  If  s2k  is  non-NULL,  a structure  is  allocated  and 

* returned. 
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*/ 

int  PGPExport  pgpS2Kdecode  (struct  Pg p S t r i ngTo Ke y **s2k, 
n struct  PgpEnv  const  *env,  byte  const  *buf,  size_t  Len); 

/* 

* Returns  the  default  Pg p S t r i n gT oKey  based  on  the  setting  in  the 

* environment.  This  is  expected  to  be  the  usual  way  to  get  such 

* structures. 

*/ 

struct  Pg p S t r i n g ToKey  PGPExport  *pg p S 2 Kd e f a u 1 1 (struct  PgpEnv  const  *env, 
n n n n structPgpRandomContextconst*rc); 

/* 

* Return  old  default  Pg p S t r i ng T o Key  compatible  with  PGP  V2  */ 

struct  Pg pS t r i ngToKey  PGPExport  * pg p S 2 Kd e f a u 1 1 V 2 ( s t r u c t PgpEnv  const  *env, 

“ o n n n struct  Pg p Ra nd omC on t e x t const  *rc); 

int  PGPExport  pgpS2Kis0ldVers  (struct  PgpStringToKey  const  *s2k); 


/* 

* Specific  PgpStringToKey  creation  functions.  Use  these  functions  to 

* specifically  request  a certain  string  to  key  algorithm. 

*/ 

struct  PgpStringToKey  PGPExport  *pg p S 2 Ks i mp  I e (struct  PgpEnv  const  *env, 

n B n n structPgpHashconst*h); 

struct  PgpStringToKey  PGPExport  * pg p S 2 Ks a 1 1 ed  (struct  PgpEnv  const  *env, 

B B n n struct  PgpHash  const  *h, 

B B n n byte  const  *salt8); 

struct  PgpStringToKey  PGPExport  *pg p S 2 K i t e r sa I t (struct  PgpEnv  const  *env, 
B B n n struct  PgpHash  const  *h, 

B B n n byte  const  *salt8, 

B B n n word32  bytes); 

/* 

* The  PgpStringToKey  objects  are  encoded  using  the  follow  table: 


★ 

* typeBB  numberB  s2k  arguments 

*  hb  B 

* simpleB  \000B  hash  specifier 

* saltedB  \001b  hash  specifier  + salt8 

* itersaltB  \003b  hash  specifier  + salt8  + (compressed)  count 

* 

*/ 


#ifdef cplusplus 

} 

#endi  f 

#endif  /*  PGPSTR2KEY_H  */ 
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/* 

* 

★ 

★ 

it 

* 


pgpTimeDate.c  — conversions  between  a word32  timestamp  and  year, 

month,  day,  and  time.  A bunch  of  convenience  functions. 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 


* $Id:  pgpTimeDate . c,v  1.4. 2. 2 1997/06/07  09:50:13  mhw  Exp  $ 
*/ 


#ifdef  HAVE_CONFIG_H 


ttincLude 

" c 0 n f i g . h " 

Send  i f 

Sine  Lude 

<stdi 0 . h> 

SincLude 

<t i me . h> 

S i nc  L ude 

"pgpTimeDate. h 

SincLude 

"pgpUsua  Ls . h" 

SincLude 

"pgpTypes . h" 

SincLude 

" pgpMem . h " 

static  BooLeann  o f f s e t s C ompu t ed  = FALSE; 
/* 

* Offset  in  seconds  from  UTC 
*/ 

stati c Longn  n tzDi f f ; 


/* 

* Compute  LocaL  time_t  representation  of 

* Midnight  Jan  1 1970  LocaL  time. 

*/ 

static  time_tn  stdEpochLocaL; 

n static  void 

pgpComputeOffsets(void) 

{ 


n 

static 

struct  tmn 

stdEpochSt ruct  = { 0,  0,  0,  1, 

n 

t i me_t  n 

n 

0 

n testTime  = 10000000; 

Q 

struct 

tm  *n 

0 

n ut  cTi me; 

n 

struct 

tmn 

0 

n timeStruct; 

n 

n 

if  ( ! 0 f f s e t s C ompu t ed ) 

n 

{ 

□ 

H 

stdEpochLoca  L 

= mktimeC&stdEpochStruct); 

n 

n 

n 

0 

ut  cTi me 

= gmt  i me ( &t es t T i me  ) ; 

n 

0 

if  ( ut  cTi me  = = 

NULL) 

n 

0 

i 

□ 

0 

0 

/* 

□ 

o 

0 

* Time  zone  information  not  avaiLabL 

n 

0 

0 

* so 

just  pretend  we're  in  UTC. 

n 

0 

0 

*/ 

D 

0 

0 

tzDi f f 

= 0; 

D 

0 

> 

n 

0 

else 

n 

0 

i 

n 

0 

0 

pg pC opy Memo r y ( u t c T i me , &timeStruct,  s 

Ci:CHK:6629ee1bb45660eec58ff6657777ffbfaa4c2e7effcebb53b342e582c684e7f83]] 


Pretty  Good  Privacy  5.0’^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


569 


pgpTimeDate.c 


° “ H tzDiff=testTime-mktimeCStimeStruct); 

n n > 

o n offsetsComputed=TRUE; 

n > 

> 

n stat  i c t i tne_t 

pgpStdEpochLocaL(void) 

{ 

a pg pCompu t eOf f se t s ( ) ; 

a return  s t d E po c h Lo c a L ; 

} 

a static  time_t 

pgpStdEpoch(void) 

a pg p C omp u t e 0 f f s e t s ( ) ; 

a return  stdEpochLocaL  + tzDiff; 

> 

a static  Long 

pgpTZDi f f (voi d) 

{ 

a pgpComputeOffsetsC); 

a return  tzDiff; 

} 

a t i me_t 

pgp  F romPGPT i me ( 

a PGPTimean  n theTime) 

{ 

a return  theTime  + pg p S t d E po c h ( ) ; 

> 

a PGPTi me 

pgpT  oPGPTi me ( 
a t i me_tB  n 

{ 

a return  theTime 

> 

a PGPTi me 

pgpGetTi me ( voi d ) 

t 

a return  pgpToPGPTime(time((time_t  *)  NULL)); 

> 

a structtm* 

pgpLoca  LTi meC 

a PGPTime  const  *atheTime) 

{ 

a time_tB  n stdTime  = pg p F r omPG PT i me C * t h eT i me ) ; 

n 

a return  LocaLtimeC&stdTime); 

} 

a char* 

pgpCTi me  ( 
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n PGPTime  const  *ntheTime) 

{ 

n time_tn  n stdTime  = pg p F romPG PT i me ( * t heT i me ) ; 

n 

n return  c t i me ( &s t dT i me  ) ; 

> 

#if  MACINTOSHn  /*  C */ 

/* 

* Number  of  seconds  between  Midnight  Jan  1,  1904  (Mac  time  base) 

* and  Midnight  Jan  1,  1970  CUn*x  time  base) 

*/ 

//define  kMa  c T i me  D i f f n 2082844800 

n u L o n g 

pgpTimeToMacTimeCPGPTime  theTime) 

{ 

n return  theTime  + kMacTimeDiff  + pgpTZDiffC); 

> 

n PGPTime 

pgpTimeFromMacTimeCuLong  theTime) 

{ 

n return  theTime  - kMacTimeDiff  - pgpTZDiff(); 

} 

//endifn  /*  1 MACINTOSH  */ 

/*  System  clock  must  be  broken  if  it  isn't  past  this  date:  */ 

//define  REASON ABLE_DATE  ((unsigned  Long)  0x27804180L)  /*  91  Jan  01  00:00:00  */ 

/* 

* Convert  a y e a r-mon t h -da y to  a number  of  days  since  Jan  1,  1970 

* Month  and  day  are  1-based. 

* 

* To  compute  the  day  of  the  week,  note  that  Jan  1,  1970  is  a Thursday. 

*/ 

unsigned 

pgpDa t e F romYMD  (int  y,  int  m,  int  d) 

{ 

n unsigned  t; 

n static  const  unsigned  startdayC123  = ( 

n n 0,  31,  59,  90,  120,  151,  181,  212,  243,  273,  304,  334  >; 

n /*n  JFMA  H J J A S 0 N D*/ 

n /*  Number  of  4-years  since  1968  */ 

n t = (y  - 1968)74; 

n /*  Number  of  days  in  the  4-years  */ 

n t *=  365*4+1; 

n /*  Add  days  in  years  since  */ 

n t +=  365  * (yZA); 

n /*  Add  Leap  day  unless  before  march  in  year  0 of  cycle  */ 

n if(y%4!=0||m>2) 

n n t + + ; 

n /*  Adjust  to  1970  base  */ 

n t -=  365*2+1; 

n /*  Add  month  and  day  offset  */ 
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n t +=  sta rtdayCm-1 3 + d-1 ; 

n returnt; 

} 


/* 

* Given  timestamp  as  days  elapsed  since  1970  Jan  1, 

* returns  year  (1970-2106),  month  (1-12),  and  day  (1-31). 

* Not  valid  for  dates  after  2100  Feb  28  (no  leap  day  that  year). 

*/ 

void 

pgpDateToYMD  (unsigned  days,  int  *year,  int  *month,  int  *day) 

{ 

n i nt  y,  m; 

n static  const  unsigned  mdaysC123  =a  /*  H a r c h . . F e b r ua r y */ 

° n (31 ,30,31 ,30,31 ,31 ,30,31 ,30,31 ,31 ,29>; 

n days  +=  36 5+36 5-3 1 -2 8 ; n /*  Days  since  Fri  1 Mar  1968  */ 

n /*  Locate  to  within  a leap-year  cycle  */ 

a y=days/1461; 

n days%=1461; 

n y *=  4; 

n /*  Find  the  year  within  the  cycle  */ 

n if(days>=  730 ) ( 

n n y +=  2; 

n n day s -=  730 ; 

n > 

n if  (days>=365)  ( 

n n y++; 

n n days-=365; 

n > 

n *yea  r = y ; 


° /*  days  is  now  in  the  range  C0..3653  */ 

n /*  Compute  month,  based  on  Harch=0  */ 

n m = 0 ; 

a while  (days  >=  mdaysCm]) 

a a days  -=  mdaysCm++]; 

a /*  Now,  fix  the  month  so  March  = 2,  with  carry  into  the  year  */ 

a m + = 2 ; 

a if  (m  >=  12)  (a  /*  January  or  February  of  the  next  year  */ 

a n m -=  12; 

a n y + +; 

a > 

a /*  Save  the  final  (1-based)  results  */ 

a *year=y+1968; 

a *mont  h = m+1 ; 

a *day  = days+1 ; 

} 

wo  rd32 

pgpTimeStamp  (int  tzFix) 

{ 
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n return  ( wo rd32 ) ( pgpGetTi me ( ) + (60  * 60  * tzFix)); 

> 

/*  XXX:  The  routine  below  fails  on  Mac's  when  the  timezone  isn't  set  */ 

#if  0n  /*  [ */ 

/* 

* It's  a bit  annoying  that  we  have  to  go  through  these  shenanigans 

* to  get  seconds  since  Jan  1,  1970  0:00:00  GMT  (okay,  okay,  UTC), 

* when  timeC)  on  half  the  platforms  in  the  world  returns  this  value 

* already,  but  some  platforms  (e.g.  Microsoft  C,  version  7.0  - but 

* not  earlier  versions!)  return  different  values. 

* 

* So  this  uses  the  ANSI  C functions.  tm_yday  could  be  used  to  reduce  the 

* work,  but  this  is  hardly  a t i me- c r i t i c a I function  and  tm_yday  is 

* infrequently  used,  so  it  might  be  buggy. 

* 

* ANSI  allows  the  timeC)  and  gmtimeO  to  fail,  so  this  returns  0 in  that 

* case. 

*/ 

wo  rd32 

pgpTimeStamp  (int  tzFix) 

{ 

n time_t  const  t = time((time_t  *)0); 

n struct  tm  const  *g; 

n unsigned  days; 

n if  (t  ==  (time_t)-1) 

n n return0; 

n g = gmtime(&t); 

n i f ( ! g ) 

n n return0; 

a /*  tm_year  is  1900-based,  tm_mon  is  0-based,  tm_day  is  1-based  */ 

n /*  Some  systems  do  tm_year  oddly,  though...  */ 

n days  = pg p Da t e F r om YH D ( g-> t m_y ea r + (g->tm_year  > 1900  ? 0 : 1900), 

n g->tm_mon+1,  g -> t m_mda y ) ; 

n return  g->tm_sec+60*(g->tm_min+60*(g->tm_hour+tzFix+24*(word32)days)); 

} 

#endifn  /*  J 0 */ 

/* 

* Create  a date  string,  given  a 32-bit  timestamp.  Returns  characters 

* printed.  Format:  "yyyy-mm-dd" 

* 1234567890 

* This  format  is  specified  by  some  international  ISO  standard,  but  I 

* forget  which  one. 

*/ 

int 

pg p D a t e S t r i ng  (word32  tstamp,  char  bu f C PG P D AT E ST R I NG LE N + 1 D ) 

{ 


□ 

int 

month,  day,  year; 

D 

i f 

(tstamp  ==  0)  { 

n 

n 

memset  (buf , ' ' , 

n 

n 

bufC10]  = '\0'; 

n 

n 

return  10; 

n 

> 
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n pgpDateToYMD((unsigned)(tstamp/86400),  Syear,  amonth,  8day); 

n sprintf  (buf,  "%4d-%02d-%02d",  year,  month,  day); 

n return  PGPDATESTRINGLEN; 

> 

/* 

* Create  a "date  and  time"  string,  given  a 32-bit  timestamp. 

* Returns  number  of  characters  printed. 

* Format:  "yyyy-mm-dd  hh:mm  GMT" 

* 12345678901234567890 
*/ 

i nt 

pgpTi meSt ri ng  (word32  tstamp,  char  bu f [ PG PT I M E ST R I N G L E N + 1 : ) 

{ 

a unsigned  min; 

n pgpOateString  Ctstamp,  buf); 

n tstamp  /=  60;n  /*  Minutes  since  00:00  Jan  1,  1970  */ 

n min  = (unsigned)(tstamp  X 1440)  ;n  /*  Minutes  since  0:00  today  */ 

a sprintf  ( b u f + PG P D AT E ST R I N G LE N , " %02d:%02d  GMT",  min/60,  min%60); 

n return  PGPTIMESTRINGLEN; 

} 

#ifdef  TESTMAIN 
^include  <stdLib.h> 


i n t 

main(void) 

{ 

n unsigned  i,  t; 

n inty,m,d; 


□ 

pu  t s ( " 

starting 

test. . . " 

); 

n 

for  ( i 

= 0 ; i < 

65535; 

i ++ ) 

{ 

n 

n 

i f C i % 

1000  == 

0) 

Q 

n 

a 

p r i n t f ( 

" Z 5 u \ r " , 

n 

n 

pgpDateToYMDCi, 

ay. 

am. 

n 

n 

t = pg p Da t e F romYMD ( y 

, m. 

Q 

n 

if  (i  ! 

= t)  { 

□ 

n 

n 

p r i n t f ( 

" \ n i 

= Zu 

n 

□ 

□ 

n 

i , t 

, y. 

n 

n 

> 

n 

> 

n 

pu  t s ( " 

\nDone!") 

/ 

n 

return 

0; 

> 


i > ; 
ad); 

d); 

!=  t = %u  y/m/d  = %04d  / %02 d / Z 02 d \ n " , 
m,  d ) ; 


#endi f 
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pg pT i me  Da t e . h --  functions  to  convert  between  a word32  timestamp  and 
various  time  and  date  values  CuncLuding  ISO  string 
represenations. 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
$Id:  p g pT i me D a t e . h , V 1.4. 2.1  1997/06/07  09:50:1  4 mhw  Exp  $ 

*/ 


/tifndef  PGPTIMEDATE.H 
ttdefine  PGPTIMEDATE.H 

#incLude  <time.h> 

#incLude  "pgpUsuaLs.h" 
#incLude  "pgpTypes.h" 

#ifdef  ..cpLuspLus 

extern  "C"  { 

# e n d i f 

typedef  word32n  PGPTime 

r 

time.t  PGPExportn 

n 

pgpFromPGPTime(PGPTime 

theTime); 

PGPTime  PGPExportn 

D 

pg pToPG PT i me ( t i me. t theTime); 

PGPTime  PGPExportn 

D 

pgpGetTime(void); 

struct  tm  PGPExport  *n 

pg p Lo c a L T i me ( PG PT i me  const  *theTime); 

char  PGPExport  *n 

n 

pg pCT i me ( PGPT i me  const 

*theTime); 

#if  HACINTOSHn  /*  [ */ 

uLong  PGPExportnn  n 

PGPTime  PGPExportn  n 

#endifn  /*  ] MACINTOSH  */ 

/*  Convert  between  number  of  days  since  1970  Jan  1 and  y ea r /mon t h / da y */ 
unsigned  PGPExport  pg p Da t e F r om YH D (int  y,  int  m,  int  d); 

void  PGPExport  pgpDateToYMD  (unsigned  days,  int  *year,  int  *month,  int  *day); 
/* 

* Return  the  current  timestamp.  tzFix  is  +/-  #hours  to  off  from  GMT 

* if  LocaL  conversions  don't  work  properly.  (c.f.  TZFIX 

* configuration  variable) 

*/ 

word32  PGPExport  pgpTimeStamp  (int  tzFix); 

/*  Create  strings  for  the  Date  or  T i me-a nd-da t e */ 

^define  PG P D AT E S TR I N G LEN  10 

int  PGPExport  pg p Da t e S t r i ng  (word32  tstamp,  char  bu f C PG PD  AT E ST R I NG LE N + 1 3 ) ; 
^define  PGPT I M E ST R I NG LE N 20 

int  PGPExport  pg pT i me S t r i ng  (word32  tstamp,  char  bu f C PG PT I M E S TR I NG LE N + 1 3 ) ; 

#ifdef  cpLuspLus 

> 

^ e n d i f 

//endif  /*  PGPTIMEDATE.H  */ 

CCCHK: 6522531 244a5500911c7dd778002cddeb277a0559f448bb844ccca06627ae42dc3 3 
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/* 

* pgpTypes.h  --  Basic  type  definitions 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpTypes.h, V 1.6. 2.1  1997/06/07  09:50:14  mhw  Exp  $ 

*/ 

#ifndef  PGPTYPES_Hn  a /*  L */ 

#define  PGPTYPES_H 

#if  MACINTOSH 
#incLude  < sy s / t y pe s . h> 

# e n d i f 


ttif  !HAVE_UCHAR 

typedef  unsigned  charn  uchar; 

# e n d i f 

#if  !HAVE_USHORT 

typedef  unsigned  shortn  ushort; 
#end  i f 


#if  !HAVE_UINT 

typedef  unsigned  intn  uint; 
# e n d i f 


#if  !HAVE_ULONG 

typedef  unsigned  Longn  uLong; 
#end  i f 


typedef  charn 


n n VoidALign; 


#if  ! MACINTOSH 

typedef  ucharn  n n Boolean; 

# e n d i f 

#ifndef  TRUE 
#def i ne  TRUEn  1 

# e n d i f 

#ifndef  FALSE 
#define  FALSEn  0 
#end i f 

/*  Lookie  here!  An  AN S I - c omp L i a n t alignment  finder!  */ 

#ifndef  n aLignof 

#define  n aLignof(type)  (sizeofCstructCtype  _x ; char  _y;>)  - sizeof(type)) 
#end  i f 

#endif  /*  : PGPTYPES.H  */ 

/* 

* LocaL  Variables: 

* tab-width:  4 

* End  : 

* vi : ts=4  sw=4 

* vim:  si 
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*/ 
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U 

# L i b/pg p/ i n c L ude /Ma ke f i L e . i n 
If 

ft  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

tt  $Id:  Makef  i Le . i n,v  1.1  5.2.6  1 997/06/07  09:50:1  7 mhw  Exp  $ 

n 

SHAREDHDRS=  pg p Ann o t a t e . h pgpConvKey.h  pgpErr.h  pgpMsg.h  pgpUI.h  pgpUsuaLs.h 
PRIVHDRS=  pgpKLudge.h  pgpPktByte.h 
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n 

M L i b/ pgp / i n c I ude /ma ke f i L e . ms c 

U 

ft  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

n $Id:  makef i Le.msc,v  1.4. 2. 2 1997/06/07  09:50:17  mhw  Exp  $ 

ft 

PGPLIB=n. .\. .\pgpLib. Lib 

CFLAGS  = -I . . \ \ . \i nc Lude  - 1 . . \ . . \ i n c L ud e \ 
a -I..\..\..  -DHAVE_C0NFIG_H=1  $(DEBUG) 

aLL::n  n Lib 

headers:n  incL 

MncLude  "makefiLe.in" 

i n c L : 

n if  not  ”$(SHAREDHDRS)"==""  \ 

a n for  %f  in  ( $ ( S H A R E D H D RS ) ) do  copy  %f  . . \ \ \ i nc L ude 

n if  not  "$CPRIVHDRS)"==""  \ 

a a for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L ud e 

D0S0BJSX  = n $ ( OB J S : . o= . ob j ) 

D0S0BJS=n  $ ( DOSOB J SX : Uni x=Wi n32 ) 

Lib:n  SCDOSOBJS) 


. c . ob j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 

c L ea n : 

n deL*.obj 

DONE  : 

n if  exist  $(PGPLIB)  L i b / o u t : $ ( PG P L I B ) SCPGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P LI B ) SCDOSOBJS) 
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/* 

* pgpAnnotate.h  — This  is  the  List  of  known  annotations.  Each 

* annotation  has  its  own  number,  to  make  it  unique. 

* In  addition,  this  List  reaLLy  shouLd  not  change  too 

* muchovertime. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r L o r doDM  I T . E D U>  and  CoLin  PLumb 

* 

* This  is  a PubLic  API  Function  Header. 

★ 

* $Id:  pgpAnnotate . h,v  1.7. 2.1  1 997/06/07  09:50:1  8 mhw  Exp  $ 

*/ 

#ifndef  PGPANNOTATE.H 
^define  PGPANNOTATE.H 

#ifdef  ..cpLuspLus 
extern  "C"  { 

#end i f 

/*  Convert  a scope  type  (via  a begin)  to  a string  */ 
const  char  PGPExport  *pgpS copeName  (int  type); 

/*  NOTE:  Begin  scope  always  ends  in  0x00,  End  scope  always  ends  in  0x01  */ 
#define  PG P. I S.S C OP E.M AR KE R ( x ) n (((x)  S 0xfe)  ==  0x00) 

^define  PG P. I S . E N D. S C 0 P E ( x ) n n (((x)  & 0xff)  ==  0x01) 

#define  PG P. I S.B EG  I N.S CO P E ( x ) n (((x)  & 0xff)  ==  0x00) 

/* 

* Given  an  annotation  type,  update  the  current  scope  depth  accordingly. 

* Can  be  foLLowed  with  "pgpAssertCdepth  !=  -1)". 

*/ 

#define  PG P. S C OPE. D E PTH.U P D AT E C d e p t h , x ) \ 
n if  (PGP. IS. SCOPE. MARKERCx)  ) \ 

° “ (depth)  +=  PGP.IS_BEGIN.SCOPE(x)  ? 1 : -1 

/*  Commit  to  sending  the  current  packet:  e.g.,  request  a caLLback!  */ 
^define  PG P AN N. COMM  I Tn  n n 0x002 

/* 

* There  are  four  possible  pa c ke t -e n d e d- t oo-e a r L y cases,  based  on 

* two  binary  options.  The  first  binary  option  is  whether  the 

* end  is  caused  by  EOF  or  a short  packet  Length.  (E.g.  an 

* encrypted  packet  that  does  not  at  Least  contain  an  IV.) 

* These  are  caLLed  the  .TRUNCATED  and  .SHORT  cases,  respectively. 

* The  second  is  whether  the  problem  applies  to  the  current  scope 

* or  not.  I.e.  is  it  at  the  current  parsing  LeveL,  or  one  LeveL 

* down?  These  are  marked  as  .SCOPE,  and  .PACKET.,  respectively. 

*/ 

#define  PG P AN N. P A C KET.T RU N C AT E Dnn  0x010 

#define  PG P A N N. P A C K ET. S H 0 RTn  n 0x011 

#define  PG P AN N.S C 0 P E.TR U N C AT E D n n 0x012 

#define  PG P AN N. S C 0 P E. S H 0 RTn  n 0x013 

/*  A signature  is  too  damn  big  to  pass  as  an  annotation  */ 

#define  PG P A N N. S I G N ATU R E.TOO.B I Gn  0x020 

/*  An  encrypted  session  key  is  too  damn  big  */ 
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#define  PG P AN N_ E S K_T 00_B I Gn  n 0x021 


/*  For  a FiLeUrite  module:  start  a new  file.  */ 
#define  PGPANN_NEWFILE_STARTn  n 0x030 


/*  Memory  buffer  output  module; 
^define  PG P AN N_M EM_BU F S I Z En 
^define  PG P AN N_M EM_B YT E C 0 U NTn 
#define  PGPANN_MEH_ENABLEn 


size  of  buffer, 
a □ 

n 0x41 

n n 


bytes  requested  to  write  */ 
0x40 

0x42 


/*  Status  requests  of  the  ascii  armor  parser  */ 
^define  PG P AN N_ P A R S E A S C_H S G_ C OU NTn  0x050 

ttdefine  PGPANN_PARS  E ASC_MSG_LE  FTn  0x051 

#define  PG P ANN_P A R S E A S C_H S G_ C U R R ENTn  0x052 

#define  PG P AN N_P A R S E A S C _M SG_ P A RT S n 0x053 

#define  PG P AN N_P AR S E AS C _H SG_P A RT I N F On  0x054 


/*  Parser  Callbacks  */ 

#define  PG P AN N _P A R S E R_ E AT  I Tn  n 0x102 

//define  PG  P AN  N_P  A R S E R_P  AS  ST  H ROUG  H n 0x103 

#define  PG P ANN_ P A R S E R_PRO C E S S n n 0x104 

//define  PG  P ANN_P  A R S E R_  R E C U R S En  n 0x105 


/*  Unrecognized  packet  type  (EATIT, 
//define  PGPANN_UNKNOWN_BEGI  Nn  n 
//define  PG  P ANN_U  N KNO  WN_  E N Dn  n 

/*  Literal  Packet  information  */ 
//define  PG  P AN  N_  LI  T E R A L_B  EG  I Nn  n 

//define  PG  P AN  N_  LI  T E R A L_  E N Dn  n 

//define  PGP  AN  N_  L I T E R A L_T  Y P En  n 

//define  PGPANN_LITERAL_NAHEn  n 

//define  PG  P ANN_L  I T E R A L_T  I H E ST  AHPn 


PASSTHROUGH,  PROCESS  options  only)  */ 
0x200 
0x201 


0x300 

0x301 

0x302 

0x303 

0x304 


/*  Cipher  Packet  Information  */ 
//define  PGPANN_CIPHER_BEGINn  n 

//define  PG  P ANN_  C I P H E R_E  N Dn  n 

//define  PGPANN_C  I PH  ER_NOTEXTn  n 
//define  PG  P ANN_S  KC  I P H E R_  E S Kn  n 

//define  PG  P AN  N_PKC  I P H E R_  E SKn  n 


0x400 

0x401 

0x402 

0x403 

0x404 


/*  Compressed  Packet  Information  */ 

//define  PG  P ANN_C  OM  PR  E S S E D_BEG  I Nnn  0x500 

//define  PG  P ANN_C  OM  PR  E S S E D_E  N Do  n 0x501 


/*  Comment  Packet  Information  */ 

//define  PGP  AN  N _ C OHM  E NT_BEG  I Nn  n 0x600 

//define  PG  P AN  N_C  OMM  E NT_  EN  Dn  n 0x601 


/*  Signed  messages  */ 

//define  PG  P AN  N_S  I G N E D_B  EG  I Nn  n 

//define  PG  P AN  N_  S I G N E D_  E N Dn  n 

//define  PG  P AN  N_S  I G N E D_S  I Gn  n 

//define  PG  P AN  N_S  I GN  E D_S  I G 2n  n 

//define  PG  P AN  N_S  I G N E D_S  E Pn  n 

n 

/*  Hash  Packets  */ 

#define  PG P AN N_ H AS H_ R EQU E STn  n 


0x900 

0x901 

0x902 

0x903 

0x904 


0x910n  /*  Callback  */ 
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#define  PG P AN N_ H A S H_ V A LU En  n 0x920n  /*  Double  callback  (!)  */ 

/*  PGP  Key  Data  */ 

#define  PG P A N N_PG PKE Y_B E G I N n n 0xF00 

#define  PGPANN_PGPKEY_ENDn  n 0xF01 

/*  Not  a packet  at  all  (EATIT,  PASSTHROUGH  options  only)  */ 

#define  PG P AN N_N ON P A C KET_B EG  I Nn  n 0x1000 

#define  PG P A N N_N0 N P A C KET_ E N Dn  n 0x1001 


/*  From  the  Armor  Parser.  text  not 

//define  PG  P A N N_  NO  N PG  P_B  EG  I Nn  n 

#define  PG P AN N_N ON PG P_ E N Dn  n 

/*  Ascii  Armor'ed  data  */ 

//define  PG  P AN  N_  AR  MO  R_B  EG  I Nn  n 

//define  PG  P A N N_  A RMO  R_  EN  Dn  n 

//define  PGPANN_ARMOR_PARTn  n 

#define  PG P A N N_ A RMO R_B A D L I N En  n 

//define  PG  P AN  N_  A RMO  R_B  A D H E A D E Rn  n 

//define  PG  P A N N_  A RM0R_T00  LONGn  n 

//define  PG  P AN  N_  A RMO  R_N0C  R Cn  n 

//define  PG  P AN  N_  A R MO  R_C  R C C A NTn  n 

#define  PG P A N N_ A RMO R_C R CB A D n n 

/*  Clearsigned  Data  */ 

#define  PG P A N N_C L E A R S I G_B EG  I Nn  n 
//define  PG  P AN  N_  C LE  A R S I G_  E N Dn  n 

/*  Main  input  scope  — only  an  appli 
//define  PG  P AN  N_  I N PUT_B  EG  I Nn  n 

#define  PG P A N N_ I N PUT_ E N Dn  n 

/*  Independent  files.  */ 

#define  PG P AN N_ F I LE_B EG  I Nn  n 

//define  PG  P AN  N_  F I L E_  E N Dnn  n 

/*  Armor  Multipart  messages  */ 
//define  PGPANN_HULTIARHOR_BEGINnn 
//define  PG  P AN  N_MU  LT I ARMO  R_  E N Dn  n 


in  armor  * / 
0x1100 
0x1101 


0x1200 
0x1201 
0x1 202 
0x1203 
0x1204 
0x1 205 
0x1206 
0x1207 
0x1208 


0x1300 

0x1301 

ion  should  send  this  annotation  */ 
0x1400 
0x1401 


0x1500 
0x1 501 


0x1 600 
0x1601 


#ifdef  __cplusplus 

} 

//endi  f 


//endif  /*  PGPANNOTATE.H  */ 
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/* 

* pgpConvKey.h  --  Conventional  Encryption  Keys  for  PGP 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  By:n  Derek  Atkins  < wa  r L o r da)M  I T . E D U> 

★ 

* $Id:  pgpConvKey . h,v  1.3. 2.1  1997/06/07  09:50:18  mhw  Exp  $ 

*/ 

#ifndef  PGPCONVKEY.H 
^define  PGPCONVKEY.H 

^include  " pg pU s ua L s . h " 

#ifdef  cpLuspLus 

extern  "C"  C 
#end i f 

struct  PgpS t r i ngToKey ; 

#ifndef  TYPE.PGPSTRINGTOKEY 
^define  TYPE.PGPSTRINGTOKEY  1 

typedef  struct  PgpSt ri ngToKey  Pg p S t r i ngTo Key ; 

#e  nd i f 

struct  PgpConvKey  { 

struct  PgpConvKey  const  *next; 
n struct  Pg p S t r i ngToKey  const  * s t r i ng To  Key ; 

char  const  *pass; 
si ze.t  pass  Len; 

>; 

#ifndef  TYPE. PGPCONVKEY 

^define  TYPE. PGPCONVKEY  1 

typedef  struct  PgpConvKey  PgpConvKey; 

# e nd i f 

#ifdef  ..cpLuspLus 

> 

#end i f 

#endif  /*  PGPCONVKEY.H  */ 
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/* 

* 

*n 

* 

★ 

* 

* 

★ 

★ 

★ 

★ 

* 

★ 

★ 

★ 

*/ 


pgpErr.h  --  This  file  contains  the  List  of  PGP  errno  values  (i.e.,  the 

the  error  values  that  are  returned  from  functions  returning 
an  error) 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

The  errors  are  grouped  into  blocks  of  codes  for  specific  functions,  and 
they  should  all  be  negative! 

Written  by:n  Colin  Plumb  and  Derek  Atkins  <warLordaHIT.EDU> 

This  is  a Public  API  Definition  Header. 

$Id:  pgpErr.h, V 1.21.2.12  1997/06/10  13:57:36  mhw  Exp  $ 


#ifndef  PGPERR_H 
^define  PGPERR.H 

/* 

* Code  to  translate  error  codes  to  strings  can  define  this  macro  and 

* #incLude  this  file  to  perform  some  sort  of  Lookup  table  initialization. 

* Please  update  this  in  the  obvious  way  when  you  change  this  file. 

*/ 

#ifndef  PGPERRn  /*  C */ 

^define  PGPERRCnum,  string)  /*nothing*/ 

/*  Only  include  declarations  if  we're  not  doing  preprocessor  magic  */ 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e nd i f 


char  const  PGPExport  *pg p e r r S t r i n g ( i n t error); 

typedef  int  PGPError;n  /*  XXX  Host  places  still  use  int  directly,  by  the  way  */ 

#ifdef  __cpLuspLus 
} 

# e nd i f 


#endifn  /*  1 PGPERR  */ 


/* 

* ALL  messages  with  a negative  error  code  should  be  printed.  Some  positive 

* "error  codes"  are  used  as  severity  Levels  to  control  masking  of  inessential 

* messages  . 


" / 

#def i ne 

PGPERR_VERBOSE_ 

0Q 

0 

#d  e f i ne 

PGPERR_VERBOSE_ 

In 

1 

#def i ne 

PGPERR_VERBOSE_ 

2n 

2 

#def i ne 

PGPERR_VERBOSE_ 

3n 

3 

#d  e f i ne 

PGPERR.OKn 

n 

0 

PGPERR 

(PGPERR_OK,n 

n 

n 

"No  errors") 

/* 
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* Avoid  using  this  code  - if  it  appears 

* too  Lazy  to  find  the  right  one.  It's 


* just  plain  "-1". 

*/ 

^define  PG P E RR_G E N E R I C n n -1 

PGPERR  (PGPERR_GENERIC,  n n 

^define  PGPERR_NOMEMn  n -2 

PGPERR  ( PGPERR.NOHEM,  n n 

#define  PGPERR_BADPARAHnn  -3 

PGPERR  ( PGPERR_BADPARAH,a  n 

#define  PG P E R R_N0_ F I LE n n -5 

PGPERR  (PGPERR_NO_FILE,  a n 

^define  PG PE RR_N0_KE Y B I T Sn  -6 

PGPERR  (PGPERR_NO_KEYBITS,  a a 

^define  PG P E R R_B A D_H A S H N UMn  -10 

PGPERR  ( PGPERR_BAD_HASHNUM,n  n 

#define  PG P E R R_B A D_ C I P H E RNUHn  -15 

PGPERR  (PGPERR_BAD_CIPHERNUH,n  n 

#define  PG PE R R_B A D_KE Y LENn  -16 

PGPERR  ( PGPERR_BAD_KEYLEN,  n n 

#define  PG P E RR_S I Z E A D V I S En  -20 

PGPERR  (PGPERR_SIZEADVISE,  n n 

^define  PG PE R R_C ON F I Gn  n -100 

PGPERR  ( PGPERR_CON FIG,n  n n 

#define  PG P E R R_C ON F I G_B A D F UN Cn  -101 
PGPERR  (PGPERR_CONFIG_BADFUNC,n  n 
^define  PGPE RR_C ON F I G_B A DO PTa  -102 

PGPERR  (PGPERR_CONFIG_BADOPT,a  a 

#define  PG P E R R_KE Y_ I S LO C KE Da  -110 

PGPERR  (PGPERR_KEY_ISLOCKED,b  a 


^define  PGPERR_KEY_UNUNLOCKABLEb-111 
PGPERR  (PGPERR_KEY_UNUNLOCKABLE,b 

^define  PG P E R R_ S I G_E R RO Ra  -120 

PGPERR  ( PGPERR_SIG_ERROR,B  a 

^define  PG P E RR_ AD D S I G_ E R RO Ra  -121 

PGPERR  (PGPERR_ADDSIG_ERROR,b  a 

^define  PG P E R R_ C AN NOT_ D E C R YPTa  -125 
PGPERR  ( PGPERR_CANNOT_DECRYPT,b  a 
//define  PG  P E RR_  A D D E S K_  E R RO  Ra  -126 

PGPERR  (PGPERR_ADDESK_ERROR,B  a 

//define  PG  PE  R R_UN  K_  ST  R I NG  2 KE  Ya  -127 
PGPERR  ( PGPERR_UNK_STRING2KEY,b  n 
n a a a a 

//define  PG  P E RR_B  A D_  S T R I NG  2 KE  Ya  -128 
PGPERR  (PGPERR_BAD_STRING2KEY,b  a 
n a a a a 


, it  means  that  the  programmer  was 
usually  written  in  the  source  as 

"Generic  error  (should  be  changed)") 

"Out  of  Memory") 

"Invalid  Parameter") 

"Cannot  open  file") 

"Internal  keyring  bits  exhausted") 

"Unknown  hash  number") 

"Unknown  cipher  number") 

"Illegal  key  length  for  cipher") 

"SizeAdvise  promise  not  kept") 

"Error  parsing  configuration") 
"Invalid  configuration  function") 
"Unknown  configuration  option") 

"Key  requires  passphrase  to  unlock") 
"Key  requires  passphrase  each  time") 

"Error  while  processing  signature") 
"Cannot  add  signature") 

"Cannot  decrypt  message") 

"Cannot  add  encrypted  session  key") 

"Don't  know  how  to  convert  pass" 

" phrase  to  key") 

"Invalid  conversion  from  pass" 

" phrase  to  key") 
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//define 

1 PGPERR. 

.ESK. 

.BADTYPEn 

-130 

PGPERR 

(PGPERR. 

.ESK. 

.BADTYPE,n 

u 

# d e f i n e 

' PGPERR. 

.ESK. 

.TOOSHORTn 

-1  31 

PGPERR 

(PGPERR. 

.ESK. 

.T00SH0RT,n 

n 

#d  e f i n e 

PGPERR. 

.ESK. 

.TOOLONGn 

-132 

PGPERR 

(PGPERR. 

.ESK. 

.T00L0NG,n 

n 

//def  i ne 

PGPERR. 

.ESK. 

.BADVERSIONn 

-133 

PGPERR 

(PGPERR. 

.ESK. 

.BADVERSION,n 

n 

Q 

n 

n 

n 

n 

//def  i ne 

PGPERR. 

.ESK. 

.BADALGORITHMn-1 34 

PGPERR 

(PGPERR. 

.ESK. 

.BADALGORITHM, 

. n 

n 

a 

Q 

n 

n 

# d e f i n e 

PGPERR. 

.ESK. 

.BITSWRONGn 

-135 

PGPERR 

(PGPERR. 

.ESK. 

.BITSWRONG,n 

n 

#d  e f i n e 

PGPERR. 

.ESK. 

.NOKEYn 

-136 

PGPERR 

(PGPERR. 

.ESK. 

.NOKEY, n 

"Can 

#d  e f i n e 

PGPERR. 

.ESK. 

.NODECRYPTn 

-137 

PGPERR 

(PGPERR. 

.ESK. 

.NODECRYPT, n 

n 

#d  e f i n e 

PGPERR. 

.ESK. 

BADPASSn 

-138 

PGPERR 

(PGPERR. 

.ESK. 

.BADPASS,n 

n 

//define 

PGPERR. 

.SIG. 

BADTYPEn 

-140 

PGPERR 

(PGPERR. 

.SIG. 

,BADTYPE,n 

n 

//def  i ne 

PGPERR. 

.SIG. 

TOOSHORTn 

-141 

PGPERR 

(PGPERR. 

SIG. 

,T00SH0RT,n 

n 

#def i ne 

PGPERR. 

SIG. 

TOOLONGn 

-1  42 

PGPERR 

(PGPERR. 

SIG. 

T00L0NG,n 

n 

//define 

PGPERR. 

SIG_ 

BADVERSIONn 

-143 

PGPERR 

(PGPERR. 

SIG_ 

BADVERSION,n 

n 

//define 

PGPERR. 

SIG_ 

BADALGORITHHn 

-1  44 

PGPERR 

(PGPERR. 

SIG_ 

BADALGORITHM, 

n 

//define 

PGPERR. 

SIG_ 

BITSWRONGn 

-145 

PGPERR 

(PGPERR. 

SIG_ 

BITSWRONG,n 

n 

//def  i ne 

PGPERR. 

SIG_ 

NOKEYn 

-1  46 

PGPERR 

(PGPERR. 

SIG_ 

NOKEY, n 

" Can  ' 

#def i ne 

PGPERR. 

SIG_ 

BADEXTRAn 

-147 

PGPERR 

(PGPERR. 

SIG_ 

BADEXTRA,n 

n 

//def  i ne 

PGPERR. 

NO.PUBKEYn 

-150 

PGPERR 

(PGPERR. 

NO_PUBKEY,n 

n 

//define 

PGPERR. 

NO.SECKEYn 

-1  51 

PGPERR 

(PGPERR. 

NO_SECKEY,n 

n 

//def  i ne 

PGPERR. 

UNKNOWN.KEYI Dn 

-152 

PGPERR 

(PGPERR. 

UNKNOWN_KEYID,n 

n 

# d e f i n e 

PGPERR. 

NO.RECOVERYKEYn 

-1  53 

PGPERR  ( PGPERR_NO_RECOVERYKEY,n  n 
□ anna 

^define  PG P E R R_ C OMM I T_ I N V A LI Dn  -155 
PGPERR  (PGPERR_COMHIT_INVALID,n  n 


#define  PG P E R R_ C AN N OT_ H A S Hn  -156 

PGPERR  ( PGPERR_CANNOT_HASH,n  n 

#define  PGPERR_UNBALANCED_SCOPEn-160 
PGPERR  (PGPERR_UNBALANCED_SCOPE,n 
#define  PG P E R R_ W RO NG_S C 0 P En  -161 

PGPERR  (PGPERR_WRONG_SCOPE,n  n 


"Unknown  encrypted  session  key  type") 

"Encrypted  session  key  too  short") 

"Encrypted  session  key  too  Long") 

"Encrypted  session  key  version" 

" unknown") 

"Encrypted  session  key  algorithm" 

" unknown") 

"Wrong  number  of  bits  in  ESK") 
find  key  to  decrypt  session  key") 
"Can't  decrypt  this  session  key") 
"Passphrase  incorrect") 

"Unknown  signature  type") 

"Signature  too  short") 

"Signature  too  Long") 

"Signature  version  unknown") 
"Signature  algorithm  unknown") 

"Wrong  number  of  bits  in  signature") 
find  necessary  key  to  check  sig") 
"Invalid  Extra  Data  for  Signature") 

"No  public  key  found") 

"No  secret  key  found") 

"No  matching  keyid  found") 

"Requested  message  recovery  key" 

" not  found") 

"Invalid  commit  response") 

"Cannot  hash  message") 

"Unbalanced  scope") 

"Data  sent  in  wrong  scope") 
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^define  PGPERR. 
PGPERR  (PGPERR, 
^define  PGPERR, 
PGPERR  (PGPERR, 
//define  PGPERR, 
PGPERR  (PGPERR, 
n n 


.UI_INVALIDn  -165 

.UI_lNVALID,n  a 

.CB_INVALIDn  -166 

.CB_INVALID,n  b 

.INTERRUPTEDb  -167 

.INTERRUPTED, B b 

B B B 


"Invalid  UI  Callback  Object") 

"Invalid  Parser  Callback") 

"Interrupted  encrypt/decrypt" 
" operation") 


//define  PG  P E R R_  PUBKE  Y_TOO  SH  A LLb  -170 
PGPERR  (PGPERR_PUBKEY_TOOSHALL,bb 
//define  PG  P E R R_PU  BKE  Y_TOOB  I Gn  -171 
PGPERR  ( PGPERR_PUBKEY_TOOBIG,b 


"Public  Key  too  small  for  data") 
"Public  key  is  too  big  for  this  version") 


//def  i ne 

PGPERR_ 

PUBKEY.UNIMPn 

-172 

PGPERR 

( PGPERR_ 

PUBKEY.UNIHP,b 

□ 

" Un i mp l emen t ed  public 

key  operation 

//def  i ne 

PGPERR. 

RSA.CORRUPTa 

-175 

PGPERR 

(PGPERR. 

RSA. CORRUPT, B 

n 

"Corrupt  data  decrypting  RSA  block" 

//define 

PGPERR. 

PK.CORRUPTb 

-176 

PGPERR 

(PGPERR. 

PK. CORRUPT, B 

n 

"Corrupt  data  decrypting  public" 

B 

B 

B B 

□ 

" key  block") 

//def  i ne 

PGPERR. 

CMD.TOOBIGn 

-180 

PGPERR 

( PGPERR. 

CHD.T00BIG,b 

n 

"Command  to  Buffer  too 

big") 

//define 

PGPERR. 

FIFO.READb 

-181 

PGPERR 

(PGPERR. 

FI F0.READ,n 

n 

"Incomplete  read  from 

Fi f o"  ) 

//define 

PGPERR. 

VRFYSIG.URITEb 

-185 

PGPERR 

(PGPERR. 

,VRFYSIG. WRITE, B 

n 

"Data  illegally  written  into" 

B 

B 

B B 

n 

" signature  pipe") 

#def i ne 

PGPERR. 

,VRFYSIG.BADANNb 

-186 

PGPERR 

(PGPERR. 

,VRFYSIG.BADANN,b 

a 

"Invalid  annotation  to 

signature" 

B 

B 

B B 

a 

" verifier") 

//define 

PGPERR. 

.ADDHDR.FLUSHb 

-190 

PGPERR 

( PGPERR. 

ADDHDR. FLUSH, B 

Q 

"Cannot  flush  buffer  until  size" 

B 

B 

B B 

B 

" is  known") 

//define 

PGPERR. 

.JOIN.BADANNb 

-195 

PGPERR 

( PGPERR. 

.JOIN.BADANN,b 

B 

"Invalid  annotation  to 

join  module" 

//define  PG  PE  RR_  R AN  D S E E D_TOOSM  A L L -200 
PGPERR  (PGPERR_RANDSEED_TOOSHALL,B 


//define  PG  P E R R_EN  V_  LOW  PR  I n 
PGPERR  (PGPERR_ENV_LOWPRI,n 
//define  PGPERR_ENV_BADVARb 
PGPERR  ( PGPERR_ENV_BADVAR,b 


-205 

B 

-206 

B 


//define  PG P E R R_C H A RH A P_U NKNO WNb  -210 
PGPERR  (PGPERR_CHARMAP_UNKNOWN,bb 

//define  PGPERR_FILE_PERHISSI0NSb-213 
PGPERR  (PGPERR_FILE_PERHISSIONS,b 


'Not  enough  data  in  randseed  file") 

'Env  Var  not  set;  priority  too  low") 
'Invalid  environment  variable") 

'Unknown  Charset") 


"Unsufficient  file  permissions") 

"File  already  open  for  writing") 

CCCHK:50e73fc4471d07ffa38477bf366d9377662666a66444979bb2336ff255a225412:3 
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#def i ne 

PGPERR_ 

FILE_BAD0Pb 

-215 

PGPERR 

(PGPERR_ 

FILE_BAD0P,n 

n 

"Invalid 

PgpFile  Operation") 

#def i ne 

PGPERR_ 

FI LE_0PFAI Ln 

-216 

PGPERR 

( PGPERR_ 

FILE_0PFAIL,a 

n 

" Pgp  F i 1 e 

Operation 

Fai  led") 

#def i ne 

PGPERR_ 

IHMUTABLEn 

-217 

PGPERR 

( PGPERR_ 

IMMUTABLE, n 

n 

"Attempt 

to  change 

an" 

n 

□ 

n □ 

n 

" immutable  object' 

' ) 

#define  PG P E R R_ P AR S E A S C _ I N C OMP LET E -220 

PGPERR  ( PG P E R R_P A R S E A S C_ I N C OM P L ET E , n "Ascii  Armor  Input  Incomplete") 

^define  PG PE R R_P A R S E A S C_B A D I N PUT  -221 


PGPERR 

(PGPERR, 

.PARSEASC_BADINPUT,n 

"PGP  text 

input 

is  corrupted" 

#def i ne 

PGPERR, 

.FILEFIFO,SEEKn 

-230 

PGPERR 

(PGPERR, 

FILEFI F0,SEEK,n 

n 

"Temp-Fi  le 

Seek 

Error") 

#def i ne 

PGPERR, 

FILEFIFO,WRITEn 

-231 

PGPERR 

(PGPERR, 

FILEFIFO, WRITE, n 

c 

"T  emp- File 

Write 

Error") 

#d  e f i n e 

PGPERR, 

FILEFIFO,READn 

-232 

PGPERR 

(PGPERR, 

FILEFI FO, READ, n 

n 

" T emp- F i 1 e 

Read 

Error") 

#d  e f i n e 

PGPERR, 

FILEIO,BADPKTn 

-235 

PGPERR 

(PGPERR, 

FI LEIO,BADPKT,n 

n 

"Corrupted 

or  bad  packet  in" 

n 

□ 

n Q 

n 

" PGP  data 

f i 1 e " 

) 

#def i ne 

PGPERR, 

SYSTEM, PGPKn 

-240 

PGPERR 

(PGPERR, 

SYSTEM, PGPK,n 

a 

"Error  Executing 

PGPK  Program 

/*  These  errors  occur  only  in  key  management,  and  have  extra  info  attached.  */ 


#def i ne 

PGPERR, 

.KEYIO, 

.READINGn 

-300 

PGPERR 

(PGPERR, 

.KEYIO, 

.READING, n 

n 

"I/O 

error 

reading 

keyri ng" 

) 

//define 

PGPERR, 

.KEYIO, 

WRITINGn 

-301 

PGPERR 

(PGPERR, 

KEYIO, 

.WRITING, n 

Q 

"I/O 

error 

writing 

keyring" 

) 

#def i ne 

PGPERR, 

KEYIO, 

FTELLn 

-302 

PGPERR 

( PGPERR, 

KEYIO, 

FTELL,h 

D 

"I/O 

error 

finding 

keyri n g 

pos 

//define 

PGPERR, 

KEYIO, 

SEEKINGn 

-303 

PGPERR 

(PGPERR, 

KEYIO, 

SEEKING, n 

n 

"I/O 

error 

seeking 

keyri ng" 

) 

//def  i ne 

PGPERR, 

KEYIO, 

OPENINGq 

-304 

PGPERR 

(PGPERR, 

KEYIO, 

OPENING, n 

n 

"I/O 

error 

open i ng 

keyring" 

) 

#def i ne 

PGPERR, 

KEYIO, 

CLOSINGn 

-305 

PGPERR 

( PGPERR, 

KEYIO, 

CLOSING, n 

a 

"I/O 

error 

closing 

keyring" 

) 

//define 

PGPERR, 

KEYIO, 

FLUSHINGn 

-306 

PGPERR 

(PGPERR, 

KEYIO, 

FLUSHING, n 

D 

"I/O 

error 

flushing 

keyring 

" ) 

/* 

* The 

following  errors  indicate 

that 

someone 

modified  a f i 

1 e while 

i t 

* was 

open  for 

access.  These  can  al 

so  be  found  in 

trouble 

logs. 

*/ 
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/*  Did  a seek  to  a known  packet,  encountered  EOF  there!  */ 

//define  PGPERR_KE  YI  0_E0  Fn  -310 

PGPERR  (PGPERR_KEYIO_EOF,n  a "Unexpected  EOF  fetching  key  packet") 


/* 


* Did  a seek  to  a known  packet,  found  something  different  there! 

* If  this  happens  after  a keyring  has  been  opened,  it  means  that 

* the  keyring  has  been  changed  out  from  under  PGP! 

*/ 


#define  PG PE R R_KE Y I 0_B A D PKTn  -311 

PGPERR  ( PGPERR_KEYIO_BADPKT,n  n 

n D D a D 


Bad  data  found  where  key 
packet  expected") 


#define  PG P E RR_KE Y I 0_B A D F I L En  -312 

PGPERR  (PGPERR_KEYIO_BADFILE,n  n "Not  a keyring  file") 


/* 

* The  following  errors  are  warnings  found  in  RingFile  trouble  logs  only. 

* The  only  other  possibilities  found  in  trouble  logs  are 

* - PGPERR_KEYIO_READING 

* - PGPERR_KEYIO_FTELL 

* - PGPERR_KEYIO_EOF 

* - PGPERR_KEYIO_BADPKT 

* - PGPERR_NOMEM 
*/ 

^define  PGPERR_TROUBLE_MAXn  -318 

//define  PG  PE  RR_T  ROU  B LE_M  I Nn  -349 


//define  PGPERR_TROUBLE_KEYSUBKE  Y -318 
PGPERR  (PGPERR_TROUBLE_KEYSUBKEY,n 
//define  PGPERR_TROUBLE_SIGSUBKEY  -319 
PGPERR  (PGPERR_TROUBLE_SIGSUBKEY,n 
//define  PGPERR_TROUBLE_BADTRUSTn  -320 
PGPERR  ( PGPERR _TROUBLE_BADTRUST,n 
//define  PGPERR_TROUBLE_UNKPKTBYTE  -321 
PGPERR  (PGPERR_TROUBLE_UNKPKTBYTE,n 
//define  PGPERR_TROUBLE_UNXSUBKE Y -322 
PGPERR  (PGPERR_TROUBLE_UNXSUBKEY,n 
//define  PGPERR_TROUBLE_UNXNAriEn  -323 
PGPERR  (PGPERR_TROUBLE_UNXNAME,nn 
//define  PG  PE  R R_T  ROUB  LE_U  NX  S I Gn  -324 
PGPERR  (PGPERR_TROUBLE_UNXSIG,n  n 
//define  PGPERR_TROUBLE_UNXUNKn  -325 
PGPERR  (PGPERR_TROUBLE_UNXUNK,n  n 
n n n n n 

//define  PGPERR_TR0UBLE_UNXTRUSTn-326 
PGPERR  (PGPERR_TROUBLE_UNXTRUST,n 
//define  PG  PE  R R_T  ROU  B L E_KE  Y2  B I Gn  -327 
PGPERR  (PGPERR_TR0UBLE_KEY2BIG,nn 
//define  PGPE  R R_T  ROUB  LE_  S E C 2B I Gn  -328 
PGPERR  (PGPERR_TR0UBLE_SEC2BIG,nn 
//define  PGPERR  _TR0UBLE_NAME2BIGn-329 
PGPERR  (PGPERR_TR0UBLE_NAHE2BIG,n 
//define  PGP  E R R_T  ROUB  LE_S  I G 2 B I Gn  -330 
PGPERR  ( PGPERR _TR0UBLE_SIG2BIG,nn 
//define  PG  PE  RR_TR0  UB  LE_U  N K2  B I Gn  -331 
PGPERR  {PGPERR_TR0UBLE_UNK2BIG,nn 
n n n n a 


Key  matches  subkey") 

Signature  by  subkey") 

Trust  packet  malformed") 

Unknown  packet  byte  in  keyring") 

Unexpected  subkey  (before  key)") 

Unexpected  name  (before  key)") 

Unexpected  sig  (before  key)") 

Packet  of  unknown  type  in  unexpected 
location  (before  key)") 

Unexpected  trust  packet") 

Key  grossly  oversized") 

Secret  key  grossly  oversized") 

Name  grossly  oversized") 

'Sig  grossly  oversized") 

'Packet  of  unknown  type  too  large" 

' to  handle") 
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#define  PGPERR. 
PGPERR  (PGPERR. 
^define  PGPERR. 
PGPERR  (PGPERR. 
Sdefine  PGPERR. 
PGPERR  (PGPERR. 
#define  PGPERR. 
PGPERR  (PGPERR. 
^define  PGPERR. 
PGPERR  (PGPERR. 
^define  PGPERR. 
PGPERR  (PGPERR. 
#define  PGPERR. 
PGPERR  (PGPERR. 
^define  PGPERR. 
PGPERR  (PGPERR. 
#define  PGPERR. 
PGPERR  (PGPERR. 
#def i ne  PGPERR. 
PGPERR  (PGPERR. 
Sdefine  PGPERR. 
PGPERR  (PGPERR. 
/* 


.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

.TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE. 

TROUBLE 


,DUPKEYIDn-332 
DUPKEYID,  n 
DUPKEYn  -333 
DUPKEY,n  n 
DUPSECn  -334 
DUPSEC,n  n 
DUPNAMEn  -335 
DUPNAME,nn 
DUPSIGn  -336 
DUPSIG,n 


"Duplicate  KeylD,  different  keys") 
"Duplicate  key  (in  same  keyring)") 
"Duplicate  secret  (in  same  keyring)") 
"Duplicate  name  (in  same  keyring)") 
Duplicate  signature  (in  same  keyring)") 


DUPUNKn  -337 

DUPUNK,n  "Duplicate  unknown  \"thing\"  in  keyring") 

BAREKEYn  -338 

BAREKEY,nn  "Key  found  with  no  names") 

VERSI0N_BUG_PREVn-339 

V E R S 1 0 N_BUG_ P R E V , "Bug  introduced  by  I eg  a I _ k I u d g e " ) 
VERSION_BUG_CURn  -340 

VERSION_BUG_CUR,n"Bug  introduced  by  legal.kludge") 
OLDSECn  -341 

OLDSEC,n  n "Passphrase  is  out  of  date") 

NEWSECn  -342 

NEWSEC,n  n "Passphrase  is  newer  than  another") 


* Errors  that  can  be  encountered  when  parsing  a key. 

* If  multiple  errors  apply,  only  the  last  is  reported. 

•k 


* Note:  Obviously  the  modulus  n = p*q  must  be  odd,  if  p and  q 

* are  both  large  primes,  since  all  primes  greater  than  2 are  odd. 

* The  exponent  e must  have  a corresponding  decryption  exponent 

* d such  that  e*d  mod  gcd(p-1,q-1)  = 1.  Since  p-1  and  q-1  are  both 

* even,  their  gcd  must  also  be  even  and  thus  e*d  mod  2=1,  implying 

* that  e mod  2 = 1. 

* I.e.  if  e were  even,  the  message  would  not  be  decryptable. 

* 


* ANY  ERRORS  NOT  IN  THE  RANGE  PG P E R R_KE Y_H A X . . PG P E R R_KE Y_M I N , IF  ENCOUNTERED 

* DURING  A MAINTENANCE  PASS,  HAVE  THE  EFFECT  OF  ABORTING  THE  PASS.  ANY  NEW 

* KEY-ASSOCIATED  ERROR  MUST  BE  ADDED  TO  THIS  RANGE  IF  THE  MAINTENANCE  PASS 

* IS  TO  JUST  SKIP  THAT  KEY  AND  NOT  ABORT  THE  WHOLE  PASS. 

*/ 


#define  PGPERR.KE Y_MAXn  -347 
#define  PG P E RR_KE Y_M I Nn  -359 

#define  PG P E R R_KE Y_N 0_R S A_ E N C R YPT  -347 

PGPERR  ( P G P E R R_ KE Y _ N 0_ R S A_ E N C R Y PT , "No  RSA  E n c r y p t i on / S i g n a t u r e support") 
^define  PG P E R R_KE Y_N0_RS A_ D E C R Y PT  -348 

PGPERR  (PGPERR_KEY_NO_RSA_DECRYPT,  "No  RSA  Decryption/Verification  support") 


#define  PG P E R R_KE Y_N0_ R S An 
PGPERR  (PGPERR_KEY_NO_RSA,n 

-349 

n 

"No 

RSA  key 

support") 

/*  PGPERR_KEY_LONG  is  a warning 
^define  PG P E RR_ KE Y.LONGnn 

PGPERR  ( PGPERR_KEY_LONG,n 

only  * / 

-350 

D 

"Key 

packet 

has  trailing 

#define  PG PE R R_KE Y_ S HO RTn 

PGPERR  (PGPERR_KEY_SHORT,n 

-351 

D 

"Key 

packet 

truncated") 

^define  PGPERR_KEY_VERSIONn 
PGPERR  (PGPERR_KEY_VERSION,n 

-352 

n 

"Key 

version 

unknown") 

Sdefine  PGPERR.KE Y_PKALGn 

-353 
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PGPERR 

( PGPERR_ 

KEY. 

PKALG,n 

a 

#def i ne 

PGPERR_ 

KEY. 

HODMPIn 

-354 

PGPERR 

(PGPERR. 

KEY. 

M0DMPI,n 

a 

#def i ne 

PGPERR. 

KEY. 

EXPHPIn 

-355 

PGPERR 

(PGPERR. 

KEY. 

EXPHPI,n 

a 

# d e f i n e 

PGPERR. 

KEY. 

MODEVENn 

-356 

PGPERR 

(PGPERR. 

KEY. 

M0DEVEN,n 

a 

#def i ne 

PGPERR. 

KEY. 

EXPEVENn 

-357 

PGPERR 

(PGPERR. 

KEY. 

EXPEVEN,n 

a 

#def i ne 

PGPERR. 

KEY. 

HPIn  a 

-358 

PGPERR 

( PGPERR. 

KEY. 

nPI,aa 

a 

#def i ne 

PGPERR. 

KEY. 

UNSUPPn 

-359 

PGPERR 

(PGPERR. 

KEY. 

UNSUPP,n 

"Key 

"Key  algorithm  unknown") 

"Key  modulus  mis-formatted") 

"Key  exponent  mis-formatted") 

"RSA  public  modulus  is  even") 

"RSA  public  exponent  is  even") 

"Key  component  mis-formatted") 

not  supported  by  this  version  of  PGP") 


/* 


* Errors  that 

can  be  encountered  when 

parsing  a signature. 

* If  multiple 

•if  / 

errors  apply. 

only  the 

Last  is  reported. 

" / 

#def i ne 

PGPERR. 

SIG.HAXn  -360 

#def i ne 

PGPERR. 

SIG.HINn  -369 

//define 

PGPERR. 

SIG.LONGna 

-360 

PGPERR 

(PGPERR. 

SIG.L0NG,n 

a 

"Signature 

packet  has  trailing 

junk") 

#def i ne 

PGPERR. 

SIG.SHORTn 

-361 

PGPERR 

(PGPERR. 

SIG. SHORT, n 

a 

"Signature 

truncated") 

//define 

PGPERR. 

SIG.MPIn  a 

-362 

PGPERR 

(PGPERR. 

SIG.HPI ,nB 

a 

"Signature 

integer  mis-formatted") 

//define 

PGPERR. 

SIG.PKALGn 

-363 

PGPERR 

(PGPERR. 

SIG.PKALG,n 

a 

"Signature 

algorithm  unknown") 

//def  i ne 

PGPERR. 

SIG.EXTRALENn 

-364 

PGPERR 

(PGPERR. 

SIG.EXTRALEN,n 

a 

"Bad  signature  extra  material 

(not  5)") 

//define 

PGPERR. 

SIG.VERSIONn 

-355 

PGPERR 

(PGPERR. 

SIG. VERSION, n 

a 

"Signature 

version  unknown") 

/*a 

Hid-level  key  manipulation  API 

error  codes 

*/ 

//define 

PGPERR. 

KEYDB. MAX  -370 

//def  i ne 

PGPERR. 

KEYDB. MIN  -383 

//define 

PGPERR. 

KEYDB.BADPASSPHRASEn 

-370 

PGPERR  (PGPERR_KEYDB_BADPASSPHRASE,n  n 

^define  PG PE RR_KE Y D B_KE Y DBR E A D ON L Yn  -371 

PGPERR  ( PGPERR_KEYDB_KEYDBREADONLY,n  n 

^define  PG P ER R_KE Y DB_N E E DMOR EB I T S n -372 

PGPERR  (PGPERR_KEYDB_NEEDHOREBITS,n  n 

^define  PGPE RR_KE Y D B_OB J E CTR E A D 0 N L Yn  -373 
PGPERR  ( PGPERR_KEYDB_OBJ ECTREADONLY,n  n 

^define  PG P E RR_KE Y D B_ I N V A LI D PRO P E RT Yn  -374 

PGPERR  (PGPERR_KEYDB_INVALIDPROPERTY,n  n 

#define  PG P E R R_KE Y DB_BU F F E RTOOS H 0 RTn  -375 

PGPERR  (PGPERR_KEYDB_BUFFERTOOSHORT,n  n 

^define  PG PE R R_KE Y D B_C 0 RR U Pin  n -376 

PGPERR  ( PGPERR_KEYDB_CORRUPT,n  a a 

#define  PG P E R R_KE Y D B_ V E R S I 0 NTOO N E Wn  -377 

PGPERR  ( PGPERR_KEYDB_VERSIONTOONEW,n  a 

n n Q n n D 

#define  PGPERR  KEYDB  lOERRORn  a -378 


"Bad  passphrase") 

"Key  database  is  read-only") 

"Insufficient  random  bits") 

"Object  is  read-only") 

"Invalid  property  name") 

"Buffer  too  short") 

"Key  database  is  corrupt") 

"Data  is  too  new  to  be  read" 
" by  this  version") 
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PGPERR  ( PGPERR_KE YDB_IOERROR,n  n n 

#define  PG P E R R_ K E Y D B_ V A LU ETOO LO NGn  -379 

PGPERR  ( PGPERR_KEYDB_VALUETOOLONG,n  n 

#define  PG P E R R_ KE Y D B_ D U P LI C AT E_ C E RTn  -380 
PGPERR  (PGPERR_KEYDB_DUPLICATE_CERT,n  n 
^define  PG P E R R_KE Y DB_ D U P LI C AT E_ U S E R I Dn  -381 
PGPERR  (PGPERR_KEYDB_DUPLICATE_USERID, 
#define  PGPERR_KEYDB_CERTIFYINGKEY_DEADn-382 
PGPERR  (PGPERR_KEYDB_CERTI FYINGKEY_DEAD,  a 
n n n n n n 

#define  PG P E R R_KE Y DB_OB J E CT_ D E LET E D -383 

PGPERR  (PGPERR_KEYDB_OBJECT_DELETED, 

#endif  /*  PGPERR  H */ 


[:CHK:151cf2b6e0dff44ed0771]] 


Input/output  error") 

Value  too  Long") 

Duplicate  certification") 

Duplicate  UserlD") 

Certifying  key  no  longer" 
valid") 

Object  has  been  deleted") 
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/* 

* pgpKLudge.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

★ 

* Kludges  for  no t -q u i t e- AN S I systems. 

* This  should  always  be  the  Last  file  included,  because  it  may 

* mess  up  some  system  header  files. 

* 

* $Id:  pgpKLudge . h, V 1.2. 2.1  1997/06/07  09:50:19  mhw  Exp  $ 

*/ 


#ifndef  PGPKLUDGE.H 
#define  PGPKLUDGE.H 

#ifdef  ..cpLusplus 
extern  "C"  { 

#end  i f 


#if  NO. EPOS. Tn  /*  The  whole  f po s. t / f g e t po s / f s e t po s thing  is  missing  */ 
typedef  Long  fpos.t; 

//define  f ge  t po  s ( s t r e am,  pos)  ((*(pos)  = f t e L L ( s t r e am ) ) < 0 ? -1  : 0) 
//define  f s e t pos  ( s t r e a m,  pos)  f s e e k ( s t r e a m,  *(pos),  SEEK. SET) 

//end  i f 

//if  NO.HEMHOVEn  /*  memoveO  not  in  Libraries  */ 

//define  memmo  v e ( de  s t , s r c , L en ) b c opy  ( s r c , d e s t , L en  ) 

//end  i f 


//if  NO.STRERRORn/*  strerrorO  not  in  Libraries  */ 

tti  f ndef  sys.nerr 
extern  int  sys.nerr; 

//endi  f 

//ifndef  sys.errlist 
extern  char  * sy s.e r r I i s t C D ; 

//end  i f 

//define  strerror(err)  ((err)  < sys.nerr  ? sys.errlistCerrD  : "Unknwon  error") 


//endif  /*  NO.STRERROR  */ 

//if  NO.STRTOULn  /*  strtouK)  not  in  libraries  */ 

//define  strtoul  strtoLn  /*  Close  enough  */ 

//endif 

//if  NO. RAISED  /*  raiseO  not  in  Libraries  */ 

^include  < sy s / t y pe s . h>n  /*  For  getpid()  - kiLL()  is  in  <signal.h>  */ 
#define  raise(sig)  k i L L ( ge t p i d ( ) , s i g ) 

//endif 


/* 

* Would  you  believe  that  there  exist  (non-ANSI,  of  course)  <stdio.h>'s 

* don’t  define  the  SEEK,  macros?  If  EOF  is  defined  (a  giveaway  that 

* <stdio.h>  has  been  included),  define  these  to  their  usual  meanings. 
*/ 

#if  defined(EOF) 

//ifndef  SEEK. SET 


that 
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#def i nenSEEK_ 

SETn 

0n 

/* 

Set 

file 

pointer 

t o 

"offset " 

*/ 

#def i nenSEEK_ 

CURn 

In 

/* 

Set 

file 

pointer 

t 0 

current 

plus  "offset"  */ 

#definenSEEK_ 

ENDn 

2n 

/* 

Set 

file 

pointer 

t 0 

EOF  plus 

"offset"  */ 

#endi  f 

#ifndef  STDIN_FILENO 
#define  ST D I N_ F I LE NOn  0 
#define  S T 0 OUT_ F I L E N On  1 
# end i f 

#if  NO_SIZE_T 

typedef  unsigned  size_t;  /*  Actually,  "int"  gets  used  a lot...  */ 

#end  i f 

#if  N 0_ S T D I 0_ PROT 0 S n /*  Hissing  prototypes  for  "simple"  functions  */ 

int  (puts)(char  const  *); 

int  (fputs)(char  const  *,  FILE  *); 

void  {rewind)(FILE  *); 

int  (fflushllFILE  *); 

int  (fclose)(FILE  *); 

int  (printf)(char  const  *,  ...); 

int  (fprintf)(FILE  *,  char  const  *,  ...); 

int  (fseek)(FILE  *,  long,  int); 

int  (remove)(char  const  *); 

int  (rename)(char  const  *,  char  const  *); 

void  ( p e r r o r ) ( c h a r const  *); 

int  (systemXchar  const  *);n  /*  Really  in  <stdlib.h>,  but  this'll  do...  */ 

int  ( pc  I os e ) ( F I LE  *); 

/*  If  we  have  a sufficiently  old-fashioned  stdio,  it  probably  uses  these...  */ 

int  ( _ f I s bu f ) ( u n s i g n e d char,  FILE  *); 

int  ( _f i I buf ) ( F I LE  *); 

int  (ungetc)(int,  FILE  *); 

size_t  (fread)(char  *,  size_t,  size_t,  FILE  *); 
size_t  (fwrite)(char  const  *,  size_t,  size_t,  FILE  *); 

#if  d e f i ne d ( va_ s t a r t ) | | d e f i n e d ( va _a r g ) | | def i ned ( va_end ) 

int  (vfprintf)(FILE  *,  char  const  *,  ...); 

#end  i f 

#endif  /*  N0_STDI0_PR0T0S  */ 

#endif  /*  EOF  */ 

#ifdef  __cplusplus 
} 

#e n d i f 

#endif  /*  PGPKLUDGE_H  */ 
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/* 

* pgpMsg.h  — A file  of  PGP  Messages 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  < wa r L o r dSM I T . E D U> 

* 

* This  is  a PubLic  API  Function  Header. 

* 

* $Id:  pgpMsg.h, V 1.4. 2.1  1 997/06/07  09:  50:1  9 mhw  Exp  $ 

*/ 


#ifndef  PGPMSG.H 
^define  PGPMSG.H 

#ifdef  ..cpLuspLus 
extern  "C"  { 

# end i f 


#ifndef  PGPMSG 

//define  PGPMSG  ( num,  string)n  /*  nothing  */ 

const  char  PGPExport  *pgpmsgString  (int  type); 
#end  i f 


//ifdef cpLuspLus 

> 

//e nd i f 

//define  PGPMSG. NONEn  0 

PGPMSG  ( PGPMSG. NONE, n n "") 

//define  PGPMSG.NO.KE Yn  1000 

PGPMSG  (PGPMSG. NO. KEY, n n "Error  getting  public  key") 


//define 

PGPMSG 

o 

//define 

PGPMSG 

//define 

PGPMSG 

//def  i ne 

PGPMSG 

//define 

PGPMSG 

□ 


PGPMSG. SIG. UNKNOWN. KEYIDn  1050 

( PGPMSG. SIG. UN KN OWN. KEYID, 

"Signature  by  unknown  keyid:  %.*s") 


PGPMSG. SIG. ERRORn 
( PGPMSG. SIG. ERROR, n 
PGPMSG. SIG.NOVERIFYn 
{ PGPMSG. SIG.NOVERIFY,n 

PGPMSG. SIG. ADD.ERRORn 
(PGPMSG. SIG. ADD. ERROR, n 
PGPMSG. SIG. NO.CHECKn 
(PGPMSG.SIG. NO. CHECK, 
"None  of  the  signatures 


1051 

"Signature  check  got  an  error") 

1052 

"Signature  verification  unsuccessful 

1053 

"Error  adding  Sig") 

1054 

were  understood;  can't  check") 


) 


//define  PGPMSG.S  I G.B  A D H A S H n 1055 

PGPMSG  ( PGPMSG. SIG. BADHASH, 

n "unknown  hash:  unabLe  to  verify  signature") 


//define  PGPM  SG.S  I G.NO  S I G Sn  1056 

PGPMSG  (PGPMSG. SIG. N0SIGS,n  "No  signatures  to  check") 


//define  PG  PMSG.  E N C R Y PT  E D.  P A S S PH  R A S En  1100 

PGPMSG  ( PGPMSG. ENCRYPTED.PASSPHRASE, 

n "This  message  is  encrypted  with  a pass  phrase") 

#define  PGPMSG.UNBALANCED.SCOPEn1150 

PGPMSG  (PGPMSG. UNBALANCED. SCOPE, n "UnbaLanced  Scope") 
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#define  PGPMSG_NO_PUBKE Yn 
PGPMSG  ( PGPMSG_NO_PUBKEY,n 
#define  PG PH S G_N 0_ S E C <E Yn 
PGPHSG  (PGPMSG_NO_SECKEY,  n 


1200 

"No  public  key  available") 

1 201 

"No  secret  key  available") 


#define  PG PM S G_ C OMH I T_ I N V A L I Dn  1250 
PGPMSG  ( PGPMSG_COHMIT_INVALI D, 
n "Invalid  response  from  commit:  %d") 


^define  PGPMSG_ESK_NODECRYPTn 
PGPMSG  ( PGPMSG_ESK_NODECRYPT,n 
#define  PG PH S G_ E S K_ A D D_ E R RO Rn 
PGPMSG  (PGPMSG_ESK_ADD_ERROR,n 
#define  PG PM SG_ E S K_B A DT Y P En 
PGPMSG  ( PGPMSG_ESK_BADTYPE,n 
^define  PG PH SG_ E S K_B A D PA S S n 
PGPHSG  ( PGPHSG_ESK_BADPASS,n 


1 300 

"Decryption  unsuccessful") 

1 301 

"Error  adding  ESK") 

1 302 

"Bad  ESK  Type...  skipping") 

1 303 

"Passphrase  incorrect.  Try  Again.") 


#define  PG PM S G_ S E PS  I G_ NO V E R I F Yn  1350 

PGPHSG  ( PGPMSG_SEPSIG_NOVERI FY,n"Separate  signature  unsuccessful") 

#define  PGPHSG_SEPSIGn  n 1351 

PGPHSG  (PGPMSG_SEPSIG,n  n "This  signature  applies  to  another  message") 

#define  PGPMSG_ANNOTATE_ERRORn  1400 

PGPMSG  ( PG PH S G_ AN  NOT AT E_ E R RO R , n "Annotate  returned  an  error") 


#define  PG PH SG_ PKE_ EN C R Y PT E Dn  1450 
PGPMSG  C PGPMSG_PKE_ENCRYPTED, 

n "This  message  is  public  key  encrypted  using  pke  type  %d") 

Sdefine  PG PM S G_T R Y_ AG A I Nn  1500 

PGPHSG  CPGPMSG_TRY_AGAIN,n  "Try  again") 

^define  PGPMSG_DEVNULL_CREATEn  1550 

PGPMSG  ( PG PM S G_ D EVN U LL_C R E AT E , n "Cannot  create  Dev  Null  Module") 


#define  PGPMSG_ALLOC_HASH_BUFFERn 
PGPHSG  (PGPMSG_ALLOC_HASH_BUFFER,n 
#define  PGPHSG_ALLOC_HASH_CLONEn1601 
PGPHSG  (PGPHSG_ALLOC_HASH_CLONE,n 


1 600 

"Failed  to  allocate  hash  buffer") 
"unable  to  clone  hash;  bailing") 


//define  PG  PH  SG_  C ON  F 1 G_  AHB I GUOU  S nn  1650 

PGPHSG  (PGPMSG_CONFIG_AMBIGUOUS, 
n "line  %u:  ambigious  key  %.*s,  matches 

//define  PGPMSG_CON  F I G_UNKNOWN_KE  YWORDn  1651 
PGPHSG  (PGPHSG_CONFIG_UNKNOWN_KEYWORD,n  "line 
//define  PG  PH  S G_  C 0 N F I G_  ST  R I N G E N Dnn  1652 

PGPHSG  (PGPMSG_CONFIG_STRINGEND,n  "line 

//define  PGPHSG_C  ON  F I G_HI  S S I NG_EQU  ALn  1653 

PGPMSG  (PGPMSG_CONFIG_HISSING_EQUAL,n  "line 
//define  PG  PH  SG_  C ON  F I G_H  I S S I NG_B00  LE  ANn  1654 
PGPMSG  (PGPHSG_CONFIG_MISSING_BOOLEAN, 
n "line  %u:  Hissing  argument  to  boolean 

//define  PG  PM  S G_  C 0 N F I G_UN  KN  0 WN_B00  LE  ANn  1655 
PGPMSG  (PGPHSG_CONFIG_UNKNOWN_BOOLEAN, 


%s  and  %s.") 

%u:  unknown  keyword  %.*s") 

%u:  unterminated  string  %.*s") 
%u:  Missing  '='  after  %.*s") 

option  %.*s") 


n "line  %u:  Unrecognized  argument  to  boolean  option  %.*s:  %.*s") 

//define  PGPMSG_CON  FIG_UNKNOWN_INTEGERn  1656 


C:CHK:c63d442311270f1eb110bbff8118e0005510059d55df1c91a9ace7d55f3162a92:: 


598 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpMsg.h 


PGPMSG  (PGPMSG_CONFIG_UNKNOWN_INTEGER, 

n "Line  %u:  Unrecognized  argument  to  integer  option  %.*s:  %.*s") 

#define  PG PH SG_C 0 N F I G_H I S S I NG_ I NT E G E Rn  1657 
PGPMSG  (PGPHSG_CONFIG_HISSING_INTEGER, 

n "Line  %u:  Missing  argument  to  integer  option  %.*s") 

^define  PG PHSG_ C ON F I G_ I NT_T00_H I G Hn  1658 

PGPMSG  (PGPHSG_CONFIG_INT_TOO_HIGH, 

n "Line  %u:  Argument  to  %.*s  is  too  high:  %d,  max  %d") 

#define  PG PH S G_C 0 N F I G_ I NT_T00_ LOWn  1659 

PGPMSG  (PGPHSG_CONFIG_INT_TOO_LOW, 

n "Line  %u:  Argument  to  %.*s  is  too  Low:  %d,  min  %d") 

^define  PG PM SG_ C ON F I G_ I N V A LI D_ I NT  EG E Rn  1660 
PGPMSG  (PGPMSG_CONFIG_INVALID_INTEGER, 

n "Line  %u:  InvaLid  argument  to  integer  option  %.*s:  %.*s") 

^define  PG PHS G_C ON F I G_ STR I NG_T00_ LONGn  1661 
PGPMSG  (PGPMSG_CONFIG_STRING_TOO_LONG, 
n "Line  %u:  Argument  to  %.*s  is  too  Long  %d") 

^define  PG PHS G_C 0 N F I G_ I N V A LI D_S T R I N Gn  1662 
PGPMSG  (PGPHSG_CONFIG_INVALID_STRING, 

n "Line  %u:  InvaLid  argument  to  string  option  %.*s:  %.*s") 


#define  PG PH SG_C ON F I G_N0_ F I LEn  n 
PGPMSG  (PGPMSG_CONFIG_NO_FILE,n  "Cannot 
^define  PGPHSG_CONFIG_LINE_TOO_LONGn 
PGPMSG  (PGPMSG_CONFIG_LINE_TOO_LONG,n 
^define  PG PM SG_C 0 N F I G_B A D_C H ARn  n 
PGPMSG  ( PGPHSG_CON F IG_BAD_CH AR,n" L i ne  %u 
#define  PGPHSG_CONFIG_MAX_ERRORSn 
PGPMSG  (PGPMSG_CONFIG_MAX_ERRORS,n 
#define  PGPMSG_CONFIG_NUH_ERRORSn 
PGPMSG  (PGPMSG_CONFIG_NUM_ERRORS,n 


1663 

open  configuration  fiLe  %s") 

1 664 

"Line  %u:  Line  too  Long  %s") 

1665 

: Bad  Character\n%s\nOffset  %d") 

1 666 

"Processing  haLted  after  %d  errors 
1667 

"Xd  error(s)  detected") 


) 


#endif  /*  PGPMSG.H  */ 
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/* 

* pgpPktByte.h  --  Definitions  of  packet  byte  types 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  appLication. 

* 

* $Id:  pgpPktByte . h,v  1.6. 2. 2 1997/06/07  09:50:19  mhw  Exp  $ 

*/ 

#ifndef  PGPPKTBYTE.H 
#define  PGPPKTBYTE  H 


#incLude  "pgpUsuaLs.h 


#ifdef  __cpLuspLus 
extern  "C"  { 

#end i f 


#define  I S_0LD_PKTB YTE ( p kt by t e ) (((pktbyte)  8 0xC0)  ==  0x80) 

#define  I S _N E W_ PKTB YT E ( p k t by t e ) (((pktbyte)  8 0xC0)  ==  0xC0) 

#define  0 LD.PKTB YT E_T Y P E ( p k t by t e ) (((pktbyte)  >>  2)  8 0xF) 

#define  N E W_ PKTB YT E_T Y P E ( p k t by t e ) ((pktbyte)  8 0x3F) 

^define  PKTB YT E_T YP E ( p k t by t e ) ( I S_OLD_PKTBYTE  (pktbyte)  ? \ 

° “ n OLD_PKTBYTE_TYPE(pktbyte)  : \ 

a n n N E W_ PKTB YT E_T Y P E ( p k t by t e ) ) 

//define  PKTB  YT  E_  L L E N ( p k t by  t e ) ((pktbyte)  8 3) 

#define  PKTB YT E_BU I LD ( t y p e , LLen)  ((type)>0xf  ? \ 

D PKTBYTE_BUILD_NEW(type)  : PKTB YT E_BU I LD _0 L D ( t y p e , LLen)) 

//define  PKTB  YT  E_BU  I L D_0  L D ( t y pe  , LLen)  ((byte)(0x80  | ((type)  8 0xF)  <<2 
a n n n a a n |(LLen))) 

#define  PKTB YT E_BU I L D_ N E W ( t y p e ) ((byte)(0xC0  | ((type)  8 0x3F))) 

#define  LLEN_T0_B YT E S ( L L e n ) ((1  « (LLen))  8 7) 


\ 


/* 


* For 

the  new  packet  formats 

— macros  for 

creating  the  Length  byte(s) 

* of 

terminating 

subpa  c ket  s . 

The  format  is 

: 

*n 

Formatn  n 

n 

Lengthn  n 

Macro 

* n 

0SSSSSSSEI 

n 

0-127a  n 

PKTLEN. 

1 BYTE(  ) 

* n 

10ssssssn 

n 

128-191nn 

PKTLEN. 

1 BYTE ( ) 

*n 

★ 

110SSSSS 

ssssssssn 

1 92-8383n 

PKTLEN. 

BYTE0(),PKTLEN_BYTE1 () 

* PKTLEN_ONE_BYTE ( ) is  used  to  determine  if  the  Length  is  1 byte  (use 

* PKTLEN_1BYTE( ) ) or  two  bytes  (use  PKT LE N_B YT E 0 ( ) then 

* PKTLEN.BYTEI  ( ) ) 

*/ 

//define  PKT  LEN.ON  E_B  YT  E ( L e n ) n ((Len)  < 192) 

#define  PKT L E N_1 B YT E ( L e n ) n (byte)(Len  8 0xFF) 

//define  PKTLEN_BYTE0  ( L en ) n (byte)(0xC0  + (((Len-192)  >>  8)  8 0x1F)) 

//define  PKTLEN.BYTEI  ( L en  ) n ( by  t e ) ( ( L en-1  92  ) 8 0xFF) 


/* 

* A non- t e rmi na t i ng  subpacket  (foLLowed  by  another  subpacket)  is 

* a power  of  two  bytes  Long  and  has  a Length  byte  encoded  as 

* foLLows: 

* lllxxxxxn  H 2*0-2*31  bytes 

*/ 
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/*  Types  */ 
enum  pktbyte  { 
n PKTBYTE_ESK  = 1, 

n PKTBYTE_SIG  = 2, 

n PKTBYTE_CONVESK  = 3, 

n PKTBYTE_1 PASSSIG  = 4, 

n PKTBYTE_SECKEY  = 5, 

n PKTBYTE_PUBKEY  = 6, 

n PKTBYTE_SECSUBKEY  = 7, 

n PKTBYTE_COMPRESSED  = 8, 

n PKTBYTE_CONVENTIONAL  = 9, 

a PKTBYTE_OLDLITERAL  = 10,  /*  pkt  Length  doesn't  include  filename,  etc  */ 

n PKTBYTE_LITERAL  = 11, 

n PKTBYTE_TRUST  = 12, 

n PKTBYTE_NAME  = 13, 

/*  We  are  replacing  the  old  comment  packets  with  the  new  subkey 

* packets.  This  will  allow  older  versions  of  PGP  to  skip  over  the 

* subkey  packets  gracefully.  The  new  comment  packets  will  be  skipped 

* by  this  version. 

* 

*n  PKTBYTE_COMMENT  = 14, 

*/ 

n PKTBYTE.PUBSUBKEY  = 14, 

n /*  15  is  reserved  for  internal  use  in  the  ring  parsing  code  */ 

n /*  16  and  up  use  the  new  packet  header  formats  */ 

n PKTBYTE_COMMENT  = 16 

>; 


/*  Critical  bit  means  we  must  handle  this  subpacket  */ 
^define  SIGSUBF_CRITICALn  0x80 

#ifdef  __cpLuspLus 
} 

#endi f 

#endif  /*  PGPPKTBYTE.H  */ 
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/* 

* pgpUI.h  --  Header  for  PGP  UI  Callback  defintions. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

■k 

* Written  by:n  Derek  Atkins  < wa r I o r dSM I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpUI.h, V 1.3. 2.1  1997/06/07  09:50:20  mhw  Exp  $ 

*/ 

#ifndef  PGPUI_H 
#define  PGPUI_H 

Sinclude  "pgpUsuals.h" 

#ifdef  __cplusplus 
extern  "C"  { 

Send  i f 

struct  PgpPipeline; 

Sifndef  T Y P E_ PG P P I P E LI N E 

Sdefine  T YP E_ PG PP I P E L I N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

# en d i f 

struct  PgpESK; 

Sifndef  TYPE_PGPESK 

Sdefine  TYPE_PGPESK  1 

typedef  struct  PgpESK  PgpESK; 

#e n d i f 

struct  PgpSig; 

Sifndef  TYPE_PGPSIG 

Sdefine  TYPE_PGPSIG  1 

typedef  struct  PgpSig  PgpSig; 

Send i f 

/* 

* This  is  the  structure  that  contains  the  callback  function  pointers 

* for  the  PGP  UI  callbacks.  An  application  fills  in  this  structure 

* with  the  appropriate  functions  to  perform  the  callbacks.  Some 

* callbacks  support  additional  arguments  to  the  msg.  Callback 

* functions  should  use  stdarg,  where  each  argument  is  of  type  "struct 

* PgpUICbArg  const  *" 

*/ 


Struct 

PgpUICb  { 

a 

/* 

required  callbacks  */ 

u 

i n t 

(♦message)  (void  *arg,  i 

nt  type,  int  msg,  unsigned  numargs 

□ 

1 n t 

(♦doCommit)  ( 

void  *arg. 

int  scope); 

Q 

i nt 

( *newOutput  ) 

(void  *arg. 

struct  PgpPipeline  **output. 

□ 

B 

Q 

i nt  type. 

char  const  *suggested_name); 

n 

i n t 

(♦needinput) 

(void  *arg. 

struct  PgpPipeline  *head); 

□ 

i n t 

(♦sigVerify) 

(void  *arg. 

struct  PgpSig  const  *sig. 

Q 

Q 

a 

byte  const  *hash); 

Q 

i nt 

(♦eskDecrypt) 

(void  *arg 

, struct  PgpESK  const  *esklist. 

n 

B 

n 

byte  *key 

, si ze_t  *key len. 
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□ 

n 

n 

int 

(*tryKey)  (void  *arg,  byte  const 

Q 

n 

n 

n 

□ 

size_t  keyLen), 

n 

n 

n 

void  *t  rya  rg ) ; 

□ 

/* 

optionaL  callbacks 

be  L ow 

this  Line  */ 

a 

i n t 

(*annotate) 

(void 

*a  rg. 

struct  PgpPipeLine  *origin. 

n 

□ 

n 

byte 

const 

♦string,  size_t  size); 

>; 

# 1 f n d e f 

TYPE_PGPUICB 

//define  TYPE_PGPUICB  1 
typedef  struct  PgpUICb  PgpUICb; 
// e nd i f 


/*  Define  whether  a caLLback 
//define  PG  P_U  I _ A R G_  I NTn  n 
//define  PGP_UI_ARG_UNSIGNEDn 
//define  PG  P_U  I _ ARG_WO  R D32  n 
^define  PGP_UI_ARG_STRINGn 
//define  PG  P_U  I _ A RG_BU  F F E Rn 


argument 

1 

2 

3 

4 

5 


is  an  int  or  a 


string  */ 


/* 

* This  structure  is  used  for  caLLback  arguments.  Whenever  a caLLback 

* of  any  sort  requires  arguments,  this  structure  is  used  to  hoLd  the 

* arguments.  The  type  is  any  PGP_UI_ARG_*  and  the  appropriate  entry 

* in  vaL  is  used. 

*/ 

struct  PgpUICbArg  { 


a 

int  type 

/ 

c 

union  -C 

n 

n 

i ntn 

i ; 

n 

n 

unsigned 

u; 

n 

n 

word32n 

w32; 

□ 

n 

char  const  *s; 

n 

n 

Struct  -C 

n 

n 

n 

byte  const  *buf; 

n 

n 

n 

unsigned  Len; 

n 

n 

> b u f ; 

n 

> va  L ; 

>; 

//ifndef  T Y P E_PG  PU I C B ARG 
//define  T Y PE_PG  PU  I C B A RG  1 
typedef  struct  PgpUICbArg  PgpUICbArg; 
// e nd i f 


//ifdef cpLuspLus 

} 

// end i f 

#endif  /*  PGPUI.H  */ 
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/* 

* pgpUsuals.h  - Typedefs  and  ^defines  used  widely. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpUsua Is . h,v  1.2. 2.1  1997/06/07  09:50:20  mhw  Exp  $ 

*/ 

#ifndef  PGPUSUALS_H 
^define  PGPUSUALS_H 

# include  <liinits.h> 

^include  "pgpTypes.h" 

#ifdef  __cplusplus 
extern  "C"  { 

#e  n d i f 

#if  UCHAR_MAX  ==  0xff 
typedef  unsigned  char  byte; 
typedef  signed  char  int8; 

#e  I s e 

terror  This  machine  has  no  8-bit  type 
#e n d i f 

#if  UINT_MAX  ==  0xffff 
typedef  uint  uord16; 
typedef  int  int16; 

#elif  USHRT_MAX  ==  0xffff 
typedef  unsigned  short  word16; 
typedef  short  int16; 

#e  I s e 

#error  This  machine  has  no  16-bit  type 

# e n d i f 

#if  UINT_HAX  ==  0xfffffffful 
typedef  uint  word32; 
typedef  int  i nt32; 

#elif  ULONG.HAX  ==  0xfffffffful 
typedef  ulong  uord32; 
typedef  long  int32; 

Seise 

Serror  This  machine  has  no  32-bit  type 
#e n d i f 

/* 

* Find  a 64-bit  data  type,  if  possible. 

* The  conditions  here  are  more  complicated  to  avoid  using  numbers  that 

* will  choke  lesser  preprocessors  (like  0x f f f f f f f f f f f f f f f f ) unless 

* we're  reasonably  certain  that  they'll  be  acceptable. 

*/ 

Sif  UL0NG_MAX  > 0xfffffffful 

Sif  UL0NG_MAX  ==  0x f f f f f f f f f f f f f f f f u I 

typedef  ulong  bnword64; 

Sdefine  BNW0RD64  bnword64 
#def i ne  HAVE64  1 
Sendi f 

# e nd i f 
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/* 

* I would  test  the  value  of  unsigned  long  long,  but  some  *preprocessors* 

* choke  on  constants  that  long  even  if  the  compiler  can  accept  them,  so 

* it  doesn't  work  reliably.  So  cross  our  fingers  and  hope  that  it's 

* a 64-bi t type . 

* 

* GCC  uses  UL0NG_L0NG_MAX . Solaris  uses  ULLONG_MAX. 

* IRIX  uses  UL0NGL0NG_HAX . Are  there  any  other  names  for  this? 

*/ 


Sifndef  HAVE64 

#if  def i ned ( ULONG_LONG_MAX ) ||  defined  (ULLONG_HAX)  ||  d e f i n ed ( U LO NG LO N G_M AX ) 

typedef  unsigned  long  long  word64; 
typedef  long  long  int64; 

#define  HAVE64  1 
#end i f 
#endi f 


^include  <string.h>n  /*  Prototype  for  memset  */ 

/* 

* Wipe  sensitive  data. 

* Note  that  this  takes  a pointer  to  a structure  to  be  wiped! 
*/ 

^define  wipe(x)  memsetCx,  0,  s i z e o f ( * ( x ) ) ) 


/*  This  is  a useful  macro  to  find  the  minimum  of  two  values  */ 
#i f ndef  mi n 

^define  min(x,y)  C((x)<(y))  ? (x)  : (y)) 

#endi f 


# i f nd  e f 
#def i ne 
#en  d i f 


max 

max(x,y)  (((x)>(y))  ? (x) 


(y)) 


/*  A way  to  hold  the  PGP  Version  number  */ 
typedef  int  PgpVersion; 

#define  PG PVE R S I 0N_2n  2n  /*  2.0  through  2.5  */ 

^define  PG P V E R S I 0N_2_6n  3n  /*  2.6.x  */ 

^define  PGPVERSI0N_3  4 /*  3.0  */ 


/*  The  PGP  Library  Version  string  */ 
extern  char  const  pgpLibVersionStringC3; 

/*  The  PGP  Library  Cipher  IV  Length  */ 

//define  IVLENn  10 

/*  Literal  Message  Types  */ 

//define  PGP_LITERAL_TEXTn  '\164'  /*  Ascii  't'  */ 

//define  PG P_ LI T E R A L_B I N A R Yn  '\142'  /*  Ascii  'b'  */ 

//ifdef  __cplusplus 

> 

//end i f 

#endif  /*  PGPUSUALS.H  */ 
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n 

It  L i b / pg p / key db  / Ma  ke f i L e . i n 
It 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

'W'  # $Id:  Hakef i Le . i n,v  1.10.2.5  1997/06/07  09:50:21  mhw  Exp  $ 

U 

0BJS=  pgpFiLeDB.o  pg  pLJ  n i o n D B . o pgpMemDB.o  pgpKeyHan.o  pgpKeylter.o  \ 
n pgpKeySet.o  pgpKeyLib.o  pgpPrefs.o  p g p P r e f U n i x . o pgpKeyUpd.o  \ 

n pg p Dea rmo r . o pg p F i L t e r e d S e t . o 

SHAREDHDRS=  pgpKeyDB.h  pg p P r e f U n i x . h 
PRIVHDRS=  pgpKDBint.h  pg pP r e f s I n t . h 

a L L : : DONE 
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/* 

* pgpDearmor.c  --  Simple  dearmoring  module,  with  armoring  routines  to 

* remove  ascii  armor  from  key  files  Cor  mem  buffers) 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpDea rmor . c, V 1.16.2.3  1997/06/07  09:50:21  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 


# i n c 1 u d e 

"pgpKDBint.h" 

#include 

"pgpAnnotate . h" 

//include 

"pgpArmor.h" 

//include 

"pgpDecPipe.h" 

//include 

"pgpDevNull.h" 

#include 

"pgpEnv. h" 

//include 

"pgpESK. h" 

//include 

"pgpFIFO. h" 

#include 

"pgpFi  le.h" 

# include 

"pgpFi  leMod.h" 

#include 

"pgpMemMod.h" 

//include 

"pgpPipeline.h" 

//include 

"pgpRngRead. h" 

//include 

"pgpS i g . h " 

//include 

"pgpTextFi  It.h" 

//include 

" pg  pU I . h " 

/*  Define 

line  endings  */ 

#if  de f i n e d ( M S DO S ) | | d e f i n ed ( W I N 32 ) 

# define  LINEENDn  PG P_T E XT F I LT_C R L F 
#elif  def inedCMACINTOSH) 

# define  LINEENDn  PG P_T E XT F I LT_ C R 

# e I s e 

M define  LINEENDn  PG P_T EXT F I LT_ L F 
# end i f 

/*  Struct  for  callbacks  */ 
typedef  struct  PG P D e a r mo r U I _ { 


n 

byte 

*outbuf ;n  n 

/* 

Output 

buffer,  alt. 

to  filename  */ 

tt 

si z e _ t 

outbufsi ze;n 

/* 

I n i t i a 1 / f i na  1 outbuf 

count  * / 

n 

PgpPipeline 

*pipebuf;B  n 

/* 

Output 

buf  pipeline 

pointer  */ 

> PGPDearmorUI; 


/*  Callbacks  for  dearmor  pass  */ 
static  int 

pgpDea rmo rMe s sa g e (void  *arg,  int  type,  int  msg,  unsigned  numargs,  ...) 

n /*  Avoid  warnings  */ 
n (void)arg; 
n (void)type; 
n (void)msg; 
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n 


n 


(void)numargs; 
return  0; 


} 


static  int 

p g p D ea r mo r DoC omm 1 t (void  *arg,  int  scope) 
{ 

n /*  Avoid  warnings  */ 
n Cvoid)arg; 
n (void)scope; 


n return  PG P A N N_P AR S E R_R E C U R S E ; 

> 

static  int 

pgpDea rmorNeedInput  (void  *arg,  struct  PgpPipeLine  *head) 

{ 

n /*  Avoid  warnings  */ 
a (void)arg; 
n (void)head; 
n return  PG P E R R_N0_ F I LE ; 

> 

static  int 

pgpDearmorSigVeri fy  (void  *arg,  struct  PgpSig  const  *sig,  byte  const  *hash) 
{ 

n /*  Avoid  warnings  */ 
n (void)arg; 
a (void)sig; 
n (void)hash; 
n return  0; 

} 

static  int 

pgpDearmorEskDecrypt  (void  *arg,  struct  PgpESK  const  *eskList,  byte  *key, 
n n size_t  *keyLen, 

n n int  (*tryKey)  (void  *arg,  byte  const  *key,  size_t  keyLen), 

n n void  *tryarg) 

{ 

n /*  Avoid  warnings  */ 
n (void)arg; 
n (void)eskList; 
n (void)key; 
n (void)keyLen; 
n (void)tryKey; 
n (void)t  rya  rg ; 

n return  PG P AN N_ P A R S E R_ E AT  I T ; 

> 

/*  Send  keys  to  outbuf,  everything  else  to  bit  bucket  */ 
static  int 

pgpDea rmorNewOutput  (void  *arg,  struct  PgpPipeLine  **output,  int  type, 
n char  const  * s ug g e s t ed_na me ) 


t 

n PGPDearmorUI 
n int 


*ui_arg;  /*  Parameters  for  callbacks  */ 

nuLlfLag;n  /*  True  if  discarding  output  */ 


n ( VO i d ) s ug g e s t e d_n a me ; n /*  Avoid  warning  */ 
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n ui_arg  = (PGPDearmorUI  *)  arg; 

o nuLLflag  = 0; 


Q 

n 

Q 

a 

a 

a 

□ 

n 

□ 

o 

□ 

n 

Q 

n 

□ 

□ 

D 

a 

D 

n 

Q 

n 

a 

n 

n 

□ 

n 

n 

n 


/*  Try  to  keep  output  open  if  we  have  multiple  key  packets  in  a row  */ 
if  (*output  &&  u i _a rg->p i pebu f SS  u i _a r g->o u t bu f ==N U L L)  { 
n byte  enable; 

n if  (type==PGPANN_NONPGP_BEGIN)  { 
n n / * 

on  * Non-key  material  found  between  the  two  packets.  We  send  a 

° ° * disable  annotation  to  tell  the  pipebuf  module  to  discard  this 

an  * intermediate  data, 
n n * / 

a n enable  =0; 

n n ( u i _a r g->p i p e b u f ) ->a n n o t a t e ( u i _a r g ->p i pe b u f , NULL, 

n a a PG P AN N_M EH_ E N AB L E , Senable,  1); 

a a return  0; 

a > else  if  ( t y pe  = = PG P A N N_ PG PKE Y_B EG  I N ) { 
n n / * 

“ ° * A second  or  later  key  packet  after  first.  We  may  have  disabled 

n n * the  mem  buffer  if  there  was  nonkey  material,  so  re-enable  it 

a a * now  . 

n n * / 

n n enable=1; 

a n C u i _a r g->p i pe bu f ) ->a n no t a t e ( u i _a r g ->p i pe bu f , NULL, 

ana  PG P AN N_H EH_ E N AB LE , Senable,  1); 
n n return  0; 

n } 

> 

/*  Discard  non-key  packets  */ 

if  (type  !=  PG P A N N_ PG PKE Y_B E G I N ||  u i _a r g ->ou t bu f ==N U L L ) { 
n nullflag  = 1; 

> 


□ 

□ 

a 

a 

a 

a 

a 

a 

a 

n 

a 

a 


/*  Close  old  output  pipeline  */ 
i f (*output ) { 
n if  ( u i _a rg->p i pebuf ) { 

n n ( u i _a r g ->p i p eb u f ) ->a n n o t a t e ( u i _a r g->p i p e b u f , NULL, 

° ° P G P A N N_ M E M_ B YT E C 0 U N T , (byte  * ) &u i _a r g — >ou t bu f s i z e , 

“ “ n s i zeof ( u i _a rg->ou t buf s i ze  ) ) ; 

n n u i _a r g->p i pebu f = 0; 

n > 

B ( *ou t p u t ) -> s i z e Ad V i s e (*output,  0); 

B ( *ou t p u t ) -> t ea r do wn  (*output); 

B *output  = NULL; 

> 


B /*  Handle  discarded  data  */ 

B if  (nullflag)  { 

B B pg p De vN u I I C r e a t e (output); 
B B return  0; 

B } 


B pgpAssert  ( u i _a r g ->ou t bu f ) ; 

B u i _a r g->p i pebu f = pg pMemMod C r ea t e (output,  (char  * ) u i _a r g->o u t b u f , 
B a u i _a r g ->ou t b u f s i z e ) ; 

B u i _a rg->out buf  = NULL;b  n /*  Discard  any  following  keys  */ 

B if  ( ! u i _a r g ->p i pe bu f ) 

B B return  PGPERR_NOMEH; 
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n return  PGPERR_0K; 

> 


Common  code  for  key  dearmoring  to  a dynamically  allocated  memory  buffer. 
Returns  *0u t p u t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 
passing  to  pgpMemFree.  *0u t pu t Bu f f e r Le n holds  the  size  of  the  buffer. 
fFilein  determines  whether  we  take  the  key  data  from  I n p u t F i I e Na me  or 
from  I npu t Buf f e r / I npu t Buf f e r Len  . 


* 

* 

★ 

★ 

* 

*/ 

static  int 

pg p D ea r mo r Key  (PgpEnv  *env,  int  fFilein,  PGPFileRef  * I npu t F i I e R e f , 
n byte  * I n pu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , 
n byte  **0u t p u t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n ) 


n 

PgpPipeline 

*head,nn 

/*  Pipeline  head  */ 

n 

** t a i 1 ; 

/*  Pipeline  tail  pointer  */ 

n 

PgpFi  leRead 

*pfrin;n 

/*  Input  file  handle  */ 

n 

PgpUICb 

u i ; n n 

/*  Callback  functions  */ 

n 

PGPDearmorUI 

ui_arg; 

/*  Parameters  for  callbacks  */ 

n 

byte 

*outbuf; 

/*  Allocated  output  buffer  */ 

□ 

si z e_t 

outbuflen; 

/*  Size  of  outbuf  */ 

o 

int 

e r r ; n n 

/*  Error  variable  */ 

s 

byte 

dumi C 1 D ; 

/*  Dummy  array  for  sizing  pass 

n 

head  = NULL; 

n 

/*  Setup  the 

UI  callback  functions  */ 

Q 

ui . messagen  n 

= pg p D ea  r mo  r H e s s a g e ; 

n 

ui .doCommitn= 

pgpDearmorDoCommi t; 

n 

ui . newOutputn 

= pg p Dea rmo r N e wOu t pu t ; 

a 

ui .needinputn 

= pg p Dea rmo r Ne e d I n p u t ; 

a 

ui .sigVerifyn 

= pgpDea rmo r S i g Ve r i f y ; 

a 

ui . eskOecryptn  = pg p D e a r mo r E s k D e c r y p t ; 

n 

ui .annotaten= 

NULL; 

a 

/*  Set  up  the 

UI  argument.  First 

pass  will  just  get  length.  */ 

Q 

memset  (&ui_arg,  0,  sizeof  (ui_ar 

g)); 

n 

ui_arg.outbuf 

= dum1;n  n n 

/*  Dummy  output  buffer  */ 

a 

u i _a r g . ou t b u f s i z e = 0; 

/*  Will  get  length  afterwards 

n 

/*  Set  up  pipeline  */ 

a 

tail  = pg p D e c ry p t P i pe 1 i n e C r ea t e (Shead,  env,  NULL,  &ui,  &ui_arg) 

a 

/*  Send  data 

through  */ 

a if  (fFilein)  { 
n n /*  Open  input  file  */ 

n n pfrin  = pg p F i I e R e f Re  a d C r e a t e ( I n pu t F i I e R e f , kPG P F i I eOp e n Rea d Pe r m, &e r r ) ; 
n n if  (!pfrin) 

n n n gotoerror; 

n n err  = pg p F i I e Rea d Pump  (pfrin,  head); 

n n pgp F i I e R ea d D e s t r oy  (pfrin); 

n n h ea d->s i z e Ad V i s e (head,  0); 
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n 

□ 

□ 

Q 

□ 

n 

a 

Q 

□ 

a 

□ 

Q 

□ 

n 

□ 

n 

a 

a 

a 

□ 

Q 

□ 

a 

n 

□ 

n 

a 

n 

n 

Q 

H 


> else  { 

n /*  Send  data  through  */ 

n byte  *ibuf  = InputBuffer; 

n size_t  ibuflen  = InputBufferLen; 
n err  = head->s i ze Adv i se  (head,  ibuflen); 
n while  (ibuflen  SS  !err)  { 
n n size_t  written; 

n n written  = head -> write  (head,  ibuf,  ibuflen,  8err); 
n n ibuf  +=  written; 

n n ibuflen  -=  written; 

n > 

n head->sizeAdvise  (head,  0); 

> 


if  ( ! e r r ) { 

n /*  Find  out  how  many  bytes  we  wrote  */ 
n if  (!ui_arg.pipebuf)  { 
n n / * 

n n * May  have  been  closed  in  callback  on  multipart,  or  there  may 

° “ * have  been  no  ascii  armor  part  at  all. 

n n * / 

n a outbuflen  = u i _a r g . ou t bu f s i z e ; 

n > e I s e f 

B B (ui_arg.pipebuf)->annotate(ui_arg.pipebuf,  NULL, 

B B n PGPANN_MEM_BYTECOUNT,  (byte  * ) Sou t b u f I e n , s i z e o f ( o u t b u f I e n ) ) ; 

B > 

} 

h ea d-> t ea r d o w n (head); 
head  = NULL; 
ui_arg.pipebuf  = NULL; 
if  (err) 

B goto  error; 


B /*  Now  we  know  the  size  needed,  allocate  a buffer  to  hold  it  */ 

B outbuf  = (byte  * ) pg pM em A I I o c (outbuflen); 

B if  (loutbuf)  { 

B a err  = PG P E R R_N0M EH ; 

B B goto  error; 

B } 

B ui _a rg . outbuf  = outbuf; 

B ui_arg.outbufsize  = outbuflen; 

B /*  Send  data  through  again,  this  time  with  enough  room  */ 

B tail  = pgpDecrypt Pi pe I i neC rea te  (&head,  env,  NULL,  &ui,  &ui_arg); 

B if  (fFilein)  { 

B n pfrin  = pg p F i I e Re f R e a d C r e a t e ( I n pu t F i I e Re f , k PG P F i I eOpe n R e a d Pe rm, &e r r ) ; 
B B if  (Ipfrin) 

B B n goto  error; 

B n err  = pgpFileReadPump  (pfrin,  head); 

B n pgpFileReadDestroy  (pfrin); 

B n h ea d-> s i z e Ad V i s e (head,  0); 

B } e I s e { 

Bn/*  Send  data  through  */ 

B B byte  *ibuf  = InputBuffer; 

B n size_t  ibuflen  = InputBufferLen; 

B n err  = h e a d-> s i z e Ad v i s e (head,  ibuflen); 

B B while  (ibuflen  &&  !err)  { 

B B n size_t  written; 

B B n written  = head->write  (head,  ibuf,  ibuflen,  &err); 
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n n n ibuf  +=  written; 

n n n ibuflen  -=  written, ■ 

n B > 

B B h ea  cl->  s i z e Ad  V i s e (head,  0); 

B > 

B h e a d-> t ea r do wn  (head); 

a head  = NULL; 

B if  (err)  ( 

B B pgpHemFree  (outbuf); 

B B goto  error; 

B } 

B /*  Return  resulting  buffer  and  size  */ 
B *0 u t pu t Bu f f e r = outbuf; 

B *0 u t pu t Bu f f e r Len  = outbuflen; 


error: 

B if  (head) 

B B h ea d-> t e a r down  (head); 

n return  err; 

} 

/* 

* Dearmor  a key  from  a file  and  put  it  into  a dynamically  allocated  memory 

* buffer. 

* Returns  *0 u t pu t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 

* passing  to  pgpMemFree.  *0u t pu t Bu f f e r Le n holds  the  size  of  the  buffer. 

*/ 

i n t 

p g p D e a r mo r Key F i I e (PgpEnv  *env,  PGPFileRef  * I n p u t F i I e Re f , 

B byte  **0utputBuf f er,  size_t  *0u t pu t Bu f f e r Le n ) 

C 

B return  pgpDea rmo rKey  (env,  TRUE,  I n pu t F i I e Re f , NULL,  (size_t)0, 

B B Ou t pu t Bu f f e r , Ou t pu t Bu f f e r Len ) ; 

> 

/* 

* Dearmor  a key  from  a buffer  and  put  it  into  a dynamically  allocated  memory 

* buffer. 

* Returns  *0u t pu t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 

* passing  to  pgpHemFree.  *0u t pu t Bu f f e r Le n holds  the  size  of  the  buffer. 

*/ 

i n t 

pgpDearmorKeyBuf f er  (PgpEnv  *env,  byte  * I n pu t Bu f f e r , size_t  I npu t Bu f f e r Le n , 

B byte  **0utputBuf f er,  size_t  *0u t pu t Bu f f e r Le n ) 

( 

B return  pg p D e a r mo r Key  (env,  FALSE,  NULL,  InputBuffer,  I n p u t Bu f f e r Le n , 

B B Ou t pu t Bu f f e r , Ou t pu t Bu f f e r Le n ) ; 

} 


/*  Some  armoring  routines  too  */ 
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/* 

* Write  out  the  specified  RingSet  in  ascii  armor  form  to  pipeline. 

*/ 

static  i nt 

pgpWriteArmoredSetPipe  (PgpPipeline  *pipe,  RingSet  const  *set,  PgpEnv  *env) 
{ 

n PgpFile  *pfp; 

° i n t r s L t ; 

n if  ( ! pg p A r mo r W r i t e C r e a t e C &p i p e , env,  8pg pBy t e F i f o D e s c , 
n a n n NULL,  PG P V E R S I 0N_2 _6 , PG P_ ARMO R_N 0 RH A L) ) { 
n n pipe->teardown(pipe); 

n a return  PGPERR_NOMEH; 

n > 

n pfp  = pg p F i L e P i p e L i n eOpe n ( p i p e ) ; 
n if  (Ipfp)  { 
n n pipe->teardown(pipe); 

n a return  PGPERR_NOMEM,- 

n > 

n rsLt  = ringSetWrite  (set,  pfp,  NULL,  PG P V E R S I 0 N_ 2_6 , 0 ) ; 
n pgpFiLeCLose  (pfp); 
n return  rsLt; 

} 


/*  Write  out  the  specified  RingSet  in  ascii  armor  form  to  fp.  */ 
i n t 

pgpWri teArmoredSet Fi Le  (FILE  *fp,  RingSet  const  *set,  PgpEnv  *env) 

{ 

n PgpFi  Le  *P'fp; 

n PgpPipeline  *PpL  = NULL; 

n 

n pfp  = pgpFileWriteOpen(fp,  NULL); 
n if  (Ipfp)  { 
n n pg p S t d 1 0 C L o s e ( f p ) ; 

n n return  PG PE RR_N0H EH ; 

n > 

n if  (!  pgpF i L eWri teC reate  (&ppL,  pfp,  1))  { 
n n pgpFiLeCLose(pfp); 

n n return  PGPERR_NOHEM; 

n } 

n return  pgpWriteArmoredSetPipe  (ppL,  set,  env); 

> 

/* 

* Write  out  the  specified  RingSet  in  ascii  armor  form  to  buf. 

* Set  *bufLen  to  number  of  bytes  we  wrote  or  would  have  written. 

* Read  the  size  of  buf  from  *bufLen  on  entry. 

*/ 

i nt 

pgpWri teArmoredSetBuf f er  (byte  *buf,  size_t  *bufLen,  RingSet  const  *set. 


□ 

PgpEnv  *env ) 

n 

PgpPipeline 

*ppl  = NULL, 

□ 

*pipebuf; 

n 

PgpFi L e 

*pf  p; 

n 

si ze_t 

nbuf  = *bufLi 

n 

written; 
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n i n t r s L t ; 

n 

B pipebuf  = pg pM emU od C r e a t e (&ppL,  (char  *)  buf,  nbuf); 


B /*  Convert  to  Local  Line  endings  */ 

B if  ( ! pgpTe X t F i L t C r ea t e (&ppL, 

n n n pg pe n vG e t Po i n t e r (env,  PG P E N V_ C H A RM A PTO LAT I N 1 , NULL,  NULL), 

B n n 0,  LINEEND))  { 

B B pp L -> t ea r d o wn ( pp L ) ; 

B B return  PG P E R R_N OM EH ; 

B } 


B if  ( ! pg p A r mo r W r i t e C r ea t e ( 8pp L , env,  &pg pBy t e F i f o D e s c , 
n n B n NULL,  PG P V E R S I 0 N_2 _6 , PGP_ARnOR_NORHAL) ) { 

B B ppL->teardown(ppL); 

B B return  PG P E R R_NOH EM ; 

B } 

B pfp  = pg p F i L e P i p e L i neOpen ( p p L ) ; 

B if  (!pfp)  { 

B B ppl->teardown(ppL); 

B n return  PG P E R R_N0M EM ; 

B } 

B rsLt  = ringSetWrite  (set,  pfp,  NULL,  PG PV E R S 1 0 N_2_6 , 0); 

B if  (!rsLt)  { 

an/*  Figure  out  how  many  bytes  would  be  written  */ 

B B pp I -> s i z e Ad V i s e (ppL,  0); 

B B p i pebu f ->a n n o t a t e (pipebuf,  NULL,  PG P A N N_M EH_B YT E C OU NT , 
n n n n (byte  *)&written,  sizeof  (written)); 

B n *bufLen  = written; 

B } 

B pgpFileCLose  (pfp); 

B return  rsLt; 

} 


/* 

* Local  Variables: 

* tab-wi dth  : 4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpFiLeDB.c  — Manage  PGPKeyDBs  based  on  RingFiLes 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpFi LeDB. c,v  1.31.2.5  1997/06/07  09:50:22  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e  nd i f 


#ifdef  HAVE_FCNTL_H 

#incLude  <fcntL.h>n  n /*  For  0_CREAT,  0_EXCL  */ 
#end  i f 

#ifdef  HAVE_UNISTD_H 
SincLude  <unistd.h> 

#end  i f 

#ifdef  UNIX 
#incLude  <sys/stat.h> 

#e  nd i f 


#ifndef  W_0K 
#def i ne  W_0K  2 
#end  i f 


# i n c L u d e 
# i n c L ude 
#incLude 

# i n c L u d e 
#incLude 
#incLude 


pgpKDBi nt . h" 
pgpFi LeRef.h" 
pgpFiLeNames.h 
pgpDebug . h" 
pgpFi L e . h " 
pgpRngRead.h" 


/*  Private  data  for  RingFiLe  type  of  PGPKeyDB  */ 
typedef  struct  RingDB  { 


n 

RingFi Le 

*rfiLe,-n  n 

n 

/* 

RingFi Le 

Q 

PgpFi L e 

*pf i L e; n n 

n 

/* 

PgpFi L e 

n 

PGPFi LeRef 

*fi LeRef;n 

D 

/* 

f i LeRef 

n 

R i ng  S e t 

*rsmut;n  n 

n 

/* 

Hu  t a b L e 

n 

RingSet  const 

* r s i mmu  t ; n 

a 

/* 

I mmu  t a b L 

Q 

R i ng  S e t 

*rsfrozen;n 

□ 

/* 

Frozen  c 

n 

byten  n 

*membuf ; nn 

n 

/* 

Memory  b 

n 

Boo  L ea  n 

buriteabLe; 

QS 

/* 

True  if 

n 

Boo  Lean 

bdi rty;nn 

n 

/* 

True  if 

n 

Boo  L ea  n 

bprivate;n 

n 

/* 

True  if 

n 

Boo  L ea  n 

btrusted;n 

n 

/* 

True  if 

n 

BooLeannn  a 

bf  reebuf  ; n 

a 

/* 

True  if 

> RingDB; 


*/ 


a writeabLe  database  */ 
rsmut  has  been  changed  ^ 
a private  keyring  */ 


F i L e 


/* 

* Create  a temp  key  fiLe  which  is  not  used  by  anyone  eLse, 
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* Return  a stream  pointer  to  the  file,  and  set  the  file  reference  in 

* *tmpFi LeRef 1 . Base  the  file  reference  on  the  given  file. 

* The  returned  file  reference  needs  to  be  free'd  with  pgp F ree F i L eRef , and  of 

* course  the  returned  file  handle  needs  to  be  closed  too. 

* The  implementation  of  this  tends  to  be  OS  (and  possibly  file  system) 

* dependent  . 

*/ 

static  FILE  * 

tmpkeyfile  (PGPFileRef  const  *fileRef,  PGPFileRef  ** t mp F i I e Re f 1 , 
n n n PG P F i I eOpe n F I a g s flags.  Boolean  isPrivate) 

{ 


n 

char 

*n 

n 

n 

□ 

f i le  = NULL; 

n 

char 

*n 

n 

n 

n 

tmp  = NULL; 

a 

char 

*n 

□ 

n 

Q 

nfile  = NULL; 

n 

char 

*n 

n 

Q 

a 

nfilep  = NULL; 

n 

PGPFi  leRef 

*n 

Q 

tmpFileRef  = NULL; 

n 

FILE 

*n 

□ 

n 

n 

StdFile  = NULL; 

==  NULL) 
NULL) 


if  ((file  = pgpGetFileRefName(fileRef)) 
n goto  error; 

if  ((tmp  = pgp F i I eNameCont ra ct ( f i I e ) ) =: 

n goto  error; 

if  ((nfile  = pg p F i I e N a me  Ex t e nd ( t mp , ".pg0"))  ==  NULL) 
n goto  error; 

nfilep  = nfile  + strlen(file)  - 1; 

if  ((tmpFileRef  = pg pCo py F i I e R e f ( f i I e Re f ) ) ==  NULL) 
n goto  error; 
for  ( ; ; ) f 

if  ( ( pgpS e t F i I eRef Name ( St mp F i I eRef , nfile))  !=  PGPERR_OK) 
n goto  error; 

if  ((stdFile  = pg p F i I e Re f S t d I OOpe n ( t mp F i I e Re f , flags, 
n n isPrivate  ? kPG P F i I eTy pe P r i vR i n g 
n n n : kPGP F i I eTy pe PubR i ng , NULL))  !=  NULL) 


□ a □ 
a □ n 

n break; 
if  ((*nfilep ) ++  > 
n goto  error; 
n 

error: 

a pg pHem F r ee ( f i I e ) ; 

pgpHemFree(tmp) ; 
pgpMemFree(nfi  le); 
i f (stdFi le  ! = NULL) 
n *tmpFileRef1  = tmpFileRef; 
else  if  (tmpFileRef  !=  NULL) 
n pg p F r ee F i I e R e f ( t mp F i I e Re f ) ; 

return  stdFile; 


/* 

* Error  recovery  routine  for  do_write,  below.  Called  to  re— open  the 

* original  file  due  to  some  problem  while  writing  out  the  updated  version. 

* The  original  file  is  back  to  its  original  filename.  newfile  is  the 

* tmp  ringfile  which  we  have  succeeded  in  outputting.  Use  it  to  restore 

* rsmut.  Closing  it  will  be  done  by  our  caller. 

*/ 

static  void 

do_recover  (RingDB  *rdb,  RingFile  *newfile) 

■C 


CCCHK:a1765696c8a541aa00ac37b7974d887d863cfac3584d3477714cfe534fe833d09]: 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


617 


pgpFileDB.c 

n FILE  *f; 
n PGPError  error; 

n RingPooL  *ringpooL  = ringSetPooL  ( r d b-> r s i mmu t ) ; 

K f = pg p F i L e R e f S t d I OOp e n ( r db-> f i L e R e f , 

° ° ° ° ° ° r d b->b w r i t e a b L e ? kPG P F i L eO p e n R e a d W r i t e Pe r m 

: k PG  P F i L e Ope  n Rea  d Pe  r m, 

° ° n ° n n k PG P F i L e Ty pe No n e , Serror); 

n pgpAssert  (f); 

n rdb->pfiLe  = pgpFileReadOpen  (f,  NULL,  NULL); 
n pgpAssert  ( rdb->pf i L e ) ; 

n rdb->rfiLe  = r i ng F i L e 0 pe n ( r i ng poo L , rdb->pfiLe,  r d b->b t r u s t e d , Serror); 
n pgpAssert  ( r d b-> r f i L e ) ; 

n rdb-> rs i mmut  = ringFiLeSet  ( r d b-> r f i L e ) ; 
n if  (newfile)  { 

n a rdb->rsmut  = r i n g S e t C r e a t e (ringpool); 

n n ri ngSet AddSet  (rdb->rsmut,  ringFiLeSet  CnewfiLe)); 

n } 

> 


/* 

* This  writes  out  a RingSet  which  is  a replacement  for  a RingFiLe 

* which  is  open.  We  do  it  carefully  since  on  some  OS's  we  can't 

* rename  open  files.  This  closes  the  RingFile  but  Leaves  the 

* RingSet  open  and  pointing  to  the  filename. 

* Renames  existing  file. ext  to  file.bak. 

* Variables  with  suffix  "1"  refer  to  original  file;  suffix  "2"  are 

* for  a tmp  file;  suffix  "3"  are  for  the  updated  file. 

* The  reason  the  tmp  file  is  used  is  to  have  some  backing  store  so 

* we  can  close  and  rename  the  original  file  before  outputting  the 

* updated  version. 

* 

* There  are  some  tricky  issues  here  re  error  recovery.  Especially  once 

* we  get  rid  of  the  original  key  file,  we  may  not  be  able  to  get  it  back 

* while  we  have  the  other  one  open.  So  we  will  require  that  the  .bak  file 

* renaming  must  work,  so  that  we  can  rename  the  .bak  file  back  if  necessary. 

* Otherwise  we  have  problems  when  we  run  out  of  disk  space  midway.  This 

* means  that  the  write  will  fail  if  the  .bak  file  renaming  fails,  such  as  if 

* there  is  a .bak  file  but  it  is  not  writeable  or  deletable. 

*/ 

static  PGPError 
do_write  (RingDB  *rdb) 


n 

char 

* f i L e ; n 

n 

n 

/* 

Filename  for  keyring  */ 

D 

char 

*ba  k, n 

n 

n 

/* 

.bak  filename  for  keyring  */ 

a 

* t m p ; n 

□ 

n 

/* 

Temp  to  help  create  .bak  */ 

a 

PGPFi LeRef 

*tmp  Fi LeRef; 

nn 

/* 

Temp  file  reference  */ 

a 

PGPFi LeRef 

*bakFi  leRef; 

nn 

/* 

Bak  file  reference  */ 

a 

R i ng  S e t 

* s e t ; n 

n 

n 

/* 

RingSet  we  are  writing  out  */ 

a 

RingFi  le 

*rfi Lei, 

nn 

n 

/* 

Original  RingFile  for  keyring  */ 

n 

*rf i Le2, 

nn 

n 

/* 

RingFile  for  temp  file  */ 

a 

□ n n 

*rf i le3; 

nn 

n 

/* 

RingFile  for  updated  keyring  file  */ 

a 

Pg p F i L e 

*pf pi ,n 

n 

n 

/* 

Original  PgpFile  for  keyring  */ 

n 

*pf p2,n 

D 

n 

/* 

PgpFile  for  temp  file  */ 

n 

n n n 

* p f p 3 ; n 

n 

n 

/* 

PgpFile  for  updated  keyring  file  */ 

Q 

FILE 

*f p2,n 

Q 

n 

/* 

Stream  handle  for  temp  file  */ 

n 

*f p3;n 

n 

n 

/* 

Stream  handle  for  updated  keyring  */ 
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n int  flags; 

n int  error  = 0,  erri; 

n set  = rdb->rsmut; 
n rfilel  = rdb->rfile; 

n pfpl  = rdb->pfiLe; 

n flags  = ( r d b->b t r u s t ed  &&  ! r db-> b p r i va t e ) ? PG P_ W R I T ET R U ST_ PUB  : 0; 

n file  = pg pG e t F i I e R e f Na me ( r d b->f i I e R e f ) ; 

□ 

n tmp  = pg p F i I e Na me C on t r a c t (file); 

#if  MACINTOSH 

n bak  = pgpFileNameExtend  (tmp,  " (backup)"); 

#e  I se 

n bak  = pgpFileNameExtend  (tmp,  ".bak"); 

#endi f 

n bakFileRef  = pg p C opy F i I e R e f ( r d b->f i I e Re f ) ; 
n pg p S e t F i I e Re f N a me ( &ba k F i I e Re f , bak); 
n pgpFree(bak); 
n pgpFree(tmp); 
n pgpFree(file); 

n fp2  = tmpkeyfile  ( rdb->f i I e Re f , StmpFileRef,  kPG  P F i I eOp e n S t d Upda t e F I a g s , 
n n n n n n r d b->b p r i va t e ) ; 

a if  (!fp2)  { 

a a pg p F r e e F i I e Re f ( t mp F i I e R e f ) ; 

a a pg p F r e e F i I e Re f (bakFileRef); 

a a return  PG PE R R_N 0_ F I LE ; 

a } 

a /*  Write  out  new  data  to  tmpfile2  */ 
a pfp2  = pg p F i I eU r i t eOpe n (fp2,  NULL); 

a error  = ringSetWrite  (set,  pfp2,  &rfile2,  PGPVERS I0N_3,  flags); 
a pgpFileFlush  (pfp2); 
a if  (error)  < 
a a pgpFileClose  (pfp2); 

a a pgpDe  I e t e F i I e ( t mp F i I e Re f ) ; 

a a pg p F r e e F i I e Re f ( tmp F i I eRef  ) ; 

a a pg p F r e e F i I e Re f (bakFileRef); 
a a return  error; 

a } 


a /*  Must  close  set  in  order  to  be  able  to  cleanly  close  rfilel  */ 
a ringSetDestroy(set); 
a rdb->rsmut  = NULL; 

a if  ( r i ng F i I e C I o s e (rfilel)  !=  0)  { 

a a /*  Have  a problem  here,  it  should  have  closed  */ 

a a /*  Probably  due  to  a pesky  RingSet  leak!  */ 

a a /*  Actually  happens  a lot  with  pgp3,  it  doesn't  care  */ 

/*a  a fprintf  (stderr,  "Warning:  %s  didn't  closeIXn",  file);  */ 

a a pgpAssert  (0); 

a } 

a /*  Close  the  PgpFile  regardless  */ 

a pgpFileClose  (pfpl); 


a / * 

a * Convert  temp  PgpFile  from  write  mode  to  read  mode  now,  it  will 

a * serve  as  the  backing  store  for  the  next  step, 

a * / 

a error  = pg p F i I e W r i t e2 Rea d (pfp2); 
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n pgpAssert  (error  ==  0); 


n /*  Now  rename  the  old  file  */ 
n pgp De I e t e F i L e ( ba k F i L e Re f ) ; 

n error  = pg p Re na me F i L e ( r d b-> f i L e R e f , b a k F i L e Re f ) ; 


#if  0 

n / * 

n * 

n * 

n * 

n * 

n * 

n * 

n * / 

a if 

n □ 

□ n 
n □ 
a Q 
n □ 
n □ 
n n 

D □ 

n > 

#e  n d i f 


The  software  is  operating  in  a mode  where  this  rename  often  fails. 

If  another  process  has  the  keyring  file  open  under  Windows,  the  file 
can't  be  renamed.  What  happens  in  that  case  is  we  proceed  with  the 
write  and  then  the  app  posts  a message  to  the  other  app(s)  telling 
it  to  re-read  the  keyring  file.  So  we  will  not  call  that  an  error 
at  this  point. 

(error)  { 

/*  Failed  to  rename,  we  cannot  proceed.  Get  orig  file  open  again  */ 

do_recover  (rdb,  rfileZ); 

ringFileClose  (rfile2); 

pgpFileClose  (pfp2); 

pgpDeleteFile  (tmpFileRef); 

pgpFreeFi leRef  (tmpFi  leRef); 

pgpFreeFileRef  (bakFi LeRef); 

return  PG P E R R_N 0_ F I L E ; 


n 

□ 

n 

n 

a 

□ 

n 

D 

a 

□ 

D 

n 

a 

n 

□ 

n 

D 

a 

□ 

n 

n 

□ 

□ 

n 

n 

B 

B 

B 

B 

B 

B 


/*  Output  data  again,  this  time  to  original  filename  */ 

fp3  = pgpFi LeRef StdIOOpen  ( r d b-> f i L e R e f , kPG P F i L e Op e n S t d Upda t e F I a g s , 

° ° “ n ° n n rdb->bprivate  ? kPGPFileTypePrivRing 

“°°“°DnBBB  : kPGPFi LeTypePubRi ng,  NULL); 
pfp3  = pgpFi leWri teOpen  (fp3,  NULL); 
if  (!pfp3)  { 

B / * 

a * Failure  to  open  output  file.  Should  not  happen  since  we  just 

n * had  one  and  renamed  it  to  .bak.  Try  to  recover  anyway, 

n * Rename  .bak  file  back  to  original  and  re-open  it. 

B * / 

n pgpDeleteFile  (rdb->fiLeRef); 

B error  = pgpRenameFile  (bakFileRef,  rdb->fiLeRef); 
a pgpAssert  (error  ==  PGPERR_0K);  /*  Else  we  are  Lost  */ 
n do_recover  (rdb,  rfiLe2); 
n ringFileClose  (rfiLe2); 
n pgpFileClose  (pfp2); 
n pgpDeleteFile  (tmpFileRef); 

B pgpFreeFileRef  (tmpFileRef); 
n pgpFreeFileRef  (bakFileRef); 
a return  PG P E R R_N 0_ F I L E ; 

> 

error  = ringSetWrite  ( r i ng F i I e S e t ( r f i L e 2 ) , pfp3,  &rfile3, 
n PGPVERSI0N_3,  flags); 
pgpFileFlush  (pfp3); 
if  (error)  ( 

n /*  Try  to  recover  by  restoring  .bak  file  */ 
n pgpFileClose  (pfp3); 
a pgpDeleteFile  ( rdb->f i L e Re f ) ; 

B erri  = pgpRenameFile  (bakFileRef,  r d b-> f i L e Re f ) ; 
n pgpAssert  (erri  ==  PGPERR_OK);b  /*  Else  we  are  Lost  */ 
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n n do_recover  (rdb,  rfiLe2); 

n H ringFileCLose  (rfile2); 

n n pgpFiLeCLose  Cpfp2); 

n n pgpDeLeteFiLe  (tmpFiLeRef); 

n n pg p F re e F i L e R e f (tmpFiLeRef); 

n n pg p F r e e F i L e R e f ( ba k F i L e Re f ) ; 

n n return  error; 

n } 

n /*  Delete  tmp  file  now  */ 
n erri  = ringFileCLose  (rfiLe2); 

n pgpAssert  (err1==0); 

n pgpFileCLose  (pfp2); 

n pg p D e L e t e F i L e (tmpFiLeRef); 

D pg p F r e e F i L e Re f (tmpFiLeRef); 

n / * 

n * Convert  final  PgpFiLe  from  write  mode  to  read  mode  now,  it  will 

n * serve  as  the  backing  store  from  now  on. 

n */ 

n error  = pg p F i L e W r i t e 2 Re  a d (pfp3); 
n pgpAssert  (error  ==  PGPERR_0K); 

n pg p F r e e F i L e Re f ( ba k F i L e Re f ) ; 

n rdb->rfiLe  = rfiLeS; 

n rdb->pfiLe  = pfp3; 

n return  PGPERR_0K; 

} 


/* 

* Open  the  specified  ringfiLe.  If  writeabLe  flag  is  cLear,  it  will  be 

* forced  read-only,  otherwise  whether  it  is  writeabLe  will  depend  on 

* permissions.  Return  a fiLLed-in  rdb  structure. 

* Note  that  "private"  is  not  a concept  of  the  underlying  Library,  but 

* is  used  in  the  add  function  to  decide  which  objects  to  accept. 

*/ 


static  PGPError 

do_open  (PGPFiLeRef  const  *fiLeRef1, 
n RingPooL  *ringpooL,  RingDB  *rdb) 


{ 

n 

n 

D 

a 

n 

a 

D 


PGPFi LeRef 
FILE 
Pgp  F i L e 
RingFi Le 
RingSet  const 
Ri ngSet 
i nt 


*fi LeRef; 

*pf i Le; 

* r f i L e ; 
*rsimmut; 

* r s mu  t ; 
error; 


int  trusted,  int  private,  int  writeabLe, 


n rsmut  = r i ng S e t C r e a t e (ringpooL); 
n if  (Irsmut)  { 
n n return  PG  P E R R_NOri  EM  ; 
n > 


n fiLeRef  = pg p C opy F i L e Re f ( f i L e R e f 1 ) ; 

n f = pgpFi LeRef StdIOOpen(fi LeRef , writeabLe  ? kPGP F i L eOpenReadW r i t ePe rm 
nnnnnnnnnnnn  : k PG P F i L e 0 pe n Rea d Pe r m , 
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° “ n n n n n kPG P F i L eTy p e N o n e , Serror); 

n i f ( ! f ) { 

a a /*  Try  creating  file  if  it  did  not  exist  */ 

n n f = pgpF i L eRef S t dIOOpen ( f i L eRef  , k PG P F i L eOp en S t d Upd a t e F L a g s , 

nnnnnnnn  private  ? kPG P F i L eTy p e P r i vR i ng 

: k PG P F i L eTy pe Pu b R i ng , Serror); 

n n i f ( ! f ) { 

° ° n r i ng Se t De s t r oy  (rsmut); 

° n n pgpFreeFiLeRef(fiLeRef); 

n n n return  error; 

n n } 

n > 

n pfiLe  = pgpFileReadOpen  (f,  NULL,  NULL); 
n if  (Ipfile)  { 
n n pgpStdIOCLose  Cf); 

n n ringSetDestroy  (rsmut); 

n a pgpFreeFiLeRef(fiLeRef); 

n n return  PGPERR_NOHEn; 

n > 

n rfiLe  = ringFiLeOpen  CringpooL,  pfiLe,  trusted,  Serror); 
n if  (IrfiLe)  { 
n n pgpFiLeCLose  (pfiLe); 

n n ringSetDestroy  (rsmut); 

a n pgpFreeFiLeRef(fiLeRef); 

n n return  error; 

n > 


rsimmut  = ringFiLeSet  (rfiLe); 
r i n g S e t Add S e t (rsmut,  rsimmut); 


□ 
n 

n rdb->f i LeRef  = 

n rdb->pf i L e = 

n r db->  r f i L e = 

n rdb->rsimmut  = 

n rdb->rsmut  = 

n r d b->b w r i t ea b L e = 

n rdb->bdirty  = 

n rdb->bt rusted  = 

n rdb->bprivate  = 

n return  PGPERR_OK; 

> 


fi LeRef; 

pfiLe; 

r f i Le; 

rsimmut; 

rsmut; 

writeabLe; 

ringFiLelsDirty  (rfiLe); 

trusted; 

private; 


/*  CLose  the  open  keyfiLe  object  */ 
static  PGPError 
do_cLose  (RingDB  *rdb) 

{ 

° if  ( r d b-> r s f r o z e n ) { 

n a ringSetDestroy  ( r d b-> r s f r o z e n ) ; 
n n rdb->rsf rozen  = 0; 
n } 

n rdb->rsimmut  = 0; 

n ringSetDestroy  (rdb->rsmut); 

n rdb-> rsmut  = 0; 
n ringFiLeCLose  (rdb->rfiLe); 
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a rdb->rfiLe  = 0; 
n pg p F i t.  e C L os  e ( r d b->p f i L e ) ; 
n rdb->pfiLe  = 0; 

n if  ( rd b->bf r e e b u f &&  rdb->membuf ) f 
n n pgpHemFree  (rdb->membuf); 
n > 

n return  PGPERR_0K; 

> 


Virtual  Functi ons 


static  Boolean 

rdbIsMutable  (PGPKeyDB  *kdb)  f 

n RingDB  *rdb  = (RingDB  *)kdb->private; 

n return  r d b->b w r i t e a b I e ; 

> 

static  Boolean 

rdbOb j I sMut ab I e (PGPKeyDB  *kdb,  RingObject  *testObj) 

{n 

n RingDB  *rdb  = (RingDB  * ) kdb->p r i va t e ; 

n return  r d b — >b w r i t ea b I e 88  r i ng S e 1 1 s Membe r ( r d b-> r smu t , testObj); 

> 

static  Boolean 

rdbIsDirty  (PGPKeyDB  *kdb)  ( 

n RingDB  *rdb  = (RingDB  *)kdb->private; 

n return  rdb->bdirty; 

> 

/*  Hark  as  dirty  */ 
static  void 

rdbDirty  (RingDB  *rdb) 

{ 

n rdb->bdirty  = TRUE; 
n if  ( r d b-> r s f r o z e n ) { 

n n r i ng S e t D e s t r oy  ( r d b-> r s f r o z en  ) ; 
n n r db-> r s f r o z en  = 0; 
n } 

} 

static  Ri ngSet  * 

rdbGetRi ngSet  (PGPKeyDB  *kdb)  { 


n 

RingDB 

*rdb  = (RingDB  * ) kdb->p r i va t e ; 

n 

Ri ngSet 

* r s e t ; 

a 

if 

( ! ( r s e t 

= r d b-> r s f r 0 z e n ) ) { 

n 

□ 

r s e t = 

r i n g S e t C r e a t e (ringSetPool  ( rdb->rsniut ) ) ; 

n 

n 

ringSetAddSet  (rset,  rdb->rsmut); 

n 

n 

r i ng S e t F r e e z e (rset); 

n 

n 

r db-> r s f r 0 z e n = rset; 
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a > 

n return  rset; 

> 

static  PGPError 

rdbAdd  (PGPKeyDB  *kdb,  RingSet  *toAdd)  -C 


B 

R i n g DB 

*rdb  = (RingDB 

*)kdb->private; 

B 

Ringiterator 

*riAdd;n 

B 

/* 

Iterator  over  toAdd  set  */ 

B 

RingObject 

* r 0 b j ; n 

B 

/* 

Object 

we  are  addi 

n g * / 

B 

i n t 

L e ve 1 ; H 

B 

/* 

Leve  L of  iterator 

in  hierarchy  */ 

B 

i ntnn  n n 

type;n 

B 

/* 

T ype  of 

robj  */ 

B 

i n t 

a d d e d ; n 

B 

/* 

Numbe  r 

of  objects 

added  */ 

fl 

i n t 

skipped; 

B 

/* 

Numbe  r 

of  objects 

ski pped  */ 

B 

i ntnn  n n 

ski pparts; 

/* 

True  if 

skipping. 

obj  not  for  us  */ 

B 

if  ( ! rdb->bw r i t ea b L e ) 

n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n riAdd  = r i n g I t e r C r ea t e (toAdd); 
n if  (!riAdd)  f 
H n return  PG P E R R_N0M E M ; 
n > 


o added  =0; 
n ski pped  = 0; 

n skipparts  = 0; 


tt 

a 

u 

n 

□ 

n 

n 

n 

D 

o 

n 

a 

□ 

s 

n 

□ 

o 

n 

n 

n 

n 

Q 

n 

n 

□ 

Q 


while  ((Level  = r i n g 1 1 e r N e x t Ob j e c t Any w h e r e ( r i Ad d ) ) > 0)  { 


n 

n 

n 

Q 

n 

n 

Q 

n 

n 

n 

n 

Q 

n 

n 

n 

□ 

n 

Q 

n 

□ 

n 

n 

n 

> 


robj  = ringlterCurrentObject  (riAdd,  level); 
type  = ringObjectType  (robj); 
if  (type==RINGTYPE_KEY)  { 

/* 

* If  key  Lacks  secret  object,  put  it  only  on  the  public 

* ring,  and  if  key  comes  only  from  a source  where  it  is  a 

* secret  key,  put  it  only  on  the  secret  ring 
*/ 

if  ( r db->bp  r i va  t e ) <. 

n skipparts  = IringKeylsSec  (toAdd,  robj); 

> else  -C 

n skipparts  = r i ng Key I s S e c 0 n I y (toAdd,  robj); 

> 


D 

n 

B 

B 

B 

B 

B 

B 

B 

B 

> 

/* 
i f 

B 

B 

B 

> 

B 

B 

> 


Signatures  only  go  to  public  keyrings,  secrets  to  private  */ 
(ski ppa  r t s | | 

( (type==RINGTYPE_SIG)&&rdb->bpri vate)  | | 
((type==RINGTYPE_SEC)&&!rdb->bprivate))  { 
skipped  +=  1; 
else  { 

ringSetAddObject  (rdb->rsmut,  robj); 
added  +=  1 ; 


ringIterDestroy  (riAdd); 


n rdbDirty  (rdb); 

n return  PGPERR_0K; 

> 
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static  PGPError 

rdbRemove  (PGPKeyDB  *kdb,  RingObject  *toRemove) 

{ 

n RingDB  *rdb  = (RingDB  *)kdb->private; 

n if  ( ! rd b->b w r i t ea b L e ) 

n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n if  ( r i ng S e 1 1 s Membe r ( r db-> r s mu t , toRemove)) 
n n rdbDirty  (rdb); 

n return  r i ng S e t RemOb j e c t ( r d b-> r smu t , toRemove); 

} 

/* 

* Note  that  unions  don't  pass  this  call  down,  they  take  care  of  it 

* t hemse Ives 
*/ 

static  PGPError 

rdbChanged  (PGPKeyDB  *kdb,  RingSet  * c h a ng e d ke y s ) 

{ 

n RingDB  *rdb  = (RingDB  * ) kd b->p r i va t e ; 

n if  ( ! r d b->b w r i t e a b L e ) 

n D return  PG P E R R_KE Y DB_KE Y DB R E A DON L Y ; 
n rdbDirty  (rdb); 

n return  pgpReSo rt Key s (kdb,  c h a ng ed key s ) ; 

} 

static  PGPError 

rdbCommit  (PGPKeyDB  *kdb)  { 

n RingDB  *rdb  = (RingDB  * ) kd b->p r i va t e ; 

n RingPooLn  *ringpooL  = ringSetPool  ( r d b-> r smu t ) ; 

a PGPError  error; 

n if  ( ! r db->bw r i t ea b L e ) 
n B return  PGPERR_OK; 

B /*  Don't  check  for  trust  changed  if  untrusted  file  */ 

B if  ( ! rdb->bdi rty  &&b ( ! r d b->b t r u s t ed  || 

n n B B ( r db->b t r u s t e d SS  ! r i ng F i L e I s T r u s t C h a n g ed ( r d b-> r f i L e ) ) ) ) 

B B return  PGPERR_0K; 

B /*  Must  use  frozen  set  for  writing  */ 

B ri ngSet Freeze  ( r db-> r smu t ) ; 

B if  ( r db-> r s f r o z e n ) { 

B n ringSetDestroy  (rdb->rsfrozen); 

B B r db-> r s f r o z e n = 0; 

B > 

B error  = do_write  (rdb); 

B if  (error)  ( 

n B / * 

B B * Sometimes  on  error  we  have  fixed  rdb->rsmut,  but  possibly  it  may 

B B * still  be  frozen  as  above.  To  be  safe  we  will  always  make  a copy 

B B * here  so  it  is  writeable  in  the  future. 

C:CHK:abc733caa6705581ff9e7aac33ee00886866c22f8eddff93b5d997dc7d318e240:] 


Pretty  Good  Privacy  5.0'^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


625 


pgpFileDB.c 


□ 

□ 

n 

n 

a 

Q 

□ 

n 

a 


n * / 

n RingSet  *rset  = r i ng S e t C r ea t e (ringpool); 
n pgpAssert  (rset); 

n pgpAssert  ( rd b-> r s mu t ) ; 

n ringSetAddSet  (rset,  rdb->rsmut); 
n ri ngSetDest roy  C rd b-> r s mu t ) ; 
n rdb->rsmut  = rset; 
n return  error; 

> 


n rdb->rsimmut  = ringFileSet  ( r db-> r f i L e ) ; 
n rdb->rsmut  = r i n g S e t C r e a t e CringpooL); 
n ringSetAddSet  (rdb->rsmut,  rdb->rsimmut); 

o rdb->bdirty  = 0; 

n return  PGPERR_0K; 

> 


static  PGPError 

rdbRevert  (PGPKeyDB  *kdb)  { 

n RingDB  *rdb  = (RingDB  * ) kd b->p r i va t e ; 


n 

□ 

n 

□ 

n 

n 

a 

n 

a 

a 

Q 

n 

□ 

Q 

n 

□ 

> 


if  ( ! rdb->bdi rty ) 
n return  PGPERR_0K; 
rdb->bdirty  = 0; 
if  (rdb->rsmut)  { 

n ringSetDestroy  (rdb->rsmut); 

n rdb->rsmut  = r i n g S e t C r e a t e ( r i n g S e t Poo L ( r d b-> r s i mmu t ) ) ; 
n if  ( ! rdb->rsmut ) { 

a n return  PGPERR_NOHEH; 

n > 

n ringSetAddSet  <rdb->rsmut,  r d b-> r s i mmu t ) ; 

> 

if  ( r d b-> r s f r o z e n ) { 

n ringSetDestroy  (rdb->rsfrozen); 
a rdb->rsf rozen  = 0; 

> 

return  PGPERR_OK; 


static  PGPError 

rdbReLoad  (PGPKeyDB  *kdb)  { 

n RingDB  *rdb  = (RingDB  * ) kd b->p r i va t e ; 

n PGPFiLeRef  *fiLeRef; 

n PGPError  err; 


n if  ( r d b->membu f ) 
n n return  PGPERR_0K; 

n if  ((fileRef  = pg p Copy F i L e R e f ( r d b->f i L e R e f ) ) ==  NULL) 
a a return  PGPERR.NOHEM; 

n err  = do_cLose  (rdb); 

n if  (err)  { 

n n pgpFreeFileRef(fiLeRef); 

n n return  err; 

n } 

n err  = do_open  (fileRef,  r d b->b t r u s t e d , r db->b p r i va t e , 
n a r d b->b w r i t e a b I e , ringSetPooL  ( r d b-> r s i mmu t ) , rdb); 
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n rdb->bdi rty  = 0; 
n if  ( r db-> r s f r o z e n ) { 

n n r i ng S e t D e s t r oy  ( r db-> r s f ro z en  ) ; 

n n rd b-> r s f r o z e n = 0; 

n > 

n pg  p F r e e F i L e R e f ( f i L e R e f ) ; 

n return  err; 

> 

static  void 

rdbDestroy  (PGPKeyDB  *kdb) 

{ 

n RingDB  *rdb  = (RingDB  * ) kdb->p r i va t e ; 

n do_cLose  (rdb); 

n pg p F r e e F i L e R e f ( r d b-> f i L e R e f ) ; 

n pgpMemFree  (rdb); 

> 


Constructor 


PGPKeyDB  * 

pgpCreateFi leKeyDB  (PGPFileRef  const  *fiLeRef,  int  trusted,  int  private, 
n int  writeabLe,  RingPooL  *ringpooL,  PGPError  *error) 

{ 

n PGPKeyDB  *kdb; 

n RingDB  *rdb; 

n *error  = 0; 

n kdb  = pg pKey DB C r e a t e I n t e r na L C); 
n if  (!kdb)  { 

n n *error  = PG PE R R_N0M EM ; 

n n return  NULL; 

n } 

n rdb  = (RingDB  *)  pgpHetnALLoc  (sizeof  (RingDB)); 
n if  (!rdb)  { 

n a *error  = PG P E R R_NOM E M ; 

n n pg pKey D B D e s t r oy I n t e r na L (kdb); 

n n return  NULL; 

n } 

n memset  (rdb,  0,  sizeof  (*rdb)); 

n *error  = do_open  (fiLeRef,  trusted,  private,  uriteable,  ringpooL,  rdb); 
n if  (*error)  { 
n n pgpMemFree  (rdb); 

n a pg pKey DB D e s t r oy I n t e r na L (kdb); 

n n return  NULL; 

n } 


n 

kdb->pri vate 

n 

n 

= rdb; 

n 

kdb->magicn  n 

n 

n 

= PGPKDBFILEMAGIC; 

n 

kdb->i sMutabLen 

□ 

n 

= rdbIsMutabLe; 

n 

kdb->objIsMutabLea 

n 

= r dbOb j I sMu t a b L e ; 

Q 

kdb->i sDi rty 

n 

□ 

= rdbIsDi rty; 

n 

kdb->getRi ngSet 

nn 

n 

= rdbGetRi ngSet; 
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Q 

kdb->add 

n 

n 

= rdbAdd; 

n 

kdb->remove 

n 

Q 

= rdbRemove ; 

Q 

kdb->changedn 

n 

n 

= rdbChanged; 

n 

kdb->commi t 

□ 

n 

= rdbCommi t ; 

n 

kdb-> revert 

n 

n 

= rdbRevert; 

Et 

kdb-> reload 

Q 

□ 

= rdbReload; 

□ 

kdb->destroyn 

n 

□ 

= rdbDestroy; 

n pgpKeyDBInitlnternaL(kdb); 

n return  kdb; 

} 

/* 

* Create  a File  type  KeyDB  from  a memory  buffer.  This  will  be  an 

* immutable  KeyDB  since  we  can't  save  our  changes  anywhere. 

*/ 

PGPKeyDB  * 

pgpCreateMemFi leKeyDB  (byte  *buf,  size_t  length,  RingPool  *ringpool, 
n PGPError  *error) 

{ 

n PGPKeyDB  *kdb; 

n RingDB  *rdb; 

n *error  = 0; 

n kdb  = pg pKey DBC r ea t e In t e r na I (); 
n i f ( ! kdb)  { 

n n *error  = PG P E R R_N0H EH ; 

n n return  NULL; 

a > 

n rdb  = (RingDB  *)  pgpMemAlloc  (sizeof  (RingDB)); 
n if  (!rdb)  t 

n n *error  = PGPERR_NOMEM; 

n n pgpKeyDBDestroyInternal  (kdb); 

n n return  NULL; 

n > 

n memset  (rdb,  0,  sizeof  (*rdb)); 

n rdb->rsmut  = r i n g S e t C r ea t e (ringpool); 
n if  ( ! rdb->rsmut ) f 
n n pgpHemFree  (rdb); 

n n pgpKeyDBDestroyInternal  (kdb); 

a a *error  = PG P E R R_N0H EM ; 

n n return  NULL; 

n > 

n rdb->pfile  = pg p F i I e MemRea dOpe n (buf,  length); 

n i f ( ! rdb->pf i I e ) { 

n n ri ngSet Dest roy  ( r db-> r smu t ) ; 

n n pgpHemFree  (rdb); 

n n pgpKeyDBDestroyInternal  (kdb); 

n n *error  = PGPERR_NOMEM; 

H n return  NULL; 

n } 

n rdb->rfile  = ringFileOpen  (ringpool,  rdb->pfile,  0,  error); 
n if  (!rdb->rfile)  ( 
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n n pgpFileClose  ( rdb->pf i L e ) ; 

n n r i ng S e t De s t roy  ( rd b-> r s mu t ) ; 

n n pgpHemFree  (rdb); 

n n pg pKey DBD e s t roy I n t e r na L (kdb); 

n n return  NULL; 

n > 


n rdb->rsimmut  = ringFiLeSet  ( r d b-> r f i L e ) ; 
n ringSetAddSet  (rdb->rsmut,  rdb->rsimmut); 

n rdb->membuf nn  = buf; 

n rdb->bf reebuf n = 1 ; 

n r d b->f i L e R e f n = pg pN e w F i L e Re f F r om F u L L Pa t h ( " " ) ; 


n 

kdb->p  r i va  t e 

n 

n 

= 

rdb; 

□ 

kdb->mag i cn  n 

H 

□ 

= 

PGPKDBFILEMAGIC; 

n 

kdb->isHutablen 

D 

n 

= 

rdbIsMutable; 

n 

kdb->objIsMutablen 

n 

= 

rdbObjIsHutable; 

n 

kdb->i sDi rty 

Q 

n 

= 

rdbIsDi rty; 

n 

kdb->getRingSetnn 

n 

= 

rdbGetRingSet; 

n 

kdb->add 

Q 

n 

= 

rdbAdd ; 

n 

kdb->remove 

n 

n 

= 

rdbRemove; 

n 

kdb->changedn 

n 

n 

= 

rdbChanged; 

□ 

kdb->commi t 

n 

n 

= 

rdbCommi t ; 

□ 

kdb->revert 

Q 

n 

= 

rdbRevert; 

n 

kdb->re  load 

n 

n 

= 

rdbReload; 

n 

kdb->dest  royn 

n 

n 

= 

rdbDest  roy; 

n pg pKey DBI n i t I n t e r na L ( kd b ) ; 

n return  kdb; 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 
*/ 


[:[:CHK:0e0fb99-f110177f25ad174aa068844599c3cafc7fb97054:: 
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/* 

* pgpFilteredSet.c  — Filtered  variant  on  pgpKeySet. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpFi IteredSet . c,v  1.3. 2. 5 1997/06/07  09:50:23  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
#include  "config.h" 

# e nd i f 


#ifdef  HAVE_STDLIB_H 
^include  <stdlib.h> 

# e n d i f 


#include  <string.h> 
#include  <ctype.h> 


#include 
^include 
# i n c I ud  e 
# i n c I ude 
#include 


pgpKDBint.h" 
pgpDebug.h" 
pgpTypes . h" 
pgpHem. h" 
pgpUsuals.h" 


/*  Data  types  */ 


/*  Type  of  filter  */ 
typedef  enum  { 


n 

kFilterAll  = 1,nn 

n 

n 

/* 

n 

kFilterUserID,n  a 

n 

a 

/* 

a 

kFilterKeyIDn  n 

n 

n 

/* 

} 

Fi  IterType; 

Allow  all  keys  */ 

Single  userid  substring  match  */ 
KeylD  match  */ 


/*  Filter  specifiers  */ 
typedef  struct  F i 1 1 e r Speeds e r I D_ 

{ 

a charn  n nameC256];n  n /*  Userid  substring  (not  null  termed)  */ 

n size_tn  n namelen;n  n /*  Length  of  name  */ 

} FilterSpecUserlD; 

typedef  struct  F i 1 1 e r S pe c Key  I D_ 

{ 

n size_tn  n length; 

n byten  n keyIDC8D;n  n /*  KeylD  (raw  bytes)  */ 

} FilterSpecKeylD; 

/*  Union  of  all  filtering  modes  */ 
typedef  union  FilterSpec_ 

{ 

o F i I t e r S pe c U se r I Dn  fsUid; 
o FilterSpecKeyIDnn  fsKid; 

} FilterSpec; 

/*  Private  data  for  KeySet  of  type  filter  */ 
typedef  struct  FilterPriv_ 

{ 

[[CHK:6cd488335e88cf334001db911155148dfdd78bbb110d881197d22ffc718558ef9]] 
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a FiLterTypea  a ftype; 
a FiLterSpeca  a fspec; 
} FiLterPriv; 


/* 


U s e r I D 


Filtering  */ 


/* 

* Stolen  from  pgpRngPub.c: 

★ 

* Return  pointer  to  first  instance  of  (si, 11)  in  (s0,l0), 

* ignoring  case.  Uses  a fairly  simple-minded  algorithm. 

* Search  for  the  first  char  of  si  in  s0,  and  when  we  have  it, 

* scan  for  the  rest . 

* 

* Is  it  worth  mucking  with  Boyer-Moore  or  the  like? 

*/ 

static  char  const  * 

xmem i mem ( c h a r const  *s0,  size_t  10,  char  const  *s1,  size_t  11) 
{ 

a char  c0,  cl,  c2; 
a size_t  1; 


a / * 

a * The  trivial  cases  - this  means  that  NULL  inputs  are  very  legal 
a * if  the  c o r r e s p i n d i ng  lengths  are  zero, 
a * / 

a i f ( 10  < 11  ) 

a a return  NULL; 

a if  ( ! 11  ) 

a a return  s0; 

a 10  -=  11; 


a cl  = t o I o we r ( C u n s i g n ed  char)*s1); 
a do  { 

a a c0  = t o I o we r ( ( u n s i g ned  char)*s0); 
a a if(c0==c1)( 

a a a 1 = 0; 

a a a do  ( 

a a a a if  (++1  ==  11) 

a a a a a returns0; 

a a a a c0  = t o I o we  r ( ( u n s i g ne d c h a r ) s 0 C I D ) ; 

□ a a a c2  = t o I owe r ( C u n s i g ned  char)s1Cl3); 

a a a > while  (c0  ==  c2); 

a a } 

a a s 0 + + ; 

a > while  (10--); 
a return  NULL; 

} 


/* 

* Check  to  see  if  object  is  a member  of  filtered  set.  Get  all  names 

* associated  with  the  specified  object  and  see  if  any  match  the 

* filter  spec. 

*/ 

static  Boolean 

f i IterUserlDIsHember  (PGPKeySet  *set,  F i 1 1 e r S pe c U s e r I D *fs. 


CCCHK:38bbb66626ed3c7dfa3aa244c11dc3406649a52ce3f4aa7c2881abc287d134a53]] 
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□ 

{ 

□ 

n 

n 

n 


RingObject  const  *obj ) 


Ri ngSetnn 
Ringiterator 
char  constn 
si ze_tn  n n 


*rset  = pgpKeyDBRingSet  (set->keyDB); 
* r i t e r ; 

*keyname; 
keyname  L en; 


n if  ( ! ri ngSetlsMember  Crset,  obj)) 
n n return  0; 


□ 

□ 

a 

a 

a 

a 

n 

n 

□ 

□ 

n 

□ 

□ 

D 

n 

Q 

n 

n 

D 

} 


riter  = r i ng I t e r C r e a t e (rset); 
pgpAssert  (riter); 

ringIterSeekTo  (riter,  (RingObject  *)obj); 

ri ngIterRewi nd  (riter,  2);n  /*  Point  at  first  name  on  key  */ 
while  ( r i ng I t e r Nex t Ob j e c t (riter,  2)  ==  2)  { 

a RingObject  *nameobj  = r i ng I t e r C u r r en t 0 b j e c t (riter,  2); 
n if  ( ri ngOb j ectType  (nameobj)  !=  R I NGT Y PE_N AM E ) 
n n continue; 

n keyname  = ringNameName  (rset,  nameobj,  Skeynamelen); 
n if  (xmemimem  (keyname,  keynamelen,  fs->name,  f s->name L en ) ) { 
n n /*  Success  */ 

n n ringObjectRelease  (nameobj); 

n n r i ng I t e r D e s t roy  (riter); 

n n return!; 

n } 

> 

/*  No  matches  */ 
ringIterDestroy  (riter); 
return  0; 


/* 

* Check  to  see  if  object  is  a member  of  filtered  set. 

*/ 

static  Boolean 

f i IterKeylDIsMember  (PGPKeySet  *set,  F i 1 1 e r S pe c Key  I D *fs, 
n RingObject  const  *obj) 

{ 

n RingSetnn  *rset  = pgpKeyDBRingSet  (set->keyDB); 

n Ringiterator  *riter; 

n RingObject  const  *key  = NULL; 

n byten  n n pkalg; 

n byten  n n keyidCSD; 


n if  ( ! r i ng S e t I s Hemb e r (rset,  obj)) 
n n return  0; 


n riter  = ringIterCreate  (rset); 
a pgpAssert  (riter  !=  NULL); 

o ringIterSeekTo  (riter,  (RingObject  *)  obj); 

n key  = ringIterCurrentObject(riter,  1); 

n i f ( key  ! = NULL) 

n n ringKeyIDS  (rset,  key,  Spkalg,  keyid); 
n ringIterDestroy  (riter); 


n return  key  !=  NULL  SS  Imemcmp  (keyid  + s i z eof ( key i d ) - fs->length, 

n n n n n n n n n fs->keyID,fs->length); 

} 


[;[CHK:8d98d99a11f08a62fbb45b2bb1bb833d33e7Aa3999ffc007cbeba003ddb35a04f]: 
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/*  General  filtering  routines  */ 


s t a t i c Boo  lean 

f i IteredSetlsMember  (PGPKeySet  *keys,  RingObject  const  *obj) 
f 

n FilterPrivn  *fpriv; 

n Booleannn  n rslt  = 0; 

n pgpaCpgpaPGPKeySetValidCkeys)); 

a fpriv  = (FilterPriv  *)  key s->p r i va t e ; 
n pgpAssert  (fpriv); 

n switch  ( f p r i v->f t y pe  ) ( 
n case  kFilterAll: 

n n rslt  = r i ng S e t I sMembe r ( pg pKey DBR i n g S e t ( key s-> key DB ) , obj); 
n n break; 
n case  k F i I t e r U s e r I D : 

n n rslt  = f i 1 1 e r U s e r I D I sHemb e r (keys,  &f p r i v->f s pe c . f s U i d , obj); 
n n break; 

n case  k F i 1 1 e r Key  I D : 

n a rslt  = f i 1 1 e r Key  I D I s Membe r (keys,  S f p r i v->f s pe c . f s Ki d , obj); 

n n break; 

n > 

n return  rslt; 

}n 

static  void 

f i 1 1 e r ed S e t D e s t r oy  (PGPKeySet  *keys) 

{ 

n FilterPriv  *fpriv  = (FilterPriv  *)  key s->p r i va t e ; 
n if  (fpriv) 
n n pgpFree  (fpriv); 

n return; 

} 


/* 

* Create  a filtered  KeySet  based  on  the  same  KeyDB  as  the  specified 

* original.  The  original  must  be  unfiltered.  The  filtering  is  based 

* on  a name  substring  (not  keyid). 

*/ 

PGPKeySet  * 

pgpFi IterKeySetUserlD  (PGPKeySet  *origset,  char  const  *name,  size_t  namelen) 
{ 

n PGPKeySetn  n *newset; 

n FilterPrivn  n *fpriv; 

n /*  Check  for  substring  too  long  to  fit  */ 
n if  (namelen  > s i z eo f ( f p r i v-> f s pe c . f s U i d . n a me ) ) 
n n return  NULL; 

n /*  Can  only  filter  a set  once  at  present,  error  if  already  filtered  */ 
n if  ( o r i g s e t ->d e s t r oy  ==  f i 1 1 e r ed S e t D e s t r oy ) 
n n return  NULL; 

[;[CHK:ddeeedd8499330667c47ea1d0d7a66db2fc2f555fa18bf29c775f0035db6150f9:: 
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n fpriv  = (FiLterPriv  *)  pgpMemALLoc  (sizeof  (*fpriv)); 
n if  (Ifpriv) 

n n return  NULL; 

n pgpC L ea rMemo ry  (fpriv,  sizeof  (*fpriv)); 

a fpriv->ftype  = k F i L t e r U s e r I D ; 

n pgpCopyMemory  (name,  fpriv->fspec.fsUid.name,  nameLen); 
n fpriv->fspec.fsUid. nameLen  = nameLen; 

n newset  = pg p C opy Key S e t (origset); 
n if  (Inewset)  ( 
n n pgpFree  (fpriv); 

n a return  NULL; 

n > 

n ne use t->p r i va t e = fpriv; 

n newset->isMember  = fiLteredSetlsMember; 
n newset->dest roy  = f i L t e r e d S e t D e s t r oy ; 
n return  newset; 

} 

/* 

* Create  a fiLtered  KeySet  based  on  the  same  KeyDB  as  the  specified 

* originaL.  The  originaL  must  be  unfiLtered.  The  fiLtering  is  based 

* on  Key  I D . 

*/ 

PGPKeySet  * 

pgpFi  LterKeySetKeylD  (PGPKeySet  *origset,  byte  const  *keyID, 

° ° ° ° n a size_t  keyIDLength) 

{ 

n PGPKeySetn  a *newset; 

n FiLterPrivn  a *fpriv; 

n /*  Can  onLy  fitter  a set  once  at  present,  error  if  aLready  fiLtered  */ 
n if  ( o r i g se t ->de s t r oy  ==  f i L t e r ed S e t D e s t r oy ) 
a a return  NULL; 

n fpriv  = (FiLterPriv  *)  pgpMemALLoc  (sizeof  (*fpriv)); 
n if  (Ifpriv) 

a a return  NULL; 

n pgpCLearHemory  (fpriv,  sizeof  (*fpriv)); 
n fpriv->ftype  = k F i L t e r Key  I D ; 

n pgpCopyMemory  (keylD,  f p r i v-> f s p e c . f s Ki d . ke y I D , keyIDLength); 
n f p r i v->f spe c . f s Ki d . L eng t h = keyIDLength; 

n newset  = pgpCopyKeySet  (origset); 
n if  (Inewset)  ( 
n a pgpFree  (fpriv); 

a a return  NULL; 

n } 

n ne ws e t->p r i va t e = fpriv; 

n ne w s e t -> i s Membe r = fiLteredSetlsMember; 
n n e w s e t ->d e s t r oy  = f i L t e r ed S e t De s t r oy ; 

n return  newset; 

> 

CCCHK:ded55dde99526f008bc022a501f0b0dd66fc9903bbae13321e344aae97330ea50:3 
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/* 

* Create  a filtered  KeySet  based  on  the  same  KeyDB  as  the  specified 

* original.  The  original  must  be  unfiltered.  The  filtering  type 

* is  chosen  automatically  based  on  the  string. 

* 

* Currently,  a "0x"  prefix  looks  up  by  keylD,  otherwise 

* by  userid  name  substring  matching. 

*/ 


PGPKeySet  * 

pgpFi  IterKeySet Auto  (PGPKeySet  *origset,  char  const  ‘pattern) 
{ 


x'  ) 


Q 

PGPKeySet  ‘nsubset  = NULL; 

n 

1 f 

(patternC0II  ==  *0'  &&  t o 1 owe  r ( pa  1 1 e rn  C 1 11 ) ==  ' 

n 

{ 

Q 

c 

size_tn  keyIDLength; 

a 

n 

byten  keyIDC8D; 

n 

□ 

intnn  idindex; 

n 

n 

intnn  patindex; 

n 

n 

char  n ch; 

a 

ta 

byten  theByte; 

n 

n 

1 f 

(patternC2D  ==  '\0') 

n 

n 

El 

return  NULL; 

n 

n 

idindex  = s i zeof ( key  I D ) ; 

a 

n 

for 

(patindex  = s t r 1 e n ( pa 1 1 e r n ) - 2; 

n 

a 

n 

n patindex  > 0 &&  idindex  > 0; 

n 

a 

D 

n patindex  -=  2) 

Q 

n 

{ 

D 

Q 

D 

ch  = 1 0 1 owe  r ( pa  1 1 e r n C pa  1 1 ndex  3 ) ; 

n 

Q 

□ 

if  (ch  >=  '0'  &&  ch  <=  '9'  ) 

n 

n 

n 

n theByte  = ch  - '0'; 

n 

a 

n 

else  if  (ch  >=  'a'  &S  ch  <=  'f') 

o 

n 

n 

n theByte  = ch  - 'a'  + 10; 

n 

n 

Q 

else  if  (patindex  < 2) 

n 

D 

n 

n theByte  = 0; 

n 

n 

□ 

else 

n 

□ 

Q 

n return  NULL; 

n 

Q 

n 

t heBy t e <<=  4; 

n 

n 

D 

ch  = 1 0 1 owe r ( pa 1 1 e r n Cpa 1 1 ndex  + 13); 

n 

n 

n 

if  (ch  >=  '0'  S&  ch  <=  '9'  ) 

n 

a 

Q 

n theByte  +=  ch  - '0'; 

Q 

n 

□ 

else  if  (ch  >=  'a'  &S  ch  <=  'f') 

n 

D 

n 

n theByte  +=  ch  - 'a'  + 10; 

n 

n 

H 

else 

n 

n 

n 

n return  NULL; 

□ 

n 

n 

keylDC  — idlndex3  = theByte; 

n 

n 

> 

n 

□ 

w h i 

le  (idindex  > 0 &S  (idindex  % 4)  !=  0) 

n 

n 

Q 

keylDC  — idlndex3  = 0; 

n 

n 

keyIDLength  = s i z eo f ( key  I D ) - idindex; 

n 

n 

subset  = pgp F i 1 1 e rKeySe t Key  I D ( or i gse t , keylD 

Q 

> 

n 

else 

+ idindex. 


keyIDLength) ; 
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n { 

n n subset  = pg p F i I t e r Key S e t U s e r I D ( o r i g s e t , pattern, 
n > 

n return  subset; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


[[CHK:5c008888187bb3f85b027:: 


strlen(pattern)); 
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/* 

* pgpKDBint.h  --  Internal  definitions  for  PGP  KeyDB  Library 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpKDBint.h, V 1.37.2.2  1997/06/07  09:50:24  mhw  Exp  $ 

*/ 

#ifndef  PGPKDBINT_H 
#define  PGPKDBINT.H 

^include  <stdio.h> 

^include  "pgpKeyDB.h" 

#incLude  "pgpFiLeRef.h" 

#incLude  "pgpTypes.h" 

#incLude  "pgpUsuaLs.h" 

#incLude  "pgpErr.h" 

//include  "pgpMem.h" 

//include  "pgpMemPool.h" 

//include  "pgpRngPub.h" 

/* 

* An  internal  object  representing  a source  of  keys,  either  a file, 

* some  memory,  or  a union  of  other  PGPKeyDBs 
*/ 

struct  PGPKeyDB. 

{ 

n intnn  n n n magic; 

#define  PG PKDB F I L EH AG  I C nn  0x1000 
//define  PG  PKDBUN I ONH  AG  I Cn  0x2000 
//define  PGPKDBHEHHAG I Cn  n 0x3000 


n 

void  *n  n 

n 

n 

private; 

Q 

intnn  n 

n 

Q 

refCount; 

n 

PGPKeySet 

*nn 

n 

fi rstSetInDB; 

n 

MemPoo Inn 

D 

n 

keyPool; 

Q 

1 ong  n n 

n 

Q 

numKeys ; 

n 

PGPKey  *n 

n 

n 

fi rstKeyInDB; 

□ 

PGPKey  *n 

n 

a 

fi rstFreeKey; 

PGPSubKey 

★ 

fi rstFreeSubKey; 

n 

PGPUserlD 

*nn 

n 

fi rstFreeUserlD; 

n 

PGPCertn*n 

o 

□ 

fi rstFreeCert; 

□ 

PGPKeyLi st 

*n 

n 

keysByKeylD; 

n 

Booleannn 

n 

□ 

( * i s H u t a b 1 e ) n (PGPKeyDB  *db); 

a 

Boo  1 eannn 

n 

n 

(*objIsMutable)n(PGPKeyDB  *db. 

n 

n n n 

n 

n 

n n n n RingObject  *test0bj); 

Q 

Boo  1 eannn 

n 

n 

C*isDirty)n  n (PGPKeyDB  *db); 

n 

Ri  ngSet  *n 

n 

n 

( *g e t R i ng S e t ) n (PGPKeyDB  *db); 

n 

/*  The  RingSet 

arguments  below  must  be  of  whole  keys  */ 

Q 

PGPErrorn 

n 

Q 

(*add)n  n n (PGPKeyDB  *db. 

Q 

n n D 

□ 

n 

n n n n RingSet  *toAdd); 

n 

PGPErrorn 

n 

n 

(*changed)n  n (PGPKeyDB  *db. 

n 

Q D H 

u 

n 

n n n n RingSet  *changed); 

n 

PGPErrorn 

n 

n 

(*remove)n  n (PGPKeyDB  *db. 

n 

Q n n 

n 

n 

n n n n RingObject  *toRemove) 

CCCHK:644c7f001  009982d5e09dd9b808c44bdd6eeba5f49c338ab4cc4d6c05f0bb2ebcIlIl 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


637 


pgpKDBint.h 


B 

PGPErrorn 

B 

B 

(*commi t )n 

B 

( PGPKeyDB 

*db)  ; 

B 

PGPErrorn 

B 

B 

(*revert)n 

B 

( PGPKeyDB 

*db); 

B 

PGPErrorn 

B 

B 

(*reload)n 

B 

( PGPKeyDB 

*db),- 

B 

VO i d n n 

B 

B 

(*destroy)n 

B 

(PGPKeyDB 

*db); 

>; 


/* 

* Objects  that  represent  Aurora  RingObjects.  If  an  attempt  is  made  to 

* delete  an  object,  and  refCount  > 0,  then  the  removed  flag  should 

* be  set  to  TRUE  instead.  The  object  can  be  physically  deleted  when  the 

* refCount  drops  to  zero. 

* 

* struct  listhdr  saves  memory  but  not  having  to  embed  a PGPUserlD  in 

* a PGPKey,  or  a PGPCert  in  a PGPUserlD,  to  maintain  the  do u b I y- I i n ke d 

* lists.  It  may  be  typecast  to  PGPUserlD  or  PGPCert  as  required. 

*/ 

struct  listhdr  f 

struct  listhdr  *n  next; 
struct  listhdr  *n  prev; 

>; 


enum  certtype  fkeycert,  uidcert>; 


struct  PGPCert 
C 


PGPCert  *n 

B 

B 

next; 

PGPCert  *n 

B 

B 

prev; 

B 

RingObject 

*B 

B 

c e r t ; 

B 

enum  ce  rt  typen 

B 

type; 

B 

union  { 

B 

n PGPUserlD 

*aB 

u s e r I D ; 

/* 

type 

B 

n PGPKey 

*B 

B 

key;H 

/* 

type 

B 

} up; 

B 

u i n t n n 

B 

B 

refCount; 

B 

Booleannn 

B 

B 

removed; 

long 

userVal; 

>; 


ui dcert  */ 
keycert  */ 


struct  PGPUserlD 


PGPUserlD 

*nn 

B 

next ; 

PGPUserlD 

*nn 

B 

prev; 

B 

struct  1 i sthdrn 

B 

certs; 

B 

RingObject 

*B 

B 

u s e r I D ; 

B 

PGPKey  *n 

B 

B 

key; 

B 

i ntnn  n 

B 

B 

refCount; 

B 

Booleannn 

fl 

B 

removed ; 

long 

u s e r V a 1 ; 

>; 

struct  PGPSubKey 


1 

PGPSubKey  * 

next ; 

PGPSubKey  * 

p r e V ; 

RingObject  * 

subKey; 

PGPKey  * 

key; 

/*  doub I y- I i n ked  list  of  UserlD  certs  */ 
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i nt 

Boolean 
L ong 


refCount; 
removed; 
u s e r V a L ; 


>; 


struct  PGPKey_ 

C 

n intnn  n n 

n PGPKeyDB  *n  n 

Q PGPKey  *n  n 

n RingObject  *n 

struct  Listhdr 
n struct  Listhdrn 
Long 

>; 

/* 

* The  external  object  which  represents  a filtered  PGPKeyDB 
*/ 

struct  PGPKeySet_ 

{ 


n refCount; 
n keyDB; 
n nextKeyInDB; 
n key; 

subKeys;  /*  doubly  Linked  List  of  Subkeys  */ 

n userlDs;  /*  doubly-linked  List  of  UserlDs  */ 

userVal; 


12 

void*nr*  ° 

n 

private; 

n 

i ntnn  n n 

n 

refCount; 

n 

PGPKeyDB  *n  n 

□ 

keyDB; 

n 

PGPKeySet  *nn 

Q 

prevSetInDB; 

n 

PGPKeySet  *aa 

0 

nextSetInDB; 

n 

PGPKeyList  *n 

0 

firstListInSet; 

□ 

Boo  L eannn  n 

0 

(*i sHember)n(PGPKeySet  *set,  RingObject 

n 

>; 

V 0 i d n n n 

0 

(*destroy)n  (PGPKeySet  *set); 

/* 

* The  external  object 

*/ 

struct  PGPKeyList_ 

which  represents  a sorted  PGPKeySet 

n 

intnn  n n 

0 

refCount; 

n 

PGPKeySet  *nn 

0 

key S e t ; 

□ 

PGPKeyOrderi ngn 

0 

order; 

n 

PGPKeyList  *n 

0 

prevLi stInSet; 

n 

PGPKeyList  *a 

0 

nextLi stInSet; 

Q 

PGPKeylter  *n 

0 

firstIterInList; 

Q 

L on  gn  n n 

0 

keyCount;n  n /*  size  of  keys  array  * 

n 

PGPKey  **n  n 

0 

keys; 

>; 


/* 

* The  external  object  which  represents 
*/ 

struct  PGPKeyIter_ 

{ 

PGPKeyList  *n 
n PGPKeylter  *n 
n PGPKeylter  *n 


n 

n 

B 


key  iterator 


keyList;n  n /*  parent  keylist  */ 
prevIterInLi st;n/*  next  iter  in  keylist  */ 
nextIterInList;n/*  next  iter  in  keylist  */ 
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□ 

longn  a 

n 

n 

keylndex;n 

c 

/* 

current 

key  index  in  keylist  */ 

PGPKey  *n 

n 

n 

k e y ; n a 

a 

/* 

p t r 

t 0 

current 

key  */ 

PGPSubKey 

* 

s u b K e y ; 

/* 

pt  r 

t 0 

current 

subkey  */ 

n 

PGPUserlD 

*nn 

a 

userID;na 

n 

/* 

pt  r 

t 0 

current 

userid  */ 

□ 

PGPCert  *n 

tt 

n 

uidCert;n 

a 

/* 

p t r 

t o 

current 

userid  cert  */ 

>; 


#define  C H E C KR EMO V E D ( x ) \ 

if  (!(x)  11  ( X ) -> r emo ve d ) \ 

n return  PG P E R R_KE Y DB_0B J E CT_ D E L ET E D 


/*  Global  variables:  These  aren't  valid  until  pgpLiblnitO  is  called  */ 


/*  Export  some  of  these  for  simple 
extern  RingPool  PGPKDBExport  *n  n 
extern  PgpEnv  PGPKDBExport  *n  n 

extern  Boolean  PG PKD B Ex po r t nn  n 

extern  Booleann  n n n n n 

extern  intn  n n n n n n 

extern  Pg p Ra ndomC o n t e x t *n  n n 


API  support  */ 
pgpRingPool; 
p g p E n V ; 
pgpRngSeeded; 
pgpPrefsChanged; 
pgpLibSetup; 
pgpRng; 


/*  Internal  functions  */ 


PGPKeyDB  * 

pgpKeyDBCreateInterna I (voi d); 
void 

pgpKeyDBInitInterna I (PGPKeyDB  *db); 


PGPKeyDB  * 

pgpKeyDBCreate(void); 


PGPKeySet  * 

pgpKeyDBRoot Set ( PGPKeyDB  *db); 

Ri  ngSet  * 

pgpKeyDBRi ngSet ( PGPKeyDB  *db); 

Boolean 

pgpKeyDBIsMutableC PGPKeyDB  *db); 

Boo  lean 

pgpKeyDBIsDi rty (PGPKeyDB  *db); 

PGPError 

pgpKeyDBChanged ( PGPKeyDB  *db,  RingSet  * c h a n g e d key s ) ; 
PGPE  r ro  r 

pgpCommitKeyDB( PGPKeyDB  *db); 

PGPError 

pgpCheckKeyDB  (PGPKeyDB  *db); 

PGPError 

pgpRevertKeyDB(PGPKeyDB  *db); 

PGPError 
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pg p Re L oa d Key DB ( PG PKey DB  *db); 


PGPKeyDB  * 

pgpCreateFi  LeKeyDB  (PGPFUeRef  const  *fiLeRef,  int  trusted,  int  private, 
n int  writeabLe,  RingPooL  *ringpooL,  PGPError  *error); 

PGPKeyDB  * 

pgpCreateMemFi LeKeyDB  (byte  *buf,  size_t  Length,  RingPooL  *ringpooL, 
n PGPError  *error); 

PGPKeyDB  * 

pgpCreateUnionKeyDB  (PGPError  *error); 

PGPError 

pgpUni onKeyDBAdd  (PGPKeyDB  *kdb,  PGPKeyDB  *kdbnew); 
void 

p g p K e y I t e r A d d Ke y (PGPKeyList  *keys.  Long  idx); 
void 

pg p Ke y I t e r R emo V e Ke y (PGPKeyList  *keys.  Long  idx); 

PGPError 

pgpCopyKey  (struct  RingSet  *src,  union  RingObject  *obj, 
n n n struct  RingSet  **dest); 

PGPKey  * 

pgpGetKeyByRingObject  (PGPKeyDB  *keys,  union  RingObject  *obj); 

void  p g p D e a L L o c S u b K e y (PGPSubKey  *subkey); 

void 

pgpDeaLLocUserlD  (PGPUserlD  *userid); 
void 

p g p D e a L L o c C e r t (PGPCert  *cert); 

PGPError 

pgpExpandKey  (PGPKey  *key); 

PGPError 

pgpCoL LapseKey  (PGPKey  *key); 

PGPError 

pgpAddObjects  (PGPKeyDB  *keys,  struct  RingSet  *addset); 

PGPError 

pgpRemoveOb j ect  (PGPKeyDB  *keys,  union  RingObject  *obj); 
void 

pgpIncKeyDBRefCount(PGPKeyDB  *db); 
void 

pg p F r e e Key DB ( PG PKey DB  *db); 

PGPError 

pgpBui LdKeyPooL (PGPKeyDB  *db,  BooLean  d e L e t e F L a g ) ; 
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PGPError 

pgpReSortKeysCPGPKeyDB  *db,  RingSet  *set); 

PGPKeyDB  * 

pgpKeyDBCreateInternaL  (void); 
void 

pgpKeyDBDest royinterna  I (PGPKeyDB  *db); 
i n t 

pgpDearmorKeyFi Le  (PgpEnv  *env,  PGPFiLeRef  * I n pu t F i L e R e f , 
a byte  * *0u t p u t Bu f f e r , size_t  *0 u t p u t Bu f f e r Le n ) ; 

i n t 

pgpDearmorKeyBuf f er  (PgpEnv  *env,  byte  * I n pu t Bu f f e r , size_t  I n pu t Bu f f e r Le n , 
n byte  **0utputBuffer,  size_t  *OutputBufferLen); 

i nt 

pgpWri  t eArmoredSet Fi le  (FILE  *fp,  RingSet  const  *set,  PgpEnv  *env); 
i nt 

pgpWri  teArmoredSetBuf f er  (byte  *buf,  size_t  *bufLen,  RingSet  const  *set, 
n PgpEnv  *env) ; 


/*  Internal  preferences  calls  */ 
PGPError 

pgpSetDefaultPrefsInternal  (void); 
PGPError 

pgpSetDefaultKeyPathInternal  (void); 
PGPError 

pgpLoadPrefsInternal  (void); 

PGPError 

pgpSa ve P r e f s I n t e r na  I (void); 

#endif  /*  PGPKBDINT.h  */ 

/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi : ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpKeyDB.h  — Public  definitions  for  PGP  KeyDB  Library 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpKeyDB.h, V 1.72.2.12  1997/06/07  09:50:24  mhw  Exp  $ 

*/ 

#ifndef  PGPKEYDB.H 
^define  PGPKEYDB.H 

#ifdef  HAVE. CONFIG. H 
^include  "config.h" 

# e nd i f 

#if  PRAGMA. IMPORT. SUPPORTED 
#pragma  import  on 
ttend  i f 


^include  <time.h> 


SincLude 

"pgpDebug . h" 

SincLude 

"pgpTypes.h" 

SincLude 

"pgpUsuaLs.h" 

S i n c L ude 

"pgpErr.h" 

#i nc  Lude 

"pgpFiLeRef.h" 

# i nc  L ude 

"pgpRngPub.h" 

Si nc  Lude 

" pg  pPu  bKey . h " 

SincLude 

"pgpRndPooL . h" 

SincLude 

"pgpTrstPkt . h" 

SincLude 

"pgpTrust.h" 

SincLude 

"pgpHash.h" 

Sine  Lude 

"pgpTimeDate.h 

#ifndef  TYPE.PGPKE YDB 
^define  TYPE.PGPKEYDB 

typedef  struct  PGPKeyDB.n  PGPKeyDB; 

Send i f 

Sifndef  TYPE.PGPKEY 
Sdefine  TYPE.PGPKEY 

typedef  struct  PGPKey.n  n PGPKey; 

# e nd i f 

Sifndef  TYPE.PGPSUBKE Y 
Sdefine  TYPE.PGPSUBKE Y 

typedef  struct  PGPSubKey.  PGPSubKey; 

# e nd i f 

Sifndef  T Y P E.PG PU S E R I D 
Sdefine  T Y PE.PG PU S E R I D 

typedef  struct  PGPUserlD.n  PGPUserlD; 

Sendi f 

Sifndef  TYPE.PGPCERT 
Sdefine  TYPE.PGPCERT 

typedef  struct  PGPCert.nn  PGPCert; 

Se  n d i f 
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#ifndef  T Y P E_ PG PKE Y S ET 
^define  T YPE_PG PKE Y S ET 

typedef  struct  PGPKeySet_n  PGPKeySet; 

# e n d i f 

#ifndef  T Y P E_ PG PKE Y L I ST 
#define  TYPE_PGPKE YLI ST 

typedef  struct  PGPKeyList_n  PGPKeyList; 
#end i f 


#ifndef  T Y PE_PG PKE Y I T E R 
#define  T Y P E_ PG PKE Y I T E R 

typedef  struct  PGPKeyIter_n  PGPKeylter; 
#end i f 


/*  Key  ordering  */ 

typedef  enum  PG PKey 0 r d e r i n g { 
a k PG P Any 0 r d e r i ng  = 1, 
n kPG PU s e r I D 0 r de r i ng , 

Q kPG PR e ve  r s eU  s e r I D 0 r d e r i ng  , 

° k PG PKey I D 0 r de r i ng , 

° k PG PRe ve r s eKey I D 0 r d e r i n g , 

n kPGPVa L i d i t y 0 rde r i ng , 
n kPGPReverseVa L i di tyOrderi ng, 
n kPG PT r u s t 0 r d e r i ng , 

n k PG PRe ve r s eT r u s t 0 r de r i n g , 

° kPG PKey S i z e 0 r de r i ng , 

n k PG PRe ve r s e Key S i z e 0 r d e r i ng , 

o kPG PC r e a t i onO r de r i ng , 

n k PG  PR  e V e r s e C r ea  t i on  0 r d e r i ng 

> PG PKey 0 r d e r i n g ; 


/*  Key  and  UserlD  validity 
Q k PG PU s e r I D P r opVa I i d i t y 

#define  PG P_V A LI D I T Y_UNKNOWNn 
#define  PG P_ V A LI D I T Y_ I N V A LI Dn 
#define  PG P_V A L I D I T Y_M A RG I N A Ln 
#define  PG P_ V A LI D I T Y_ C OMP LET En 

#define  PG P_ V A LI D I T Y_U NTRU S T E D 


k PG PKey P r op Va L i d i t y and 
*/ 

PGP_NAMETRUST_UNKNOWN 

PGP_NAMETRUST_UNTRUSTED 

PGP_NAHETRUST_MARGINAL 

PGP_NAMETRUST_COnPLETE 

PGP_VALIDITY_INVALID 


values  for 
properties. 


/*  Key  properties  */ 

typedef  enum  { 
n /*  String  properties  */ 
n kPGPKeyPropKeyld  = 10, 
n kPG PKey  P r o p F i ng  e r p r i n t , 
n /*  Number  properties  */ 
a kPG PKey P r op A I g I d , n 
n kPG PKey P r o pB i t s , n 

n kPGPKeyPropTrust,n  n n /*  old  trust  model  only  */ 
n kPGPKeyPropTrustVa  I = kPG PKey P r opT r u s t , 
n kPGPKeyPropVa I i di ty,  /*  both  trust  models  */ 
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n /*  Time  properties  */ 
n kPGPKeyPropC rea t i on, 
n kPGPKeyPropExpi rat i on, 
n /*  Boolean  properties  */ 
n kPGPKeyPropIsSecret, 
n kPGPKeyPropIsAxi omati c, 
n kPGPKeyPropI sRevoked, 
n kPGPKeyPropIsDi sabLed, 
n kPGPKeyPropIsNotCorrupt, 

n kPGPKeyPropIsValid  = kPGPKeyPropIsNotCorrupt, 
n kPGPKeyPropIsExpi red, 
n kPGPKeyPropNeedsPassphrase, 
a kPGPKeyPropCanSi gn, 
a kPGPKeyPropCanEncrypt 

> PGPKeyPropName; 

/*  User  ID  properties  */ 

typedef  enum  { 
a /*  String  properties  */ 
a kPGPUserlDPropName  = 30, 

a /*  Number  properties  */ 

a kPGPUserlDPropVa L i di ty,na  /*  both  trust  models  */ 
a k PG PU s e r I D P r opT r u s t Va I = kPG PU s e r I D P r op V a I i d i t y , 

a kPGPUs e r I DP r opCon f i dencea  /*  new  trust  model  only  */ 

a /*  Time  properties  */ 

a /*  Boolean  properties  */ 

> PGPUserlDPropName; 

/*  Certificate  properties  */ 

typedef  enum  { 
a /*  String  properties  */ 

a kPGPCertPropKeylD  = 50, 

a /*  Number  properties  */ 

a /*  Time  properties  */ 

a kPGPCert PropC rea t i on, 

a /*  Boolean  properties  */ 

a kPGPCertPropIsRevoked, 

a kPGPCertPropIsNotCorrupt, 

a kPGPCertPropI sVa I i d = kPGPCertPropIsNotCorrupt, 
a kPGPCertPropIsTri ed, 

a kPGPCertPropIsVeri f i ed, 

a kPGPCertPropIsChecked  = kPG P C e r t P r op  I s Ve r i f i e d , 
a kPGPCertPropIsHyCert 

> PGPCertPropName; 

/* 

* Note  on  kPGPCertPropIsHyCert . This  is  a convenience  property  for 

* determining  whether  the  certification  was  made  by  one  of  the 

* caller's  own  private  keys.  This  can  only  return  true  if  the 

* signing  key  is  in  the  same  base  keyset  as  the  certification.  If  the 

* signing  key  is  (suspected  to  be)  in  a different  base  keyset,  call 

* pgpGe t Ce r t i f i e r (certset,  signerset,  &key)  followed  by 

* pgpGetKeyBoo lean  (key,  kPGPKeyPropIsSecret,  Ssecret). 

*/ 

/* 
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* Typedefs  for  preference  file  access 

* Note  that  pg p P r e f s I n t . h , pgpPrefHac.c  and  pgpPrefXXX.c  must 

* be  updated  if  these  change 
*/ 


typedef  enum  PG P P r e f N a me N umb e r_  { 

° k PG PP r e f N urn F i r s t = 100, 
n kPGPPref Ve r s i on  = k PG PP r e f N urn F i r s t , 

° k PG  PP  r e f C i p h e r N urn, 
a kPGPPref HashNum, 

° k PG PP r e f C omp r e s s N urn, 

° k PG PP r e f A r mo r L i n e s , 

n kPGPP r e f C e r t Dep t h , 

n kPG P P r e f C omp r e s s Qua L , 

n kPG  PP  r ef  Ma  i L Wo  rd  W r a p W i d t h , 

n kPGPPref Ma i L Pas s Ca cheDu ra t i on, n /*  seconds  */ 

n k PG PP r e f S i g n C a c h e D u r a t i o n , n n /*  seconds  */ 

a kPGPPref DateOfLastSpLashScreen,n/*  PGPTime  */ 
n kPGPPref HTTPKeyServerPort, 
n k PG PP r e f N urn  La s t 
} PG PP r e f Na me N umb e r ; 


typedef  enum  PG P P r e f N a me S t r i n g_  { 
n kPGPPref St rFi rst  = 200, 
a kPGPPref UserlD  = kPG P P r e f S t r F i r s t , 

° kPGPPref PubRi ng, 

n kPGPP r ef P r i vR i ng, 

n kPG PP r e f R a nd om D e V i c e , 

n kPGPPref RandSeed, 

Q k PG  PP  r e f La  n g ua  g e , 

° k PG PP r e f 0 wn e r Na me  , 

n kPG P P r e f C ompa ny Na me , 

° k PG PP r e f L i c e n s e N umb e r , 

n k PG PP r e f HTT PKey S e r V e r H o s t , 

n kPGPPref StrLast 
J PGPPrefNameString; 


typedef  enum  PG PP r e f Name  Boo L e a n_  { 
n kPG P P r e f Boo L F i r s t = 300, 
n kPGPPref Armor  = k PG P P r e f Boo L F i r s t , 
n k PG PP r e f E n c r y p t To S e L f , 
o kPG P P r e f C omp r e s s , 

° k PG  PP  r e f Ha  i L Wo  r d W r a p E na  b I e , 

n kPG PP r e f M a i L Pa  s s C a c h e E na  b I e , 

n kPGPPrefHai LEncryptPGPMIME, 
n kPGPPref Ma i L S i gnPGPHIHE, 
n k PG PP r e f F a s t Key G e n , 

n kPGPPrefSignCacheEnabLe, 
o kPGPPref Wa rnOnHi xRSAE L Gama L , 
n k PG PP r e f Ha i L En c r y p t D e f a u L t , 
n kPG  P P r e f Ha  i L S i g n D e f a u L t , 
n kPGPPrefMarginaLLyVaLidWarning, 
n k PG  PP  r e f F i r s t Ke  y G e n e r a t e d , 

a kPGPPrefWarnOnRSARecipAndNonRSASigner, 
n k PG PP r e f Boo L La s t 
} PG PP r e f Name Boo L e a n ; 


typedef  enum  PG P P r e f Na me D a t a { 
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n kPGPPref Data F i rst  = 400, 

n kPG P P r e f PubR  i n g R e f = kPG P P r e f D a t a F i r s t , 
B kPGPPref PrivRi ngRef, 

B kPGPPref RandSeedData, 

B kPGPPref PGPkeysMa cMa i nWi  nPos, 

B kPGPPref PGPappMacPrivateData, 

B kPGPPrefPGPmenuHacAppSignatures, 

B kPGPPref DataLast 
> PGPPref NameData ; 


/*  Public  entry  points  */ 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 


/*  Library  initialization  and  cleanup  */ 

PGPError  PGPKDBExport 
pgpLiblnit  (void); 

void  PGPKDBExport 
pgpLibCleanup  (void); 

Boolean  PGPKDBExport 
pgpOpenSetnaphore  (void); 

void  PGPKDBExport 

pgpC  loseSetnaphore  (void); 

/*  Keyset  manipulations  */ 

PGPKeySet  PGPKDBExport  * 
pgpNeuKeySet  (void); 

PGPKeySet  PGPKDBExport  * 
pgpNewSingletonKeySet  (PGPKey  *key); 

PGPKeySet  PGPKDBExport  * 
pgpCopyKeySet  (PGPKeySet  *orig); 

PGPKeySet  PGPKDBExport  * 

pgpFi IterKeySetUserlD  (PGPKeySet  *origset,  char  const  *name,  size_t  namelen) 
PGPKeySet  PGPKDBExport  * 

pgpFi  IterKeySetKeylD  (PGPKeySet  *origset,  byte  const  *keyID, 
a B B B B size_t  key  I D Le ng t h ) ; 

PGPKeySet  PGPKDBExport  * 

pgpFi IterKeySet Auto  (PGPKeySet  *origset,  char  const  *pattern); 

PGPKeySet  PGPKDBExport  * 

pgpOpenDefaultKeyRings  (Boolean  isMutable,  PGPError  *errorPtr); 

PGPKeySet  PGPKDBExport  * 

pgpOpenKeyRi ngPai r (Boolean  isMutable,  PGPFileRef  *pubFTleRef, 
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PGPFUeRef  *secFUeRef,  PGPError  *errorPtr); 
PGPKeySet  PGPKDBExport  * 

pgpOpenKeyRi ng  (Boolean  isHutable,  Boolean  isPrivate,  Boolean  isTrusted, 
PGPFUeRef  *fileRef,  PGPError  *errorPtr); 

PGPError  PGPKDBExport 

pgpCommi tKeyRi ngChanges  (PGPKeySet  *keys); 

PGPError  PGPKDBExport 

pgpRevertKeyRi ngChanges  (PGPKeySet  *keys); 

PGPError  PGPKDBExport 

pgpCheckKeyRi ngCerti fi cates  (PGPKeySet  *keys); 

PGPError  PGPKDBExport 

pgpReloadKeyRings  (PGPKeySet  *keys); 

PGPKeySet  PGPKDBExport  * 

pgpUnionKeySets  (PGPKeySet  *a,  PGPKeySet  *b); 

PGPKey  PGPKDBExport  * 

pgpGetKeyByKeylD  (PGPKeySet  *keys,  byte  *keyID,  size_t  key  I D Le n g t h ) ; 
Boolean  PGPKDBExport 

pgpKeySet Member (PGPKeySet  *set,  PGPKey  *key); 

long  PGPKDBExport 
pgpCountKeys  (PGPKeySet  *keys); 

void  PGPKDBExport 

pgpIncKeySet Ref  Count  (PGPKeySet  *keys); 

void  PGPKDBExport 
pgpFreeKeySet  (PGPKeySet  *keys); 

Boolean  PGPKDBExport 

pgpKeySetlsHutable  (PGPKeySet  *keys); 

Boolean  PGPKDBExport 
pgpKeySetlsDi rty  (PGPKeySet  *keys); 

PGPKeySet  PGPKDBExport  * 

pgpImportKeyFi le  (PGPFileRef  *fileRef); 

PGPKeySet  PGPKDBExport  * 

pgpImportKeyBuffer  (byte  *buffer,  size_t  length); 

PGPError  PGPKDBExport 

pgpExportKey Fi  le  (PGPKeySet  *keys,  PGPFileRef  *fileRef); 

PGPError  PGPKDBExport 

pgpExportKeyBuf f er  (PGPKeySet  *keys,  byte  *buffer,  size_t  *length); 

PGPError  PGPKDBExport 
pgpIncKeyRef Count  (PGPKey  *key); 

PGPError  PGPKDBExport 
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pgpFreeKey  (PGPKey  *key); 

PGPError  PGPKDBExport 

pgpAddKeys  (PGPKeySet  *set,  PGPKeySet  *keysToAdd ) ; 
PGPError  PGPKDBExport 

pgpRemoveKeys  (PGPKeySet  *set,  PGPKeySet  * key s To  Remove); 


/*  Key  manipulation  functions  */ 

PGPError  PGPKDBExport 

pgpRevokeKey  (PGPKey  *key,  char  *pa s s p h r a s e ) ; 
unsigned  PGPKDBExport 

pgpQu e ry E n t r opy N e e d ed  (byte  pkalg,  unsigned  bits); 
unsigned  PGPKDBExport 

p g p Ke y E n t r o p y N e e d e d (byte  pkalg,  unsigned  bits), 

PGPError  PGPKDBExport 

pgpAddRandomBits  (byte  * r a n d om_b i t s , unsigned  num_bytes); 

PGPError  PGPKDBExport 

pgpGenerateKey  (PGPKeySet  *keyset,  byte  pkalg,  unsigned  bits, 

n n n n word16  expiration,  char  *name,  int  nameLen,  char  *passphrase, 

n n n n int  (*progress)  (void  *arg,  int  phase),  void  *arg, 

n n n n PGPKey  **key); 


PGPError  PGPKDBExport 

pgpGenerateSubKey  (PGPKey  *masterkey,  unsigned  bits,  word16  expiration 
n n n n char  *passphrase,  char  *ma s t e r key ph r a s e , 

n n n n int  (*progress)  (void  *arg,  int  phase),  void  *arg); 


PGPError  PGPKDBExport 

pg pD i s a b I e Key  (PGPKey  *key); 

PGPError  PGPKDBExport 
pgpEnableKey  (PGPKey  *key); 

PGPError  PGPKDBExport 

pgpChangePassphrase  (PGPKey  *key,  char  *oldphrase,  char  *newphrase); 


PGPError  PGPKDBExport 

pgpChangeSubKeyPassphrase  (PGPSubKey  *subkey, 

n n n n n n char  *oldphrase,  char  *newphrase); 


PGPError  PGPKDBExport 

pg pRemo ve S ubKey  (PGPSubKey  *subkey); 

PGPError  PGPKDBExport 

pgpRevokeSubKey  (PGPSubKey  *subkey,  char  * pa s s p h r a s e ) ; 

PGPError  PGPKDBExport 

pg p R e mo V e U s e r I D (PGPUserlD  *userID); 

PGPError  PGPKDBExport 

pgpAddUserlD  (PGPKey  *key,  char  *name,  int  nameLen,  char  * pa s s p h r a s e ) ; 
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PGPError  PGPKDBExport 

pgpSetPn'maryUserlD  CPGPUserlD  *userid); 


PGPError  PGPKDBExport 

pgpCertifyUserlD  (PGPUserlD  *userID,  PGPKey  *certifying_key,  char  *passphrase); 
PGPError  PGPKDBExport 

pgpGetCerti f i er  (PGPCert  *cert,  PGPKeySet  *aLLkeys,  PGPKey  **certkey); 

PGPError  PGPKDBExport 

pgpRevokeCert  (PGPCert  *cert,  PGPKeySet  *aLLkeys,  char  *pa s s p h r a s e ) ; 

PGPError  PGPKDBExport 
pgpRemoveCert  (PGPCert  *cert); 

PGPError  PGPKDBExport 

pgpGetMessageRecoveryKey  (PGPKey  *basekey,  PGPKeySet  *aLLkeys,  unsigned  nth, 
n PGPKey  **mrkey,  byte  *mrcLass,  unsigned  *numbermrks); 


/*  New  trust  model  */ 

PGPError  PGPKDBExport 

pgpSetUserlDConf  (PGPUserlD  *userID,  unsigned  Long  c on f i d en c e ) ; nn 


/* 

* Trust  values  for  pg p S e t Key T r u s t and  kPG PKey P r o pT r u s t property: 

★ 


* PGP_KEYTRUST_UNDEFINED 

* PGP_KEYTRUST_UNKNOWNn 

* PGP_KEYTRUST_NEVERn  n 

* PGP_KEYTRUST_HARGINALn 

* PGP_KEYTRUST_COMPLETEn 

* PGP_KEYTRUST_ULTIHATE 
*/ 


(do  not  pass  to  pg p S e t Key T r us t ) 
( unknown ) 

(never) 

(sometimes) 

(always) 

(do  not  pass  to  pg p S e t Key T r u s t ) 


PGPError  PGPKDBExport 

pgpSetKeyTrust  (PGPKey  *key,  unsigned  char  trust);n  /*  old  trust  model  */ 
PGPError  PGPKDBExport 

pgpSetKeyAxiomatic  (PGPKey  *key.  Boolean  checkPassphrase,  char  *passphrase); 

PGPError  PGPKDBExport 

pgpUnset KeyAxi oma t i c (PGPKey  *key); 

/*  Get  property  functions  */ 


PGPError  PGPKDBExport 

pg pG e t Key Boo L ea n (PGPKey  *key,  PG PKe y P r op Na me  propname.  Boolean  *prop); 
PGPError  PGPKDBExport 


pgpGetKeyNumber 

(PGPKey 

*key. 

PGPKeyPropName  propname. 

1 ong  *p  rop ) ; 

PGPError  PGPKDBExport 

pgpGetKeyString 

(PGPKey 

*key. 

PGPKeyPropName  propname. 

char  *prop. 

n □ n □ 

si ze_t 

* L e n ) ; 

PGPError  PGPKDBExport 

pgpGetKeyTime  (PGPKey  *key,  PGPKeyPropName  propname,  PGPTime  *prop); 
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PGPError  PGPKDBExport 

pgpGetSubKeyBooLean  (PGPSubKey  *subkey,  PG PKey P rop N ame  propname, 
n n n n Boolean  *prop); 


PGPError  PGPKDBExport 

pgpGet SubKeyNumbe r (PGPSubKey  *subkey. 


PGPKey PropName  propname. 


Long  *prop)  ; 


PGPError  PGPKDBExport 

pgpGetSubKeyString  (PGPSubKey  *subkey,  PG PKey P r op Na me  propname,  char  *prop, 
n n n n size_t  *Len); 


PGPError  PGPKDBExport 

pgpGetSubKeyTime  (PGPSubKey  *subkey,  PG PKey P r opN a me  propname,  PGPTime  *prop); 
PGPError  PGPKDBExport 

pgpGetUserlDBooLean  (PGPUserlD  *userID,  PG PU s e r I D P r opNa me  propname, 
u n n n n BooLean*prop); 


PGPError  PGPKDBExport 

pgpGetUserlDNumber  (PGPUserlD  *userID,  PG PU s e r I D P r opNa me  propname.  Long  *prop); 
PGPError  PGPKDBExport 

pgpGetUserlDString  (PGPUserlD  *userID,  PG PU s e r I D P r opName  propname, 
n n n n n char  *prop,  size_t  *Len); 

PGPError  PGPKDBExport 

pgpGetCertBooLean  (PGPCert  *cert,  PGPC e r t P r opName  propname.  Boolean  *prop); 
PGPError  PGPKDBExport 

pgpGetCertNumber  (PGPCert  *cert,  PG PC e r t P r opNa me  propname.  Long  *prop); 

PGPError  PGPKDBExport 

pgpGetCertStri ng  (PGPCert  *cert,  PG P C e r t P r op N ame  propname,  char  *prop, 
n n n n size_t  *Len); 

PGPError  PGPKDBExport 

pgpGetCertTime  (PGPCert  *cert,  PG PC e r t P r opNa me  propname,  PGPTime  *prop); 
PGPError  PGPKDBExport 

pgpGetHashALgUsed  (PGPKey  *key.  Long  *hashALg); 


/*  Convenience  property  functions  */ 

PGPUserlD  PGPKDBExport  * 
pgpGetPrimaryUserID(PGPKey  *key); 

PGPError  PGPKDBExport 

pg pG e t P r i ma r y U s e r I DNa me ( PG PKey  *key,  char  *buf,  size_t  *Len), 
PGPError  PGPKDBExport 

pgpGetPrimaryUserIDVaLidity(PGPKey  *key.  Long  *validity); 


int  PGPKDBExport 

pgpCompareKeys(PGPKey  *a,  PGPKey  *b,  PG PKey 0 r d e r i n g order); 
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int  PGPKDBExport 

pgpUserlDStrCompareCchar  const  *a,  char  const  *b); 

PGPKeyList  PGPKDBExport  * 

pgpOrderKeySet  (PGPKeySet  *src,  PGPKeyO rde r i ng  order); 
void  PGPKDBExport 

pgpIncKeyListRefCount  (PGPKeyList  *keys); 
void  PGPKDBExport 

pgpFreeKeyList  (PGPKeyList  *keys); 

/*  Key  iteration  functions  */ 
void  PGPKDBExport 

pgpIncSubKeyRef Count  (PGPSubKey  *subkey); 
void  PGPKDBExport 

pgpIncUserlDRefCount  (PGPUserlD  *userid); 
void  PGPKDBExport 

pgpIncCertRefCount  (PGPCert  *cert); 
void  PGPKDBExport 

pgpFreeSubKey  (PGPSubKey  *subkey); 
void  PGPKDBExport 

pgpFreeUserlD  (PGPUserlD  *userid); 

void  PGPKDBExport 
pgpFreeCert  (PGPCert  *cert); 

PGPKeylter  PGPKDBExport  * 
pgpNewKeylter  (PGPKeyList  *keys); 

PGPKeylter  PGPKDBExport  * 
pgpCopyKeylter  (PGPKeylter  *orig); 

void  PGPKDBExport 

pgpFreeKeylter  (PGPKeylter  *iter); 
long  PGPKDBExport 

pgpKeylterIndex  (PGPKeylter  *iter); 
void  PGPKDBExport 

pgpKeylterRewi nd  (PGPKeylter  *iter); 

Long  PGPKDBExport 

pgpKeylterSet  (PGPKeylter  *iter,  PGPKey  *key); 

PGPKey  PGPKDBExport  * 

pgpKeylterMove  (PGPKeylter  *iter.  Long  reLOffset); 

PGPKey  PGPKDBExport  * 
pgpKeylterNext  (PGPKeylter  *iter); 

PGPKey  PGPKDBExport  * 
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pgpKeylterPrev  (PGPKeylter  *iter); 


PGPKey  PGPKDBExport  * 
pgpKeylterKey  (PGPKeylter  *iter); 

PGPSubKey  PGPKDBExport  * 
pgpKeylterSubKey  (PGPKeylter  *iter); 

PGPUserlD  PGPKDBExport  * 
pgpKeylterUserlD  (PGPKeylter  *iter); 

PGPCert  PGPKDBExport  * 
p g p Ke y I t e r C e r t (PGPKeylter  *iter); 

Boolean  PGPKDBExport 

pgpKeylterValid  (PGPKeylter  *iter); 
PGPSubKey  PGPKDBExport  * 

pgpKeylterNextSubKey  (PGPKeylter  *iter); 
PGPSubKey  PGPKDBExport  * 

pgpKeylterPrevSubKey  (PGPKeylter  *iter); 
void  PGPKDBExport 

pgpKeylterRewi ndSubKey  (PGPKeylter  *iter); 
PGPUserlD  PGPKDBExport  * 

pgpKeylterNextUserlD  (PGPKeylter  *iter); 
PGPUserlD  PGPKDBExport  * 

pgpKeylterPrevUserlD  (PGPKeylter  *iter); 
void  PGPKDBExport 

pgpKeylterRewindUserlD  (PGPKeylter  *iter); 
PGPCert  PGPKDBExport  * 

pgpKeylterNextUIDCert  (PGPKeylter  *iter); 
PGPCert  PGPKDBExport  * 

pgpKeylterPrevUIDCert  (PGPKeylter  *iter); 
void  PGPKDBExport 

pgpKeylterRewi  ndUIDCert  (PGPKeylter  *iter); 


/*  Preference  file  access  */ 

PGPError  PGPKDBExport 

pgpGetPref Number  ( PG P P r e f Na meNumbe r prefName,  Long  *vaLue); 

PGPError  PGPKDBExport 

pgpGetPref Stri ng  ( PG P P r e f Na me S t r i ng  prefName,  char  ‘buffer,  size_t  ‘Length); 
char  PGPKDBExport  ‘ 

pgpGetPref CSt ri ngCopy  ( PG PP r e f Na me S t r i ng  prefName); 

PGPError  PGPKDBExport 

pgpGetPrefBooLean  ( PGP P r e f Name  Boo L ea n prefName,  Boolean  ‘value); 
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PGPError  PGPKDBExport 

pgpGetPref Data  ( PG PP r e f Na me D a t a prefName,  void  *buffer,  size_t  *Length); 
void  PGPKDBExport  * 

pgpGetPrefDataCopy  (PGPPrefNameData  prefName,  size_t  *Len); 

PGPFiLeRef  PGPKDBExport  * 

pgpGetPref Fi LeRef  (PGPPrefNameData  prefName); 

PGPError  PGPKDBExport 

pgpSetPrefNumber  (PGPPrefNameNumber  prefName,  Long  value); 

PGPError  PGPKDBExport 

pgpS e t P r e f S t r i ng  ( PG P P r e f N a me S t r i n g prefName,  char  const  *buffer, 

“ “ “ “ n size_t  length); 

PGPError  PGPKDBExport 

pgpSetPrefCString  (PGPPrefNameString  prefName,  char  const  *string); 

PGPError  PGPKDBExport 

pgpSetPrefBoolean  (PGPPrefNameBooLean  prefName,  Boolean  value); 

PGPError  PGPKDBExport 

pgpSetPref Data  (PGPPrefNameData  prefName,  void  const  *buffer,  size_t  Length); 
PGPError  PGPKDBExport 

pgpSet Pref F i I eRef  (PGPPrefNameData  prefName,  PGPFiLeRef  const  *fiLeRef); 


/*  Get/set  default  private  key  */ 

PGPKey  PGPKDBExport  * 

pgpGetDefauLtPrivateKey  (PGPKeySet  *keyset); 

PGPError  PGPKDBExport 

pgpSetDefauLtPri vateKey  (PGPKey  *key); 

PgpTrustMode I PGPKDBExport 

pgpGetTrustMode L (void);n  a /*  always  returns  PGPTRUST0  in  this  release  */ 


/*  Get/set  user  value  */ 

PGPError  PGPKDBExport 

pgpSetKeyUserVa L (PGPKey  *key.  Long  userVal); 

PGPError  PGPKDBExport 

pgpSetUserlDUserVa L (PGPUserlD  *userid.  Long  userVal); 

PGPError  PGPKDBExport 

pgpSetSubKeyUserVa L (PGPSubKey  *subkey.  Long  userVal); 

PGPError  PGPKDBExport 

pgpSetCertUserVal  (PGPCert  *cert,  long  userVal); 

PGPError  PGPKDBExport 

pgpGetKeyUserVa L (PGPKey  *key.  Long  *userVaL); 
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PGPError  PGPKDBExport 

pgpGetUserlDUserVaL  (PGPUserlD  *userid,  long  *userVaL) 


PGPError  PGPKDBExport 

pgpGetSubKeyUserVaL  (PGPSubKey  *subkey.  Long  *userVaL); 


PGPError  PGPKDBExport 

pgpGetCertUserVaL  (PGPCert  *cert.  Long  *userVaL); 


/*  Preference  functions  */ 


PGPError  PGPKDBExport 
pgpLoadPrefs  (void); 

PGPError  PGPKDBExport 
pgpSavePrefs  (void); 

PGPError  PGPKDBExport 
pgpSetDefauLtKeyPath  (void); 


/* 

* Don't  use  this.  It's  only  for  use  by  the  Simple  PGP  Library, 

* and  will  be  going  away. 

*/ 

PGPError  PGPKDBExport 

pgpGetKeyRingFi LeRefs  (PGPFiLeRef  **pubRef,  PGPFiLeRef  **privRef); 


n n n 

B n □ 

□ Q n 

n n n 

n n a 

key,  #key)) 
n n □ 

□ B n 

n n n 

n n n 


\ 


\ 


\ 


/* 

* Debugging  support 
*/ 

//define  pgpaPGPKey  DBVa  1.  i d C db  ) n nnnnnnnnnnn 
a n n pg pa C a L L ( pg pa  I n t e r na L PG PKey DB Va L i d , ( pg pa C a L L P r e f i x , db,  #db)) 

^define  pg pa PG PKey S e t Va L i d ( s e t ) nn  nnnnnnnnnn 

n B n pgpaCaLKpgpaInternaLPGPKeySetVaLid,  ( pg  pa  C a L L P r e f i x , set,  #set)) 

^define  pg pa PG PKey Li s t Va L i d ( L i s t ) n nnnnnnn"""' 

B B n pgpaCa L L (pgpalnterna LPGPKeyLi stVa L i d,n  b n b 

n B B B n ( pgpa C a L L P r e f i X , list,  #List)) 

//define  pg  pa  PG  PKey  1 1 e r Va  L i d ( i t e r ) n b n n n b n b 

B B B pgpaCa L L (pgpalnterna LPGPKeylterVa L i d,n  b b b 

n n B B B (pgpaCa  L LPrefi  X,  iter,  //iter)) 

//define  pgpaPGPKeyVa  L i d ( key  ) n bbbbbbbb 

B B B pgpaCaLKpgpaInternaLPGPKeyVaLid,  ( pg  pa  C a L L P r e f i x 

//define  pgpa  PGPSubKey  Va  L i d ( subKey  ) b b b b b b b b 

n B B pg pa Ca L L ( pgpa I n t e r na L PG PSubKey Va L i d, n b n b 

n B B B (pgpaCa L LPrefi X,  subKey,  ^subKey)) 

//define  pg  pa  PG  PU  s e r I D Va  L i d ( u s e r I D ) b b b b b b b b 

n B B pgpa Ca L L ( pgpa I n t e rna L PG PUse r I D Va L i d, n b b b 

n B B B ( pgpa Ca L L P r e f i X,  userlD,  ^userlD)) 

//define  pg  pa  PG  PC  e r t Va  L i d ( c e r t ) n bbbbbbbb 

B B B pgpaCaLKpgpalnternaLPGPCertVaLid,  ( pg  pa  Ca  L L P r e f i x , cert,  //cert)) 


\ 


\ 


//if  DEBUGb  /*  C */ 

BooLeanBPGPKDBExportB  pgpaInternaLPGPKeyDBVaLid(pgpaCaLLPrefixDef, 

n n n B B B B PGPKeyDB  const  *keyDB,  char  const  *varName); 
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BooLeannPGPKDBExportn 
n n n n n n 

BooLeannPGPKDBExportn 
n n n n n n 

BooLeannPGPKDBExportn 
n n n n n n 

BooLeannPGPKDBExportn 
n n n n n n 

BooLeannPGPKDBExportn 
n n n n n n 

BooLeannPGPKDBExportn 

n n n n n n 

BooLeannPGPKDBExportn 
n n n n n n 

#endif  /*  2 DEBUG  */ 

tfifdef  __cpLuspLus 
> 

# e nd i f 


pgpalnternaLPGPKeySetVaLidCpgpaCaLLPrefixDef, 

n PGPKeySet  const  *keySet,  char  const  *varName); 

pgpaInternaLPGPKeyListVaLidCpgpaCaLLPrefixDef, 

n PGPKeyList  const  *keyList,  char  const  *varName); 

pgpaInternaLPGPKeylterVaLidCpgpaCaLLPrefixDef, 

n PGPKeylter  const  *keylter,  char  const  *varName); 

pgpaInternaLPGPKeyVaLidCpgpaCaLLPrefixDef, 

n PGPKey  const  *key,  char  const  *varName); 

pgpalnternaLPGPSubKeyVaLidCpgpaCaLLPrefixDef, 

n PGPSubKey  const  *subKey,  char  const  *varNanie); 
pgpainterna  LPGPUser I DVa  L i dC  pgpaCa  L LPrefi xDef^ 
a PGPUserlD  const  *userID,  char  const  *varName); 

pgpalnternaLPGPCertVaLidCpgpaCaLLPrefixDef, 

n PGPCert  const  *cert,  char  const  *varName); 


#if  PRAGMA_IMPORT_SUPPORTED 
#pragma  import  reset 
#end  i f 


#endif  /*  PGPKEYDB_H  */ 


/* 

* LocaL  VariabLes: 

* tab-width:  4 

* End  : 

* vi : ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpKeylter.c  — PGP  Key  Iteration  functions 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved 

★ 

^ * $Id:  pgpKeylter.c, V 1.25.2.1  1997/06/07  09:50:25  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#end i f 

#incLude  "pgpKDBint.h" 


/*  Internal  functions  to  maintain  reference  counts.  Incrementing 
or  decrementing  a refcount  on  a sub-object  will  do  the  same  to 
its  parent  object  (in  fact,  all  superior  objects),  as  a subobject 
cannot  exist  without  its  parent. 

When  an  iterator  moves  off  an  object  or  subobject,  must  make  sure 
aLL  child  objects  are  properly  adjusted  (the  deciterxxx  functions), 
as  the  iterator  implicitly  moves  off  these  subobjects  also.  */ 


static  void 

decKeyRef Count  (PGPKey  *key) 

{ 

n if  ( key ) 

n n pgp F r e e Key ( key ) ; 

> 

static  void 

decSubKeyRef Count  (PGPSubKey  *subkey) 
{ 

i f ( subkey)  ( 

n s u b key-> r e f Coun t — ; 

n n decKeyRef Count  ( subkey->key ) ; 

n } 

> 

static  void 

decUserlDRef Count  (PGPUserlD  *userid) 
{ 

n if  (useri d)  { 
n n u s e r i d-> r e f C ou n t — ; 

n n decKeyRefCount  (userid->key); 

n } 

> 


static  void 

decCertRef Count  (PGPCert  *cert) 


n 

□ 

n 

n 

a 

a 


if  (cert)  { 

n c e r t -> r e f C ou n t — ; 

n if  (cert->type  ==  uidcert) 

n decUserlDRefCount  (cert->up.userID); 

n else 

n decKeyRefCount  (cert -> up. key); 
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n > 

> 

static  void 

decIterUIDCert  (PGPKeylter  *iter) 

{ 

n decCertRefCount  (iter->uidCert); 

n i ter->ui dCert  = NULL; 

> 

static  void 

decIterUserlD  (PGPKeylter  *iter) 

{ 

“ decIterUIDCert  (iter); 
n decUserlDRef Count  ( i t e r->u s e r I D ) ; 
n iter->userID  = NULL; 

> 

static  void 

decIterSubKey  (PGPKeylter  *iter) 

{ 

decSubKeyRefCount  (iter->subKey); 
n iter->subKey  = NULL; 

> 

static  void 

decIterKey  (PGPKeylter  *iter) 

{ 

decIterSubKey  (iter); 

° decIterUserlD  (iter); 
o decKeyRefCount  (iter->key); 
n iter -> key  = NULL; 

> 

static  PGPError 
i ncKeyRef Count  (PGPKey  *key) 

{ 

n if  ( key ) 

“ n return  pg p I n c Key R e f C oun t ( key  ) ; 
n return  PGPERR_0K; 

> 

static  void 

i ncSubKeyRef Count  (PGPSubKey  *subkey) 

{ 

incKeyRefCount  (subkey->key); 
n subkey->refCount++; 

> 

static  void 

i ncUserlDRef Count  (PGPUserlD  *userid) 

{ 

n incKeyRefCount  ( u s e r i d-> k e y ) ; 
n userid ->refCount++; 

} 

static  void 

i ncCe rt Ref  Count  (PGPCert  *cert) 
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{ 

if  (cert->type  ==  uidcert) 

B i ncUserlDRef Count  ( c e r t -> u p . u s e r I D ) ; 

n else 

B i ncKeyRef Count  ( c e r t ->up . key ) ; 

B c e r t -> r e f C oun t ++ ; 

> 


/*  Externally  visible  functions  */ 

/*  Functions  to  increment  and  decrement  sub-object  reference 
B counts.  */ 


void 

pgpIncSubKeyRef Count  (PGPSubKey  *subkey) 
{ 

pgpa (pgpaPGPSubKeyVa I id( subkey)); 

B i ncSubKeyRef Count  (subkey); 

> 

void 

pgpIncUserlDRef Count  (PGPUserlD  *userid) 
{ 

pgpa(pgpaPGPUserIDValid(userid)); 

B i ncUserlDRef Count  (userid); 

> 


void 

pgpIncCertRef Count  (PGPCert  *cert) 
{ 

pgpa(pgpaPGPCertValid(cert)); 

B i ncCertRef Count  (cert); 

} 


void 

pgpFreeSubKey  (PGPSubKey  *subkey) 

{ 

pgpa (pgpaPGPSubKeyVa I id( subkey)); 
B decSubKeyRef Count  (subkey); 

> 


void 

pgpFreeUserlD  (PGPUserlD  *userid) 

{ 

pgpa(pgpaPGPUserIDValid(userid)); 

B d e c U s e r I D R e f C o u n t (userid); 

} 


void 

pgpFreeCert  (PGPCert  *cert) 

{ 

pgpa(pgpaPGPCertValid(cert)); 
B decCertRef Count  (cert); 

c > 
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/*  pgpNewKeylter  can  be  called  with  a NULL  keylist  to  iterate  within 
« a key  only.  If  this  is  done,  pg p Ke y I t e r S e t must  be  called  to  supply 
n the  key.  Obviously,  if  an  iterator  is  created  in  this  way, 

n pgpKeylterNext  and  its  companions  that  find  other  keys  cannot  be 

n used . */ 


PGPKeylter  PGPKDBExport  * 
pgpNewKeylter  (PGPKeyList  *keys) 

{ 

n PGPKeyltern  n *newlter  = NULL; 

n pgpaCpgpaPGPKeyListValidfkeys)); 

n newiter  = pgpMemAlloc  (sizeof  (PGPKeylter)); 
n if  (Inewlter) 
a n return  NULL; 

° if  (keys)  { 

n newIter->nextIterInLi St  = key s ->f i r s t I t e r I n L i s t ; 

o n newiter ->prevIterInList  = NULL; 

° n if  (newiter ->nextIterInList) 

" ° newIter->nextIterInList->prevIterInLi St  = newiter; 

n n keys->f i rstIterInLi St  = newiter; 
n a pgpl ncKeyLi St  Ref  Count (keys); 

n } 

“ ne w 1 1 e r-> key L i s t = keys; 


n e wl t e r-> ke y I nd ex  = -1; 
newiter -> key  = NULL; 
newiter ->subKey  = NULL; 
newIter->userID  = NULL; 
newiter ->uidCert  = NULL; 
return  newiter; 


PGPKeylter  PGPKDBExport  * 
pgpCopyKeylter  (PGPKeylter  *orig) 

{ 

a PGPKeyltern  n *newlter  = NULL; 


n pgpa(pgpaPGPKeyIterValid(orig)); 
n newiter  = pgpNewKeylter  ( o r i g -> key L i s t ) ; 
° if  (newiter)  ( 

n n newlter->keylndex  = o r i g -> key  I n d ex ; 

n n newlter->key  = orig->key; 

° ° if  ( n e w I t e r -> ke y ) 

“ “ ° i ncKeyRef Count (newlter->key); 


n newIter->subKey  = o r i g -> s u bKey ; 

B if  (newIter->subKey ) 

B incSubKeyRefCount  (newIter->subKey); 


B newIter->userID  = orig->userID; 

B if  ( new  1 1 e r->us e r I D ) 

B incUserlDRefCount  (newiter ->userID); 
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n n newlter->ui dCert  = o r i g -> u i d C e r t ; 
n n if  (neuIter->uidCert) 

n n incCertRefCount  (newIter->uidCert); 

n > 

n return  newiter; 

> 


void  PGPKDBExport 

pgpFreeKeylter  (PGPKeylter  *iter) 

{ 

n pgpa(pgpaPGPKeylterVaLidCiter)); 


Q 

if 

( i ter->keyLi st ) { 

n 

if  ( i t e r->p r e V 1 1 e r I n L i s t ) 

= iter->nextIterInList; 

n 

Q 

iter->prevIterInList->nextIterInList 

n 

H 

else 

->nextIterInLi st; 

□ 

n 

i t e r->key Li st->f i r s t I t er InLi St  = iter 

n 

n 

if  ( i ter->nextIterInLi St ) 

= i t e r->p r e V 1 1 e r I n L i s t ; 

Q 

n 

iter->nextIterInList->prevIterInList 

Q 

Q 

pgpFreeKeyLi St  ( i t e r-> key L i s t ) ; 

n > 

n decIterKey  Citer); 
n pgpMemFree  (iter); 

> 

□ n 

Long  PGPKDBExport 

pgpKeylterIndex  (PGPKeylter  *iter) 

{ 

npgpa (pgpaPGPKeylterVa  Lid(i ter)  ); 
n return  i t e r — > key  I ndex ; 

> 


void  PGPKDBExport 

pgpKeylterRewi nd  (PGPKeylter  *iter) 

( 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 

n if  ( i ter->keyLi St ) { 

n n decIterKey  (iter); 

u n i ter->key Index  = -1; 

n } 

> 


Long  PGPKDBExport 

pgpKeylterSet  (PGPKeylter  *iter,  PGPKey  *key) 

{ 

n PGPKeyn  n **keys; 

n Longn  “ i; 

n pgpa((pgpaPGPKeyIterVaLid(iter),pgpaPGPKeyVaLid(key))); 

n decIterKey  (iter); 

n i ter->keylndex  = -1; 

n iter->key  = key; 

n i n c Key Re f C ou n t ( key ) ; 

a keys  = i t e r-> key L i s t -> key s ; 
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“ if  (iter  >keyList  8&  (keys  = iter->keyList->keys)  !=  NULL)  { 
“ for  (i  = 0;  i < i ter->keyLi st->keyCount ; i++)  { 

° “ if  (keysHiG  ==  key)  { 

° “ iter->keylndex=i; 

n n n n break; 

n n n > 

n a } 

a } 

° return  i t e r-> key  I nde x ; 

> 


PGPKey  PGPKDBExport  * 

pgpKeylterHove  (PGPKeylter  *iter,  long  relOffset) 

{ 

(ong  newOffset; 

n PGPKeyList  *keyList  = NULL; 

n pgpa(pgpaPGPKeyIterValid(iter)); 

° if  ( ! i t e r-> key L i s t ) 

° return  iter -> key; 

o keylist  = iter->keyList; 

n newOffset  = iter->keylndex  + relOffset; 

n /*  Check  for  removed  key  */ 

if  (iter->key  &&  key  I i s t -> key s C i t e r-> key  I n d e x D !=  iter->key)  { 
° /*  key  removed  from  keylist  */ 

° if  (relOffset  ==0) 

nan  return  NULL;b  n /*  XXX  Is  this  correct?  */ 
n n else  if  (relOffset  > 0) 

n n newOffset  — ; 

a > 


n decIterKey  (iter); 
n i t e r->key I ndex  = newOffset; 

n if  (newOffset  >=  0 8S  newOffset  < key  I i s t->keyCount ) 
a { 

n a iter->key  = key  I i s t -> key s C n e wO f f s e t ] ; 
n n incKeyRefCount(iter->key); 

a } 
n else 

a n iter->key  = NULL; 

a return  iter->key; 

} 


PGPKey  PGPKDBExport  * 
pgpKeylterNext  (PGPKeylter  *iter) 

{ 

n return  pgpKeyIterHove(iter,  1); 

> 


PGPKey  PGPKDBExport  * 
pgpKeylterPrev  (PGPKeylter  *iter) 

{ 

n return  pg p Key  1 1 e r Mo v e ( i t e r , -1); 

> 
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Boolean  PGPKDBExport 

pgpKeylterValid  (PGPKeylter  *iter) 

{ 

n pgpaCpgpaPGPKeylterVaLidCiter)); 

n return  (iter->key  !=  NULL); 

} 


PGPKey  PGPKDBExport  * 
pgpKeylterKey  (PGPKeylter  *iter) 

{ 

n pgpaCpgpaPGPKeylterValidCiter)); 

n return  iter->key; 

} 

PGPSubKey  PGPKDBExport  * 
pgpKeylterSubKey  (PGPKeylter  *iter) 

{ 

n pgpa(pgpaPGPKeyIterVaUd(iter)); 

n return  i t e r-> s u bKey ; 

} 

PGPUserlD  PGPKDBExport  * 
pgpKeylterUserlD  (PGPKeylter  *iter) 

( 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 

n return  iter->userID; 

> 

PGPCert  PGPKDBExport  * 
pgpKeylterCert  (PGPKeylter  *iter) 

{ 

n pgpa(pgpaPGPKeyIterVaUd(iter)); 

n return  i t e r->u i d C e r t ; 

> 

PGPSubKey  PGPKDBExport  * 

pgpKeylterNextSubKey  (PGPKeylter  *iter) 

{ 

n PGPKeyn  a a *key; 

n PGPSubKey  *next  = NULL; 

n pgpa(pgpaPGPKeyIterVaLid(iter )); 

n if  ( ! pgpKeylterVa L i d (iter)) 
n n return  NULL; 

n key  = iter->key; 

n if  ( ! i t e r-> s ubKey ) 

n n next  = (PGPSubKey  *)  key->s u bKey s . ne x t ; 
n else 

n a next  = i t e r-> s ubKey->n ex t ; 

n while  (next  !=  (PGPSubKey  *)  &key->subKey s ) < 

n n if  ( next->removed ) 
n n n next  = next->next; 

n a e I se  { 
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n 

□ 

n 

u 

Et 

n 

> 


n de c I t e r S ubKey  (iter); 

n iter->subKey  = next; 

° « incSubKeyRefCount  (next); 

n n return  next; 

n > 

} 

return  NULL; 


PGPSubKey  PGPKDBExport  * 
pgpKeylterPrevSubKey  (PGPKeylter  *iter) 
{ 

n PGPKeyn  n *key; 

n PGPSubKey  *prev; 


n pgpaCpgpaPGPKeylterValidCiter)); 
a if  ( ! pgpKey 1 1 e r Va L i d (iter)) 

° a return  NULL; 

n key  = iter -> key; 

n i f C ! i ter->subKey ) 

H n prev  = (PGPSubKey  *)  ke y-> s u bKey s . p r e v ; 
n else 

n n prev  = iter->subKey->prev; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


while  (prev  !=  (PGPSubKey  *)  &key->subKey s ) { 
o if  ( p rev-> removed ) 
n a prev  = prev->prev; 

“ e I se  { 


B 

decIterSubKey  (iter); 

B 

B 

iter->subKey  = prev; 

fl 

B 

incSubKeyRefCount  (prev); 

B 

B 

return  prev; 

B 

> 

> 

return  NULL; 


void  PGPKDBExport 

pgpKeylterRewindSubKey  (PGPKeylter  *iter) 
{ 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 
n if  ( pgpKey I t e rVa L i d (iter)) 

D n decIterSubKey  (iter); 

} 


PGPUserlD  PGPKDBExport  * 
pgpKeylterNextUserlD  (PGPKeylter  *iter) 

{ 

n PGPKeyn  n n *key; 

n PGPUserlD  *next  = NULL; 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 
n if  ( IpgpKeylterVa Lid  (iter)) 

° n return  NULL; 

° key  = iter->key; 
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n if  C ! i t e r->u s e r I D ) 

n n next  = (PGPUserlD  *)  ke y->u s e r I D s . n ex t ; 
n else 

n n next  = iter ->userID-> next; 

D while  (next  !=  (PGPUserlD  *)  8 key-> u s e r I D s ) ( 


D 

u 

1 f 

(next-> removed) 

n 

□ 

n 

next  = next -> next; 

n 

Q 

else  { 

n 

n 

decIterUserlD  (iter); 

n 

n 

iter->userID  = next; 

n 

u 

s 

i ncUserlDRef Count  (next); 

n 

n 

□ 

return  next; 

n 

Q 

> 

n 

> 

return  NULL; 

> 


PGPUserlD  PGPKDBExport  * 

pgpKeylterPrevUserlD  (PGPKeylter  *iter) 

n PGPKeyn  n *key; 

n PGPUserlD  *p  r ev; 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 

n if  ( ! pgpKeylterVa L i d (iter)) 


n n return  NULL; 

n key  = iter->key; 

n if  ( ! i t e r->u s e r I D ) 


n 

B 

prev  = (PGPUserlD  *)  key->u s e r I D s . p r e v ; 

B 

else 

B 

B 

prev  = i ter->userID->prev; 

B 

wh  i 

L e 

(prev  !=  (PGPUserlD  *)  8 key->u s e r I D s ) 

B 

B 

if 

(prev->removed) 

B 

B 

B 

prev  = prev->prev; 

B 

B 

else  { 

B 

B 

decIterUserlD  (iter); 

B 

B 

B 

iter->userID  = prev; 

B 

B 

B 

incUserlDRef Count  (prev); 

B 

B 

B 

return  prev; 

B 

B 

> 

B 

> 

B 

return 

NULL; 

} 


void  PGPKDBExport 

pgpKeylterRewi ndUserlD  (PGPKeylter  *iter) 

{ 

n pgpa(pgpaPGPKeyIterVaLid(iter)); 

n if  (pgpKey I t erVa L i d (iter)) 
n n decIterUserlD  (iter); 

> 

PGPCert  PGPKDBExport  * 
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pgpKeylterNextUIDCert  (PGPKeylter  *iter) 


n 

n 

n 


PGPKeyn  n n 
PGPUserlDa  n 
PGPCert 


*key; 
*userid; 
* next; 


n pgpaCpgpaPGPKeylterValidCiter)); 
n if  ( IpgpKeylterValid  (iter)  ||  ! i t e r->u s e r I D 

« n return  NULL; 

n key  = iter->key; 

H userid  = iter->userID; 

n i f C ! i ter->ui dCert ) 

« « next  = (PGPCert  *)  userid->certs.next; 

n else 

n n next  = i t e r->u i d C e r t ->ne x t ; 


Q 

B 

Q 

B 

n 

B 

□ 

B 

B 

O 

B 

> 


while  (next  !=  (PGPCert  *)  &u s e r i d-> c e r t s ) { 


B 

i f 

(next->removed) 

n 

B 

next  = next -> next; 

B 

else  { 

n 

decIterUIDCert  (iter); 

B 

□ 

i ter->ui dCert  = next; 

□ 

B 

incCertRefCount  (next);; 

fl 

D 

return  next; 

n 

> 

> 

return  NULL; 


i ter->userID->removed) 


PGPCert  PGPKDBExport  * 

pgpKeylterPrevUIDCert  (PGPKeylter  *iter) 

n PGPKeyn  n n *key; 

n PGPUserlDn  n *userid; 

n PGPCert  *prev; 


n pgpa(pgpaPGPKeyIterVaLid(iter)); 
n if  (IpgpKeylterValid  (iter)  ||  ! i t e r->u s e r I D 
a a return  NULL; 

n key  = iter->key; 

n userid  = iter->userID; 

n i f ( ! i ter->ui dCert ) 

n n prev  = (PGPCert  *)  userid->certs.prev; 

n else 

n n prev  = i t e r->u i d C e r t ->p r e v ; 


Q 

while 

(prev  !=  (PGPCert 

*)  Suserid 

n 

Q 

i f 

(prev->removed) 

B 

B 

B 

prev  = prev -> prev; 

B 

n 

else  { 

n 

B 

decIterUIDCert 

(iter); 

B 

B 

B 

i ter->ui dCert  = 

prev; 

B 

B 

Q 

incCertRefCount 

(prev) ; 

a 

B 

B 

return  prev; 

B 

B 

> 

B 

> 

B 

return 

NULL; 

i ter->userID->removed) 
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> 


void  PGPKDBExport 

pgpKeylterRewindUIDCert  (PGPKeylter  *iter) 

{ 

n pgpa (pgpaPGPKeylterVa L i d( 1 ter) ) ; 

„ if  (pgpKeylterVaLid  (iter)  8&  iter->userID  &&  ! i t e r->u s e r I D-> r emo v ed  ) 

n n decIterUIDCert  (iter); 

> 


/*  Internal  functions  */ 

/*  Adjust  iterators  when  a key  is  added  to  or  removed  from  a keylist  */ 
void 

pgpKeylterAddKey  (PGPKeyList  *keys.  Long  idx) 

{ 
n 

n 
n 

D 

n 

Q 

n 
n 
□ 
n 
n 
n 

Q 
D 
> 

void 

pgpKeylterRemoveKey  (PGPKeyList  *keys.  Long  idx) 

{ 

n PGPKeyltern  n *iter; 

n pgpa (pgpaPGPKeyLi stVa L i d( keys )) ; 

n for  (iter  = key s->f i r s 1 1 1 e r I n L i s t ; iter;  iter  = i t e r->n e x 1 1 1 e r I n L i s t ) 
n n if  ( i ter->keylndex  > idx) 

n n n i te r->key Index--; 

} 


/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


PGPKeyltern  n *iter; 

pgpa (pgpaPGPKeyLi St Va  Li d( keys) ) ; 

for  (iter  = key s->f i r s 1 1 1 e r I n L i s t ; iter;  iter  = i t e r->n e x 1 1 1 e r I n L n s t ) 
{ 

n if  (iter->key  ==  keys->key s C i dx3  ) 
n n iter->keylndex  = idx; 

n else  if  ( i t e r-> key  I nde x > idx) 
n n i ter->keylndex++; 

n else  if  ( i t e r-> key  I nd e x ==  idx  SS  keys->order  !=  kPG P AnyO rde r i ng 
n n n n a&  iter->key  !=  NULL 

n n n n &a  pg pC ompa r eKey s ( i t e r-> key , key s->key s C i dx^ , 

nnnnnnnnn  keys->order)  > 0) 

n n i ter->keylndex++; 

} 
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/* 

pgpKeyLib.c  Initialization  and  cleanup  functions  related  to  the 

* keydblibrary 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved 

* $Id:  pgpKeyLib.c, V 1.41.2.7  1997/06/07  09:50:26  mhw  Exp  $ 


#ifdef  HAVE_C0NFIG_H 

/^include 

#e  n d i f 

" con  f i g . h " 

#ifdef  HAVE_UNISTD_H 

#i nc lude 

#endi f 

<unistd.h> 

#if  MACINTOSH 

# i n c 1 ud  e 

"MacStrings.h" 

# i n c 1 ude 

#e nd i f 

"MacFi les.h" 

# include 

"pgpKeyDB.  h" 

#i nc lude 

"pgpDebug . h" 

# i n c 1 ude 

" p g p K D B i n t . h " 

# include 

"pgpEnv.h" 

# i n c 1 ude 

"pgpFi  leNames.h" 

# i n c 1 ude 

"pgpFi  leRef.h" 

#include 

"pgpRndPool.h" 

#i  nc  lude 

"pgpRndSeed.h" 

#if  def i ned ( _WI N32  ) SS  ! de f i n e d ( NO D L L ) 

/*  In  Windows,  the  DllMain  function  is  called  when  a process  or 
thread  attaches  to,  or  detaches  from,  the  DLL.  Other  platforms 
should  call  pgpLiblnitO  and  pgpLi bC leanup  O directly.  */ 

#include  " windows. h" 

BOOL  WINAPI  DllMain  (HANDLE  hinst,  ULONG  u I _ r e a s on_ f o r _ c a I I , LPVOID  IpReserved) 

n switch  (ul_reason_for_call)  { 

#if  !DEBUG 

/*  Malloc/free  fails  in  debug  mode  because  app  hasn't  set  up  leak  context  */ 
n case  D LL_P RO C E S S_ ATT A C H : 


n Q 

#endi f 

return  (pgpLiblnit  () 

==  PGPERR_0K); 

n 

case 

DLL_PROCESS_DETACH : 

□ 

n 

if  (pgpLibSetup  > 1) 

n 

n 

c pgpLi bSetup  = 1 ;n 

n /*  force  final  cleanup  */ 

Q 

a 

pgpLibCleanup  (); 

Q 

B 

return  1; 

n } 

o return  1; 
} 

#endi  f 
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/*  G Loba  L va  ri ab  Les 
RingPooL  *n  n n 

PgpEnv  *n  n n 

BooLeannn  n n 

Boo  L ea  nnn  n n 

intnn  nnn 

PgpRandomContext  *n 


■for  PGP  Library 

pgpRingPooL;n 
pgpEnv;nn  n 
pgpPrefsChanged 
pgpRngSeeded;n 
pgpLibSetup;o 
pgpRng ; nn  n 


*/ 

/*  RingPooL  used  for  aLL  keysets  */ 

/*  LJser  specified  configuration  vaLues  */ 

= FALSE; 

/*  Found  a good  randseed.bin  */ 

/*  U caLLs  to  pgpLiblnit  - pg p Li b C L e a n u p */ 
/*  Random  number  generator  */ 


#if  MACINTOSHn  /*  C */ 


n static  PGPFiLeRef  * 

RandSeedFiLeRef(void) 

{ 

n FSSpecn  n n fsSpec; 

n if  (FindPGPPreferencesFoLderCkOnSystemDisk,  &f s S pe c . v R e f N urn, 

nnnnnnnn  8 f s S p e c . pa r I D ) !=  noErr) 

n n return  NULL; 
n 

n CopyPSt ri ng ( " \pPGP  Random  Seed",  f s S pe c . na me ) ; 
n return  pg pNe w F i L e Re f F r om F S S pe c C & f s S pe c ) ; 

> 

#eLsen  /*  1 MACINTOSH  C */ 


n static  PGPFi LeRef  * 

RandSeedFiLeRef(void) 

n char  const  *n  fiLeName; 

n fiLeName  = pgpen vG e t S t r i ng ( pg p E n v , PG PE N V_R AN D S E E D , NULL,  NULL) 
n if  (fiLeName  ==  NULL) 

n n return  NULL; 

n 

n return  pgpNe w F i L e Re f F r om F u L L Pa t h ( f i L e N a me ) ; 

> 

#endifn  /*  ] MACINTOSH  */ 


/* 

•k 

★ 

★ 

* 

★ 

* 

*/ 


nitiaLize  the  PGP  KeyDB  Library.  This  shouLd  be  caLLed  for  any 
unction  which  the  user  might  caLL  first,  ones  which  don't  reLy  on 
he  previous  existence  of  KeySets  and  such. 


This  sets  up  a gLobaL  PgpEnv  and  RingPooL,  and  initiaLizes  the  fieLds 
of  the  PgpEnv  from  the  preference  database. 


PGPError 

pgpLiblnit(void) 

( 


o 

char  const 

*randseed;n  n 

/* 

Q 

PGPFi LeRef 

*randSeedRef  ;n 

/* 

D 

filed 

*rs;nn  n n 

/* 

Q 

PGPErrorn 

result; 

Name  of  randseed  fiLe  */ 

FiLe  reference  to  randseed  fiLe  */ 
HandLe  to  randseed  fiLe  */ 


n if  ( pgp Li b S e t up ) i 

n n pgpLibSetup  +=  1;°  “ /*  ^l-Low  nesting  */ 

n n /*  ReLoad  prefs  on  every  init  caLL  unLess  we've  changed  the  prefs  / 
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° ° return  pg p P r e f s C h a n g e d ? PGPERR_OK  : p g p Lo a d P r e f s () - 

n > 


pgpEnv  = pgpenvCreateC); 
if  C ! pgpEnv ) 

n return  PGPERR_NOMEM; 
pgpAssertAddrVaLidCpgpEnv,  VoidALign) ; 

/*  Set  pgpEnv  defaults  */ 


° /*  Default  verbosity  level  */ 

n pgpenvSetIntCpgpEnv,  PG P E N V_ V E RBO S E , 1,  PG PE N V_ PR  I _PR I v D E F AU LT ) ; 

“ /*  Read  info  from  preference  file  */ 

a result  = pg p Loa d P r e f s ( ) ; 
n if  (result  !=  PGPERR_OK) 

n n return  result; 


n 

n 

n 

n 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


i f 
a 


/*  Figure  out  where  randseed  file  is  */ 

randseed  = p g pe n vG e t S t r i n g (pgpEnv,  PG P EN V_ R A N D S E E D , NULL,  NULL); 
■''(!randseed){ 

char  *pubdir,  *rseed; 
char  const  *pubring,- 

pubring  = pg p e n vG e t S t r i ng  (pgpEnv,  PG P E N V_ PUBR I NG , NULL,  NULL); 

pgpAssert(pubringS&*pubring); 
pubdir  = pgpFileNameDi rectory  (pubring); 

rseed  = pgpFileNameBuild  (pubdir,  "randseed.bin",  NULL); 
pgpenvSetString  (pgpEnv,  PG P E N V_ R AN D S E E D , rseed, 

° “ PGPENV_PRI_PRIVDEFAULT); 

pgpFree  (rseed); 
pgpFree  (pubdir)  ; 


° pgpRng  = pgpRandomC rea t e (); 
o if  (!pgpRng)  { 

° pgpenvDestroy  (pgpEnv); 

° n return  PGPERR_NOMEM; 
n > 


° /*  Read  in  the  randseed  file,  set  pgpRngSeeded  if  succeed  */ 

n randSeedRef  = RandSeedFileRefO; 

° rs  = pgpFi leRefStdI00pen( randSeedRef , k PG P F i I eOp e n R ea d Pe r m, 

° ° “ “ “ “ “ kPGPFi leTypeNone,  NULL); 

n P9pFreeFileRef(randSeedRef); 

“ if  (rs)  { 

° n result  = pgpRandSeedRead  (rs,  NULL); 

n n pgpStdIOClose  (rs); 

° > e I s e ( 

° n result  = PG PE R R_ R AN D S E E D_T00 S M A LL; 
n } 

“ pgpRngSeeded  = (result  ==  PGPERR_OK); 


pgpRingPool  = ringPoolCreate(pgpEnv); 
if  (!  pgpRingPool)  { 

“ pgpenvDestroy  (pgpEnv); 
o pgpRandomDestroy  (pgpRng); 
n return  PGPERR_NOMEM; 
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□ 

n 

□ 

> 


pgpAssertAddrVaLidCpgpRingPooL,  VoidALign); 

pgpLibSetup  = 1; 
return  PGPERR_0K; 


/*  This  should  be  called  by  the  application  when  it  is  through  with  the 

* Aurora  library.  It  should  also  be  called  by  the  operating  system  .f 

* Dossible  when  the  application  exits.  -ii 

* Calls  to  pgpLiblnit  and  pg p L i b C I e a n up  can  be  paired.  pg p L i b C I e a nup  w 

* Ltput  any  changed  prefs  and  update  the  random  seed  file  any  t.me  .t 

* is  called,  but  only  release  resources  on  the  last  call. 

*/ 

void 

pgpLibCleanup(void) 

^ PGPFileRef  * r a nd S e e d R e f ; n /*  File  reference  to  randseed  file  */ 

FILED  *rs;nB  n n /*  Handle  to  randseed  file  */ 


n 

n 

Q 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  If  not  open,  just 
if  ( ! pgpLibSetup) 
n return; 


return  */ 


/*  Decrement  open  count,  if  goes  to  zero  close  things  */ 
pgpLibSetup  -=  1; 

pgpSavePrefsC); 

if  (pgpLibSetup) 
n return; 


n /*  Update  random  data  */  , i */ 

n pgpRandPoolKeystroke  (0);«  /*  Get  current  time  into  rand  pool 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/* 

* 

★ 

* 

if 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


Don't  write  out  randseed.bin  if  we  didn't  read  one  and  haven't 
accumulated  significant  entropy.  Otherwise  we  might  produce 
weak  session  keys  on  future  runs. 

(pgpRngSeeded 

II  pgpRandPoolInflowO  >=  PGP_SEED_MIN_BYTES*8)  { 
randSeedRef  = Ra nd S e e d F i I e R e f ( ) ; 

PS  = pgpFileRefStdIOOpenCrandSeedRef,  kPGP F i I eOpe n S t d W r 1 1 e F I a g s , 

Q n n n n kPG  P F i I eTy  p e Ra  ndomS  e ed  , NULL); 

pgpFreeFi  leRef(randSeedRef); 
if  ( r s ) { 

pgpRandSeedWri te  (rs,  NULL,  NULL); 
p g p S t d 1 0 C I o s e (rs); 


n 

□ 


ri ngPoolDest roy  ( pg p R i n g Poo  I ) ; 
pgpenvDest roy  (pgpEnv); 
pgpRandomDest roy  (pgpRng); 
pgpRingPool  = NULL; 
pgpEnv  = NULL; 
pgpRng  = NULL; 
pgpRngSeeded  = FALSE; 
pgpLibSetup  = FALSE; 
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PGPError 


pgpGetKeyRingFUeRefsCPGPFileRef  **pubRef,  PGPFileRef  **privRef) 
» PGPErrorn  n result  = PGPERR_0K; 


n 

Q 

n 

Q 


n 

n 

n 

n 


if  (privRef  !=  NULL) 
° *pri vRef  = NULL; 
if  (pubRef  !=  NULL) 

° *pubRef  = NULL; 


« if  (pn’vRef  \=  NULL) 
n -C 


n 

□ 

n 

> 


*pnvRef  - pgpGetPref  Fi  leRef  (kPGPPrefPrivRingRef  ); 
if(*privRef==NULL) 

^ goto  memError; 


° i f (pubRef  ! = NULL) 
n i 

tt 

n 
n 
a 
□ 


n *pubRef  - pg pG e t P r e f F i L e Re f ( kPG PP r e f Pu bR i ng Re f ) ; 
“ if  (*pubRef  ==  NULL) 


n 

> 


goto  memError; 


return  PGPERR_0K; 
memError: 

° result  = PGPERR_NOHEM; 

if  (privRef  !=  NULL  &&  *privRef  !=  NULL) 

° P9P F ree F i I eRef ( *p r i vRef ) ; 

° *privRef  = NULL; 

> 

if  (pubRef  !=  NULL  &&  *pubRef  !=  NULL) 

C 

B PgpFreeFiLeRef(*pubRef); 

B *pubRef  = NULL; 

> 

return  result; 


/* 

* Open  default  keyrings  for  user,  return  keyset  for  it. 

* If  isMutable  is  false,  keyrings  are  read  only. 

*^If  <errorPtr>  is  non-NULL,  it  is  filled  with  an  appropriate  error  code. 
PGPKeySet  * 

pgpOpenDef au 1 1 KeyRi ngs ( Boo  I ean  isMutable,  PGPError  *errorPtr) 

= null;.  /.  FU.  r.fer.nce  for  •/ 

P6PFU.R.,  pubFU.R.F  . „ULL;.  /•  F,l. 

PGPKeySetn  *set  = NULL; 

PGPErrorn  n errorVal  = PGPERR_0K; 


pgp As s e r t Msg ( pgpLi bSe t up  > 0, 

B B "pgpOpenDefaultKeyRings:  pgpLiblnit  hasn’t  been  called"); 


D if  (pgpGetKeyRingFi  leRef s(&pubFi leRef , SsecFileRef)  !=  PGPERR  OK) 
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a 
□ 

□ 
n 
n 
□ 

error: 
n 


n errorVaL  = PG PE RR_N0_ F I LE ; 
n goto  error; 


= „,p0p.nK„R1n,P.1r<i..u,.bU,  ppbFU.R.f,  s.cFil.R.*,  S.rr.rV.L); 


if  ( secFi LeRef  ! = NULL) 

n n pgpFreeFiLeRef(secFiLeRef); 

n if  (pubFileRef  !=  NULL) 

B n pgpFreeFiLeRefCpubFiLeRef)/ 

B if  (set  !=  NULL  &S  errorVaL  !=  PGPERR_OK) 
n i 

B n pgpFreeKeySet(set); 

B n set=NULL; 

B > 

B if  (errorPtr  !=  NULL) 

B B pgpAssertAddrVaLidCerrorPtr,  PGPError); 

B B *errorPtr  = errorVaL; 

B > 

B return  set; 


open  the  specified  keyrings  for  user,  return  keyset  for  it. 

* If  isMutabLe  is  faLse,  keyrings  are  read  onLy. 

D4.  -v  ■ nnn-NULL  it  is  fiLLed  with  an  appropriate  error  code. 

* If  <errorPtr>  ts  non-NULL,  ^ c 

*/ 

pgp0pi'Kly*Rin9P.irCBo«l  = .n  FsRu.abl.,  PGPFil.R.f  .pubMF.R.f, 

„ B B n PGPFiLeRef  *secFiLeRef,  PGPError  *errorPtr) 

□ 

n n 
n o 
n 

Q 


PGPKeyDBH 

n n 

n n 

PGPKeySetn 
PGPErrorn 


*dbsec  = NULL,>i  B /*  KeyDB  for  secret  keyring  / 

*dbpub  = NULL,n  B /*  KeyDB  for  pubLic  keyring  */  ^ 

*dbunion  = NULL;bb  /*  KeyDB  for  union  of  both  keyrings 

*set  = NULL; 
errorVaL  = PGPERR_OK, 


n 

n 

u 

n 

o 

□ 

Q 

a 

n 

n 

n 

n 

n 

n 

a 

n 

n 


pgpAssertMsgCpgpLi  bSetup  >0,  u ii 

n n "pgpOpenKeyRingPair:  pgpLiblnit  hasn't  been  caLLed  ), 

/*  create  key  databases  for  these  fiLes.  Don't  bother  with  keypooL. 
Private  keyring  is  not  trusted  (no  trust  packets 

if  ((dbsec  = pgpCreateFiLeKeyDB(secFiLeRef,  0,  ^ ' 

„ „ „ B B n n pgpRingPooL,  aerrorVaD)  --  NULL) 

BQOtoerror; 

if  ((dbpub  = pgpCreateFiLeKeyDB(pubFiLeRef,  1, 

„ n n B B n B pgpRingPooL,  8errorVaL))  --  NULL) 

B goto  error; 


NULL) 


/*  Create  union  database  for  these  two  fiLes  / 

if  ((dbunion  = pgpCreateUnionKeyDB(8errorVaL))  ^ 

B goto  error; 

if  ((errorVaL  = pgpU n i on  Key D B Add ( dbun i on , dbsec))  !=  PGPERR.OK) 
dbse!°I°NULL;n'’  /*  dbunion  now  has  r e s pon  s i b i L i t y for  freeing  dbsec  */ 

cc6d99608378ac3c:] 
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a 

a 

n 

D 

a 

n 

n 

□ 

n 

Q 


If  ((errorVaL  = pg p U n i o n Key DB Add ( dbu n i on , dbpub))  !=  PGPERR  OK) 
“gotoerror; 

dbpub  = NULL;n  /*  dbunion  now  has  responsibility  for  freeing  dbsec  */ 

nf  (CerrorVal  = pg pBu i L d Key Poo L ( db un i o n , 0))  !=  PGPERR  OK) 
“gotoerror;  ~ 

if  ((set  = pgpKeyDBRootSet(dbunion))  ==  NULL) 

° errorVal  = PG PE R R_N0H EH ; « /*  XXX  Improve  error  */ 

° goto  error; 

> 


a 

□ 

n 

n 

n 

n 

tt 


/*  Hake  sure  trust  and  validity  info  is  correct.  This  also 
ensures  the  keyrings  are  rewritten  if  ringFileOpen  set 
« the  RIHGFILEF_TRUSTCHANGED  or  R I NG F I L E F_ D I RT Y flags.  */ 
if  ((errorVal  = pg p C omm i t Key R i n g C h a n g e s ( s e t ) ) !=  PGPERR  OK) 

® goto  error; 
errorVal  = PGPERR_0K; 


error: 

° if  (dbsec  !=  NULL) 

“ “ pgpFreeKeyDB(dbsec); 

“ if  (dbpub  !=  NULL) 

“ “ P9pFreeKeyDB(dbpub); 

“ if  (dbunion  !=  NULL) 

° ° PgpFreeKeyDB(dbunion); 

° if  (set  !=  NULL  S&  errorVal  !=  PGPERR  OK) 

n { 

° “ PgpFreeKeySet  (set  ); 

“ n set=NULL; 

n > 

“ if  (errorPtr  !=  NULL) 

n { 

“ “ PgpAssertAddrValid(errorPtr,  PGPError); 

n n *errorPtr=errorVal; 

a > 

“ return  set; 


/* 

* Open  a single  specified  keyring  file  for  user,  return  keyset  for  it 

* If  isHutable  is  false,  keyrings  are  read  only. 

* If  isTrusted  is  false,  trust  packets  are  ignored. 

errorPtr>  is  non-NULL,  it  is  filled  with  an  appropriate  error  code, 

PGPKeySet  * 

pgpOpenKeyRing(Boolean  isHutable,  Boolean  isPrivate,  Boolean  isTrusted 
“ ° n n PGPFileRef  MileRef,  PGPError  *errorPtr) 


PGPKeyDBn  *db  = NULL; 

PGPKeySetn  *set  = NULL; 

PGPErrorn  n errorVal  = PGPERR_OK; 


° PgpAsse rt Hsg ( pgpLi bSet up  > 0, 

° “ n "pgpOpenKeyRing:  pgpLiblnit  hasn't  been  called"); 


CCCHK: 
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a 


/*  Create  a key  databases  for  this  file.  Don't  bother  with  keypooL. 


n 


n 


n 


a 


Private  keyring  is  not  trusted  (no  trust  packets)  */ 
if  ((db  = pgpC r ea t e F i L eKey DB ( f i L eRef , isTrusted,  isPrivate,  isHutabLe, 
n n n n n n n pgpRingPooL,  SerrorVaL))  ==  NULL) 
n goto  error; 


a if  ((errorVaL  = pg pBu i I d Key Poo L ( d b , 0))  !=  PGPERR_0K) 

H n goto  error; 


n if  ((set  = pg p Key DBRoo t S e t ( d b ) ) ==  NULL) 
n { 

n n errorVaL  = PG P E R R_N0H EM ; n /*  XXX  Improve  error  */ 

n n goto  error; 
n > 


n 


/*  Hake  sure  trust  and  validity  info  is  correct.  This  also 


n 


n 


n 


n 


ensures  the  keyrings  are  rewritten  if  ringFiLeOpen  set 
n the  RINGFILEF_TRUSTCHANGED  or  R I N G F I LE F_ D I RT Y flags.  */ 
if  ((errorVaL  = pg p C omm i t Key R i ng C h a ng e s ( s e t ) ) !=  PGPERR_0K) 

n goto  error; 


n errorVaL  = PGPERR_OK; 

□ 

error: 

n if  (db  ! = NULL) 
n n pgpFreeKeyDB(db); 

n if  (set  !=  NULL  &&  errorVaL  !=  PGPERR_OK) 
n { 

n n pgpFreeKeySet(set); 

n n set=NULL; 

n } 

n if  (errorPtr  !=  NULL) 
n { 

n n pgp As se r t Add r Va L i d ( e r ro r Pt r , PGPError); 

n n *errorPtr  = errorVaL; 

n > 

H return  set; 

} 

/*  Add  keys  to  a keyset  from  a dynamically  allocated  binary  key  buffer  */ 
static  PGPKeySet  * 

pgpImportKeyX  (byte  *buffer,  size_t  Length) 

{ 

n PGPKeyDB  *kdb; 

n PGPKeySet  *set; 

n PGPErrorn  error; 

n /*  Create  a file  type  KeyDB  from  the  buffer  */ 

a kdb  = pg pC r ea t eM em F i I eKey D B (buffer.  Length,  pgpRingPooL,  fierror); 
n if  (!kdb)  { 

n n pgpMemFree  (buffer); 

n n return  NULL; 

n > 

n error  = pg pBu i L d Key Poo L (kdb,  0); 
n if  (error)  { 

n n pgpFreeKeyDB  (kdb); 

a n return  NULL; 

n > 
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n set  = pgpKeyDBRoot Set  (kdb); 
a pgpFreeKeyDB  (kdb); 
n return  set; 

} 


/*  Open  the  specified  keyfile  and  add  to  the  existing  KeySet  */ 

PGPKeySet  * 

pg p I mpo r t Ke y F i L e (PGPFiLeRef  *fiLeRef) 

{ 

n byten  *filebuf; 

n size_tn  n filebufLen; 

n PGPErrorn  err; 

n err  = pgpDearmorKeyFiLe  (pgpEnv,  fileRef,  SfiLebuf,  SfiLebufLen); 

n if  (err) 

n a return  NULL; 

a return  pgpImportKeyX  (filebuf,  filebufLen); 

> 

/*  Add  the  data  from  the  specified  memory  buffer  to  the  existing  KeySet  */ 
PGPKeySet  * 

pg p I mpo r t Key Bu f f e r (byte  *buffer,  si2e_t  Length) 

{ 

n byten  *fiLebuf; 

n size_tn  n filebufLen; 

n PGPErrorn  err; 

n err  = pg p D e a r mo r Key Bu f f e r (pgpEnv,  buffer.  Length,  Sfilebuf,  & f i L e bu f L en ) ; 
n if  (err) 

n n return  NULL; 

n return  pgpImportKeyX  (fiLebuf,  filebufLen); 

> 


/* 

* Filter  function  for  extraction.  Remove  any  secret  objects. 

* If  addmrks  is  true,  also  add  any  message  recovery  key  objects  to 

* the  set.  This  uiLL  cause  HRK's  to  be  extracted  with  the  keys 

* that  use  them. 

* XXX  THIS  DOES  NOT  YET  WORK.  There  is  no  RingSet  available  in  which 

* to  Look  for  HRK's.  The  export  functions  typically  are  called  with 

* just  a memory  RingSet.  We  need  to  add  versions  which  take  an  extra 

* PGPKeySet  to  flag  that  HRK's  should  be  Looked  for  there. 

*/ 

static  RingSet  * 

f i L t e r P u b R i ng S e t (RingSet  *rset,  PGPKeySet  *keys.  Boolean  addmrks) 

{ 


n 

RingSetnn 

*rsetnew;n 

/* 

Set  of 

recipients  */ 

n 

RingSetnn 

*rkeyset;n 

/* 

Set  of 

message  recovery  keys 

□ 

Ringiterator 

*riter;n  n 

/* 

Iterator  over  adding  sets  */ 

n 

i n t nn  n n 

Level; 

n 

if  (Irset) 

n 

n return  NULL 

r 

B 

rkeyset  = NULL; 

n 

rsetnew  = r i n g S e t C r ea t e (ringSetPooL 

(rset)); 

n 

if  (trsetnew) 
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a 

B 

return 

NULL; 

□ 

riter 

= ringIterCreate  (rset); 

Q 

if 

(Iriter) 

{ 

n 

B 

ringSetDestroy  (rsetnew); 

B 

B 

\ 

return 

NULL; 

B 

J 

/* 

B 

★ 

Copy  objects  in  PGPKeySet  to  rsetnew  except  secret  objects. 

B 

* 

At 

the  same  time,  accumulate  any  message  recovery  keys  into 

B 

★ 

rkeyset . 

B 

*/ 

B 

w h i 

L e 

((level  = r i ng 1 1 e r Nex t Ob j e c t Any whe r e ( r i t e r ) ) > 0)  { 

B 

B 

RingObject  *obj  = ringIterCurrentObject  (riter,  level); 

B 

B 

/* 

Skip 

secret  objects  and  non-members  */ 

B 

B 

i f 

(ringObjectType  (obj)  ==  R I N GT Y PE_S E C ) 

B 

B 

a 

continue; 

B 

B 

i f 

( ! (* 

key s-> i s Hembe r ) ( ke y s , obj)) 

B 

B 

n 

continue; 

B 

B 

r i 

ngSet AddOb j ect  (rsetnew,  obj); 

B 

B 

/* 

For 

key  objects.  Look  for  message  recovery  keys  */ 

B 

B 

i f 

(addmrks  S&  ringObjectType  (obj)  ==  R I NGT YPE_KE Y ) { 

B 

B 

n 

RingObjectn  *rkey;n  n /*  Recovery  key  */ 

B 

B 

D 

unsignedn  n nrkeys;nn  /*  Number  of  recovery  keys  */ 

B 

B 

D 

if 

( r i ng Key Re c 0 ve ry Key  (obj,  rset,  0,  NULL,  Snrkeys,  NULL)) 

B 

B 

n 

n 

/*  Add  to  special  set  for  recovery  keys  */ 

B 

B 

o 

n 

while  (nrkeys--  > 0)  { 

B 

B 

Q 

0 

n rkey  = r i ng Key R e cove ryKe y (obj,  rset,  nrkeys,  NULL, 

B 

B 

n 

0 

n n NULL,  NULL); 

B 

B 

n 

0 

n pgpAssert  (rkey); 

B 

B 

Q 

0 

n if  (Irkeyset)  { 

B 

B 

D 

0 

n n rkeyset  = r i ng S e t C r e a t e ( r i ng S e t Poo L ( r s e t ) ) ; 

B 

B 

n 

0 

a n if  (Irkeyset)  { 

B 

B 

o 

0 

n n n ringIterDestroy  (riter); 

B 

B 

Q 

0 

n n n ringSetDestroy  (rsetnew); 

B 

B 

B 

0 

n n n return  NULL; 

B 

B 

B 

0 

B n > 

B 

B 

B 

0 

B } 

B 

B 

B 

0 

B r i ngSet AddOb j e c t Ch i L d ren  (rkeyset,  rset,  rkey); 

B 

B 

B 

0 

> 

B 

n 

B 

> 

B 

B 

> 

B 

> 

n ringIterDestroy  (niter); 

n /*  Last,  merge  rkeyset  into  rsetnew,  also  stripping  secrets  */ 
n i f ( rkeyset ) { 
n n ringSetFreeze  (rkeyset); 

n n riter  = ringIterCreate  (rkeyset); 

n n if  (Iriter)  { 

n n n ringSetDestroy  (rkeyset); 

n n n ringSetDestroy  (rsetnew); 

n n n return  NULL; 

n n > 

n n /*  Loop  over  rsetnew  iterator,  adding  non-secret  objects  */ 

n n while  ((Level  = r i ng 1 1 e r N ex t Ob j e c t A ny w h e r e ( r i t e r ) ) > 0)  { 

n n a RingObject  *obj  = ringIterCurrentObject  (riter.  Level); 
n n n if  ( r i ng Ob j e c t Ty pe  (obj)  ==  R I NGT Y P E_S E C ) 

a a a n continue; 
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n n n r i ng S e t AddO b j e c t (rsetnew,  obj); 
n n > 

n n ringIterDestroy  (riter); 

n n r i ng S e t D e s t roy  (rkeyset); 

n > 

n /*  Return  new  set  in  frozen  form  */ 
n r i ng S e t F r e e z e (rsetnew); 
n return  rsetnew; 

} 


/* 

* Extract  all  keys  in  the  specified  KeySet  to  the  specified  file. 

* version  always  ascii  armors  them. 

* Only  extracts  public  portions  of  keys. 

*/ 


PGPError 

pg pExpo r t Key F i I e (PGPKeySet  *keys,  PGPFileRef  *fileRef) 
{ 


n 

a 

n 

□ 


Ri ngSetnn 
n □ □ 

FILEn  n 
PGPE  r ro  rn 


* r s e t , 
*rsetpub; 
*f  p; 
error; 


This 


n fp  = pgp F i I e Re f S t d I OOpen ( f i I eRef , ( kPG P F i I e 0 p e n S t d W r i t e F I a g s 

nnnnnnnnnn  | k PG P F i I e 0 pe nTex t Mod e ) , 
n n n n n n n kPG P F i I eTy pe E x po r t e d Key s , &error); 
n if  ( ! f p) 
n n return  error; 

n rset  = pg pKey D BR i ng S e t ( ke y s -> key DB ) ; 
n rsetpub  = filterPubRingSet  (rset,  keys,  FALSE); 

H if  (!rsetpub)  { 
a a pgpStdIOClose  (fp); 

n n pgpDeleteFile(fileRef); 

n n return  PGPERR_NOHEH; 

n } 

n error  = ( PG P E r r o r ) pg p W r i t e A rmo r e d S e t F i I e (fp,  rsetpub,  pgpEnv); 
H pgpStdIOClose  (fp); 
a ri ngSetDest roy  (rsetpub); 
n return  error; 

> 


/* 

* Extract  all  keys  in  the  specified  KeySet  to  the  specified  memory 

* buffer,  which  is  of  size  *length.  Return  number  of  bytes  written 

* in  *length.  This  version  always  ascii  armors  the  keys. 

* Only  extracts  public  portions  of  keys. 

*/ 

PGPError 

pg p E xpo r t Key Bu f f e r (PGPKeySet  *keys,  byte  *buffer,  size_t  *length) 

{ 

n RingSetn  *rset, 

n n n *rsetpub; 

n PGPErrorn  error; 

n rset  = pg p Key D BR i n g S e t ( key s -> key DB ) ; 
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n rsetpub  = f i L t e r Pu b R i ng S e t (rset,  keys,  FALSE); 
n if  (!rsetpub)  -C 
n n return  PG P E R R_NOM EH; 

n } 

n error  = (PGPError)  pg p W r i t e A r mo r e d S e t Bu f f e r (buffer.  Length,  rsetpub, 
n n pgpEnv ) ; 

n r i ng S e t De s t r oy  (rsetpub); 

n return  error; 

} 


#if  d e f i n ed ( _U I N3 2 ) 

#define  S EH APH 0 R E N AM En  ( " PG P key s I n s t S em " ) 
static  HANDLE  hSem; 

/* 

* Return  TRUE  if  we  have  the  interlock  semaphore,  FALSE  if  someone  else 

* has  it 
*/ 

Boolean 

pg pO p e n S ema pho r e () 

{ 

n /*  If  already  been  called,  return  false  */ 
n if  (hSem) 
n n return  FALSE; 

/*  Create  or  open  a named  semaphore  */ 

hSem  = C r ea t e S ema p ho r e (NULL,  0,  1,  S E M A PH  0 R E N AH E ) ; 

n /*  If  another  instance  exists,  close  handle  and  return  false  */ 

if  ((hSem  !=  NULL)  &&  ( G e t La s t E r r o r ( ) ==  E R RO R_ A LR E A D Y_ E X I ST S ) ) { 
CLoseHandLe(hSem); 
n n hSem  = (HANDLE)0; 

return  FALSE; 

> 

/*  If  new  semaphore  was  created,  return  TRUE.  */ 
return  TRUE; 

> 

/*  Clear  the  semaphore  which  keeps  others  from  running  */ 
void 

pg p C L o s e S ema p ho r e () 

{ 

n if  (!hSem) 
n a return; 

n CLoseHandle  (hSem); 
n hSem  = (HANDLE)0; 

> 

#e  L se 
/* 

* Return  TRUE  if  we  have  the  interlock  semaphore,  FALSE  if  someone  else 

* has  it 
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*/ 

Boolean 

pg pO p e n S ema p h o r e () 
{ 

a return  TRUE; 

> 


J 


/*  Release  the  interlock  semaphore  */ 
void 

pgpC  loseSemaphore  () 

{ 

} 

# e n d i f 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


J 


J 
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/* 

* pgpKeyMan.c  --  Key  Manipulation  functions 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg pKe y Ha n . c , V 1.61.2.6  1997/06/07  09:50:26  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

//  e n d i f 


#incLude 

"pgpKDBint.h" 

^include 

"pgpDebug.h" 

#i nc  Lude 

"pgpRngPub. h" 

#include 

"pgpRngRead.h 

#i nc  Lude 

"pgpPubKey. h" 

#incLude 

"pgpRndom.  h" 

#i nc  Lude 

"pgpSigSpec.h 

#incLude 

"pgpKeySpec  . h 

//include 

"pgpT  rstPkt . h 

//include 

"pgpTrust.h" 

//include 

"pgpHash . h" 

//include 

"pgpEnv. h" 

#include 

" bn . h " 

/*  INTERNAL  FUNCTIONS  */ 

/*  Internal  function  for  certifying  a key  or  userid.  Object  to  be  signed 
n must  benin  dest.  Signing  key  should  be  in  src.  selfsig  should  be 
set  for  s e L f - c e r t i f y i ng  names.  */ 


static  PGPError 

pg pC e r t i f yOb j e c t (union  RingObject  *to_sign,  struct  RingSet  *dest, 
n a n n union  RingObject  *signer,  struct  RingSet  *src, 

anna  byte  sigtype,  char  *passphrase.  Boolean  selfsig) 

{ 

struct  PgpSecKey  *seckey  = NULL; 

struct  PgpSigSpeca  *sigspec  = NULL; 

PGPErrora  a a a error  = PGPERR_0K; 

a if  (passphrase  &S  strlen  (passphrase)  ==  0) 
a a passphrase  = NULL; 

a if  (!signer  ||  ! r i ng Key  I s S e c (src,  signer)  || 

a a !(ringKeyUse  (src,  signer)  S PG P_PKU S E_ S I G N ) ) 
a return  PGPERR_NO_SECKEY; 


seckey  = r i ng S e c S e c Key  (src,  signer,  PG P_ PKU S E_S I GN ) ; 
if  (Iseckey) 

a return  r i ng S e t E r r o r ( s r c ) ->e r r o r ; 

if  ( pgpS e c Key  I s L o c ked  (seckey))  ( 
a if  ( ! pa s s ph r a s e ) ( 

a a pg p S e c Key De s t r oy  (seckey); 

a a a return  PG P E R R_KE Y DB_B A D P AS S PH R A S E ; 
a a } 

a error  = pg p S e c Key Un L o c k (seckey,  pgpEnv,  passphrase, 

a a a a a a a a strlen(passphrase)); 
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□ 

n 

□ 

□ 

n 

n 

Q 


□ 

a 

a 

a 

a 

n 

Q 

Q 

□ 

n 

□ 

□ 

n 

a 

a 

□ 

Q 

n 

D 

□ 

□ 

□ 

> 


n if  (error  !=  1)  { 

pg p S e c Ke y D e s t r oy  (seckey); 
n n if  (error  ==0) 

a a error  = PG P E R R_KE Y DB_B A D P A S S P H R A S E ; 

a a return  error; 

} 

> 

r i ng Key S e t Ax i oma t i c (src,  signer);  /*  user  knows  the  passphrase  */ 
sigspec  = pg p S i g S pe c C r ea t e (pgpEnv,  seckey,  sigtype); 
if  (!sigspec)  ( 

pgpSecKeyDestroy  (seckey); 
return  PG P E R R_ NOM EH ; 

> 

if  (seckey->pkALg  > PG P_ PK A LG_R S A + 2 &8 

n n sigtype  ==  PG P_ S I GT Y PE_KE Y_G E N E R I C &&  selfsig)  C 
n /*  Propagate  sig  subpacket  information  */ 
n byte  const  *p ; 
n size_t  pLen; 

n pgpS i g Spe c S e t Ve r s i on  (sigspec,  PG P V E R S 1 0N_3  ) ; 

n if  ( ( p = r i ng Key F i n d S u bpa c ke t (signer,  src,  S I G S U B_ PR E F E R R E D_ A LG S , 0, 
n n n &pLen,  NULL,  NULL,  NULL,  NULL,  NULL))  !=  0)  { 
n n pg p S i g S pe c S e t P r e f A L g s (sigspec,  p,  pLen); 
n } 

n if  ( r i ng Key E X p i r a t i on  (src,  signer))  { 

D n word32  period  = r i ng Key E x p i r a t i on  (src,  signer)  - 
n n n r i ngKey C rea t i on  (src,  signer); 
n n pg p S i g S pe c S e t Key E X p i r a t i o n (sigspec,  period); 

n } 

} 

error  = r i ng S i g nOb j e c t (dest,  to_sign,  sigspec,  pgpRng); 
pgpSecKeyDestroy  (seckey); 
pgpSigSpecDestroy  (sigspec); 
return  error; 


/*  Check  for  a 'dead'  key.  A dead  key  is  revoked  or  expired, 
n There's  not  much  you  can  do  with  such  a key.  */ 

static  Boolean 
pgpKeylsDead  (PGPKey  *key) 

{ 

Boolean  revoked,  expired; 
n 

n pg pGe t Key Boo  I e a n (key,  k PG PKey P r op  I s Re vo ked , Srevoked); 
n pgpGetKeyBoolean  (key,  kPGPKeyPropIsExpired,  Sexpired); 
n return  (revoked  | | expired); 

> 


/*  Same  for  subkey...  */ 
static  Boolean 

pg p S u bKey I s Dea d (PGPSubKey  *subkey) 

{ 

Boolean  revoked,  expired; 

Q 

n pgpGetSubKeyBoolean  (subkey,  kPGPKeyPropIsRevoked,  Srevoked); 
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a pg pGe t S ubKeyBoo L ea n (subkey,  k PG PKey P r o p I s E x p i r e d , Sexpired); 
n return  (revoked  ||  expired); 

> 

/*  Find  the  default  private  key.  Get  the  name  (or  keyid)  from  the 
n environment,  and  find  the  PGPKey  object.  If  there  is  no  default 
n key  defined  in  the  environment,  return  NULL  unless  there  is 
n only  one  private  key  in  the  key  database.  */ 


stati c PGPKey  * 

pg pG e t D e f a u 1 1 P r i va t e Key  I n t e r n a I (PGPKeyDB  *keyDB) 

{ 

n union  RingObjectn  *keyobj  = NULL,  *selectedkey  = NULL,  *secobj; 
n struct  RingSetn  n *ringset; 

n struct  Ringiterator  *iter; 

n PGPKey  *key  = NULL; 

n char  constn  n n *myname  = pg pe n vG e t S t r i n g 

n n n n n n n (pgpEnv,  PGPENV_M YNAME,  NULL,  NULL); 

n 

n ringset  = (*keyDB->getRingSet)  (keyDB); 
n iter  = r i ng I t e r C r e a t e (ringset); 
n if  (liter) 

a n return  NULL; 


Q 

if  ( 

! myname 

1 1 strlen  (myname)  ==  0)  { 

n 

0 

/* 

If 

only  one  private  key,  return  that  */ 

Q 

0 

while  ( r i ng I t e r Nex t Ob j e c t (iter,  1)  > 0)  { 

n 

0 

0 

keyobj  = ringIterCurrentObject  (iter,  1); 

n 

0 

0 

pgpa(pgpaAssert(ringObjectType(keyobj)  ==  RINGTYPE_KEY)); 

n 

0 

0 

i f 

( r i n g Key  I s S e c (ringset,  keyobj)  && 

n 

0 

0 

0 

(ringKeyUse  (ringset,  keyobj)  8 PG P_PKUS E_ S I G N ) ! =0 ) { 

n 

0 

0 

0 

if  (selectedkey)  { /*  already  found  one  */ 

Q 

0 

0 

0 

selectedkey  = NULL; 

n 

0 

0 

0 

n goto  cleanup; 

n 

0 

0 

0 

> 

n 

0 

0 

0 

else 

n 

0 

0 

0 

n selectedkey  = keyobj;  /*  found  first  one  */ 

n 

0 

0 

> 

n 

0 

} 

n 

> 

n 

else 

n 

0 

secob j 

= r i ng La t e s t S e c r e t (ringset,  myname,  pgpGetTi me ( ) , 0); 

n 

0 

if 

( secob j ) i 

□ 

0 

r i ng I t e r S ee kTo  (iter,  secobj); 

n 

0 

0 

selectedkey  = ringIterCurrentObject  (iter,  1); 

n 

0 

0 

/* 

Hake  sure  it  can  sign  */ 

n 

0 

0 

i f 

( ! ( ri ngKeyUse  (ringset,  selectedkey)  & PG P_PKU S E_ S I GN ) ) 

0 

0 

0 

selectedkey  = NULL; 

0 

0 

> 

0 

> 

cleanup; 

0 

r i ng I t e r De s t r oy  (iter); 

0 

if  ( 

selectedkey)  { 

0 

key 

= pg pGe t Key By R i ng Ob j e c t (keyDB,  selectedkey); 

0 

0 

/* 

Ignore  revoked  or  expired  key  */ 

0 

0 

i f 

(key 

8&  pgpKeylsOead  (key)) 

0 

0 

key 

= NULL; 
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n > 

n return  key; 

> 

/*  END  OF  INTERNAL  FUNCTIONS  */ 

/*  Copy  an  entire  key  to  a new  ringset.  The  newly  created  ringset  is 
a returned.  This  function  is  necessary  for  two  reasons: 

1.  r i n g Ra i s e N a me  requires  all  names  to  be  present  on  the  ringset  to  have 
n any  effect. 

n 2.  to  ensure  a complete  key  (i.e.  all  it's  sub-objects)  are  copied  from 
n a modified  read-only  key  to  a writable  keyring. 

*/ 

PGPError 

pgpCopyKey  (struct  RingSet  *src,  union  RingObject  *obj,  struct  RingSet  **dest) 
{ 

n struct  Ringiterator  *iter  = NULL; 
n i ntnn  n n n leve I ; 

a if  ( ! r i ng S e 1 1 s M emb e r Csrc,  obj)) 
a a return  PGPERR_BADPARAM; 

n *dest  = ringSetCreate  (ringSetPool  (src)); 
a if  (!*dest) 
n n return  PGPERR_NOHEM; 

n iter  = r i ng I t e rC rea t e (src); 
a if  (liter)  { 

n a r i ng S e t D e s t r oy  (*dest); 

a n return  PGPERR_NOMEM; 

n } 

n r i n g I t e r S e e kTo  (iter,  obj); 

n ringIterRewind  (iter,  2);  /*  reset  iterator  to  key  object  */ 

n /*  Loop  adding  objects  until  next  key  (level  1),  or  no  more  keys 
n n (level  0)  */ 

n while  ((level  = r i ng I t e r N e x t 0 b j e c t Any wh e r e (iter))  > 1)  { 
n n obj  = r i n g I t e r C u r r e n t Ob j e c t (iter,  level); 
n n ringSetAddObject  (*dest,  obj); 

n } 

n r i ng I t e r De s t r oy  (iter); 
n return  PGPERR_OK; 

> 


/*  Given  a key  ring  object,  find  the  corresponding  PGPKey  object.  */ 

PGPKey  * 

pg pGe t Key By R i ng Ob j e c t (PGPKeyDB  *keyDB,  union  RingObject  *keyobj) 

{ 

a PGPKeyn  n n n *keyptr; 

n pgpAssert  ( r i ng Ob j e c t Ty pe  (keyobj)  ==  R I NGT Y PE_KE Y ) ; 

n for  (keyptr  = key DB-> f i r s t Key  I n DB ; keyptr;  keyptr  = key p t r->nex t Key  I n D B ) { 
n n if  (keyobj  ==  keyptr->key) 

n n n return  keyptr; 

n > 
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n return  NULL; 

> 


PGPError 

pg p R e VO ke Key  (PGPKey  *key,  char 


{ 

PGPKeyDBn  n n 

n struct  RingSet 

n union  Ri ngOb j ect 

n PGPErrorn  n n 


*passphrase) 

*keys  = NULL; 

*aUset  = NULL,  *addset 
*keyobj ; 

error  = PGPERR_OK; 


n 

n pgpa ( pgpa PGPKey Va L i d ( key )) ; 

n keys  =n  n key->keyDB; 

n keyobj  =n  key->key; 


NULL; 


n if  ( ! ( * key s -> i s M u t a b L e ) (keys)) 
n a return  PG P E RR_KE Y DB_KE Y DB R E A DON L Y ; 
n if  ( pg pKey 1 s D e a d (key)) 

n return  PGPERR_0K;  /*  no  need  */ 

a 

n alLset  = pg p Key D B R i ng S e t (keys); 
n if  ( ! ri ngKeylsSec  (aLLset,  keyobj)) 

n B return  PG P E R R_N0_ S E C KE Y ; n an/*  not  our  key  */ 


B error  = pgpCopyKey  (aLLset,  keyobj,  Saddset); 
n if  (error) 

B B return  error; 

B error  = pgp C e r t i f y 0 b j e c t (keyobj,  addset,  keyobj,  alLset, 

B B B B B B B PGP_SIGTYPE_KEY_COHPROMISE,  passphrase,  FALSE); 

n if  (error)  ( 

B B ringSetDestroy  (addset)  ; 

B B return  error; 

n > 

B 

B /*  Update  the  KeyDB  */ 

B error  = pgpAddObjects  (keys,  addset); 

B ringSetDestroy  (addset); 
n return  error; 

} 


/*  Check  whether  sufficient  entropy  exists  to  generate  a key  of  the 
requested  type  with  the  requested  number  of  keys.  Returns 
0 if  sufficient  entropy  exists,  or  a positive  integer  representing  the 
number  of  bits  required.  */ 

unsigned 

pgpQueryEnt ropyNeeded  (byte  pkaLg,  unsigned  bits) 

{ 

B Long  bits_needed; 

n BooLeanBB  fastgen  = pgpenvGetInt  (pgpEnv,  PG PEN V_ F A STKE YG E N , 
BBBBBBBBBBBB  NULL,  NULL); 

n bits_needed  = pg p S e c Key E n t r opy  ( pg p P ka L g By N umb e r ( p ka L g ) , bits,  fastgen)  - 
B pgpRandPooLEntropy(); 

n return  (unsigned)  ((bits_needed  <=  0)  ? 0 : bits_needed); 

} 
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/*  Return  the  amount  of  entropy  needed  to  create  a key  of  the  specified 
type  and  size.  The  application  must  call  pgpRandpoolEntropyf)  itself 
until  it  has  accumulated  this  much.  */ 

unsigned 

pgpKeyEnt ropyNeeded  (byte  pkalg,  unsigned  bits) 

{ 

n Booleannn  fastgen  = pgpenvGetInt  (pgpEnv,  PG P E N V_ F ASTKE Y G E N , 
n n n n n n n b b b b b NULL, NULL); 

n return  pg p S e c Key E n t r o py  ( pg p P ka I gBy Numbe r (pkalg),  bits,  fastgen); 

} 


/*B  Allows  the  caller  to  add  entropy  to  the  random  number  pool.  This  will  not 
B normally  be  called  - the  app  will  call  Aurora  functions  directly.  */ 

PGPError 

pgpAddRandomBi t s (byte  * r a n dom_b i t s , unsigned  num_bytes) 

{ 

pg p Ra n d om AddBy t e s (pgpRng,  random_bits,  num_bytes); 
n return  PGPERR_OK; 

} 


#if  0n  /*  C */ 

static  int  ( *g e n e r a t e Y i e I d P r og r e s s F u n c ) ( vo i d *arg,  int  phase)  = NULL; 
static  void  *generateYieldArg  = NULL; 

static  int 

generateYieldFunc(void) 

{ 

B /*  Will  this  actually  work  consistently  to  abort  from  here?  */ 
n if  ( gene ra t e Y i e I dP rog r es s Fun c !=  NULL) 

B B return  ( *g e ne r a t e Y i e I d P r og r e s s F u n c ) ( g e ne r a t e Y i e I d A r g , 0); 

B else 

B B return  0; 

} 

Sendifn  /*  J */ 

/*  Common  code  for  generating  master  keys  and  subkeys.  *masterkey 
is  NULL  when  generating  a master  key,  and  is  used  to  return 
a the  master  PGPKey  object.  If  *masterkey  contains  a value, 
n a subkey  is  to  be  generated  associated  with  the  PGPKey  object.  */ 

static  PGPError 

pg pG e n e r a t eKey I n t e r na  I (PGPKeyDB  *keyDB,  PGPKey  **masterkey. 


a 

a 

n 

n 

n 

Q 

byte 

pkalg,  unsigned  bits. 

a 

a 

n 

n 

n 

n 

word16  expiration,  char  *nane,  int  name 

a 

a 

n 

n 

n 

n 

char 

*passphrase,  char  *masterpass. 

a 

n 

a 

n 

n 

n 

i n t 

(*progress)  (void  *arg,  int  phase). 

o 

/ 

a 

n 

s 

n 

□ 

void 

*a  rg  ) 

\ 

n 

struct 

R i ng  S e t n 

D 

*allset,  *addset  = NULL; 
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n 

uni  on 

RingObject 

Q 

PGPError 

n 

struct 

PgpSecKeyn 

a 

struct 

PgpKeySpec 

u 

long 

a 

Boo  lean 

□ 

Boo  1 eannn 

n a 

n 

□ □ 

n 

n n 

f 

0n  /* 

C */ 

a 

i n t nn 

n 

a □ 

♦newobj  = NULL; 
error  = PGPERR_0K; 

*seckey  = NULL,  *masterseckey  = NULL; 

*keyspec  = NULL; 

entropy_needed,  entropy_avai table; 
genMaster  = (*niasterkey  ==  NULL); 

fastgen  = pgpenvGetInt  (pgpEnv,  PG P E N V_ F ASTKE YG E N , 
□ n n n n □ NULL, NULL); 

(*oLdBNYieLd)(void); 


n g e n e r a t e Y i e L d P r og r e s s F un c = progress; 

n generateYieLdArg  = arg; 
n oLdBNYield  = bnYietd; 
n bnYietd  = SgenerateYieldFunc; 

#endifn  /*  D */ 


n /*  Check  we  have  sufficient  random  bits  to  generate  the  keypair  */ 
n ent ropy_needed  = pg pS e c Key En t r opy  ( pg p P ka t g By Numbe r ( p ka t g ) , bits,  fastgen); 
a en t ropy_a va i t a b t e = pg p Ra nd Poo t E n t r opy  (); 

n if  ( ent ropy_needed  > e n t r opy _a va i t a b t e ) t 
n return  PGPERR_KEYDB_NEEDMOREBITS; 

n n goto  cleanup; 
n } 
a 

a /*  Generate  the  secret  key  */ 

n seckey  = pg p S e c Key Gene r a t e ( pg p P ka t g By N umbe r ( p ka t g ) , bits,  fastgen,  pgpRng, 
nnnnnnnn  progress,  arg,  &error); 
n if  (error) 
n n goto  cleanup; 

n pgpRandomStir  (pgpRng); 

n /*  Need  to  lock  the  SecKey  with  the  passphrase.  */ 

Q if  (passphrase  &&  strlen  (passphrase)  > 0 ) ( 
n n error  = pg p S e c Key C ha ng e Lo c k (seckey,  pgpEnv,  pgpRng, 
nnnnnnnnn  passphrase,  strlen  (passphrase)); 
n n if  (error) 

n n n goto  cleanup; 

n } 

n /*  Generate  the  keyring  objects.  Use  keyspec  defaults  except  for 
n n expiration  (validity)  period  */ 

n keyspec  = pgpKeySpecCreate  (pgpEnv); 
n if  (Ikeyspec)  { 
a n error  = PGPERR_NOHEM; 

n n goto  cleanup; 

n } 

n pgpKeySpecSetValidity  (keyspec,  expiration); 
n allset  = pg pKey DBR i ng S e t (keyOB); 


n if  (genMaster)  { 

n /*  Generating  master  signing  key  */ 

n addset  = r i ng S e t C r ea t e (ringSetPool  (allset)); 

a n if  (laddset)  ( 

n a error  = PGPERR_NOMEM; 

n n n goto  cleanup; 

n n } 
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n 

n 

Q 

a 

Q 

□ 

n 

n 

n 

□ 

n 

□ 

n 

a 

a 

a 

□ 

n 

a 

□ 

D 

n 

a 

□ 

Q 

□ 

n 

D 

□ 

□ 

n 

Q 

D 

n 


error  = r i n g C r e a t e Key pa i r (pgpEnv,  seckey,  keyspec,  name,  name_Len, 
n n n n n n n pgpRng,  addset,  addset); 

> 

else  { 

/*  Generating  encryption  subkey.  Get  the  master  seckey  and 
a unlock  it*/ 

error  = pgpCopyKey  CaLLset,  (*masterkey)->key,  Saddset); 
n if  (error) 
a goto  cleanup; 

masterseckey  = r i n g S e c S e c Key  (allset,  ( *ma s t e r key ) -> key , 
n n n n n n n n PGP_PKUSE_SIGN); 

n if  ( ! ma s t e r s e c key ) { 

n error  = r i ng S e t E r r o r ( a I I s e t ) ->e r r o r ; 

n n goto  c leanup; 

n } 

n if  ( pg p S e c Key  I s I o c ke d (masterseckey))  { 
n if  ( ! pa  s s p h r a s e ) ■( 

n n error  = PG P E R R_KE Y D B_B A D P AS S PH R A S E ; 

a a goto  cleanup; 

a a } 

a a error  = pg p S e c Ke y U n I o c k (masterseckey,  pgpEnv,  masterpass, 
aaaaaaan  strlen  (masterpass)); 
a a if  (error  !=1){ 

a a if(error==0) 

a a a error  = PG P E R R_KE Y DB_B A D P A S S P H R A S E ; 

a a n goto  c leanup; 

a a } 

a } 

error  = r i n g C r ea t e S u b key pa i r (pgpEnv,  masterseckey,  seckey,  keyspec, 
a a a n n n n n pgpRng, addset, addset); 

} 

pg pRa nd omS t i r (pgpRng);an  /*  this  helps  us  count  randomness  in  pool  */ 
if  (error) 
a goto  cleanup; 


a /*  Add  objects  to  main  KeyDB.  Before  doing  so,  locate 
a the  master  key  object  and  return  it.  */ 

a r i ngSet F reeze  (addset); 
a if  (genMaster)  { 

a Ringiterator  *iter  = r i ng I t e r C r ea t e (addset); 

a a if  (liter)  { 

a a error  = r i ng S e t E r r o r ( a dd s e t ) ->e r r o r ; 

a a a goto  cleanup; 

an} 

a a r i ng 1 t e r Ne X t Ob j e c t (iter,  1); 
a a newobj  = r i ng I t e r C u r r e n t Ob j e c t (iter,  1); 
a a r i ng I t e r D e s t r oy  (iter); 
a > 

a error  = pgpAddObjects  (keyDB,  addset); 
a if  (genMaster  SS  lerror) 

a *masterkey  = pg pG e t Key By R i n g Ob j e c t (keyDB,  newobj); 


cleanup: 

#if  0 

a bnYield  = oldBNYield; 

#end  i f 

a i f (addset ) 

a a ri  ngSetDest roy  (addset); 
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n if  (seckey) 

n n pg p S e c Key D e s t roy  (seckey); 
n if  (masterseckey ) 

n pgpSecKeyDestroy  (masterseckey); 

a i f ( keyspec  ) 

a n pgpKeySpecDestroy  (keyspec); 
n return  error; 

} 


/*  Generate  a new  master  keypair.  The  caLLer  must  have  already  generated 
sufficient  entropy  for  the  keys  to  be  generated.  The  newly  generated 
keys  are  added  to  the  PGPKeyDB  referenced  by  "keyset".  */ 


PGPE  r ro  r 

pg pG e n e r a t e Key  (PGPKeySet  *keyset, 
n B n n word16  expiration, 

B B n B char  *passphrase, 

B B B B void  *arg,  PGPKey 


byte  pkalg,  unsigned 
char  *name,  int  name 
int  (*progress)  (void 
**  key ) 


bits, 
I e n , 
*a  rg. 


int  phase). 


PGPError 
B PGPKey 


error  = PGPERR_0K; 
*newkey  = NULL; 


B pgpa(pgpaPGPKeySetValid(keyset)); 

if  (bits  < 512  II  bits  > 4096  | | 

B B (pkalg  !=  PG P_ PKA LG_R S A &&  pkalg  !=  PG P_PKA LG_ D S A ) || 

B B !name  | | name_len  <1  | | name_len  > 256) 

B return  PGPERR_BADPARAH; 

B 

B *key  = NULL; 

B error  = pg pGe n e r a t e Key  I n t e r na I ( key s e t -> key DB,  Snewkey,  pkalg,  bits, 
BBBBBBBBB  expiration,  name,  name_len,  passphrase, 
BBBBBBBBB  NULL,  progress,  arg); 

B if  (!error  S&  key) 

B *key  = newkey ; 

B return  error; 

> 

/*  Generate  a subkey  pair.  The  passphrase  is  that  of  the  master 

key.  Note  that  the  subkey  is  protected  by  the  same  passphrase 

B as  its  master.  */ 


PGPError 

pgpGenerateSubKey  (PGPKey  *masterkey,  unsigned  bits, 

B B B B word16  expiration,  char  *passphrase,  char  *masterpass, 

B B B B int  (*progress)  (void  *arg,  int  phase),  void  *arg) 

{ 

long  pkalg=0; 

B pgpa(pgpaPGPKeyValid(masterkey)); 

if  (bits  < 512  II  bits  > 4096) 

B return  PGPERR_BADPARAH; 

B if  ( pg pKey 1 s D ea d (masterkey)) 

B return  PG P E R R_B A D P A R AM ; 
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a pg pGe t Key N umb e r (masterkey,  k PG PKey P r op A L g I d , SpkaLg); 


□ 

i f 

( p ka  L g ! 

!=  PGP_ 

PKALG_DSA) 

n 

return 

PGPERR 

_BADPARAH; 

a 

return 

pgpGenerateKeylnternal 

Q 

n 

n 

u 

n n 

n Q 

n 

n 

n 

a 

□ n 

n n 

n 

n 

a 

n 

n n 

n a 

} 


(masterkey->keyDB,  Sma s t e r key , 
PGP_PKALG_ELGAMAL,  bits, 
expiration,  NULL,  0,  passphrase, 
masterpass,  progress,  arg); 


/*  Disable  the  key.  If  key  is  not  stored  in  a writeable  KeySet,  copy  it 
n Locally.  Private  keys  cannot  be  disabled.  */ 


PGPError 

pg p D i s a b L e Key  (PGPKey 
{ 

n PGPKeyDBn  n 

n struct  RingSet 

n uni  on  Ri ngOb j ect 

a PGPErrorn  n n 


* k ey ) 

*keys  = NULL; 

*aLLset  = NULL,  *addset 
*keyobj; 

error  = PGPERR_OK; 


NULL; 


a pg pa ( pg pa PG PKey Va L i d ( key ) ) ; 

n if  ( pg p Ke y 1 s D e a d (key)) 
n n return  PGPERR_BADPARAH; 
a keys  =n  n key->keyDB; 

n keyobj  =n  key->key; 

n alLset  =n  pg p Key D BR i ng S e t (keys); 


n /*  Axiomatic  keys  cannot  be  disabled,  but  plain  old  private 
n keys  can  (because  they  may  belong  to  someone  else).  */ 

n if  ( r i ng Key Ax i oma t i c (alLset,  keyobj)) 
n n return  PGPERR_BADPARAM; 

o if  ( ! ( * key s -> i sHu t a b L e ) (keys)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 


n if  ((error  = pgpCopyKey  (alLset,  keyobj,  Kaddset))  !=  PGPERR_OK) 
n H return  error; 

n if  ( ! r i ng Key D i s a b L ed  (allset,  keyobj))  { 
n if  ( ! ( * key s->ob j I sMu t ab L e ) (keys,  keyobj))  { 

n n n if  ((error  = pg p Ad d Ob j e c t s (keys,  addset))  !=  PGPERR_0K) 

n n n n goto  cleanup ; 

n n > 

n r i ng Key D i s a b L e (allset,  keyobj); 

n n pg pKey DB C h a n g ed  (keys,  addset); 

n } 

cleanup: 
a if  (addset) 

n n ringSetDestroy  (addset); 

n return  error; 

} 


/*  Enable  the  key.  */ 

PGPError 

pgpEnableKey  (PGPKey  *key) 

{ 

[CCHK:0e88e4a2999b0059e52b88ba73999416fd776caf72a74868debbbddf3c7d3418e:: 


690 


Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpKeyMan.c 


□ 

a 

a 

D 

n 

□ 

D 

n 

n 

□ 


PGPKeyDBn  n 
struct  RingSet 
union  RingObject 
PGPErrorn  n 


* k e y s ; 

*aLLset,  *addset; 

* keyob  j ; 

error  = PGPERR.OK; 


pgpaCpgpaPGPKeyVa  LidC  key) ); 

if  ( pgpKey 1 s Dead  (key)) 

a return  PG P E R R_B A D P AR AH ; 

keys  =n  n key->keyDB; 

keyob j =n  key->key; 

alLset  =n  pg p Key DBR i ng S e t (keys); 


a if  ( ! ( * key s-> i sHu t ab L e ) (keys)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 


n if  ( r i ngKey D i sa b L ed  (alLset,  keyobj))  { 

n n if  ((error  = pgpCopyKey  (aLLset,  keyobj,  Saddset))  !=  PGPERR_0K) 
n n n return  error; 

n n r i n g Ke y E n a b L e (aLLset,  keyobj); 

a n pgpKeyDBChanged  (keys,  addset); 

n n ringSetDestroy  (addset); 

n } 

n return  PGPERR_OK; 

> 


/*  Change  the  passphrase.  If  the  new  passphrase  is  the  same  as  the 
n oLd  passphrase,  we  still  unlock  the  key  as  the  user  may  be  trying  to 
n set  the  key's  isAxiomatic  flag.  */ 


static  PGPError 

pgpChangePassphraseInterna  I (PGPKeyDB  *keyDB,  RingSet  *ringset. 


unsigned  longn  n 
struct  RingSetn  n 
union  RingObjectn 
struct  PgpKeySpecn 
PGPErrorn  n n 

struct  PgpSecKeyn 
PgpVersionn  n n 

intnn  n □ n 

Booleannn  n n 


n RingObject  *keyobj,  RingObject  *ma s t e r key ob j , 
n char  *oldphrase,  char  *newphrase) 

validity; 

*addset  = NULL; 

*newsecobj,  *oldsecobj  = NULL; 

*keyspec  = NULL; 

error  = PGPERR_0K; 

*seckey  = NULL; 
version; 

newphraselen  = 0; 
locked  = 0; 


n if  (oldphrase  SS  strlen  (oldphrase)  ==  0) 
n n oldphrase  = NULL; 

n if  (newphrase  &&  (newphraselen  = strlen  (newphrase)) 
n n newphrase  = NULL; 


0) 


n if  ( ! ( * key D B-> i sHu t a b I e ) (keyDB)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n if  ( ! r i ng Key  I s S e c (ringset,  keyobj)) 
n return  PGPERR_NO_SECKEY; 

n /*  Find  old  secret  object  */ 
n { 
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n H Ringiterator  *riter; 

n n int  Level; 

a n niter  = r i ng I t e r C n ea t e (ringset); 

n n if  (iriten) 

H n n return  PGPERR_NOMEH; 

a n Level  = r i ng I t e r S e e kTo  (riter,  keyobj); 

n n pgpAssert  (LeveL>0); 

n n while  ( r i ng I t e r N e x t 0 b j e c t (riter,  LeveL+1)  ==  LeveL+1)  { 
n n n oLdsecobj  = ringIterCurrentObject  (riter,  LeveL+1); 

n n n if  ( r i ng Ob j e c t Ty p e ( o L d s e c ob j ) ==  R I N GT Y P E_ S E C ) 
n n n n break; 

n n > 

n n r i n g I t e r D e s t r oy  (riter); 
n n pgpAssert  (oLdsecobj); 

n > 


□ 

n 

Q 

n 

a 

n 

n 

n 

Q 

D 

□ 

□ 

a 

n 

Q 

n 

n 

Q 

n 

□ 

□ 

n 

a 

n 

a 

□ 


/*  Does  the  caller  know  the  current  passphrase?  */ 
seckey  = r i n g S e c S e c Key  (ringset,  oLdsecobj,  0); 
if  (Iseckey) 

return  ringSetError(ringset)->error; 
if  ( pg p S e c Key  I s L o c ke d (seckey))  { 
n Locked  = 1; 

if  (loldphrase)  ( 

n error  = PG P E R R_ KE Y DB_B A D P A S S PH R A S E ; 

n n goto  cleanup; 

n } 

n error  = pg p S e c Key Un L o c k (seckey,  pgpEnv,  oLdphrase, 
n n n n n n n strlen  (oLdphrase)); 

a if  (error  !=  1)  t 
a if(error==0) 

n n error  = PG P E R R_KE Y DB_B A D P A S S PH R A S E ; 

a n goto  cleanup; 

n } 

} 

/*  ALL  done  if  passphrase  has  not  changed  */ 
if  ((.'oLdphrase  inewphrase)  || 
n (oLdphrase  SS  Locked  &S  newphrase  S& 
n n n strcmp  (oLdphrase,  newphrase)  ==  0))  { 
error  = PGPERR_0K; 
n goto  cleanup; 

> 


a error  = pgpCopyKey  (ringset,  keyobj,  Saddset); 
n if  (error) 
n n goto  cleanup; 


error  = pgp S e c Key C h a ng e Lo c k (seckey,  pgpEnv,  pgpRng, 
nnnnnnnn  newphrase,  ne wp h r a s e L e n ) ; 
n if  (error) 
n goto  cleanup; 


a keyspec  = pg pKey S pe c C r e a t e (pgpEnv); 
a i f ( ! keyspec ) { 
n error  = PGPERR_NOHEM; 

n n goto  cleanup; 
a } 
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n /*  We  need  to  make  this  keyspec  just  Like  the  existing  one  */ 
n pg pKey S pe c S e t C r e a t i on  (keyspec,  r i ng Key C r ea t i on  (ringset,  keyobj)); 

n /*  Fix  "version  bug",  don't  change  version  from  earlier  one.  */ 
n version  = r i n g S e c Ve r s i on  (ringset,  keyobj); 
n pgpKeySpecSetVersion  (keyspec,  version); 

n validity  = r i ng Key E xp i r a t i on  (ringset,  keyobj); 
n if  (validity  !=  0)  ( 

n n validity  -=  r i ng Key C r e a t i on  (ringset,  keyobj); 

n n n validity  /=  3600*24; 

n } 

a pgpKeySpecSetValidity  (keyspec,  (word16)  validity); 

n newsecobj  = r i n g C r e a t e S e c (addset,  ma s t e r ke y ob j , seckey,  keyspec, 
n n n n n n n s e c key->p kA L g ) ; 

n if  (!newsecobj)  { 

n error  = r i n g S e t E r r o r ( a dd s e t ) ->e r r o r ; 

n goto  cleanup; 

n } 

n pg pKey S pe c De s t r oy  (keyspec);  keyspec  = NULL; 
n pgpSecKeyDestroy  (seckey);  seckey  = NULL; 

n error  = pgpAddObjects  (keyDB,  addset)  ; 

n /*  This  step  is  necessary  for  the  RingFile  to  close  cleanly  */ 

n if  (terror)  f 
n n / * 

n n * pg p Remo ve Ob j e c t not  appropriate  since  this  is  not  an  object 

n n * type  that  it  knows  how  to  deal  with, 

n n * / 

n n ( key DB-> r emo V e ) (keyDB,  oLdsecobj); 

n } 

cleanup: 
n if  (seckey) 

n n pgpSecKeyDestroy  (seckey); 

n if  (addset) 

n n r i ng S e t De s t r oy  (addset); 

n if  (keyspec) 

n n pg pKey S p e c D e s t r oy  (keyspec); 

n return  error; 

} 


PGPError 

pg p C h a ng e Pa s s ph r a s e (PGPKey  *key,  char  *oLdphrase,  char  *newphrase) 

{ 

n RingSetnn  n *ringset; 

n PGPErrorn  n error; 

n pg pa ( pg pa PG PKe y Va L i d ( key  ) ) ; 

n ringset  = pg pKey DBR i ng S e t ( key->key DB  ) ; 

n error  = pg pC h a n g e Pa s s p h r a s e I n t e r n a L (key->keyDB,  ringset,  key->key,  NULL, 
naaaanaann  oLdphrase,  newphrase); 
n if  (terror) 

n n ri ngKeySet Axi omat i c (ringset,  key->key); 
n return  error; 
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> 


PG  PE  r ro  r 

pg p C ha ngeSubKey Pa s s ph ra s e (PGPSubKey  *subkey, 

n n n n n n char  *oLdphrase,  char  *newphrase) 

{ 

n RingSetnn  n *ringset; 

a 

n pgpa(pgpaPGPSubKeyVaLid(subkey)); 
n CHECKREHOVEDCsubkey ) ; 

n ringset  = pgpKeyDBRingSet  (subkey->key->keyDB); 

n return  pg p C h a ng e Pa s s p h r a s e I n t e r n a L ( s u b key-> key-> ke y DB,  ringset, 
nnnnnnnnn  s u b key-> s u bKey , 

nnnnnnnnnn  s u b key-> key-> key , 

n n n n n n n n n n oLdphrase,newphrase); 

> 


/*  Remove  a subkey  */ 

PGPError 

pgpRemoveSubKey  (PGPSubKey  *subkey) 

{ 

n PGPKeyDBn  n n *keys; 

n struct  RingSet  *aLLset; 

a union  RingObject  *subkeyobj; 

n pgpa(pgpaPGPSubKeyVaLidCsubkey)); 
n CHECKREHOVEDCsubkey); 
n keys  = s u b key-> key-> key D B ; 
n if  ( ! ( * ke y s-> i s Hu t a b L e ) (keys)) 
n n return  PG P E R R_KE Y D B_KE Y D BR E A D ON L Y ; 

□ 

n allset  = pgpKeyDBRingSet  (keys); 
n subkeyobj  = s u b key-> s u bKey ; 

n if  ( ! ( * key s->ob j I s Hu t a b L e ) (keys,  subkeyobj)) 

n n return  PG P E R R_KE Y DB_OB J E CTR E A DON L Y ; 

n return  pg pRemo v e Ob j e c t (keys,  subkeyobj); 

} 


PGPError 

pg p R e VO ke S u bKey  (PGPSubKey  *subkey,  char  *passphrase) 
{ 


n 

□ 

n 

n 

n 

n 

n 

n 

□ 


PGPKeyDBn  n n 

struct  RingSet 
union  RingObject 
PGPErrorn  n n 


* key s ; 

*aLLset,  *addset; 
♦subkeyobj,  *keyobj; 
error  = PGPERR_0K; 


pgpaCpgpaPGPSubKeyVa  Li d(subkey) ) ; 

CHECKREHOVEDCsubkey); 

keys  =n  n subkey->key->keyDB; 

subkeyobj  =ns u b key-> s u b Key ; 

keyobj  = subkey->key->key; 


a if  ( pgpS ubKey I s Dea d (subkey)) 
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n return  PGPERR_OK; 

n if  ( ! ( *key s-> i sHu t ab L e ) (keys)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n 

n aLLset  = pg p Key DBR i ng S e t (keys); 
n if  ( ! ri ngKeylsSec  (aLLset,  keyobj)) 

n n return  PG P E R R_N 0_S E C KE Y ; n n n /*  not  our  key  */ 

n error  = pgpCopyKey  (aLLset,  keyobj,  Saddset); 
n if  (error) 

n n return  error; 

n /*  Note  speciaL  subkey  revocation  sigtype  */ 

n error  = pgpC e r t i f yOb j e c t (subkeyobj,  addset,  keyobj,  aLLset, 

n n n n n n PGP_SIGTYPE_KEY_SUBKEY_REVOKE,  passphrase,  FALSE); 

n if  (error)  { 

n n r i ng S e t D e s t r oy  (addset); 
a n return  error; 

n } 

o 

n /*  Update  the  KeyDB  */ 

n error  = pgpAddObjects  (keys,  addset); 
n r i n g S e t De s t r oy  (addset); 

n return  error; 

> 


/*  Remove  a User  ID.  If  the  KeySet  is  read-onLy,  or  the  UserlD  object 
n itseLf  is  read-onLy,  we  return  an  error.  */ 


PGPError 

pg p R emo V e U s e r I D (PGPUserlD  *userid) 
{ 


D 

PGPKeyDBa  a a 

*keys; 

B 

PGPUserlD 

*u i d t mp; 

B 

i n t 

uidcount 

B 

struct  RingSet 

*aLLset; 

B 

union  RingObject 

*nameobj ; 

0; 


n pgpa(pgpaPGPUserID\/aLid(userid)); 
n CHECKREHOVED(userid); 
n /*  Cannot  remove  onLy  UserlD  */ 

a for  (uidtmp  = (PGPUserlD  *)  u s e r i d-> key->u s e r I D s . n e x t ; 
n a uidtmp  !=  (PGPUserlD  *)  &userid->key->userIDs; 

a a uidtmp  = u i d t mp->n ex t ) ( 

a a if  ( ! u i d t mp-> r emo V ed ) 

a a a uidcount++; 

a > 

a if  (uidcount  ==  1) 

a a return  PG P E R R_B AD P AR AH ; 

a keys  = u s e r i d-> key-> key DB; 

a if  ( ! ( *keys->i sHutab L e ) (keys)) 

a a return  PGPERR_KEYDB_KEYDBREADONLY; 

a 

a aLLset  = pg p Key D BR i n g S e t (keys); 
a nameobj  = u s e r i d->u s e r I D ; 

a if  ( ! ( * key s ->ob j I s Hu t a b L e ) (keys,  nameobj)) 
a a return  PG P E R R_KEY DB_0BJ E CT READONLY; 
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n return  pg p Remo v e 0 b j e c t (keys,  nameobj); 
} 


/* 

*n  Add  a new  User  ID  to  a key.  User  IDs  cannot  be  added  to  other  than  the 
*n  user's  own  keys.  The  new  User  ID  is  added  to  the  end  of  the  list.  To 
*n  make  it  the  primary  User  ID,  call  p g p S e t P r i ma r y U s e r I D ( ) below. 

*/ 


PGPError 

pgpAddUserlD  (PGPKey  *key,  char  *name,  int  name_len,  char  *passphrase) 
{ 


n 

PGPKeyDBn  n 

*keys ; 

□ 

PGPUserlD 

*userid; 

Q 

struct  RingSet 

*allset,  *addset; 

s 

union  RingObject 

*keyobj,  *nameobj; 

n 

PGPErrorn  a 

error; 

n 

pgpa(pgpaPGPKeyVal 

i d ( k e y ) ) ; 

n 

if  ( pg p Key  I s Dea d (key)) 

s 

n return  PGPERR_ 

BADPARAH; 

n 

□ 

keys  = key->keyDB; 

if  ( ! ( * key s->i sMu t a b 1 e ) (keys)) 

n 

n return  PGPERR_ 

KEYDB_KEYDBREADONLY 

a 

n allset  = pgpKeyDBRingSet  (keys); 

n keyobj  = key->key; 


n /*  Can  only  add  User  ID  to  our  own  keys  */ 
n if  ( ! ri ngKeylsSec  (allset,  keyobj)) 
n n return  PG P E R R_N 0_ S E C KE Y ; 


n error  = pgpCopyKey  (allset,  keyobj,  Saddset); 
n if  (error) 

n n return  error; 

a nameobj  = r i ng C r e a t e Name  (addset,  keyobj,  name,  name_len); 
n if  (!nameobj)  { 

n n error  = r i ng S e t E r r o r ( a d d s e t ) ->e r r o r ; 
n n r i ng S e t D e s t r oy  (addset); 
n n return  error; 

n > 


n 

n 

n 

n 

□ 

n 

Q 

Q 

Q 

n 

n 

□ 


/*  r i ng C r e a t eN a me  will  return  a duplicate  nameobj  if 
n the  name  already  exists  for  this  key.  Check  the 
n list  of  PGPUserlD  objects  to  see  if  the  nameobj 
n is  already  referenced.  */ 

for  (userid  = (PGPUserlD  *)  key->u s e r I D s . n ex t ; 
n userid  !=  (PGPUserlD  *)  & key->u s e r I D s ; 
n userid  = u s e r i d->n e x t ) { 

if  (!  u s e r i d-> removed  &&  u s e r i d->u s e r I D ==  nameobj)  { 
n r i n g S e t D e s t r oy  (addset); 

n n return  PGPERR_KEYDB_DUPLICATE_USERID; 
n } 

} 


n /*  Must  self-certify  here  */ 
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a error  = pg pC e r t i f y Ob j e c t (nameobj,  addset,  keyobj,  alLset, 
n n n n n n n PGP_SIGTYPE_KEY_GENERIC,  passphrase,  TRUE); 

n if  (error)  { 

a a ringSetDestroy  (addset); 

n n return  error; 

n } 

n error  = pg p Ad d Ob j e c t s (keys,  addset); 
n ringSetDestroy  (addset); 
n return  error; 

} 


c 


/*n  Hake  the  given  User  ID  the  primary  User  ID  of  the  key  */ 
PGPError 

pg p S e t P r i ma r y U s e r I D (PGPUserlD  *userid) 

{ 

n PGPKeyDBn  n *keys; 

n PGPKeyn  n n *key; 

n struct  RingSet  *aLLset,  *addset; 

n PGPErrorn  n error; 

n pgpa(pgpaPGPUserID\/aLid(userid)); 
a CHECKREHOVED(userid); 
n key  = userid->key; 
n if  (pgpKeylsDead  (key)) 
n return  PG P E R R_B A D P AR AH ; 

Q 

n keys  = key->keyDB; 
n if  ( ! ( * key s-> i sHu t a b L e ) (keys)) 
a n return  PG P E R R_KE Y DB_KE Y D BR E A DON L Y ; 
n 

o aLLset  = pgpKeyDBRingSet  (keys); 
n 

n error  = pgpCopyKey  (aLlset,  key->key,  Saddset); 
n if  (error) 

n n return  error; 

n 

n /*  Raise  the  name  to  the  top  */ 

ringRaiseName  (addset,  userid->userID); 

/*  Rearrange  the  c i r c u L a r L y- L i n ke d List  of  userids  */ 
userid ->prev->next  = userid->next; 
useri d->next->prev  = u s e r i d->p r e v ; 
userid->prev  = (PGPUserlD  * ) & key->u s e r I D s ; 
userid->next  = (PGPUserlD  *) key->userIDs . next; 
u s e r i d->nex t ->p r e V = userid; 
u s e r i d->p r e v->n ex t = userid; 
n 

error  = pg pKey DB C ha ng ed ( key s , addset); 
n ringSetDestroy  (addset); 
n return  error; 

> 


/*  Certify  a User  ID.  Do  not  allow  duplicate  certification.  If  UserlD 
is  already  certified,  but  revoked,  the  old  cert  can 
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a be  removed  and  the  UserlD  then  recertified.  */ 


PGPError 

pg p C e r t i f y U s e r I D (PGPUserlD  *userid,  PGPKey  * c e r t i f y i ng _ key , char  *passphrase) 
{ 

n PGPKeyDBn  n *keys; 

n struct  RingSet  *ringset,  *addset,  *signerset; 

n union  RingObject  *keyobj,  *nameobj,  *sigobj; 

n struct  Ringiterator  *iter; 

n PGPErrorn  n n error  = PGPERR_OK; 

n pgpa(pgpaPGPUserIDVaLid(userid)); 
n CHECKREMOVEDCuserid); 

n if  ( pg p Ke y I s D ea d ( u s e r i d-> key  ) ) 

D return  PG PE R R_B A D P A R AM ; 

n if  ( c e r t i f y i n g _ key ) 

n n pg pa ( pgpa PGPKey Va L i d ( c e r t i f yi ng_key )) ; 

n if  ( u s e r i d-> r emo V e d ) 
n n return  PGPERR_BADPARAH; 

n keys  = u s e r i d-> ke y-> key D B ; 
n if  ( ! ( * key s -> i sMu t a b I e ) (keys)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n ringset  = pg pKey DBR i ng S e t (keys); 
n nameobj  = u s e r i d->u s e r I D ; 


n /*  If  certifying  key  was  not  passed,  get  the  default  */ 
a if  ( ! ce rt i f y i ng_key ) { 

a n certifying_key  = pgpGetDefauLtPrivateKeylnternal  (keys); 

n n if  ( ! ce rt i f y i ng_key ) 

n a n return  PGPERR_NO_SECKEY; 

n } 

n if  ( pg p Key  I s D e a d ( c e r t i f y i n g _ k ey ) ) { 
a a return  PG P E R R_KE Y D B_C E RT I F Y I NG KE Y_ D E A D ; 
n > 

n /*  Get  RingSet  for  certifying  key  */ 

n if  ( c e r t i f y i ng_ key-> key D B !=  keys) 

D n signerset  = pg p Key DB R i n g S e t ( c e r t i f y i ng_ key-> key DB ) ; 
n else 

n n signerset  = ringset; 

a keyobj  = c e r t i f y i n g_ key-> key ; 

a /*  Check  for  duplicate  certificate.  There  may  be  some 

a a old  revocation  certs  still  laying  around,  which  we 

a a should  ignore.  */ 


a iter  = r i ng I t e r C r e a t e (ringset); 
a if  (liter) 

a return  r i ng S e t E r r o r ( r i n g s e t ) ->e r r o r ; 

a r i ng I t e r S ee kTo  (iter,  nameobj); 

a while  ((error  = r i ng I t e r N e x t Ob j e c t (iter,  3))  > 0)  ( 
a sigobj  = r i n g I t e r C u r r e n t Ob j e c t (iter,  3); 

a a if  ( r i ng S i g Ma ke r (ringset,  sigobj,  signerset)  ==  keyobj  S8 

a a a ringSigType  (ringset,  sigobj)  !=  PG P_S I GT Y P E_KE Y_U I D_R E VO KE  ) { 

a a error  = PGPERR_KEYDB_DUPLICATE_CERT; 
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n H n break; 

n n > 

n > 

n ringlterDestroy  (iter); 
n if  (error) 
a return  error; 

n error  = pgpCopyKey  (ringset,  nameobj,  Saddset); 
n if  (error) 
n n return  error; 

n error  = pg p C e r t i f y Ob j e c t (nameobj,  addset,  keyobj,  signerset, 

n n n n n n n PGP_SIGTYPE_KEY_GENERIC,  passphrase,  FALSE); 

n if  (error)  ( 

n n r i ng S e t Des t roy  (addset); 

n n return  error; 

n } 

n error  = pg p Add  Ob j e c t s (keys,  addset); 
a ri ngSetDest roy  (addset); 
n return  error; 

> 

/*  Given  a cert,  return  the  certifying  key  object.  The  signing  key  does  not 

a have  to  be  in  the  same  set  as  <cert>,  and  may  be  in  the  <aLLkeys>  set.  */ 

PGPError 

pgpGe t Ce r t i f i e r (PGPCert  *cert,  PGPKeySet  *aLLkeys,  PGPKey  **certkey) 
charn  keyIDC333; 

size_tn  keyIDLength  = sizeof(keylD); 

pgpa(pgpaPGPCertVaLid(cert)); 

CHECKREHOVED ( cert ) ; 

pg pGe t C e r t S t r i ng ( ce r t , kPG PC e r t P r opKey I D , keylD,  8 key  I D Le ng t h ) ; 

*certkey  = pgpGetKeyByKeyID(aLLkeys,  (unsigned  char  *)  keylD,  keyIDLength); 
return  PGPERR_0K; 


/*  Revoke  a certification.  If  aLLkeys  ==  NULL,  the  certifying  key 
n must  be  in  the  same  keyDB  as  the  certificate.  */ 


PGPError 

pgpRevokeCert  (PGPCert  *cert,  PGPKeySet  *aLLkeys,  char  *passphrase) 
{ 


n 

PGPKeyDBn  n n 

* key s ; 

n 

PGPKeyn  n n n 

*certkey 

/ 

n 

struct  RingSetn  n 

*aLLset, 

*addset. 

n 

union  RingObjectn 

*sigobj. 

*nameobj; 

a 

Boo  Lea  nnn  n n 

revoked 

/ 

D 

PGPErrorn  n n 

error  = 

PGPERR_0K 

n 

pgpa(pgpaPGPCertVaL 

id(cert)) 

A 

n 

CHECKREHOVED(cert); 

□ 

keys  = c e r t ->u p . u s e r I D-> key- 

> k e y D B ; 

n 

sigobj  = cert->cert 

r 

s 

if  ( ! ( * key s -> i s Mu t a b L e ) (keys)) 

n 

n return  PGPERR_KEYDB_KEYDBREADONLY; 

gnerset; 
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n error  = pg pG e t C e r t Boo L e a n (cert,  k PG P C e r t P r op  I s R e vo ked , Srevoked); 
n if  (error) 

n n return  error; 

n i f ( revoked) 

n n return  PGPERR_0K;  /*  already  revoked  */ 

n /*  Get  certifying  key  and  its  RingSet  */ 

n error  = pgpGet Ce rt i f i e r (cert,  alLkeys,  Scertkey); 
n if  (error) 

n a return  error; 

n if  (!certkey) 

n n return  PG P E R R_N0_ S E C KE Y; 

o if  ( pg pKey I s Dea d (certkey)) 

n n return  PG P E RR_KE Y D B_C E RT I F Y I NG K E Y_ D E A D ; 
a signerset  = pgpKeyDBRingSet  (certkey->keyDB); 

n /*  Get  signature  RingSet  and  its  name  object  */ 
a alLset  = pgpKeyDBRingSet  ( c e r t ->u p . u s e r I D-> key-> key D B ) ; 
n nameobj  = cert->up.userID->userID; 

n error  = pgpCopyKey  (alLset,  nameobj,  Saddset); 

n if  (error) 

n n return  error; 

n error  = pg p C e r t i f y Ob j e c t (nameobj,  addset,  c e r t key-> key , signerset, 
n a a a n n H PGP_SIGTYPE_KEY_UID_REVOKE,  passphrase,  FALSE); 

n if  (error)  { 

n n r i n g S e t D e s t r oy  (addset); 

n n return  error; 

n } 

n error  = pg p Ad dOb j e c t s (keys,  addset); 
n r i ng S e t D e s t r oy  (addset); 

n return  error; 

} 


/*  Remove  a certification.  If  the  certification  was  revoked,  the 
revocation  signature  remains.  This  ensures  that  the  same 
n signature  on  someone  else's  keyring  is  properly  revoked 
n if  this  key  is  exported.  A future  certification  will  have 

n a later  creation  timestamp  than  the  revocation  and  will  therefore 

n not  be  affected.  */ 


PGPError 

pg p R emo V e C e r t (PGPCert  *cert) 

{ 

n PGPKeyDBn  n n *keys; 

n union  RingObjectn  *sigobj; 

a pg  pa  ( pg  pa  PG  P C e r t Va  I i d ( c e r t ) ) ; 

n CHECKREHOVED(cert); 

n keys  = c e r t ->u p . u s e r I D-> key-> key D B ; 
n sigobj  = cert->cert; 

n if  ( ! ( * key s -> i s Mu t a b I e ) (keys)) 
n n return  PGPERR_KEYDB_KEYDBREADONLY; 

n if  ( ! ( * key s ->o b j I s M u t a b I e ) (keys,  sigobj)) 
n n return  PGPERR_KEYDB_OBJECTREADONLY; 

n return  pg p R emo v e Ob j e c t (keys,  sigobj); 
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} 


/* 

□ 

□ 


Given  a key,  return  the  nth  (0  based)  message  recovery  key,  if  one  exists. 
Also  return  the  class  of  the  MRK,  and  the  number  of  MRK's  for  the 
base  key.  Any  of  the  return  pointers  may  be  NULL.  */ 


PGPError 

pg pG e t H e s sa g e Re c o ve r y Key  (PGPKey  *basekey,  PGPKeySet  *aLLkeys,  unsigned  nth, 
PGPKey  **mrkey,  byte  *mrcLass,  unsigned  *numbermrks) 

{ 


n 

struct  RingSeta  a 

*ringset;a 

n 

/* 

Aurora 

ringset  to  Look  in  */ 

Q 

union  RingObject 

*keyobj ;a 

n 

/* 

Aurora 

base  key  */ 

Q 

union  RingObject 

*rkey;B  a 

n 

/* 

Aurora 

message  recovery  key  */ 

n 

unsigneda 

n n 

nmrks; aa 

u 

/* 

Numbe  r 

MRK's  available  */ 

n 

bytea  n 

□ □ 

tcLass;a 

n 

/* 

Class 

code  from  MRK  */ 

n 

PGPErrora 

n n 

error;aB 

D 

/* 

Error 

return  from  Aurora  */ 

u 

bytea  n 

□ □ 

keyIDC8D;B 

n 

/* 

key  i d 

of  MRK  */ 

n 

a 

n 

n 

D 

n 

□ 

□ 

n 

n 

n 

a 

n 

□ 

□ 

□ 

□ 

a 

D 

n 

□ 

n 

n 

□ 

D 

D 

n 

} 


pgpaCpgpaPGPKeyValidCbasekey)); 

ringset  = pg p Key D B R i ng S e t ( ba s e key-> key D B ) ; 

keyobj  = basekey->key; 

rkey  = ringKeyRecoveryKey  (keyobj,  ringset,  nth,  Stclass,  Snmrks,  Serror); 
if  (!rkey)  ( 

a /*  No  key  found,  or  error  */ 
n i f (mrkey ) 
n n *mrkey  = NULL; 

n if  (mrcLass) 
n n *nrcLass=0; 

n i f ( numbe  rmr  ks ) 
n n *numbermrks  = 0; 

a return  error; 

> 

/*  Success  */ 
if  ( mrkey)  { 

n /*  Can  only  Look  up  master  keys  at  this  Level  */ 
n if  ( ri ngKeylsSubkeyC ri ngset,  rkey)) 
a a rkey  = ringKeyHasterkey  (ringset,  rkey); 

a ringKeyIDS  (ringset,  rkey,  NULL,  keylD); 

a *mrkey  = pg pG e t Key By Key  I D (aLlkeys,  keylD,  s i z eo f ( key  I D ) ) ; 

> 

if  (mrcLass) 
a *mrcLass  = tcLass; 
if  (numbermrks) 
a *numbermrks  = nmrks; 
return  PGPERR_0K; 


/*  Trust-related  functions  */ 


PGPError 

pgpSetUserlDConf  (PGPUserlD  *userid,  unsigned  Long  confidence) 
{ 


□ 

a 

n 

n 


PGPKeyDBa  n a 

struct  RingSeta  n 
union  Ri ngOb j ect 
PGPErrora  a n 


* k e y s ; 

*aLLset  = NULL,  *addset 
*nameob j ; 

error  = PGPERR_0K; 


NULL; 
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n pgpa(pgpaPGPUserIDValid(userid)); 

n pgpAssert  (pgpTrustModeL  (pgpRingPooL)  > PGPTRUST0); 
a CHECKREMOVED (userid  ); 
n if  ( pg p Key  1 s D ea d ( u s e r i d-> key ) ) 
a n return  PG P E R R_B A D P A R AH ; 

n keys  = u s e r i d-> key-> key DB ; 
n aLLset  = pg pKey DBR i ng S e t (keys); 

B nameobj  = u s e r i d->u s e r I D ; 

n if  ( r i n g Key  I s S e c (aLLset,  u s e r i d-> key-> key  ) ) 
n n return  PG P E R R_B A D P A R AM ; 

n if  ( ! ( * ke y s -> i s M u t a b L e ) (keys)) 
n B return  PG P E R R_KE Y D B_KE Y D B R E A D ON L Y ; 

n error  = pgpCopyKey  (aLLset,  nameobj,  Saddset); 

B if  (error) 
n n return  error; 

n if  ( ! ( * key s ->o b j I s Mu t a b L e ) (keys,  nameobj))  { 
n n error  = pgpAddObjects  (keys,  addset); 

n n if  (error) 

Baa  goto  c Leanup; 
n } 

n r i n g N a me S e t C on f i d e n c e (aLLset,  nameobj,  (unsigned  short)  confidence); 

n pgpKeyDBChanged  (keys,  addset); 
c L e a n u p : 

B i f (addset ) 

B a r i n g S e t D e s t r oy  (addset); 

B return  error; 

} 

/*  Set  the  trust  on  a key.  Cannot  be  used  to  set  undefined  or 
n axiomatic  trust.  The  key  must  be  vaLid  to  assign  trust.  */ 

PGPError 

pg p S e t KeyT r u s t (PGPKey  *key,  unsigned  char  trust) 

{ 

n PGPKeyDBn  n n *keys; 

n struct  RingSetn  n *aLLset,  *addset  = NULL; 

n union  RingObjectn  *keyobj; 

n PGPErrorn  n n error  = PGPERR_0K; 

#if  ONLY_TRUST_VALID_KEYS 
n Long  vaLidity; 

#end  i f 

n pg pa ( pg pa PG PKey Va L i d ( key ) ) ; 

n pgpAssert  (pgpTrustModeL  ( pg p R i ng Poo L ) ==  PGPTRUST0); 

B keys  = key->keyDB; 

B if  ( ! ( * key s-> i sMu t a b L e ) (keys)) 
n n return  PG P E R R_KE Y DB_KE Y D B R E A D ON L Y ; 

n aLLset  = pg pKey DBR i n g S e t (keys); 

B keyobj  = key->key; 

n if  (trust  <=  PG P_KE YTRU ST_U N D E F I N E D |1  trust  > PG P_KE YT R U S T_ C OH P L ET E || 
n n pgpKeylsDead  (key)  ||  r i n g Key Ax i oma t i c (aLLset,  keyobj)) 
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n return  PGPERR_BADPARAM; 

#if  ONLY_TRUST_VALID_KEYS 

a /*  Should  not  set  trust  on  key  that  is  not  completely  valid 

n n (who  is  it  we  are  trusting?)  */ 

n pgpGetKeyNumber  (key,  kPGPKeyPropValidity,  &validity); 
n if  (validity  !=  PG P_ V A LI D I T Y_C OMP L ET E ) 
n return  PG P E R R_B A D P AR AM ; 

Send  i f 

n error  = pgpCopyKey  (allset,  keyobj,  Saddset); 
a if  (error) 
a a return  error; 

a if  ( ! ( * key s->ob j I s M u t a b I e ) (keys,  keyobj))  { 
a a error  = pgpAddObjects  (keys,  addset); 

a a if  (error) 

a a n goto  cleanup; 

a > 

a ringKeySetTrust  (allset,  keyobj,  trust); 

a pgpKeyDBChanged  (keys,  addset); 

cleanup: 
a if  (addset) 

a a r i ng S e t D e s t r oy  (addset); 
a return  error; 

> 

/*  Set  a secret  key  as  the  axiomatic  key.  If  c h e c k Pa s s ph r a s e ==  TRUE, 
a the  user  must  prove  knowledge  of  the  passphrase  in  order  to  do 
a this.  */ 

PGPError 

pgpS e t Key Ax i oma t i c (PGPKey  *key.  Boolean  c h e c k Pa s s p h r a s e , char  *passphrase) 


Boolean 

secret,  axiomatic; 

D 

struct  RingSet 

*allset,  *addset  = NULL; 

Q 

union  RingObject 

*keyobj; 

n 

struct  PgpSecKey 

*seckey; 

n 

PGPKeyDB 

* key s ; 

n 

PGPError 

error  = PGPERR_0K; 

n 

pgpa(pgpaPGPKeyValid(key)); 

D 

pgpGetKeyBoolean  (key. 

kPGPKeyPropIsSecret,  Rsecret); 

□ 

if  (Isecret) 

n 

return  PG P E R R_B A D P A R AM ; 

n 

pgpGetKeyBoolean  (key. 

kPGPKeyPropIsAxiomatic,  Saxiomatic); 

n 

if  (axiomatic) 

n 

return  PGPERR_0K; 

n 

keys  = key->keyDB; 

n 

allset  = pgpKeyDBRingSet  (keys); 

B 

keyobj  = key->key; 

B 

if  ( c h e c kPa s s p h r a s e ) { 

B 

/*  Get  the  secret 

key  and  attempt  to  unlock  it  */ 

B 

seckey  = r i n g S e c S e c Key  (allset,  keyobj,  PG P_ PKU S E_ S I G N ) 

B 

a i f ( ! seckey) 
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n H 
a n 
n n 
n n 
a □ 
n □ 
a n 
n n 
□ □ 
Q 13 

Q n 

□ Q 
D □ 
t3  n 
Q C3 

a } 


return  ringSetError(aLLset)->error; 
if  ( pg p Se cKey 1 s L o c ked  (seckey))  { 
if  (ipassphrase)  { 
n pgpSecKeyDestroy  (seckey); 

n return  PGPERR_KEYDB_BAOPASSPHRASE; 

n > 

n error  = pg p S e c Ke y U n L o c k (seckey,  pgpEnv,  passphrase, 
n n n n n n n strLen  (passphrase)); 
a pgpSecKeyDestroy  (seckey); 
n if  (error  !=  1)  { 
n n if  (error  ==0) 

n n error  = PGPERR_KEYDB_BADPASSPHRASE; 

n H return  error; 

n } 

} 


n /*  Make  sure  it’s  enabled  first  before  setting  axiomatic  */ 
n if  ((error  = pgpEnabLeKey  (key))  !=  PGPERR_0K) 
n return  error; 

n if  ((error  = pgpCopyKey  (alLset,  keyobj,  Saddset))  !=  PGPERR_0K) 
n a return  error; 

a if  ( ! ( *key s->ob j I sMu t a b L e ) (keys,  keyobj))  ( 

naif  ((error  = pg p Add  0 b j e c t s (keys,  addset))  !=  PGPERR_0K) 
a a a goto  cleanup; 

n } 

a ringKeySetAxiomatic  (allset,  keyobj); 
n pg p Key D BC h a n g e d (keys,  addset); 
cleanup: 
n if  (addset) 

a ringSetDestroy  (addset); 

n return  error; 

} 


PGPError 

pgpUn se t KeyAx i oma t i c (PGPKey 
{ 

Boolean 

struct  RingSet 
a union  RingObject 
n PGPKeyDB 
a PGPError 


* key ) 

axiomatic; 

*allset,  *addset  = NULL; 
*keyobj  ; 

* key  s ; 

error  = PGPERR_0K; 


a pg pa ( pg pa PG PKey Va I i d ( key ) ) ; 

a pgpGetKeyBoolean  (key,  kPGPKeyPropIsAxiomatic,  Saxiomatic); 
a if  ([axiomatic) 
a return  PGPERR_BADPARAM; 

a keys  = key->keyDB; 

a allset  = pg pKe y DBR i ng S e t (keys); 
a keyobj  = key->key; 

a error  = pgpCopyKey  (allset,  keyobj,  Saddset) ; 
a if  (error) 
a a return  error; 

a if  ( ! (*keys->ob j IsHutab  le)  (keys,  keyobj))  ( 
a a error  = pgpAddObjects  (keys,  addset); 
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a a if  (error) 

a n n goto  cleanup; 

n } 

n r i ng Key R e s e t Ax i oma t i c (alLset,  keyobj); 

n pg pKey DBC h a n g e d (keys,  addset); 

cleanup: 
n i f (addset  ) 

n r i ng S e t D e s t r oy  (addset); 

n return  error; 

> 


/*  Get  property  functions.  Internal  GetKey  functions  work  for  both 
master  keys  and  subkeys.  */ 


static  PGPError 

pgpReturnPropBuf f er  (char  const  *src,  char  *prop, 
n n n n n size_t  srclen,  si2e_t  proplen) 


PGPError  result  = PGPERR_0K; 


if  (srclen  > proplen)  ( 
srclen  = proplen; 

n result  = PG P E R R_KE Y DB_BU F F E RTOOS H 0 RT ; 
} 

if  (prop  &&  srclen  > 0) 

pg p C opy M emo r y (src,  prop,  srclen); 
return  result; 


static  PGPError 


pgpGetKeyNumberlnt 

e r n a 1 

(RingSet  *ringset. 

RingObject  *keyobj. 

n 

/ 

n n n n 

n 

PG PKey P r 0 pNa me  propname,  long  *prop) 

\ 

n 

by t en  n n 

n 

keyidCS]; 

n 

unsi gned  longa 

n 

longkeyid; 

n 

unsigned  charn 

Q 

pkalg; 

n 

i nt 

i ; 

D 

byte 

trust; 

n 

switch  (propname)  ( 

n 

case  kPG PKey P r op Key I d : 

n 

n ringKeyIDS 

(ringset,  keyobj. 

NULL, 

key i d ) ; 

n 

n longkeyi d 

= 0; 

□ 

a for(i=4 

; i < 

8 ; i ++ ) 

D 

n n longkeyid  = 

(longkeyid  << 

8)  + 

keyidCiD; 

n 

n *prop  = (long) 

longkeyid;  /* 

♦prop 

should  be  cast  to  (unsigned 

D 

n break; 

D 

case  kPG PKey P r op A 1 g I d : 

n 

n ringKeyIDS 

(ringset,  keyobj. 

&p  ka  1 g 

, NULL); 

n *prop  = (long)  pkalg; 
n break; 

case  kPG PKey P r o pB i t s : 

n *prop  = (long)  ringKeyBits  (ringset,  keyobj); 
n break; 
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n 

case 

kPGPKeyPropT  rust : 

a 

B 

1 f 

( pg pT r u s t M od e L ( pg p R i ng Poo L ) ==  PGPTRUST0) 

n 

B 

B 

trust  = ringKeyTrust  (ringset,  keyobj); 

a 

B 

B 

if  (trust  ==  PGP_KEYTRUST_UNDEFINED  || 

n 

B 

B 

a trust  ==  PGP_KEYTRUST_UNKNOWN ) 

n 

B 

B 

trust  = PGP_KEYTRUST_NEVER; 

n 

B 

B 

*prop  = (Long)  trust; 

□ 

B 

B 

break; 

n 

n 

a } 

de  f a u L t 

n n return  PGPERR_KEYDB_INVALIDPROPERTY; 
n } 

n return  PGPERR_OK; 

} 


PGPError 

pg pG e t Ke y N umbe r (PGPKey  *key,  PG PKey P r o p Na me  propname.  Long  *prop) 
{ 


PGPError 
n PGPUserlD 
n RingSet 
n Long 


error  = PGPERR_0K; 
* u s e r i d ; 

*ringset; 

trustvaL; 


H 

n 

□ 

Q 

n 

□ 

Q 

□ 

a 

n 

□ 

n 

n 

o 

n 

a 

n 

a 

n 

Q 

□ 

n 

n 

n 

a 

n 

> 


pgpaCpgpaPGPKeyVaLidCkey)); 

switch  (propname)  { 

case  kPGPKey P r opVa L i d i t y : 


PGPTRUST0)  { 


if  ( pg pT r u s t Mode L ( pg p R i ng Poo L ) = = 
n *prop  = PGP_VALIDITY_UNKNOWN; 
pgpIncKeyRefCount  (key); 

for  (userid  = (PGPUserlD  *)  key->userIDs.next; 


n 
□ 
n 

Q 

a 
n 
a 
□ 

□ 

□ 

□ 
n 
> 

e L s e { 

ringset  = pg pKey DBR i ng S e t ( key-> key D B ) ; 

''prop  = (Long)  r i ng  Key  Con  f i d e n c e (ringset,  key->key); 


n userid  !=  (PGPUserlD  *)  & key->u s e r I D s ; 
n userid  = u s e r i d->n ex t ) { 
n if  ( ! u s e r i d-> r emo ved ) { 

n n pgpGe t U s e r I DNumbe r (userid,  kPG PU s e r I D P r op Va L i d i t y , 
n n n n n n n StrustvaL); 

n n if  (trustvaL  > *prop) 
n n n *prop  = trustvaL; 

n } 

} 

pgpFreeKey  (key); 


n 
} 

break; 
def a u L t : 

ringset  = pgpKeyDBRi ngSet  ( key-> key DB  ) ; 
n error  = pg pG e t Key N umb e r I n t e r na L (ringset,  key->key,  propname,  prop); 
> 

return  error; 


PGPError 

pgpGetSubKeyNumber  (PGPSubKey  *subkey,  PGPKeyPropName  propname.  Long  *prop) 
{ 

PGPError  error  = PGPERR_0K; 
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n RingSet  *ringset; 

n pgpaCpgpaPGPSubKeyValidCsubkey)); 
n CHECKREMOVED( subkey); 
n switch  (propname)  { 
n case  kPGPKey P r opKey I d : 
n case  kPGPKey P ropA L g I d : 
n case  kPGPKey P ropB i t s : 

n ringset  = pgpKeyDBRingSet  (subkey->key->keyDB); 

n error  = pg pG e t Key Numb e r I n t e r na L (ringset,  s u b key-> s u bKey , 

□□nnaannDD  propname,  prop); 
n n break; 
n default : 

n n return  PG P E R R_KE Y D B_ I N V A LI D PROPE RT Y ; 
n > 

n return  error; 

} 


static  PGPError 

pg pGe t KeyTi me  I n t e r na L (RingSet  *ringset,  RingObject  *keyobj, 
n n n n n PG PKey P r opN a me  propname,  PGPTime  *prop) 

( 

n switch  (propname)  -C 
n case  kPG PKey P r op C r ea t i on : 

n n *prop  = ringKeyCreation  (ringset,  keyobj); 

n n break; 

n case  kPG PKey P r op E xp i r a t i on  : 

n n *prop  = ringKeyExpiration  (ringset,  keyobj); 

n n break; 

n default: 

n n return  PG P E R R_KE Y DB_ I N V A LI D PRO  PE RT Y ; 
n > 

n return  PGPERR_0K; 

} 


PGPError 

pgpGetKeyTi me  (PGPKey  *key,  PG PKey P r opName  propname,  PGPTime  *prop) 

{ 

RingSet  *ringset; 

□ 

n pgpa ( pgpaPGPKeyVa I i d ( key  ) ) ; 
n ringset  = pgpKeyDBRingSet  ( key-> key DB ) ; 

n return  pgpGetKeyTimeInternal  (ringset,  key->key,  propname,  prop); 
} 


PGPError 

pgpGet SubKeyTi me  (PGPSubKey  *subkey,  PG PKey P r opNa me  propname,  PGPTime  *prop) 
{ 

RingSet  *ringset; 

n 

n pgpa(pgpaPGPSubKeyValid(subkey)); 
n CHECKREMOVED(subkey); 

n ringset  = pgpKeyDBRingSet  (subkey->key->keyDB); 

n return  pgpGetKeyTimeInternal  (ringset,  s u b key-> s u bKey , propname,  prop); 

} 
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static  PGPError 

pg pG e t Ke y S t r i ng I n t e r na L (RingSet  *ringset,  RingObject  *keyobj, 

n a n n n n PGPKeyP ropName  propname,  char  *prop,  size_t  *len) 

{ 


a unsigned  chara  a 

a unsigned  char 

a s i z e t 


p k a L g ; 

bufferC203; 
Length  = *Len; 


a switch  (propname)  { 
a case  k PG PKey P r op Ke y I d : 

a n ringKeylDS  (ringset,  keyobj,  NULL,  buffer); 

a n *len=8; 

a a break; 

a case  k PG PKey P r op F i n g e r p r i n t : 

a n ringKeylDS  (ringset,  keyobj,  SpkaLg,  NULL); 

a a if(pkaLg==1){ 

a a a r i n g Key F i ng e r p r i n 1 1 6 (ringset,  keyobj,  buffer); 

a a n *Len=16; 

n n } 

a n e L s e { 

a a n r i ng Key F i ng e r p r i n t 2 0 (ringset,  keyobj,  buffer); 

a n a *Len=20; 

n n > 

a n break; 

a default: 

a n return  PG P E R R_KE Y DB_ I N V A LI D PRO P E RT Y ; 

a } 

a return  pg p Re t u r n P r o pBu f f e r ((const  char  *)  buffer,  prop,  *len.  Length); 
} 


PGPError 

pg pG e t Key S t r i ng  (PGPKey  *key,  PG P Key P r o p Na me  propname,  char  *prop,  size_t  *len) 
{ 

RingSet  *ringset; 

pgpa(pgpaPGPKey\/aLid(key)); 
a ringset  = pg pKey DBR i ng S e t ( key-> key D B ) ; 

a return  pg pG e t Key S t r i ng I n t e r n a L (ringset,  key->key,  propname,  prop,  Len); 

} 


PGPError 

pg pG e t S u b Key S t r i ng  (PGPSubKey  *subkey,  PG PKey P r o p Na me  propname, 
a n n n a char  *prop,  size_t  *Len) 

{ 

RingSet  *ringset; 

pgpa(pgpaPGPSubKey\/alid(subkey)); 
a CHECKREMOVED(subkey); 

a ringset  = pg pKey DBR i n g S e t ( s u b key-> key-> key D B ) ; 

a return  pg pG e t Key S t r i n g I n t e r na L (ringset,  s u b key-> s u bKey , propname, 
nnnnnnana  prop,  Len); 

} 

static  PGPError 
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pg pGe t KeyBoo L ea n I n t e rna L (RingSet  *ringset,  RingObject  *keyobj, 
n n n n n n PG PKey P r opN ame  propname.  Boolean  *prop) 

{ 


□ 

□ 


struct  PgpSecKey 
word32n  n n n 


*seckey  = NULL; 
expi ration; 


n 

□ 

n 

n 

a 

Q 

n 

Q 

n 

□ 

n 

□ 

n 

Q 

n 

□ 

a 

n 

□ 

n 

□ 

□ 

a 

n 

□ 

n 

n 

a 

n 

n 

□ 

□ 

n 

n 

a 

n 

□ 

□ 

n 

□ 

n 

o 

> 


switch  (propname)  { 
case  kPG  PKey  P r op  I s S e c r e t : 

n *prop  = ( r i ng Key  I s S e c (ringset,  keyobj)  !=  0); 
n break; 

case  kPG PKey P r o p I s Ax i oma t i c : 

n *prop  = ( r i ng Key Ax i oma t i c (ringset,  keyobj)  !=  0); 
a break; 

case  kPG PKey P r o p I s Re VO ke d : 

n *prop  = CringKeyRevoked  (ringset,  keyobj)  !=  0); 
n break; 

case  kPGPKey P r o p I s D i sa b L e d : 

n *prop  = ( r i ng Key D i s a b L e d (ringset,  keyobj)  !=  0); 
n break; 

case  kPGPKeyPropNeedsPassphrase : 
n if  ( ! ri ngKeyl sSec  (ringset,  keyobj)) 
n n return  PGPERR_NO_SECKEY; 

n seckey  = ringSecSecKey  (ringset,  keyobj,  0); 
n if  (Iseckey) 

n n return  r i ng  S e t E r r o r ( r i ng  s e t ) ->e  r r o r ; 

n *prop  = (pgpSecKeyIsLocked  (seckey)  !=  0); 

n pgpSecKeyDest roy  (seckey); 

n break; 

case  kPG PKey P r op  I s E xp i red : 

a expiration  = r i ngKey E x p i r a t i on  (ringset,  keyobj); 
n if  (expiration  ==  0) 
n n *prop=0; 

n else 

n n *prop  = (expiration  < (word32)  pgpGetTi me ( ) ) ; 
a break; 

case  kPG PKey P rop I s No t C o r r up t : 

*prop  = (ringKeyError  (ringset,  keyobj)  ==  0); 
n break; 

case  kPGPKey P ropCanS i gn : 

*prop  = ((ringKeyUse  (ringset,  keyobj)  S PG P_PKU S E_S I GN ) !=  0); 

n break; 

case  kPGPKeyPropCanEncrypt  : 

*prop  = ((ringKeyUse  (ringset,  keyobj)  S PG P_PKU S E_EN C R Y PT ) !=  0); 

n break; 
default: 

n return  PG P E R R_KE Y DB_ I N V A LI D PRO P E RT Y ; 

> 

return  PGPERR_OK; 


PGPError 

pg pGe t Key Boo  I ea n (PGPKey  *key,  PG PKey P ropN a me  propname.  Boolean  *prop) 

{ 

RingSet  *ringset; 

n pg pa ( pg pa PG PKey Va I i d ( key ) ) ; 
n ringset  = pg pKey DBR i ng S e t ( key->key DB  ) ; 
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n return  pg pG e t Key Boo L ea n I n t e r n a I (ringset,  key->key,  propname,  prop); 
} 


PGPError 

pg pG e t S u bKey Boo L e a n (PGPSubKey  *subkey,  PG PKey P r opNa me  propname.  Boolean  *prop) 
{ 

RingSet  *ringset; 

n pgpaCpgpaPGPSubKeyValidCsubkey)); 
n CHECKREMOVED(subkey); 

n ringset  = pg p Key DB R i ng S e t ( s u b key-> key-> key DB ) ; 
n if  (propname  ==  k PG PKey P r op  I s Ax i oma t i c ) 
n return  PGPERR_KEYDB_INVALIDPROPERTY; 

n return  pg pG e t Key Boo L ea n I n t e r n a L (ringset,  s u b key->s u b Key , propname,  prop); 

} 


PGPError 

pg pG e t U s e r I D N umbe r (PGPUserlD  *userid,  PG PU s e r I D P r o p N a me  propname.  Long  *prop) 
{ 

n struct  RingSetn  o *ringset  = NULL; 
n union  RingObject  *nameobj  = NULL; 

n pgpa(pgpaPGPUserIDVaLid(userid)); 
n CHECKREMOVED(userid); 

n ringset  =n  pgpKeyDBRingSet  (userid->key->keyDB); 
a nameobj  =n  u s e r i d->u s e r I D ; 

n switch  (propname)  { 
n case  k PG PU s e r I 0 P r op Va L i d i t y : 

n n if  ( pgpT r u s t Mode L ( pg p R i n g Poo L ) ==  PGPTRUST0) 
n n *prop  = (long)  ringNameTrust  (ringset,  nameobj); 

a a else 

n n n *prop  = (Long)  r i ng Na me Va L i d i t y (ringset,  nameobj); 
n n break; 

n case  kPGPUs e r I D Pr opCon f i dence : 

n n if  (pgpTrustMode L ( pg p R i ng Poo L ) > PGPTRUST0)  { 
n n n *prop  = r i ngNameConf i dence  (ringset,  nameobj); 

n n n break; 

n n > 

a default: 

H n return  PG P E R R_KE Y D B_ I N V A LI D P RO P E RT Y ; 
n } 

n return  PGPERR_OK; 

> 


PGPError 

pgpGe t Us e r I D S t r i ng  (PGPUserlD  *userid,  PG PU s e r I D P r opName  propname, 
n n n n n char  *prop,  size_t  *len) 

{ 

a struct  RingSetn  n *ringset  = NULL; 

n union  RingObject  *nameobj  = NULL; 

n size_t  Length  = *Len; 

n char  constn  *bufptr; 

n pgpa(pgpaPGPUserIDVaLid(userid)); 
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n CHECKREHOVED(userid); 

n ringset  =n  pgpKeyDBRingSet  (userid->key->keyDB); 
n nameobj  =n  u s e r i d->u s e r I D ; 

n switch  (propname)  t 
n case  kPG PU s e r I D P ro pName : 

n n bufptr  = r i ng Na me  Name  (ringset,  nameobj,  Len); 
n n break; 

a def au  Lt : 

n n return  PG P E R R_KE Y DB_ I N V A LI D P ROP E RT Y ; 

n > 

n return  pg p Re t u r n P r opBu f f e r (bufptr,  prop,  *Len,  Length); 

> 


PGPError 

pgpGetCertNumber  (PGPCert  *cert,  PG P C e r t P r o p N a me  propname, 
{ 


D 

struct  RingSetn  n 

*ringset 

□ 

union  RingObject 

*s i gob  j 

□ 

byten  n q n 

keyidC8Il 

D 

unsigned  Longn  n 

Longkeyi 

□ 

i n t 

i ; 

Long  *prop) 


n pg  pa  ( pg  pa  PG  PC  e r t Va  L 1 d ( c e r t ) ) ; 

n CHECKREMOVED( cert ) ; 

n ringset  =n  pgpKeyDBRingSet  ( c e r t ->up . u s e r I D-> key-> key DB  ) ; 
n sigobj  =n  cert->cert; 


n switch  (propname)  ( 
n case  kPG PC e r t P r o pKey I D : 

n n ringSigIDS  (ringset,  sigobj,  NULL,  keyid); 

n n Longkeyid  = 0; 

n n for  (i  = 4;  i < 8;  i++) 

n n n Longkeyid  = (Longkeyid  <<  8)  + keyidCiD; 

n n /*  *prop  shouLd  be  cast  to  (unsigned  Long)  beLow  */ 

n n *prop  = (Long)  Longkeyid; 

n n break; 

n defauLt: 

a n return  PG PE R R_KE Y DB_I N V A LI D PRO  PE RT Y ; 

n > 

n return  PGPERR_0K; 

> 


PGPError 

pgpGe t Ce r t S t r i ng  (PGPCert  *cert,  PG P C e r t P r opN a me  propname,  char  *prop, 
n n n n si ze_t  * L en ) 

{ 

a struct  RingSetn  n *ringset  = NULL; 
n union  RingObject  *sigobj  = NULL; 

n unsigned  char  bufferC8D; 

n size_t  Length  = *Len; 

n pgpa ( pgpa PGPCe r t Va L i d ( ce r t ) ) ; 

n CHECKREMOVED(cert); 

n ringset  =n  pgpKeyDBRingSet  (cert->up.userID->key->keyDB); 

n sigobj  =n  cert->cert; 
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n switch  (propname)  { 
n case  kPG PC e r t P ropKey I D : 

n n ringSigIDS  Cringset,  sigobj,  NULL,  buffer); 

n n *len=8; 

n n break; 

n default: 

a n return  PG PE R R_ KE Y DB_ I N V A L I D P RO P E RT Y ; 
n } 

n return  pg p R e t u r n P r o pBu f f e r ((const  char  *)  buffer,  prop,  *Len,  Length); 
} 


PGPE  r ro  r 

pgpGetCertTi me  (PGPCert  *cert,  PG P C e r t P r o p N a me  propname,  PGPTime  *prop) 
{ 

a struct  RingSetn  a *ringset  = NULL; 
n union  RingObject  *sigobj  = NULL; 

a pg  pa  ( pg  pa  PG  P C e r t Va  I i d ( c e r t ) ) ; 

a CHECKREMOVED ( cert ) ; 

a ringset  =a  pgpKeyDBRingSet  (cert->up.userID->key->keyDB); 

a sigobj  =a  cert->cert; 

a switch  (propname)  { 

a case  kPGPCe r t PropC r ea t i on : 

a n *prop  = r i ng S i gT i me s t a mp  (ringset,  sigobj); 
a a break; 

a def au  It : 

a n return  PG P E R R_KE Y DB_ I N V A LI D PRO P E RT Y ; 
a } 

a return  PGPERR_0K; 

} 


PGPError 

pg pG e t C e r t Boo L ea n (PGPCert  *cert,  PG PC e r t P r opNa me  propname.  Boolean  *prop) 

{ 

a struct  RingSeta  n *ringset  = NULL; 
a union  RingObject  *sigobj  = NULL,  *obj  = NULL; 
a chara  n n n keyidCSH,  revkeyidCSD; 

a struct  Ringlterator  *iter  = NULL; 
a unsigneda  n n Level; 

a pgpa(pgpaPGPCert\/aLid(cert)); 
a CHECKREHOVED(cert); 

a ringset  =a  pgpKeyDBRingSet  ( c e r t -> u p . u s e r I D-> key-> key D B ) ; 
a sigobj  =a  cert->cert; 

a switch  (propname)  { 

a case  kPG PC e r t P r op  I s R e vo ke d : 

an/*  Must  Look  for  a revocation  signature  with  the  same  signing 
a n n key  id.  The  revocation  sig  must  be  the  newer  than  the  certifying 

a n n sig  to  be  considered.  */ 

a a *prop=0; 

a a ringSigIDS  (ringset,  sigobj,  NULL,  (unsigned  char  *)  keyid); 
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iter  = ringlterCreate  (ringset); 
if  (liter) 

n return  PG P E R R_NOri E M ; 
ringIterSeekTo  (iter,  sigobj); 

Level  = r i ng I t e r C u r r e n t Le V e L (iter); 
r i ng 1 1 e r R e w i nd  (iter.  Level); 

while  ( r i ng  1 1 e r N e X t Ob j e c t (iter.  Level)  > 0)  ( 
n obj  = r i ng I t e r C u r r e n t 0 b j e c t (iter.  Level); 

n if  (ringSigType  (ringset,  obj)  ==  PG P_ S I GT YPE_KE Y_U I D_R E VOKE ) ( 
n n ringSigIDS  (ringset,  obj,  NULL,  (unsigned  char  *)  revkeyid); 

n n if  (memcmp  (keyid,  revkeyid,  8)  ==  0 SS 

n n n r i ng S i g C h e c ked  (ringset,  obj)  && 

ana  r i n g S i g T i me s t a mp  (ringset,  obj)  >= 

n n n r i ng S i gT i me s t a mp  (ringset,  sigobj))  { 

a a n *prop=1; 

n n n break; 

n n } 

n } 

> 


r i ng I t e r D e s t r oy  (iter); 
break; 

case  kPG PC e r t P r o p I s No t C o r r up t : 

H *prop  = ( r i ng S i g E r ro r (ringset,  sigobj)  ==  0); 
n break; 

case  kPGPCe r t PropI sT r i ed : 

n *prop  = ringSigTried  (ringset,  sigobj); 
n break; 

case  kPGPCe r t PropI sVe r i f i ed : 

n *prop  = ringSigChecked  (ringset,  sigobj); 
n break; 

case  kPGPCe r t PropI sMyCe r t : 

n obj  = ringSigMaker  (ringset,  sigobj,  ringset); 
n if  ( ! ob  j ) 

0; 


ringKeylsSec  (ringset,  obj); 


n n *p  rop 

n else 
n n * p r o p 

a break; 
default: 

n return  PGPERR_KEYDB_INVALIDPROPERTY; 
} 

return  PGPERR_0K; 


/*  Get  and  Set  default  private  key.  The  identification  of 
n the  key  is  stored  as  an  ascii  keyid  in  the  preferences 
n repository.  */ 

PGPKey  * 

pg pGe t D e f a u L t P r i va t e Key  (PGPKeySet  *keyset) 

{ 

n pgpa(pgpaPGPKeySetVaLid(keyset)); 

a return  pg pGe t D e f a u L t P r i va t e Key  I n t e r na L ( k ey s e t -> key DB ) ; 
I 
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static  char  const  hex[I16]  = { 

n ■2', '3', '4', '5', '6', '7', 

n '8','9','a','b','c','d','e','f' 

>; 


PGPError 

pg p S e t D e f a u L t P r i va t e Key  (PGPKey  *key) 
{ 


n 

i n t nn 

n 

i ; 

□ 

si ze_tn 

D 

l e n = 8 ; 

a 

c h a r n 

n 

keyidC8D; 

n 

c ha  rn 

n 

keyidstrC19D; 

Q 

by  t en 

n 

digit; 

□ 

Boo  lea  nnn 

secret  = 0,  cansign 

0; 


n pg pa C p g pa PG PKey Va L i d ( key ) ) ; 
n if  ( pg pKey I s D ea d (key)) 
n return  PGPERR.BADPARAM; 

n /*  Default  key  must  be  secret  and  must  be  able  to  sign  */ 
n pg pG e t Ke y Boo L ea n (key,  kPG PKey P r op  I s S e c r e t , Ssecret); 

o if  (!secret) 

n n return  PGPERR_BADPARAM; 

n pg pGe t Key Boo L ea n (key,  kPG PKe y P r o p C a n S i g n , Scansign); 

n if  (Icansign) 
a return  PG P E R R_B A D P A R AM ; 


n /*  Set  the  default  key  axiomatic  (note  we  don't  require  a passphrase)  */ 
n pg p S e t Key Ax i oma t i c (key,  FALSE,  NULL); 

n pg pGe t Key S t r i ng  (key,  kPG PKey P r op  Key  I d , keyid,  8len); 
n keyidstrC0D  = '0'; 

n keyidstrCID  = 'x'; 

n for  (i  = 0;  i < 8;  i++)  { 

n n digit  = (byte)  keyidCiD; 

n a keyidstrCi  * 2 + 2D  = hexCdigit  >>  4D; 

n n keyidstrCi  * 2 + 3D  = hexCdigit  & 0xFD; 

n > 

o keyidstrC18D  = '\0'; 

n pg p S e t P r e f S t r i ng  ( k PG PP r e f U s e r I D , keyidstr,  18); 

n return  PGPERR_0K; 

} 


PgpT  rustModel 

pg pG e t T r u s t Mod e I (void) 

{ 

return  pg pT r u s t Mod e I ( pg p R i ng Poo  I ) ; 

> 


/*  UserVal  functions  */ 

PGPError 

pgpSetKeyUserVa I (PGPKey  *key,  long  userVal) 

{ 

n pgpa(pgpaPGPKeyValid(key)); 
n key->userVal  = userVal; 
n return  PGPERR_0K; 

} 
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PGPError 

pg pS e t U s e r I D U s e r Va L (PGPUserlD  *userid.  Long  userVal) 
{ 

n pgpaCpgpaPGPUserlDVaLidCuserid)); 
n userid ->userVaL  = userVaL; 

n return  PGPERR_0K; 

} 


PGPError 

pgpSetSubKeyUserVa L (PGPSubKey  *subkey.  Long  userVaL) 
{ 

n pgpa(pgpaPGPSubKeyVaLid(subkey)); 
n subkey->userVaL  = userVaL; 

n return  PGPERR_0K; 

> 


PGPError 

pg p S e t C e r t U s e r Va L (PGPCert  *cert.  Long  userVaL) 
{ 

n pgpaCpgpaPGPCertValidCcert)); 
n c e r t ->u s e r Va L = userVaL; 

n return  PGPERR_0K; 

} 


PGPError 

pg pG e t Key U s e r Va L (PGPKey  *key.  Long  *userVaL) 
{ 

n pg pa ( pg pa PG PKey Va L i d ( key ) ) ; 

n *userVaL  = key->use rVa L ; 
n return  PGPERR_0K; 

> 


PGPError 

pgpGetUserlDUserVa L (PGPUserlD  *userid.  Long  *userVaL) 

{ 

n pgpaCpgpaPGPUserlDVaLidCuserid)); 
a *userVaL  = u s e r i d->u s e r Va L ; 
n return  PGPERR_OK; 

> 

PGPError 

pg pG e t S u bKey U s e r Va L (PGPSubKey  *subkey.  Long  *userVaL) 

{ 

n pgpaCpgpaPGPSubKeyVaLidCsubkey)); 
n *userVaL  = s ub key->us e r Va L ; 
n return  PGPERR_OK; 

} 

PGPError 

pgpGetCertUserVa L (PGPCert  *cert.  Long  *userVaL) 
n pg  pa  ( pg  pa  PG  P C e r t Va  L i d ( c e r t ) ) ; 
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H *userVaL  = c e r t ->u s e r Va L ; 
n return  PGPERR_OK; 

> 

PGPUserlD  * 

pg pG e t P r i ma r y U s e r I D (PGPKey  *key) 

{ 

n PGPUserlD  *nn  userlD; 

n pg pa ( pg pa PG PKey Va L i d ( key ) ) ; 

n userlD  = (PGPUserlD  *)  & key->u s e r I D s ; 
n dot 

n n userlD  = u s e r I D-> n ex t ; 

n n if  (userlD  ==  (PGPUserlD  * ) & key-> u s e r I D s ) 

n n a return  NULL; 

n } while  ( u s e r I D-> remove d ) ; 

n return  userlD; 

> 

PGPError 

pg pG e t P r i ma r y U s e r I D Na me ( PG PKe y *key,  char  *buf,  size_t  *Len) 

n PGPUserlD  *nn  userlD; 

n pg pa ( pg pa PG PKey Va L i d ( key ) ) ; 

n userlD  = pg pG e t P r i ma r y U s e r I D (key); 
n if  (userlD  ==  NULL) 

n n return  PG P E R R_KE Y DB_ C 0 R R U PT ; n /*  XXX  correct  error?  */ 

a return  pgpGetUserIDString(userID,  kPGPUserlDPropName,  buf,  Len); 

> 

PGPError 

pg pG e t P r i ma r y U s e r I D Va L i d i t y (PGPKey  *key,  long  *validity) 

n PGPUserlD  *nn  userlD; 

n pg pa ( pg pa PG PKey Va I i d ( key ) ) ; 

n userlD  = pg pGe t P r i ma r y U s e r I D ( key  ) ; 
n if  (userlD  ==  NULL) 

a n return  PG P E R R_KE Y DB_ C OR RU PT ; n /*  XXX  correct  error?  */ 

n return  pgpGetUserlDNumber(userID,  kPGPUserlDPropValidity,  validity); 

> 

/* 

* XXX:  This  routine  must  be  kept  in  sync  with  the  hash  algorithm 

* selection  made  in  pg p S i g S p e c C r ea t e (in  pg p S i g S pe c . c ) 

*/ 

PGPError 

pg pGe t H a s h A I g U s ed  (PGPKey  *key,  long  *hashAlg) 

{ 

n longn  n n pkAlg; 

n PGPErrorn  n result; 

Q pg  pa  ( ( 
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n n pg pa PG PKey Va L i d ( key  ) , 

n n pgpaAddrValidChashALg,  uchar))); 

n result  = pg pG e t Key Numbe r ( key  , kPG PKey P rop A L g I d , &pkALg); 
n if  (result  ==  PGPERR_OK) 
n { 

n n if  (pkAlg  ==  PG P_PK A LG_ D S A ) 

n n n *hashAlg  = PG P_ H A S H _S H A ; 

n n else 

n n n *hashAlg  = pg pe n vG e 1 1 n t ( pg p E n v , PGPENV_HASH,  NULL,  NULL); 

n } 

n return  result; 

} 


/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpKeySet.c  --  PGPKeySet  i mp L erne n t a t i o n 

* 

* Copyright  CC)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg p Key S e t . c , V 1.46.2.2  1997/06/07  09:50:27  mhw  Exp  $ 

*/ 

#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h" 

#end  i f 


#ifdef  HAVE_STDLIB_H 
SincLude  <stdLib.h> 

# e n d i f 


#incLude  <string.h> 
#incLude  <ctype.h> 


SincLude 
#incLude 
#incLude 
#incLude 
#i  nc  Lude 
# i n c L ud e 
#i nc  L ude 
#i nc  Lude 
#incLude 


pgpKDBint.h" 
pgpTypes.h" 
pgpDebug.h" 
pgpMem. h" 
pgpTimeDate.h 
pgpUsuaLs.h" 
pgpMemPoo  L . h " 
pgpRngMnt . h" 
pgpRngPub. h" 


static  int 

c ompa r e Key  I D s ( u c ha r const  *keyIDA,  uchar  const  *keyIDB) 
{ 


□ 

i n t nn 

n n i ; 

n 

for 

(i 

+ 

+ 

■s 

00 

V 

• s 

li 

n 

n 

n 

i f 

(keyIDACi]  > keyIDBCi]) 

n 

D 

n 

return  1; 

Q 

n 

eLse  if  CkeylDACi]  < keyIDBCi]) 

D 

a 

n 

return  -1; 

□ 

> 

D 

for 

Ci 

= 0;  i < 4;  i++) 

□ 

i 

U 

n 

i f 

(keyIDACi:  > keylDBCil) 

D 

u 

n 

return  1; 

□ 

n 

e L 

se  if  (keyIDACi:  < keyIDBCi:) 

n 

□ 

a 

return  -1; 

n 

> 

n 

return 

0; 

> 


static  int 

key C ompa r eBy Key  I D ( VO i d const  *a,  void  const  *b) 

{ 

a PGPKey  *a  n keyA  = *(PGPKey  **)a; 

n PGPKey  *n  n keyB  = *(PGPKey  **)b; 

n 

n ucharn  n n keyIDAESD; 

Ci:CHK:6e3670ff4f4476aaa3342c2547f44a68dd67c51aa34d55ee05500cddd2bf779ad]] 
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n ucharn  n n keylDBCSH; 

n 

n s i ze_tn  n n L en; 

n PGPErrorn  n result; 

n Len  = s i z eo f ( key  I D A ) ; 

n result  = pgpGetKeyStringCkeyA,  kPGPKeyPropKeyld,  (char  *)keyIDA,  Slen); 
n pg p A s s e r t ( r e s u I t ==  PGPERR_OK); 

n len  = s i z e o f ( key  I D B ) ; 

n result  = pgpGetKeyString(keyB,  kPGPKeyPropKeyld,  (char  *)keyIDB,  8len); 
n pg p A s s e r t ( r e s u 1 1 ==  PGPERR_OK); 

n return  coinpareKeyIDs(keyIDA,  keyIDB); 

> 

static  int 

key C ompa r eBy R e V e r s e Key  I D ( VO i d const  *a,  void  const  *b) 

{ 

n return  -keyCompa reByKey I D ( a , b); 

> 

int 

pgpU s e r I DS t r Compa r e ( c ha r const  *a,  char  const  *b) 


□ 

for 

□ 

■C 

c 

n 

while  ( *a 

&&  tolower(*a)  ==  tolower(*b)) 

n 

n 

n a + + . 

b + + ; 

n 

n 

while  (*a 

SS  !isalnum(*a)) 

o 

a 

n a + +; 

□ 

n 

while  (*b 

SS  !isalnum(*b)) 

Q 

n 

a b + +; 

Q 

D 

if  ( !*a  1 

1 tolower(*a)  !=  tolower(*b)) 

n 

n 

n break 

r 

Q 

n 

a ++  • 

n 

□ 

b + + ; 

n 

> 

n 

return  ( ucha r ) to  1 owe r ( *a ) - ( u c h a r ) t o 1 o we r ( *b ) ; 

> 

static  int 

key  Compa  reByllse  r I D ( voi  d const  *a,  void  const  *b) 
{ 


n 

PGPKey 

*n 

Q 

keyA  = *(PGPKey  **)a; 

a 

PGPKey 

*n 

n 

keyB  = *(PGPKey  **)b; 

n 

c h a r n 

n 

n 

name A C2 56 D ; n /*  XXX  What's  the  maximum  userlD 

□ 

c h a rn 

n 

n 

nameBE256!]; 

n 

s i ze_tn 

n 

n 

len; 

n 

i n t nn 

n 

n 

compareResult; 

n 

PGPE  r rorn 

Q 

result; 

n len  = s i zeof ( nameA  ) - 1; 

n result  = pg pG e t P r i ma r y U s e r I D N a me ( key A , nameA,  Slen); 
n pg p A s s e r t ( r e s u I t ==  PGPERR_0K); 
n nameAClenD  = '\0'; 
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n Len  = s i z e o f ( n a me B ) - 1; 

n result  = pg pG e t P r i ma ry U s e r I D Name ( key B , nameB,  8Len); 
a pgpAssertlresuLt  ==  PGPERR_0K); 
n nameBCLen]  = '\0'; 

n c ompa r e R e s u I t = pg pU s e r I D S t r Compa r e ( na me A , nameB); 

n return  C c ompa r e R e s u L t ! =0 ) ? c ompa r e Re s u L t : 

n n n key C ompa r e By Key  I D C a , b); 

> 

static  int 

key C ompa r e By R e V e r s e U s e r I D ( VO i d const  *a,  void  const  *b) 

{ 

n return  - key C ompa r e By U s e r I D ( a , b); 

} 

static  int 

key C ompa r e By Va L i d i t y ( VO i d const  *a,  void  const  *b) 

{ 


o 

PGPKey  *n 

n 

keyA  = *(PGPKey  **)a; 

n 

PGPKey  *n 

n 

keyB  = *(PGPKey  **)b; 

Q 

1 ongn  n 

□ 

validityA; 

n 

longn  n 

n 

validityB; 

a 

PGPErrorn 

□ 

result; 

D 


n result  = pg pG e t P r i ma r y U s e r I D Va I i d i t y ( key A , SvalidityA); 
n pgpAssertCresult  ==  PGPERR_0K); 

n result  = pgpGetPrimaryllserlDValidityCkeyB,  SvalidityB); 
n pgpAssertCresult  ==  PGPERR_0K); 


n if  (validityA  < validityB) 
n n return  1; 

n else  if  (validityA  > validityB) 
n n return  -1; 

n else 

n n return  key C ompa r eBy Key  I D ( a , b); 

} 

static  int 

key C ompa r eBy R e ve r s e Va I i d i t y ( vo i d const  *a,  void  const  *b) 
{ 

n return  - key C ompa r e By Va I i d i t y ( a , b); 

> 

static  int 

key C ompa r e By T r u s t ( VO i d const  *a,  void  const  *b) 

{ 


n 

PGPKey 

*B 

B 

keyA  = *(PGPKey 

**)a; 

B 

PGPKey 

*B 

B 

keyB  = * ( PGPKey 

**)b; 

B 

longn 

B 

fl 

t r u s t A ; 

B 

longn 

B 

B 

trusts; 

B 

PGPErrorn 

B 

result; 

n 

n result  = pgpGetKeyNumberCkeyA,  kPGPKeyPropTrust,  StrustA); 
n pgpAssertCresult  ==  PGPERR_0K); 

n result  = pg pG e t Key Numbe r ( key B,  kPG PKey P r opT r u s t , StrustB); 
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n pgpAssert(resuLt  ==  PGPERR_OK); 

n if  CtrustA  < trusts) 

n n return  1; 

n else  if  CtrustA  > trusts) 

n n return  -1; 

n else 

n n return  key C ompa r eSy Key I D ( a , b); 

> 

static  int 

key C ompa r eSy Re ve r s eT r u s t ( VO i d const  *a,  void  const  *b) 
{ 

n return  -keyCompareSyTrustCa,  b); 

} 

static  int 

key C ompa r eSy Key S i z e ( VO i d const  *a,  void  const  *b) 

{ 


n 

PGPKey  *a 

o 

keyA  = *CPGPKey 

**)a; 

n 

PGPKey  *n 

n 

keys  = *CPGPKey 

**)b; 

□ 

1 ongn  n 

Q 

keySizeA; 

n 

longn  a 

n 

keySizeS; 

n 

PGPErrorn 

n 

result; 

n 

n 

result  = 

pgpGetKeyNumberCkeyA, 

kPGPKeyPropSi t s,  SkeySizeA); 

Q 

pgpAssertCresult 

==  PGPERR_0K); 

n 

result  = 

pgpGetKeyNumberCkeyS, 

kPGPKeyPropSi ts,  SkeySizeS); 

n 

pgpAssertCresult 

==  PGPERR_0K); 

n if  CkeySizeA  < keySizeS) 

n n return  1; 

n else  if  CkeySizeA  > keySizeS) 
a a return  -1 ; 

n else 

n n return  key C ompa r eSy Key  I D C a , b); 

> 

static  int 

key Compa r eSy Re ve r seKey S i ze C VO i d const  *a,  void  const  *b) 
{ 

n return  - key C ompa r eSy Key S i z e C a , b); 

} 

static  int 


keyCompareSyCreat 

r 

ionCvoid  const  *a. 

void  const 

n 

PGPKey  *n 

a 

keyA  = *CPGPKey 

**)a; 

n 

PGPKey  *n 

Q 

keys  = *CPGPKey 

**)b; 

n 

PGPT i menn 

Q 

creationA; 

n 

PGPTimenn 

n 

c reat i onS ; 

n 

PGPErrorn 

n 

result; 

□ 

n result  = pg pG e t Key T i me C key A , k PG PKey P r op C r e a t i on , ScreationA); 
a pg p A s s e r t C r e s u L t ==  PGPERR_0K); 

n result  = pgpGet KeyTi me C keyS,  kPG PKey P r op C r e a t i on , ScreationS); 
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n pgpAssertCresuLt  ==  PGPERR_OK); 

n if  CcreationA  < creations) 
n n return  1; 

n else  if  (creationA  > creations) 
n n return  -1; 

n else 

n n return  keyCompareSyKeyIDCa,  b); 

} 

static  int 

key C ompa r eSy Re ve r s e C r e a t i on ( VO  i d const  *a,  void  const  *b) 

{ 

n return  -keyCompa reSyC rea t i on ( a , b); 

} 

/* 

* The  compare  functions  must  all  return  non-a mb i g u ou s answers  (>0,<0) 

* because  the  add-key  functionality  uses  a binary  search  to  install 

* new  keys.  If  things  are  ambiguous  then  the  order  can  change  if  some 

* keys  are  tied  under  the  main  search.  This  is  accomplished  by  doing 

* a secondary  search  on  keyid  if  there  is  a tie  on  the  main  search 

* field. 

*/ 

static  int  ( * c ompa r e F u n c L 3 ) ( vo i d const  *,  void  const  *)  = { 
n NULL, 
n NULL, 

n key C ompa r e By U s e r I D , 

n key C ompa r eBy Re V e r s e U s e r I D , 

n keyCompa reByKeyl D, 
n key Compa r eBy R e ve r s e Key  I D , 

n keyCompa reByVa I i di ty, 
n key C ompa r e By  Re ve r s e Va I i d i t y , 

a key Compa reByT r us t , 
n key C ompa r eBy Re V e r s eT r u s t , 

a keyCompa reByKeyS i ze, 
o key C ompa r eBy R eve r s e Key S i z e , 

n keyCompa reByC rea t i on, 
n key Compa r e By R e ve r s e C r ea t i on  >; 

static  uint  n umC ompa r e F un c s = s i z e o f ( c ompa r e F u n c ) / s i z e o f ( compa r e F u n c C 0 3 ) ; 

int 

pgpCompa reKeys ( PGPKey  *a,  PGPKey  *b,  PG PKey 0 r d e r i n g order) 

{ 

n pgpa ( ( 

n H pg pa PG PKe y Va I i d ( a ) , 
a n pg pa PG PKey Va I i d ( b ) , 

n n pgpaAssert (order  > 0 88  order  < n umC ompa r e F u n c s 

n n n n n 88  order  !=  kPG P A ny 0 r d e r i ng  ) ) ) ; 

o return  ( * c ompa r e F u n c C o r d e r 3 ) ( 8a , 8b); 

} 

static  void 

s 0 r t Key L i s t ( PG PKey L i s t *List) 

{ 

a pgpa ( ( 

CCCHK:ddb320b8cc70703326cfb2deefac3709f0b3c242660171ee733311829b4ae7a0833 
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n n pgpa PGPKey L i s t Va L i d ( L i s t ) , 

n n pg pa  A s s e r t ( L i s t ->o rd e r > 0 &&  List->order  < numC ompa r e F un c s ) ) ) ; 


n if  (list->order  !=  kPG P A ny 0 r d e r i ng  ) 

□ n q s o r t ( L i s t -> key s , L i s t -> key  Co u n t , s i z e o f ( L i s t -> key s C 0 3 ) , 


n 

> 

□ n 

n c ompa r e Fun c C L i s t ->o rde r 3 ) ; 

/* 

* 

Keep  in 

mind  that  the  comparison  functions 

are  not 

guaranteed  to 

* 

be  total 

orderings,  and  so  even  if  an  element  of 

the  List  has  a 

* 

perfect 

match  with  <key>,  the  index  returned  might 

not  contain  a 

★ 

•k 

perfect 

/ 

match. 

static  Long 

b i n a ry S e a r c h Key L 1 s t ( PG PKey L i s t *List,  PGPKey 

/ 

* key ) 

n 

L ongn 

n L o; 

n 

1 ongn 

n h i ; 

n 

L ongn 

n i ; 

n 

i ntnn 

n result; 

n 

i n t nn 

n ( * c ompa r e ) ( VO i d const  *,  void 

const 

*); 

n 

pgpa  ( ( 

n 

n pg pa PG PKey L i s t Va L i d ( L i s t ) , 

n 

n pgpa PGPKey Va L i d ( key  ) , 

n 

n pgpa A s s e r t ( L i s t ->o r d e r > 0 S&  List->order  < 

n 

umCompareFuncs))) 

n 

if  (List->order  ==  kPGPAnyO rde r i ng ) 

n 

Q 

return  L i s t -> key Coun t ; 

n 

compare  = c ompa r e F un c C L i s t ->o r d e r 3 ; 

n 

L 0 = 

0; 

n 

hi  = 

L i st->keyCount ; 

n 

wh  i L 

e (Lo  < hi) 

n 

n 

Q 

i = ( Lo  + hi  ) / 2; 

n 

n 

result  = ( * c ompa r e ) ( & key , &List- 

n 

a 

if  (result  > 0) 

n 

n 

u 

o 

II 

+ 

> ■ 

n 

n 

else  if  (result  < 0) 

□ 

a 

n h i = i ; 

n 

Q 

else 

n 

n 

n return  i; 

□ 

> 

return  Lo; 


/*  Creates  a new  empty  key  database  */ 

PGPKeyDB  * 

pgpKeyDBCreatelnternal(void) 

{ 

n PGPKeyDB  *n  db; 

n /*  VC++  doesn't  Like  the  following  macro  */ 
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/*n  db  = pgpNew(PGPKeyDB);  */ 

n db  = (PGPKeyDB  * ) pg p A L L o c ( s i z eo f C PG PKey DB ) ) ; 
n if  (db  ==  NULL) 
n a return  NULL; 
n 

n nemsetCdb,  0,  s i z eo f ( *d b ) ) ; 

a db-> private  = NULL; 

a db->refCount  = 1; 
n db->f i rstSetInDB  = NULL; 

n memPooLInit(&db->keyPooL); 
n db->nuniKeys  = 0; 
n d b-> f i r s t Key  I n D B = NULL; 

n db->f i rst F reeKey  = NULL; 
n d b-> f i r s t F r e e U s e r I D = NULL; 

n db->f i rst FreeCert  = NULL; 

n d b-> key s By Key I D = NULL; 

n return  db; 

> 

/*  Does  any  additional  initialization  necessary  after  DB  is  fully  created  */ 
void 

pgpKeyDBIni tinterna I (PGPKeyDB  *db) 

{ 

n /*  Nothing  for  now  */ 
a (void)db; 

> 

/*  Does  the  final  destruction  of  a key  database  structure  */ 
void 

pgpKeyDBDestroyInternal(PGPKeyDB  *db) 

a memPoolEmpty  ( &db->keyPoo I ) ; 
a memset  (db,  0,  s i z eo f ( *db ) ) ; 
a pgpHemFree  (db); 

> 

static  PGPKey  * 
a I locKey( PGPKeyDB  *db) 

{ 

a PGPKey  *a  key; 

a pg pa ( pg pa PG PKey DB Va I i d ( d b ) ) ; 

a if  ( d b-> f i r s t F r e e Key  !=  NULL) 
a { 

a a key  = d b-> f i r s t F r e e Key ; 
n n db->f i rst FreeKey  = ke y->n e x t Key  I n DB ; 
a > 
a else 

a a key  = memPoo  I N e u ( 8d b-> key  Poo  I , PGPKey); 
a 

a pg p C I e a r Memo r y ( key , s i zeof ( *key ) ) ; 

a return  key; 

} 

C[:CHK:2a688443b33ceb19111888d84a2500a52cf23ee8cd33bb00f5a60055260c377f2:] 
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static  void 

dea L LocKey ( PGPKeyDB  *db,  PGPKey  *key) 
{ 


n 

pgpa ( ( 

n 

n pg pa PG PKey DBVa L i d ( db  ) , 

n 

a pgpaAssert (db 

= = key->keyDB)  ) ) ; 

n 

key->nextKeyInDB  = 

db->fi rstFreeKey; 

n 

d b->f i r s t F r e e Key  = 

key; 

> 

static  PGPError 

addKeyToLi s t ( PGPKey Li  St  *List,  PGPKey  *key) 

{ 

n Longn  n n i; 

n Longa  n n newKeyCount; 

n PGPKey  **n  n newKeys; 

D 

n pgpa(pgpaPGPKeyListValid(List)); 
n i = binarySearchKeyListCList,  key); 
a newKeyCount  = L i s t -> key Cou n t + 1; 

n newKeys  = pg p A L L o c ( n e wKey C o un t * s i z eof ( PG PKey  *)); 
u i f ( ! newKeys ) 

n n return  PGPERR_NOHEM; 

n pgpCopyMemo ry ( L i s t->key s,  newKeys,  i * s i z eo f ( PG PKey  *)); 
a pg p C opy Memo ry ( L i s t -> key s + i,  newKeys  + i + 1, 

n n n n n ( L i s t -> key C oun t - i)  * s i zeof ( PGPKey  *)); 
a pg p F r e e ( L i s t -> key s ) ; 

n List->keys  = newKeys; 
n List->keyCount  = newKeyCount; 

n newKeysCiD  = key; 
n pgpKey I t e r AddKey ( L i s t , i); 

a 

n return  PGPERR_0K; 

> 

static  PGPError 

addKeyToListsCPGPKeyDB  *db,  PGPKey  *key) 

{ 

n PGPKeySet  *nn  set; 

n PGPKeyList  *a  List; 

n PGPErrorn  n resuLt; 

a pg pa ( pg pa PG PKey D B Va L i d ( db ) ) ; 

n for  (set  = d b-> f i r s t S e t I n DB ; set;  set  = s e t ->n e x t S e t I n D B ) 
n { 

n n pg pa ( pg pa PG PKey S e t Va L i d ( s e t ) ) ; 
naif  ( pg pKey S e t Hembe r ( s e t , key)) 

nan  for  (List  = s e t -> f i r s t L i s 1 1 n S e t ; List;  List  = L i s t ->n e x t L i s 1 1 n S e t ) 

n n n n if  ((resuLt  = a dd Key To L i s t ( L i s t , key))  !=  PGPERR_OK) 

:CCHK:62df5311A7fffb9 5a 88224451 5cc6e1555007bbccc2e050440040cca7ea651 85a:: 
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n n n a a returnresuLt; 

n } 

n return  PGPERR_OK; 

} 

static  PGPError 

r emo V e Key F r omL  i s t ( PG PKey L 1 s t *List,  PGPKey  *key) 

n Longn  a n i; 

n pgpaCpgpaPGPKeyListVaLidCList)); 

n for  (i  = 0;  i < List->keyCount;  i++) 
n n if  ( I i s t -> key s C i ] ==  key) 

a n u break; 

Q 

n if  (i  < L i st->keyCount ) 
n { 

n n pg pCopyMemo ry ( L i s t-> key s + i + 1,  List->keys  + i, 

a n n n n n (List->keyCount  - i - 1)  * sizeofCPGPKey  *)); 

n n L i st->keyCount — ; 

n n pg p Rea  I L o c ( ( VO i d ** ) & L i s t -> key s , L i s t -> key C ou n t * sizeofCPGPKey  *)); 

n n pgpKeylterRemoveKeyClist,  i); 

n > 

n 

n return  PGPERR_0K; 

> 

static  PGPError 

r emo V e Key F romL  i s t s ( PG PKey DB  *db,  PGPKey  *key) 

{ 

n PGPKeySet  *nn  set; 

n PGPKeyList  *n  List; 

n PGPErrorn  n result; 

n pgpa ( pgpa PGPKey DBVa L i d ( db )) ; 

n for  (set  = d b-> f i r s t S e t I n DB;  set;  set  = s e t -> n e x t S e t I n D B ) 
n { 

n n pg pa ( pgpa PG PKey Se tVa L i d ( s et ))  ; 

n n for  (List  = set->firstListInSet;  List;  List  = List->nextListInSet) 

n n n if  ((result  = r emo v e Key F r omL i s t ( L i s t , key))  !=  PGPERR_0K) 

n n n n return  result; 

n > 

n return  PGPERR_0K; 

> 


PGPError 

pg pR e So r t Key s ( PG PKey D B *db,  RingSet  *changed) 
{ 


□ 

n 

□ 

n 

□ 


PGPKeySet  *nn 
PGPKeyList  *n 
PGPKey  *n  n 
PGPKey  **n  n 
Longn  n a 


set; 

List; 

key; 

movedKeys  = NULL; 
numHovedKeys; 
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n 

longn  n 

0 

movedKeysAL  Loc; 

Q 

longn  n 

0 

i ; 

n 

i ntnn  n 

0 

( * c ompa r e ) ( VO i d const  *,  void  const  *); 

n 

PGPErrorn 

0 

result  = PGPERR_0K; 

n 

pgpaCpgpaPGPKeyDBVaLidCdb)); 

□ 

mo ve d Key s A 1 L 0 c = 

^ 8; 

n 

movedKeys 

= pgpALLoc(movedKeysALLoc  * sizeof(PGPKey  *)); 

Q 

■i  f 

( ! movedKeys ) 

n 

n 

Q 

result 

= PGPERR_N0MEH; 

Q 

n 

goto  done; 

n 

> 

n 

for 

(set  = 

db->firstSetInDB;  set;  set  = set->nextSetInDB) 

n 

n 

Q 

pgpaCpgpaPGPKeySetVaLidCset)); 

n 

n 

for  (List  = 

set->firstListInSet;  list;  List  = List->nextListInSet) 

a 

n 

{ 

n 

□ 

□ pgpa ( ( 

o 

n 

0 0 

pgpaPGPKeyListVaLid(List), 

a 

n 

0 0 

pg pa  A s s e r t ( L i s t ->o r de r > 0 S&  list->order  < n umCompa r e F u n c s ) ) ) 

n 

□ 

n if 

(list 

->order  !=  kPG P Any 0 r d e r i ng ) 

n 

n 

o -C 

n 

n 

0 0 

compare  = compa r e F u n c C L i s t ->o r d e r D ; 

n 

□ 

0 0 

numHovedKeys  = 0; 

n 

n 

0 0 

for 

(i  = 0;  i < List->keyCount;  i++) 

a 

□ 

0 o 

0 

if  ( r i ng S e t I s H emb e r ( c h a n g e d , L i s t -> key s C i D -> key ) ) 

n 

n 

0 0 

0 

{ 

n 

0 

0 0 

0 

n if  (numHovedKeys  >=  mo v edKey s A L L o c ) 

n 

0 

0 0 

0 

n { 

□ 

0 

0 0 

0 

n n movedKey sA L L oc  *=  2; 

n 

0 

0 0 

0 

n n result  = pg p R ea L L o c ( ( vo i d ** ) &mo ved Key s , 

n 

0 

0 0 

0 

Dnannann  mo ved Key s A 1 L o c 

□ 

0 

0 0 

0 

nnnnnnnnn*  s i zeof ( PGPKey  *)); 

n 

0 

0 0 

0 

n n if  (result) 

n 

0 

0 0 

0 

n n n goto  done ; 

n 

0 

0 o 

0 

n > 

□ 

0 

0 0 

0 

n key  = mo v ed Key s C n umHo ved Key s++]  = L i s t -> key s C i D ; 

D 

0 

0 0 

0 

B result  = r emo ve Key F r omL i s t ( L i s t , key); 

□ 

0 

0 0 

0 

B if  (result) 

Q 

0 

0 0 

0 

B B goto  done; 

□ 

0 

0 0 

0 

B i — ; 

n 

0 

0 0 

0 

> 

n 

0 

0 0 

for 

(i  = 0;  i < numHovedKeys;  i++) 

n 

0 

0 0 

{ 

Q 

0 

O 0 

0 

result  = addKeyTo Li s t ( L i s t , movedKey s C i D ) ; 

n 

0 

0 0 

0 

if  (result) 

D 

0 

0 o 

0 

B goto  done ; 

n 

0 

0 0 

> 

n 

0 

n > 

n 

0 

> 

n 

> 

done  : 

n if  CmovedKeys  !=  NULL) 
n n pgp F ree C mo vedKey s ) ; 
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n return  result; 
} 


/* 

* buiLdKeyPooL  can  be  used  to  either  add  keys  or  remove  keys,  but  not  both. 

* If  you  are  removing  keys,  pass  TRUE  for  <d e L e t e F L a g> , but  if  so  there 

* better  not  be  any  new  keys  or  else  it'LL  do  the  wrong  thing.  Likewise, 

* if  you  pass  FALSE  for  <d e L e t e F L a g> , there  better  not  be  any  keys  missing. 
*/ 


PGPE  r ro  r 

pg pBu i L d Key Poo L ( PG PKe y D B *db.  Boolean  deleteFlag) 
{ 


Q 

n 

a 

n 

□ 


Ringiterator  *b 

iter; 

RingObject  *a 

ob  j ; 

PGPKey  *b  a 

key; 

PGPKey  **B  n 

prevPtr; 

PGPErrora  a 

result  = 

PGPERR_OK; 


n iter  = r i ng I t e r C r e a t e ( pg p Ke y D BR i ng S e t ( d b ) ) ; 
n if  (iter  ==  NULL) 
n n return  PG P E R R_NOM EH ; 

□ 

n prevPtr  = &d b-> f i r s t Key I n D B ; 

D 

n while  ( r i ng I t e r N e x t 0 b j e c t C i t e r , 1)  > 0) 
n { 

n n obj  = r i n g I t e r C u r r e n t Ob j e c t ( i t e r , 1); 

n n pg p A s s e r t Ad d r Va  I i d ( ob j , Vo i d A I i g n ) ; n / * XXX  use  better  align  check  */ 

n n key  = *prevPtr; 


□ n 

a n 

n Q 

Q n 


if  (deleteFlag  SS  key) 
n while  (key->key  !=  obj) 
n { 

n n pgpa (pgpaPGPKeyVa I i d( key ) ) ; 


Q □ n 


n 


removeKeyFromLists(db,  key); 


n □ n n 
a □ n n 
□ □ □ n 


*prevPtr  = key->nextKeyInDB; 

pgpFreeKey(key); 

key  = *prevPtr; 


□ □ □ □ 

n Q □ D 

n n n > 


pgpAssert (db->numKeys  > 0); 
db->numKeys--; 


n o 
n n 
n n 
o n 

Q □ 

n n 
n n 
Q n 


if  ( ( ! key  | | key->key  !=  obj)  8S  IdeleteFlag) 
{ 

n key  = a I I o c Key ( d b ) ; 
a if  (key  ==  NULL) 
n { 

a a result  = PG P E R R_NOH E M ; 
a a break; 
a > 


a a a 
a a a 
n a a 


key-> ref  Count  = 0; 
key->keyDB  = db; 
key->key  = ob j ; 
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n 

Q 

n 

key->userVal  = 0; 

n 

n 

n 

key->subKeys . next 

= &key->subKeys 

r 

n 

s 

□ 

key->subKeys.prev 

= key->subKey s . 

next; 

n 

Q 

n 

key->userIDs.next 

= &key->userIDs 

/ 

n 

n 

n 

key->userIDs.prev 

= key->userIDs. 

next  ; 

□ 

n 

n 

key-> n e X t Key  I n DB  = 

*prevPtr; 

n 

□ 

n 

pgpIncKeyRefCount 

(key); 

Q 

□ 

n 

*p  revPt  r = key ; 

□ 

D 

n 

db->numKeys++; 

n 

n 

n 

addKeyToLi stsCdb, 

key); 

n 

Q 

> 

a 

n 

prevPtr  = & key->n e x t Key  I n DB; 

n 

> 

n 

/* 

Reached  end  of  RingSet 

If  we're  in 

delete  mode. 

n 

Q 

may 

still  be  trailing 

PGPKey  objects 

that  need  to 

n 

□ 

freed.  * / 

n 


n if  CdeLeteFLag)  { 


n 

key 

= *p  revPt  r; 

n 

Q 

while  (key  !=  NULL)  { 

n 

n 

pgpa(pgpaPGPKeyValid(key)); 

n 

n 

D 

r emo veKey F r omL i s t s ( d b , key); 

Q 

□ 

Q 

*prevPtr  = key->nextKeyInDB; 

D 

n 

n 

pgpFreeKey(key); 

n 

fi 

n 

key  = *prevPtr; 

n 

n 

□ 

pg p A s s e r t ( db->n umKey s > 0); 

n 

n 

n 

db->numKey s — ; 

□ 

Q 

> 

□ 

> 

Q 

* 

prevPt  r 

= NULL; 

n r i ng I t e r D e s t r oy C i t e r ) ; 

n return  result; 

} 

void 

pgpIncKeyDBRefCountlPGPKeyDB  *db) 

{ 

n pg pa  ( pg pa  PG  PKey  DB Va  I i d ( d b ) ) ; 

n db->ref Count++; 

> 

void 

pg p F r e e Key DB ( PG PKe y DB  *db) 

{ 

n pgpaCpgpaPGPKeyDBValidCdb)); 

n db->refCount — ; 

n if  ( d b-> r e f C o u n t <=  0) 
n { 

n n if  ( db-> key s By Key I D !=  NULL) 
n n { 

n n n / * 
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n tt 

n n 

n Q 

n n 

n Q 

n n 

□ n 

n n 

□ n 

n D 

n n 

□ □ 

n > 

} 


n * Move  the  refCount  up  by  2 while  we  destroy  the  keyList, 

n * so  when  pgpFreeKeyDB  is  called  from  pg p F r e e Key S e t from 

a * pgpF reeKeyLi St  below,  it  does  nothing  but  decrement  the 

n * refCount.  Unfortunately  this  is  more  of  a hack  than  I'd 

n * like.  refCounts  don't  work  all  that  well  with  cycles, 

n * / 

n db->refCount  +=  2; 
n pgpFreeKeyList(db->keysByKeyID); 
n db->refCount--; 

> 

(*db->destroy) (db) ; 
pgpKeyDBDestroyInternal  (db); 


static  Boolean 

r 00 t S e t I s M embe r ( PG PKey S e t *set,  RingObject  const  *obj) 

{ 

° pgpa ( ( 

n n pg pa PGPKey Se t Va I i d ( se t ) , 

n n pg pa  Ad d r Va I i d ( 0 b j , Vo i d A I i g n ) ) ) ; n /*  XXX  use  better  align  check  */ 

a return  r i ng S e t I s Hemb e r ( pg pKey D B R i n g S e t ( s e t -> ke y D B ) , obj); 

} 


static  void 

r 00 t S e t D e s t r oy ( PG PKey S e t *set) 

{ 

a (void)set;n  /*  Avoid  warning  */ 

> 


Boolean 

pg p Key S e t Membe r ( PG PKey S e t *set,  PGPKey  *key) 

{ 

n pgpa  ( ( 

a a pgpaPGPKeySetVa I i d ( set ) , 

n n pg pa PG PKey Va I i d ( key ) ) ) ; 

□ 

n return  ( * s e t -> i sM embe r ) ( s e t , key->key); 

> 

PGPKeySet  * 

pgpKeyDBRootSetCPGPKeyDB  *db) 

{ 

n PGPKeySet  *nn  set; 
n pgpa(pgpaPGPKeyDBValid(db)); 

/*n  set  = pg pN e w ( PG PKey S e t ) ; */ 

n set  = (PGPKeySet  * ) pg p A I I o c ( s i z e o f ( PG PKey S e t ) ) ; 
n if  (set  !=  NULL) 
n { 

a n pg p I n c Key D BR e f C oun t ( d b ) ; 

n n set->private  = NULL; 

n n set -> refCount  = 1; 

n n set->keyDB  = db; 
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□ 


n 


□ 


n 


n 


Q 


s e t ->p r e V S e t I n DB  = NULL; 
set->nextSetInDB  = db->firstSetInDB; 
if  ( s e t ->n e X t S e t I n D B ) 


n 


n 


n 


n 


set->nextSetInDB->prevSetInDB  = set; 
d b->f  i r s t S e 1 1 n DB  = set; 


Q 


n 


set->firstListInSet  = NULL; 


n n s e t -> 1 s Memb e r = roo t S e t I s Membe r ; 
n n set->destroy  = rootSetDestroy; 


n } 

n return  set; 

> 

/* 

* This  shortcut  version  will  not  work  once  we  implement  filtering,  but 

* for  now  all  keysets  are  the  same,  differing  only  in  their  keydb's. 

*/ 

PGPKeySet  * 

pgpCopyKeySet  (PGPKeySet  *set) 

{ 

n PGPKeyDBn  *db; 

n PGPKeySetn  *newset; 

n db  = set->keyDB; 
n newset  = pgpKey DBRoot Set  (db); 
n i f ( ! newset ) 

n n return  NULL; 

n newset->i sMember  = s e t -> i s Memb e r ; 
n newset->dest roy  = s e t ->d e s t r oy ; 
n return  newset; 

> 

Ri ngSet  * 

pgpKeyDBRi ngSet ( PGPKeyDB  *db) 

{ 

n pg pa ( pg pa PG PKey D BVa I i d ( d b } ) ; 

n return  (*db->getRingSet)(db); 

> 

Boolean 

pgpKeyDBIsHutable(PGPKeyDB  *db) 

{ 

n pgpa ( pgpa PGPKey DBVa I i d ( db ) ) ; 

n return  ( *db-> i s Mu t a b I e ) ( d b ) ; 

} 

Boo  lean 

pgpKeyDBIsDi  rty(PGPKeyDB  *db) 

{ 

n pgpa(pgpaPGPKeyDBValid(db)); 

n return  ( *d b-> i s D i r t y ) ( d b ) ; 

} 


/* 
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* Call  this  when  we  have  made  a change  to  the  keys  in  the  changedkeys  set, 

* to  force  those  keys  to  be  resorted  in  all  Lists  depending  on  the  db 
*/ 

PGPError 

p g p Key DBC h a n g ed ( PG PKey D B *db,  RingSet  * c h a n g e d key s ) 

{ 

n return  ( *d b-> c h a n g e d ) ( d b , changedkeys); 

> 

PGPError 

pgpCommi tKeyDBC PGPKeyDB  *db) 

{ 

a RingSetnn  *rset; 

n PGPErrorn  q error; 

n intnn  n n count; 

n pg pa ( pg pa PG PKey DB Va L i d ( d b ) ) ; 

n rset  = pg pKey DBR i n g S e t (db); 
n if  (!rset) 

n n return  PG P E R R_N OM E M ; 

n /*  XXX  This  can  take  a while,  need  a progress  bar?  */ 
n error  = r i ng Poo L C h e c k (rset,  rset,  0,  0,  0); 
n if  (error) 

n a return  error; 

count  = ringHnt  (rset,  0,  pgpGetTime()); 
a if  (count  < 0) 

n n return  (PGPError)  count; 

n return  ( *d b-> c omm i t ) ( d b ) ; 

> 

PGPError 

pgpCheckKeyDB  (PGPKeyDB  *db) 

{ 

n RingSet  *rset; 

n pg pa ( pg pa PG PKey DB Va L i d ( d b ) ) ; 

Q 

n rset  = pg p Key DB R i ng S e t (db); 
n if  (!rset) 

n n return  PG P E R R_ NOH EM ; 

n /*  XXX  This  can  take  a while,  need  a progress  bar?  */ 

n return  ringPooLCheck  (rset,  rset,  1,  0,  0); 

} 


PGPError 

pg p Re ve r t Key D B ( PG PKe y DB  *db) 

{ 

n pgpa(pgpaPGPKeyDBVaLid(db)); 

n return  ( *db-> r e ve r t ) ( d b ) ; 

> 

PGPError 

pg p R e L oa d Key D B ( PG PKe y DB  *db) 

{ 

a pg pa ( pg pa PG PKey DB V a L i d ( d b ) ) ; 
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n return  ( *db-> r e L oa d ) ( d b ) ; 

> 

PGPError 

pgpCommitKeyRingChangesCPGPKeySet  *keys) 

{ 

a pgpa(pgpaPGPKeySetValid(keys)); 

n return  pgpConiniitKeyDB(keys->keyDB); 

} 

PGPError 

pgpRevertKeyRingChangesCPGPKeySet  *keys) 

{ 

n pgpa(pgpaPGPKeySetVaLid(keys)); 

n return  pg pRe ve r t Key DB ( key s -> ke y DB  ) ; 

> 

/*  Check  all  sigs  in  keyset  */ 

PGPError 

pg p C h e c kKey R i ng C e r t i f i ca t e s (PGPKeySet  *keys) 

{ 

n return  pg pC h e c kKey DB  ( key s-> key DB  ) ; 

} 

PGPError 

pgpReloadKeyRingsCPGPKeySet  *keys) 

{ 

n pgpaCpgpaPGPKeySetVaLidCkeys)); 

n return  pgpRe L oa dKey DB ( key s->key DB ) ; 

} 

void 

pgpIncKeySetRefCountCPGPKeySet  *keys) 

{ 

n pgpaCpgpaPGPKeySetVaLidCkeys)); 

n keys->refCount++; 

> 

PGPKeySet  * 
pgpNewKeySet  C ) 

{ 

o PGPKeyDBn  *memdb; 

n PGPKeySetn  *set; 

n memdb  = pg p Key DBC r ea t e C ) ; 
n i f C ! memdb ) 

n n return  NULL; 

n set  = pg pKey DBRoo t S e t Cmemdb); 
n pg p F r eeKey DB C memd b ) ; 
n return  set; 

} 

PGPKeySet  * 
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pg pN e w S i ng L e t o n Ke y S e t (PGPKey  *key) 


n PGPKeyDBn 

n PGPKeySetn 

n RingSetnn 

a RingSetnn 

n PGPErrorn  n 


*memdb ; 

*set  = NULL; 

* r s e t ; 

*tmpset  = NULL; 
error; 


n memdb  = pgpKeyDBCreateC); 
n i f ( ! memdb ) 

n n return  NULL; 

n rset  = pg p Ke y D B R i ng S e t ( key-> key D B ) ; 
n if  (!rset) 

n n goto  done; 

n error  = pgpCopyKey  (rset,  key->key,  Stmpset); 

n if  (error) 

n n goto  done; 

n error  = pg p Ad d 0 b j e c t s (memdb,  tmpset); 
n if  (error) 

n n goto  done; 

n set  = pgpKeyDBRootSet  (memdb); 
done  : 

n if  (tmpset) 

n n ri ngSet Dest roy  (tmpset); 

n pgpFreeKeyDB(memdb); 
n return  set; 

} 


/*  Add  all  the  objects  in  the  second  key  set  into  the  first.  */ 
PGPError 

pgpAddKeys  (PGPKeySet  *set,  PGPKeySet  *keysToAdd) 

{ 


Q 

n 

a 

n 

□ 

n 


PGPKeyLi stn 
PGPKeyltern 
RingSetnn 
PGPKeyn  n 
Ri ngSetnn 
PGPErrorn  n 


*kLadd  = NULL; 
*kiadd  = NULL; 
*tmpset  = NULL; 
*key; 

*srcset; 

error  = PGPERR_OK; 


n kLadd  = pgpOrderKeySet  (keysToAdd,  kPGPAnyOrdering); 
n i f ( ! kladd)  ( 
n n error  = PG P E RR_N 0« EH ; 
n n goto  err; 


n 

n 

} 

kiadd  = pg p N e wKey I t e r (kladd); 

n 

i f 

( ! ki add  ) { 

Q 

n 

error  = PG P E R R_NOM E M ; 

Q 

n 

goto  err; 

n 

n 

} 

while  ((key  = pgpKey I t e rNext  (kiadd))  != 

0)  { 

Q 

Q 

srcset  = pg pKey DB R i ng S e t (key->keyDB) 

/ 

n 

n 

if  (Isrcset)  ( 

□ 

n 

n error  = PGPERR_NOMEM; 

n 

n 

n goto  err; 

□ 

n 

} 

n 

n 

error  = pgpCopyKey  (srcset,  key->key. 

&tmpset) 
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n 

n 

if  (error) 

n 

n 

n goto  err; 

n 

□ 

error  = pgp AddOb j e c t s (s 

Q 

n 

if  (error) 

Q 

n 

n goto  err; 

n 

B 

ringSetDestroy 

(tmpset); 

n 

B 

tmpset  = NULL; 

n 

> 

err; 

n 

i f 

(tmpset ) 

Q 

B 

ringSetDestroy 

(tmpset); 

n 

i f 

( k i a d d ) 

n 

B 

pgpFreeKeylter 

(kiadd); 

□ 

i f 

(kladd) 

D 

B 

pgpF  reeKeyLi st 

(kladd); 

n 

return  error; 

tmpset ); 


/*  Remove  aLL  objects  in  the  second  set  from  the  first  */ 
PGPError 

pg p R emo V e Key s (PGPKeySet  *set,  PGPKeySet  *key sToRemove ) 

{ 


□ 

n 

□ 

n 

n 


PGPKeyLi stn 
PGPKeyltern 
PGPKeyn  n 
RingObjectn 
PGPErrorn  n 


*kLrem  = NULL; 
*kirem  = NULL; 

*key  = NULL; 

*keyobj  = NULL; 
error  = PGPERR_0K; 


B 

kirem  = pg pO r d e r Key S e t ( key sToRemove, 

kPGPAnyOrdei 

B 

i f 

(Iklrem)  { 

B 

B 

error  = PGPERR_N0MEM; 

B 

B 

goto  err; 

B 

> 

B 

kirem  = pgpNewKeylter  (kirem); 

B 

i f 

(Ikirem)  { 

B 

B 

error  = PGPERR_N0HEM; 

B 

B 

goto  err; 

B 

> 

B 

while  ((key  = pg pKey I t e r N e x t (kirem)) 

!=  0)  { 

B 

B 

keyobj  = key->key; 

B 

B 

error  = pg pRemo veOb j e c t (set->keyDB,  keyobj); 

B 

B 

if  (error) 

B 

B 

n goto  err; 

B 

> 

err: 

n if  (kirem) 

n n pgp F r eeKey I t e r (kirem); 
n if  ( k L rem) 

n n pgp F reeKey Li s t (kirem); 
n return  error; 

> 


void 


pgpFreeKeySet(PGPKeySet 


♦keys) 
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n pgpa  ( pgpa PGPKey Se t Va L i d ( key s ) ) ; 

n keys->refCount — ; 

a if  ( key s-> r e f C ou n t <=  0) 
n { 

n n (*keys->destroy)(keys); 

a n if  (keys->prevSetInDB) 

n n n k e y s -> p r e V S e t I n D B-> n e X t S e t I n D B = key s->n e x t S e t I n DB ; 

n n else 

n n n key s-> key DB->f i r s t S e t I n DB  = key s ->n ex t S e t I n DB ; 

n n if  C key s ->n ex t S e t I n DB ) 

n n n keys->nextSetInDB->prevSetInDB  = keys->prevSetInDB; 

n n pg p A s s e r t ( key s -> f i r s t L i s 1 1 n S e t ==  NULL); 

a n pgpFreeKeyDB  ( key s-> key DB ) ; 
n n pgpFree  (keys); 

n } 

} 

Boolean 

pgpKeySetlsMutableCPGPKeySet  *keys) 

{ 

n pgpaCpgpaPGPKeySetValidCkeys)); 

n return  pg pKey DBI s Mu t a b L e ( key s -> key DB ) ; 

> 

Boolean 

pgpKeySetlsDi rty(PGPKeySet  *keys) 

{ 

a pgpaCpgpaPGPKeySetValidCkeys)); 

n return  pg pKey DB I s D i r t y ( key s-> key DB ) ; 

> 

/*  Defines  when  a key  should  be  expanded  or  collapsed.  If  set  to  1, 
n keys  are  expanded  by  pg pBu i I dKey Poo  I . If  set  to  2,  they  are  expanded 

n when  referenced  by  an  iterator,  or  when  the  key  refCount  is  explicitly 

n incremented  by  the  app.  */ 

//define  PG  P_  E X PAN  DKE  Y 1 

PGPE  r ro  r 

pg p I n c Key Re f C oun t ( PG PKey  *key) 

{ 

n pg pa ( pg pa  Ad d r Va I i d ( key , PGPKey)); 
n key->refCount++; 

n if  ( key->ref Count  ==  PG P_ E X P AN D KE Y ) 
n n return  pgpExpandKey  (key); 
n return  PGPERR_OK; 

} 

PGPError 

pg p F r e e Key ( PG PKey  *key) 

{ 
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n PGPErrorn  err  = PGPERR_0K; 

B pg pa ( pg pa PG PKey Va I i d ( key ) ) ; 

n if  ( key->ref Count  ==  PG P_ E X P AN D KE Y ) 
n n err  = pgpCoLlapseKey  (key); 
n key->refCount  — ; 
n if  ( key->ref Count  <=  0) 
n n dea L locKey ( key->keyDB,  key); 
n return  err; 

> 

Long 

pg p C ou nt Key s ( PG PKey S e t *keys) 

{ 

n PGPKey  *n  n key; 

n longn  n n count  = 0; 

n pgpa(pgpaPGPKeySetVaLid(keys)); 

n for  (key  = ke y s -> k ey DB->f i r s t Key  I n D B ; key;  key  = key->n e x t Key  I n DB ) 
n { 

n n pgpa ( pgpa PGPKey Va L i d ( key ))  ; 

n n if  ( pgpKey Se t Membe r ( key s , key)) 
n n n count ++; 
n } 

n return  count; 

} 

PGPKeyList  * 

pgpOrderKeySet ( PGPKeySet  *keys,  PG PKey 0 r de r i ng  order) 

{ 

n PGPKeyList  *n  List; 

n PGPKey  *n  n key; 

n Longn  n n i,  count; 

n pgpa(pgpaPGPKeySetVaLid(keys)); 

/*B  List  = pg pN e w ( PG PKey L i s t ) ; */ 

B List  = (PGPKeyList  *)pgpALLoc(sizeof(PGPKeyList)); 
n i f ( L i St  ==  NULL) 
n n return  NULL; 

n L i st->keyCount  = count  = pg p C oun t Key s ( ke y s ) ; 
n List->keys  = pgpA L L oc ( count  * s i zeof ( PGPKey  *)); 
n if  (List->keys  ==  NULL) 
n { 

n n pgpFree(List); 

n a return  NULL; 

n } 

n 

n List->refCount  = 1; 

B List->keySet  = keys; 

n List->order  = order; 

n L i s t ->p r e V Li s 1 1 n S e t = NULL; 

B L i s t ->ne X t Li s 1 1 n S e t = key s -> f i r s t L i s 1 1 n S e t ; 
n key s->f i r s t Li s t I nS e t = List; 
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n L i s t->f  i r s 1 1 1 e r I n Li s t = NULL; 
o pgpIncKeySetRefCount(keys); 
n i = 0; 

n for  (key  = key s-> k e y DB-> f i r s t Key  I n D B ; key;  key  = key->n e x t Key  I n D B ) 
n { 

n n pg pa ( pg pa PG PKey Va L i d ( key  ) ) ; 

n n if  ( pg pKey S e t Membe r ( key s , key)) 

n n { 

n n n pgpAssertCi  < count); 

n n H List->keysCi++!]  = key; 

n n } 

n > 

n pgpAssertCi  ==  count); 

n s o r t Key L i s t ( L i s t ) ; 

n return  List; 

> 

void 

pgpIncKeyListRefCountCPGPKeyList  *List) 

{ 

n pgpaCpgpaPGPKeyListVaLidCList)); 

a I i st->ref Count  + + ; 

> 

void 

pg p F r e e Key Li s t ( PG PKey L i s t *List) 

{ 

n pgpaCpgpaPGPKeyListVaLidCList)); 

n L i s t -> r e f C o u n t ; 

n if  ( L i st->ref Count  <=  0) 
n { 

n B if  ( L i s t ->p r e V L i s 1 1 n S e t ) 

n B B L i s t ->p r e V L i s t I n S e t ->nex t L i s t I n S e t = L i s t ->nex t L i s t I n S e t ; 

B B e L se 

B B B L i s t -> key S e t ->f i r s t L i s t I n S e t = L i s t ->nex t L i s t I n S e t ; 

B B if  ( L i s t ->n ex t L i s 1 1 n S e t ) 

B B B L i s t ->n e X t L i s 1 1 n S e t ->p r e V L i s 1 1 n S e t = L i s t ->p r e v Li s 1 1 n S e t ; 

B B pg p A s s e r t ( L i s t -> f i r s t I t e r I n L i s t ==  NULL); 

B B pgpFree(List->keys); 

B B pgp F r eeKey Se t ( L i s t-> key Se t ) ; 

B B pgpFreeCList); 

B > 

} 

PGPKey  * 

pg pG e t Key By Key  I D ( PG PKey S e t *keys,  byte  *keyID,  size_t  keyIDLength) 

{ 

B PGPKeyDB  *b  db; 

B LongB  B Lo; 

B LongB  B hi; 
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n 

1 ongn 

n 

i ; 

Q 

PGPKey 

* * n 

keyArray; 

n 

si z e_t  n 

n 

len; 

□ 

ucha  rn 

n 

keyIDAC8D; 

o 

u c h a r n 

n 

keyIDBC8D; 

Q 

i n t nn 

D 

compari son; 

Q 

pgpa  ( ( 

n n pgpaPGPKeySetVa L i d ( keys ) , 
n n pg pa  Add r Va L 1 d C key  I D , byte), 

n n pg pa  A s s e r t C key  I D Le ng t h ==  8))); 

n ( VO i d ) key  I D Le n g t h ; n n /*  Avoid  warning  */ 

n db  = keys->keyDB; 


n if  ( d b-> key s By Key  I D ==  NULL) 
n { 

a n PGPKeySet  *nn  rootSet; 


n n if  ((rootSet  = pg pKey DB Roo t S e t ( db ) ) !=  NULL) 

D □ { 

n n n d b-> key sBy Key I D = pg pO r de r Key S e t ( roo t S e t , kPG PKe y I DO r d e r i n g ) ; 

n n n /*  rootSet  will  stick  around  until  the  keylist  is  freed  */ 

n n n pgpFreeKeySet(rootSet); 


n □ 

□ tt 

a □ 

a D 

n n 

n n 

D n 

n n 

D n 

n □ 

n n 

□ □ 

n } 


n / * 

n * Undo  the  additional  refCount  created  by  the  existence  of 

n * rootSet.  Otherwise  the  keyDB  will  never  be  freed  because 

n * of  the  cycle  in  the  reference  graph.  When  the  keyDB  is 

n * actually  freed,  if  keysByKeylD  exists,  refCount  will  be 

n * incremented  again  before  freeing  keysByKeylD. 

n * / 

n if  ( db-> key sBy Key I D !=  NULL) 
n n d b-> r e f C ou n t 

} 

if  (db->keysByKeyID  ==  NULL) 
n return  NULL; 


n pgpa ( ( 

a n pg pa PG PKey L i s t Va I i d ( db-> key sBy Key I D ) , 

n a pg pa  A s s e r t ( d b-> key s By Key  I D->o r de r ==  kPG PKey I DO r d e r i ng ) ) ) ; 

n keyArray  = d b-> key s By Key  I D-> key s ; 
n pgpCopyMemoryCkeylD,  keyIDA,  8); 

n I o = 0 ; 

a hi  = d b-> key s By Key  I D-> key C o u n t ; 

n while  (lo  < hi) 
n { 

n n i=(lo+hi)/2; 

n n len  = sizeof(keylDB); 

n n pg pGe t Ke y S t r i ng ( key A r r ay C i 3 , kPGPKey P r opKey I d , (char  *)keyIDB,  &len); 

n n comparison  = c ompa r e Key  I D s ( key  I D A,  keyIDB); 
n n if  (comparison  > 0) 

n n n lo=i+1; 
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n n else  if  (comparison  < 0) 
n n n h i = i ; 

n n else  if  ( pg pKey S e t Membe r ( key s , key A r ray C i 3 ) ) 

n n n return  key A r r a y C i ] ; 

n n else 

a a n break; 

n } 

n return  NULL; 

> 

#if  DEBUGn  /*  C */ 

n Boolean 

pgpaInternalPGPKeyDBValidC 
n pgpa C a I I P r e f i X De f , 
n PGPKeyDB  const  *n  keyDB, 

n char  const  *n  n varName) 

{ 

n p g pa  Add r Va I i d ( key DB,  PGPKeyDB); 

a p g p a F a i 1 1 f C key DB-> r e f C o u n t <=  0,  ( pg pa Fm t P r e f i x , "refCount  <=  0")); 

n pg pa Fm t M s g ( ( pg pa Fm t P r e f i X , 

a a n " pg pa PG PKey DB Va I i d failed  on  %s  (%p)",  varName,  keyDB)); 

n return  pgpaFailed; 

} 

n Boolean 

pgpainterna IPGPKeySetVa lid( 
n pgpaCa  I IPref i xDef , 
n PGPKeySet  const  *n  keySet, 

n char  const  *n  n varName) 

{ 

n p g pa  Add r Va  I i d ( key S e t , PGPKeySet); 

n pgpaFailIf(keySet->refCount  <=  0,  (pgpaFmtPrefix,  "refCount  <=  0")); 
n pgpa Fmt Msg C ( pgpa Fmt Pref i X, 

n n n " pg pa PG PKey S e t Va I i d failed  on  Zs  (Zp)",  varName,  keySet)); 

n return  pgpaFailed; 

> 

a Boolean 

pgpaInternalPGPKeyListValidC 
n pg  pa  C a I I P r e f i X D e f , 

a PGPKeyList  const  *n  keyList, 

a char  const  *n  n varName) 

{ 

a pg pa  Add r Va  I i d ( key  Li s t , PGPKeyList); 

n pg pa F a i 1 1 f ( key L i s t -> r e f C o un t <=  0,  (pgpaFmtPrefix,  "refCount  <=  0")); 
n pgpa Fmt Msg (( pgpa Fmt P ref i X, 

a n n "pgpaPGPKeyListValid  failed  on  Zs  (Zp)",  varName,  keyList)); 

n return  pgpaFailed; 

> 

B Boolean 

pgpaInternalPGPKeyIterValid( 
n pg  pa  Ca  I I P r ef  i xDe  f , 
n PGPKeylter  const  *n  keylter, 
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B char  const  *n  n varName) 

{ 

n pgpaAddrValidCkeylter,  PGPKeylter); 
n pgpa Fmt Msg ( ( pgpa Fmt Pr ef i X , 

n n n " pg p a P G P Ke y I t e r V a L i d failed  on  %s  (%p)",  varName,  keylter)); 

n return  pgpaFailed; 

> 

n Boolean 

pgpalnternalPGPKeyValidl 
n pgpaCa I IPref i xDef , 
n PGPKey  const  *n  n key, 

n char  const  *n  n varName) 

{ 

a pgpa Add rVa I i d ( key,  PGPKey); 

n pgpa Fa i I I f ( key-> r ef Coun t <=  0,  ( pg pa F m t P r e f i x , "refCount  <=  0")); 

n pg pa Fm t H s g ( ( pg pa Fm t P r e f i X , 

n n n "pgpaPGPKeyValid  failed  on  %s  (%p)",  varName,  key)); 

a return  pgpaFailed; 

} 

n Boolean 

pgpaInternalPGPSubKeyValidC 
n pgpa Ca  I I Pref i X Def , 
a PGPSubKey  const  *n  subKey, 

n char  const  *n  n varName) 

{ 

n pg pa  Add r Va I i d ( s u bKey , PGPSubKey); 

/*n  pgpa Fa i I I f ( subKey-> ref Coun t <=  0,  ( pg pa Fm t P r e f i x , "refCount  <=  0"));n  */ 

n pgpa Fmt Msg (( pg pa Fmt Pref i X, 

n n n " pg pa PG PS u bKey Va I i d failed  on  %s  (%p)",  varName,  subKey)); 

n return  pgpaFailed; 

> 

Q Boolean 

pgpalnternalPGPUserlDValidl 
n pgpa Ca I I Pre f i X Def , 
n PGPUserlD  const  *n  userlD, 

n char  const  *n  n varName) 

{ 

a pg pa  Add r Va I i d ( u s e r I D , PGPUserlD); 

/*n  pg pa  Fa i 1 1 f C u s e r I D-> r e f C oun t <=  0,  ( pg pa Fm t P r e f i x , "refCount  <=  0"));n  */ 

n pg  pa  Fmt  Msg  ( ( pg  pa  Fmt  P r e f i X , 

n n n "pgpaPGPUserlDValid  failed  on  %s  (%p)",  varName,  userlD)); 

n return  pgpaFailed; 

} 

n Boolean 

pgpalnternalPGPCertValidl 


n 

pgpaCallPrefixDef, 

n 

PGPCert  const  *nn 

cert. 

n 

r 

char  const  *n  n 

va  rName ) 

\ 

a 

pgpaAddrValidCcert, 

PGPCert ) ; 
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/*n  pg p a F a i L I f ( c e r t -> r e f C o u n t <=  0,  ( pg pa Fm t P r e f i x , "refCount  <=  0"));  n*/ 
n pg  pa  Fm  t M sg  ( C pg  pa  Fm  t P r e f i X , 

n n n " pg pa PG P C e r t Va L i d failed  on  %s  (%p)",  varName,  cert)); 

n return  pgpaFaiLed; 

> 

#endif  /*  ] DEBUG  */ 

/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpKeyUpd.c  --  Functions  to  update  sub-objects  of  keys 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpKeyUpd . c,v  1.22.2.1  1997/06/07  09:50:28  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#incLude  "pgpKDBint.h" 

^include  "pgpDebug.h" 

#incLude  "pgpRngPub.h" 

//include  "pgpSigSpec.h" 


static  PGPUserlD  * 
alLocUserlD  (PGPKeyDB  *keyDB) 

{ 

PGPUserlDn  *userid; 

if  ( key D B->f i r s t F r e e U s e r I D !=  NULL)  { 
userid  = keyDB->firstFreeUserID; 
key DB->f i r s t F r eeUse r I D = u s e r i d->n ex t ; 

} 

else 

userid  = memPooLNew  ( & key D B-> key Poo L , PGPUserlD); 
return  userid; 

> 


static  PGPSubKey  * 
alLocSubKey  (PGPKeyDB  *keyDB) 

{ 

PGPSubKeyn  *subkey; 

if  ( key DB->f i r s t F r e e S u bKey  !=  NULL)  ( 
subkey  = key DB-> f i r s t F r ee S u bKey ; 
key DB-> f i r s t F r e e S u bKey  = s u b key->n e x t ; 

> 

else 

subkey  = memPooLNew  ( & ke y DB-> key Poo L , PGPSubKey); 
return  subkey; 

> 


static  PGPCert  * 
alLocCert  (PGPKeyDB  *keyDB) 

{ 

PGPCert nn  *cert; 

if  ( key DB-> f i r s t F r e e C e r t !=  NULL)  ( 
cert  = key D B-> f i r s t F r e e C e r t ; 
n key D B-> f i r s t F r e e C e r t = cert->next; 

} 
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else 

cert  = memPooLNew  ( & ke y DB-> key  Poo L , PGPCert); 
return  cert; 


/*  Remove  the  PGPUserlD  from  its  doubly  Linked  List  and 
add  it  to  the  keydb  free  List.  If  it  has  PGPCerts 
attached,  deallocate  them  also.  */ 


void 

pg p D e a L L o c U s e r I D (PGPUserlD  *userid) 

{ 

n pg  pa  ( pg  pa  A s s e r t ( u s e r i d->  r e f C ou  n t ==  0)); 

n u s e r i d->p r e v->n e X t = userid->next; 

u s e r i d-> n ex t ->p r e V = u s e r i d->p r e v ; 

userid->next  = u s e r i d-> key-> key DB->f i r s t F r e e U s e r I D ; 
u se r i d-> key-> key DB->f i r s t F r ee U s e r I D = userid; 

/*  Free  subordinate  certs  */ 

while  ( u s e r i d->ce r t s . nex t !=  8u s e r i d-> c e r t s ) 

pg p D ea L I o c C e r t ((PGPCert  *)  use r i d->ce rt s . next ) ; 

> 

/*  Remove  a subkey  from  its  doubly  linked  list  */ 
void 

pg p D e a L L o c S u b Key  (PGPSubKey  *subkey) 

{ 

n pg  pa  ( pg  pa  A s s e r t ( s u b key->  r e f C oun  t ==  0)); 

n s u b key->p r e v->n e X t = s u b key->ne x t ; 

s u b key->n e X t -> p r e V = s u b key->p r e v ; 

subkey->next  = subkey->key->keyDB->firstFreeSubKey; 
s u b key-> key-> key DB->f i r s t F r e e S u bKey  = subkey; 

} 

/*  Remove  the  PGPCert  from  its  doubly  Linked  list  and 
add  it  to  the  keydb  free  List  */ 


void 

pgpDea L LocCert  (PGPCert  *cert) 

{ 

n pgpa(pgpaAssert(cert->refCount  ==  0)); 
c e r t ->p r e v->nex t = cert->next; 
c e r t ->n e X t ->p r e V = cert->prev; 
n if  (cert->type  ==  uidcert)  C 

n cert->next  = c e r t ->up . u s e r I D-> key-> key DB-> f i r s t F r ee C e r t ; 

n n c e r t ->up . use r I D-> key->key DB->f i r s t F ree Ce r t = cert; 

n > 

a else  ( 

n /*  no  key  certificates  for  now  */ 

n pgpAssert  (0); 

n } 

> 


static  PGPError 

c r ea t e Ne wUs e r I D (PGPKey  *key,  PGPUserlD  *prev,  union  RingObject  *nameobj) 
{ 
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PGPUserlDn  n *newuid  = NULL; 


newuid  = aLLocUserlD  ( key-> key DB ) ; 
if  (Ineuuid) 

return  PGPERR_NOHEH; 


> 


newuid->next  = prev->next; 

newuid->prev  = n e wu i d->ne x t ->p r e v ; 

n e wu i d->nex t ->p r e V = newuid; 

n euu i d->p r e v->n ex t = newuid; 

n e wu i d-> c e r t s . n e X t = &ne wu i d-> c e r t s ; 

n e wu i d->ce r t s . p r ev  = newui d->certs . next 

ne wu i d->u s e r I D = nameobj; 

newuid->key  = key; 

n e wu i d-> r e f C ou n t = 0; 

n e wu i d-> r emo ved  = 0; 

newu i d->use rVa L = 0; 

return  PGPERR_0K; 


static  PGPError 

c r ea t e N e wU i d C e r t (PGPUserlD  *userid,  PGPCert  *prev,  union  RingObject  *sigobj) 
{ 

PGPCertn*newcert  = NULL; 

newcert  = aLLocCert  C u s e r i d-> key-> key DB ) ; 
if  ( ! newce  rt ) 

return  PGPERR_NOMEH; 

newcert->next  = prev->next; 
n e w c e r t ->p r e V = newcert->next->prev; 
n e w c e r t ->ne X t ->p r e V = newcert; 
newcert->prev->next  = newcert; 
n n e w c e r t -> t y pe  = uidcert; 

n e w c e r t ->c e r t = sigobj; 
newc e r t->up . use r I D = userid; 
ne w c e r t -> r e f Cou n t = 0; 
newcert -> re mo ved  = 0; 
ne w c e r t ->u s e rVa L = 0; 
return  PGPERR_0K; 

} 


static  PGPError 

c r e a t e N e wS ubKey  (PGPKey  *key,  PGPSubKey  *prev,  union  RingObject  *subkeyobj) 
{ 

PGPSubKeyn  *newsubkey  = NULL; 

newsubkey  = aLLocSubKey  ( key-> key DB ) ; 
if  (Inewsubkey) 

return  PG P E R R_NOM EH ; 

newsubkey->next  = prev->next; 
newsubkey->prev  = newsubkey->next->prev; 
ne w s u b key->n e X t ->p r e V = newsubkey; 
ne w s u b key->p r e v->n ex t = newsubkey; 
n e w s u b key-> s u bKey  = subkeyobj; 
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newsubkey->key  = key; 
n e w s u b key-> r e f C o u n t = 0; 
newsubkey->removed  = 0; 
n e w s u b ke y-> u s e r Va L = 0; 
return  PGPERR_0K; 


/*  Expand  the  sub-objects  of  the  specified  key.  This  function  should  be 
called  when  the  refCount  of  a key  goes  from  0 to  1. 

This  function  is  also  called  to  update  an  already  expanded  key  with 
new  userids  and/or  certs.  */ 


PGPError 

pgpExpandKey  (PGPKey  *key) 

{ 

PGPKeyDBn  n n *keyDB; 

struct  RingSetn  n *ringset  = NULL; 

struct  R i n g I t e r a t o r n* i t e r ; 

union  RingObjectn  *nameobj,  *sigobj,  *subkeyobj; 


PGPUse  rl Dn 

n 

□ 

*userid; 

PGPCertnn 

n 

n 

* c e r t ; 

PGPSubKey 

*subkey; 

i n t n n n 

n 

n 

si gtype; 

PGPErrorn 

Q 

n 

err  = PGPERR_0K; 

pgpaCpgpaPGPKeyVa I i d( key) ); 


keyDB  = key->keyDB; 

ringset  = pg p Key D B R i ng S e t (keyDB); 
iter  = r i n g I t e r C r e a t e (ringset); 
if  (liter) 

return  ringSetError(ringset)->error; 
if  ( r i ng I t e r See kTo  (iter,  key->key)  !=  1) 
return  PG P E R R_B A D P A R AM ; 


□ 

Q 

n 


s 


n 

Q 

n 

n 

a 

n 

n 

n 

a 

□ 

n 

n 

D 

n 

a 


/*  Expand  subkeys  */ 

subkey  = (PGPSubKey  *)  key->subKey s . next  ; 

while  (subkey  !=  (PGPSubKey  *)  & key-> s u bKey s &S  s ub key-> r emo ve d ) 
subkey  = s u b key->nex t ; 

while  ((err  = r i ng I t e r Nex t 0 b j e c t (iter,  2))  > 0)  { 
subkeyobj  = r i ng I t e r C u r r e n t 0 b j e c t (iter,  2); 
n if  ( r i ngOb j e c t Type  (subkeyobj)  !=  R I NGT Y P E_KE Y ) 
n n continue;  /*  secobj  or  nameobj  */ 

n if  (subkey  ==  (PGPSubKey  *)  & ke y-> s u bKey s | | 

n n subkeyobj  !=  s ub key-> s u b Key ) { /*  not  found  */ 

n n err  = c r ea t e N e w S ub Key  (key,  s u b ke y->p r e v , subkeyobj); 
n n if  (err) 

□ a □ goto  cleanup; 

n } 

n else  { /*  found  */ 

n n subkey  = subkey->next; 

n n while  (subkey  !=  (PGPSubKey  *)  & k ey-> s u b Key s S&  subkey->removed ) 
n n n subkey  = s ub key->n e x t ; 
n } 

} 

r i ng I t e r R e w i n d (iter,  2);  /*  rewind  to  find  names  */ 
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/*  Expand  UserlDs  */ 

userid  = (PGPUserlD  *)  key->u s e r I D s . n e x t ; 

whiLe  (userid  !=  (PGPUserlD  *)  & key->u s e r I D s &&  u s e r i d-> r emo ved ) 
n userid  = u s e r i d->n e x t ; 

while  ((err  = r i ng I t e r N ex t 0 b j e c t (iter,  2))  > 0)  ( 
nameobj  = r i n g I t e r C u r r e n t Ob j e c t (iter,  2); 
n if  ( r i ng Ob j e c t Ty p e (nameobj)  !=  R I NGT Y P E_N AM E ) 

n n continue;  /*  secobj  or  subkey  */ 

n if  (userid  ==  (PGPUserlD  *)  & key->u s e r I D s || 
n n nameobj  !=  u s e r i d->u  s e r I D ) ( /*  not  found  */ 

n n err  = c r e a t e N e wU s e r I D (key,  u s e r i d-> p r e v,  nameobj); 
n n if  (err) 

Q n n goto  cleanup; 

n > 

B else{  /*found*/ 

B B userid  = u s e r i d->n e x t ; 

n B while  (userid  !=  (PGPUserlD  *)  & key-> u s e r I D s SS  u s e r i d-> r emo ved ) 
B B a userid  = userid->next; 

n } 


/*  Expand  certifications  on  UserlD  ( u s e r i d->p r e v ) */ 
cert  = (PGPCert  *)  u s e r i d->p r e v-> c e r t s . nex t ; 

while  (cert  !=  (PGPCert  *)  8u s e r i d->p r e v-> c e r t s &&  c e r t -> r emo ve d ) 
n cert  = cert->next; 

while  ((err  = r i ng I t e r N e x t 0 b j e c t (iter,  3))  > 0)  { 
sigobj  = ringIterCurrentObject  (iter,  3); 
pgpAssert  ( r i ngOb j e c t Ty pe  (sigobj)  ==  R I NGT YPE_ S I G ) ; 
sigtype  = ringSigType  (ringset,  sigobj); 
if  (sigtype  < PG P_ S I GT Y PE_KE Y_G E N E R I C || 

B sigtype  > PG P_ S I GT Y PE_KE Y_P0 S I T I V E ) 
n continue; 

if  (cert  ==  (PGPCert  *)  &u s e r i d->p r e v-> c e r t s || 
n sigobj  !=  cert->cert)  C /*  not  found  */ 

B err  = c r ea t e N e wU i d C e r t ( use r i d->p rev,  cert->prev,  sigobj); 
B if  (err) 

B B goto  c leanup; 

> 

else  { 


cert  = cert->next; 

while  (cert  !=  (PGPCert  *)  &u s e r i d->p r e v-> c e r t s 8S 
B c e r t -> r emo ve d ) 

B cert  = cert->next; 


cleanup: 

if  (iter) 

r i ng I t e r D e s t r oy  (iter); 
return  err; 


/*  Collapse  the  expanded  subobjects.  Refcount  of  all  subobjects 
B must  be  zero.  */ 

PGPError 

pg p C o I I a p s e Key  (PGPKey  *key) 
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{ 

pgpa(pgpaAddrVaLid(key,  PGPKey)); 

n while  ( ke y-> s u b Key s . n e X t !=  & key->s u bKey s ) 
n pgpDea L LocSubKey  ((PGPSubKey  *)  key-> s u b Key s . n e x t ) ; 

while  ( key->u se r I Ds . nex t !=  8 key->u s e r I D s ) 

pg p D ea I I o c U s e r I D ((PGPUserlD  *)  key->u s e r I D s . n e x t ) ; 
return  PGPERR_0K; 

> 


/*  Remove  a RingObject  from  the  Key  Database.  */ 
PGPError 

p g p R emo veO b j e c t (PGPKeyDB  *keyDB,  union  RingObject  *obj) 
{ 


i ntnn  n 

n 

n 

type,  sigtype  = 0; 

struct  RingSetn 

□ 

*ringset; 

struct  R i n g 1 1 e r a 1 0 r n* i t e r ; 

union  RingObjectn 

*nameobj  = NULL,  *keyobj; 

PGPKeyn  n 

n 

n 

*key; 

Q 

PGPSubKey 

*subkey; 

PGPUserlDn 

n 

n 

*userid; 

PGPCertnn 

n 

n 

* c e r t ; 

Q 

i nt 

level; 

PGPErrorn 

□ 

s 

err  = PGPERR_0K; 

pgpaCpgpaPGPKeyDBValidCkeyDB)); 
type  = r i ng 0 b j e c t Ty pe  (obj); 

/*  Get  superior  RingObjects  before  deleting  the  subject  object  */ 
n ringset  = pgpKeyDBRingSet  (keyDB); 
iter  = r i n g I t e r C r e a t e (ringset); 
if  (liter) 

return  ringSetError(ringset)->error; 
level  = ringIterSeekTo  (iter,  obj); 
keyobj  = r i ng I t e r C u r r en t Ob j e c t (iter,  1); 
if  (type  ==  RINGTYPE_SIG)  ( 
n sigtype  = ringSigType  (ringset,  obj); 

nameobj  = r i ng  1 1 e r C u r r en t Ob j e c t (iter,  2); 

n > 


/* 

Remove 

from  master  ringset. 

If  it's 

still 

a membe  r of 

the 

ri ngset. 

s 

then  it 

could 

not  be  removed 

from  at 

least 

one  ringset 

that 

makes 

n 

up  the 

master 

ringset.  In  thi 

s case. 

we're 

done.  * / 

( * key DB-> r emo ve ) (keyDB,  obj); 
ringset  = pgpKeyDBRingSet  (keyDB); 
if  ( ri ngSetlsMember  (ringset,  obj)) 
return  PGPERR_OK; 

/*  Locate  PGPKey  object  */ 

key  = pg pG e t Key By R i ngOb j e c t (keyDB,  keyobj); 
if  (!key)  C 

err  = PGPERR_KEYDB_CORRUPT; 
n n goto  cleanup; 

> 
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if  (type  ==  RINGTYPE_KEY  SS  Level  ==  1) 
n n pg pBu i L d Ke y Poo L (keyDB,  1); 

n else  if  (type  ==  RINGTYPE_KEY  &&  Level  ==  2)  ( 


n n 

subkey  = (PGPSubKey  *)  ke y-> s ubKey s . n e x t ; 

/*  Search  for  the  PGPSubKey  object  that  references  obj  */ 

n n 

while  (subkey  !=  (PGPSubKey  *)  S key-> s u bKey s SS  s ub key-> s u bKey  !=  obj) 

n n 

n subkey  = subkey->next ; 

o n 

if  (subkey  !=  (PGPSubKey  *)  & key-> s ubKey s ) 

n n 

n s u b ke y-> r emo ved  = 1; 

n n 

else  { 

Q Q 

err  = PG P E R R_KE Y D B_ C 0 R RU PT ; 

n n 

n goto  cleanup; 

n □ 

> 

n > 

else  if  (type  ==  R I NGT Y PE_N A M E ) ( 


n Q 

userid  = (PGPUserlD  *)  key->userIDs.next; 

/*  Search  for  the  PGPUserlD  object  that  references  obj  */ 

n n 

while  (userid  !=  (PGPUserlD  *)  8 key->u s e r I D s 88 

n n 

n ! ( u s e r i d->u s e r I D ==  obj  88  ! u s e r i d-> r emo v e d ) ) ( 

n n 

n userid  = u s e r i d->n e x t ; 

tt  n 

> 

Q Q 

if  (userid  !=  (PGPUserlD  *)  8 key->u s e r I D s ) { 

n n 

n u s e r i d-> r emo ve d = 1; 

n Q 

n /*  Hark  all  attached  certs  as  removed  also  */ 

n a 

n for  (cert  = (PGPCert  *)  userid->certs.next;  cert  != 

a a 

n n (PGPCert  *)  8u s e r i d-> c e r t s ; 

a a 

n n cert  = cert->next) 

a a 

n n c e r t -> r emo ved  = 1; 

a a 

> 

a a 

else  { /*  not  found  */ 

a a 

n err  = PG P E RR_KE Y DB_C 0 R R U PT; 

a a 

a goto  cleanup; 

a a 

} 

n > 

else  if  (type  ==  RINGTYPE_SIG  &S  sigtype  !=  PG P_S I GT Y P E_KE Y_U I D_R E VOKE  8& 


a a 

n sigtype  !=  PG P_ S I GT Y PE_KE Y_C OH PROH I S E ) ( 

userid  = (PGPUserlD  *)  key->u s e r I D s . n ex t ; 

a a 

/*  Search  for  parent  PGPUserlD  */ 

a a 

while  (userid  !=  (PGPUserlD  *)  8 key->u s e r I D s 88 

a a 

n ! ( u s e r i d->u s e r I D ==  nameobj  88  ! u s e r i d-> remove d ) ) ( 

a a 

n userid  = use r i d->next ; 

a a 

> 

a a 

if  (userid  ==  (PGPUserlD  *)  8 key->u se r I Ds ) { 

a a 

n err  = PG P E R R_KE Y DB_ C ORRU PT ; 

a a 

n goto  c Leanup; 

a a 

> 

a a 

cert  = (PGPCert  *)  userid->certs.next; 

a a 

/*  Search  for  the  PGPCert  object  that  references  obj  */ 

a a 

while  (cert  !=  (PGPCert  *)  8u s e r i d-> c e r t s 88 

a a 

n !(cert->cert  ==  obj  88  ! c e r t -> remove d ) ) ( 

a a 

n cert  = cert->next; 

a a 

> 

a a 

if  (cert  !=  (PGPCert  *)  8u s e r i d-> c e r t s ) 

a a 

n c e r t -> r emo ve d = 1; 

a a 

else  ( /*  not  found  */ 

a a 

n err  = PGPERR_KEYDB_CORRUPT; 

a a 

n goto  cleanup; 
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n n > 

> 

n /*  Re-sort  the  keyList  */ 

n if  (type  !=  R I N GT Y P E_KE Y ) { 

n n RingSet  *changedset  = ringSetCreate  (pgpRingPooL); 

n n if  ( ! changedset ) { 

n n n err  = r i n g Poo L E r r o r ( pg p R i ng Poo L ) -> e r r o r ; 
n a a goto  cleanup; 

n n > 

n n ringSetAddObject  (changedset,  obj); 

n n err  = pg pKey D B C h a n g ed  (keyOB,  changedset); 

n n r i ng S e t De s t roy  (changedset); 

n } 
cleanup: 

if  (iter) 

ringIterDestroy  (iter); 
return  err; 

> 


/*  Add  PGPUserlD  and  PGPCert  sub-objects  attached  to  a key.  New 

objects  are  added  in  same  the  position  at  which  they  are  found  in 
the  source  RingSet.  If  the  key  being  added  does  not  exist,  it 
is  created.  Order  of  objects  in  the  RingSet  must  match  those  in 
the  PGPUserlD  and  PGPCert  list. 

Note  that  <addset>  can  contain  multiple  keys. 

*/ 

D □ n n 
PGPError 

pgpAddOb j ects  (PGPKeyDB  *keyDB,  struct  RingSet  *addset) 

{ 

union  RingObjectn  *keyobj  = NULL; 
struct  R i ng I t e r a t o r n* i t e r = NULL; 

PGPKeyn  n *key; 

PGPErrorn  n err  = PGPERR_0K; 
pgpa(pgpaPGPKeyDB\/alid(keyDB)); 

/*  Add  the  new  objects  to  the  key  database.  */ 
ri ngSet F reeze  (addset); 

( * key D B->a dd  ) (keyDB,  addset); 
err  = pg pBu i I d Key  Poo  I (keyDB,  0); 
if  (err) 

return  err; 

iter  = r i n g I t e r C r ea t e (addset); 
if  (liter) 

return  ringSetError(addset)->error; 

/*  Loop  for  multiple  keys  to  be  added  */ 
while  ((err  = r i ng  1 1 e r Ne  x t Ob  j e c t (iter,  1))  > 0 ) ■( 
keyobj  = r i ng I t e r C u r r e n t Ob j e c t (iter,  1); 
n n pgpAssert  ( r i ng Ob j e c t Ty pe  (keyobj)  ==  R I NGT Y P E_KE Y ) ; 
n n key  = pg pG e t Ke y By R i ng Ob j e c t (keyDB,  keyobj); 
n n if(!key){ 

n n n err  = PGPERR_KEYDB_CORRUPT; 
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n 

B 

B 

goto  cleanup; 

n 

B 

> 

n 

B 

/* 

i f 

key  expanded,  update  it  */ 

u 

B 

i f 

(key 

->u s e r I D s . ne X t !=  & key->use r I D s ) 

n 

B 

B 

err 

= pgpExpandKey  (key); 

s 

B 

B 

i f 

(err) 

□ 

B 

B 

n 

goto  cleanup; 

n 

B 

> 

> 

B 

/* 

Resort  as  necessary  */ 

B 

err 

= 

pgpKey DB C h a n g ed  (keyDB,  addset); 

cleanup: 

if  (iter) 

r i ng I t e r D e s t roy  (iter); 
return  err; 

} 


/* 

* Local  Variables: 

* tab-wi dth : 4 

* End: 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpMemDB.c  --  Memory-based  i mp L erne n t a t i o n of  PGPKeyDB 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpMemDB.c, V 1.14.2.1  1997/06/07  09:50:28  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end  i f 


#incLude 
#i nc  Lude 

# i n c L ude 
#i nc  Lude 
#incLude 
#i nc  Lude 

# i n c L u d e 

# i n c L u d e 


"pgpKDBint . h" 
"pgpDebug.h" 
"pgpTypes . h" 
"pgpMem. h" 
"pgpUsuaLs.h" 
"pgpEnv. h" 
"pgpMemPooL . h 
"pgpRngPub.h" 


typedef  struct  MemDB_ 

{ 

n RingSet  *n  n currentSet; 

RingSet  * frozenSet; 

} MemDB; 


static  BooLean 

memDBI sMu t a b L e ( PG PKey DB  *db) 

{ 

n (void)db;n  /*  Avoid  warning  */ 
n return  TRUE; 

} 

static  BooLean 

memD BOb j I sHu t a b L e ( PG PKey DB  *db,  RingObject  *testObj) 

{ 

n Cvoid)db;n  n /*  Avoid  warning  */ 
n ( voi d ) t es t Ob j ; n /*  Avoid  warning  */ 
n return  TRUE; 

} 

static  BooLean 

mem D B I s D i r t y ( PG PKey D B *db) 

{ 

n Cvoid)db;n  /*  Avoid  warning  */ 

n return  FALSE; 

} 

static  RingSet  * 

mem  DBG e t R i ng S e t ( PG PKey DB  *db) 

{ 

n MemDB  *nn  mdb; 

n RingSet  *newset; 

n pg pa ( pg pa PG PKey D BVa L i d ( d b ) ) ; 

n mdb  = (MemDB  *)db->private; 
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n if  ( ! mdb->f  r o z e n S e t ) -C 

a newset  = r i n g S e t C r ea t e (ringSetPool  ( md b-> c u r ren t S e t ) ) ; 

n n pgpAssert  (newset); 

n n ringSetAddSet  (newset,  nidb->currentSet); 

n n ringSetFreeze  (newset); 

n n mdb->f rozenSet  = newset; 

n } 

a return  md b-> f r o z e n S e t ; 

> 

static  PGPError 

memDBAdd ( PGPKey DB  *db,  RingSet  *toAdd) 

{ 

n HemDB  *nn  mdb; 

n pg pa  ( pg pa  PG  PKey  D B Va  L i d ( d b ) ) ; 

a mdb  = (MemDB  *)db->priwate; 
n if  ( md b-> f r o z e n S e t ) { 

a ringSetDestroy  (mdb->frozenSet); 

n n mdb->f rozenSet  = NULL; 

n } 

n return  ringSetAddSet(mdb->currentSet,  toAdd); 

} 

static  PGPError 

memo BC h a ng ed ( PG PKey DB  *db,  RingSet  * c h a ng ed ke y s ) 

{ 

n return  pgpReSortKeys  (db,  changedkeys); 

} 

static  PGPError 

memDBRemove(PGPKeyDB  *db,  RingObject  *toRemove) 

{ 

n MemDB  *nn  mdb; 

n pg pa ( pg pa PG PKe y DBVa I i d ( db  ) ) ; 

n mdb  = (HemDB  * ) d b->p r i va t e ; 
n if  ( md b-> f r o z e n S e t ) { 

n ringSetDestroy  ( md b-> f r o z en S e t ) ; 

n n mdb->f rozenSet  = NULL; 
n > 

n return  r i ng S e t RemO b j e c t ( md b-> c u r r e n t S e t , toRemove); 

} 

static  PGPError 
memDBDummy(PGPKeyDB  *db) 

{ 

n pg pa ( pg pa PG PKey DB Va I i d ( db  ) ) ; 

n (void)db;D  n /*  Avoid  warning  */ 

n return  PGPERR_OK; 

} 

static  void 

memD B D e s t r oy ( PG PKe y DB  *db) 

{ 

n MemDB  *nn  mdb; 
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n /*  Can't  assert  p g pa PG PKey D B Va L i d because  refCount  ==  0 now  */ 
n pgpaCCpgpaAddrVaMdCdb,  PGPKeyDB),pgpaAssertCdb->refCount==0))); 

n mdb  = (MemDB  *)db->private; 

n r i n g S e t D e s t r oy ( ( R i ng S e t * ) md b-> c u r r e n t S e t ) ; 
n if  ( md b-> f r o z e n S e t ) 

n ringSetDestroy  (mdb->frozenSet); 

n pgpFree(mdb); 

} 

/*  Creates  a new  empty  memory-based  key  database  */ 

PGPKeyDB  * 

pgpKeyDBCreate(void) 

n PGPKeyDB  *n  db; 

n MemDB  *nn  mdb; 

n db  = pgpKeyDBCreateInternaL(); 
n if  (db  ==  NULL) 

n n return  NULL; 

n mdb  = pg pN e u ( M emD B ) ; 

n if  (mdb  ==  NULL) 

n { 

n n pgpFree(db); 

a n return  NULL; 

n } 

a mdb->currentSet  = (void  *)ringSetCreate(pgpRingPooL); 
n mdb->f rozenSet  = NULL; 

n db->private  = mdb; 

n db->magic  = PGPKDBMEHMAGI C; 

n db->isHutable  = memDBIsMutabLe; 
n d b->ob j I s Mu t a b L e = memD BOb j I sMu t a b L e ; 

n db->isDirty  = memD B I s D i r t y ; 

n d b->g e t R i ng S e t = memD BG e t R i ng S e t ; 

n db->add  = memDBAdd; 

n db->changed  = mem DBC h a ng ed ; 

B db->remove  = memDBRemove; 

B db->commit  = memDBDummy; 

n db->revert  = memDBDummy; 

B db->reLoad  = memDBDummy; 

B db->destroy  = memDBDestroy; 

n pgpKeyDBInitlnternaL(db); 

n return  db; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpPrefMac.c  --  Access  preference  database  for  MacOS 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg p P r e f Ma c . c , V 1.14.2.9  1997/06/07  09:50:29  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 

#incLude  "MacFiLes.h" 

#incLude  " Ha c S t r i n g s . h " 

#incLude  "pgpKDBint.h" 

#incLude  "pgpEnv.h" 

#incLude  "MacFiLes.h" 

^define  kPrefHagicn  n n 0x53C3971 F 
#define  kMa j o r Pr ef Ve r s i onn  1 
^define  kH i no r P r e f Ve r s i onn  1 


typedef  struct  Ha c P r e f H ea de r 


n 

L ongn 

prefMagi c; 

n 

shortn 

majorPrefVersion; 

n 

s h 0 r t n 

minorPrefVersion; 

Q 

u c ha  r n 

dataCD; 

> MacPrefHeader; 


/*  InitiaLizer  for  the  kPG PP r e f PG Pme nuMa c App S i g n a t u r e s data  preference  */ 
static  struct  PGPmenuApps 
{ 


n 

n 

> 

n 

D 

/* 

n 

n 

D 

n 


OSTypen  creator; 
Str31n  appName; 
i n i t PG Pmenu Apps C ] = { 


{ 

' ttxt  ' , 

"\pSimpLeText"  >, 

{ 

’ MACS  ■ , 

"\pFinder"  >, 

n{ 

' CSOm' , 

"\pEudora"  I,  */ 

{ 

' MOSS  ■ , 

"\pNetscape"  >, 

{ 

'A0p3', 

"\pAmeric3  OnLine" 

{ 

’ R*ch  ■ , 

"\pBBEdit"  >, 

{ 

' MSNH ' , 

"\pHS  Internet  MaiL 

y. 


)■ 


> 


>; 


n static  OSErr 

0 pe n P r e f s F i L e ( Boo L ea n f o r W r i t i ng , short  *refNum) 
{ 


n 

u c h a r 

const 

*n 

fiLeName  = "\pPGP  Preferences"; 

n 

shortn 

n 

n 

vRefNura; 

n 

L ong  n 

Q 

n 

d i r I D ; 

n 

OSErrn 

□ 

Q 

resuLt; 

n resuLt  = F i nd PG P P r e f e r en c e s F o L d e r ( kOn Sy s t em D i s k , &vRefNum,  &dirID); 
n 

n if  (forWriting  SS  resuLt  ==  noErr) 

CnCHK:60ccac33729965505116a44cb64aa440f2b251260c8a5551afd5d99666ec64175:: 


Pretty  Good  Privacy  5.0^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


755 


pgpPrefMac.c 


n n result  = HCreateCvRefNum,  dirlD,  fileName,  'pgpK',  'pref'); 
n 

n if  (result  ==  noErr  ||  (forWriting  &&  result  ==  dupFNErr)) 
n n result  = H 0 p e n D F ( v Re f N urn,  dirlD,  fileName, 

n n n n n n forWriting  ? fsRdWrPerm  : fsRdPerm,  refNum); 
□ 

a return  result; 

} 


n PGPError 

pgpSetDefaultKeyPathlnternal(void) 


{ 


n 

Di rinfonn 

a 

pb; 

a 

Str255n  n 

H 

name; 

a 

FSSpecn  n 

a 

f s S pe  c ; 

a 

PGPFi leRef 

*n 

f i leRef; 

a 

PGPErrorn 

a 

result  = 

□ 


PGPERR_OK; 


n C opy P S t r i ng ( " \ p PG P Keyrings",  name); 

n if  ( H G e t Vo  I ( N U LL,  8pb . i o V R e f N um,  &p b . i o D r D i r I D ) !=  noErr) 

n n return  PGPERR_NO_FILE; 
n pb.ioNamePtr  = name; 
n pb . i o F D i r I nd e X = 0; 

a if  ( PBG e t C a 1 1 n f o Sy n c ( ( C I n f o PB P t r ) &pb  ) ==  noErr 
n n n n &&  ( pb . i o F I At t r i b 8 ioDirMask)) 
n { 

n n f s S p e c . V R e f N urn  = p b . i o VRe f N urn; 
n n fsSpec.parlD  = p b . i o D r D i r I D ; 
n } 

n else  if  C F i n d PG P P r e f e r e n c e s F o I d e r ( kOn S y s t em D i s k,  8 f s S pe c . v R e f N urn, 
nnnnnnnn  8f s S p e c . p a r I D ) !=  noErr) 

n n return  PG P E R R_N0_ F I LE ; 
n 


a CopyPString("\pPGP  Private  Keys",  fsSpec.name); 
n if  ((fileRef  = pg pNe w F i I e R e f F r om F S S p e c ( 8 f s S pe c ) ) ==  NULL) 
a n return  PGPERR_N0P1EM; 

a result  = pg p S e t P r e f F i I e Re f ( k PG P P r e f P r i v R i n g Re f , fileRef); 
a pgpFreeFileRef(fileRef); 

n if  (result  !=  PGPERR_0K) 

n n return  result; 

n 


n CopyPString("\pPGP  Public  Keys",  fsSpec.name); 
n if  ((fileRef  = pg pN e w F i I e Re f F r om F S S p e c ( 8f s S p e c ) ) ==  NULL) 
n n return  PGPERR_NOMEM; 

n result  = pg p S e t P r e f F i I e Re f ( k PG P P r e f Pub R i ng Re f , fileRef); 
a pg p F r e e F i I e R e f ( f i I e Re  f ) ; 

n if  (result  !=  PGPERR_0K) 

n n return  result; 

n 

n return  PGPERR_OK; 

} 


n PGPError 

pgpSetDefaultPrefsInterna I (voi d) 

{ 

n PGPErrorn  a result  = PGPERR_0K; 
n 

n result  = pg p S e t D e f a u 1 1 Key  Pa t h I n t e r n a I ( ) ; 
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n if  (result  !=  PGPERR_OK) 

n n return  result; 


result  = pgpSe t P r ef Da t a ( kPGPP r ef PGPmenuMa c AppS i gna t u r e s, 
n n n n n n (void  * ) i n i t PG Pme n u App s , 

n n n n n n s i z e o f ( i n i t PG  Pme  n u A p p s ) ) ; 

if  (result  !=  PGPERR_OK) 
n return  result; 


n return  PGPERR_OK; 

> 


n PGPError 

pgpLoadPrefsInternal(void) 

{ 


n 

s h 0 r t n n 

n 

refNum  = 0; 

n 

longn  n 

Q 

fi leSize; 

Q 

uchar  *nn 

n 

buffer  = NULL; 

n 

ucha  r *an 

n 

buf f erEnd; 

□ 

uchar  *nn 

n 

p; 

n 

HacPrefHeader 

*nheader; 

n 

Boo  1 eannn 

n 

requi red; 

n 

ushortn  n 

n 

selector; 

n 

longn  n 

□ 

longVa  1 ; 

n 

OSErrn  n 

n 

macErr; 

D 

PGPErrorn 

n 

result  = PGPERR 

pg p A s s e r t ( s i z eo f ( u c ha r ) ==  1 &&  s i z e of ( u s h o r t ) ==  2 SS  sizeof(long)  ==  4 


n n 88  kPGPPref NumFi rst  > 
n n 88  kPG PP r e f N urn  La s t < = 
n n 88  k PG PP r e f S t r La s t <= 
n n 88  kPG PP r e f Boo  I La s t < = 
n n 88  kPG PP r e f Da t a La s t = = 


0 

kPGPPrefStrFi rst 
kPGPPrefBoolFi rst 
kPGPPrefDataFi rst 
( kPGPPref DataLast  8 0x7FFF)); 


n 

Q 

D 

Q 

n 

D 

n 

n 

D 

n 

Q 

Q 

□ 

n 

n 

n 

Q 

□ 

□ 

n 

a 

□ 

n 

n 


if  ((macErr  = Ope n P r e f s F i I e ( F A LS E , 8refNum))  !=  noErr 
n n II  G e t EO F ( r e f Num,  8fileSize)  !=  noErr) 

{ 

n if  (macErr  !=  fnfErr) 
n n result  = PG PE R R_NO_ F I LE ; 
n goto  error; 

> 

if  (fileSize  < s i zeof ( Ha c P r ef H ea de r ) ) 

{ 

corrupt : 

n result  = PG P E R R_KE Y D B_ C 0 R RU PT ; 
a goto  error; 

} 

if  ((buffer  = pg pA  I I o c ( ( s i z e_t ) f i I eS i z e ) ) ==  NULL) 

{ 

n result  = PG PE R R_NOM E M ; 
n goto  error; 

> 

if  ( F S R ea d ( r e f N urn,  8fileSize,  (Ptr)buffer)  !=  noErr) 

{ 

n result  = PG P E R R_KE Y D B_ I 0 E R ROR ; 
n goto  error; 

} 
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n FSCLoseCrefNum); 
n refNum=0; 

Q 

n header  = (MacPrefHeader  *)buffer; 
n if  ( h e a d e r->p r e f Ma g i c !=  kPrefMagic 
n a a | | h e a d e r ->013  j o r P r e f Ve  r s i on  < 1 

a a a ||  h e a d e r ->m i n o r P r e f V e r s i 0 n < 1) 

n a goto  corrupt; 

a 

n if  ( h e a d e r->ma j o r P r e f V e r s i o n > kMa j o r P r e f Ve r s i on ) 
n { 

n tooNew : 

n a result  = PGPERR_KEYDB„VERSIONTOONEW; 

n a goto  error; 

H > 


a 


#if  0 

n if  ( heade r->ma j or Pref Ve rs i on  < kMa j o r P r e f Ve r s i on 
a a II  h e a d e r “>[11  i n o r P r e f V e r s i on  < kM  i no  r P r e f Ve  r s i on  ) 
a { 

a a /*  Updating  code  goes  here  after  we  bump  the  version  */ 
a > 


# e n d i f 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


bufferEnd  = buffer  + fileSize; 

p = h e a d e r->da t a ; 

while  Cp  + 2 <=  bufferEnd) 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


selector  = (pC0J  <<  8)  | pC1]; 

P +=  2; 

required  = (selector  & 0x8000); 
selector  &=  0x7FFF; 

if  (selector  >=  kPG PP r e f D a t a F i r s t ) 
i 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


/*  Data  preference  */ 
long  length; 

if  (p  + 4 > bufferEnd) 
n goto  corrupt; 

length  = (pi:0:  <<  24)  | (.pZM  « 16)  | (p:2:  <<  8)  | pCSD; 

p += 

if  (Length  <0  | | p + Length  > bufferEnd) 
n goto  corrupt; 
switch  (seLector) 

{ 

n case  kPG P P r e f Pu b R i ng Re f : 
n case  kPG P P r e f P r i v R i ng R e f : 
n case  kPG P P r e f Ra n d S e ed Da t a : 
n case  kPG P P r e f PG P key s Ma c Ma i n W i n Po s : 
n case  kPGPPref PGPappMacPri vateOata : 
n case  kPG P P r e f PG Pme n uMa c A pp S i g n a t u r e s : 

n n resuLt  = pg p S e t P r e f Da t a ( ( PG PP r e f Name  Da t a ) s e L e c t o r , 
nnnnnnnn  (char  *)p.  Length); 
n n if  (resuLt  !=  PGPERR_0K) 
n n n gotoerror; 

n n break; 

n defauLt: 
n n if  (required) 
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n 

n 

n 

B 

B 

n goto  tooNew; 

Q 

n 

n 

B 

B 

break; 

n 

n 

Q 

> 

□ 

□ 

Q 

p + 

= length; 

n 

n 

> 

n 

n 

else 

! i f 

(selector  >=  k PG P P r e f Boo  1 F i r s t ) 

n 

n 

{ 

D 

n 

n 

/* 

Boolean  preference  */ 

n 

o 

n 

i f 

(p  + 

1 > buf f erEnd) 

n 

s 

D 

B 

goto 

corrupt; 

n 

n 

n 

switch  (selector) 

n 

n 

n 

{ 

n 

a 

n 

B 

case 

kPGPPrefArmor: 

n 

n 

a 

B 

case 

kPGPPrefEncryptToSelf: 

n 

n 

n 

B 

case 

kPGPPrefCompress: 

a 

n 

n 

B 

case 

kPGPPrefHai IWordWrapEnable: 

n 

n 

n 

B 

case 

kPGPPrefHai IPassCacheEnable: 

n 

n 

Q 

B 

case 

kPGPPrefMailEncryptPGPMIHE: 

n 

n 

Q 

B 

case 

kPGPPrefMailSignPGPHIME: 

n 

n 

n 

B 

case 

kPGPPrefFastKeyGen: 

n 

n 

□ 

B 

case 

kPGPPrefSignCacheEnable: 

n 

n 

n 

B 

case 

kPGPPrefUarnOnMixRSAElGamal: 

n 

n 

□ 

B 

case 

kPGPPrefMai lEncryptDefault : 

n 

Q 

o 

B 

case 

kPGPPrefHai ISignDefault: 

n 

n 

D 

B 

case 

kPGPPrefHarginallyValidUarning: 

n 

n 

D 

B 

case 

kPGPPrefFi rstKeyGenerated: 

n 

n 

n 

B 

case 

kPGPPrefWarnOnRSARecipAndNonRSASigner: 

n 

n 

a 

B 

B 

result  = pg p S e t P r e f Boo  1 e a n ( ( PG PP r e f Na me  Boo  1 ea n ) s e 1 e c t o r , 

n 

□ 

n 

B 

fl 

n n n n n n n (pC0D  !=  0)); 

n 

D 

a 

B 

fl 

if  (result  !=  PGPERR_0K) 

Q 

n 

n 

B 

B 

n goto  error; 

n 

D 

n 

B 

fl 

break; 

n 

n 

n 

B 

default: 

n 

a 

a 

B 

fl 

if  ( requ i red ) 

n 

n 

n 

B 

fl 

n goto  tooNew; 

n 

n 

n 

B 

fl 

break; 

D 

n 

B 

> 

n 

u 

B 

P++ 

r 

n 

a 

> 

D 

a 

else 

i f 

(selector  >=  kPGPPr ef S t r F i r s t ) 

n 

n 

{ 

n 

a 

B 

/* 

String  preference  */ 

n 

n 

B 

uchar  *nn  s; 

n 

Q 

B 

n 

a 

B 

s = 

p; 

□ 

□ 

B 

while  ( s 

< buf f erEnd  &S  *s  ! = ' \0  ' ) 

a 

Q 

B 

fl 

s + + ; 

n 

D 

B 

i f 

( s > = 

bufferEnd) 

n 

a 

B 

B 

goto 

corrupt; 

D 

n 

B 

s w i 

t c h ( 

selector) 

D 

□ 

B 

{ 

n 

n 

B 

B 

case 

kPGPPref Userl D : 

n 

n 

B 

B 

case 

kPGPPref PubRi ng : 

n 

n 

B 

B 

case 

kPGPPrefPrivRing: 

n 

n 

B 

B 

case 

kPGPPrefRandSeed: 

n 

n 

B 

B 

case 

kPGPPrefLanguage: 

D 

□ 

B 

B 

case 

kPGPPrefOwnerName : 

n 

Q 

B 

B 

case 

kPGPPref CompanyName: 

CCCHK: 

0224dbbe9e633a381959cfbe110350454fddab3e4aaaad40010ecf331062d56d8:: 

Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


759 


pgpPrefMac.c 


B 

B 

B 

B 

case  k PG P P r e f L i c e n s e N umbe r : 

B 

B 

B 

B 

case  kPG P P r e f H TT PKey S e r ve r H 0 s t : 

B 

B 

B 

B 

n result  = pg p S e t P r e f S t r i ng ( ( PG P P r e f N a me S t r i n 

B 

B 

B 

B 

nnnnnnnn  (char  *)p,  s - 

B 

B 

B 

B 

a if  (result  !=  PGPERR_0K) 

B 

B 

B 

B 

n n goto  error; 

B 

B 

B 

B 

n break; 

B 

B 

B 

B 

default: 

B 

B 

B 

B 

n if  (required) 

B 

B 

B 

B 

n n goto  tooNew; 

B 

B 

B 

B 

n break; 

B 

B 

B 

> 

B 

B 

B 

P = 

s + 1 ; 

B 

B 

> 

B 

E 

e L 

s e if 

(selector  >=  kPG P P r e f N urn F i r s t ) 

B 

B 

{ 

B 

B 

B 

/* 

Number  preference  */ 

B 

B 

B 

i f 

(p  + 4 > bufferEnd) 

B 

B 

B 

B 

goto  corrupt; 

B 

B 

B 

longVal  = (pL0:  <<  24)  | (pLi:  <<  16)  | (p:2:  <<  8) 

B 

B 

B 

switch  (selector) 

B 

B 

B 

B 

B 

B 

B 

case  k PG P P r e f Ve r s i 0 n : 

B 

B 

B 

B 

case  kPG P P r e f C i p h e rN urn : 

B 

B 

B 

B 

case  kPG P P r e f H a s h N urn : 

B 

B 

B 

B 

case  k PG PP r e f C omp r e s s N urn : 

B 

B 

B 

B 

case  k PG PP r e f A rmo r L i n e s : 

B 

B 

B 

B 

case  kPGPPr ef Ce r t Dep t h : 

B 

B 

B 

B 

case  k PG PP r e f C omp r e s s Qu a 1 : 

B 

B 

B 

B 

case  k PG PP r e f Ma i 1 Wo r d W r a pW i d t h : 

B 

B 

B 

B 

case  kPGPPrefMai IPassCacheDuration: 

B 

B 

B 

B 

case  k PG P P r e f S i g n C a c h e D u ra t i on : 

B 

B 

B 

B 

case  kPGPPrefDateOfLastSplashScreen  : 

B 

B 

B 

B 

case  k PG P P r e f H TT PKey S e r ve r Po r t : 

B 

B 

B 

B 

a result  = pg p S e t P r e f N umb e r ( ( PG P P r e f Na me N umbe 

B 

B 

B 

B 

□nnnnDna  longVal); 

B 

B 

B 

B 

n if  (result  !=  PGPERR_0K) 

B 

B 

B 

B 

n n goto  error; 

B 

B 

B 

B 

n break; 

B 

B 

B 

B 

default: 

B 

B 

B 

B 

n i f ( requi red) 

B 

B 

B 

B 

n n goto  tooNew; 

B 

B 

B 

B 

n break; 

B 

fl 

B 

> 

B 

fl 

B 

P + 

= 4; 

B 

B 

> 

B 

B 

else 

B 

B 

B 

goto  corrupt; 

B 

error: 
n 


if  CrefNum  !=  0) 
n FSCLoseCrefNum); 
if  (buffer  !=  NULL) 
n pg p F r ee ( b u f f e r ) ; 
return  result; 
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n PGPError 

pgpSavePrefsInternaL(void) 

{ 


n shortn  n n refNum  = 0; 

n PGPErrorn  n result  = PGPERR_OK; 

n MacPrefHeadern  header; 
n Longn  n n size; 

n ushortn  n n selector; 

n 

n pg p As s e r t ( s i z e o f ( u c h a r ) ==  1 &&  s i z eo f ( u s h o r t ) ==  2 &&  sizeof(long)  ==  4 

n n n &8  kPG P P r e f N urn F i r s t > 0 

Q n □ S&  k PG P P r e f N urn  La s t <=  kPG PP r e f S t r F i r s t 

n n n &&  k PG P P r e f S t r La s t <=  k PG PP r e f Boo  I F i r s t 

n n n &&  kPG PP r e f Boo  I La s t <=  kPG P P r e f D a t a F i r s t 

n n n &&  kPG PP r e f Da t a La s t ==  ( k PG PP r e f D a t a La s t S 0x7FFF)); 

n 

n if  ( Open  P r e f s F i I e ( TRl)  E , SrefNum)  !=  noErr  ||  S e t E 0 F ( r e f N urn,  0)  !=  noErr) 

n { 

n n result  = PG P E R R_NO_ F I LE ; 
n n goto  error; 


a 

□ 

□ 

□ 

□ 

D 

n 

n 

□ 

□ 

□ 

□ 

□ 

n 

n 

□ 

□ 

n 

□ 

n 

□ 

a 

□ 

□ 

□ 

n 

□ 

n 

n 


> 

pgpClearHemoryCSheader,  sizeof(header)); 
header. prefHagic  = kPrefHagic; 

header. majorPrefVersion  = kMajorPrefVersion; 
h ea d e r . mi  no r P r e f Ve r s i on  = kM i no r P r e f V e r s i on ; 
size  = header. data  - (char  *)8header; 
if  ( FSWri te( ref Num,  8size,  ( P t r ) 8h ea de r ) !=  noErr) 

{ 

i o E r ro  r : 

n result  = PG PE R R_KE Y DB_ 1 0 E R RO R ; 
n goto  error; 

} 

for  (selector  = kPGPPref NumFi rst ; selector  < kPG PP r e f N umLa s t ; selector++) 

{ 

n longn  n n longVal; 

n 

n result  = pgpGetPrefNumber((PGPPrefNameNumber)selector,  8longVal); 
n if  (result  !=  PGPERR.OK) 

n n goto  error; 

n size  =2; 

n if  ( F SW r i t e ( r ef Num,  8size,  ( P t r ) 8s e I e c t o r ) !=  noErr) 
n n goto  ioError; 

n size  =4; 

n if  ( F S W r i t e ( r e f N urn,  8size,  ( P t r ) 8 I ong Va  I ) !=  noErr) 

n n goto  ioError; 

} 

for  (selector  = kPG PP r e f S t r F i r s t ; selector  < kPG PP r e f S t r La s t ; selector  + +) 


n { 

n n char*nn  n strVal; 

n n 

n n StrVal  = pg pG e t P r e f C S t r i ng C opy ( ( PG PP r e f Na me S t r i ng ) s e I e c t o r ) ; 

n n if  (strVal  ==  NULL) 


n n { 

n n n result  = PGPERR_NOMEM; 

n n n goto  error ; 

n n } 
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Q 

n 

size  = 2 ; 

S 

n 

if  ( F S W r i t e ( r ef N um. 

8si ze. 

(Ptr)8selector) 

! = noErr) 

n 

□ 

a goto  ioError; 

n 

n 

size  = strlen(strVal)  + 1; 

n 

n 

if  ( F S W r i t e ( r e f N um. 

8si ze. 

(Ptr)strVal)  != 

noErr) 

n 

□ 

n goto  ioError; 

n 

a 

pgpFree(strVal); 

n 

> 

for  (selector  = k PG P P r e f Bo o L F i r s t ; selector  < kPG P P r e f Boo  I La s t ; selector  + +) 
{ 

Booleannn  n boolVal; 
ucharn  n n theByte; 


n 
□ 

□ 

D 
n 
a 
□ 
a 
n 
□ 

D 

n 
n 
> 

for  (selector  = kPG PP r e f D a t a F i r s t ; selector  < k PG PP r e f Da t a La s t ; selector  + +) 
{ 


result  = pgpGetPrefBoolean((PGPPrefNameBoolean)selector,  SboolVal); 

if  (result  !=  PGPERR_OK) 

n goto  error; 

theByte  = boolVal  ? 0xFF  : 0; 

size  = 2 ; 

if  ( F S W r i t e ( r e f N um,  &size,  ( P t r ) 8 s e I e c t o r ) !=  noErr) 

n goto  ioError; 
size  = 1 ; 

if  ( F S W r i t e ( r e f Num,  Ssize,  ( P t r ) 8 t h e By t e ) !=  noErr) 

n goto  ioError; 


n 

□ 

char  *n  n n dataVal; 

□ 

Q 

s i 

ze_tn  n n len; 

□ 

Q 

longn  n n dataLen; 

n 

n 

n 

s 

dataVal  = pg pGe t P r e f Da t a Copy ( ( PG PP re f Name  Da t a ) se 1 e c t o r , 8len); 

□ 

n 

i f 

(dataVal  !=  NULL) 

n 

□ 

<. 

□ 

□ 

B 

size  = 2 ; 

Q 

n 

B 

if  ( F S W r i t e ( r e f Num,  8size, 

(Ptr)8selector) 

! = noErr) 

n 

□ 

B 

n goto  ioError; 

n 

n 

B 

dataLen  = len; 

Q 

n 

B 

size  = 4 ; 

n 

n 

B 

if  ( F S W r i t e ( r e f N um,  8size, 

(Ptr)8dataLen)  ! 

= noErr) 

a 

n 

B 

n goto  ioError; 

a 

B 

B 

size  = dataLen; 

n 

B 

B 

if  ( FSWri te( ref Num,  8size, 

(Ptr)dataVal)  != 

noErr) 

□ 

B 

B 

n goto  ioError; 

n 

B 

B 

pgpFree(dataVal); 

n 

B 

> 

□ 

> 

error: 

n if  (refNum  !=  0) 
n n F S C I o s e ( r e f N um ) ; 

n return  result; 

} 


/* 

* Local  Variables: 

* tab-width:  4 

* End: 
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* 

V i : 

t s = 4 

★ 

*/ 

vim: 

s i 
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/* 

* pgpPrefUnix.c  --  Access  preference  database  for  Unix  systems 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg pP r e f U n i X . c , V 1.6. 2. 7 1997/06/07  09:50:29  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 


#ifdef  HAVE_SYS_STAT_H 

#incLude  <sys/stat.h>  /*for  statC)  to  check  for  directory*/ 
# e nd i f 


L ude 

"pgpKDBint.h" 

L ude 

"pgpDebug.h" 

L ude 

"pgpEnv.h" 

L ude 

"pgpConf . h" 

L ude 

"pgpFiLeNames.h 

L ude 

"pgpUI . h" 

L ude 

"pgpErr.h" 

L ude 

"pgpPrefUnix.h" 

/*  CaLLback  function  for  probLems  reading  config  fiLe  from  pgpLoadPrefs  */ 
static  i nt 

p L pi n i t Mes sa ge  (void  *arg,  int  type,  int  msg,  unsigned  numargs,  ...) 

{ 

n int  *ui_arg;n  n /*  Parameters  for  caLLbacks  */ 

a ui_arg  = (int  *)  arg; 

n (void)type; 
n (void)msg; 
n (void)numargs; 

n ++(*ui_arg);n  n a n /*  Just  count  messages  for  now  */ 

n return  0; 

} 


PGPE  r ro  r 

pgpSetDefauLtPrefsInternaL  (void) 
{ 

a return  PGPERR_0K; 

} 


PGPError 

pgpSetDefauLtKeyPathInternaL  (void) 

{ 

a return  PGPERR_0K; 

} 

/*  Read  preferences  and  put  them  into  the  environment  */ 

PGPError 

pg p Loa d P r e f s I n t e r n a L (void) 
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{ 

n cha  rn  n n 

n char  constn  n 

n PgpUICb 
n i n t 


*fn,  *confdir; 
*pc,  *pgppath; 
ui  ; 

u i _a  rg  ; 


n /*  Try  to  find  the  PGPPATH  */ 

a if  (Cpc  = getenv  ("PGPPATH"))  !=  NULL)  { 

a n pgpenvSetSt  ri  ng  (pgpEnv,  PG P E N\/_ PG PP AT H , pc, 

n n n n PGPENV_PRI_PUBDE FAULT); 

n > else  if  ((pc  = getenv  ("HOME"))  !=  NULL)  { 

n a fn  = pg p F i L e Na meBu i I d (pc,  ".pgp",  NULL); 

a n C hec kAndC r ea t ePGPD i r ( f n ) ; 

n n pg pen V S e t S t r i ng  (pgpEnv,  PG PE N V_ PG P P AT H , fn, 

n n n n PG P ENV_PR I _PUB DEFAULT); 


n n pgpMemFree  (fn); 

n > 

n pgppath  = pg  pe  n vG  e t S t r i ng  (pgpEnv,  PG  PE  N\/_PG  PP  AT  H , NULL,  NULL); 

n /*  Ok,  PGPPATH  is  a PATH  of  directories.  Find  the  first  one..  */ 

n confdir  = pg p F i L eNa meN e x t D i r e c t o ry  (pgppath,  NULL); 
n pgpAssert  (confdir); 

n fn  = pgpFileNameBuild  (confdir,  " pubring. pkr",  NULL); 

n pgpenvSetSt ri ng  (pgpEnv,  PG P E N V_PUBR I NG , fn,  PG P E N V_P R I _ PR  I V D E F AU LT ) ; 
n pgpMemFree  (fn); 

n fn  = pgpFileNameBuild  (confdir,  " secring. skr",  NULL); 

n pgpenvSetString  (pgpEnv,  PG P E N V_S E C R I NG , fn,  PG PEN V_PR I _P R I VD E F AU LT ) ; 
n pgpMemFree  (fn); 

n fn  = pgpFileNameBuild  (confdir,  "randseed.bin",  NULL); 

n pgpenvSetString  (pgpEnv,  PGPENV_RANDSEED,  fn,  PGPENV_PRI_PRIVDE FAULT); 
a pgpMemFree  (fn); 

n /*  Prepare  to  read  config  file(s)  */ 
n memset  (&ui,  0,  sizeof(ui)); 

Q ui. message  = plpInitMessage; 

n ui_arg  = 0; 

n /*  Read  the  user's  config  file  */ 

n fn  = pgpFileNameBuild  (confdir,  "config.txt",  NULL); 

n pgpConf i g Fi  leProcess  (&ui,  &ui_arg,  pgpEnv,  fn,  PGPENV_PRI_CON FI G ) ; 
n pgpMemFree  (fn); 

n pgpMemFree  (confdir); 

a return  PGPERR_0K; 

} 

/*  Save  preferences  to  disk  */ 

PGPError 

pgpSavePref sinterna I (void) 

{ 

a /*  XXX  Not  implemented  */ 


a 


a return  PGPERR_0K; 

} 
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/♦Checks  for  the  existence  of  the  requested  directory.  If  it  exists  and  is  a 
♦directory,  we  don't  do  anything.  If  it  doesn't  exist  at  all,  we  create  it. 
♦If  it  does  exist  and  isn't  a directory,  we  advise  the  user  to  eliminate  her 
♦file  ("Hey,  only  an  IDIOT  would  have  a file  called  “/.pgp..."  ;)  or  to 
♦user  PGPPATH  to  set  it  to  something  else. 

★ 

♦This  is  ifdefed  UNIX  so  that  it  doesn't  break  anything  else.  There's  no 
♦theoretical  reason  this  couldn't  work  under  DOS,  if  mkdirC)  has  a dummy 
♦mode  parameter;  otherwise,  that  little  bit  will  need  tweaking. 

* 

♦BAT  970511 
♦/ 

void  C h e c k And C r e a t e PG P D i r ( c o n s t char  ♦fn) 

Boolean  dir_exists  = FALSE,  name_exists  = FALSE; 

#ifdef  HAVE_S YS_STAT_H 

/♦This  is  the  preferred  method,  but  it  may  not  be  universally  portable, 

♦so  I've  implemented  a I es s-t ha n-de s i r a b I e check  below  using  definitely 
♦available  functions. 

♦/ 

struct  stat  stat_buf; 

ifCstatCfn,  &stat_buf)  ==  0)  { 
n name_exists  = TRUE; 

n /♦OK,  the  file  exists.  Is  it  a directory?^/ 
n i f ( S_I S D I R ( s t a t _bu f . s t _mode ) ) 
n dir_exists  = TRUE; 

} 

# e I s e 

/♦This  is  suboptimal.  If  there's  a better,  definitely  portable  way  to 
♦do  this,  I'd  like  to  know  about  it. 

♦Basically,  we  try  to  read  the  config.txt  file;  if  we  can't,  we  try  to 
♦create  an  empty  config.txt  file;  if  we  can't,  we  try  to  read  fn  (in  case 
♦it  exists  as  a file).  If  that  doesn't  do  it,  we  give  up  and  assume 
♦mkdir()  can  create  it,  later. 

♦/ 

FILE  ♦inf,  ♦ouf; 

char  ♦config_txt  = NULL; 

i f ( ( conf i g_txt  = pg p F i I e Na me Bu i I d ( f n , "config.txt")))  f 


n 

if  (( 

inf  = f ope n ( c 0 n f i g_ t x t , 

"r"))) 

{ 

n 

/♦Can  we  just  read  it?^/ 

fi 

name_exists  = dir_exists 

= TRUE 

r 

rt 

fclose(inf); 

n 

> 

D 

else 

{ 

n 

/♦Ok,  let's  try  to  write 

there. 

Maybe 

the  dir  exists,  but 

the 

□ 

♦file  doesn't.  Another 

, less 

likely 

possibility  is 

that 

we 

have 

s 

♦write  access,  but  not 

read  access. 

While  unlikely 

, we  don ' 

' t 

n 

♦want  to  overwrite  an  existing 

c on  f i g 

-txt,  in  this 

case^ 

so 

w e 

□ 

♦open  append;  if  the  file  just 

doesn ' 

t exi St,  this 

should 

create 

n 

t . 

Q 

*/ 

Q 

if((ouf  = fopen(config_txt,  "a" 

)))  { 

n 

□ 

name_exists  = dir_exists 

= TRUE 

r 

Q 

D 

fclose(ouf)  ; 
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n > 

n e L s e { 

n n /*Last  chance  - perhaps  the  "directory"  already  exists  as 

n n *afiLe. 

n n * / 

a a ifCCinf  = fopenlfn,  "r")))  { 

n n n ame_e X i s t s = TRUE; 

n n fcLose(inf): 

n n } 

n n /*If  we  haven't  hit  anything,  either  this  thing  doesn't 

n n *exist,  or  it  exists  and  isn't  a directory  and  we  don't 

a n *have  read  access,  or  it  exists  and  is  IS  a directory  AND 

n n *config.txt  doesn't  exist  in  it  AND  we  don't  have  write 

n n *access.  Whew! 

n n * / 

n } 

n > 

n pg p F r ee ( c on f i g _ t X t ) ; 

> 

# e nd i f 


Q 

n 

a 

a 

D 

D 

n 

n 

n 

n 

n 

n 

Q 

n 

a 

Q 

□ 

a 

n 

Q 

n 

Q 

o 

n 

□ 

n 


> 


i f ( ! di r_exi st  s ) { 
i f ( ! nanie_e X i s t s ) { 

fprintfCstderr,  "Creating  %s...",  fn); 

/*Note  this  is  not  neccessarily  0700;  this  modifies  the  umask, 
♦which  is  currently  set  to  077  in  pgp.c  and  pgpk.c.*/ 

/*XXX  If  DOS  mkdir  is  like  mkdirCchar  *),  some  finessing  of  this 
*XXX  will  be  needed  to  make  this  compile. 

*/ 

ifCmkdirCfn,  0700)  ==  0)  { 

n f p r i n t f ( s t de r r , " c omp I e t e . \ n " ) ; 

> 

else  { 

n fprintfCstderr,  "error!\n"); 
n perrorC Unable  to  create  directory"); 

> 

} 

else  { 

fprintflstderr, 

a "%s  exists,  but  it  is  not  a directory. \n", 

n f n ) ; 

fprintfCstderr, 

n "Either  remove  this  file,  or  use  the  PGPPATH  "); 

fprintfCstderr, 

n "environmental  variable  toXnset  your  PGP  home  "); 

fprintfCstderr, 
n " directory. \n"); 

} 

} 


/* 

* Local  Variables: 

* tab-wi dth : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
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*/ 
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/* 

* pgpPrefUnix.h  --  Companion  to  pg pP r e f U n i x . c ; most  functions  are  not 

* exported,  though. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Added  970514  by  Brett  A.  Thomas  (quarkabaz.com,  batapgp.com) 

* 

* $Id:  pg pP r e f U n i X . h , V 1.1. 2. 2 1 997/06/07  09:50:30  mhu  Exp  $ 

* 

*/ 

/*Checks  for  the  existence  of  the  directory  *fn.  If  it  exists,  nothing  is 
*done.  If  it  exists  and  is  a fiLe,  the  user  is  given  an  appropriate  message. 
*If  it  doesn't  exist,  we  teLL  the  user  we're  creating  it,  create  it,  and 
*Let  the  user  know  what's  happening.  This  is  ifdeffed  Unix  in  an  attempt 
*not  to  disrupt  other  pLatforms;  it  should  work  with  LittLe  effort  on  DOS, 
*and  shouLd  be  useless  for  Windows  and  Mac  apps. 

*/ 

void  C h e c k And C r ea t e PG P D i r ( con s t char  *fn); 
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/* 

* pg p P r e f W 1 n3 2 . c --  Access  preference  database  for  Win32  and  Win3.1 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg p P r e f W i n3 2 . c , V 1.11.2.3  1997/06/07  09:50:30  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end i f 

SincLude  "pgpKDBint.h" 

#incLude  "pgpEnv.h" 

#incLude  "pgpPrefsInt.h" 

#incLude  <windows.h> 

/*  Size  of  buffer  to  hoLd  pref  strings;  wiLL  be  doubLed  if  won't  fit  */ 
#define  INITLENnn  128 

/*  Name  for  hoLding  r eg i s t e r / i n i t fiLe  keys  */ 

#define  APPNAMEnn  "PGP" 


/*  Registry  key  */ 
#define  PGPLIBKEYn 


'SoftwareWPGPWPGPLib' 


#if  USE_REGISTRY 
/* 

* Return  a newLy  aLLocated  profiLe  string,  the  vaLue  for  the  specified  key. 

* If  no  such  key  is  in  the  preference  database,  return  a newLy  aLLocated 

* string  hoLding  the  dfLt  vaLue. 

* Return  NULL  on  a fataL  error. 

*/ 

static  char  * 

g e t p r o f s t r i ng  (const  char  *key,  PGPError  *error) 

{ 


n 

c h a r n 

*buf  = NULL;nn  n /* 

AL  Located 

return  buffer  */ 

B 

Long 

B 

B 

bufLen;nn  n n /* 

Size  of  buf  */ 

B 

Long 

B 

B 

resuLt;nn  n n /* 

Return  code  from  Windows  */ 

B 

HKEYn 

B 

hKey;n  n n n /* 

HandLe  to 

our 

Library  key  */ 

B 

*e  r ro  r 

= 0; 

B 

re  su  L t 

= RegOpenKey  ( HKEY_CURRENT_ 

USER,  PGPLIBKEY 

, &hKey); 

B 

if  (resuLt 

= = ERR0R_SUCCESS ) { 

B 

B 

r e s u L t 

= R eg Qu e r y Va L u e E X (hKey 

, key,  0, 

NULL, 

NULL,  SbufLen); 

B 

B 

i f 

(resuLt  ==  E R R0R_S U C C E S S ) { 

B 

B 

B 

b u f 

= (char  *)  pgpMemALLoc 

(bufLen); 

B 

B 

B 

i f 

(!buf)  { 

B 

B 

B 

B 

*error  = PGPERR_N0MEM; 

B 

B 

B 

B 

RegCLoseKey  (hKey); 

B 

B 

B 

B 

return  NULL; 

B 

B 

B 

> 

B 

n 

B 

Re gQu e r yVa L u e E X (hKey,  key 

, 0,  NULL, 

buf. 

SbufLen); 

B 

B 

> 

B 

B 

RegCLoseKey  (hKey); 
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n } 

n if  ( ! buf ) 

n a *error  = PGPERR_GENERIC;n  /*  no  such  key  */ 
n return  buf; 

> 

/*  Set  a profile  string  using  the  specifed  key  to  the  specified  value  */ 
static  PGPError 


setprof St  ring 

f 

(const  char 

*key. 

const 

char  * va 

1 ) 

o 1 ongn 

n 

result;nn 

n 

n 

/* 

Return 

code  from  Windows  */ 

n HKEYn 

n 

hKey;n  n 

n 

n 

/* 

Handle 

to  our 

library  key  */ 

Sif  0 

n DWORDn 

n 

dwdum;D  a 

s 

n 

/* 

Unused 

return 

value  */ 

n result  = Reg C r ea t e Key  Ex  ( H KE Y_ C U R R E NT_U S E R , PGPLIBKEY,  0,  NULL, 

n n n n R E G_  0 PT 1 0 N_  N 0 N _ V 0 L AT  I L E , KE  Y_  A L L_  AC  C E S S , NULL,  ShKey,  &dwduni); 

Melse 

n result  = RegCreateKey  (HKEY_CURRENT_USER,  PGPLIBKEY,  ShKey); 

Send i f 

n if  (result  !=  E R RO R_ S UC C E S S ) 
n n return  PG P E R R_G E N E R I C ; 

n result  = RegSetValueEx  (hKey,  key,  0,  REG_SZ,  val,  strlen(val)+1); 
n RegCloseKey  (hKey); 
n if  (result  !=  E R RO R_S U C C E S S ) 
a n return  PG P E R R_G EN E R I C ; 
n return  PGPERR_0K; 

> 


Seise  /*  USE.REGISTRY  */ 

/* 

* Return  a newly  allocated  profile  string,  the  value  for  the  specified  key. 

* If  no  such  key  is  in  the  preference  database,  return  a newly  allocated 

* string  holding  the  dflt  value. 

* Return  NULL  on  a fatal  error. 

*/ 

static  char  * 

getprof stri ng  (const  char  *key,  PGPError  *error) 

{ 


n 

char  *buf; 

n 

1 ong  buflen 

= INITLEN; 

n 

long  nstr; 

n 

static 

char 

dummy d f It  = " " ; 

n 

♦error 

= 0; 

n 

for  ( ; 

; ) 

{ 

o 

n buf 

= (char  *)  pgpMemAlloc  (buflen); 

n 

n if 

(!buf)  { 

n 

n D 

♦error  = PG P E R R_N0M E M ; 

n n n return  NULL; 

n n ) 

n n nstr  = G e t P r o f i I e S t r i ng  (APPNAHE,  key,  dummydflt,  buf,  buflen); 
n n if(nstr==0)( 

n n n pgpHemFree  (buf); 

n n n *error  = PG PE R R_G E N E R I C ; 
n n n return  NULL; 
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□ □ 

□ n 

n n 

Q n 

H a 

a > 

} 


if  Cnstr  < bufLen-1) 
a return  buf; 
bufLen  *=  2; 
pgpMemFree  (buf); 


/*  Set  a profile  string  using  the  specifed  key  to  the  specified  value  */ 
static  PGPError 

s e t p r 0 f s t r i ng  (const  char  *key,  const  char  *val) 

{ 

a if  ( ! W r i t e P r o f i I e S t r i ng  (APPNAME,  key,  val)) 
a a return  PG P E R R_G E N E R I C ; b b /*  XXX  */ 

B return  PGPERR_0K; 

} 


#endif  /*  USE_REGISTRY  */ 


PGPError 

pgpSetDefaultPrefsInternal  (void) 
{ 

B return  PGPERR_OK; 

} 


PGPError 

pgpSetDefaultKeyPathInternal  (void) 
{ 

B return  PGPERR_OK; 

} 


/*  Read  preferences  and  put  them  into  the  environment  */ 
PGPError 

pgpLoadPref sinterna I (void) 

{ 

B PGPPrefNameNumberB  pni; 

B PG PP r e f N a me S t r i n g B psi; 

B PGPPrefNameBooleanB  pbi; 

B charB  a a *pstr; 

a PGPErrora  a a error; 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


for  ( pn i = k PG P P r e f N urn F i r s t ; pn i < kPG PP r e f ^um La s t ; ++pni)  { 

B NumPrefEntry  *pe; 
a long  val; 
a 

a pe  = &numPrefEntry(pni); 

a pstr  = g e t p r o f s t r i ng  ( pe->p r e f Name , Serror); 
a if  (pstr)  { 

a a if  (sscanf  (pstr,  "%i",  8lval)  ==  1)  ( 
a a a pgpenvSetInt  (pgpEnv,  p e->pg p En v S e I e c t o r , val, 
a a a a a a a PGPENV_PRI_FORCE); 

a a > 

a a pgpMemFree  (pstr); 

a } 

> 

for  ( ps i = kPGPP r e f S t r F i r s t ; p s i < kPG P P r e f S t r La s t ; + + psi)  { 
a St ri ngPref Ent ry  *pe; 
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n 

□ 

n 

n 

□ 

□ 

Q 

n 

□ 

Q 

D 

n 

a 

n 

□ 

n 

n 

n 

n 

□ 

□ 

n 

a 

} 


□ 

n pe  = &strPrefEntry(psi); 

n pstr  = getprofstring  (pe->prefName,  &error); 

n if  (pstr)  { 

n n pg p e n V S e t S t r i ng  (pgpEnv,  pe->pg p E n v S e L e c t o r , pstr, 

n n n n n n n PGPENV_PRI_FORCE); 

n n pgpHemFree  (pstr); 
n } 

} 

for  (pbi=kPGPPrefBoolFirst;  pbi<kPGPPrefBooLLast;  ++pbi)  { 
n Boo L P r e f E n t r y *pe; 

n Boolean  booLVal; 

□ 

n pe  = &boo  I P r e f E n t r y ( p b i ) ; 

n pstr  = g e t p r o f s t r i n g ( pe->p r e f Name , Serror); 
n if  (pstr)  { 

n n booLVal  = _stricmp  (pstr,  "true")==0  ||  _stricmp  (pstr, 

n n pgpenvSetInt  (pgpEnv,  pe->pg p E n vS e I e c t o r , booLVal, 
n n n n n n PGPENV_PRI_FORCE); 

n n pgpMemFree  (pstr); 

n > 

> 


return  PGPERR_0K; 


t")==0; 


/*  Save  preferences  which  got  set  in  environment,  to  disk  */ 
PGPError 

pgpSavePref sinterna L (void) 

{ 

n PG PP r e f NameN umbe r n pni; 

n PGPPref NameSt ri ngn  psi; 

n PG PP r e f N ameBoo L e a nn  pbi; 

n intnn  n n n pri; 

n charn  a n n bufC20]; 

n PGPErrorn  n n error; 


n 

for 

(pni=kPGPPrefNumFi rst; 

pn i < kPG PP r e f NumLa s t ; ++pni)  { 

n 

n 

NumPrefEntry  *pe; 

o 

n 

□ 

o 

long  va  1 ; 

a 

a 

pe  = &n umP r e f E n t ry ( pn i 

); 

n 

n 

val  = pgpenvGetInt  (pgpEnv,  pe->pg p E n v S e L e c t o r , Spri,  NULL); 

n 

u 

if  (pri  >=  PGPENV_PRI_ 

FORCE)  { 

n 

□ 

n sprintf  (buf,  "%15d",  val); 

n 

a 

n error  = s e t p r o f s t r i ng  ( pe->p r e f N a me , buf); 

a 

□ 

> 

n 

> 

n 

for 

(psi=kPGPPrefStrFi rst; 

p s i < kPGPP r e f S t r La s t ; + + psi)  { 

n 

n 

StringPrefEntry  *pe; 

□ 

n 

char  const  *pstr; 

n 

n 

pe  = &s t r P r e f En t r y ( p s i 

); 

n 

n 

pstr  = pg p e n vG e t S t r i ng 

(pgpEnv,  pe->pg p E n vS e L e c t 0 r , Spri,  NULL); 

□ 

□ 

if  (pri  >=  PGPENV_PRI_ 

FORCE)  C 

n n n error  = s e t p r o f s t r i ng  ( pe->p r e f Name , pstr); 
n n } 
n > 

n for  ( pb i = k PG PP r e f Boo L F i r s t ; pb i < kPG P P r e f Boo L La s t ; ++pbi)  { 
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n n Boo L P r e f En t ry  *pe; 

n n Boolean  bool; 

n n 

a a pe  = SbooLPrefEntryCpbi); 

a n bool  = pgpenvGetInt  CpgpEnv,  p e->pg p E n v S e L e c t o r , &pri,  NULL); 

n n if  (pri  >=  PG P EN V_PR I _ F 0 R C E ) { 

n n n char  const  *pstr  = bool  ? "true"  : "false"; 

n n □ 

n n n error  = s e t p r o f s t r i n g ( p e->p r e f N a me , pstr); 

n n } 

n > 

a return  PGPERR_0K; 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpPrefs.c  — Platform  independent  preference  database  code 

■k 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpPrefs.c, V 1.32.2.17  1997/06/07  09:50:31  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

# en  d i f 

#incLude  " pg pKD B i n t . h " 

#incLude  "pgpEnv.h" 

#incLude  " pgp P r e f s I n t . h " 

#incLude  "pgpLeaks.h" 


NumPrefEntry  pg pN umP r e f Ta b L e C k PG PP r e f N umLa s t - k PG P P r e f N urn F i r s t U = { 


n 

{ 

" Version ",n  n n 

D 

PGPENV_ 

VERSION, nn  n n 

n 

3 

n 

{ 

"CipherNum",n  n n 

n 

PGPENV_ 

CIPHER, n n n n 

n 

1 

n 

{ 

"HashNum",n  n n 

n 

PGPENV_ 

HASH,n  n n n 

n 

1 

>, 

n 

{ 

" C omp r e s s A L g " , n n 

n 

PGPENV_ 

COHPRESSALG,nn  a 

a 

1 

>, 

n 

{ 

" A rmo r Li nes " , nn  n 

n 

PGPENV_ 

ARMORLINES, n n n 

n 

0 

n 

{ 

"CertDepth",n  n n 

n 

PGPENV_ 

CERTDEPTH,n  a n 

n 

4 

>, 

n 

{ 

"CompressQua  L i ty",n 

n 

PGPENV_ 

COMPRESSaUAL,n  n 

n 

1 

n 

{ 

"Mai LWordWrapWidth",n 

n 

PGPENV_ 

MAILWORDWRAPWIDTH,n 

n 

70 

n 

{ 

"Mai IPassCacheDuration 

n PGPENV_ 

MAILPASSCACHEDURATION 

120 

y. 

Q 

{ 

"SignCacheDuration",n 

n 

PGPENV_ 

SIGNCACHEDURATION,n 

n 

120 

n 

{ 

"DateOfLastSpLashScreen" 

,nPGPENV_ 

DATEOFLASTSPLASHSCREEN, 

n 0 

n 

{ 

"HTTPKeyServerPort",n 

n 

PGPENV_ 

HTTPKEYSERVERPORT,n 

11371 

>>; 

S t r i ng P r e f E n t r y pg p S t r P r e f Ta b I e C k PG PP r e f S t r La s t - kPG PP r e f S t r F i r s t 3 = { 


Q 

{ ' 

’OefauLtKeylD" 

Q 

n 

PGPENV_ 

MYNAHE,n  n n 

„„ 

Q 

{ ' 

'PubRing",n 

n 

n 

a 

PGPENV_ 

PUBRING, nn  n 

" pubring. pkr” 

y. 

n 

{ ' 

'SecRing'',n 

n 

n 

n 

PGPENV_ 

SECRING, nn  n 

"secring. skr" 

y. 

Q 

UNIX 

{ "RandomDevice" 

Q 

n 

PGPENV_ 

RANDOMDEVI  CE,n 

"/dev/ random" 

y. 

tfelse 

n i ' 

'RandomDevi ce" 

n 

n 

PGPENV_ 

RANDOMDEVICE, n 

""  >, 

Send  1 f 

n -C  ' 

'RandSeedFi Le" 

Q 

n 

PGPENV_ 

RANDSEED,n  n 

NULL  }, 

n 

{ ■ 

'Language",n 

n 

n 

Q 

PGPENV_ 

LANGUAGE, n n 

"English"  >, 

n 

{ ■ 

' Owne  rName  " , n 

n 

Q 

n 

PGPENV_ 

OWNERNAME,n  n 

""  }, 

s 

{ ■ 

’CompanyName", 

D 

□ 

s 

PGPENV_ 

COMPANYNAME, nn 

""  }, 

□ 

{ ■ 

'Li censeNumber 

n 

n 

PGPENV_ 

LICENSENUMBER,n 

""  >, 

n 

{ ' 

'HTTPKeyServerHost 

PGPENV_HTTPKEYSERVERHOST," 

pgpkeys.mit.edu 

" }>; 

Boo L P r ef E n t r y pg pBoo L P r e f Ta b L e C kPG P P r e f Boo L La s t - k PG P P r e f Boo L F i r s t 3 = { 


a 

{ 

"Armor", n nan 

a 

PGPENV_ 

ARMOR, n n n n 

TRUE  }, 

a 

{ 

" Enc ry pt ToS e L f " , n n 

a 

PGPENV_ 

ENCRYPTTOSELF,n  a 

FALSE  >, 

a 

{ 

"Compress",n  n n 

a 

PGPENV_ 

COMPRESS, n n n 

TRUE  >, 

a 

{ 

"Mai  LWordWrapEnabLe", 

aa 

PGPENV_ 

MAILWORDWRAPENABLE,n 

TRUE  >, 

a 

{ 

"Mai LPassCacheEnabLe" 

PGPENV_ 

MAILPASSCACHEENABLE, 

nTRUE  }, 

a 

{ 

"Mai LEncryptPGPMIME”, 

aa 

PGPENV_ 

MAI LENCRYPTPGPMIME, n 

FALSE  }, 

a 

{ 

"Mai lSignPGPMIME",n 

a 

PGPENV_ 

MAILSIGNPGPMIME,nn 

FALSE  }, 

a 

{ 

" F a s t Key G e n " , nn  n 

a 

PGPENV_ 

FASTKEYGEN,n  a a 

TRUE  }, 

a 

{ 

"SignCacheEnabLe",n 

a 

PGPENV_ 

SIGNCACHEENABLE,nn 

FALSE  }, 

a 

{ 

"WarnOnMixRSADiffieHeLLman 

",n  PGPENV_WARNONMIXRSAELGAMAL,nTRUE 
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n { "Mai LEncryptDefault",Bn  PG P E N V_M A I LE N C R Y PT D E F AU LT , n FALSE  }, 

n { "Mai  LSi gnOef auLt",n  n PG P E N V_M A I LS I G N D E F A U LT , nn  FALSE  }, 

a { "Ma rgi na L LyVa L i dWa rni ng",nPGPENV_MARGINALLYVALI DWARNING,n  FALSE  >, 
a { " Fi rstKeyGenerated",n  n PG P E N V_ F I R S T KE YG E N E R AT E D , n FALSE  >, 

n { " W a rnOn R S A R e c i p An d N on R S A S i g n e r " , 

nnnnnnnn  PG P E N V_ W A R NON R S A R E C I P AN D NON R S A S I G N E R,  TRUE  >>; 

Da  t a P r e f E n t ry  pg  p Da  t a P r e f Ta  b L e C k PG  PP  r e f D a t a La  s t - k PG  P P re  f Da  t a F i r s t II  = { 


n 

{ 

"PubRingRef",aB  a 

n 

PGPENV_ 

PUBRINGREF  }, 

Q 

{ 

"PrivRingRef",a  b 

n 

PGPENV_ 

PRIVRINGREF  >, 

n 

{ 

"RandSeedData",a  b 

n 

PGPENV_ 

RANDSEEDDATA  }, 

Q 

{ 

"PGPkeysMacMainWinPos' 

PGPENV_ 

PGPKEYSMACMAINWINPOS 

y. 

n 

{ 

"PGPappMacPrivateData' 

PGPENV_ 

PGPAPPMACPRIVATEDATA 

□ 

c 

"PGPmenuMacAppSi gnatures' 

' , PGPENV_ 

PGPMENUMACAPPSIGNATURES  )>; 

n PGPError 
pgpGetPrefNumberC 

a PGPPref NameNumbera  prefName, 

a Long  *a  n n a value) 

{ 


a enum  PgpEnvIntsan  pgpEnvSeLector; 

a PGPErrora  n n result  = PGPERR_0K; 

n 

a pgpa  ( ( 

a a pg pa P r e f Na me N umb e r V a L i d ( p r e f N ame ) , 

a n pgpaAddrValidCvalue,  Long))); 

□ 


a pgpEnvSeLector  = (enum  PgpEnvInts)numPrefEntry(prefName). pgpEnvSeLector; 
a *vaLue  = (Long)pgpenvGetlnt(pgpEnv,  pgpEnvSeLector,  NULL,  SresuLt); 

□ 

a return  result; 

} 


a PGPError 
pgpGetPrefStringC 

a PGPP ref  Name S t r i nga  prefName, 


n 

char 

*B  B 

□ 

B 

buffer. 

n 

r 

s i ze_ 

t *a 

n 

B 

Length) 

\ 

n 

enum 

PgpEnvStri 

ngsn 

pgpEnvSeLector; 

n 

char 

const 

*n 

B 

envStr; 

n 

s i ze_ 

t a B 

n 

B 

envStrLen; 

n 

PGPErrora 

B 

B 

result  = PGPERR 

a pgpa  ( ( 

a n pg pa P r e f N a me S t r i ng Va L i d ( p r e f Na me  ) , 

a n pgpa Add rVa L i d ( L eng t h , size_t), 
a n pg pa  A s s e r t ( * L e ng t h >=  0))); 

□ 

a pgpEnvSeLector  = (enum  Pg p E n v S t r i n g s ) s t r P r e f En t r y ( p r e f N a me ) . pg p En v S e L e c t o r ; 
a envStr  = pgpenvGetString(pgpEnv,  pgpEnvSeLector,  NULL,  SresuLt); 
a if  (envStr  !=  NULL) 
a { 

a n pg  pa  ( pg  pa  S t r Va  L i d ( e n V S t r ) ) ; 

Q n 

a n envStrLen  = s t r L e n ( e n v S t r ) ; 

n B if  (buffer  ==  NULL  | | *Length  < envStrLen) 

B B { 
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n n n *Length  = envStrLen; 

n n n return  PGPERR_KEYDB_BUFFERTOOSHORT; 

n n > 

n n pg pa ( pg pa  Ad d r Va L 1 d ( bu f f e r , char)); 

n n *Length  = envStrLen; 

n n pg p C opy H emo r y ( e n V S t r , buffer,  envStrLen); 

n > 

n return  result; 

} 

n char* 

pgpGetPrefCStringCopyC 
n PG PP r e f N a me S t r i n g n prefName) 

{ 

n enum  Pg p En v S t r i ng s n pg p E n v S e L e c t o r ; 
n char  const  *n  n envStr; 

n size_tn  n n n envStrLen; 

n char*nn  n n buffer  = NULL; 

n pgpaCpgpaPrefNameStringVaLidCprefName)); 
n 

n pg  p E n V S e L e c t o r = (enum  Pg  p E n v S t r i ng  s ) s t r P r e f E n t r y ( p r e f N a me  ) . pg  p E n v S e L e c t o r ; 

n envStr  = pg p e n vG e t S t r i ng ( pg p E n v , pg p E n v S e L e c t o r , NULL,  NULL); 

n if  (envStr  !=  NULL) 
n C 

a n pg  pa  ( pg  pa  S t r Va  L i d ( en  vS  t r ) ) ; 

n □ 

n n envStrLen  = s t r L e n ( e n v S t r ) ; 
n a buffer  = (char  * ) pg p A I L o c ( en v S t r Le n + 1); 
a a pg p C opy Memo r y ( e n V S t r , buffer,  envStrLen  + 1); 

a > 

n return  buffer; 

> 

a PGPError 
pgpGetPrefBooLean( 

n PG PP r e f Name Boo L ea na  prefName, 

a Boolean  *a  a a value) 

{ 

a enum  PgpEnvIntsnn  pg p E n v S e I e c t o r ; 

n PGPErrorn  a a result  = PGPERR_0K; 

a 

a pgpa  ( ( 

n a pg  pa  P r e f N a me  Boo  I ea  n Va  I i d ( p r e f Name  ) , 

a a pgpaAddrValid(value,  Boolean))); 
a 

a pgpEnvSelector  = (enum  PgpEnvInts)boolPrefEntry(prefName).pgpEnvSelector; 
a *value  = ( Boo  I e a n ) pg pen vG e 1 1 n t ( pg p E n V , pgpEnvSelector,  NULL,  Sresult); 
a 

a return  result; 

} 

n PGPError 
pgpGetPrefData( 

a PG PP r e f Na me  Da t a oa  prefName, 

a void  *a  a a a buffer, 

a size_t  *a  a a length) 

{ 
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n enum  Pg p En v Po i n t e r s npg p E n vS e L e c t o r ; 


n 

char 

const 

*n 

o 

envData; 

n 

s i ze_ 

t Q □ 

n 

n 

envDataLen; 

n 

PGPErrorn 

□ 

a 

result  = PGPERR_0K; 

Q pg p a ( ( 

n n pg  pa  P r e f N a me  Da  t aVa  L i d ( p r e f N a me  ) , 

n n pg pa  Add r Va I i d ( L eng t h , size_t), 

n n pg pa  A s s e r t ( * L e n g t h >=  0))); 

n 

n pg p E n V S e L e c t o r = Cenum  Pg p En v Po i n t e r s ) 

n n n n n n n da  t a P r e f E n t ry  ( p r e f Na me  ) . pg p E n v S e L e c t o r ; 

n envData  = pg pe n vG e t Po i n t e r ( pg p E n v , pg p E n v S e L e c t o r , SenvDataLen, 
nnnnnnnn  SresuLt); 
n if  (envData  !=  NULL) 
n { 

n n p g p a ( pg pa  Add rVa L i d ( en V Da t a , VoidAlign)); 

a Q 

n n if  (buffer  ==  NULL  ||  *Length  < envDataLen) 

n n { 

n n n *Length  = envDataLen; 

n n n return  PG P E R R_KE Y DB_BU F F E RTOO S H 0 RT ; 

n n > 

n n pg pa ( pg pa  Add rVa L i d ( bu f f e r , char)); 

n n *Length  = envDataLen; 

n n pg p C opy H emo ry ( e n V D a t a , buffer,  envDataLen); 

n } 

n return  result; 

> 

n void  * 
pgpGetPrefDataCopy( 


n 

PGPPrefNameDatann 

prefName, 

□ 

/ 

s i 2 e_ 

t *n  n 

n 

length) 

\ 

D 

enum 

PgpEnvPointersnpgpEnvSelector; 

n 

char 

const  *n 

n 

envData; 

□ 

s i 2e_ 

t n n n 

n 

envDataLen; 

n 

void 

* n n n 

n 

buffer  = NULL; 

n pgpa(pgpaPrefNameData\/aLid(prefName)); 
n 

n pgp En vSe L e c t o r = (enum  Pg p En v Po i n t e r s ) 

D n n n n n n d a t a P r e f E n t r y ( p r e f Na  me  ) . pg  p E n v S e L e c t o r ; 

n envData  = pg pen vGe t Po i n t e r ( pg p E n v , pg p E n v S e L e c t o r , SenvDataLen, 
n n n n n n a d NULL); 

n if  (envData  !=  NULL) 
n { 

n n pgpa ( pg pa  Add rVa L i d ( envDa t a , VoidAlign)); 
n n 

n n if  (length  !=  NULL) 

n n { 

n n n pg pa ( pg pa  Ad d r Va I i d ( I e ng t h , size_t)); 

n n n *length  = envDataLen; 

n n } 

n n buffer  = pgpAlloc(envDataLen); 

n n if  (buffer  !=  NULL) 

n n n pg p C opy H emo ry ( e n v Da t a , buffer,  envDataLen); 
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n } 

n return  buffer; 

> 

n PGPFUeRef  * 
pgpGetPrefFi LeRefC 

n PG PP r e f Name D a t a nn  prefName) 

{ 

n uchar  *nn  n buffer; 

n si ze_tn  n n size; 

a PGPFiLeRef  *n  fiLeRef  = NULL; 

n 

n buffer  = (uchar  * ) pg pG e t P r e f Da t a C opy ( p r e f N a me , Ssize); 

n if  (buffer  !=  NULL) 
n { 

n n fiLeRef  = pgpImportFiLeRef(buffer,  size); 
n n pg p F r ee ( bu f f e r ) ; 
n } 

n return  fiLeRef; 

> 

n PGPError 

pgpSetPrefNumber( 

n PGPPref NameNumbern  prefName, 

n Longn  n n n vaLue) 

{ 

n enum  PgpEnvIntsnn  pg p E n v S e L e c t o r ; 

D 

n pgpa(pgpaPrefNameNumberVaLid(prefName)); 
n 

n pgpPrefsChanged  = TRUE; 

n pg p E n vS e L e c t o r = (enum  Pg p En v I n t s ) numP r e f E n t ry ( p r e f N a me ) . pg p E n v S e L e c t o r ; 
n return  pg pen v S e t 1 n t ( pg p E n v , pg p E n v S e L e c t o r , (int)vaLue,  PG P E N V_PR I _ F 0 R C E ) ; 
> 


n 

PGPError 

pgpSetPrefCString( 

n 

PGPPrefNameStringn 

prefName, 

n 

f 

char  const  *n  n 

string) 

\ 

n 

enum  Pg p E n vS t r i ng sn 

pgpEnvSeLector; 

n 

PGPErrorn  n n 

resuLt  = PGPERR_0K 

n 

pgpa ( ( 

s 

n pgpaPrefNameStringVaLidLprefName), 

n 

a pgpaStrVaLid(string))); 

n 


n pgpPrefsChanged  = TRUE; 

n pg pEn V S e L e c t o r = (enum  Pg p E n vS t r i ng s ) s t r P r e f E n t r y ( p r e f N a me ) . pg p E n vS e L e c t o r ; 
n resuLt  = pgpenvSe t S t r i ng ( pgpEn v,  pg p E n v S e L e c t o r , string,  PG PE N V_PR I _ F 0 R C E ) ; 
n 

n /*  Convert  to  fiLeref  form  if  appropriate  */ 
n switch  (prefName) 
n { 

n n case  kPG PP r e f P r i v R i ng  : 
n n { 

n n n PGPFiLeRef  *n  fiLeRef  = pg pN e w F i L e R e f F r om F u L L Pa t h ( s t r i ng ) ; 
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n n 

Q Q 

□ Q 

n n 

□ □ 

□ □ 

a □ 

n Q 

□ □ 

n □ 

□ n 

□ □ 

Q n 

a □ 

□ n 

□ D 

a a 

n n 

a n 

□ n 

D D 

□ D 

a D 

n n 

□ □ 

n n 

n } 


n 

n if  (fileRef  ==  NULL) 
n n result  = PG P E R R_ N OM EH ; 
n else 
n { 

a n result  = pg p S e t P r e f F i I e Re f ( k PG PP r e f P r i v R i n g Re f , fileRef); 

n n pg p F r e e F i I e Re  f ( f i I e R e f ) ; 

n > 

n break; 

> 

case  k PG P P r e f Pu b R i n g : 

{ 

a PGPFileRef  *n  fileRef  = pg p N e w F i I e Re f F r om F u I I Pa t h ( s t r i ng  ) ; 
n 

n if  (fileRef  ==  NULL) 
n n result  = PG P E R R_N OH  EH ; 
a else 
n { 

n n result  = pg p S e t P r e f F i I e R e f ( k PG P P r e f Pu b R i n g R e f , fileRef); 

n n pg p F r e e F i I e Re  f ( f i I e Re f ) ; 

n > 

n break; 

} 

default: 

n /*  Nothing  to  do  */ 
n break; 


n return  result; 
} 


n PGPError 
pgpSetPrefStringC 


o 

PGPPrefNameStringn 

prefName, 

n 

char 

const 

*n 

n 

buffer. 

n 

f 

s i ze_ 

t n n 

□ 

n 

length) 

\ 

tt 

char 

*n  n 

Q 

n 

envStr; 

n 

PGPErrorn 

n 

n 

result  = PGPERR 

a 

n pgpa  ( ( 

n n pg  pa  P r e f N ame  S t r i ng  Va  I i d ( p r e f N a me  ) , 
n n pgpa Add r Va I i d ( bu f f e r , char), 

n n pgpaAssertClength  >=  0))); 

□ 

n envStr  = pg p A I I o c ( I e ng t h + 1); 
a if  (envStr  ==  NULL) 
n n return  PGPERR_NOHEH; 

n pg pC opy Hemo r y ( bu f f e r , envStr,  length); 
n envStrClength]  = '\0'; 

n 

n result  = pg p S e t P r e f C S t r i ng ( p r e f Na me , envStr); 
n pgpFree(envStr); 

Q 

n return  result; 

> 


n PGPError 
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pgpSetPrefBooLeanC 

n PG PP r e f Na meBoo L e a nn  prefName, 

n BooLeannn  n n value) 

{ 

n enum  PgpEnvIntsnn  pgpEnvSeLector; 

n 

n pgpaCpgpaPrefNameBooLeanValidCprefName)); 

□ 

n pg p P r e f s C ha ng e d = TRUE; 

n pgpEnvSeLector  = (enum  Pg p E n v 1 n t s ) boo L P r e f E n t ry ( p r e f N a me ) . pg p E n vS e L e c t o r ; 
n return  pg pe n v S e 1 1 n t ( pg p En v , pgpEnvSeLector,  (int)vaLue,  PG P E N V_PR I _ F 0 RC E ) ; 
> 

n PGPError 

pgpSetPrefDataC 

n PG PP r e f Na me  Da t a nn  prefName, 
a void  const  *n  n buffer, 

n size_tn  n n n Length) 

{ 

n enum  Pg pEn v Po i n t e r s npg p En v S e L e c t o r ; 
n void*nn  n n oLdBuffer; 

n void  *n  n n n theCopy; 

n PGPErrorn  n n result  = PGPERR_0K; 

n 

n pgpa ( ( 

n n pg pa P r e f Na me  Da t a Va L i d ( p r e f Na me ) , 
n n pgpa Add rVa L i d ( buf f e r,  VoidALign), 
n n pgpaAsse rt ( L engt h >=  0))); 
n 

n theCopy  = pgpALLoc(Length); 
n if  (theCopy  ==  NULL) 

n n return  PGPERR_NOMEM; 

n pgpLea ks Igno r eMemo ry ( t heCopy ) ; n /*  XXX  Haybe  fix  this  Later  */ 

n pg pC opyHemo ry ( bu f f e r , theCopy,  Length); 
n 

n pgpPrefsChanged  = TRUE; 

n pgpEnvSeLector  = (enum  Pg p En v Po i n t e r s ) 

n n n n n n n n dataPrefEntry(prefName). pgpEnvSeLector; 
n oLdBuffer  = pg p e n vGe t Po i n t e r ( pg p En v , pgpEnvSeLector,  NULL,  NULL); 
n result  = pgpenvSetPointer(pgpEnv,  pgpEnvSeLector,  theCopy,  Length); 
n if  (oLdBuffer  !=  NULL) 
n n pg p F r ee ( o L dBu f f e r ) ; 
n 

n return  result; 

> 

n PGPError 

pgpSetPrefFi LeRef( 

n PG PP r e f Na me  Da t a nn  prefName, 
n PGPFiLeRef  const  *n  fiLeRef) 

{ 

n uchar  *nn  buffer; 

B size_tn  n size; 

B PGPErrorn  result  = PGPERR_0K; 

n 

n buffer  = pg p Expo r t F i L e Re f ( f i L e R e f , Ssize); 
n if  (buffer  ==  NULL) 
n n return  PG P E R R_ NOM E M ; 
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n result  = pgpSetPrefDataCprefName,  buffer,  size); 
n pg p F r e e ( b u f f e r ) ; 
n return  result; 

> 


n PGPError 

pgpSetDefaultKeyPath(void) 

{ 

n PGPErrorn  result; 

n if  ((result  = pg p S e t P r e f C S t r i n g ( k PG P P r e f Pu b R i n g , 

n n n n n s t r P r e f E n t r y ( k PG P P r e f Pu b R i n g ) . d e f Va I u e ) ) !=  PGPERR_OK) 

n n return  result; 

n if  ((result  = pg p S e t P r e f C S t r i ng ( k PG P P r e f P r i v R i ng , 

n n n n n s t r P r e f E n t r y ( kPG P P r e f P r i vR i n g ) . d e f Va I u e ) ) !=  PGPERR_OK) 

n n return  result; 

n return  pg p S e t D e f a u 1 1 Ke y Pa t h I n t e r na  I ( ) ; 

> 


n static  PGPError 
pgpSetDefaultPrefs(void) 


n 

n 

Q 

n 

a 

n 

□ 

n 

□ 

D 

n 

n 

□ 

a 

n 

n 

a 

a 

D 

n 

n 

} 


PG PP r e f Na me N umbe r n numPref; 

PG PP r e f Na me S t r i ngn  strPref; 

PGPPre f NameBoo I ea nn  boolPref; 

for  (numPref  = kPGPPrefNumFirst;  numPref  < kPGPPrefNumLast;  numPref++) 
n pg  pe n V S e 1 1 n t ( pg  p E n V , 

n n n (enum  Pg p E n v I n t s ) n umP r e f E n t r y ( n umP r e f ) . pg p En v S e I e c t o r , 

n n n ( i n t ) n umP r e f E n t r y ( n umP r e f ) . d e f Va  I u e , PG P E N V_PR I _PR I V D E F AU LT ) ; 

for  (strPref  = k PG PP r e f S t r F i r s t ; strPref  < kPG PP r e f S t r La s t ; strPref  + +) 
n if  ( s t r P r ef En t r y ( s t r P r e f ) . de f Va  I ue  ) 
n n pg pen vS e t S t r i ng ( pg pEnv, 

n n n (enum  Pg  p E n v S t r i ng  s ) s t r P r e f E n t r y ( s t r P r e f ) . pg  p E n v S e I e c t o r , 

n n n s t r P r e f E n t r y ( s t r P r e f ) . d e f Va  I u e , PG PEN V_ PR  I _PR I V D E F AU LT ) ; 

for  (boolPref  = k PG PP r e f Boo  I F i r s t ; boolPref  < kPGPPr ef Boo  I La s t ; boolPref++) 
n pgpenvSetInt (pgpEnv, 

n n n (enum  Pg  p E n v 1 n t s ) boo  I P r e f E n t r y ( boo  I P r e f ) . pg p E n vS e I e c t o r , 

n n n ( i n t ) boo  I P r e f E n t r y ( boo  I P r e f ) . d e f Va  I ue , PG PEN V_ PR  I _PR I V D E F AU LT ) ; 

return  pgpSetDefaultPrefsInternal(); 


n PGPError 
pgpLoadPrefs(void) 

{ 

n PGPErrorn  result; 
n voidn  *buffer; 

n /*  Initialize  fileref  pointers  to  NULL  in  case  we  are  called  twice  */ 
n if  (NULL  != 

n (buffer  = pg p e n vG e t Po i n t e r (pgpEnv,  PG P E N V_PR I VR I NG R E F , NULL,  NULL)))  { 
n n pgpHemFree  (buffer); 
n > 
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n if  (NULL  != 

n (buffer  = p g p e n vG e t Po i n t e r (pgpEnv,  PG P E N V_PUBR I NG R E F , NULL,  NULL)))  { 
n n pgpHemFree  (buffer); 
n } 

n pg pe n V S e t Po i n t e r ( pg p En V , PG P E N V_PR I V R I N G R E F , NULL,  0); 

a pgpenvSetPointer(pgpEnv,  PGPENV_PUBRINGREF,  NULL,  0); 

□ 

n result  = pg p S e t D e f a u L t P r e f s ( ) ; 


n 

i f 

(result 

==  PGPERR_0K) 

Q 

B 

result 

= pg p Loa d P r e f s I n t e r na  1 ( ) ; 

n 

/* 

XXX 

This 

is  hopefully  temporary  */ 

n 

if 

(result 

==  PGPERR_0K) 

n 

{ 

n 

B 

PGPFileRef  *n  fileRef; 

n 

B 

char  const  *n  path; 

D 

B 

n 

B 

i f 

(pgpenvGetPoi nter(pgpEnv,  PG P EN V_P R I V R I NG R E F , NULL,  NULL)  ==  NULL) 

n 

B 

{ 

n 

B 

B 

path  = pgpenvGetStri ng(pgpEnv,  PG P E N V_S E C R I NG , NULL,  NULL); 

Q 

B 

B 

i f 

(path  !=  NULL) 

B 

B 

B 

B 

B 

B 

fl 

fileRef  = pgpNewFileRefFromFullPath(path); 

B 

B 

B 

B 

if  (fileRef  !=  NULL) 

B 

B 

B 

fl 

{ 

B 

B 

B 

B 

n result  = pgpSetPrefFileRef(kPGPPrefPrivRingRef,  fileRef); 

B 

B 

B 

B 

n pg p F r e e F i 1 e Re  f ( f i 1 e Re f ) ; 

B 

B 

fl 

B 

> 

B 

B 

fl 

> 

B 

B 

> 

B 

B 

B 

B 

i f 

(result  ==  PGPERR_0K  &S 

B 

B 

B 

pgpenvGetPointer(pgpEnv,  PG P EN V_PUBR I NG R E F , NULL,  NULL)  ==  NULL) 

B 

B 

B 

B 

fl 

path  = pgpenvGetString(pgpEnv,  PG P E N V_PUBR I NG , NULL,  NULL); 

B 

B 

fl 

if 

(path  !=  NULL) 

B 

B 

B 

i 

B 

B 

B 

fl 

fileRef  = pg pN e w F i 1 eRef F r om F u 1 1 Pa t h ( pa t h ) ; 

B 

fl 

B 

B 

if  (fileRef  !=  NULL) 

B 

B 

fl 

B 

{ 

B 

B 

fl 

fl 

n result  = pgpSetPrefFileRef(kPGPPrefPubRingRef,  fileRef); 

B 

B 

fl 

B 

n pg p F r e e F i 1 e R e f ( f i 1 e Re f ) ; 

B 

B 

B 

B 

> 

B 

B 

B 

> 

B 

B 

> 

n > 

n pgpPrefsChanged  = FALSE; 
a return  result; 

> 

n PGPE  r ro  r 
pgpSavePrefs(void) 

{ 

n if  (pgpPrefsChanged) 
n { 

n n pgpPrefsChanged  = FALSE; 
n n return  pg p S a ve P r e f s I n t e r na  I ( ) ; 
n } 
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n else 

n n return  PGPERR_OK; 

> 

/* 

* Local  Variables: 

* tab-ui dth : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpPrefsInt.h  --  Internal  preference  database  header 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg p P r e f s I n t . h , V 1.2. 2.1  1997/06/07  09:50:31  mhw  Exp  $ 

*/ 

#ifndef  PG PPR E F S I NT_ Hn  /*  C */ 

#define  PG PPR E F S I NT_ H 

#incLude  "pgpKDBint.h" 

/* 

* Note  that  the  structures  below  must  be  updated  if  the  preference 

* names  in  pgpKeyDB.h  change 
*/ 


typedef  struct  NumPrefEntry 
{ 


Q 

char 

const 

*n 

prefName; 

n 

intnn 

c 

n 

pgpEnvSeLector; 

n 

L ongn 

o 

n 

defValue; 

} 

NumPrefEntry; 

typedef  struct 

I 

StringPrefEntry_ 

n 

char 

const 

*n 

prefName; 

n 

intnn 

n 

n 

pgpEnvSeLector; 

n 

char 

const 

*n 

defVaLue; 

> StringPrefEntry; 


typedef  struct  Boo L P r ef En t ry 
{ 


n 

char  const 

*n 

prefName; 

n 

intnn  n 

Q 

pgpEnvSeLector; 

Q 

Boo  L eannn 

n 

def Va  Lue; 

> BoolPrefEntry; 


typedef  struct  Da t a P ref En t ry_ 

{ 

n char  const  *n  prefName; 

n intnn  n n pgpEnvSeLector; 

> DataPrefEntry; 

extern  NumPrefEntry  pg pNumP r e f Ta b L e C kPG PP r e f Num La s t - kPG PP r e f N urn F i r s t 3 ; 
extern  StringPrefEntry  pg p S t r P r e f Ta b L e C kPG PP r e f S t r La s t - kPG P P r e f S t r F i r s t 3 ; 
extern  BoolPrefEntry  pg pBoo L P r e f Ta b L e C kPG PP r e f Boo L La s t - kPG P P r e f Boo L F i r s t 5 ; 
extern  DataPrefEntry  pg p Da t a P r e f Ta b L e C kPG PP r e f Da t a La s t - kPG P P r e f D a t a F i r s t 5 ; 


//define  n umP  r e f En  t r y ( p r e f Name  ) n nnnnnnnnn 

a a pgpNumP r e f Ta b L e C ( p r e f N a me  ) - kPG PP r e f N urn F i r s t 3 

//define  s t r P r e f En  t r y ( p r e f Na  me  ) n nnnnnnnnn 

n n pgpS t r P r e f Ta b L e C ( p r e f N a me  ) - kPG PP r e f S t r F i r s t 3 

//define  boo  L P r e f E n t r y ( p r e f N a me  ) nn  nnnnnnnn 

n n pg pBoo L P r e f Ta b L e C ( p r e f N a me ) - kPG PP r e f Boo  I F i r s t 5 

//define  da  t a P r e f E n t r y ( p r e f Name  ) nn  nnnnnnnn 

n n pg p Da t a P r e f Ta b L e C ( p r e f Na me ) - kPG P P r e f D a t a F i r s t U 


n 


n 


n 


n 


\ 

\ 

\ 

\ 
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#def i ne 
n n 
a n 
#clef  i ne 
n n 
n n 
#def 1 ne 
n n 
n n 
#def i ne 
n n 
n o 


pg pa P r e f Na me N umb e r Va L i d ( p r e f N a me ) n n n 
pgpaAssertCCprefName)  >=  kPGPPrefNumFirstn 
n n &&  (prefName)  < kPGPPref NumLast ) 

pgpaPrefNameStringVaLidCprefName)n  n n 
pgpaAssertCCprefName)  >=  kPG P P r e f S t r F i r s t n 
n n &&  CprefName)  < kPG P P r e f S t r La s t ) 
pg  pa  P r e f Na  me  Boo  L ea  n Va  L i d C p r e f N a me  ) H n n 

pgpaAssertCCprefName)  >=  k PG PP r e f Boo L F i r s t n 
n n &&  CprefName)  < k PG PP r e f Boo L La s t ) 
pg pa P r e f N a me D a t a Va L i d C p r e f N ame ) nn  n n 
pgpaAssertCCprefName)  >=  k PG P P r e f D a t a F i r s t n 
n n &S  CprefName)  < k PG P P r e f D a t a La s t ) 


□ 

n 

n 

n 

n 

a 

n 

n 


□ 

n 

n 

Q 

□ 

□ 

n 

Q 


n □ 

n Q 

n n 

Q n 

a n 

□ a 

n Q 

□ n 


n 

n 

□ 

B 

B 

B 

B 

B 


\ 

\ 

\ 

\ 

\ 

\ 

\ 

\ 


#end-ifn  /*  ] PG  PPR  E F S I NT_  H */ 


/* 

* Loca  L Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpUnionDB.c  --  Manage  PGPKeyDBs  which  are  unions  of  others 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

★ 

* $Id:  pg pUn i on D B . c , V 1.15.2.2  1997/06/07  09:50:31  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
//include  "config.h" 

#endi f 

//include  "pgpKDBint.h" 

#incLude  "pgpDebug.h" 

/*  Private  data  for  union  type  PGPKeyDB  */ 
typedef  struct  UnionDB  { 


n 

Boolean 

b d i rty; 

Q 

R i ng  S e t 

* r s e t ; 

n 

struct  UnionDBRec 

* u d b r ; 

> 

UnionDB; 

/*  One  List  element  per  unioned  PGPKeyDB  */ 
typedef  struct  UnionDBRec  { 
n struct  UnionDBRec  n*next; 

n PGPKeyDBn  n n *keyDB; 

> UnionDBRec; 


Virtual  Functions 


★ ★*★★★★*★***★********★★*  f 


/*  Returns  true  if  any  component  is  mutable  */ 
static  Boolean 

udbIsMutable  (PGPKeyDB  *kdb) 

{ 

n UnionDB  *udb  = (UnionDB  *)kdb->private; 

n UnionDBRec  *udbr  = udb->udbr; 

n while  (udbr)  { 

n n if  ( ( ( ud b r -> key DB ) -> i s M u t a b L e ) ( ud b r-> key D B ) ) ( 
n n n return  1; 

n n } 

n n udbr  = udbr -> next; 

n } 

n return  0; 

> 

/*  True  if  object  is  mutable  in  any  component  */ 
static  Boolean 

udbO b j I s Hu t a b L e (PGPKeyDB  *kdb,  RingObject  *testObj) 


{n 

□ 

UnionDB 

*udb  = 

(UnionDB  *)kdb->private; 

n 

UnionDBRec 

*ud  b r 

= udb->udbr; 

n 

while  (udbr)  ( 
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n n if  ( ( udb r-> key DB ) ->ob j I sMu t a b L e ( ud b r-> key D B,  testObj)) 
n n n returni; 

a n udbr  = udbr->next; 

n } 

n return  0; 

> 

/*  Returns  true  if  any  component  is  dirty  */ 
static  Boolean 

udbIsDirty  (PGPKeyDB  *kdb)  { 

n UnionDB  *udb  = (UnionDB  *)kdb-> private; 

n return  udb->bdirty; 

> 

/*  Mark  it  dirty  */ 
static  void 

udbDirty  (UnionDB  *udb) 

{ 

a udb->bdirty  = 1; 

n if  (udb->rset)  { 

n n ringSetDestroy  (udb->rset); 

n n udb->rset  = NULL; 

n } 

> 

/*  Return  a union  of  all  keys  in  sets  */ 
static  RingSet  * 

u d bG e t R i n g S e t (PGPKeyDB  *kdb)  f 


Q 

UnionDB 

*udb  = 

(UnionDB  * ) kdb->p r i va t e ; 

a 

UnionDBRec 

* udb  r = 

udb->udbr; 

a 

R i n g S e t 

* r s e t ; 

n 

RingSet 

*rs1  ; 

Q 

i f ( udb->rset ) 

n 

n return  udb->rset; 

n 

/*  Must  construct  a new  set  */ 

n 

rset  = NULL; 

u 

i f ( udb->rset ) 

n 

n ringSetDestroy  (udb->rset); 

Q 

udbr  = udb->udbr; 

n 

while  ( udb  r ) { 

u 

a rs1  = ( udb r->key DB ) ->g e t R i ng Se t (udbr 

->key DB ) ; 

n 

n pgpAssert  (rsl); 

n 

n if  (!rset)  { 

n 

n n rset  = r i ng S e t C r ea t e (ringSetPool 

( r s 1 ) ) ; 

n 

n > 

n 

a r i ng S e t Ad d S e t (rset,  rsl); 

n 

n udbr  = udbr->next; 

n 

> 

n 

r i n g S e t F r e e 2 e (rset); 

Q 

udb->rset  = rset; 

n return  rset; 

} 

/* 

[i:CHK:67e0a88ba577fbba7a89e000222cf83d333fdd4b3ada4e75e981604331c1131a7:: 


788 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpUnionDB.c 


* Big  problem  here  - it's  hard  to  tell  whether  an  important 

* key  addition  failed.  Could  have  a writeable  pubring  but  due 

* to  some  error  a read-only  secring.  One  of  our  add  attempts 

* may  return  an  error  due  to  immutability,  but  others  will  succeed. 

* How  to  distinguish  this  from  the  case  of  one  writeable  and  one 

* read-only  pubring,  which  is  OK  but  returns  similar  status. 

*/ 


static  PGPError 

udbAdd  (PGPKeyDB  *kdb,  RingSet  *toAdd) 


Q 

Un i onDB 

*udb  = (UnionDB  * ) kd b->p r i va t e ; 

n 

UnionDBRec 

*udbr  = udb->udbr; 

Q 

PGPError 

err,  erri; 

n 

err  = erri  = 0; 

B 

while  (udbr)  ( 

B 

n erri  = (udbr 

-> key DB ) ->a d d ( udb r-> k ey DB , toAdd); 

B 

n if  (erri) 

B 

n n err=err1; 

B 

n udbr  = udbr- 

> n e X t ; 

B 

> 

B 

udbDirty  (udb); 

B 

> 

return  err; 

static  PGPError 

udbRemove  (PGPKeyDB 

f 

*kdb,  RingObject  *toRemove) 

B 

Un i onDB 

*udb  = (UnionDB  * ) kd b->p r i va t e ; 

B 

UnionDBRec 

*udbr  = udb->udbr; 

B 

PGPError 

err,  erri; 

B 

err  = erri  = 0; 

B 

while  (udbr)  { 

B 

n erri  = (udbr 

->keyDB)->remove  ( udb r-> key DB , toReraove) 

B 

a if  (erri) 

B 

n n err=err1; 

B 

n udbr  = udbr- 

>next ; 

B 

} 

B 

udbDirty  (udb); 

B 

> 

return  err; 

static  PGPError 

udbChanged  (PGPKeyDB 

I 

*kdb,  RingSet  * c h a ng e d key s ) 

B 

U n i on  DB 

*udb  = (UnionDB  * ) kd b->p r i va t e ; 

B 

UnionDBRec 

*udbr  = udb->udbr; 

B 

PGPError 

err,  erri; 

err  = erri  = 0; 
while  (udbr)  { 

n erri  = ( ud b r-> key DB ) -> c h a n g ed  ( udb r-> key DB,  c h a n g e d key s ) ; 
n if  (erri) 
n n err=err1; 
n udbr  = udbr->next; 

} 
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n udbDirty  (udb); 

n erri  = pgpReSortKeys  (kdb,  changedkeys); 
a if  (erri) 
n n err=err1; 

n return  err; 

} 

static  PGPError 
udbCommit  (PGPKeyDB 
{ 

n UnionDB 
n UnionDBRec 
n PGPError 

n e r r = 0 ; 

n while  (udbr)  { 

n n erri  = C u d b r-> key D B ) -> c omm i t ( udb r->key DB ) ; 

n n if  (erri) 

n n n err=err1; 

n n udbr  = udbr->next; 

n > 

a udb->bdirty  = 0; 
n return  err; 

} 

static  PGPError 
udbRevert  (PGPKeyDB 
{ 

n UnionDB 

n UnionDBRec 

n PGPError 

n e r r = 0 ; 

n while  (udbr)  { 

n n erri  = ( udb r-> key DB ) -> r e ve r t ( ud b r-> key D B ) ; 

a a if  (erri) 

n n n err=err1; 

n n udbr  = udbr -> next; 

n } 

n udb->bdirty  = 0; 

n if  (udb->rset)  ( 

n n ringSetDestroy  (udb->rset); 

n n udb->  r se t = 0; 

n } 

n return  err; 

> 

static  PGPError 
udbReload  (PGPKeyDB 
{ 

n UnionDB 

n UnionDBRec 

n PGPError 

n e r r = 0 ; 

n while  (udbr)  ( 

n n erri  = ( ud b r-> key DB ) -> r e I oa d ( u d b r -> ke y DB ) ; 
n n if  (erri) 

CCCHK:0a9cdcc8774bee0edd1173cee2db76551b5c644c9127a99c8e9577b14bf22239e]3 
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*udb  = (UnionDB  * ) kd b->p r i va t e ; 
*udbr  = udb->udbr; 
err,  erri; 


*kdb) 

*udb  = (UnionDB  * ) kd b->p r i va t e ; 
*udbr  = udb->udbr; 
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n n n err=err1; 

n n udbr  = udbr->next; 

n > 

n udb->bdirty  = 0; 

n i f (udb->rset ) { 

n n ringSetDestroy  (udb->rset); 

n n udb->rset  = 0; 

n > 

a return  err; 

> 

static  void 

udbDestroy  (PGPKeyDB  *kdb) 

{ 

n UnionDB  *udb  = (UnionDB  * ) kd b->p r i va t e ; 

n UnionDBRec  *udbr  = udb->udbr; 

n UnionDBRec  *udbrnext; 


n 

i f 

(udb->rset)  ( 

n 

o 

ringSetDestroy  (udb->rset); 

n 

□ 

udb->rset  = 0; 

n 

> 

n 

while  (udbr)  { 

Q 

n 

pgpFreeKeyDB  ( ud b r-> key DB ) ; 

n 

D 

udbrnext  = udbr->next; 

Q 

n 

pgpMemFree  (udbr); 

□ 

n 

udbr  = udbrnext ; 

n > 

n pgpMemFree  (udb); 
> 


/★★★★★★★**★*******★*★★★★*★★★★  Constructor  *****★**★★*★★★★***★***★★*★/ 


PGPKeyDB  * 

pgpC rea t eUn i onKey DB  (PGPError  *error) 
{ 


Q 

PGPKeyDB 

*kdb; 

n 

Un i onDB 

*udb  ; 

Q 

*error  = 0; 

n 

kdb  = pgpKeyDBCreateInternaL  (); 

n 

if  (!kdb)  { 

n 

n *error  = PGPERR_ 

NOHEM; 

n 

n return  NULL 

r 

n 

> 

B 

udb  = (UnionDB 

*)  pgpHemALLoc  (sizeof 

B 

if  ( ! udb ) { 

B 

n *error  = PGPERR_ 

NOHEH; 

B 

n pg pKey D B D e s t r oy I n t e r n a L (kdb); 

B 

> 

B 

memset  (udb,  0, 

sizeof  (*udb)); 

B 

kdb->private 

B 

= udb; 

B 

kdb->magi cn  n 

B 

= PGPKDBUNIONHAGIC 

B 

kdb-> i sHutable 

B 

= udbIsMutabLe; 

B 

kdb->objIsHutabLen 

= ud bob j I s M u t a b L e ; 

(UnionDB)) 
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n 

kdb->isDirty 

B 

= 

udbIsDi rty; 

B 

kdb->getRingSetnn 

= 

udbGetRingSet; 

B 

kdb->add 

B 

= 

udbAdd ; 

B 

kdb->  remove 

B 

= 

udbRemove; 

B 

kdb->changedn 

B 

= 

udbChanged; 

B 

kdb->commi t 

B 

= 

udbCommit; 

B 

kdb-> revert 

B 

= 

udbRevert; 

B 

kdb-> reload 

B 

= 

udbReload; 

B 

kdb->destroyn 

B 

= 

udbDestroy; 

n pg p Key DB I n i 1 1 n t e r n a L ( kd b ) ; 

n return  kdb; 

} 

PGPError 

pg p U n i onKey D B Ad d (PGPKeyDB  *kdb,  PGPKeyDB  *kdbnew) 
{ 


B 

UnionDBRec 

*u db  r ; 

B 

U n i 0 n DB 

*udb  = (UnionDB  * ) kd b-> p r i va t e ; 

B 

udbr  = (UnionDBRec  *)  pgpMemAlloc  (sizeof  (UnionDBRec)); 

B 

if  (!udbr)  { 

B 

n return  PGPERR_NOHEM; 

B 

> 

B 

memset  (udbr. 

0,  sizeof  (*udbr)); 

B 

udbr->keyDB  = 

k d b n e w ; 

B 

udbr->next  = 

udb->udb  r ; 

n udb->udbr  = udbr; 

n return  PGPERR_0K; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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n 

tf  L i b/pgp  / key  s /Ha  ke  f i L e . i n 
U 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

# $Id:  Ha ke f i L e . i n , V 1.27.2.4  1997/06/07  09:50:33  mhw  Exp  $ 

tf 

0BJS=  pgpHemPooL.o  pgpRngPub.o  pgpRngPriv.o  pgpRngPkt.o  pgpRngPars.o  \ 
n pgpRngRead.o  pgpRngMnt.o  pgpTrust.o  pgpTrstPkt.o 

SHAREDHDRS=  pgpRngMnt.h  pgpRngPub.h  pgpRngRead.h  pgpTrust.h  pgpTrstPkt.h 
PRI\/HDRS=  pgpRngPriv.h  pgpRngPkt.h  pgpRngPars.h  pgpMemPooL.h 

a L L : : DONE 
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# 

U L i b / pg p / key s /ma ke f i L e . ms c 
U 

M Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
It 

tf  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:50:34  mhw  Exp  $ 

# 

PGPLIB  = n.  .\.  .\pgpLib.  Lib 

C FLAG S=-I . . \ \ \ i n c L ude  - I . . \ . . \ i n c L u d e \ 
n -I..\..\..  -DHAVE_C0^FIG_H=1  $(DEBUG) 

a L L : : n n Lib 

headers:n  incL 

MncLude  " ma  ke  f i L e . i n " 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

n n for  %f  in  ( $ ( S H AR E D H D R S ) ) do  copy  %f  . . \ \ \ i n c L ud e 

n if  not  "$ ( PRIVHDRS ) " = ="  " \ 

n n for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L ude 

D0S0BJSX  = n $ C OB J S : . o= . ob j ) 

D0S0BJS=n  $(D0S0BJSX:Unix=Win32) 

Lib:n  $(D0S0BJS) 

. c . ob  j : 

n $(CC)  SCCFLAGS)  -17  -c  $< 

c L ea  n : 

n deL*.obj 

DONE  : 

a if  exist  SCPGPLIB)  L i b / ou t : $ ( PG P LI B ) SCPGPLIB)  $(D0S0BJS) 

n if  not  exist  $(PGPLIB)  L i b / ou t : $ ( PG P LI B ) $(DOSOBJS) 
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/* 

* Test.c 

★ 


* Copyright  (C)  1996,1997  Pretty  Good 

* $Id: 

Test.c,v  1.1. 2.1  1 997/06/07  09 

*/ 

^include 

<stdio.h> 

^include 

<string.h> 

#include 

<std  1 i b . h> 

#incLude 

"pgpHakeSig.h" 

#incLude 

"pgpRngPub.h" 

#include 

"pgpRngRead.h" 

#i nc  Lude 

"pgpRingUI.h" 

#incLude 

"pgpRngMnt . h" 

#incLude 

"pgpHash.h" 

#incLude 

" pgpKeySpe  c . h " 

^include 

"pgpMem. h" 

#i nc  Lude 

"pgpEnv. h" 

^include 

" pg  p F i L e . h " 

^include 

"pgpPubKey. h" 

/tincLude 

"pgpRndom. h" 

ttincLude 

"pgpRndSeed.h" 

#i nc lude 

"pgpSigSpec.h" 

#incLude 

" p g p T i m e D a t e . h " 

static  void 

d e s t r u c t o r C s t r u c t RingFiLe  *fiLe,  struct  PgpFiLe  , void  *arg) 
{ 

n (void)fiLe; 

n pg p F i L e C L o s e ( f ) ; 

n (void)arg; 

} 


static  void 

p r i n t _ i t ( s t rue t Ringlterator  *iter,  unsigned  Level) 

{ 

n union  RingObject  *obj; 


D 

□ 

n 

D 

□ 

> 


while  (ringIterNextObjeetCiter,  Level)  > 0)  { 
n obj  = r i ng  1 1 e r C u r r e n t Ob  j e c t ( i t e r , Level); 

n r i n g Ob j P r i n t < s t dou t , r i n g I t e r S e t ( i t e r ) , obj,  LeveL*2); 

n p r i n t _ i t ( i t e r , LeveL+1); 

} 


static  void 

p r i n t _c he c k ( VO i d *arg,  struct  Ringlterator  *iter,  int  status) 

{ 

n (void)iter; 

n status  = status  < 0 ? : (status  ? '!'  : '?'); 

n puteCstatus,  (FILE  *)arg); 

n ffLush((FILE  *)arg); 

} 


static  int 
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p rog r e s s ( VO i d *arg,  int  c) 

{ 

n putcharCc); 

n ffLush(stdout); 

n returnO; 

> 

#define  RANDFILE  "randseed.bin" 

static  void 

r a nd s e e d r e a d ( s t r u c t PgpEnv  *env) 
{ 


n 

char 

*pc 

getenvC'PGPPATH"); 

n 

char 

* r a n d ; 

s 

FILE 

*f; 

n 

if  (pc) 

s 

n 

pg pe n V S e t S t r i n g ( e n V,  PG P E N V_PG PP AT H , pc. 

n 

n 

n 

n PGPENV_PRI_PUBDE FAULT); 

n 

n 

rand  = (char  * ) pg pM emA L L o c ( s t r L e n ( p c ) + s t r 1 e n ( R AN D F I LE ) +2 ) ; 

n 

Q 

i f 

(rand)  ( 

n 

n 

□ 

strcpy(rand,  pc); 

□ 

n 

n 

strcat(rand,  "/"); 

n 

o 

Q 

strcat(rand,  RANDFILE); 

n 

n 

□ 

pg p e n V S e t S t r i n g ( e n V , PG P E N V_R AN D S E E D , rand. 

n 

n 

n 

n n PGPENV_PRI_PUBDE FAULT ); 

□ 

n 

n 

f = fopen(rand,  "rb"); 

Q 

n 

n 

if  (f ) { 

n 

o 

n 

n pgpRandSeedRead(f,  NULL); 

n 

a 

n 

n fcLose(f); 

D 

n 

n 

> 

n 

n 

El 

pgpHemFree(rand); 

n 

n 

> 

n 

> 

> 

static 

void 

randseedwrite 

r 

(struct  PgpEnv  *env) 

□ 

char 

const 

*rand  = pgpe n vGe t S t r i ng ( en v,  PG PE N V_ R AN D S E E D , NULL,  NULL) 

D 

FILE 

n 

if  (rand)  { 

n 

n 

f = 

fopen(rand,  "wb"); 

n 

n 

i f 

(f  ) { 

□ 

n 

n 

pg pRa n d S e e d W r i t e ( f , NULL,  NULL); 

n 

n 

D 

fcLose(f); 

n 

s 

} 

int 

mainCint  argc,  char  **argv) 

{ 

a FILE  *ff; 

a FILE  *ff2; 

a struct  PgpFiLe  *f,  *f2; 

a struct  RingPooL  *pooL; 
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n 

struct  RingFiLe  *fiLe; 

a 

struct  RingSet  const  *set; 

n 

struct  Ringiterator  *iter; 

n 

unsigned  count; 

n 

int  error; 

n 

struct  PgpEnv  *pgpenv  = pgpenvCreateC); 

n 

if  (argc  !=  2 SS  argc  !=  3)  { 

□ 

n fprintf(stderr,  "Usage:  %s  file  CdestfiLeDXn",  argvC03); 

n 

n returni; 

n 

> 

n 

pool  = r i ng Poo  1 C r e a t e ( NU L L ) ; 

n 

if  (!pooL)  { 

□ 

n perrorf "Unable  to  allocate  ringpool"); 

a 

n returni; 

Q 

} 

n 

puts("Pool  successfully  opened"); 

n 

randseedread(pgpenv)  ; 

n 

ff  = fopen(argvC13,  "rb"); 

n 

f = pgpFileReadOpenCff,  NULL,  NULL);  /*  OK  to  chain  errors  */ 

□ 

if  (Iff  II  ! f ) { 

n 

n perror(argvCID); 

n 

n returni; 

n 

> 

n 

puts("File  successfully  opened."); 

n 

file  = ringFileOpenCpool,  f,  1,  Serror); 

n 

printf("file  = %p  error  = %d\n",  file,  error); 

n 

r i n g F i 1 e S e t D e s t r u c t o r ( f i 1 e , destructor,  (void  *)0); 

n 

printfC" Trouble  = %p\n",  (void  *)ringFileTrouble(file)); 

□ 

error  = r i ngTop L i s t T r ou b 1 e ( s t dou t , file,  0); 

n 

printf(" error  = %d\n",  error); 

n 

set  = r i ng F i 1 eSe t ( f i 1 e ) ; 

n 

printfC %u  signatures  to  checkXn",  ringPoolCheckCount(set,  set,  1)); 

tt 

error  = ringPoolCheck(set,  set,  1,  print_check,  (void  *)stdout); 

□ 

printf(" Check  returned  %d\n",  error); 

□ 

n 

iter  = r i n g 1 1 e r C r e a t e ( s e t ) ; 

n 

printf("iter  = %p\n",  iter); 

Q 

print_it(iter,  1); 

n 

ringlterDestroy(iter); 

Q 

count  = ringMnt(set,  (struct  RingSet  *)NULL,  pg pT i me S t a mp ( 0 ) ) ; 

Ui f ndef 

NOKEYSIGNTEST 

n 

{ 

Q 

struct  PgpSigSpec  *ss; 

n 

struct  RingSet  *ns; 

n 

struct  Pg p Ra ndomC on t ex t *rc  = pg p Ra ndom C r e a t e ( ) ; 

n 

union  RingObject  *newsig,  *key,  *name; 

n 

byte  *sigbuf; 

n 

int  siglen; 
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n FILE  *ffsec  = fopenC secring. pgp",  "rb"); 

n struct  PgpFile  *fsec  = pg p F i L e R e a dOpe n ( f f s e c , NULL,  NULL); 

n struct  RingFiLe  *secfiLe  = ringFileOpenCpooL,  fsec,  1,  &error); 

n union  RingObject  *secobj  = ringLatestSecretlringFiLeSetCsecfile), 

n struct  PgpSecKey  *seckey  = r i ng S e c S e c Key ( r i ng F i L e S e t ( s e c f i L e ) , secobj); 

a int  err  = pgpSecKeyUnLockCseckey,  "x",  1); 


a 

a 

n 

a 

a 

#if  1 

n 

#e  L se 
a 

#end  i f 
□ 

□ 

n 

□ 

□ 

#if  0 

n 

□ 

#e  L se 

n 

n 

n 

n 

Send  i f 

n 

Q 

n 

D 

□ 

n 

D 

□ 

□ 

Q 

n 

n 

D 

□ 

Send i f 


printf  ("Unlock  returns  %d\n",  err); 
ns  = ringSetCreate(pooL); 
r i ng S e t Ad d S e t ( n s , set); 
if  (err  > 0)  { 

n ss  = pg p S i g S pe c C r e a t e ( s e c key , PG P_H A S H_M D 5 , 


PGP_SIGTYPE_KEY_PERSONA, 


PGP_SIGTYPE_KEY_GENERIC, 


n pgpTimeStamp  ( 

n n pg pe n vG e 1 1 n t ( pg pe n V,  PG P E N V_T Z F I X , N U LL, N U L L ) ) , 

n pgpenvGetInt(pgpenv,  PG P E N V_ V E RS 1 0 N , NULL,  NULL)); 

iter  = r i ng I t e r C r e a t e ( s e t ) ; 
ringIterNextObject(iter,  1); 


/*  Sign  key  */ 

name  = r i ng I t e r C u r r e n t Ob j e c t ( i t e r , 1); 


do  { 

n ringIterNextObject(iter,  2); 

n name  = r i n g I t e r C u r r e n t Ob j e c t ( i t e r , 2); 

> while  ( r i ng Ob j e c t Ty pe ( name ) ! = R I NGT Y P E_N AM E ) ; 


printf  ("name  = %p\n",  name); 

sigbuf  = (byte  * ) pg pHemA I I o c ( pg pMa ke S i gHa x S i z e ( s s ) ) ; 
printf  ("sigbuf  = %p\n",  sigbuf); 
siglen  = r i ng S i gnOb j ( s i gbuf , ns,  name,  ss,  rc); 
printf  ("siglen  = %d\n",  siglen); 

neusig  = r i ng C r e a t e S i g ( n s , name,  sigbuf,  siglen); 

printf  ("neusig  = %p\n",  neusig); 

ringSetFreeze(ns); 

iter  = r i ng 1 1 e r C r e a t e ( n s ) ; 

print_it  (iter,  1); 

ri ngIterDestroy( i ter) ; 

set  = ns; 


Si f def 

D 

□ 

□ 

n 

n 

n 

a 

a 

□ 


NAMETEST 

{ 

char  *name  = "hubert  humphrey"; 
struct  RingSet  *ns  = r i n g S e t C r e a t e ( poo  I ) ; 
union  RingObject  *key,  *nameobj; 
printf("new  RingSet  ns  = %p\n",  ns); 
r i ng S e t Add S e t ( n s , set); 
iter  = r i n g 1 1 e r C r ea t e ( s e t ) ; 
printfC'iter  = %p\n",  iter); 
r i ng I t e r Ne X t Ob j e c t ( i t e r , 1); 
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a 

n 

Q 

Q 

n 

n 

□ 

Q 

Q 

n 

n 

n 

a 

□ 

Q 

□ 

Q 

□ 

□ 

□ 

Q 

□ 

□ 

a 

n 

Q 

n 

n 

n 

a 

n 

n 

#e  n d 1 f 


key  = r i ng I t e rC u r ren t Ob j e c t (iter,  1); 
printf("key  = %p\n",  key); 
ringlterRewindCiter,  1); 
print_it  (iter,  1); 
ringlterDestroy(iter); 

nameobj  = ringCreateNanie(ns,  key,  name,  strLen(name)); 
printf("new  name  = %p\n",  nameobj); 
if  (nameobj)  ( 
n r i n g S e t F r e e z e ( n s ) ; 

n iter  = r i n g I t e r C r ea t e ( n s ) ; 

n print_it  (iter,  1); 

n ringlterDestroy(iter); 

n set=ns; 

} 

/*  Now  test  a duplicate  */ 

ns  = r i n g S e t C r e a t e ( poo L ) ; 

ringSetAddSet(ns,  set); 

iter  = ringlterCreate(set); 

r i ng 1 1 e r N e X t Ob j e c t ( i t e r , 1); 

key  = r i ng I t e r C u r r e n t Ob j e c t (iter,  1); 

printf  ("key  = %p\n",  key); 

ringlterDestroy(iter); 

nameobj  = r i ng C r ea t e Na me ( n s , key,  name,  s t r L e n ( na me ) ) ; 
printf  ("new  dup  name  = %p\n",  nameobj); 
if  (nameobj)  ( 
n ringSetFreeze(ns); 

n iter  = r i n g I t e r C r e a t e ( n s ) ; 

a print_it  (iter,  1); 

n r i ng 1 1 e r D e s t r oy ( i t e r ) ; 

n set=ns; 

} 

> 


#ifdef  KEYADDTEST 
n { 

n struct  PgpPubKey  *pubkey; 

n struct  PgpKeySpec  *ks; 

n struct  RingSet  *ns; 

n union  RingObject  *key,  *newkey; 


n 

a 

n 

□ 

n 

□ 

□ 

a 

Q 

n 

n 

n 

Q 

a 

n 

#end  i f 


ns  = r i ng S e t C r e a t e ( poo L ) ; 

ringSetAddSet(ns,  set); 

iter  = r i n g 1 1 e r C r ea t e ( s e t ) ; 

ringIterNextObject(iter,  1); 

key  = r i n g I t e r C u r r en t 0 b j e c t ( i t e r , 1); 

printf  ("key  = %p\n",  key); 

pubkey  = r i ng Key Pu bKey ( s e t , key); 

printf  ("pubkey  = %p\n",  pubkey); 

ks  = pgpKeySpecCreate(pgpenv); 

pg pKey Spe c Se t C r ea t i on ( ks , r i ng Key C r ea t i on ( s e t , key)); 
newkey  = r i n g C r e a t e Key ( n s , pubkey,  ks,  p u b key->p k A L g ) ; 
printf  ("newkey  = %p\n",  newkey); 
pgpPubKeyDestroy(pubkey); 
pgpKeySpecDestroy(ks); 

} 


#ifdef  KEYEDITTEST 
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n 

n 

n 

n 

n 

n 


{ 

struct  PgpSecKey  *seckey; 
struct  PgpKeySpec  *ks; 
struct  RingSet  *ns; 

struct  PgpRandomContext  *rc  = pgpRandomCreateC); 
union  RingObject  *key,  *newsec; 


n 

n 

□ 

n 

□ 

n 

n 

Q 

□ 

n 

n 

D 

n 

□ 

D 

□ 

n 

Q 

n 

Q 

□ 


n 


n 

a 

n 

□ 

n 

n 

D 

a 

# e nd i f 


ns  = r i n g S e t C r e a t e ( poo L ) ; 

ringSetAddSet(ns,  set); 

iter  = ringlterCreate(set); 

ringIterNextObjectCiter,  1); 

key  = r i n g I t e r C u r r e n t 0 b j e c t ( i t e r , 1); 

printf  ("key  = %p\n",  key); 

ks  = pgpKeySpecCreate(pgpenv); 

pgpKeySpecSetCreation(ks,  ringKeyCreation(set,  key)); 
seckey  = r i n g S e c S e c Key ( s e t , key); 
printf  ("seckey  = %p\n",  seckey); 
if  (seckey)  ( 


int  err  = pg p S e c Key U n L o c k ( s e c k ey , "x 
printf  ("Unlock  returns  %d\n",  err); 
if  (err>0)  { 
n 


1); 


1); 

e r r ) ; 


err  = pgpSecKeyChangeLock(seckey,  pgpenv,  rc,  "y",  1); 
printf  ("ChangeLock  returns  %d\n",  err); 
pgpSecKeyLock(seckey); 
err  = pg p S e c Key U n L o c k ( s e c key , "y' 
printf  ("Unlock  now  returns  %d\n' 
pgpSecKeyLock(seckey); 

newsec  = ringCreateSec(ns,  seckey,  ks,  seckey->pkALg); 

printf  ("newsec  = %p\n",  newsec); 

ringSetFreeze(ns); 

iter  = r i n g 1 1 e r C r e a t e ( n s ) ; 

print_it  (iter,  1); 

ringlterDestroy(iter); 

set  = ns; 


#i f def 

□ 

n 

D 

n 

□ 

D 

□ 

n 


KEYGENTEST 

{ 

struct  PgpSecKey  *seckey; 
struct  PgpKeySpec  *ks; 
struct  RingSet  *ns; 

struct  PgpRandomContext  *rc  = pg p Ra ndomC r ea t e ( ) ; 
union  RingObject  *newsec,  *nameobj; 
char  *name  = "Gumby"; 
int  err; 


n ns  = r i n g S e t C r e a t e ( poo  I ) ; 

n r i ng S e t Add S e t ( n s , set); 

n ks  = pgpKeySpecCreate(pgpenv); 


n 

□ 

n 

n 


seckey  = pg p S e c Key G e n e r a t e ( PG P_PKA LG_ R S A,  1024,  rc,  progress, 
n n n n n NULL,  Serr); 

printf  ("\npgpSecKeyGenerate  returns  key=%p,  err=%d\n",  seckey,  err); 
err  = pgpSecKeyChangeLock(seckey,  pgpenv,  rc,  "x",  1); 
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n printf  ("ChangeLock  returns  %d\n",  err); 

n pgpSecKeyLock(seckey); 

n err  = pgpSecKeyUnLockCseckey,  "x",  1); 

n printf  ("Unlock  now  returns  %d\n",  err); 

n pgpSecKeyLockCseckey); 


n newsec  = ringCreateSecCns,  seckey,  ks,  PGP_PKALG_RSA); 

n printf  ("newsec  = %p\n",  newsec); 

n nameobj  = r i ng C r ea t e N a me ( n s , newsec,  name,  s t r L e n ( n a me  ) ) ; 

n printf  ("nameobj  = %p\n",  nameobj); 


D 

□ 

D 

n 

n 

Q 

# en d i f 

n 

n 

n 

□ 

n 

a 

□ 

□ 

□ 

n 

□ 

n 

□ 

n 


ringSetFreeze(ns) ; 

iter  = r i ng I t e r C r ea t e ( n s ) ; 

print_it  (iter,  1); 

ringlterDestroy(iter); 

set  = ns; 

> 

if  (argc  ==  3)  ( 

n ff2  = fopen(argvC23,  "wb"); 

n f2  = pgp F i L eW r i t eOpen ( f f 2 , NULL);n  /*  OK  to  chain  */ 

n i f ( ! f f 2 I I ! f2)  { 

n n perror(argvC2D); 

n n returni; 

n > 

n puts(" Output  file  successfully  opened."); 

n error  = ringSetWrite(set,  f2,  (struct  RingFile  **)NULL,  4,  0); 

n pg p F i I eC I ose ( f 2 ) ; 

n if  (error<0) 

n n printf( "***"); 

n printf("ringPoolWrite  returned  %d\n",  error); 

> 


n 

Q 

D 

□ 

> 


ri ngPooL  Destroy(pool  ) ; 
randseedwrite(pgpenv); 
pgpenvDestroy(pgpenv); 
return  0; 


#if  BORLANDC 

#if  BORLANDC  <=  0x400 

unsigned  _stklen  = 16384; 

#e  L se 

unsigned  const  _stkLen  = 16384; 
Send  i f 
# end i f 
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/* 

* TestGen.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  TestGen.c, V 1.1. 2. 2 1997/06/07  09:50:33  mhw  Exp  $ 

*/ 


#incLude 

<s  t d i 0 . h> 

t/include 

<string.h> 

^include 

<s  t d 1 i b . h> 

//include 

"pgpMakeSig.h" 

^include 

"pgpRngPub.h" 

ftinc  Lude 

"pgpRngRead . h" 

^include 

"pgpRingUI.h" 

//i  nc  lude 

"pgpRngMnt . h" 

#include 

"pgpHash . h" 

Mine Lude 

"pgpKeySpec.h" 

//include 

"pgpHem. h" 

//include 

"pgpEnv. h" 

//include 

"pgpFi Le.h" 

//include 

"pgpPubKey.h" 

//i  nc  Lude 

"pgpRndom.h" 

//include 

"pgpRndSeed.h" 

ttinc  Lude 

"pgpSigSpec.h" 

//include 

"pgpTimeDate.h 

static  void 

d e s t r u c t o r ( s t r u c t RingFiLe  *file,  struct  PgpFiLe  *f,  void  *arg) 
{ 

n (void)fiLe; 

n pgp F i L e C L o s e ( f ) ; 

n (void)arg; 

> 


static  void 

p r i n t _i t ( s t r uc t Ringiterator  *iter,  unsigned  Level) 
{ 

n union  RingObject  *obj; 


□ 

□ 

n 

n 

□ 

} 


while  ( r i ng  1 1 e r Nex t Ob j e c t ( i t e r , Level)  > 0)  C 
n obj  = r i ng I t e r C u r r e n t Ob j e c t ( i t e r , Level); 

n r i ngOb j Pr i n t ( s t dou t , r i ng 1 1 e r S e t ( i t e r ) , obj,  LeveL*2); 

n pri nt_i t ( i ter,  LeveL+1); 

} 


static  void 

pri nt_check(voi d *arg,  struct  Ringiterator  *iter,  int  status) 
{ 

n (void)iter; 

n status  = status  < 0 ? : (status  ? '!'  : '?'); 

n putc(status,  (FILE  *)arg); 

n fflush((FILE  *)arg); 

} 


static  int 
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p rog r e s s ( VO i d *arg,  int  c) 

{ 

B putchar(c); 

B ffLush(stdout); 

B returnO; 

} 

#define  RANDFILE  "randseed.bin 


static  void 

ra n d s e e d r e a d ( s t r u c t PgpEnv  *env) 


n 

B 

c 

Q 

□ 

B 

Q 

□ 

Q 

n 

□ 

a 

□ 

B 

Q 

□ 

a 

□ 

□ 

□ 

Q 

} 


char  *pc  = getenv(''PGPPATH"); 
char  *rand; 


FILE  *f; 


i f 
n 
□ 

D 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


(pc)  { 

p g p en  V S e t S t r i ng  ( e n V , PG  P E N V_PG  PP  AT  FI , pc, 
a a PGPENV_PRI_PUBDEFAULT)  ; 

rand  = (char  * ) pg pM em A L L o c ( s t r L e n ( p c ) + s t r L e n ( R A N D F I L E ) +2 ) ; 
if  (rand)  { 

B strcpy(rand,  pc); 

B strcat(rand,  "/"); 

B strcat(rand,  RANDFILE); 

B pgpenvSetSt ri ng(env,  PG P E NV_ R AN D S E E D , rand, 

a a a PG P E N V_ PR  I _ PU B D E F A U LT  ) ; 

B f = fopen(rand,  "rb"); 

B if  (f)  { 

B B pgpRandSeedRead(f,  NULL); 

B a fcLose(f); 

a } 

a pg pM em F r e e ( r a nd ) ; 

} 


} 


static  void 

r a nd s e e d w r i t e (struct  PgpEnv  *env) 

{ 

a char  const  *rand  = pg  pe  n vG  e t S t r i ng  ( en  v,  PG  P E N\/_  R AN  D S E E D , NULL,  NULL); 

a FILE  *f; 


a 

a 

a 

a 

a 

a 

a 

> 


if  (rand)  ( 

a f = fopen(rand,  "wb"); 

a if  (f)  { 

a a pg p Ra nd S e ed W r i t e ( f , NULL,  NULL); 

a a fcLose(f); 

a } 

} 


int 

main(int  argc,  char  **argv) 

{ 

a FILE  *ffsec,  *ffpub; 

B FILE  *ffsec2,  *ffpub2; 

B struct  PgpFiLe  *fsec,  *fsec2,  *fpub,  *fpub2; 

B struct  RingPooL  *pooL; 
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□ 

n 

n 

□ 

n 

□ 

a 

n 

n 

Q 

□ 

Q 

n 

a 

□ 

Q 

□ 

n 

n 

n 

a 

□ 

n 

D 

□ 

n 

n 

□ 

o 

□ 

□ 

o 

n 

□ 

n 

Q 

a 

n 

Q 

n 

n 

D 

n 

n 

D 

n 

a 

n 

n 

n 


TestGen.c 


struct  RingFiLe  *filesec,  *fiLepub; 

struct  Ringiterator  *iter; 

struct  PgpSecKey  *seckey; 

struct  PgpKeySpec  *ks; 

struct  RingSet  const  *set; 

struct  RingSet  *nsec,  *npub; 

struct  Pg p Ra ndomC on t e X t *rc  = pg p R a n d omC r e a t e ( ) ; 

union  RingObject  *newsec,  *nameobi; 

char  *name; 

i n t e r r ; 

unsigned  count; 

int  bits; 

byte  p ka  L g ; 

struct  PgpEnv  *pgpenv  = pg p e n v C r e a t e ( ) ; 


if  (argc  !=  8)  { 
n fprintf  (stderr, 

n n "Usage:  %s  secin  secout  pubin  pubout  type  name  bits\n", 

n n n argvC0D); 

n returni; 

> 


if  (strcmpCargvCSD,  "rsa")==0) 


D 

else 

D 

else 

n 

else 

a 

n 

o 

> 


pkalg  = PGP_PKALG_RSA; 
if  ( s t r cmp ( a rg V C 5 D , "elg")==0) 

pkalg  = PGP_PKALG_ELGAHAL; 
if  ( s t r cmp ( a rg V C 5 D , "dsa")==0) 

pkalg  = PGP_PKALG_DSA; 

{ 

fprintf  (stderr, 

"Unknown  type,  should  be  \"rsa\", 
return  1; 


\"elg\",  or  \"dsa\"\n"); 


name  = argvC6]; 


if  ((bits  = a t o i ( a r g V C 7 D ) ) <=  0 ||  bits  >=  10000)  { 
n fprintf  (stderr,  "bits  should  be  >0  and  < 10000\n"); 

n returni; 

> 


pool  = r i ng Poo  I C r ea t e ( N U LL ) ; 
if  (!pool)  { 

n perror( "Unable  to  allocate  ringpool"); 

n returni; 

> 

puts("Pool  successfully  opened"); 

randseedread(pgpenv) ; 

ffsec  = fopen(argvC1],  "rb"); 

fsec  = pg p F i I e Rea dOp e n ( f f s e c , NULL,  NULL);  /*  OK  to  chain  errs  */ 
if  (!ffsec  II  !fsec)  { 
n pe r r o r ( a r g V C 1 ] ) ; 

n returni; 

} 

puts( "Secret  file  successfully  opened."); 
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n fiLesec  = r i n g F i L e 0 p e n ( p oo L , fsec,  1,  &err); 

n printf("fiLe  = %p  err  = %d\n",  fiLesec,  err); 

n ringFiLeSetDestructorCfiLesec,  destructor,  (void  *)0); 

n printfC" Trouble  = %p\n",  (void  *)ringFiLeTroubLe(fiLesec)); 

a err  = r i n gTo p L i s t T r o u b L e ( s t dou t , fiLesec,  0); 

n printf("err  = %d\n",  err); 

n ffpub  = fopen(argvC3D,  "rb"); 

a fpub  = pg p F i L e ReadOpen ( f f pub,  NULL,  NULL);  /*  OK  to  chain  errs  */ 

n if  (!ffpub  II  Ifpub)  { 

n n pe r r o r ( a r g V C 3 D ) ; 

n n returni; 

n } 

n puts(" Public  file  successfully  opened."); 

n filepub  = ringFiLeOpen(pooL,  fpub,  1,  &err); 

n printf("fiLe  = %p  err  = %d\n",  filepub,  err); 

n ringFiLeSetDestructor(fiLepub,  destructor,  (void  *)0); 

n printf(" Trouble  = %p\n",  (void  *)ringFiLeTroubLe(fiLepub)); 

n err  = r i n gTo p L i s t T r o u b L e ( s t dou t , filepub,  0); 

n printf("err  = %d\n",  err); 

n set  = r i n g F i L e S e t ( f i L e s e c ) ; 

n nsec  = r i n g S e t C r ea t e ( poo L ) ; 

n r i n g S e t Add S e t ( n s e c , set); 

n ks  = pg p Key S p e c C r ea t e ( pg p e n V ) ; 

n pg pKey S p e c S e t Va L i d i t y ( k s , 0xffff); 

n seckey  = pg p S e c Key G e n e r a t e ( p ka L g , bits,  rc,  progress, 

n n n n n n NULL,8err); 

n printf  ("\npgpSecKeyGenerate  returnsec  key=%p,  err=%d\n",  seckey, 

n err  = p g p S e c Key C h a ng e Lo c k ( s e c key , pgpenv,  rc,  "x",  1); 

n printf  ("ChangeLock  returnsec  %d\n",  err); 

n pgpSecKeyLock(seckey); 

n err  = pgpSecKeyUnLock(seckey,  "x",  1); 

a printf  ("Unlock  now  returnsec  %d\n",  err); 

n pgpSecKeyLock(seckey); 

n newsec  = ringCreateSec(nsec,  seckey,  ks,  pkalg); 

n printf  ("newsec  = %p\n",  newsec); 

n nameobj  = ringCreateName(nsec,  newsec,  name,  strLen(name)); 

a printf  ("nameobj  = %p\n",  nameobj); 

n r i n g S e t F r e e z e ( n s e c ) ; 

n iter  = r i ng 1 1 e r C r e a t e ( n s e c ) ; 

n print_it  (iter,  1); 

n ringlterDestroy(iter); 

n /*  Now  add  key  to  public  key  fi 

a set  = r i ng F i L e S e t ( f i L e pu b ) ; 

n npub  = r i n g S e t C r e a t e ( poo L ) ; 

n r i ng Set  Add  Set ( npub,  set); 

n r i ng S e t AddOb j e c t ( n p u b , newsec); 

n r i ng Set AddOb j e c t ( npub  , nameobj) 

□ 

[CCHK:653fe550c8f7c336656dffcc54c11c7ee98a2977f44c772aa2277bc477bef9ef2:: 


Le  */ 


n/*  add  just  key  object  */ 


e r r ) ; 
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n 

□ 

n 

n 

n 

n 

D 

□ 

n 

n 

D 

D 

n 

a 

a 

n 

a 

a 


ringSetFreeze(npub); 

iter  = r i n g I t e r C r e a t e ( npu b ) ; 

print_it  (iter,  1); 

ringlterDestroy(iter); 

ffsec2  = fopen(argvC2Il,  "wb"); 

fsec2  = pg p F i L e W r i t eOpe n ( f f s e c 2 , NULL);n/*  OK  to  chain  */ 
if  (!ffsec2  II  !fsec2)  { 
n p e r r o r ( a r g V C 2 D ) ; 

n returni; 

} 

putsC  "Output  file  successfully  opened."); 

err  = r i n g S e t W r i t e C n s e c , fsec2,  (struct  RingFile  **)NIILL,  4, 
n WRITETRUST_SEC|WRITETRUST_PUB); 

pgpFi leClose(fsec2); 
if  (err  < 0) 
n printf("***  "); 

printf("ringPoolWrite  returned  %d  on  sec\n",  err); 


n ffpub2  = fopen(argvC4],  "wb"); 

n fpub2  = pg p F i I e W r i t e 0 p e n ( f f p u b 2 , NULL);n/*  OK  to  chain  */ 

n if  (!ffpub2  ||  !fpub2)  ( 

a a pe r r o r ( a r g V C 4 ] ) ; 

a a returni; 

a > 

a puts( "Output  file  successfully  opened."); 

a err  = r i ng S e t W r i t e ( n pu b , fpub2,  (struct  RingFile  **)NULL,  4, 

a a WRITETRUST_SEC I WRITETRUST_PUB); 

a pgpFileClose(fpub2); 

a if(err<0) 

a a printf( "***"); 

a p r i n t f ( " r i n g Poo  I W r i t e returned  %d  on  pub\n",  err); 


done  : 

a ringPoolDestroy(pool); 

a randseedwrite(pgpenv); 

a pgpenvDestroy(pgpenv); 

a return0; 

> 


#if  BORLANDC 

#if  BORLANDC  <=  0x400 

unsigned  _stklen  = 16384; 

# e I s e 

unsigned  const  _stklen  = 16384; 
#e  nd i f 
^endi f 
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/* 

* pgpMemPool.c  - Pooled  memory  allocation,  similar  to  GNU  obstacles. 

★ 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by  Colin  Plumb. 

* 

* $Id:  pgpHemPool . c,v  1.2. 2.1  1 997/06/07  09:50:34  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e nd i f 


#include  <stdio.h> 
#include  <string.h> 


#i nc lude 
#include 
#i nc lude 
//include 


pgpDebug.h" 
pgpMemPoo I . h 
pgpMem. h" 
pgpUsuals.h" 


#ifndef  NULL 
Sdefine  NULL  0 
//  e n d i f 


/*  Define  this  symbol  to  cause  secure  wiping  */ 
//ifndef  SECURE 
#define  SECURE  1 
# e n d i f 


/* 

* The  memory  pool  allocation  functions 

★ 

* These  are  based  on  a linked  list  of  memory  blocks,  usually  of  uniform 

* size.  New  memory  is  allocated  from  the  tail  of  the  current  block, 

* until  that  is  inadequate,  then  a new  block  is  allocated. 

* The  entire  pool  can  be  freed  at  once  by  calling  memPoo I F ree  ( ) . 

*/ 

struct 
n 
□ 
n 

>; 

/*  Page  size  to  use  */ 

#ifdef  MSDOS 

//define  ALLOC_UNIT  1024 

//else 

//define  ALLOC_UNIT  4096 
// e nd i f 

static  struct  MemPool  const  EmptyPool  = 

n { NULL,  NULL,  0,  ALLOC_UNIT,  0,  (int  (*)(void  *))NULL,  NULL}; 

/* 

* Initialize  the  pool  for  first  use 

[CCHK:63c3e61427622edd35f4462000bf77caf649a44b4efee25dc3883999b08c0ec1a]] 


Poo  I Buf  { 

struct  PoolBuf  *next; 
unsigned  size; 

/*  Data  follows  */ 
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*/ 

void 

memPoo L I n i t ( s t r u c t MemPool  *pooL) 

{ 

n *pooL  = EnptyPooL; 

> 

/*  Set  the  pool's  purge  function  */ 
void 

memPoo L S e t Pu r g e ( s t r u c t MemPool  *pool,  int  ( *pu rg e ) ( vo i d *),  void  *arg) 
{ 

n pool->purge  = purge; 

n poo l->pu rgea rg  = arg; 

> 

/* 

* Free  all  the  memory  in  the  pool 
*/ 

void 

memPoo I Empty ( s t ru c t MemPool  *pool) 

{ 

a struct  PoolBuf  *buf; 

n while  (Cbuf  = pool->head)  !=  NULL)  { 

n n pool->head  = buf->next; 

#if  SECURE 

n n memsetCbuf,  0,  buf->size); 

# e nd i f 

n n pg pHem F ree ( bu f ) ; 

n } 

n poo  I ->f r e e s pa c e = 0; 

n poo l->t o t a I s i z e = 0; 

} 

/* 

* Restore  a pool  to  a marked  position,  freeing  subsequently  allocated 

* memory. 

*/ 

void 

memPoo I C ut Ba c k ( s t ru c t MemPool  *pool,  struct  MemPool  const  *cutback) 

{ 

n struct  PoolBuf  *buf; 

n pgpAssert(pool); 

n pg p As s e r t ( c u t ba c k ) ; 

n pg p As s e r t ( poo  I -> t o t a I s i z e >=  c u t ba c k-> t o t a I s i z e ) ; 

n whileCCbuf  = pool->head)  !=  c u t ba c k-> h e a d ) { 


n 

□ 

pool->head  = buf->next; 

#if  SECURE 

n 

#encli  f 

Q 

memsetCbuf,  0,  buf->size); 

Q 

a 

pgpMemFree(buf); 

n 

> 

n 

*poo  L 

= *cutback; 

} 

CCCHK: 63881 ff3d61a5n 25 b9dbcc56206a4f2999cc0e09d446cc00f30a2815ce4502a1]] 
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/* 

* Structure  and  string  aLLocations. 

* To  make  aLingment  work,  strings  and  other  objects 

* are  allocated  from  different  pools. 

*/ 


/* 

* Allocate  a chunk  of  memory  for  a structure,  with  the  given  alignment. 

* This  is  more  s pa c e -e f f i c i e n t than  mallocC)  for  small  objects 

* with  loose  alignment  restrictions  - like  short  strings. 

* Note  that  alignment  is  relative  to  the  beginning  of  a chunk  returned  from 

* mallocC),  which  is  guaranteed  by  ANSI  to  be  as  aligned  as  can  possibly 

* matter. 

*/ 

void  * 

memPoo I A I I o c ( s t r u c t HemPool  *pool,  unsigned  len,  unsigned  alignment) 

{ 

n char*p; 

n unsigned  t; 


n 

/* 

where  to 

n 

p = 

pool->fr 

c 

/* 

How 

far  i 

n 

t = 

P - 

( c h a 

n 

/* 

n 

* 

How 

much 

n 

* 

case 

(not 

n 

★ 

for 

b r a g g 

n 

*/ 

allocate  next 
e e p t r ; 

t is  from  the 
r *)pool->head 

padding  to  add 
a powe  r of  2 ) 
ing  rights  in 


object  */ 

beginning  of  the  chunk.  */ 


to  freeptr  to  make  alignment, 
will  never  happen,  but  we  do  it 
the  ANSI  C compliance  department 


The  first 
right 


n if  (alignment  8 ( a I i g nme n t - 1 ) ) 

n n t = alignment-1  - ( t - 1 ) %a  I i g nme n t ; h /*  Never  called  */ 

n else 

o n t = -t  8 ( a I i g nme n t -1  ) ; n / * This  one  always  */ 


n /*  Okay,  does  it  fit?  */ 

n if  ( poo  I ->f r ee s pa ce  >=  len  + t)  { 

n n poo  I -> f r e e s pa c e -=  len  + t; 

n n p + = t ; 

n n poo L -> f r e e p t r = p + len; 

n n returnp; 

n } 


n /*  It  does  not  fit  in  the  current  chunk.  Allocate  a new  chunk.  */ 

n /*  First,  figure  out  how  padding  is  needed  after  the  header.  */ 

n if  (alignment  8 (alignment-1)) 

n n alignment  -=  1 + (sizeofCstruct  PoolBuf)-1)  % alignment; 

a else 

n n alignment  = ( a I i g nme n t -1 ) 8 - ( u n s i g n ed ) s i z eo f ( s t r u c t PoolBuf); 

n alignment  +=  sizeofCstruct  PoolBuf); 

n /*  Then,  figure  out  a chunk  size  that  will  fit  */ 

n t = poo  I ->c h u n ks i z e ; 

n pgpAssert(t); 

a while  (len  + alignment  > t) 

a a t * = 2 ; 

a while  ((p  = (char  * ) pg pH em A I I o c ( t ) ) ==  NULL)  { 


C[CHK:cc8305004c630ff4cc2499c63b8b39ca8377f7833e44bb4e1f297907572885f48:] 
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n 

n 

n 

a 

n 

n 

n 

n 

n 


n 

D 

D 

□ 

n 

a 

n 

n 

> 


/*  If  that  didn't  work,  try  purging  or  smaller  allocations  */ 
if  ( ! poo l->purge  M ! poo  I ->pu r g e ( poo  I ->p u r g e a r g ) ) { 


a 

i f 

(len 

+ a 1 i gnment  ==  t ) 

□ 

D 

return  NULL; 

□ 

t 

/=  2; 

n 

i f 

(t  < 

len+alignment) 

□ 

n 

t = 1 en  + a 1 i gnment 

> 


a /*  Update  the  various  pointers.  */ 

n poo  I -> t o t a I s i z e +=  t; 

n ((struct  PoolBuf  *)p)->next  = pool->head; 

n ((struct  PoolBuf  *)p)->size  = t; 

n pool->head  = (struct  PoolBuf  *)p; 

n pool->freespace  = t - len  - alignment; 

n p +=  alignment; 

n poo  I ->f r eep t r = p + len; 


n returnp; 

> 


#ifdef  DEADCODE 
/* 

* Store  a string  in  the  table,  returning  a pointer  to  the  string. 
*/ 

char  const  * 

memPoo I S t o r e ( s t r u c t MemPool  *pool,  char  const  *str) 

{ 


n 

unsigned  len  = strlen(str)  + 

D 

char  * p ; 

n 

p = memPoo  1 A 1 1 oc ( poo  1 , 

len. 

n 

if  ( p ) 

a 

n memcpy(p,  str. 

len); 

a 

return  p; 

> 

#endi  f 


CCCHK:  6760d531  775f 24a8b44a770a77cab9f f f 2331  b3765ae74:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


811 


pgpMemPool.h 


/* 

* pg  pHemPoo  L . h 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpMemPooL . h,v  1.3. 2.1  1997/06/07  09:50:34  mhw  Exp  $ 

*/ 

#ifndef  PGPMEMP00L_H 
#define  PGPMEMPOOL.H 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e nd i f 

struct 
n 
n 
□ 
n 
o 
n 
□ 

>; 

# i f nde  f 
#def i ne 
typedef 
#e  n d i f 

/* 

* Nice  cLean  interfaces 
*/ 

^define  memPoo L I s Emp t y ( poo L ) ( ( poo L ) ->head  ==  0) 
voi d PGPExport 

memPooLInitLstruct  MemPooL  *pooL); 
void  PGPExport 

memPoo L S e t Pu r g e ( s t r u c t MemPooL  *pooL,  int  ( * pu r g e ) ( vo i d *),  void  *arg); 
voi d PGPExport 

memPoo L Emp t y ( s t ru c t MemPooL  *pooL); 
void  PGPExport 

memPoo L C u t Ba c k ( s t ru c t MemPooL  *dest,  struct  MemPooL  const  *cutback); 
void  PGPExport  * 

memPooLALLocCstruct  MemPooL  *pooL,  unsigned  Len,  unsigned  aLignment); 

#ifdef  DEADCODE 

char  const  PGPExport  * 

memPooLStoreCstruct  MemPooL  *pooL,  char  const  *str); 

#endi f 

/*  Lookie  here!  An  AS N I - c omp L i a n t aLignment  finder!  */ 

#define  aLignof(type)  (sizeofCstructCtype  _x;  char  _y;>)  - sizeofCtype)) 
#define  memPoo L New ( poo L , type)  memPo o L A L L o c ( poo L , sizeofCtype),  a L i g n o f ( t y p e ) ) 
[[;CHK:62fc8f7714430cc994aaeb14f51ee37988b333bb7446002886cf3362249032428:3 


MemPoo  L C 

struct  PooLBuf  *head; 
char  *freeptr; 
unsigned  freespace; 

unsigned  chunksize;n  /*  DefauLt  starting  point  */ 
unsigned  Long  totaLsize; 

int  ( *p u r g e ) ( VO i d *);n  /*  Return  non-zero  to  retry  aLLoc  */ 

void  *purgearg; 

TYPE.MEMPOOL 

TYPE.MEMPOOL  1 

struct  MemPooL  MemPooL; 
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#ifdef  cpLuspLus 

} 

# e n d i f 

#endif  /*  PGPMEMP00L_H  */ 
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/* 

* pgpRngFiLe.c  --  File  operations  for  keyrings. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  CoLin  PLumb. 

★ 

* $Id:  pgpRng Fi L e . c, V 1.2. 2.1  1 997/06/07  09:50:35  mhw  Exp  $ 

*/ 

#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h" 

Send  i f 


SincLude  <stdio.h> 
SincLude  <string.h> 


Sifdef  VMS 

SincLude  <pgpAppFiLe.h>n/*  Does  anybody  know  what's  in  here?  */ 
Send  i f 

Sif  de f i ned ( MS  DOS ) ||  defined(0S2) 

SincLude  <io.h>nn  /*  For  accessC)  */ 

Sendi  f 


SincLude  "ring.h" 

SincLude  "pgpErr.h" 

SincLude  "pgpUsuaLs.h" 

/* 

* Munges  "basename"  in  pLace  to  produce  a temporary  fiLe  name, 

* opens  it,  and  returns  the  FILE  *.  Tries  Lots  of  three-Letter 

* extensions  before  giving  up.  (Okay,  I confess  - I Left  that 

* whiLeC)  condition  in  because  it's  h a i r y- L oo k i ng  . ) 

* aaa  TODO:  use  openC)  and  0_EXCL  to  ensure  open  is  unique. 

*/ 

static  FILE  * 

f i L eTempNamed ( c ha r *basename) 

{ 

n FILE  *f  = 0; 

n char*p; 

n i n t i ; 

n /*  "circular"  array  of  characters  beginning  and  endinf  wth  '0'  */ 

o static  char  const  extsCT  = "0123456789abcdefghijkLmnopqrstuvwxyz0"; 


n /*  Hake  temp  fiLes  for  stdout  more  Legible  */ 

n if  ( ! basenameC0]  ||  F I L E N AM E D A S H ( ba s e na me ) ) 

n B strcpyCbasename,  "tempfiLe"); 


D 

Q 

D 

D 

D 

□ 

n 

□ 

n 

□ 


fi LeExtensionAddCbasename,  ".000"); 

p = basename  + strLen<basename);n  /*  Pointer  to  end  of  string  */ 

for  (;;)  { 

B if  ( ! f i L e E X i s t s ( ba s e name ) ) { 

B B f = fopen  (basename,  "w+b"); 

B B if  (f) 

B B n break; 

B > 

B /*  Increment  filename  using  exts  array  */ 

B i = 0 ; 


i:i:CHK:62b1  27041  91  77b991  222c5  77e0ee7c22361  3efee4722d877d4b1e6c2fd4572d30:i 
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□ 

Q 

n 

□ 

□ 

□ 

} 


n 

do  { 

□ 

n 

if  (++i 

> 3) 

n 

n 

a 

return  0;a 

/ * Failed 

n 

} w h i 1 

Le  (CpC-i: 

= strchrCexts, 

pC-i : ) Cl : ) 

> 

return  f; 


/* 

* Rename  a file  to  a backup  file. 
*/ 

static  int 

f i L eBa c kup ( cha r const  *name) 

{ 

a inti; 

n char  ba kn a me C H AXP AT H LE N ] ; 


n if  ( ! f i L e E X i s t s ( n a me ) ) 

n n return  0;n  /*  Success  */ 


□ 

D 

D 

n 

a 

□ 

n 

n 

a 

n 

Q 

□ 

n 

n 

n 

} 


s t r c py ( ba kna me , name); 
fi LeExtensionAddCbakname,  " . bak"); 
if  ( f i L e Ex i s t s ( ba kname ) ) { 
n i = r emo ve ( ba kn a me ) ; 

n if(i<0){ 

n n pe r r o r C " U na b L e to  remove  backup  file"); 

n n return  -PG P E R R_R I NG 0 UT ; 

n > 

> 

i = renameCname,  bakname); 
if  (i  <0)  { 

n pe r r o r ( " Una b L e to  rename  file  to  backup"); 

n return  -PG P E R R_R I NG OUT ; 

} 

return  0; 


/* 

* Exceopt  for  ACT E R R_ ALLOC , aLL  of  these  errors  are  of  the 

* "can't  happen"  variety.  That  is,  these  errors  occur  when  doing  I/O 

* to  a file  that  is  already  open.  Returns  appropriate  error  code  < 0 

* if  there  was  an  error,  0 otherwise. 

*/ 

i nt 

r i ng P r i n t E r r o r ( s t r u c t RingPooL  const  *ring,  FILE  *f) 

{ 

a char  const  *str,  *str2; 

a intcode; 


n 

switch 

( ri ng->erraction) 

{ 

D 

case 

ACTERR_N0NE : 

n 

n 

return  0; 

n 

case 

ACTERR.READ : 

n 

n 

str  = USERTRANSC 

'Error 

while 

reading"); 

Q 

D 

code  = PGPERR_RINGIN; 

n 

n 

break; 

Q 

case 

ACTERR_WRITE : 

n 

n 

str  = USERTRANSC 

'Error 

while 

writing"); 
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n 

B 

code  = PGPERR_RINGOUT; 

n 

B 

break; 

n 

case 

ACTERR_SEEK: 

n 

B 

str  = USERTRANSC "Error  while  seeking"); 

Q 

B 

code  = PGPERR_RINGIN; 

□ 

B 

break; 

a 

case 

ACTERR_0PEN : 

u 

B 

str  = 1)  S E RT  R A N S ( " E r r 0 r opening  file"); 

D 

B 

code  = PGPERR_N0FILE; 

n 

B 

break; 

n 

case 

ACTERR_CL0SE : 

o 

B 

str  = USERTRANSC "Error  closing  file"); 

n 

B 

code  = PGPERR_RINGIN; 

□ 

B 

break; 

Q 

case 

ACTERR_FLUSH : 

□ 

B 

str  = USERTRANSC "Error  flushing  file"); 

□ 

B 

code  = PGPERR_RINGOUT; 

n 

B 

break; 

n 

case 

ACTERR_HUGE: 

n 

B 

str  = U S E RTR AN S C " E r r 0 r : keyring  object  is 

too  largeXn 

B 

B 

code  = PGPERR_VERSION; 

B 

B 

break; 

B 

case 

ACTERR_E0F : 

B 

B 

str  = U S E RT R AN S C " E r r 0 r : EOF  encountered  unex pe c t ed 1 y X i 

The 

file  has  been  changed  unexpectedly  while  PGP  is  using 

i t . X n " ) ; 

B 

B 

code  = PGPERR_BADFILE; 

B 

B 

break; 

B 

case 

ACTERR_BADPKTBYTE : 

B 

B 

str  = USERTRANSC "Error:  Non-packet  found 

where  packet 

expected\n\ 

The 

file  has  been  changed  unexpectedly  while  PGP  is  using 

i t . X n " ) ; 

B 

B 

code  = PGPERR_BADFILE; 

B 

B 

break; 

B 

case 

ACTERR_URONGPKTBYTE: 

B 

B 

str  = U S E RT R A N S C " E r r o r : Wrong  packet  e n c oun t e r e d X n X 

The 

file  has  been  changed  unexpectedly  while  PGP  is  using 

i t . Xn" ) ; 

B 

B 

code  = PGPERR_BADFILE; 

B 

B 

break; 

B 

case 

ACTERR_WRONGLEN : 

B 

B 

str  = USERTRANSC "Error:  Packet  has  wrong 

lengthXnX 

The 

file  has  been  changed  unexpectedly  while  PGP  is  using 

i t . X n " ) ; 

B 

B 

code  = PGPERR_BADFILE; 

B 

B 

break; 

B 

case 

ACTERR_ALL0C : 

B 

B 

f pu t s C u se rT ra n s C " Xa E r ro r : out  of  memo ry ! X n " ) , f); 

B 

B 

code  = PGPERR.NOMEM; 

B 

B 

return  1; 

B 

default: 

B 

B 

str  = USERTRANSC "Error:  Unknown  keyring  error  %d  X 

( t h 1 

s is  a bug 

in  PGP)Xn"); 

B 

B 

code  = PGPERR_INTERNAL; 

B 

> 

B 

putcl'Xa',  f); 

B 

fprintfCf,  str,  r i ng ->e r ra c t i o n ) ; 

B 

putcC'Xn',  f); 
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/*  Print  all  the  details.  */ 
if  (ring->errnum) 

n fprintfCf,  userTransC" System  error  \"%s\"\n"), 

n s t r e r r o r ( r i ng-> e r r num ) ) ; 


n 

□ 

n 

D 

n 

□ 


i f 

n 

n 


( r i ng->e r rf i L e >=  0 88  r i ng-> e r r f i L e < 32)  { 

str  = r i ng-> r i ng C r i ng->e r r f i L e ] . phy sname ; 
str2  = r i ng-> r i ng C r i ng->e r r f i L e ] . L ogname ; 


} else  { 


□ 


str  = str2  = 0; 


> 


n 

i f 

(str) 

n 

n 

■f  P 

rintf(f,  userTrans("In  file  \"%s\"\n" 

) , str); 

n 

n 

i f 

(str2  88  strcmp(str,  str2)  !=  0) 

n 

Q 

n 

fprintf(f,  userTrans( 

n 

n 

n 

n "A  temporary  file  associated 

with  \"%s\"\n"). 

n 

n 

n 

s t r 2 ) ; 

n 

> e 

1 s e i 

f 

(str2)  { 

n 

n 

f P 

rintf(f,  userTrans( 

Q 

n 

n 

"In  a temporary  file  associated 

with 

\ " % s \ " \ n " ) , 

n 

n 

n 

s t r 2 ) ; 

n 

> 

□ 

if 

(ring 

->errpos  !=  -(word32)1)  { 

n 

n 

fprintf(f,  userTrans("At  file  position 

%lu\n' 

n 

n 

(unsigned  long)ring->errpos); 

n > 


n return  -code; 

} 

/* 

* Save  the  ring  specified  by  "newbit"  and  get  rid  of  "oLdbit". 

* Saves  "newbit"  to  a temporary  file  name  associated  with  the 

* name  of  "oldbit"  and  returns  the  name  in  a user-supplied 

* "tmpname"  buffer. 

*/ 

i n t 

r i n g Sa V eT emp ( s t r u c t RingPool  *ring,  int  oldbit,  int  newbit,  int  trustflags. 


n 

char 

*tmpname,  FILE  *e) 

{ 

n 

char 

const  *name; 

n 

FILE 

*f; 

n 

int  i 

n r i ng-> r i ng C n e wb i t D . I og n a me  = r i ng-> r i ng C o I d b i t D . I og n ame ; 


n name  = r i n g -> r i ng C o I db i t 3 . phy s name ; 

n i f ( ! name ) 

n n name  = r i ng-> r i n g C ne wb i t 3 . I og na me ; 

n 

n s t r c py ( t mpna me , name); 


D 

D 


n 

Q 


f = fileTempNamed(tmpname); 
if  ( ! f ) { 

n perrorC "Unable  to  create  temporary  file"); 

n return  - PG PE R R_ R I N GOUT ; n / * Unable  to  do  the  save  */ 
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n > 

n ri ng->ri ngCnewbi tD . physname  = tmpname; 

n r i ng -> r i ng C n e wb i t ] . f i L e = f; 


□ 

n 

n 

Q 

n 

D 

n 

Q 

n 

a 


i = r i ng Poo L W r i t e V i r t ( r i ng , neubit,  trustfLags); 
i f ( i < 0)  { 

n ringPn'ntErrorCring,  e); 

a fclose  (f); 

n retnove(tmpname); 

n r i ng-> r i n g C ne wb i t 3 . p h y s n a me  = 0; 

a ring ->n'ngCnewbit3. file  = 0; 

n returni; 

} 

ringPooLCLoseCring,  (ringmask)1<<oLdbit); 


n return0; 

> 


/* 

* Saves  the  ring  specified  by  "newbit"  in  the  file  named  by  "oLdbit", 

* shuffling  the  file  names  around.  "oldbit"  can  be  a virtual  keyring 

* if  desired. 

* 

* TODO:  improve  error  handling  a Lot,  At  the  moment,  this  doesn't 

* return  any  indication  of  what  the  status  of  oldbit  and  newbit 

* is,  so  if  it  fails,  all  you  can  do  is  shut  down. 

*/ 

i nt 

r i ngSave ( St ruct  RingPooL  *ring,  int  oldbit,  int  newbit, 

« n int  trustflags,  FILE  *e) 

f 

n char  const  *name; 

n char  t mpna me C HAXPAT H LE N ] ; n /*  defined  in  <stdio.h>  */ 

n FILE  *f; 

n inti; 


n ring->ringCnewbitD,logname  = ring->ring[Ioldbit].logname; 

n name  = r i ng-> r i ng C o L d b i t D - p hy s na me ; 


□ 

□ 

n 

n 

D 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

ta 

n 

Q 

a 


i f 

n 

n 

n 

n 

u 

a 

s 

□ 

n 

n 

n 

n 

n 

n 

□ 

Q 

□ 

Q 


( r i n g-> r i ng C o L d b i t U . f i L e ==  0)  { 

/*  Old  keyring  doesn't  exist,  so  save  directly  */ 
if  ( ! name ) 

n name  = r i ng -> r i ng C n e wb i t D . I og n ame ; 

if  (FILENAHEDASH(name))  { 
n f = stdout ; 

> else  -C 

n f = fopen  (name,  "w+b"); 

n if  ( !f ) { 

H n perror( "Unable  to  write  to  output  file"); 

n n return  -PGPERR_RINGOUT;n/*  No  go  */ 

n > 

> 

r i ng-> r i ng C n e wb i t H . p h y s na me  = name; 
r i ng-> r i n g C n e wb i t D . f i L e = f; 

i = ringPoolWriteVirtCring,  newbit,  trustflags); 
if  Ci  < 0)  { 

n r i ng P r i n t E r r o r ( r i n g , e); 

n fclose  (f); 
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n 

n n remove ( name ) ; 

n 

n n r i n g->  r i ng  C n e w b i t D . p h y s na me  = 0; 

n 

n B r i ng-> r i ng C n e wb i t D . f i L e = 0; 

n 

B B returni; 

n 

B } 

o 

B ringPooLCLoseCring,  (ringmask)1<<oLdbit); 

Q 

B return  0;b  /*  Success  */ 

D 

> 

O 

/*  Old  keyring  exists,  so  save  to  a temp  file  and  rename  */ 

s 

i = ri ngSaveTempC ri ng,  oLdbit,  newbit,  trustflags,  tmpname,  e); 

n 

if  ( i < 0 ) 

n 

B returni; 

n 

B 

n 

/*  Now  the  temporary  file  shuffling  */ 

Q 

/*  Hove  name  to  name.bak  */ 

n 

i = f i 1 eBa c kup ( name ) ; 

□ 

if  ( i < 0 ) 

□ 

B return  i ; 

f ndef 

MSDOS  /*  BRAIN  DAMAGE  ALERT  BRAIN  DAMAGE  ALERT  BRAIN  DAMAGE  ALERT  */ 

n 

/*  Hove  tmpname  to  name  */ 

n 

i = renameCtmpname,  name); 

o 

if  (i  >=  0)  f 

n 

B r i ng-> r i ng C n e wb i t D . p hy s na me  = name; 

D 

B return  0;b  /*  Success  */ 

n 

> 

#end i f 

n 

/* 

n 

* Some  OSes  can't  rename  an  open  file,  so  close,  rename,  and  reopen. 

n 

* 

n 

* MS-DOS  can't  do  it,  and  doesn't  produce  an  error,  either!!! 

n 

* Yes,  really!  You  get  a zero-length  destination  file,  which 

Q 

* is  NOT  what's  desired.  VERY  VERY  broken!  I knew  it  was  a 

Q 

* brain-dead  OS,  but  this  really  takes  the  cake.  (You  end  up 

n 

* with  errno=2,  "Bad  file  number"  on  fcloseC),  but  fwriteC)  and 

n 

* fflushC)  both  succeed,  even  on  an  unbuffered  stream.) 

Q 

* Sheesh,  is  it  too  much  to  ask  of  a system  that  it  either  does 

n 

* it,  or  doesn't  do  it?  You  have  to  find  a third  choice? 

n 

*/ 

n 

fclose  (ring->ringCnewbitD.fi le); 

n 

ring ->ringCnewbit3. file  = 0; 

Q 

i = renameCtmpname,  name); 

D 

if  (i  < 0)  { 

n 

B perrorC" Can't  rename  new  file"); 

n 

B r i ng-> r i ng C n e wb i t D . p hy s na me  = (char  const  *)0; 

n 

B return  -PG P E R R_R I NGOUT ; 

a 

} 

n 

f = fopen  (name,  "rb"); 

n 

if  ( ! f ) { 

n 

B perrorC" Can't  reopen  new  file"); 

c 

B return  -PG P E R R_R I NGOUT ; 

n 

} 

n 

r i ng-> r i ng C n e wb i t D . p hy s na me  = name; 

n 

ring ->ringllnewbit3. file  = f; 
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n 

> 


return  0;n  /*  Success  */ 


[;CCHK:ac54d9ff  cb:: 
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/* 

* pgpRngHnt.c  - Perform  the  maintenance  pass  over  a keyring. 

* This  is  a lot  more  efficient  that  the  way  PGP  2.x  did  it 

* and,  I modestly  think,  easier  to  understand  to  boot. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb 

* 

* $Id:  pg p R ng Hn t . c , V 1.33.2.10  1997/06/07  09:50:36  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CON FIG_H 
#include  "config.h" 

#end i f 


#include  < s t r i n g . h>n / * For  strlenC)  */ 
//include  <time.h> 

//include  <stddef.h> 


//include 

"pgpDebug.h" 

//include 

"pgpNakeSig. 

h" 

//include 

"pgpPktByte. 

h" 

//include 

"pgpRngHnt . h 

" 

//i  nc  lude 

"pgpRngPa  rs . 

h" 

//include 

"pgpRngPriv. 

h" 

#i nc  lude 

"pgpRngPkt . h 

" 

//include 

"pgpRngRead. 

h" 

//include 

"pgpT  rust . h" 

//include 

"pgpT  rstPkt . 

h" 

//include 

"pgpT imeDate 

. h 

//include 

"pgpHash.h" 

//include 

"pgpErr.h" 

//include 

"pgpPubKey. h 

" 

//include 

"pgpRngRead. 

h" 

//i  nc  lude 

" pgpS i g . h " 

//i  nc  lude 

"pgpSigSpec. 

h" 

//include 

"pgpUsuals.h 

" 

//i  nc  lude 

"pgpTypes.h" 

//i  f ndef 

NULL 

//def  i ne 

NULL  0 

//endi  f 

/*  for  r i n g F e t c hOb j e c t */ 


/* 

* This  symbol  marks  code  which  prints  the  progress  of  the  maintenance 

* pass.  That  code  assumes  stdio,  which  is  not  portable  across  GUIs,  so 

* something  will  need  to  be  done  about  it.  The  prints  are  left  in  the 

* source  to  make  the  location  of  the  replacements  obvious.  The  code 

* assumes  a non-existent  "FILE  *f"  to  print  to,  so  just  #defining  this 

* symbol  will  NOT  work. 

*/ 

//undef  PRINT_PROGRESS 
/* 

* The  trust  models... 

* All  models  start  from  a number  of  axiomatic  "the  buck  stops  here" 

* keys.  These  are  the  keys  owned  by  the  PGP  user.  This  is  the 

* initial  set  of  trusted  keys.  Each  key  has  a trust  value  - a 
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* Level  of  confidence  that  the  user  places  in  signatures  made  by 

* that  key . 

* 

* 

* — The  old  trust  model  ( PG PT R U STMO D E L = = 0 ) — 

★ 

* Each  key  has  an  introducer  trust,  either  ultimate,  complete,  or 

* partial.  These  have  scores  of  1,  1/x  and  1/y.  For  each  key  on  the 

* a X i oma t i c a L L y trusted  List,  and  each  signature  made  by  that  key  on 

* a name,  the  introducer  trust  is  added  to  the  name's  validity  score. 

* If  that  score  reaches  1,  the  name's  key  is  added  to  the  next  introducer 

* List  and  its  introducer  trust  is  used  for  the  Level  after  that. 

* 

* At  the  end,  names  are  graded  according  to  their  score. 

* If  it  is  >=  1,  they  are  completely  valid.  If  it  is  >=  1/2, 

* they  are  partially  valid.  If  < 1/2,  they  are  not  valid  at  all. 

* Partial  versus  Lack  of  validity  only  affects  the  warning  messages 

* printed  out.  If  a key  does  not  have  any  comletely  valid  names, 

* its  introducer  trust  is  set  to  0. 

* 

* There  are  actually  three  kinds  of  zero  introducer  trust: 

* - Undefined,  meaning  that  it  has  not  been  set.  If  a key  has 

* a completely  valid  name  and  undefined  introducer  trust,  the 

* user  is  asked  to  set  one. 

* - Un  known 

* - Untrusted 

* These  Latter  two  are  equivalent  valid  "set"  values,  with  the 

* only  difference  being  for  u s e r- i n t e r f a c e purposes. 

* 

* 

* — The  new  trust  model  ( PG PT RU STMO D E L ==  1 or  2)  — 

* 

* This  is  based  on  a much  more  rigorous  treatment  of  trust  by  Ueli 

* Maurer.  See  "Modelling  a Public-Key  Infrastructure",  Ueli  Maurer, 

* Proceedings  1996  European  Symposium  on  Research  in  Computer  Security 

* (ESORICS  '96),  E.  Bertino  (Ed.),  Lecture  Notes  in  Computer  Science, 

* Berlin:  S p r i n g e r-Ve r L a g , Rome,  Italy,  Sept.  1996.  Also  available  from 

* <URL:  http://www.inf.ethz.ch/personaL/maurer/pubLications>. 

* 

* Consider  the  graph  formed  by  taking  each  key  as  a node  and 

* each  signature  as  an  edge,  and  assign  each  signature  an  independent 

* probability  of  being  correct.  (The  probabilities  don't  have  to  be 

* independent,  but  it  gets  messy  fast  if  they  aren't,  so  the  possibility 

* isn't  considered  any  further.)  For  each  possible  combination  of 

* valid  and  invalid  signatures,  assign  it  a probability  based  on  the 

* probability  of  each  signature  being  correct,  and  if  there  is  a path 

* of  valid  signatures  from  the  root  set  to  a given  name,  it  is  correct. 

* Add  up  the  probabilities  of  all  the  cases  in  which  the  name  is  correct, 

* and  you  have  the  computed  probability  that  the  name  is  correct. 

* 

* For  PGPTRUSTM0DEL==1 : 

★ 

* Basically,  you  have  to  consider  every  possible  path  from  the  root 

* set  of  a X i oma t i c a L L y trusted  keys  to  the  name  in  question  and  correct 

* for  overlaps  and  Loops.  This  can't  be  done  in  a reasonable  amount  of 

* time,  but  a conservative  approximation  can  be  made.  By  Leaving  out 

* some  of  the  more  complex  paths,  a Lower  probability  can  be  computed. 

* Since  it  is  Lower  than  the  ideal  computation,  it  can  still  be  trusted. 
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* 

* 

★ 

★ 

★ 
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★ 
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★ 
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★ 

★ 

* 
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★ 

* 

* 

* 

* 

* 

* 

★ 

* 

* 

* 

* 


A good  approximation  is  fast  to  compute  and  yet  approaches  the  ideal 
approximation  well. 


Since  PGP  supports  multiple  names  on  a key,  the  question  arises 
which  validity  value  is  used.  The  solution  here  is  to  assign  a trust 
value  to  each  of  the  names,  take  the  va L i di  ty*t rust  product  for  each 
name,  and  take  the  maximum.  A name  which  is  meaningless  to  the  user 
(e.g.  a name  in  an  unknown  character  set,  such  as  cyrillic  or  kanji) 
can*t  be  trusted,  but  that  doesn't  mean  that  a second  name  which  *is* 
intelligible  should  be  penalized. 

The  approximation  that  PGP  uses  is  as  follows: 

- Clear  all  trust  accumulators  to  0. 

- Starting  with  a root  set  of  keys  (Level  0),  each  of  which  have  some 
specified  confidence,  take  that  confidence  directly  as  the  trust. 
This  is  currently  assumed  to  be  ultimate.  For  each  signature  made 
by  such  a key,  add  the  confidence  to  the  name’s  valididty  score. 

- Using  this  provisional  validity,  multiply  each  names’s  confidence 
by  its  validity  to  get  a provisional  trust.  Use  this  trust  to 
increase  the  validity  score  of  each  name  already  processed. 

- Multiply  the  final  validity  by  the  confidence  to  get  the  final  trust 
on  the  key,  which  is  used 


Description  of  PGPTRUSTH0DEL==2 : 

This  implements  the  basic  Maurer  trust  model  fairly  literally.  The 

Maurer  model  is  often  considered  to  be  "intractably  complex"  (an 

out  of  context  quote  from  his  paper),  but  with  certain 

simplifications  it  should  be  feasible: 

- Focus  on  on-the-fly  validation  so  we  only  have  to  find  the  validity  of 
a single  key . 

- Use  a ringset  composed  only  of  trusted  introducers  and  the  target  key. 

- Search  for  paths  from  the  target  key  back  to  an  axiomatic  key  such  that 
all  keys  on  the  path  are  trusted  introducers  (nonzero  confidence). 

- Limit  this  search  by  a depth  constraint,  and  possibly  limit  the  total 
number  of  nodes  we  will  Look  at  if  the  depth  constraint  is  inadequate. 

- Find  the  basic  trust  contribution  of  each  of  the  resulting  paths  (not  yet 
considering  interactions)  as  the  product  of  the  trust  of  each  segment  on 
the  path. 

- Sort  the  paths  by  this  value  and  prune  to  keep  just  the  top  10  or 
so  paths . 

- Apply  Maurer’s  algorithm,  considering  all  subsets  of  paths  (2**n  of  them, 
where  n is  the  number  of  paths).  For  each  subset,  form  the  union  of  all 
segments  on  the  paths  in  that  subset,  and  take  the  product  of  the  segment 
trusts.  Subsets  with  an  odd  number  of  paths  add  confidence,  those  with  an 
even  number  of  paths  subtract. 


By  Limiting  ourselves  to  just  the  trusted  introducers  (plus  one 
other)  the  total  number  of  keys  to  be  considered  should  not  become 
too  large.  Given  practical  and  customary  limitations  on  the  number 
of  signatures  a key  will  usually  have,  it  should  be  possible  to 
find  paths  back  to  the  axiomatic  keys  in  a reasonable  amount  of 
time,  especially  if  the  algorithm  only  needs  to  be  run  for  a single 
key  (or  a small  number  of  keys)  when  we  encrypt  or  check  a 
signature.  Then  when  we  prune  the  list  of  paths  to  just  the  top 
10,  we  should  still  be  able  to  get  a reasonably  accurate 
( u nde r ) e s t i ma t e of  the  actual  trust,  unless  the  key  gained  trust  by 
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* having  a Large  number  of  paths  each  with  only  a small  amount  of 

* trust.  That  case  must  be  neglected  for  efficiency  in  this 

* algorithm.  Having  pruned  the  paths  to  a small  enough  set  we  can 

* then  apply  Maurer's  algorithm  efficiently. 

* 

* There  is  an  additional  complication  specific  to  the  PGP  trust 

* model.  Maurer's  algorithm  is  expressed  in  terms  of  paths  where 

* each  segment  has  an  associated  trust  Level.  These  trusts  are 

* described  in  PGP  as  user-defined  confidence  Levels  specified  for 

* the  name(s)  on  a key.  This  means  that  the  output  of  the 

* calculation  above  is  a validity  value  for  a particular  name  on  a 

* key,  based  on  the  signatures  on  that  name.  The  inputs  need  to  be 

* based  on  the  user  defined  confidence  values  for  the  names.  The 

* complication  arises  for  keys  which  have  more  than  one  name  (userid) 

* with  different  user-defined  confidence  Levels.  It  is  not  clear  how 

* to  map  this  situation  to  Maurer's  trust  model. 

* 

* For  keys  with  only  one  name,  the  confidence  of  that  name  is  used. 

* If  there  is  more  than  one  name,  a conservative  approach  is  to  use 

* the  name  with  the  smallest  user-defined  confidence  value.  (Names 

* for  which  the  user  has  not  specified  a confidence  Level  do  not 

* enter  into  this  calculation.)  If  all  of  the  names  (of  those  with 

* non-zero  confidence)  have  validity  values  (from  earlier  runs  of  the 

* trust  calculation)  then  we  can  choose  the  confidence  of  the  name 

* with  the  highest  validity  as  in  PG PTRU STMO D E L = = 1 . 

* 

* Not  all  of  the  optimizations  above  are  implemented  in  the  current 

* code,  nor  has  it  been  thoroughly  tested.  In  particular,  the 

* ringMnt  function  is  still  used  and  tries  to  run  the  algorithm  on 

* all  keys  in  the  set.  Although  a depth  Limitation  is  used  there  is 

* no  other  way  of  Limiting  the  construction  of  the  paths.  And  the 

* set  of  keys  Looked  at  is  not  pre-selected  to  be  Limited  to  the 

* trusted  introducers.  That  last  change  should  be  done  before 

* enabling  this  code. 

* 

* Some  further  ideas  for  improvement: 

* 

* - Paths  don't  need  to  include  the  Last  step  to  the  trusted 

* introducer,  since  that  always  has  confidence  of  1.0. 

* 

* - For  creating  the  path  subset  unions,  a Linear  search  for  overlap 

* is  used  now.  This  may  be  OK  for  short  paths  but  a more  efficient 

* algorithm  would  be  better.  Perhaps  a hash  table  for  path  segments 

* in  the  subset  would  be  worthwhile. 

* 

* - When  add i ng / sub t ra c t i ng  the  pathconf  values,  maybe  it  would  be 

* better  to  accumulate  1-confidence  rather  than  confidence?  I am 

* worried  about  roundoff  error  for  values  very  close  to  1.0. 

* 

* - Could  use  a Gray  code  to  go  through  path  subsets  in  a sequence 

* which  would  alternate  even  and  odd  parity  subsets,  so  we  would 

* alternately  add  and  subtract  trust.  This  might  help  with 

* accuracy.  (A  Gray  code  is  a binary  counter  which  has  the  property 

* that  only  one  bit  changes  each  step.  One  example  is: 

* ++jr  i j & (j  * (j-1));  which  counts  j as  a regular  counter  and 

* i as  a Gray  code  counter.) 

*/ 
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/* 

* Check  to  see  if  the  signature  is  valid  in  time. 

* 

* To  avoid  overflow  problems  with  65535  days  being  larger  than  a 32-bit 

* timestamp,  compute  how  old  the  signature  is  in  days,  and  compare 

* that  with  the  validity  period.  If  its  age,  in  days  rounded  down, 

* is  < the  validity  period,  it  is  valid.  To  deal  with  a validity 

* period  of  0 being  infinite,  subtract  one  from  the  validity  using 

* unsigned  arithmetic  and  change  the  < to  <=.  (n  < 5 iff  n <=  4,  for 

* integer  n).  0 will  wrap  to  UINT_MAX,  and  every  unsigned  number 

* compared  <=  UINT_HAX,  so  the  test  will  always  be  true. 

* 

* An  intelligent  8086  or  68000  compiler  would  evaluate  the  division  by 

* 86400  = 675  * 128  as  (x>>7)/675,  which  can  use  a 32/16  bit  divide 

* (which  can't  overflow),  but  I'd  be  surprised  if  any  PC  compilers 

* actually  did  it  that  way. 

*/ 

static  i nt 

mntSi gIsVa I i d(word32  timenow,  word32  tstamp,  unsigned  validity) 

{ 

return 

a (timenow  <=  tstamp  ||  ( u n s i g n ed )(( t i menow-t s t amp )/ 86400 ) <=  va I i d i t y- 1 u ) ; 

} 


#if  PGPTRUSTH0DEL==2 


#define  LOOKI NG AT ( ke y ) ( ( key ) -> c o n f i d e n c e 8 1) 

#define  S ET LOOKI N G AT ( key ) ( ( key ) -> c on f i d e n c e |=  1) 

^define  C LEAR LOOKI NG AT ( key  ) ( ( key ) -> c on f i d e n c e 8=  ~1) 

/* 

* Maximum  number  of  paths  we  will  keep. 

* Must  calculate  trust  for  each  subset. 

*/ 

#define  TOTALPATHHAX  10 


/* 

* The  Path  and  PathList  routines  use  a convention  copied  from  the 

* PgpPipeline  package  for  tail  pointers.  The  tail  pointer  points 

* at  the  "next"  pointer  of  the  last  packet,  or  if  there  are  no  packets 

* it  points  at  the  "head"  pointer  for  the  whole  list.  This  allows  a 

* uniform  interface  for  adding  packets  whether  they  are  the  first  or 

* not  . 

*/ 


/*  This  is  a path  or  a path  segment, 
typedef  struct  Path  { 


n struct  Path 

n Ri ngOb j ect 

□ 

a double 
} Path,  *pPath; 


*next; 

* s r c , 

* d e s t ; 
confidence; 


next->src  may  not  equal  dest.  */ 
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/*  This  is  a List  of  paths.  Some  segments  may  be  on  multiple  paths.  */ 
typedef  struct  PathList  C 


n 

struct  PathList 

*n ex  t ; 

n 

Path 

*pa  t h ; 

□ 

Path 

**pta i 1 ; 

n 

double 

confidence 

> 

PathList,  *pPathList; 

#undef  DEBUGPATH 

#ifdef  DEBUGPATH 

static  char  const  hexcharC16D  = { 

n ■,■2', '3', '4', '5', '6', '7', 

n '8','9','A','B','C','D','E','F' 

>; 

static  int 

r i ngT t y P r i n t Key  I D ( F I LE  *f,  RingObject  *key) 
{ 


n 

byte 

*buf  ; 

n 

1 n t 

i ; 

n 

pgpAssert  ( OB J I SKE Y ( key ) ) ; 

□ 

buf 

= key->k . key  I D; 

n 

for 

(i  = 4;  i < 8;  i++) 

{ 

n 

a 

putc(hexcharCbufCi ] 

>>  4 & 

153, 

n 

a 

putc(hexcharCbufCi ] 

S 153, 

f); 

n 

y 

n 

return  8; 

> 

static  int 

r i ngT t y P r i n t Key Name ( F I LE  RingObject  *key,  RingPooL  *pooL) 

{ 

n RingSet  *set  = r i n g S e t C r e a t e ( poo  I ) ; 
a char  const  *sname; 

n char  bname[256!]; 

n size_t  Len; 

n key  = key->g . down ; 
n while  ( ! OB J I S N AM E ( key ) ) { 
n n key  = key->g . next ; 
n } 

n r i n g S e t AddO b j e c t (set,  key); 

n sname  = ringNameName  (set,  key,  &Len); 
n strncpy  (bname,  sname,  Len); 
n bnameClen]  = '\0'; 
n fputs  (bname,  f); 
n ringSetDestroy  (set); 
n return  0; 

} 

static  int 

r i ngT t y P r i n t Key ( F I LE  *f,  RingObject  *key,  RingPooL  *pooL) 

{ 

n r i n g T t y P r i n t Key  I D (f,  key); 
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n fprintf  (i , 

n ringTtyPrintKeyName  (f,  key,  pool); 
n -fprintf  (f, 
n return  0; 

> 

static  void 

r i ngT t y Pr i n t Pa t h ( F I LE  *f.  Path  *path,  RingPool  *pooL) 


n 

fprintf  (f,  " Path  "); 

n 

wh  i 

le  (path)  ■( 

n 

n 

fprintf  (f,  "from  " 

); 

n 

□ 

r i ngT t y P r i n t Key  (f. 

path->src,  pool); 

a 

n 

fprintf  (f,  " to  ") 

/ 

n 

□ 

r i ngT t y P r i n t Key  (f. 

path->dest,  pool); 

Q 

n 

fprintf  (f,  ",  conf 

: %g\n",  pa t h-> c o n f i d e n c e ) ; 

Q 

n 

path  = path->next; 

n 

□ 

if  (path) 

n 

Q 

a fprintf  (f,  " 

...segment  "); 

n 

> 

> 

static  void 

r i n gT t y P r i n t Pa t h L i s t ( F I LE  *f,  PathList  *pL,  RingPooL  *pooL) 
{ 

n fprintf  (f,  "Begin  PathList\n"); 
n while  (pi)  -C 

n n fprintf  (f,  " (conf=%g)  ",  pi -> confidence); 
n n ringTtyPrintPath  (f,  pl->path,  pool); 

a a pi  = pl->next; 

n } 

n fprintf  (f,  "End  PathListXn"); 

> 

#endif  /*  DEBUGPATH  */ 


/*  Allocate  a Path  segment  */ 

static  Path  * 

pathAlloc  (RingPool  *pool) 

{ 

n Path  *path  = pool->paths; 

n if  (path)  ■( 

n n pool->paths  = path->next; 

n } e I se  -C 

n n path  = memPoolAlloc  ( &poo I ->pa t h poo  I , s i z eo f ( s t r u c t Path), 
n n n a I i g no f ( s t r u c t Path)); 
n } 

n return  path; 

> 

/*  Free  a Path  segment  */ 
static  void 

pathFree  (Path  *path,  RingPool  *pool) 

{ 

n path->next  = pool->paths; 
n pool->paths  = path; 
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} 

/*  Free  an  entire  Path  */ 
static  void 

pathFreeALl  (Path  *phead,  RingPooL  *pooL) 

{ 

n Path  **ptaiL  = &p h e a d->n e x t ; 
n while  (*ptaiL)  { 
n n ptail  = &(*ptaiL)->next; 
n } 

n *ptaiL  = pooL->paths; 
n pooL->paths  = phead; 

} 

/*  Allocate  a PathList  element  */ 

static  PathList  * 

pa t h Li s t A I I oc  (RingPool  *pool) 

< 

n PathList  *plist  = poo  I ->pa t h I i s t s ; 
n if  Cplist)  { 

n n poo  I ->pa t h I i s t s = plist->next; 
n n plist->next  = NULL; 
n > e I se  { 

n n plist  = memPoolAlloc  ( &poo I -> pa t h poo  I , s i z e o f ( s t r u c t PathList), 
n n a I i g n o f ( s t r u c t PathList)); 

n } 

a return  plist; 

} 

/*  Free  a PathList  element,  also  freeing  any  path  it  points  to  */ 
static  void 

pathListFree  (PathList  *plist,  RingPool  *pool) 

{ 

n if  (plist ->path) 

a a pathFreeAll  (plist->path,  pool); 

n p I i s t ->pa  t h = 0; 
n p I i st->conf i dence  = 0.; 
n plist->next  = pool->pathlists; 
n poo  I ->pa t h I i s t s = plist; 

> 

/*  Free  a whole  PathList,  also  freeing  the  Paths  it  points  to  */ 
static  void 

pa t h L i s t F r e e A I I (PathList  *plhead,  RingPool  *pool) 

{ 

n PathList  **pltail  = &p I h ea d->n e x t ; 
a while  (*pltail) 

n n pltail  = &(*pltail)->next; 

n *pltail  = poo  I ->pa t h I i s t s ; 
n poo  I ->pa t h I i s t s = plhead; 
a while  (plhead  !=  *pltail)  { 
n n pathFreeAll  ( p I h e a d-> pa t h , pool); 

n n plhead->path  = 0; 

n n plhead -> confidence  = 0.; 

n n plhead  = p I h ea d->nex t ; 

n > 

} 
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/*  Add  a Path  segment  to  a Path 
* 

* Returnsn  updated  Path  tail  pointer 

★ 

* taiLnn  tail  pointer  for  Path  to  be  added  to 

* segn  n pointer  to  Path  segment  to  add 

* 

*/ 

static  Path  ** 

pathAddSeg  (Path  **tail.  Path  *seg) 

{ 

n seg->next  = *taiL; 
n *tai I = seg; 
n return  &seg->next; 

> 

/* 

* Hake  a copy  of  a Path,  Leaving  the  original  untouched.  Optionally  return  a 

* pointer  to  the  tail  of  the  new  Path. 

* 

* Returnsn  pointer  to  new  cloned  path 

* 

* pin  n pointer  to  the  path  to  be  cloned 

* ptln  n optional  return  parameter  for  tail  pointer  of  new  path 

* poolnn  ringpooL  used  for  allocations  of  new  path  segments 

* 

*/ 

static  Path  * 

pathCLone  (Path  *p1.  Path  ***ptL,  RingPool  *pooL) 

{ 


n 

Path  *phead. 

n 

**ptail  = &phead; 

n 

while  (pi)  { 

n 

n 

*ptail  = pa t h A 1 L 0 c ( poo  1 ) 

n 

Q 

if  (!*ptaiL) 

n 

n 

n return  NULL; 

n 

Q 

**ptaiL  = *p1; 

n 

n 

pi  = p1->next; 

n 

n 

ptail  = &(*ptai L )->next; 

n 

> 

n 

if 

(pt  L ) 

a 

n 

*pt  1 = ptail; 

n 

return  phead; 

} 


/*  Add  a copy  of  a Path  to  the  PathList 


* 

* Returnsn  tail  pointer  of 

★ 

* tailnn  tail  pointer  of 

* pathnn  pointer  to  Path 

* poolnn  ringpool  to  use 

* 

*/ 


updated  PathList 

PathList  to  be  added  to 
to  add  to  the  PathList 
for  memory  allocations 
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static  PathList  ** 

pa t h L i s t Add  Pa t h C L on e (PathList  **tail.  Path  *path,  RingPooL  *pooL) 
{ 

n PathList  *pL; 

n pL  = pathListALLocCpooL); 
n if  ( ! p L ) 

n n return  NULL; 

n pL->path  = pathCLone  (path,  &pL->ptaiL,  pool); 

n pL->next  = *taiL; 

n *taiL  = pL; 

n return  8pL->next; 

} 


/*  Calculate  the  confidence  associated  with  a path.  */ 
static  double 

pa t h C o n f i d en c e (Path  *path) 

{ 

n double  conf  = 1.0; 

n while  (path)  { 

n a conf  *=  pa t h -> c o n f i d e n c e ; 

B B path  = path->next; 

B > 

B return  conf; 

> 

/* 

* Prune  the  PathList  to  keep  only  the  h i g h e s t - c o n f i den c e pathmax  Paths. 

* Return  the  new  PathList,  free  the  no  longer  used  Paths. 

* 

* ReturnsB  new  PathList  with  no  more  than  pathmax  paths 

* 

* plistB  PathList  to  be  pruned 

* pathmaxB  maximum  number  of  paths  to  allow 

* poolBn  ringpool  to  use  for  memory  allocations 

* 

*/ 

static  PathList  * 


pathLi stPrune 

(PathList  *plist. 

unsigned  pathmax,  RingPool 

*poo  1 ) 

n 

PathLi St 

*iplist;Bn  n 

/* 

Copy  of  plist  */ 

s 

PathLi St 

**p 1 1 , B B n 

/* 

Iterator  over  plist  */ 

a 

**maxpl1;Bn  n 

/* 

Max  confidence  pll  pointer  */ 

a 

PathLi St 

*nplist,Bn  n 

/* 

New  pathlist  head  */ 

□ 

**nptail;Bn  n 

/* 

New  pathlist  tail  */ 

n 

unsi gned 

npaths, Bn  n 

/* 

Number  of  paths  in  plist 

initially 

□ 

newnpaths;B  n 

/* 

Number  of  paths  in  final 

np 1 i St  */ 

□ 

doub  1 e 

maxconf;B  n 

/* 

Best  confidence  value  so 

far  */ 

B /*  Calculate  confidence  value  for  each  path  */ 

B iplist  = plist; 

B npaths  = 0; 

B while  (plist)  { 

B B npaths  +=  1; 

B B plist -> confidence  = pathConfidence  (plist -> path); 

B B plist  = plist->next; 
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n > 

n pList  = ipList; 


n /*  InitiaLize  the  new  path  list  */ 

n npList  = NULL; 

n nptail  = &npList; 

n newnpaths  = min  (pathmax,  npaths); 

n while  (newnpaths — ) ( 


□ 

B 

/* 

Add 

the  best 

path  from  plist  to  nplist  */ 

n 

B 

pLI 

= & p 1 i s t ; 

n 

B 

maxconf 

= 0-; 

n 

B 

ma  xp  1 1 

= pM; 

n 

B 

while  (*pl1)  { 

n 

B 

B 

/* 

Find  best 

path  in  plist  in  **maxpl1  */ 

n 

B 

B 

i f 

( ( *p  1 1 ) -> conf i den c e > maxconf)  ( 

n 

B 

B 

n 

maxconf 

= ( *p 1 1 ) -> c on f i d e n c e ; 

n 

B 

fl 

Q 

ma  X p 1 1 = 

pLi; 

B 

B 

B 

} 

B 

B 

B 

pLI 

= &(*pl1)->next; 

B 

B 

> 

*nptail  = *maxpM; 

*maxpl1  = C *ma X p I 1 ) ->nex t ; 
nptail  = &(*nptail)->next; 
*nptail  = NULL; 


n if  (plist) 

n n pathListFreeAll  (plist,  pool); 
n return  nplist; 

} 


/* 

* Append  a (copy  of  a)  second  path  to  the  first,  removing  common  segments. 

* Return  pointer  to  "next"  pointer  of  last  segment  (and  pass  that  as  ptail) 

* 

* Returnn  tail  pointer  for  updated  Path 

* 


* pheadn 


* 

ptai  In 

* 

p2n  n 

* 

poo  1 nn 

•k 

*/ 

static  Path 

pathUni on  ( 

( 

B 

Path 

B 

Path 

B 

/*  Add 

B 

for  ( ; 

B 

n pi 

B 

n for 

B 

n n 

B 

n n 

B 

n n 

B 

a n 

pointer  to  Path  which  gets  appended  to 
tail  pointer  for  Path  which  gets  appended  to 
pointer  to  Path  to  append  (a  copy  of) 
ringpool  to  use  for  memory  allocations 


*pl; 

**iptail  = ptail; 

path  p2  but  skip  those  segments  in  pi  */ 
p2;  p2  = p2->next)  ( 


pi ->next ) { 
in  there  already  */ 


(p1=phead;  pi  &&  pi  !=  *iptail;  pi  = 

/*  Eliminate  path  segments  which  are 
if  (p2->src  ==  p1->src  SS  p2->dest  ==  p1->dest)  ( 
n /*  Make  sure  our  confidence  rules  are  working  */ 
n pgpAssert  ( p 2->c on f i d en c e ==  p 1 -> c on f i de n c e ) ; 
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n a a n break; 

n n n > 

n n > 

n n if  (pi  pi  !=  *iptaiL) 

B n n continue; 

n n *ptaiL  = pa t h A L L o c C poo L ) ; 
n n if  (!*ptaiL) 

a a n return  NULL; 

n n **ptaiL  = *p2; 

n n ptaiL  = &(*ptail)->next; 

n n *ptaiL  = NULL; 

n > 

n return  ptaiL; 

} 


/* 

* Calculate  the  confidence  for  a list  of  paths.  We  add  the  confidence  for 

* each  path,  subtrace  the  confidence  for  the  unions  of  all  pairs  of  paths, 

* add  the  confidence  for  the  unions  for  all  the  triples,  and  so  on. 

* We  actually  do  this  by  taking  each  subset  of  the  paths,  unioning  them, 

* calculating  the  confidence  for  that  path,  and  adding  or  subtracting  it 

* based  on  the  parity. 

*/ 


static  double 

pathLi stConf i dence  (PathList  *pList,  RingPool  *pooL) 
{ 


unsigned 


PathLi st 
double 


pathcount, 
mask, 
t m a s k ; 

*ipList  = pList; 
c on f = 0 . ; 


#ifdef  DEBUGPATH 

B fprintf  (stdout,  "Maurer  aLg:\n"); 
#end  i f 


B pathcount  = 0; 

B while  (pList)  { 

B n ++ pathcount; 

B B plist  = pList -> next; 

B > 

B plist  = ipList; 


n 

D 

n 

n 

D 

n 

D 

□ 

n 

n 

n 

□ 

D 

n 

□ 


pgpAssert  (pathcount  < s i z eo f ( u n s i g n e d ) * 8); 
for  (mask  = 1;  mask  < ( 1 U<<pa t h c ou n t ) ; + + mask)  { 

B double  pathconf; 

B Path  *phead=NULL,  **p t a i I =&p h e a d ; 

B int  oddparity  = 0; 

B plist  = ipList; 

B tmask  = mask; 

B while  (plist  &&  tmask)  C 

B B if(tmask&1){ 

B B n ptaiL  = pathUnion  (phead,  ptaiL,  pList->path,  pool); 

a a a oddparity  = loddparity; 

n n } 

B B plist  = plist -> next; 

B B t ma  s k >>=  1 ; 

B } 
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□ 

B 

pathconf  = pathConf idence 

(phead); 

#i f def 

DEBUGPATH 

n 

B 

fprintf  (stdout,  "%sing  %g 

: ",  oddparity? 

Q 

B 

r i ngT t y P r i n t Pa t h (stdout. 

phead,  pool); 

#end i f 

n B 

i f (oddpari ty) 

B 

B 

n conf  +=  pathconf; 

B 

B 

else 

B 

B 

n conf  -=  pathconf; 

B 

B 

pathFreeALl  (phead,  pool); 

B 

B 

phead  = NULL; 

B 

B 

ptai L = Sphead; 

n > 

#i f def 

DEBUGPATH 

n fprintf  (stdout,  "Net  of  %g\n",  conf); 
#endi  f 

n return  conf; 

} 


subb'',pathconf); 


/* 

* Find  the  confidence  Level  to  use  for  the  given  key. 

* This  is  difficult  in  this  trust  model  because  we  generally  don't 

* have  validity  on  the  names  associated  with  the  key,  since  there  is 

* no  well  defined  (nor  arbitrarily  imposed)  ordering  of  the  graph. 

* The  result  is  that  when  we  do  our  calculation  we  may  end  up  with  a 

* de  facto  validity  on  a key/name  that  has  no  relation  to  the  (cached) 

* validity  stored  on  the  key. 

* 

* So  we  have  a set  of  heuristics  to  choose  the  confidence  associated 

* with  some  name,  to  wit: 

* 

* If  all  the  names  have  at  Least  some  validity,  we  choose  the  confidence 

* associated  with  the  most  valid  name.  Otherwise  we  just  choose  the 

* Lowest  confidence  of  all  the  names.  The  reason  for  the  second  case  is  so 

* that  if  we  have  a true  name  and  a false  name,  but  the  true  name  doesn't 

* have  validity  yet,  while  the  false  name  has  a Little  tiny  bit  of  validity, 

* we  don't  want  to  choose  the  confidence  of  the  false  name,  which  might  be 

* very  high.  It  might  be  that  the  next  step  in  the  path  will  give  high 

* validity  to  the  true  (but  Low  confidence)  name.  We  would  end  up  counting 

* this  key  as  both  high  confidence  and  high  validity,  which  may  be  wrong. 

•k 

* This  heuristic  might  seem  to  have  the  problem  that  if  you  get  a new  name 

* for  a trusted 

* key  its  trust  will  go  away  until  either  the  new  name  gets  some  validity 

* or  you  set  the  confidence  Level  on  the  new  name.  But  this  does  not 

* happen  because  such  names  are  not  included  in  the  confident  set. 

* 

* A worse  problem  is  that  Snidely  could  get  Nell's  name  on  his  key,  get 

* some  L ow- c on f i den c e signer  to  sign  Nell,  and  get  an  even  lower  conf- 

* idence  signer  to  sign  his  own.  Then  we  would  use  Nell's  confidence 

* on  Snidely's  key,  and  if  there  were  also  a good  signer  on  Snidely's  name, 

* which  we  hadn't  run  into  yet,  we  would  again  count  Snidely's  signatures 

* too  highly. 

* 

* So  this  suggests  a safer  heuristic  which  is  to  take  either  the  lowest 

* confidence,  or  else  perhaps  to  downgrade  the  confidence  by  the 

* validities.  However  doing  this  if  all  the  validities  are  accurate  will 

* end  up  squaring  them.  Maybe  we  could  just  downgrade  by  the  relative 
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* validities,  best  to  worst... 

:1c 

* (For  now  we  have  an  #if  below  to  always  use  the  lowest  confidence) 

* 

* An  idea  suggested  by  Mark  is  to  base  the  confidence  on  the  particular 

* name  which  is  the  next  step  in  the  path.  However  this  complicates  the 

* union  ope  ration. 

* Either  a path  no  longer  has  a well  defined  confidence,  preventing 

* Maurer's  algorithm  from  working,  or  else  we  have 

* to  define  a path  as  being  from  name  to  name,  and  if  a key  has  two 

* names  (different  email  addresses,  say,  home  and  work)  we  would  end  up 

* counting  its  contribution  to  trust  twice.  (This  is  essentially  because 

* the  assumption  of  independence  fails  spectacularly  in  this  case!) 

* 

* Keep  in  mind  that  despite  all  these  difficulties,  if  there  is  only  one 

* name  then  there  is  no  problem!  We  just  use  the  confidence  on  that  name. 
*/ 


static  double 

pa t h Key C on f i d e n c e (RingObject  *key,  RingSet  const  *set) 
{ 


n 

RingObject 

*name ; 

n 

double 

m i n c on f i d e n c e = 1.0, 

□ 

confidence. 

□ 

errorchance. 

□ 

ma X va 1 i d c on f i d e n c e = 0.; 

□ 

wo  r d 1 6 

maxvalidity  = 0; 

u 

i n t nn  n n 

allvalid  = 1;n  n /*  True 

n 

ringmask  constn 

mask  = set->mask; 

names  have  validity  */ 


□ 

n 

n 

a 

n 

D 

□ 

n 

n 

n 

D 

Q 

n 

n 

n 

n 

□ 

a 

a 

□ 

n 

□ 

n 


for  (name  = key->g.down;  name;  name  = na me->g . n e x t ) { 
n if  ( ! OB J I SN AM E ( name ) ||  ! ( name->g . ma s k S mask)) 

a n continue; 

n if  ( na me->n . c o n f i de n c e ==  PG P_N E WT RU ST_U N D E F I N E D ) 
n n continue; 

n errorchance  = r i n gT r u s t To D o u b I e ( 

n ringTrustToIntern(name->n. confidence)); 

n confidence  =1.-1.  / errorchance; 

n if  (confidence  < m i n c on f i d e n c e ) 
n n m i n c on f i d e n c e = confidence; 
n if  ( ! name->n . va  I i d ) { 
n n allvalid=0; 

n > else  if  ( name->n . va I i d > maxvalidity  || 
n n Q n n ( name->n . va I i d ==  maxvalidity  SS 
n n n n n confidence  < ma x va I i d c on f i d e n c e ) ) { 
n n maxvalidity  = name->n . va I i d ; 
n n ma X va I i d c o n f i de n c e = confidence; 

n > 

> 

/* 

* If  all  names  have  known  validity,  use  the  most  valid  name's  confidence. 

* Else  choose  the  lowest  established  confidence  of  any  name. 

*/ 


#if  0 

/*  Too  risky  to  use  this  heuristic,  just  take  minimum  confidence  */ 
n if  (allvalid) 

n n return  maxva I i dconf i dence; 
n else 
#endi f 
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n n return  m i n c on f i d e n c e ; 

} 

/*  Prototype  */ 
static  PathList  ** 

r i ng F i nd Pa t h s Key  (RingObject  *start,  PathList  **ppath, 
n Path  *predh.  Path  **predt,  unsigned  depth, 

unsigned  maxdepth,  RingSet  const  *set,  word32  timenow,  RingPooL  *pooL); 

/*  Helper  routines  for  r i ng F i n d Pa t h s Name  */ 

/*  Return  the  newest  valid  signature  by  the  given  key  on  the  given  name  */ 
static  RingObject  * 

ri ngNeuestVa I i dSi g (RingObject  *name,  RingObject  *key,  unsigned  depth, 
n RingSet  const  *set,  word32  timenow) 

{ 

n RingObjectn  n *bestsig  = NULL, 

n n n n n *sig; 

n ringmask  constn  mask  = set->mask; 

a pgpAssert  ( OB J I S N AH E ( na me ) ) ; 
n pgpAssert  (OBJISKEY(key)); 


n 

for 

( s i 

9 = 

name->g.down;  sig;  sig  = sig->g.next)  { 

n 

n 

if 

(OBJISSIG(sig) 

s 

n 

□ 

&& 

(si g->s . t rust  S PG P_ S I GTRU ST F _ C H E C KE D ) 

a 

n 

n 

&& 

( ( s i g->g . ma s k 8 mask)  ||  depth==1) 

n 

n 

□ 

&& 

s i g->s . by  ==  key 

Q 

n 

Q 

&& 

mn  t S i g I s Va  1 i d ( t i menow,  s i g-> s . t s t amp,  s i g-> s . va 1 i d i t y ) ) 

n 

n 

Q 

/* 

Good  sig  by  key,  see  if  it  is  newer  than  bestsig  */ 

u 

n 

Q 

i f 

( ! bestsi g 

n 

n 

n 

n 

II  bestsi g->s . tstamp  < s i g-> s . t s t a mp ) { 

□ 

□ 

□ 

n 

bestsig  = sig; 

n 

n 

n 

} 

n 

n 

> 

n > 

n return  bestsig; 

> 

/* 

* Return  true  if  there  is  a signature  by  the  key  on  an  earlier  sibling 

* of  this  name.  This  alerts  us  to  a condition  which  could  cause  duplicate 

* paths,  which  will  waste  resources. 

*/ 

static  int 

r i ngEa r I i e rVa I i dS i g (RingObject  *name,  RingObject  *key,  RingSet  const  *set, 
n word32  timenow) 

{ 

n RingObjectn  n *parent, 

n n n n n *si bname, 

n n n n n *sig; 

n ringmask  constn  mask  = set->mask; 

n pgpAssert  ( OB J I S N AH E ( na me ) ) ; 
n pgpAssert  ( OB J I S KE Y ( key ) ) ; 

n parent  = name->g.up,- 
n pgpAssert  ( OB J I S KE Y ( pa r e n t ) ) ; 
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n 

for 

( s i 

bna me  = pa r e n t ->g . do wn ; s i bn  a me ! =n a me ; s i bn  a me  = s i b na me->g . n e x t ) 

n 

B 

i f 

C ! OBJ ISNAME  C si bname ) 

Et 

B 

B 

1 1 

! ( s i b na me->g . ma s k 8 mask)) 

B 

B 

B 

continue; 

n 

B 

for 

(si 

g=s i bname->g . down;  sig;  s i g =s i g->g . n e x t ) ( 

B 

B 

B 

i f 

(OBJISSIG(sig) 

B 

B 

B 

SS 

( si g->s . t rust  8 PG P_ S I GT RU ST F _ C H E C KE D ) 

B 

B 

B 

&S 

(sig->g.mask  8 mask) 

B 

B 

B 

SS 

s i g->s . by  ==  key 

B 

B 

B 

S& 

mn t S i g I s Va 1 i d ( t i menow,  s i g -> s . t s t a mp , s i g-> s . va  1 i d i t y ) ) { 

B 

B 

B 

n 

/*  Have  an  earlier  signature  we  are  looking  for  */ 

B 

B 

B 

□ 

return  TRUE; 

B 

B 

B 

> 

B 

B 

> 

B 

> 

o return  FALSE; 

} 

/* 

* See  if  the  specified  key  is  in  the  special  "pairing"  relationship  with 

* the  specified  name.  We  are  called  with  key  signing  name.  The  main  point 

* is  whether  key  has  a name  which  matches.  If  so,  we  return  that  name. 

* It  is  also  necessary  that  name  be  self-signed,  so  we  will  check  for  that 

* here.  The  signing  key  must  be  valid  as  well. 

*/ 

static  RingObject  * 

r i ng Pa i r ed Na me  (RingObject  *name,  RingObject  *key,  RingSet  const  *set) 

{ 


B 

RingObjectn 

B 

B 

*keyname;n 

/* 

Names  on  key  */ 

B 

RingObjectn 

B 

B 

*namekey;n 

/* 

Key  parent  of  name  */ 

B 

RingObjectn 

B 

B 

*namesig;n 

/* 

S i g s on 

name  */ 

B 

byte  constn 

B 

B 

*smatchname; 

/* 

Actual 

name  of  *name 

*/ 

B 

byte  constn 

B 

B 

*sname;nn 

/* 

Actual 

name  of  *keyname  */ 

B 

unsignedn 

B 

B 

Imatchname; 

/* 

Length 

of  smatchname 

*/ 

B 

unsi gnedn 

B 

B 

1 name; nn 

/* 

Length 

of  sname  */ 

n ringmask  constn  n mask  = set->mask; 
n 

n pgpAssert  COBJISKEYCkey)); 
n pgpAssert  ( OB J I S N AM E ( na me ) ) ; 


□ 

a 

n 

n 

n 

□ 

□ 

D 

n 

D 

a 

n 

n 

□ 

n 

n 

□ 


/*  Check  for  key  validity  */ 

if  ( key->k . t rust  & ( PG P_KE YT RU ST F _R EVOKE D | PG P_KE YTRU ST F_ E X P I R E D ) ) 
n return  NULL; 

/*  Check  that  name  is  self-signed  */ 
namekey  = name->n.up; 
pgpAssert  ( OB J I SKE Y ( name  key ) ) ; 

for  (namesig  = name->n.down;  namesig;  namesig  = namesig->g.next)  { 
a if  ( ! OB J I S S I G ( n a me s i g ) ) 
n n continue; 

n /*  XXX  Should  check  expiration  */ 

n if  ( ( namesi g->s  . t rust  B PG P_S I GTR U S T F_C H E C KE D ) 
n a BS  ( names i g->g . ma s k B mask) 

n n BB  ( n a me s i g -> s . t y p e B 0xF0)  ==  PG P_S I GT Y P E_KE Y_G E N E R I C)  ( 

n n break;n  ana/*  Exit  with  namesig  nonnull  on  success  */ 

n > 

> 
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n 

i f 

(!namesig)Q  n n n /*  NULL  namesig  means  no 

self  sig  */ 

a 

n 

return  NULL; 

a 

/* 

Get 

userid  string  of  name  */ 

a 

smatchname  = (byte  const  * ) r i n g F e t c h Ob j e c t ( s e t 

, name 

, Slmatchname) 

a 

/* 

See 

if  any  names  on  keyname  match  */ 

a 

for 

(keyname  = key->k.down;  keyname;  keyname  = 

keyname->n . next ) { 

a 

a 

1 f 

( !OBJISNAME(keyname)) 

a 

a 

a 

continue; 

a 

a 

sname  = (byte  const  * ) r i ng F e t c hOb j e c t ( s e t , 

name^ 

S 1 name  ) ; 

a 

a 

i f 

(Iname  ==  Imatchname  S&  tmemcmp  (sname. 

smatchname,  Iname)) 

a 

a 

a 

/*  Have  a matching  name!  */ 

a 

a 

a 

return  keyname; 

a 

a 

> 

a 

> 

a 

return 

NULL; 

> 


/* 

* 

* 

* 

* 

* 

•k 

* 

* 

* 

* 

* 

* 

* 

* 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

*/ 


Find  aLL  the  paths  from  the  starting  name  back  to  an  a x i oma t i c a L I y 
trusted  key. 

pred  holds  the  path  which  leads  to  the  starting  key  from  some  target, 
lastseg  points  at  the  last  segment  of  the  path,  which  already  has 
the  key  this  name  is  on  as  the  dest.  We  just  have  to  fill  it  in 
and  recurse,  or  check  for  buckstop  keys. 

We  reject  paths  which  are  to  keys  which  have 

already  been  processed  as  signing  this  key.  This  can  happen 

if  there  are  two  names  on  a key,  both  signed  by  another  key.  Otherwise 

these  would  be  treated  as  two  different  paths,  but  they 

end  up  being  identical.  The  Maurer  algorithm  correctly  accounts  for  this 
but  it  is  a waste.  What  we  do  is,  for  each  signature,  we  check 
all  our  earlier  name  siblings  and  see  if  they  have  a signature  from  the 
same  key.  If  so  we  skip  this  sig. 


Returnsn  tail  pointer  for  updated  PathList 


namenn  starting  name  object  for  search  backwards  through  web  of  trust 
ppathn  tail  pointer  of  PathList  to  add  our  new  paths  to 

newsegn  pointer  to  the  last  segment  of  the  Path  we  will  add  to 
predhn  pointer  to  the  (head  of  the)  Path  we  will  add  to 
predtn  tail  pointer  to  the  Path  we  will  add  to  ( &n e w s eg -> t a i I ) 
depthn  length  of  path  so  far,  counting  newseg  (e.g.  1 at  outer  level) 

ma xd ep t hnma X i mum  length  of  paths  we  allow 
setn  n ringset  for  trusted  keys 
timenown  current  timestamp 

poolnn  ringpool  to  use  for  memory  allocations 

skipsigs  list  of  signatures,  chained  by  next,  not  to  follow  key  of 


static  PathList  ** 

r i n g F i nd Pa t h s N ame  (RingObject  *name,  PathList  **ppath.  Path  *newseg, 
a Path  *predh.  Path  **predt,  unsigned  depth, 

unsigned  maxdepth,  RingSet  const  *set,  word32  timenow,  RingPool  *pool, 
n RingObject  *skipsigs) 

{ 
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Ri  ngOb j ect 


□ 
a 

a a □ Q 

n n n n *ssig; 

a ringmask  constn  mask  = set->mask; 


*sig, 

*s i g key, 

*pa i redname, 

* c 


n for  (sig  = name->g . down;  sig;  sig  = sig->g.next)  { 
n n i f ( ! OBJ ISSIG ( si g ) ) 
n n n continue; 
n n /*  Skip  if  invalid  sig  */ 

: ! ( si g->s . t rust  S PG P_S I GT R U ST F_ C H E C KE D ) 

II  (!(sig->g.mask  & mask)  SS  depth>1) 

II  ! mn t S i g I sVa L i d ( t i menow,  s i g-> s . t s t a mp , s i g->s . va L i d i ty ) 
II  (sig->s.type  & 0xF0)  !=  PG P_ S I GT YP E_K E Y_G E N E R I C ) 

conti nue; 

Ikip  if  signing  key  not  in  signer  set  */ 

:ey  = s i g->s . by ; 

: ! ( s i g key->g . ma s k S mask)) 
continue; 


□ 

D 

i f 

a 

n 

a 

n 

n 

n 

a 

n 

a 

n 

□ 

n 

a 

a 

/* 

a 

n 

s i g 

n 

a 

i f 

a 

n 

n 

a 

a 

/* 

□ 

a 

i f 

o 

n 

Q 

n 

n 

/* 

Q 

n 

i f 

n 

n 

n 

n 

□ 

/* 

c 

a 

* 

n 

a 

* 

□ 

n 

*/ 

a 

u 

for 

o 

n 

n 

a 

n 

□ 

n 

H 

> 

£t 

n 

i f 

n 

n 

n 

is  a newer  valid  sig  by  the  same  key  */ 


sig) 


continue; 
ikip  if  we 
:depth>1  SS 
continue; 


lave  already  done  this  key  on  an  earlier  sibling  */ 
r i ng Ea r I i e r Va I i d S i g (name,  sigkey,  set,  timenow)) 


is  in  skipsigs  list.  This  is  for  the  "paired 


keys"  feature. 


(ssig  = skipsigs;  ssig;  ssig  = s s i g->g . next  ) { 
if  ( OB J I S S I G C s s i g ) SS  sigkey  ==  ssig->s.by) 

n break;n  n n /*  Exit  from  loop  with  ssig  nonnull  on  match  */ 


/*  Non-null  ssig  means  it  was  on  skip  list  */ 


continue; 


n /*  OK,  investigate  this  signer  further  */ 
n newseg->src  = sigkey; 


B 

B 

i f 

( si gkey->k . t rust  & PG P_KE YT RU S T F _BU C KSTO P 

B 

B 

B 

&& 

! ( si gkey->k . t rust  & ( PG P_KE YT RU S T F_R E VO KE D | 

B 

B 

B 

fl 

n n n n n n n PG P_KE YT R U ST F_ E X P I R E D ) ) 

B 

B 

B 

/*&8  ! ( key->k . t rust  S PG P_KE YT RU S T F _ D I S AB L E D ) * / ) { 

fl 

B 

B 

/* 

Found  a path  */ 

fl 

B 

B 

n e ws e g-> c 0 n f i d e n c e = 1.0; 

B 

B 

B 

ppath  = pa t h L i s t Ad d Pa t h C 1 on e (ppath,  predh,  pool); 

B 

B 

B 

i f 

(Ippath)  { 

B 

B 

B 

B 

/*  Out  of  memory  */ 

B 

B 

fl 

B 

return  NULL; 

B 

B 

fl 

> 

B 

B 

> e 

L se 

if  (depth  < maxdepth  £8 

B 

B 

B 

fl 

! L00KINGAT(8si gkey->k)  88 

B 

B 

B 

B 

( ne wseg->conf i dene e = 

B 

B 

B 

B 

a pa t hKey Conf i den c e ( s i g key , set))  !=  0)  ( 

B 

B 

B 

/* 

Recurse  */ 

B 

B 

B 

ppa 

th  = r i ng F i ndPa t h s Key  (sigkey,  ppath,  predh,  predt. 

B 

B 

fl 

B 

n depth+1,  maxdepth,  set,  timenow,  pool); 

B 

B 

fl 

i f 

(Ippath)  { 

B 

B 

B 

B 

/*  Out  of  memory  */ 
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n n n n returnNULL; 

Q □ □ } 

#if  0 

/*  This  code  is  not  yet  tested  */ 
n n > else  if  (depth  < maxdepth  &S 


#e  nd i f 
n n 
n > 


! LOOKI NG AT ( & s i g k ey-> k ) &S 

( pa i redname  = r i n g Pa i r e d N a me ( na me , sigkey,  set))  !=  NULL)  < 

We  have  a signature  by  a sibling  key,  one  which  matches  our 
name.  Recurse  from  that  name.  The  resulting  path  element 
will  have  as  source,  signer  of  that  paired  name,  and  as 
destination,  this  key.  Even  though  there  is  no  "actual" 
signature  in  such  a form,  there  is  an  implied  signature. 

We  won't  increment  depth  in  this  case. 

Here  we  use  the  skipsigs  feature  - we  don't  want  to  follow 
any  sigs  from  our  pair  which  we  are  also  following  here. 

This  is  the  only  place  it  is  used  (at  this  writing!). 

*/ 

ppath  = r i ng F i n d Pa t h s N a me  (pairedname,  ppath,  newseg,  predh,  predt, 
n depth,  maxdepth,  set,  timenow,  pool,  name->g . down ) ; 
if  (Ippath)  { 
n /*  Out  of  memory  */ 

a return  NULL; 

} 


n 

□ 

/* 

* 

* 

★ 

★ 

* 

* 

★ 

* 

★ 


return  ppath; 


/* 

★ 

* 


Find  all  the  paths  from  the  starting  key  back  to  an  a x i oma t i ca I L y 
t rusted  key . 


* Returnsn  tail  pointer  for  updated  PathList 

* 


★ 

★ 

★ 

* 

■k 

■k 

* 

* 

★ 

* 

*/ 


startn  starting  key  object  for  search  backwards  through  web  of  trust 
ppathn  tail  pointer  of  PathList  to  add  our  new  paths  to 
predhn  pointer  to  the  (head  of  the)  Path  we  will  add  to 
predtn  tail  pointer  to  the  Path  we  will  add  to 

depthn  length  of  path,  counting  segment  we  will  add  (newseg,  below) 

ma xd ep t hnma X i mum  length  of  paths  we  allow 
setn  n ringset  for  trusted  keys 
timenown  current  timestamp 

poolnn  ringpool  to  use  for  memory  allocations 


static  PathList  ** 

r i ng F i nd Pa t h s Key  (RingObject  *start,  PathList  **ppath, 
n Path  *predh.  Path  **predt,  unsigned  depth, 

unsigned  maxdepth,  RingSet  const  *set,  word32  timenow,  RingPool  *pool) 


Ri ngObject 

Path 

Path 


*name; 
*newseg ; 
**newpredt; 


n /*  It's  a key  but  not  axiomatic  */ 
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n pgpAssert  ( OB J I S KE Y ( s t a r t ) ) ; 

n pgpAssert  ( ! ( s t a r t -> k . t r u s t S PG P_KE YT R U S T F_BU C KSTO P ) ) ; 

a neuseg  = pathALLoc(pooL); 
n if  (Inewseg)  { 

n n /*  Out  of  memory  */ 

n n return  NULL; 

n } 

n neuseg->dest  = start; 

n newseg->next  = NULL; 

n newpredt  = pathAddSeg  (predt,  newseg); 
n SETLOOKINGAT(&start->k); 

n for  (name  = start->g.doun;  name;  name  = name->g.next)  { 
n n if  ( ! OBJISNAME(name) ) 

n n n continue; 

n n if  ( name->n  . c onf i den c e ==  0 | | 

n n n n a me-> n . c on f i d e n c e ==  PG P_N E WT R U S T_U N D E F I N E D ) 

n n n continue; 

n n ppath  = r i n g F i n d Pa t h s N a me  (name,  ppath,  newseg,  predh,  newpredt, 

n n n depth,  maxdepth,  set,  timenow,  pool,  NULL); 

n n if  (!ppath)nn  n n /*  out  of  memory  */ 

n n n break; 

n } 

n CLEARLOOKINGAT(&start->k); 
n pathFree  (newseg,  pool); 
n *predt  = NULL; 

n return  ppath; 

> 


/* 

* Find  all  paths  backwards  from  the  specified  target  name  to  some  key 

* which  is  ax i oma t i ca L L y trusted. 

* 

* ReturnsB  tail  pointer  for  new  PathList 

* 

* namenn  starting  name  object  for  search  backwards  through  web  of  trust 

* ppathn  address  of  PathList  pointer  we  set  to  point  to  head  of  PathList 

* ma X d e p t hnma X i mum  Length  of  paths  we  allow 

* setn  n ringset  for  trusted  keys 

* timenown  current  timestamp 

* pooLnn  ringpooL  to  use  for  memory  allocations 

* 

*/ 

static  PathList  ** 

r i ng F i nd Pa t h sBa c k (RingObject  *name,  PathList  **ppath,  unsigned  maxdepth, 
n RingSet  const  *set,  word32  const  timenow,  RingPooL  *pool) 

{ 

Path  *phead  = NULL, 

**ptail  = Sphead; 

RingObject  *key; 

n ringmask  constn  mask  = set->mask; 

n pgpAssert  ( OB J I SNAHE ( name ) ) ; 
n pgpAssert  (name->g.mask  S mask); 
n key  = name->g.up; 
n phead  = pa t h A L L o c ( poo L ) ; 
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a if  (Iphead) 

n n return  NULL; 

n SETLOOKINGAT(&key->k);n  n a /*  avoid  loops  involving  target  */ 
a phead->dest  = key; 

n phead->src  = NULL; 

n p h ea d-> c o n f i d e n c e = 0.; 

n phead->next  = NULL; 
n ptail  = &p h e a d-> n ex t ; 

n ppath  = r i ng F i n d Pa t h s N a me  (name,  ppath,  phead,  phead,  ptail,  1,  maxdepth, 
n n set,  timenow,  pool,  NULL); 

n CLEARLOOKINGAT(&key->k); 
n pathFree  (phead,  pool); 
n return  ppath; 

} 


/* 

* Create  a copy  of  the  given  ringSet,  but  containing  only  keys  which  have 

* at  least  one  name  with  defined  confidence. 

*/ 

static  struct  RingSet  * 

r i n g S e t C on f i d e n t S e t (struct  RingSet  const  *set) 

{ 

n struct  RingSetn  n*trustedset; 
n struct  RingIteratorn*iter; 


Q 

n 

n 

a 

n 

n 

n 

n 

n 

D 

D 

□ 

D 

n 

□ 

Q 

n 

D 

n 

n 

n 

Q 

n 

n 

n 

□ 

□ 

□ 

n 

n 

n 

} 


trustedset  = ringSetCreate  (ringSetPool  (set)); 
if  (!trustedset) 
n return  0; 

iter  = r i ng I t e r C r ea t e (set); 
if  (!iter)  { 

n ringSetDestroy  (trustedset); 
n return  0; 

> 

r i ng S e t Add S e t (trustedset,  set); 
while  ( r i ng 1 1 e r Nex t Ob j e c t (iter,  1))  { 

n int  goodconf  = 0;n  n n n /*  True  if  key  has  a conf.  name  */ 
n while  ( r i ng 1 1 e r Ne x t Ob j e c t (iter,  2))  { 
n n union  RingObject  *nameobj; 

n n nameobj  = r i ng I t e r C u r r e n t Ob j e c t (iter,  2); 
n n if  ( ! OBJ ISNAHE(nameob j ) ) 

a a a conti nue; 

n n /*  Remove  names  with  undefined  or  zero  confidence  */ 
n n if  ( nameobj ->n . conf i dence  ==  PG P_N E WT RU S T_UN D E F I N E D || 

n n n nameobj ->n . conf i dence  ==  0)  { 

n n n r i ng S e t RemOb j e c t (trustedset,  nameobj); 

n n } e I se  { 

n n n goodconf  = 1 ; 

a Q > 

n } 

n i f ( ! goodconf  ) { 

n n r i ng S e t RemOb j e c t (trustedset,  r i ng I t e r C u r r e n t Ob j e c t (iter,  1)); 

n > 

> 

r i ng I t e r De s t roy  (iter); 
r i ng S e t F r e e z e (trustedset); 
return  trustedset; 
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#endif  /*  PGPTRUSTH0DEL==2  */ 

#if  PGPTRUSTMODEL==0 

/* 

* Add  "inc"  trust  to  the  name  signed  by  the  given  sig. 

* If  the  trust  passes  "thresh",  mark  the  name  with  the  Level 

* and  add  the  key  that  owns  it  to  the  List.  Return  the  expanded  List. 

* 

* TODO:  Do  something  sensible  with  signatures  on  keys. 

*/ 

static  struct  RingKey  const  * 

mn t DoS i g ( s t r u c t RingSig  const  *sig,  struct  RingKey  const  *List, 
n int  const  inc,  int  const  thresh,  word32  const  timenow,  int  const  Level) 
{ 

a union  RingObject  *name,  *key; 
n byte  sigtype; 

n ( VO i d ) t i menow; n /*  Avoid  warning  */ 

a pgpAssertCmntSigIsVaLidLtimenow,  sig->tstamp,  sig->vaLidity)); 

n name  = sig->up; 
n if  (!  OBJ ISNAHE ( name ) ) { 

nut*  aaa  do  anything  with  sigs  on  keys?  */ 
n n return  List; 

n > 

#if  0 

a /*  Ignore  s e L f - s i g n a t u r e */ 
n key  = name->n.up; 
n pg  p As  s e r t ( OB  J I S KE  Y ( ke y ) ) ; 
n if  (key  ==  sig->by) 

n return  List; 

#end  i f 

n sigtype  = sig->type  & 0xF0; 
n if  (sigtype  !=  PG P_S I GT YP E_KE Y_G EN E R I C ) 
n n return  List; 

#if  PRINT_PROGRESS 

a printf("  Trust  %d/%d  ->  %d/%d  on  name  ", 
n name->n . t rustva L,  thresh, 

n name->trustvaL  + inc,  thresh); 

n ( VO i d ) r i ngT t y Pu t S t r i n g ( na me->na me , name->Len,  -1u,  stdout,  '"'); 

n putchar('\n'); 

#e  n d i f 

n na me->n . t r u s t va L +=  inc; 
n /* 

n * If  we  are  not  yet  at  the  valid  Level  or  have  already 

n * marked  this  name  as  validated,  bail  out. 

n * / 

n if  ( na me->n . t r u s t va L < thresh  | | N AM E LEV E L ( &na me->n  ) ) 
n n return  List; 

n /*  Passed  threshold  - Label  with  certification  Level.  */ 
n NAMESETLEVEL(&name->n,  Level); 
n key  = name->n.up; 
n pgp As se r t ( OB J I S KE Y ( key ) ) ; 

n if  ( key->g . f Lags  8 KEYF_TRUSTED  ||n  /*  Already  Listed?  */ 
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n key->k. trust  & ( PG P_KE YT R U ST F _ R E VO KE D | PG P_KE YTRU S T F_ E X PI R E D ) ) 

n H return  List; 

#if  PRINT_PROGRESS 
n r i ng Key  I D p r i n t ( s t dou t , 

" Potential  introducer:  first  userlD  trust  >=  1 on  keylD  ", 
n n n key->keyID); 

#endi  f 

n key->k.utiL  = (struct  RingKey  *)List; 
n key->g. flags  |=  KE Y F_T R U S T E D ; 
n return  &key->k; 

> 

/* 

* Look  for  other  keys  signed  by  the  grandparent  of  sig  which  have  the  same 

* name.  Propagate  the  same  trust  to  those  names.  (Don't  do  it  if  they 

* have  a sig  by  the  same  signing  key.)  The  reasoning  is  that  the  same 

* person  owns  both  keys,  he  has  the  same  name,  so  sigs  on  the  first  name 

* can  be  treated  as  though  they  are  on  the  other  name.  This  will  facilitate 

* moving  to  a new  key  from  an  old  one. 

* 

* One  issue  not  dealt  with  here  is  that  if  the  grandparent  key  here  is  also 

* a trusted  introducer,  trust  will  move  to  the  destination  key  in  two  ways: 

* here,  by  direct  "pair  propagation"  from  signatures  on  that  key's  names 

* which  match  the  names  here;  and  also  by  normal  trust  propagation  due  to 

* the  signature.  This  could  end  up  counting  some  trust  twice,  although 

* in  this  trust  model  it  doesn't  Look  Like  it  introduces  any  significant 

* weaknesses. 

*/ 

static  struct  RingKey  const  * 

mn t DoHa t ch i ngNames ( s t ru c t RingSig  const  *sig,  struct  RingKey  const  *List, 
n RingSet  const  *set,  int  const  inc,  int  const  thresh,  word32  const  timenow, 
n int  const  Level) 

{ 


n 

Ri  ngOb j ectn 

n 

n 

*name;n  n 

/* 

Name 

which  sig  is 

on 

*/ 

D 

RingObjectn 

□ 

n 

* k e y ; n n 

/* 

Key 

which  name  i s 

on 

*/ 

n 

Ri ngOb j ectn 

n 

n 

*propsig;n 

/* 

ALL 

sigs  by  key  */ 

n 

RingObjectn 

D 

n 

*propname;n 

/* 

Name 

which  propsi g 

i 

s on 

n 

Ri ngOb j ectn 

n 

n 

*propkey;n 

/* 

Key 

which  propname 

i 

s on 

D 

RingObjectn 

n 

Q 

*namesig;n 

/* 

ALL 

sigs  on  propname 

*/ 

S 

byten  n 

□ 

n 

sigtype; 

n 

byten  n 

n 

D 

selfsigfound; 

n 

ringmask  constn 

n 

mask  = set 

->ma  s k ; 

n pgpAssert(mntSigIsVaLid(timenow,  sig->tstamp,  sig->vaLidity)); 

n /*  Ignore  sigs  not  on  names  */ 
n name  = sig->up; 
n if  ( !OBJISNAHE(name)) 
n n return  List; 

n /*  Ignore  self  signatures,  invalid  keys,  and  keys  which  don't  sign  */ 
n key  = name->n.up; 
n pg p As se r t ( OB J I S KE Y ( key ) ) ; 
n if  (key  ==  sig->by) 

n return  List; 

n if  ( key->k . t rust  & ( PG P_KE YT R U S T F _R EVOKE D | PG P_KE YT R U ST F _ E X P I R E D ) ) 
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n n return  List; 

n /*  Ignore  funny  kinds  of  sigantures  */ 

n sigtype  = sig->type  S 0xF0; 

n if  (sigtype  !=  PG P_ S I GT Y P E _ KE Y_G E N E R I C ) 

n n return  List; 

n / * 

n * As  a short-term  security  precaution,  onLy  propagate  for  fuLLy  vaLid 
n * names.  The  probLem  is  that  otherwise,  someone  couLd  have  two  keys, 

n * A and  B,  which  both  are  marginaLLy  vaLid.  If  both  A and  B sign  key 

n * C which  has  the  same  name,  the  marginaLLy  vaLid  signatures  combine 

n * to  give  fuLL  vaLidity  to  C.  We  have  a soLution  to  this  but  it  is 

n * compLex.  For  now  we  wiLL  onLy  do  propagation  from  names  which  are 

n * fuLLy  vaLid,  which  wiLL  mean  that  onLy  fuLLy  vaLid  keys  get  their 

B * trust  propagated  to  matching  names, 

n * / 

B if  ( !NAHELEVEL(8name->n)  ) 

B B return  List; 


B /*  Look  for  other  keys  with  same  name  */ 

B for  (propsig  = key-> k . s i g s by ; propsig; 

B n n n n n propsig  = (RingObject  * ) p r op s i g->s . n ex t by ) { 

B n if  ( ! C p rops i g->g . ma s k & mask)) 

B n n continue; 

B B propname  = propsig->s.up; 

B B /*  Ignore  sigs  not  on  names  */ 

B B if  ( ! OB J I S N AH E ( p r opname ) ) 

B n n continue; 

B B propkey  = p ropname->n . up; 


B B /*  Ignore  nonkeysC?)  or  seLf  sigs  */ 

B B if  ( ! OB J I S KE Y C p r op  key  ) ||  propkey  ==  key) 

B B n continue; 


Q a 

D □ 

n n 

n B 

n n 

n n 

□ n 


/*  Make  sure  signature  is  vaLid  */ 

if  (! (propsig->s. trust  S PG P_S I GTRU ST F _C H E C KE D ) 

II  ! C p r ops i g->s . ma s k & mask) 

II  ! mn t S i g I sVa L i d ( t i menow,  p r o p s i g -> s . t s t amp,  p r op s i g-> s . va L i d i t y ) ) 
B continue; 

if  ( (propsi g->s . type  & 0xF0)  !=  PG P_S I GT YP E_KE Y_G EN E R I C ) 

B continue; 


B B /*  See  if  names  match  */ 

B B if  ( r i ng Name s D i f f e r (set,  name,  propname)) 
B n n continue; 


□ n 
n □ 
a n 

□ a 
n □ 

□ n 

□ a 
B B 
n a 
Q n 


/*  Skip  if  name  aLready  has  a sig  from  our  signer  */ 

/*  ALSO,  this  must  be  the  newest  sig  by  us  */ 

/*  ALSO,  it  must  have  a seLf  signature  */ 
seLfsigfound  = 0; 

for  (namesig=propname->n.down;  namesig;  namesig=namesig->s.next)  { 
B if  ( ! OB J I S S I G ( na me s i g ) ||  ! ( na me s i g->g . ma s k & mask)) 

B B continue; 

B if  ( names i g->s . by  ==  sig->by) 

B a break;B  n /*  Break  out  with  nonnuLL  namesig  on  match  */ 

B if  (namesig  !=  propsig  S&  name s i g-> s . by  ==  key 
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n 

B 

fl 

B 

n n &&  names i g->s . tstamp  >=  p r op s i g-> s . t s t a mp ) 

o 

B 

B 

B 

break;n  n /*  Break  outwith  nonnuLL  namesig 

if  not  newest 

u 

B 

B 

/* 

Check  for  valid  self  signature  */ 

Q 

B 

fl 

if 

( name s i g->s . by  ==  propkey 

n 

B 

B 

fl 

&&  (namesig->s. trust  S PG P_S I GT RU ST F_C H E C KE D ) 

D 

B 

B 

B 

SS  ( names i g->s . ma s k & mask) 

B 

fl 

fl 

fl 

&S  mnt S i g I sVa L i d ( t i menow,  n a me s i g-> s . t s t a mp , 

B 

B 

B 

B 

nnnnnnnn  na me s i g-> s . va L i d i t y ) ) ( 

B 

B 

fl 

fl 

selfsigfound  = 1; 

B 

B 

B 

> 

B 

B 

> 

B 

B 

/* 

If  namesig  is  non-nuLL  it  had  a matching  sig,  skip 

this  name  */ 

B 

B 

/* 

Also 

if  there  was  no  self  signature  */ 

B 

B 

if 

(namesig  ||  I s e L f s i g f ou nd  ) 

B 

B 

fl 

continue; 

B 

B 

/* 

S 

O 

we  have  a name  suitable  for  propagating  trust 

to  */ 

B 

B 

Li 

St  = 

mntDoSig(&propsig->s,  List,  inc,  thresh,  timenow.  Level); 

B 

> 

B 

return 

List 

/ 

> 


/* 

* Add  "inc"  trust  to  each  name  signed  by  a valid  signature  on 

* the  "sigs"  List.  If  the  trust  passes  "thresh",  add  the  resultant 

* key  to  the  List.  Return  the  expanded  List. 

* 

* Signatures  that  are  expired  or  have  been  superseded  are  weeded  out. 

* Note  that  a postdated  signature  does  not  supersede  one  dated  yesterday! 

*/ 

static  struct  RingKey  const  * 

mntWa L kSi gLi St ( St ruct  RingSig  const  *sigs,  struct  RingKey  const  *List, 
n RingSet  const  *set,  int  const  inc,  int  const  thresh,  word32  const  timenow, 
n int  const  Level) 

{ 

n struct  RingSig  const  *cur; 

n ringmask  const  mask  = set->mask; 


fl 

while  ( 

fl 

B 

/* 

B 

fl 

i f 

B 

B 

fl 

B 

B 

B 

i 

fl 

fl 

B 

fl 

fl 

B 

fl 

fl 

> 

B 

B 

/* 

fl 

fl 

cur 

fl 

B 

/* 

fl 

fl 

* 

fl 

fl 

* 

fl 

fl 

* 

B 

fl 

* 

fl 

fl 

*/ 

I I !(sigs->mask  S mask) 

II  I mn t S i g I s Va L i d ( t i menow,  s i g s-> t s t a mp , s i g s -> va L i d i t y ) ) 

sigs  = s i g s->nex t by ; 
continue; 


s 1 g s ; 


We  use  the  fact  that 


after 
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n 

B 

wh  i L e 

((sigs  = si gs->nextby)  !=  NULL  88  sigs- 

>up  ==  cur->up) 

D 

B 

i 

n 

B 

B 

/* 

a 

B 

B 

★ 

So  now  that  the  signature  at  the  front 

of  the  sigs 

n 

B 

B 

* 

List  is  on  the  same  thing  as  "cusrig". 

consi der 

n 

B 

B 

★ 

repLacing  cur,  if  the  new  signature  is 

i s 

□ 

B 

B 

★ 

checked  good,  vaLid,  under  the  right  mask,  and 

a 

B 

B 

* 

more  recent  than  cur. 

n 

B 

B 

* 

s 

B 

□ 

*/ 

a 

B 

n 

i f 

(sigs->trust  8 PG P_ S I GT R U S T F_C H E C KE D 

a 

B 

□ 

88  sigs->mask  8 mask 

n 

B 

n 

88  cur->tstamp  < sigs->tstamp 

□ 

B 

B 

88  mnt S i g I s Va L i d ( t i menow,  s i g s-> t s t a mp , 

a 

B 

B 

si gs->va  L i di ty ) ) 

n 

B 

B 

n 

cur  = sigs; 

u 

B 

} 

a 

B 

/* 

Do 

the  trust  computations  on  the  resuLtant 

signature.  */ 

B 

B 

List  = 

mntDoSig(cur,  List,  inc,  thresh,  timenow,  LeveL); 

n n /*  Propagate  sig  info  also  to  Linked  keys  with  matching  names  */ 

n n List  = mntDoMatchingNamesCcur,  List,  set,  inc,  thresh,  timenow,  LeveL); 


n } 

n return  List; 

> 


/* 

* WaLk  a List  of  keys  (Linked  through  the  utiL  fieLd),  adding  the 

* appropriate  trust  vaLues  to  the  names  the  key  has  signed. 

*/ 

static  struct  RingKey  const  * 

mnt Li  St ( st ruct  RingKey  const  *List,  RingSet  const  *set,  int  const  addCS^, 
n int  const  threshoLd,  word32  const  timenow,  unsigned  const  LeveL) 

{ 

o struct  RingKey  const  *newList; 
n int  trustinc; 


n for  CnewList  = 0;  List;  List  = List->utiL)  { 

n n pgpAssert ( L i st->f Lags  S KE Y F_TRU ST E D ) ; 

n n trustinc  = a dd C L i s t -> t r u s t S PGP_KE YTRUST_MASK: ; 

#if  PRINT_PROGRESS 

n n printf(,  "Adding  %d/%d  trust  from  ",  trustinc,  threshoLd); 

n n ringKeyPrint(stdout,  (struct  RingPooL  *)0,  List); 


#end i f 

#i  f 

0 

Q 

B 

/* 

n 

B 

* 

aaa  PGP  2.x  aLLows  disabLed  keys  to  participate 

Q 

B 

* 

trust  computation.  ShouLd  this  be  added? 

B 

B 

*/ 

B 

B 

i f 

(List->trust  8 ( PG P_KE YTRUST F_D I S ABLED ) ) 

B 

B 

a 

continue; 

#endi f 

n n if  (trustinc  <=  0) 

n n n continue; 

n n newList  = mn t Wa L kS i g L i s t ( 8 L i s t -> s i g s by-> s , newList,  set,  trustinc, 
n n threshoLd,  timenow,  LeveL); 
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n > 

a return  newList; 

} 

#eLse  /*  PGPTRUSTMODEL>0  */ 

/* 

* This  finds  the  combined  trust  value  given  two  trusts  which 

* are  arranged  in  series.  Trust  values  are  actually  the 

* scaled  negative  logarithms  of  *distrust*,  so  assuming 

* independent  failures,  two  signatures  in  parallel  have  a 

* distrust  which  is  the  product  of  the  input  distrusts,  and 

* we  only  have  to  add  the  trust  values.  But  when  they're 

* in  series,  we  want  to  multiply  the  *trusts*,  and  it  gets  hairier... 

* This  is  a quick  and  dirty  b r u t e-f o r c e-a nd- i g no r a n c e approach. 

* I know  of  better  solutions,  but  haven't  had  time  to  do  the 

* necessary  numerical  analysis. 

* 

* aaa  optimize  this  code 

* 

* Given  t1  = log(p1)/k  and  t2  = log(p2)/k,  where  pi  and  p2  are 

* probabilities  that  are  bounded  between  0 < p1,p2  <=  1,  find 

* t3  = log(1-(1-p1 )*(1-p2))/k 

* = log(1-(1-exp(t1*k))*(1-exp(t2*k)))/k. 

* = logfpl  + p2  - p1*p2) 

* = I og ( exp ( 1 1 * k ) + exp(t2*k)  - ex p ( 1 1 * k ) *e x p ( t 2 * k ) ) / k 

* k is  chosen  to  make  the  logs  come  out  right, 

* so  that  an  increment  of  TRUST_DECADE  corresponds  to  1/10. 

* I.e.  exp(TRUST_DECADE*k)  = 1/10 

* =>  TRUST_DECADE*k  = log(1/10) 

* =>  k = -log(10)/TRUST_DECADE; 

* Well,  actually  there's  an  additional  factor  of  T R U ST_C E RTS H I FT 

* thrown  in  there,  a factor  of  64  which  allows  probabilities  down  to 

* 10^-25  and  a granularity  of  +/-0.09%  in  trust  values. 

* Note  that  p1+p2-p1*p2  = pi  + p2*(1-p1)  >=  pi,  so  the  output 

* probability  is  always  greater  than  either  of  the  input  probabilities, 

* so  t3  is  always  less  than  t1  or  t2.  Thus,  the  computation  can't 

* overflow. 

* 

* I'd  prefer  to  somehow  evaluate  it  directly  in  log  form,  using 

* something  like  Zech's  log  function  to  evaluate  it. 

* H'm...  an  alternate  evaluation  technique... 

* pi  * (1  + p2/p1 (1-p1 ) ) 

* = pi  * (1  + p2*C1  /p1-1  ) ) 

* Choose  pi  as  the  larger  of  the  two...  does  this  lead  to  anything? 

* Yes.  Two  tables  of  size  771  (=  c e i I ( I og ( 2 ) *40*64  ) ) will  allow  you 

* to  evaluate  (1/p1-1)  directly,  guaranteed  to  round  down,  and  then 

* I think  something  similar  will  do  for  (t+1).  For  the  C1/p1-1) 

* evaluation,  do  the  entries  for  pi  from  1 to  1/2  directly,  and 

* past  that,  the  value  of  (1/p1-1)  differes  from  the  value  of 

* 1/p1  by  at  most  771.  Record  in  another  table  the  values  at 

* which  the  delta  changes,  do  a binary  search,  and  use  the  index  as 

* the  delta. 

*/ 

#i nc  lude  <math . h> 

#ifndef  M_LN10 

^define  M_LN10n  2 . 30 2 5 85 09299404 5 6840 2 n /*  ln(10)  */ 
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#endi  f 

static  word16 

me rg e t r u s t ( wo r d 1 6 t1,  word16  t2) 

{ 

n static  double  const  k = -M_LN10  / PG P_T R U ST_ D E C A D E ; 
n double  p,  q; 

n /*  Saturate  at  infinity  */ 
a if  (t1  ==  (word16)  PG P_T R U ST_ I N F I N I T E ) 
n n return  t2; 

n if  (t2  ==  (word16)  PG P_T RU S T_ I N F I N I T E ) 
a a return  t1; 

n p = exp(t1*k); 

a q = expCt2*k); 

n /*  Round  down  for  conservative  estimate  */ 
n return  ( wo r d 1 6 ) f I oo r ( I og ( p + q - p*q)/k); 

} 

/* 

* Compute  the  trust  value  associated  with  a key.  This  is  the 

* weight  given  to  signatures  made  by  that  key.  The  decision  is  based 

* on  the  validity  of  the  key's  name  (how  sure  are  we  that  the  name 

* belongs  to  that  key)  and  confidence  (how  much  do  we  trust  the 

* named  individual).  The  product  of  those  two  gives  the  trust  in 

* the  key  as  a whole. 

* 

* If  the  key  is  a buckstop  key,  ignore  the  validity  and  just  take  the 

* confidence  as-is. 

* 

* If  there  are  multiple  names  on  a key,  compute  the  trust  for  each  and 

* use  the  maximum. 

* 

* BESTVALID  alternate  algorithm 

* 

* If  BESTVALID  if  set,  then  the  overall  trust  in  a key  is  determined 

* from  the  name  with  the  highest  validity.  In  the  case  of  a tie, 

* then  the  best  va I i d i t y * c o n f i d e n c e is  taken.  Thus,  overall  trust 

* is  computed  from  the  name  this  key  is  most  likely  to  belong  to. 

*/ 

#ifndef  BESTVALID 
#define  BESTVALID  1 
#endi f 

static  word16 

c a I c t r u s t ( s t r u c t RingKey  const  *k,  ringmask  mask) 

{ 

n union  RingObject  const  *n; 

n word16  cur,  best  = 0; 

#if  BESTVALID 
n word16  bestvalid  = 0; 

# end i f 

n pgpAssert(KEYISKEY(k)),- 

n /*  For  BUCKSTOP  keys,  validity  and  confidence  are  infinite, 

n Revoked  or  expired  keys  have  no  validity  or  confidence.  */ 

n if  (k->trust  & ( PG P_KE YT R U S T F _ R E VO KE D | PG P_K E YT R U ST F _ E X P I R E D ) ) 
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n n return  0; 

a if  (k->trust  & PG P_KE YT RU S T F_BU C KS TO P ) 
a n return  PG P_T R U ST_ I N F I N I T E ; 

n for  (n  = k->down;  n;  n = n->g.next)  { 
#if  BESTVALID 


n 

n 

i f 

(OBJISNAMECn)  &S  (n->g.mask  & mask)  S& 

n 

n 

n->n. valid  >=  bestvalid) 

#e  L se 

n 

u 

i f 

(OBJISNAME(n)  &&  (n->g.mask  S mask)) 

#end  i f 

n 

Q 

i 

n 

Q 

□ 

cur 

= n->n. confidence; 

n 

n 

Q 

i f 

(cur  ==  PGP_NEWTRUST_INFINITE) 

n 

□ 

n 

n 

cur  = n->n .valid; 

n 

n 

n 

else  if  (cur  ==  PG P_N E WT R U ST_U N D E F I N E D ) 

Q 

□ 

a 

n 

cur  = 0; 

n 

n 

n 

else 

n 

n 

□ 

n 

cur  = me r g e t r u s t ( c u r <<  T RU S T_ C E RTS H I FT , 

n 

n 

Q 

n 

n->n. valid)  ; 

#if 

BESTVALID 

n 

n 

n 

i f 

(n->n. valid  > bestvalid  || 

s 

n 

Q 

(n->n. valid  ==  bestvalid  SS  cur  > best)) 

n 

n 

n 

best  = cur; 

n 

n 

n 

n 

bestvalid  = n->n. valid; 

n 

s 

Q 

> 

#el 

s e 

n 

n 

n 

i f 

(cur  > best) 

Q 

□ 

n 

n 

best  = cur; 

#endi f 

n 

n 

> 

n 

> 

n return  best; 

> 

wordl 6 

r i ng Key C a L cT r u s t ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

n word16  trust; 
n pgpAssertCOBJISKEYCkey)); 
n pg p As s e r t ( s e t ->ma s k & key->g . ma s k ) ; 
n trust  = caLctrust  (&key->k,  set->mask); 
n if  (trust  ==  PG P_T RU ST_ I N F I N I T E ) 
a return  trust; 

n return  trust; 

> 

□ 

#endif  /*  PG PT R U S THO D E L>0  */ 

#if  PGPTRUSTMODEL==1 
/* 

* Add  confidence  to  the  name  signed  by  the  given  sig,  and  if  the  name 

* has  confidence  and  the  key  has  not  already  been  processed,  add  it 

* to  the  List.  Return  the  expanded  List. 

* 

* TODO:  Do  something  sensible  with  signatures  on  keys. 
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*/ 

static  struct  RingKey  * 

mn t DoS i g ( s t ru c t RingSig  const  *sig,  struct  RingKey  *List, 
n word16  confidence,  word32  const  timenow,  int  const  level, 
n int  pass2) 

{ 

n union  RingObject  *name,  *key; 
n int  i ; 
n byte  sigtype; 

n pg p A s s e r t ( mn t S i g I s Va  I i d ( t i me n o w , sig->tstamp,  s i g -> va I i d i t y ) ) ; 

n /*  Okay,  it  hasn't  expired,  check  that  we  have  a name  signature  */ 
n name  = s i g->up ; 

a if  ( ! OBJISNAMECname)  ) f 

n n /*  aa5)  Do  anything  here  with  signatures  on  keys?  */ 
n n return  list; 
n > 


Q 

D 

a 

□ 

n 

Q 

□ 

□ 

n 

D 

n 

D 

Q 

a 

D 

a 

a 

n 

□ 

n 

Q 

D 

n 

D 

n 

□ 

□ 

n 

n 

Q 

n 

Q 

n 

Q 

n 

n 


sigtype  = sig->type  S 0xF0; 
if  (sigtype  !=  PG P_ S I GT Y P E_KE Y_G E N E R I C) 
n return  list; 
key  = name->n.up; 
pgpAssertCOBJISKEYCkey)); 

/*  Do  not  add  confidence  from  a key  to  itself  */ 
if  (key  ==  sig->by) 
n return  list; 

/* 

* There  are  two  passes:  first  we  add  trust  from  keys  at  one  level 

* to  keys  on  the  next  level,  then  we  add  trust  from  keys  at 

* that  level  to  each  other.  Pass2  is  a flag  controlling  which 

* we  do . 

* Oh,  names  which  we  have  no  confidence  in  as  introducers 

* get  their  certainty  added  from  all  levels,  since  they  cannot 

* participate  in  cycles.  This  is  done  during  pass  1. 

* So,  during  pass  1: 

* - Ignore  names  on  keys  that  we  have  already  recorded  that  are 

* at  levels  less  than  the  current  one. 

* And  during  pass  2 : 

* - Ignore  names  other  than  ones  at  the  specified  level  on  keys 

* that  *are*  trusted.  (On  keys  that  are  not  will  get  added 

* next  iteration). 

*/ 

i = NAMELEVEL(&name->n); 
if  (!pass2)  { 
n /*  Pass  1 */ 
n i f ( ! i ) 

n n N AH E S ET L EV E L ( &na me->n , level); 

n else  if  (i  < level  SS  key->g. flags  S KE Y F_T RU ST E D ) 
n n return  list; 

I else  { 

n /*  Pass  2 */ 

n if  (i  !=  level  ||  ! ( key->g . f I ags  & KEYF_TRUSTED ) ) 

n n return  list; 

} 


n /*  Okay,  now  add  the  confidence  if  needed.  Do  special 
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checks  for  infinite  confidence  and  validity.  */ 


confidence; 


if  (confidence  ==  PG P_TRU ST_ I N F I N I T E ) 
n name->n . va L i d = PG P_T R U ST_I N F I N I T E ; 
else  if  ( nane->n . va L i d !=  PG P_T RU ST_ I N F I N I T E ) { 
n name->n .valid  + 
n / * 

n * Saturate  on  overflow, 

n * 65534  is  2.5164  * 10^ 

n * / 

n if  ( name->n . va  I i d + 1 <=  confidence) 

n n nanie->n  . va  I i d = (word16)  PG P_T RU S T_M AX ; 

> 


65535  is  reserved  for  "perfect' 
26,  2^-85. 


n 

/* 

n 

* 

□ 

* 

a 

* 

a 

* 

a 

ir 

a 

* 

a 

★ 

a 

★ 

a 

★ 

a 

★ 

a 

★ 

a 

★ 

a 

* 

n 

★ 

a 

*/ 

a 

i f 

a 

/*n 

n 

n 

a 

a 

n 

> 


Don't  add  keys  to  the  list  if: 

- Already  on  list 

- Key  is  revoked  (confidence  is  zero  then) 

- Key  is  expired  (same  as  revoked) 

- Name  has  no  confidence 

Currently,  disabled  keys  *are*  allowed  on  the  list, 
to  participate  in  trust  transactions.  Disabling  only 
affects  key  selection.  This  is  PGP  2.x  compatible. 

Once  a key  is  on  the  list,  only  one  more  round  of  adding 
certainty  to  its  names  is  possible,  since  two  rounds  could 
create  cycles  that  correcting  for  is  difficult.  Thus, 
we  want  to  avoid  putting  things  on  the  list  unnecessarily, 
but  prefer  to  weed  out  everything  possible  now. 


key->k. trust  S ( PG P_KEYTRUST F_R EVOKE D | PG P_KE YT R U ST F_E XP I R E D ) 
II  key->k. trust  & PG P_KE YT RU ST F_ D I S AB L E D */  /*PGP  2.x  compatible*/ 
II  ! name->n . c on f i den c e ) 
a return  list; 

key->k.util  = (struct  RingKey  *)list; 
key->g. flags  |=  KEYF_TRUSTED; 
return  &key->k; 


/* 

* Add  confidence  to  each  name  signed  by  a valid  signature  on 

* the  "sigs"  list.  If  the  trust  passes  "thresh",  add  the  resultant 

* key  to  the  list.  Return  the  expanded  list. 

* 

* Signatures  that  are  expired  or  have  been  superseded  are  weeded  out. 

* Note  that  a postdated  signature  does  not  supersede  one  dated  yesterday! 
*/ 

static  struct  RingKey  * 

mn t Wa I kS i g L i s t ( s t r u c t RingSig  const  *sigs,  struct  RingKey  *list, 
n word16  confidence,  ringmask  const  mask,  word32  const  timenow, 
n int  const  level,  int  pass2) 

{ 

n struct  RingSig  const  *cur; 

n while  (sigs)  { 

n n /*  Find  the  first  valid  checked  signature  under  the  mask.  */ 

n n if  ( I ( s i gs->t rust  S PG P_S I GT RU ST F _ C H E C KE D ) 
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n 

B 

1 1 

!(sigs->mask  & mask) 

fi 

B 

1 1 

! mn t S i g I s Va L i d ( t i menow,  s i g s -> t s t a mp , s i g s -> va L i d i t y ) ) 

B 

B 

B 

B 

fl 

sigs  = s i gs->nex t by ; 

B 

B 

B 

continue; 

B 

B 

> 

B 

B 

/* 

The 

first  candidate  signature  */ 

B 

B 

cur 

= 

sigs; 

B 

B 

/* 

B 

B 

* 

Search  aLL  other  signatures  by  this  key  on  the  same  object 

B 

B 

* 

for 

the  most  recent  vaLid  signature,  which  is  the  onLy 

B 

B 

* 

one 

which  is  accorded  any  weight.  We  use  the  fact  that 

B 

B 

* 

after  r i ng Poo L L i s t S i g s By  pLaces  aLL  signatures  on 

B 

B 

* 

the 

same  object  together  in  the  sigsby  List. 

B 

B 

*/ 

B 

B 

wh  i L e 

((sigs  = si gs->nextby ) !=  NULL  S&  sigs->up  ==  cur->up) 

B 

B 

B 

fl 

fl 

/* 

B 

B 

fl 

★ 

So  now  that  the  signature  at  the  front  of  the  sigs 

B 

B 

fl 

★ 

List  is  on  the  same  thing  as  "cusrig",  consider 

B 

B 

fl 

★ 

repLacing  cur,  if  the  new  signature  is  is 

B 

B 

fl 

"k 

checked  good,  vaLid,  under  the  right  mask,  and 

B 

B 

fl 

★ 

more  recent  than  cur. 

B 

B 

fl 

•k 

B 

B 

B 

★ 

/ 

B 

B 

fl 

if 

(sigs->trust  & PG P_S I GT RU S T F_ C H E C KE D 

B 

fl 

fl 

&8  sigs->mask  & mask 

B 

B 

B 

&&  cur->tstamp  < sigs->tstamp 

B 

B 

B 

S&  mn t S i g I s Va L i d ( t i me  no w , s i g s-> t s t amp , 

B 

fl 

fl 

si gs->va  L i di ty  ) ) 

B 

B 

fl 

B 

cur  = sigs; 

B 

B 

> 

B 

B 

/* 

Do 

the  trust  computations  on  the  resuLtant  signature.  */ 

B 

B 

List  = 

mn t DoS i g ( cu r , List,  confidence,  timenow,  LeveL,  pass2) 

B 

> 

B 

return 

List; 

> 

/* 

* Walk  a List  of  keys  (Linked  through  the  utiL  fieLd),  adding  the 

* appropriate  t'rust  vaLues  to  the  names  the  key  has  signed. 

*/ 

static  struct  RingKey  const  * 

mn t Li s t ( s t r uc t RingKey  const  *List,  ringmask  const  mask, 
n word32  const  timenow,  unsigned  const  LeveL) 

{ 

n struct  RingKey  *newList; 

n struct  RingKey  *cur; 

n word16  confidence; 

n /*  Do  first  pass,  adding  trust  from  oLd  List  to  new  things  */ 
n for  (newList  = NULL;  List;  List  = List->utiL)  ( 

a n pg p A s s e r t ( L i s t ->f L a g s S KE Y F_T R U S T E D ) ; 

n n confidence  = caLctrustCList,  mask); 

n B if  (Iconfidence) 

B B B continue; 
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n 

Q 

n 

Q 

n 

□ 

D 

□ 

n 

□ 

□ 

Q 

n 

Q 

n 

□ 

n 

n 

□ 

□ 

n 

□ 


n newList  = mn t Wa L kS i g L i s t ( & L i s t -> s i g s by-> s , newList,  confidence, 
n mask, timenow, Level, 0); 

} 

/* 

* Do  second  pass,  adding  trust  from  new  List  to  itself. 

* The  overall  confidence  for  each  key  must  be  calculated 

* before  the  second  pass  begins  to  avoid  artificially  high 

* confidence  values  caused  by  Loops.  Using  a new  field 

* ' L i s t ->c on f i d e n c e ' increases  the  size  of  each  key  object 

* by  2 bytes  (35)3  can  we  avoid  this?) 

*/ 

for  (cur  = newList;  cur;  cur  = cur->utiL)  { 
n pg p As s e r t ( c u r-> f L a g s & KE Y F _TRU ST E D ) ; 
n c u r-> con f i d e n c e = c a L c t r u s t ( c u r , mask); 

} 

for  (cur  = newlist;  cur;  cur  = cur->utiL)  { 
n if  ( ! c u r-> c on f i d e n c e ) 
n n continue; 

n newlist  = mn t Wa L kS i g L i s t ( 8 c u r-> s i g s by-> s , newlist, 
a c u r-> c o n f i d e n c e , 

n mask,  timenow.  Level,  1); 

} 


n return  newlist; 
} 


#endif  /*  PGPTRUSTM0DEL==1  */ 


ffif  SORT_NAHES 
/* 

* Return  1 if  n1  should  be  Listed  before  n2;  0 if  they're 

* equivalent  and  the  relative  order  should  be  unchanged,  and  -1 

* if  it  should  be  the  other  way  around. 

* 

* ALL  non-names  should  be  before  all  names;  non-names  are  left  in 

* their  original  order. 

*/ 

static  int 

mn t Compa r eName s ( un i on  RingObject  const  *n1  , union  RingObject  const  *n2, 

D word32  const  timenow) 

{ 

n word32  t1,  t2; 

n union  RingObject  const  *sig; 
n int  i ; 

n /*  Test  0:  non-names  always  come  first  */ 
n if  ( ! OBJ ISNAME( n1  ) ) 

n n return  0BJISNAHE(n2)  ? 1 : 0; 

n if  ( !0BJISNAME(n2)  ) 

n a return  -1; 

n /*  Test  1:  more  trusted  */ 

n i = (n1->n. trust  8 PG P_N AM ET RU ST_M A S K ) - 

n a (n2->n. trust  8 PG P_N AH ET RU ST_M A S K ) ; 

n i f ( i ) 

n n returni>0?1:-1; 

n /*  Test  2:  more  recent  s e L f - s i g na t u r e */ 
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n 

t1 

= 0; 

Q 

for 

( s i 

g = n1->g.down;  sig;  sig  = sig->g.next) 

□ 

fl 

i f 

( ! OB J I S S I G ( s i g ) ||  sig->s.by  !=  n1->g.up) 

n 

B 

□ 

continue;!!  /*  Not  a self-sig  */ 

n 

B 

i f 

( ( si g->s . t rust  S PG P_ S I GT RU S T F _ C H E C KE D ) 

= = 

0) 

□ 

fl 

n 

continue, -n  /*  Not  valid  */ 

Q 

fl 

i f 

( s i g->s . t s t a mp  <=  t1) 

n 

B 

n 

continue, -n  /*  Too  old  */ 

□ 

B 

i f 

(timenou  > s i g-> s . t s t a mp  && 

n 

B 

D 

( u n s i g n e d ) ( C t i me  no  w- s i g->  s . t s t a mp  ) / 86400) 

□ 

B 

□ 

continue;n  /*  expired  */ 

a 

B 

t1 

= si g->s . tstamp; 

n 

> 

n 

t2 

= 0; 

n 

for 

( s i 

g = n2->g.down;  sig;  sig  = sig->g.next) 

{ 

B 

B 

i f 

( ! OB J I SS I G ( s i g ) ||  sig->s.by  !=  n1->g.up) 

B 

fl 

a 

continue;n  /*  Not  a self-sig  */ 

B 

B 

i f 

C(sig->s. trust  S PG P_S I GTRU S T F_ C H E C KE D ) 

= = 

0) 

B 

fl 

n 

continue;n  /*  Not  valid  */ 

B 

B 

i f 

C s i g -> s . t s t a mp  <=  t2)n 

B 

B 

□ 

continue;!!  /*  Too  old  */ 

B 

B 

i f 

(timenow  > s i g->s . t s t a mp  S& 

B 

B 

a 

( un  s i g ne  d ) ( ( t i me  n o w- s i g->  s . t s t a mp  ) / 86400) 

fl 

B 

n 

continue;n  /*  expired  */ 

B 

B 

t2 

= sig->s. tstamp; 

B 

> 

B 

i f 

(t1 

!=  t2) 

B 

B 

return  (t1  > t2  ? 1 : -1); 

f 

PGPTRUSTHODEL==0 

B 

/* 

Test 

3:  lower  certification  depth  */ 

B 

i f 

(NAHELEVEL(6n1->n)  !=  N AM E LE V E L ( &n 2->n ) ) 1 

B 

□ 

return  ( ( un s i g n ed ) N AM E LE V E L ( &n 1 -> n ) - 1u  < 

B 

D 

(unsigned)NAMELEVEL(8n2->n)  - 1u)  ? 

1 

: 

B 

} 

B 

/* 

Test 

4:  more  trust  accumulated  */ 

B 

i f 

(n1- 

>n.trustval  !=  n 2 ->n  . t r u s t va  1 ) 

fl 

n 

return  n 1 ->n . t r u s t va  1 > n 2->n . t r u s t va  1 ? 1 

: - 

1; 

Ue  L 

s e 

B 

/* 

Test 

3:  More  certainty  */ 

fl 

i f 

(n1- 

>n. valid  !=  n2->n. valid) 

86400)  > s i g->s . va L i d i t y-1 u ) 


■1; 


return  n1->n. valid  > n2->n. valid  ? 1 


-1; 


n /* 
n i f 
n a 
n □ 
n > 

# e nd i f 


Test  4:  lower  certification  depth  */ 
(NAHELEVEL(an1->n)  !=  N AM E LE V E L ( Sn 2 ->n ) ) < 
return  C ( u n s i g n e d ) N AH E L E V E L ( &n 1 ->n ) - 1u  < 

(unsi gned)NAnELEVEL(&n2->n)  - 1u)  ? 1 


-1; 


n /*  Okay,  give  up  - declare  'em  equal  */ 
n return  0; 

} 


/* 

* Sort  the  names  in  the  given  list  according  to  a "goodness"  measure. 
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* This  may  result  in  some  keyrings  getting  dirtied.  The  mask  of  such 

* keyrings  is  returned. 

* 

* This  is  a selection  sort,  not  wonderfully  efficient,  but  n''2  is  okay 

* for  the  small  n we  have  here  (5  names  on  a key  is  pretty  unusual!), 

* and  it  makes  figuring  out  which  keyrings  need  dirtying  much  easier. 

* 

* The  technique  is  perhaps  not  entirely  obvious,  so  I'll  explain  it. 

* Selection  sort  involves  searching  the  unsorted  list  for  the  object  (name) 

* that  should  go  first  (referred  to  as  the  best  element  in  the  code),  and 

* then  removing  it  and  placing  it  at  the  end  of  the  (initially  empty) 

* sorted  new  list.  We  keep  track  of  the  union  of  the  masks  of  the  objects 

* that  the  best  object  skips  in  front  of.  When  we  reach  the  end  of  the 

* unsorted  list,  and  the  best  pointer  (and  the  bestmask)  is  known  for 

* sure,  all  keyrings  which  the  best  object  is  in  and  have  been  skipped 

* over  (i.e.  bestmask  & best->mask)  are  dirty. 

*/ 

static  ringmask 

mn t So r t Name  Li s t ( un i on  RingObject  **objp,  word32  const  timenow) 

( 

n union  RingObject  *newhead,  **newtail; 

n union  RingObject  *cur,  **curp; 

n union  RingObject  *best,  **bestp; 

n ringmask  curmask,  bestmask; 

n ringmask  dirtymask  = 0; 


a newtail  = Snewhead; 

n /*  Loop  until  unsorted  list  is  empty  */ 
n while  ( *ob  j p ) { 

n n /*  Default  best  is  head  of  list  */ 

n n bestp  = objp; 

n n best  = *bestp; 

a D bestmask  = 0; 


c 

n 

/* 

Search  rest  of  list  for  a better  name  */ 

□ 

n 

curp  = &best->g . next; 

n 

n 

curmask  = best->g.mask; 

n 

n 

wh  i 

le  ((cur  = *curp)  !=  0)  { 

n 

Q 

a 

if  ( mn t C ompa r e Na me s ( be s t , cur,  timenow) 

□ 

n 

n 

n bestp  = curp; 

n 

H 

n 

n best  = cur; 

n 

n 

n 

n bestmask  = curmask; 

o 

n 

□ 

> 

n 

n 

o 

curmask  |=  cur->g.mask; 

n 

o 

n 

curp  = & c u r->g . ne X t ; 

Q 

n 

> 

n 

n 

*bestp  = best->g . next ; 

n 

Q 

dirtymask  |=  bestmask  S best->g.mask; 

□ 

n 

*newtail  = best; 

n 

o 

newtail  = &be s t ->g . n ex t ; 

a 

> 

n 

*( 

objp  = 

newhead; 

D 

*newtail  = NULL; 

n 

return 

di rtymask; 

> 


{ 
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/* 

* Sort  the  names  of  each  key  under  the  given  mask  with  the  mn t S o r t N a me L i s t 

* function.  The  mask  applies  only  to  the  keys;  all  names  are  sorted, 

* even  if  they  don't  fall  under  the  mask.  And  any  keyrings  may  be  dirtied 

* by  this  operation. 

*/ 

static  void 

mn t S o r t N ame s ( s t r u c t RingSet  const  *set,  word32  const  timenow) 

{ 

n union  RingObject  *key; 
n ringmask  dirtymask  = 0; 

a /*  Sort  all  the  keys  */ 

n for  (key  = set->pooL->keys;  key;  key  = key->g.next)  { 
n n pgpAssert(OBJISKEY(key)); 

n n if  (key->g.mask  S set->mask) 

n n n dirtymask  |=  mn t S o r t Na me L i s t ( & key->g . d o wn , timenow); 
n } 


a /*  Deal  with  the  dirtymask  */ 

B r i ng Poo  I Ma r kD i r t y ( s e t->poo I , dirtymask); 

} 

#endif  /*  SORT_NAHES  */ 


I* 

* Add  the  "interesting"  objects  under  the  given  parent  to  the  destmask. 

* An  signature  is  interesting  if  it's  by  the  given  key  or  by  a trusted 

* introducer.  A name  is  interesting  if  its  trust  is  above  a given  threshold. 

* Anything  else  (the  only  real  choice  is  a secret)  is  by  definition 

* interesting. 

*/ 


#if  PGPTRUSTMODEL==0 


static  void 

mntMarkInteresting(union  RingObject  *obj,  union  RingObject  const 
B int  thresh,  ringmask  srcmask,  ringmask  destmask) 

{ 


B 

B 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


for 

B 

B 

B 

B 

B 

n 

B 

B 

B 

□ 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


(obj  = obj->g.down;  obj;obj  = obj->g.next)  ( 
if  ( ! ( ob j ->g . ma s k & srcmask)) 

B continue; 

s w i t c h ( r i n g Ob j e c t Ty pe ( ob j ) ) ( 
case  RINGTYPE_SIG : 

B if  (obj->s.by  ==  key 

B II  (ob j->s . by->g . f lags  S KEYF_TRUSTED 

B &&  (ob j->s . by->k . t rust  & PG P_KE YT R U ST_H A S K ) 

B >=  PGP_KEYTRUST_MARGINAL) ) 

B B break; 

B continue; 

case  RINGTYPE_NAME: 

B if  ( ob j ->n . t rust va I >=  thresh) 

B B break; 

B continue; 

default: 

B break; 

} 

obj->g.mask  |=  destmask; 
if  ( ! OBJISBOKobj  ) ) 

B mn t Ma r kl n t e r es t i ng ( ob j , key,  thresh, 

B srcmask,  destmask); 


*key. 
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n } 

> 

Mei.se 

static  void 

mn  t Ma r k I n t e re s t i n g ( u n i on  RingObject  *obj,  union  RingObject  const  *key. 


a 

r 

n 

word16  thresh,  ringmask  srcmask,  ringmask  destmask) 

\ 

n 

for 

(obj  = obj->g.down;  obj;obj  = obj->g.next)  { 

□ 

n 

i f 

( ! ( ob j ->g . ma s k S srcmask)) 

a 

n 

n 

continue; 

n 

□ 

s w i t c h ( r i ng 0 b j e c t Ty p e ( ob j ) ) { 

Q 

n 

case  RINGTYPE_SIG : 

n 

□ 

n 

if  (obj->s.by  ==  key 

a 

Q 

n 

II  (ob j->s . by->g . f lags  8 KEYF_TRUSTED 

n 

D 

n 

&8  (obj->s.by->k. confidence  > 0))) 

□ 

n 

n 

n break; 

n 

n 

0 

continue; 

n 

Q 

case  RINGTYPE_NAHE  : 

n 

n 

0 

if  ( ob j ->n . va 1 i d >=  thresh) 

n 

n 

0 

n break; 

n 

n 

0 

conti nue; 

n 

□ 

default : 

n 

□ 

0 

break; 

n 

D 

> 

n 

a 

obj->g.mask  |=  destmask; 

n 

n 

i f 

( ! OBJ  ISBOKob  j ) ) 

n 

Q 

0 

mn t Ma r kl n t e r e s t i ng ( ob j , key,  thresh. 

Q 

n 

0 

srcmask,  destmask); 

n > 

> 

#endi f 


/* 

* Run  the  maintenance  pass  on  the  keyring.  At  the  end,  any  keys  which 

* are  flagged  with  KEYF_TRUSTED  but  still  have  PG P_KE YT RU ST_UN D E F I N E D need 

* to  have  their  trusts  updated.  Returns  the  number  of  such  keys,  or 

* <0  on  error.  (Currently  impossible.) 

*/ 

i nt 

r i ngHn t ( s t r u c t RingSet  const  *set,  struct  RingSet  *dest,  word32  const  timenow) 
{ 

n struct  RingKey  const  *list; 

n union  RingObject  *key,  *child; 
n struct  RingSig  *sig; 

n unsigned  level, -n/*  Trust  level  and  certification  depth  */ 
n unsigned  tmptrust; 

n unsigned  t; 

n unsigned  long  count;n  /*  Count  of  keys  needing  trust  assigned  */ 
n ringmask  mask  = set->mask; 

n ringmask  changemask  = 0;n  /*  Keyrings  with  altered  trust  */ 

#if  PGPTRUSTHODEL>0 

n word16  validity; 

n union  RingObject  *obj; 

#e  I se 

a int  trustCPGP_KEYTRUST_MASK  + ID; 

n int  thresh; 
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n / * 

a * Set  up  the  trust  table.  The  non-zero  entries  are  1/partiaLs, 

n * 1/compLetes,  and  all  scaled  by  c omp I e t e s *pa r t i a I s , except 

a * that  completes  or  partials  set  to  0 means  "infinite", 
n * / 

n for  (t  = 0;  t < s i z e o f ( t r u s t ) / s i z e o f ( * t r u s t ) ; t++) 
n n trustCt]  = 0; 

n trust[PGP_KEYTRUST_MARGINAL:  = 1 ; 

n t rust :pgp_keytrust_complete:  = 1 ; 

n trust[PGP_KEYTRUST_ULTIMATE:  = 1; 
n if  ( s e t ->p o o I ->n um_ma r g i na  I s ) f 

n a t rust  CPGP_KEYTRIIST_C0MPLETE3  = s e t ->poo  I ->n  um_ma  r g i n a I s ; 

n n t r u s t C PG P_KE  YT RU  ST_U  LT I M AT  E II  = s e t ->po o I ->n um_ma  r g i n a I s ; 

n } e I se  { 

n n trust:PGP_KEYTRUST_HARGINAL:  = 0; 

n } 


n if  ( s e t ->poo I ->n um_ c omp I e t e s ) { 

n n t r u s t [ PG P_KE YT R U S T_M A R G I N A L ] = s e t ->poo I -> n um_ c omp I e t e s ; 

n n t r u s t C PG  P_KE  YTRUST_U  LT  I H ATE  I]  *=  s e t ->po o I -> n um_ c omp  I e t e s ; 

n > e I se  { 

n n t rust :PGP_KEYTRUST_C0MPLETE3  = 0; 
n } 

n thresh  = trust:PGP_KEYTRUST_ULTIMATE:; 

# e n d i f 


n pgpAssert ( ! dest  ||  set->pool  ==  dest->pool); 
o pgpAssert C ! dest  ||  R I N G S ET I S M UT AB L E ( d e s t ) ) ; 


n / * 

n * Preprocessing:  reset  all  name  trusts  to  0,  and  initialize  list 
n * of  trusted  keys  to  the  axiomatic  ones, 
n * / 

o I i s t = 0 ; 

n for  (key  = set->pool->keys;  key;  key  = key->g.next)  { 

H n pgpAssertCOBJISKEYCkey)); 

n n if  ( ( key->g . ma s k & mask)  ==  0) 
n n n continue; 


KEYF_TRUSTED; 


n n key->g .flags  & 

#if  PGPTRUSTH0DEL==2 
n n CLEARLOOKINGAT(&key->k)  ; 

#endi f 


□ 

n 

for 

(child  = key->k.down;  child;  child  = 

chi  ld->g.next) 

n 

n 

n 

if  ( c h i 1 d->g . ma s k & mask  &S  OB J I S N AM E ( c h i 1 d ) ) ( 

#if 

PGPTRUSTHODEL==0 

n 

a 

n 

n c h i 1 d->n . t r u s t V a 1 = 0; 

# e 1 s e 

a 

a 

B 

n chi ld->n . va 1 i d = 0; 

#end i f 

n 

a 

B 

n NAMESETLEVEL(&chi  ld->n,  0); 

Q 

u 

B 

> 

n 

B 

> 

n 

B 

/* 

Q 

B 

★ 

Find  each  key's  revoked  status  - find 

n 

B 

★ 

the  most  important  s e 1 f - s i g na t u r e . 

n 

B 

*/ 

a 

B 

s i g 

= 0; 

□ 

B 

for 

(child  = key->g.down;  child;  child  = 

chi  ld->g.next) 
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a 

B 

B 

/* 

n 

B 

B 

★ 

Ignore  sigs  by  others,  unchecked  sigs. 

□ 

B 

fl 

it 

postdated  sigs,  and  expired  sigs. 

H 

B 

B 

★ 

3 3 a) 

TODO:  change  the  CHECKED  and  TRIED  bits 

n 

B 

B 

* 

For 

untried  revocation  sigs,  accept  them  if 

key's 

D 

B 

B 

* 

trust  bits  already  show  it  as  revoked.  PGP 

2 does 

B 

B 

B 

* 

not 

store  trust  packets  on  revocation  signatures. 

B 

B 

B 

*/ 

B 

B 

B 

1 f 

C ( c h i 1 d->g . ma s k & mask) 

B 

B 

B 

B 

&& 

0BJISSIG(chi  Id) 

B 

B 

B 

&& 

child->s.by  ==  key 

B 

B 

B 

&& 

chi ld->s . t rust  & PG P_S I GT RU ST F_ C H E C KE D 

B 

B 

B 

&& 

chi ld->s . t rust  8 PG P_S I GTR U S T F_T R I E D 

B 

B 

B 

&& 

mntSigIsValidCtimenow,  chi  ld->s.tstamp. 

B 

B 

B 

c h i 1 d-> s . va  1 i d i t y ) ) ( 

B 

B 

B 

/* 

Any  compromise  certificate  wins,  period. 

*/ 

B 

B 

B 

i f 

(chi ld->s . type  ==  PG P_S I G T Y P E_KE Y_C OH  PROM  I S E ) 

B 

B 

B 

B 

sig  = 8child->s; 

B 

B 

B 

B 

□ 

break; 

B 

B 

B 

B 

> 

B 

B 

B 

B 

/* 

Among  others,  choose  the  most  recent  */ 

B 

B 

B 

B 

i f 

( ! si g II 

B 

B 

B 

B 

a 

sig->tstamp  < c h i 1 d-> s . t s t a mp ) 

B 

B 

B 

B 

sig  = 8child->s; 

B 

B 

B 

> 

no} 


n n tmptrust  = key-> k . t r u s t ; 

n n /*  Revocation  is  a function  of  compromise  certificates, 

n n Hake  sure  axiomatic  (buckstop)  bit  is  not  set.  */ 

n n if  (sig  &S  sig->type  ==  PG P_S I GT Y PE_KE Y_C OHPROHI S E ) { 
n n n tmptrust  &=  ~ ( PG P_KE YT RU ST F_BU C KSTOP  | PG P_KE YT R U ST_H AS K ) ; 
n n n tmptrust  |=  PG P_KE YT RU ST_N E V E R | PG P_KEYT RU ST F_ R EVOKE D ; 

n n > 

a n else 

n n n tmptrust  &=  ~ PG P_KE YT R U ST F_ R EVOKE D ; 


n n 
o n 
n □ 
n n 
n □ 
n n 
a a 
a a 


/*  Check  if  key  has  expired  */ 

if  ( key->k . t s t amp  < timenow  &&  key->k . va L i di ty  > 0 &6 

n ( un s i g ned ) ( ( t i menow  - key-> k . t s t a mp ) / 86400 ) >=  key-> k . va L i d i t y ) { 
n tmptrust  S=  ■(PGP_KEYTRUSTF_BUCKSTOP  | PGP_KEYTRUST_HASK); 
n tmptrust  |=  PGP_KE YTRUST_NEVER  | PG P_KE YT RUST F_ E X P I R E D ; 

> 

else 

n tmptrust  &=  ~ PG P_KE YT R U ST F_ EXPIRED; 


n n if 

n n n 

n n a 

non 

Q □ > 

n n / * 

n n for 

n n 

n n a 

n n □ 


( key-> k . t r u s t !=  tmptrust)  { 
key->k. trust  = (byte)tmptrust; 

key->g. flags  |=  (RINGOBJF_TRUST  | RINGOBJF_TRUSTCHANGED); 
changemask  |=  key->g.mask; 


Check  any  subkeys  for  revocation  or  expiration.  */ 

(child  = key->g.down;  child;  child  = c h i I d->g . ne x t ) { 
if  ( c h i I d->g . ma s k 8 mask  &8  OB J I S S UBKE Y ( c h i I d ) ) { 
tmptrust  = c h i I d-> k . t r u s t ; 

a tmptrust  &=  ~ ( PG P_KE YT RU S T F_R EVOKE D | PG P_KE YT R U ST F_ EX P I R E D ) 
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n n n 
n n □ 
□ on 
nan 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n } 


n 

for 

(sig  = (struct 

RingSig  *)  child ->g. down;  sig; 

n 

n 

sig  = (struct 

RingSig  *)  sig->next)  ( 

if  (si g->by  == 

key  &S 

n 

n 

n sig-> trust 

a PGP_SIGTRUSTF_TRIED  && 

n 

n 

n sig-> trust 

& PGP_SIGTRUSTF_CHECKED  && 

n 

n 

a si g->type 

==  PGP_SIGTYPE_KEY_SUBKEY_REVOKE 

as 

n 

n 

n mn t S i g I sVa L i d (timenou,  sig->tstamp. 

n 

n 

□ n □ □ 

s i g->va 1 i d i t y ) ) { 

n 

tmptrust  1 

= PGP_KEYTRUSTF_REVOKED; 

n 

n 

a break; 

n 

n 

} 

n 

> 

n 

i f 

( c h i L d-> k . t s t a mp  < timenow  &S  c h i L d-> k . v a L i d i t y 

> 0 aa 

n 

n 

(unsigned)((t 

imenow  - c h i 1 d-> k . t s t a mp  ) / 86400 ) 

> = 

n 

n 

chi Ld->k. validity) 

tmptrust  1=  PGP_KEYTRUSTF_EXPIRED; 

n 

if 

(chi Ld->k. trust 

!=  tmptrust)  ( 

n 

chi Ld->k. trust 

= (byte)  tmptrust; 

n 

n 

chi Ld->g. flags 

1=  ( RINGOBJ F_TRUST  | R I NGOB J F_TRU ST C H ANG E D ) 

n 

n 

changemask  |= 

chi ld->g.mask; 

n 

> 

> 


n n 
n n 
n n 
n n 
n n 
/ *n  n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 
n n 


/*  Search  for  axiomatic  keys  at  root  of  graph.  Backstop  bit  must  be 
set,  and  key  must  not  be  revoked  or  expired-  */ 
if  (key->g.mask  & mask 

&&  key->k. trust  & PGP„KE YTRUST F_BUCKSTOP 

&&  ! Ckey->k. trust  & ( PG P_KE YT R U ST F _ R EVO KE D | PG P_KE YT RU ST F _ E X P I R E D ) ) 
&&  ! Ckey->k. trust  & PG P_KE YT R U S T F_ D I S AB LE D ) */n  ) 

/*  Make  sure  key  marked  as  axiomatic  has  a secret  component, 
n (This  may  not  be  true  if  a public  keyring  is  opened,  but 

n *not*  its  corresponding  secret  keyring).  If  not,  reset 

n the  backstop  bit  and  set  trust  to  'never*.  */ 


tmptrust  = key->k. trust  & ^ PG P_KE YT RU ST F _BU C KS TOP; 


for 

(child  = key- 

>g.down;  child;  child  = c h i 1 d->g . n e x t ) { 

n 

if  ( OB J 1 S S E C ( c h i 1 d ) aa  ( c h i 1 d->g . ma s k a mask))  f 

n 

n 

tmptrust 

1=  PGP_KEYTRUSTF_BUCKSTOP; 

n 

n 

n break; 

/*  secret  component  found  */ 

n 

n 

> 

n 

> 

n 

if  ( 

!(tmptrust  a 

PGP_KEYTRUSTF_BUCKSTOP) ) { 

n 

/*  Don  ' t have 

private  key  */ 

n 

tmptrust  a= 

PGP_KEYTRUST_MASK; 

n 

n 

tmptrust  1=  PGP_KEYTRUST_NEVER; 

n 

key->k .trust 

= tmptrust; 

n 

n 

changemask  |= 

key->g . ma  s k; 

n 

n 

key->g. flags 

1=  (RINGOBJ F_TRUST  | R I NGOB J F_T RU STC H AN G E D ) ; 

n 

> 

n 

else 

{ 

n 

/*  Yes,  we  do 

have  private  key  */ 

#i f PRINT.PROGRESS 


n n n 

#end i f 

r i n g Key  P r i n t ( s t do u t , ' 

' Ax i oma  t i c key : " , 

n n n 

n 

key->k.util  = (struct 

RingKey  *)list; 

n n n 

n 

list  = akey->k; 

set,  key); 
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□ 

□ 

Q 

Q 

key 

->g. flags  |=  KE Y F_T RU S T E D ; 

#1  f 

PGPTRUSTHODEL== 

0 

n 

n 

n 

a 

/* 

Ax i oma  t i c key 

should  have  ultimate  trust  */ 

n 

n 

n 

n 

i f 

( ( key->k . trust 

& PGP_KEYTRUST_MASK)  != 

n 

n 

n 

n 

□ 

PGP_KEYTRUST_ULTIMATE)  { 

Q 

n 

Q 

Q 

key->k .trust 

&=  ~PGP_KEYTRUST_HASK; 

n 

n 

a 

Q 

n 

key->k. trust 

1=  PGP_KEYTRUST_ULTIMATE; 

Q 

n 

n 

n 

n 

changemask  | = 

key->g .mask; 

n 

Q 

n 

D 

n 

key->g .flags 

1=  (RINGOBJ F_TRUST  | R I N GOB J F _T RU STC H ANG E D ) ; 

n 

n 

n 

n 

> 

#e  L se 

n 

n 

n 

n 

for 

(child  = key- 

>g  . down; c h i 1 d ; c h i 1 d = c h i 1 d->g . n e x t ) { 

□ 

n 

D 

Q 

if  (OBJ ISNAMEC chi  Id)  ) 

o 

□ 

n 

n 

n 

chi  1 d->n  . 

valid  = (word16)  PG P_T RU S T_ I N F I N I T E ; 

□ 

n 

n 

n 

> 

#endif  /*  PG PT R U S TMO D E L>0  */ 

□ a n > 

n n } 

n > 

a /*  The  actual  trust  computation  */ 

n r i ng Poo  I L i s t S 1 g sBy ( s e t ->poo L ) ; n /*  CanonicaLize  these  pointers  */ 

#if  PGPTRUSTM0DEL==2 


n { 


PathLi st 

*pathlist  = NULL; 

RingObject 

♦name; 

n 

□ 

Ri ngSetnn 

♦confidentset; 

unsigned 

maxdepth  = s e t ->poo 1 -> c e r t de p t h ; 

doub  1 e 

confidence; 

D 

n 

confidentset  = ringSetConfidentSet  (set); 

n 

n 

for 

(key 

= 

s e t ->poo  1 -> key s ; key;  key  = key->g.next)  { 

D 

n 

n 

pgpAssert(OBJISKEY(key)); 

n 

a 

n 

if  ( ( key->g . ma s k S mask)  ==  0) 

□ 

a 

B 

n 

continue; 

D 

n 

n 

for 

(name  = key->g.down;  name;  name  = name->g . next ) { 

O 

a 

n 

a 

i f 

( ! OB J 1 SNAME ( name ) ||  ! ( name->g . ma s k S mask)) 

n 

n 

n 

D 

n 

cont i nue; 

a 

a 

n 

n 

/* 

Calculate  "real"  validity  for  names.  If  the  key 

n 

n 

n 

n 

D 

is  axiomatic,  this  will  be  overidden  when  the 

n 

a 

n 

B 

n 

validity  is  returned  by n r i ng Name Va 1 i d i t y . ♦/ 

Uif 

0 

n 

n 

n 

B 

i f 

(key->k. trust  & PG P_KE YT RU S T F_BU C KSTOP 

n 

a 

Q 

B 

B 

SS  ! ( key->k . t rust  S 

Q 

B 

n 

B 

B 

n (PGP_KEYTRUSTF_REVOKED|PGP_KEYTRUSTF_EXPIRED) 

n 

B 

n 

n 

B 

/♦  &S  ! ( key->k . t rust  S PG P_KE YT RU ST F _ D I S AB LE D ) ♦/) 

Q 

B 

n 

n 

B 

name->n . va  1 i d = PG P_TRU ST_I N F I N I T E ; 

n 

B 

n 

B 

B 

continue; 

n 

B 

n 

B 

} 

# e n d i f 

n 

B 

n 

B 

r i n g F i nd Pa t h sBa c k (name,  Spathlist,  / *ma xd e p t h * / 1 00 , 

n 

B 

n 

B 

B 

confidentset,  timenow,  set->pool); 

n 

B 

n 

B 

i f 

(pathlist)  { 

n 

B 

n 

B 

n 

pathlist  = pa t h L i s t P r un e (pathlist,  TOT A LP AT H M AX , 

[:[CHK:c44889a76c9970816a7777cc99d192d55319b4491e946ceb92ac8891d14f13cbe:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


861 


pgpRngMnt.c 


Q 

n 

□ 

n 

□ 

set -> pool ); 

# i f d e f 

DEBUGPATH 

Q 

a 

Q 

u 

n 

fprintf  (stdout,  "Found  path  for  "); 

□ 

a 

n 

□ 

□ 

ri ngTtyPri ntKey  (stdout,  key,  set->pool); 

a 

a 

n 

n 

s 

fprintf  (stdout,  "\n"); 

#end  i f 

n 

n 

n 

n 

Q 

confidence  = pathListConfidence  (pathlist,  set -> pool); 

n 

u 

n 

n 

n 

if  (confidence  >=  1.) 

□ 

n 

n 

Q 

a 

n name->n . va 1 i d = PG P_T RU ST_ I N F I N I T E ; 

a 

n 

Q 

D 

Q 

else 

a 

n 

n 

n 

n 

n name->n . va  1 i d = r i ng Dou b 1 eToT r u s t (1.  / 

n 

n 

n 

n 

n 

nnnnnnnnn  ( 1 . - c o n f i d e n c e ) ) ; 

□ 

Q 

D 

□ 

a 

pathListFreeAll  (pathlist,  set -> pool); 

n 

n 

n 

n 

El 

pathlist  = NULL; 

□ 

n 

n 

n 

> 

n 

n 

n 

> 

□ 

n 

> 

n a memPoolEmpty(&set->pooL->pathpooL); 

n n set -> pool -> paths  = NULL; 

n n set -> pool ->pathLists  = NULL; 

n n r i ng S e t De s t r oy  ( c on f i d e n t s e t ) ; 

n > 

nan 

#else  /*  PGPTRUSTMODEL ! =2  */ 
n /*  Propagate  the  trust  upwards  */ 
n t = ( u n s i g n e d ) s e t ->poo I -> c e r t d e p t h ; 
n for  (level  = 1;  list  S8  level  < t;  level++)  { 

#if  PRINT_PROGRESS 

n n printf("\nProcessing  certification  level  %d\n",  level); 

#endi  f 

#if  PGPTRUSTMODEL==0 

n n list  = mntListClist,  set,  trust,  thresh,  timenou,  level); 

# e I s e 

n n list  = mn t L i s t ( I i s t , mask,  timenow,  level); 

# e nd i f 
n } 

#endif  /*  PGPTRUSTMODEL  */ 

a /*  Postprocessing:  set  the  various  trust  bytes,  */ 
n count  = 0; 

#if  PGPTRUSTMODEL==0 

n for  (key  = s e t ->poo I -> key s ; key;  key  = key->g.next)  { 
n n if  ( ! ( key->g . ma s k & mask)) 

n n n continue; 

n n /*  Set  the  key  trust  bytes  */ 

n n t = key->k . t rust; 

n n if  (t  & (PGP_KEYTRUSTF_REVOKED  | PG P_KE YTRU ST F _EX PI R E D ) ) { 
n n n tmptrust  = PGP_KE YTRUST_NEVER; 

n n > 

#if  ONLY_TRUST_VALI D_KEYS 

n else  if  ( ! ( key-> k . f I a g s & KE Y F _T R U S T E D ) ) < 
n n n tmptrust  = PG P_KE YT RU S T_U N DEFINED; 


n 

n 

} 

#end  i f 

else  if  ((tmptrust  = 

(t8PGP_KEYTRUST_nASK)) 

n 

n 

n n PGP_KEYTRUST 

.UNDEFINED)  { 

n 

u 

n /*  Key  in  need  of 

a trust  decision  */ 

n 

n 

n count++; 
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n 

B 

B 

/* 

Record  the  key  as  interesting  */ 

n 

B 

B 

i f 

(dest ) { 

o 

B 

B 

fl 

key->g.mask  |=  dest->mask; 

n 

B 

B 

B 

mn t Ma r k I n t e r e s t i n g ( key , key,  thresh. 

n 

B 

B 

fl 

mask,  dest->mask); 

a 

B 

B 

> 

D 

B 

> 

□ 

B 

t = 

tmptrust  1 ( key->k. t rus t & ~ PG P_KE YT RU S T_M A S K ) ; 

n 

fl 

i f 

(key 

->k. trust  !=  t)  { 

Q 

B 

B 

key 

->k. trust  = t; 

n 

B 

B 

key 

->g. flags  |=  R I N G OB J F_T R U ST C H ANG E D ; 

□ 

B 

B 

changemask  |=  key->g.mask; 

n 

B 

> 

□ 

B 

key 

->g  . 

flags  1=  RINGOBJ F_TRUST; 

D 

B 

/* 

Set 

the  signature  trusts  to  match  the  key  */ 

n 

B 

for 

(sig  = &key->k.sigsby->s;  sig;  sig  = sig->nextby)  { 

Q 

B 

B 

i f 

(!(sig->mask  S mask)) 

n 

B 

B 

n 

conti nue; 

n 

B 

fl 

/* 

Trust  is  either  key's,  or  NEVER  if  it's  a bad  sig  */ 

n 

B 

fl 

t = 

sig->trust  & "PGP.KEYTRUST.HASK; 

n 

B 

fl 

i f 

(sig->trust  8 PG P_S I GT R U ST F_C H E C KE D ) 

n 

B 

fl 

D 

t 1=  tmptrust; 

n 

B 

fl 

else 

n 

B 

fl 

B 

t 1=  PGP_KEYTRUST_NEVER; 

Q 

B 

fl 

if 

(sig->trust  !=  t) 

n 

B 

fl 

{ 

Q 

B 

fl 

B 

si  g->t  rust  = t; 

n 

B 

B 

fl 

sig->flags  |=  R I NGOB J F_T R U ST C H A N G E D ; 

Q 

B 

fl 

fl 

changemask  |=  sig->mask; 

n 

B 

B 

> 

D 

B 

B 

sig 

->flags  1=  RINGOBJ F_TRUST; 

n 

B 

> 

n 

B 

/* 

Update  each  name's  trust  byte  */ 

n 

B 

for 

(child  = key->k.down;  child;  child  = c h i 1 d->g . ne x t ) ( 

n 

B 

fl 

i f 

( ! ( c h i 1 d->g . ma s k 8 mask)  ||  ! OB J I SNAME ( chi  Id  ) ) 

□ 

B 

fl 

a 

conti nue; 

D 

B 

fl 

t = 

chi  ld->n  . t rust  8 ~PGP_NAriETRUST_HASK; 

Q 

B 

fl 

i f 

( key->k . t rust  8 ( PG P_KE YT RU ST F_ R EVOKE D | PG P_KE YTRU ST F_ 

□ 

B 

B 

n 

t 1=  PGP_NAf1ETRUST_UNTRUSTED; 

D 

B 

fl 

else  if  ( c h i 1 d->n . t r u s t va 1 >=  thresh) 

□ 

B 

fl 

fl 

t 1=  PGP_NAMETRUST_COMPLETE; 

n 

B 

B 

else  if  (2  * c h i 1 d->n . t r u s t va 1 >=  thresh) 

Q 

B 

B 

fl 

t 1=  PGP_NAHETRUST_HARGINAL; 

B 

B 

B 

else 

B 

B 

fl 

fl 

t 1=  PGP_NAriETRUST_UNTRUSTED; 

B 

B 

fl 

if 

( ch i 1 d->n . t rus t !=  t)  ( 

B 

B 

B 

B 

chi  ld->n. trust  = t; 

B 

B 

fl 

B 

chi  ld->g . f lags  |=  R I NGOB J F_TRU ST C H ANG E D ; 

B 

B 

B 

B 

changemask  |=  c h i 1 d->g . ma s k; 

B 

B 

B 

> 

B 

B 

fl 

c h i 

ld->g. flags  |=  RINGOBJ F_TRUST; 

B 

B 

> 

B 

> 

#eLse  /*  PGPTRUSTMODEL>0  */ 
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B /*  Note:  For  the  new  trust  model,  we  need  to  find  keys  that 

B have  interesting  names,  as  trust  is  no  Longer  assigned  to 

B the  key,  but  to  each  name.  */ 


n 

for 

(key  = s e t ->poo 1 -> key s ; key; 

key  = key->g 

.next)  { 

□ 

a 

i f 

( ! ( key->g . ma s k S mask)) 

n 

n 

a 

continue; 

D 

a 

/* 

Set  the  key  trust  bytes. 

The  overall 

confidence 

n 

n 

value  must  be  calculated 

(k. confidence 

c 0 n t a i ns 

n 

n 

the  first-pass  confidence 

value  prior 

to  this  point) 

Q 

n 

key 

->k . conf i den c e = c a L c t r u s t ( & key-> k,  mask); 

n 

n 

t = 

key->k .trust; 

n 

Q 

i f 

(t  S (PGP_KEYTRUSTF_REVOKED  | PG P_ K E YT R U ST F_ E X P I R E D ) 

□ 

□ 

II  ! ( key-> k . f L a g s & KEYF 

.TRUSTED))  { 

n 

n 

D 

key-> k . c on f i d e n c e = 0; 

□ 

n 

} 

n 

n 

else  if  ( key-> k . c on f i d e n c e = 

= 0)  { 

n 

□ 

n 

/*  If  at  Least  one  name 

has  undefined 

confidence. 

Q 

B 

B 

mark  the  key  as  interesting.  */ 

n 

B 

B 

for  (obj  = key->k.down;  obj;  obj  = obj->g.next)  ( 

u 

B 

B 

fl 

if  (OBJISNAMECobj  ) &S 

a 

B 

B 

fl 

obj->n.confidence==PGP_NEWTRUST_UNDEFINED) 

a 

B 

B 

B 

a count++; 

n 

B 

B 

B 

n /*  Record  the  key  as  interesting  */ 

n 

B 

B 

fl 

n if  (dest)  ■( 

B 

B 

B 

fl 

n n key->g.mask  |=  dest->mask; 

B 

B 

B 

B 

n n mn t Ma r k I n t e r e s t i ng ( key , key,  0, 

B 

B 

B 

fl 

n n n mask,  dest->mask); 

B 

B 

fl 

B 

n } 

B 

B 

fl 

B 

H break; 

B 

B 

B 

fl 

} 

B 

B 

B 

> 

/*  end  for  */ 

B 

B 

> 

B 

B 

tmptrust  = key->k. trust  S PGP.KE YTRUST.MASK; 

B 

B 

/* 

Set 

the  signature  trusts  to  match  the  key  */ 

B 

B 

for 

( s 

ig  = &key->k.sigsby->s;  sig;  sig  = sig->nextby) 

fl 

B 

fl 

i f 

(!Csig->mask  & mask)) 

B 

a 

B 

□ 

continue; 

B 

B 

B 

/* 

Trust  is  either  key's,  or  NEVER  if  it's  a bad 

B 

B 

fl 

t 

= sig->trust  & ~ PG P_KE YT R U S T_M A S K; 

B 

B 

fl 

i f 

(sig->trust  8 PG P_S I GTRUST F_C H ECKE D ) 

B 

B 

fl 

n 

t 1=  tmptrust; 

B 

B 

B 

else 

B 

B 

B 

B 

t 1=  PGP.KE YTRUST.NEVER; 

B 

B 

fl 

i f 

(sig->trust  !=  t) 

B 

B 

fl 

i 

B 

B 

fl 

fl 

sig->trust  = t; 

B 

B 

B 

fl 

sig->flags  |=  R I N GOB J F_T R U ST C H ANG E D ; 

B 

B 

B 

B 

changemask  |=  sig->mask; 

B 

B 

fl 

> 

B 

B 

B 

sig->fLags  |=  RINGOBJ F.TRUST; 

B 

B 

> 
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□ n 

□ n 
D n 
n n 
n □ 

□ □ 

□ a 
a Q 
n n 
n □ 
n n 
o D 
n n 

□ a 
Q n 
a □ 
n n 
n D 


/*  Update  each  name's  validity  byte  */ 

for  (child  = key->k.down;  child;  child  = c h i I d->g . n e x t ) { 
n if  ( ! ( c h i I d->g . ma s k & mask)  ||  ! OB J I S N AM E ( c h i I d ) ) 

n n continue; 

n if  ( key->k . t rust  & ( PG P_KEYT R U ST F_R EVOKE D | PG P_KE YTRU ST F_ E X P I R E D ) ) 
n n validity=0; 

a else  if  ( c h i I d->n . va  I i d ==  PG P_T RU S T_ I N F I N I T E ) 
n n validity  = PG P_N E WT RU ST_ I N F I N I T E ; 

n e I s e { 

n n validity  = c h i I d->n . va I i d >>  T R U S T_C ERT S H I FT ; 
n n if  (validity  > PG P_N E WT R U S T_M AX ) 

n n n validity  = PG P_N E WT RU ST_M AX ; 

n } 

a if  (validity  !=  c h i I d->n . va I i d i t y ) ( 
n n chi ld->n. validity  = (byte)  validity; 

n n chi  ld->g . f lags  |=  R I NGOB J F_T R U ST C H ANG E D ; 

n n changemask  |=  c h i I d->g . ma s k; 

n > 


n 

n 

n 

/* 

Convert  back  to 

old  KEYLEGIT  values.  */ 

n 

n 

n 

i f 

(validity  >=  s e t->poo 1 -> t h r es ho  1 d ) 

n 

s 

n 

□ 

tmptrust  = PGP 

_NAMETRUST_COMPLETE; 

s 

n 

n 

else  if  (validity 

>=  se t->poo  1 -> t h re s ho  1 d /2 ) 

n 

a 

D 

Q 

tmptrust  = PGP 

_NAHETRUST_MARGINAL; 

n 

Q 

D 

else 

n 

n 

□ 

B 

tmptrust  = PGP 

_NAMETRUST_UNTRUSTEO; 

n 

n 

n 

t = 

tmptrust  1 (ch 

ild->n. trust  & ■PGP_NAMETRUST_MASK); 

n 

n 

n 

i f 

( t ! = ch i 1 d->n . 

trust)  { 

n 

D 

n 

n 

chi  ld->n.  trust 

= t; 

n 

n 

n 

B 

chi  ld->g  .flags 

1=  RINGOBJF_TRUSTCHANGED; 

n 

n 

n 

B 

changemask 

chi  ld->g.mask; 

D 

n 

n 

> 

D □ Q 

Q □ □ 

n n n 

□ □ □ 

n n n 

Q n □ 

n n □ 

n n > 

n } 

#end i f 


/*  Reset  n. valid  with  adjusted  value.  */ 
if  ( chi ld->n . va I i di ty  ==  PG P_N E WT RU ST_ I N F I N I T E ) 
n chi ld->n. valid  = PG P_T RU ST_ I N F I N I T E ; 
else 

n child->n. valid  = 

n chi ld->n . va I i di ty  <<  TRUST_CERTSHIFT; 

chi  ld->g . f lags  |=  RI NGOB J F_TRUST; 


n /*  Rebuild  the  hash  table  */ 
n r i ng Poo  I H a s h ( s e t ->poo  I ) ; 

n /*  Hark  all  keyrings  under  "changemask"  as  having  had  trust  change  */ 
n r i ng Poo  I Ha r kT r u s t C h a ng ed ( s e t ->poo  I , changemask); 


a /*  Sort  the  names  333  do  we  want  this?  Not  for  now...  */ 
#if  SORT  NAMES 


n mn t So r t Na me s ( s e t , timenow); 

#e nd i f 


a /*  Et  voila,  we're  done!  Return  number  of  trust  decisions  needed.  */ 
n /*  (Saturate  on  overflow  if  16-bit  ints.)  */ 
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a return  count  > INT_MAX  ? INT_MAX  : (int)count; 

> 


/* 

* Keyring  checking  code. 
*/ 


/* 

* Count  the  number  of  unchecked  signatures,  if  needed  for  a progress  bar. 

* The  return  value  is  the  number  of  times  the  progress  funcC)  function 

* will  be  called  by  r i ng Poo  I C h e c k ( ) . 

* NOTE:  this  tries  to  be  as  accurate  as  possible,  but  user  code 

* should  not  die  if  it  is  slightly  incorrect. 

*/ 

i nt 

r i ng Poo  I C h e c kC ou n t ( s t r u c t RingSet  const  *sigset,  struct  RingSet  const  *keyset, 
n int  allflag) 

{ 

n ringmask  sigmask  = s i g s e t ->ma s k; 
n ringmask  keymask  = key s e t ->ma s k; 
n union  RingObject  const  *key; 
n struct  RingSig  const  *sig; 
n unsigned  long  count  = 0; 


n pg p A s s e r t ( ke y s e t ->poo I ==  s i g s e t ->poo  I ) ; 

n ringPoolListSigsBy(sigset->pool); 


D 

n 

a 

□ 

□ 

□ 

□ 

□ 

□ 

n 

D 

□ 

□ 

n 

D 

n 


for  (key  = sigset->pool->keys;  key;  key  = key->g.next)  { 
n pgpAssert(OBJISKEY(key)); 

n if  ( ( key->g . ma s k 8 keymask)  ==  0 | | key->g. flags  8 KEYF_ERROR) 

n n continue;n  /*  Skip  dummy  keys  */ 

n for  (sig  = 8key->k.sigsby->s;  sig;  sig  = sig->nextby)  { 


n 

n 

/* 

n 

n 

★ 

Reasons  why  a signature  might  not  be  checked: 

D 

u 

★ 

- Already  tested  and  not  allflag 

n 

n 

* 

- Not  in  sigmask 

a 

n 

*/ 

a 

Q 

1 f 

((sig->mask  8 sigmask)  !=  0 

n 

□ 

88  (allflag 

n 

n 

□ 

1 1 ! (sig->trust8PGP_SIGTRUSTF_CHECKED_TRIED))) 

□ 

□ 

□ 

c oun  t + + ; 

n > 
} 


n return  count  > INT_MAX  ? INT_HAX  : (int)count; 

> 


/* 

* Set  the  signature  trust  to  the  given  value.  Returns  the  bitmask  of 

* changed  keyrings. 

*/ 

static  ringmask 

se t S i gT r us t ( s t r u c t RingSig  *sig,  byte  trust) 

{ 

n if  (sig->trust  ==  trust) 
n n return  0; 

n sig->trust  = trust; 
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n sig->fLags  |=  R I NGOB J F_T RU ST C H AN G E D ; 
a return  sig->mask; 

} 

/* 

* Check  the  signatures  on  a keyring.  Checks  unchecked  signatures, 

* or  all  signatures  if  aLlflag  is  true. 

* 

* Checks  signatures  in  "sigset"  if  they  are  made  by  keys  in  "keyset". 

* 

* If  func  is  non-nuLL,  calls  it  with  each  checked  signature,  after 

* checking.  This  is  for  progress  indications. 

* 

* Question:  should  signatures  be  checked  in  order  of  the  key  they're 

* on,  or  the  key  they're  by?  Should  this  be  guaranteed?  For  now,  use 

* the  2.x  order. 

*/ 

i nt 

r i ng Poo  I Chec k ( s t r u c t RingSet  const  *sigset,  struct  RingSet  const  *keyset, 
n int  allflag,  void  (*func)(void  *,  struct  Ringiterator  *,  int), 
n void  *arg) 

{ 

n struct  Ringiterator  *iter  = NULL; 
n union  RingObject  *obj,  *key; 

n union  RingObject  *s i g pa r en t =N U LL,  *s i go wn e r =N U LL; 
n int  sp  = 0;n/*  Iterator  level  (stack  pointer)  */ 
n union  RingObject  *h a s h ed C R I N GM AX D E PT H ] ; 
n struct  PgpHashContext  *hc; 

n struct  PgpHashContext  *h c s t a c k C R I NGM AX  0 E PT H D ; 
a struct  PgpHash  const  *h,  *hnew; 
n byte  const  *buf,  *extrabuf; 

n struct  PgpPubKey  *pub; 

n si ze_t  I en; 
n unsigned  extralen; 


n 

a 

ringmask  changemask 
byte  tmpbufCSJ; 

■“ 

0;n 

/* 

Sets 

that  have  had  trust  changed  */ 

a 

bytet;nn  n n 

a 

a 

/* 

Trust 

on  current  signature  */ 

a 

int  s i g h a s h n e w ; nn 

a 

a 

/* 

True 

if  sig  uses  new  hash  conventions  */ 

a 

a 

int  namehashnew=0;n 

int  i ; 

a 

a 

/* 

True 

if  name  hash  cache  uses  new  ""  */ 

n union  RingObject  *name; 

n pgpAssert(sigset->pool  ==  keyset->pool); 

n for  (i  = 0;  i < R I NGH AX D E PTH ; i++)  { 

n n hashedCiD  = (union  RingObject  *)0; 

n n hcstackCi]  = (struct  PgpHashContext  *)0; 
n > 

n iter  = r i ng 1 1 e r C r e a t e ( s i g s e t ) ; 
n if  (liter) 

a a return  PGPERR_NOHEH; 

n h = (struct  PgpHash  const  *)0; 

n while  ((sp  = r i n g 1 1 e r N ex t Ob j e c t Any w h e r e ( i t e r ) ) > 0)  { 

n a obj  = r i ng 1 1 e r C u r r e n t Ob j e c t ( i t e r , ( u n s i g n e d ) s p ) ; 

n n if  ( ! OBJ ISSIG(ob j ) ) 
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Q n 

n continue; 

n n 

t = obj->s. trust; 

□ n 

/*  See  if  we  have  the  key  */ 

n n 

key  = r i ng S i g Ma ke r ( s i g s e t , obj,  keyset); 

n n 

/*  If  NOT  aLLfLag,  and  sig  has  been  successfully  checked. 

n n 

n and  signing  key  still  exists,  ignore  it.  */ 

n n 

if  Clallflag  (t  S PG P_ S I GT R U ST F_ C H E C KE D_T R I E D ) key)  { 

n n 

r i ng Ob j e c t R e 1 ea s e (key); 

n n 

n continue; 

Q n 

> 

a □ 

/*  If  the  superior  object  is  a name,  reset  the 

n □ 

WARNONLY  flag.  */ 

n Q 

name  = r i ng  1 1 e r C u r r e n t Ob j e c t ( i t e r , 

n n 

n n n r i ng  1 1 e r C u r r e n t Le  ve  1 ( i t e r ) - 1 ) ; 

n n 

if  (OBJISNAME(name)  SS 

n n 

a a (name->n . t rust  S PG P_N AM ET R U ST F_W A RNON L Y ) ) { 

B n 

name->n. trust  8=  ' PG P_ N AH ET R U ST F_W A R NO N L Y ; 

B B 

changemask  |=  name->g . ma s k; 

B fl 

} 

B B 

/*  We  now  have  a signature  to  check  - clear  the  bits  */ 

B B 

t 8=  ~PGP_SIGTRUSTF_CHECKED_TRIED; 

B B 

if  (!key)  { 

B B 

a /*  No  key,  so  sig  cannot  be  considered  good.  */ 

B B 

a changemask  |=  s e t S i g T r u s t ( 8ob j -> s , t); 

B B 

a cont i nue ; 

B B 

} 

B B 

/*  The  new  hash  style  includes  the  name  header  and  count  */ 

B B 

sighashnew  = ob j ->s . ve r s i on  > PG P V E R S I 0N_2_6 ; 

B B 

/*  Some  reasons  that  we  might  not  be  able  to  check  it  */ 

B B 

if  C ob j ->g . f 1 a g s 8 SIGF_ERR0R 

B B 

II  key->g. flags  8 KEYF_ERR0R 

B B 

II  ( (ob j->g . f lags  8 S I G F_N0N F I V E ) 88  sp  ==  2) 

B B 

1 1 (hnew  = pg p H a s h By N umb e r ( 0 b j -> s . h a s h a 1 g ) ) ==  0) 

B B 

{ 

B B 

a ringObjectRelease(key); 

B B 

a goto  uncheckable; 

B B 

> 

B B 

/*  Get  the  key  that  made  the  signature  */ 

B B 

pub  = ringKeyPubKey(keyset,  key,  PGP_PKLISE_SIGN); 

B B 

ringObjectRelease(key); 

B B 

if  ( ! pub ) { 

B B 

a i = r i ng  S e t E r r 0 r ( ke y s e t ) -> e r r 0 r ; 

B B 

a /*  aaa  ViaCrypt  self-signs  encryption-only  keys 

B B 

a (as  they're  RSA,  it's  possible),  but  PGP  3 

B B 

a doesn't  like  this.  Ignore  this  type  of 

B B 

a signature.  */ 

B B 

a if  ((i  >=  PGPERR_KEY_HIN  88  i <=  PG PE RR_KE Y_M AX ) || 

B B 

a i ==  PGPERR_PUBKEY_UNIMP) 

B B 

a n goto  uncheckable; 

CCCHK: 
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n 

B 

B 

goto  fataL;n/*  I/O  or  memory  error  */ 

n 

B 

> 

n 

B 

/* 

Okay 

, "hnew"  is  the  current  hash.  Do  checking.  */ 

n 

B 

i = 

0; 

n 

B 

for 

) { 

Q 

B 

B 

ob  j 

= r i n g I t e r C u r r e n t Ob j e c t ( i t e r , ++i); 

n 

B 

B 

h c 

= hcstackCi-13; 

n 

B 

fl 

1 f 

(he  &&  hc->hash  !=  hnew)  { 

n 

B 

B 

B 

pgpHashDestroy(hc) ; 

n 

B 

fl 

fl 

he  = 0; 

n 

B 

B 

> 

u 

B 

fl 

i f 

(the)  ( 

n 

B 

fl 

B 

he  = pg p H a s h C r e a t e ( h n e w ) ; 

D 

fl 

B 

fl 

if  C ! h c ) 

n 

B 

B 

B 

n goto  nomem; 

n 

B 

fl 

B 

hcstackCi-1]  = he; 

Q 

B 

B 

B 

hashedCi-13  = (union  RingObject  *)0; 

n 

B 

fl 

> else  if  (hashedCi-13  ==  obj)  { 

n 

B 

fl 

B 

/*  Right  hash,  right  object  */ 

o 

B 

fl 

fl 

/*  Detect  whether  name  has  same  hash  style  as  we  need  * 

n 

B 

fl 

B 

if  ( ! OB J 1 SNAME ( ob j } ||  n ame h a s h n e w = = s i g ha s h n e w ) 

Q 

B 

B 

fl 

n continue; 

n 

B 

B 

> 

Q 

B 

fl 

buf 

= (byte  const  * ) r i ng F e t c hOb j e c t ( s i g s e t , obj,  SLen); 

n 

B 

fl 

if 

( ! buf  ) 

u 

B 

fl 

B 

goto  fatal; 

n 

B 

fl 

i f 

( i ==  sp) 

n 

B 

B 

B 

break;n  /*  We've  hit  the  signature  */ 

B 

B 

fl 

if 

II 

M 

B 

B 

B 

fl 

pgpHashlnit(hc); 

B 

B 

B 

else 

B 

B 

fl 

B 

pgpHashCopy(hc,  hcstackCi-2D); 

B 

B 

fl 

/* 

We  use  this  format  even  for  subkeys  */ 

B 

B 

fl 

if 

(0BJISKEY(obj ) ) { 

B 

B 

fl 

B 

tmpbuf:0:  = PKTBYTE_BUILD(PKTBYTE_PUBKEY,  1); 

B 

B 

B 

B 

tmpbufCI]  = ( by t e ) ( 1 e n>>8 ) ; 

B 

B 

B 

fl 

tmpbuf[2!]  = (byte)len; 

B 

B 

fl 

fl 

pgpHashllpdate(hc,  tmpbuf,  3); 

B 

B 

B 

B 

sigparent  = obj;n  /*  Remember  key  above  sig  for  below 

B 

B 

fl 

fl 

if  (0BJIST0PKEY(obj ) ) ( 

B 

B 

B 

B 

n sigowner  = obj;n/*  Also  top  key  of  sig  for  below  */ 

B 

B 

fl 

B 

> 

B 

B 

B 

} else  { 

B 

B 

fl 

B 

/*  Not  a signature,  this  must  be  a name  */ 

B 

B 

fl 

B 

pgpAssert(i  ==  2); 

B 

B 

fl 

B 

pgpAssert(OBJISNAME(obj)); 

B 

B 

fl 

fl 

if  (si ghashnew)  ( 

B 

B 

fl 

fl 

n tmpbufC0]  = PKTB YT E_BU 1 L D ( PKTB YT E_N AM E , 0); 

B 

B 

B 

fl 

n tmpbufCID  = ( by t e ) ( 1 en>>2 4 ) ; 

B 

B 

B 

B 

n tmpbufC2D  = ( by t e ) ( 1 en>> 1 6 ) ; 

B 

B 

B 

B 

n tmpbufC3D  = (byte)(len>>  8); 

B 

B 

B 

B 

n tmpbufC4D  = (byte)(len>>  0); 

B 

B 

fl 

B 

n pgpHashUpdate(hc,  tmpbuf,  5); 
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□ □ o □ > 

n n n n namehashnew  = sighashnew; 

n t3  n } 

n n n pgpHashUpdateChc,  buf,  Len); 

n n n hashedCi-1!]=obj; 

n n } 

n n / * 

n n * Okay,  "obj"  is  the  signature  again,  "he"  is  the 

n B * appropriate  hash  context,  and  the  signature  has 

B B * been  fetched . 

B B * / 


B B extrabuf  = r i ng S i g Pa r s e Ex t r a ( bu f , Len,  SextraLen); 


B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 


/* 

* extraLen  !=  5 Legal  only  if  sig  is  on  key  directly, 

* or  it  is  a new-format  EXTENDED  type. 

*/ 

i = -l;nB  /*  flag  error  on  func  caLL  below  */ 

if  (sp  ==  2bb  bbbbbbb/*  Sig  directly  on  key  */ 

B II  extraLen  ==  5b  b b b b b /*  Traditional  case  */ 

B /* 

B * This  was  an  earlier  idea  for  forward  compatibility,  replaced 
B * by  the  n e we r-ve r s i o n packets. 

B * II  (extraLen  >5 

B * SS  extrabuf :extraLen-5:&PGP_SIGTYPEF_EXTENDED) 

B * / 

B I I o b j -> s . V e r s i on  > PG PV E R S 1 0N_2 _6n  b /*  New  format  packets  */ 

B II  sighashnew)  {b  b b b b b /*  DSA  keys  fix  bug  */ 

B /*  Hash  in  extra  bytes  for  signature  */ 

n pg p H a s h C o py ( h c , h c s t a c k C s p-2 D ) ; 

B pgpHashUpdateChc,  extrabuf,  extraLen); 


B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 


i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

} 


(sighashnew)  { 

/*  Hake  sure  hash  can't  match  any  old  or  doc  hashes  */ 
byte  postscriptCbH; 
po s t s c r i p t C 0 ] = PG PV E R S I 0N_3 ; n 


postscriptCI  ] 
postscript[:23 
postscriptC3] 
postscriptCA] 
postscriptCS] 


/*  actually  a 4!  */ 

0xff;n  B B /*  different  from  sig  type  */ 
(byte)(extraLen>>24); 

(byte) (extra  Len>>1 6) ; 

( by t e ) ( e X t r a L e n>>  8); 

( by t e ) ( ex t r a I en>>  0); 


pgpHashUpdate  (he,  postscript,  sizeof(postscript)); 


B B 
B B 
B B 
B B 
B B 
B B 
B a 
B B 
B B 
B B 
B B 
B B 
B B 


B i = pg p S i g C h e c kBu f ( bu f , Len,  pub,  pg p H a s h F i n a L ( h c ) ) ; 

B if  (i  ==  PGPERR_NOHEM) 

B B goto  nomem;n/*  Fatal  error  */ 

B /*  aaa  TODO:  use  more  error  info  */ 

B i f ( i ==  1 ) { 

B B t 1=  PGP_SIGTRUSTF_CHECKED; 

B B / * 

B B * On  finding  a valid  self  signature,  apply  any  info  in  sig 

B B * to  parent  key  which  goes  there.  "key"  is  signer,  sigowner 

B B * is  top  Level  key  above  this  sig,  sigparent  is  closest 
B B * key  above  this  sig  (may  differ  for  DSA/EIG  keys). 

B a * / 

B B if  (key  ==  sigowner)  { 
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n 

n 

Q 

n 

ct 

n 

Q 

Q 

□ 

n 

n 

n 

□ 

n 

n 

a 

n 

n 


n 

n 

n 

n 

□ 

n 

n 

n 

n 

□ 

n 

n 

n 

□ 

□ 

Q 

} 


□ 

n 

□ 

ti 

n 

n 

n 

a 

D 

D 

□ 

a 

n 

D 

> 

t 


n 

n 

□ 

n 

n 

n 

a 

Q 

□ 

a 

n 

n 

n 

} 


/*  Self  signature  */ 
byte  const  *pk; 

/*  Look  for  expiration  date,  apply  to  key  above  us  */ 
pk  = ri ngSi g Fi ndSubpacket  (buf,  S I G S UB_KE Y_ E X PI R AT  I ON , 
n 0,  NULL,  NULL,  NULL,  NULL,  NULL); 
if  ( p k ) { 


word32  keyexp; 

keyexp  = ( wo r d32 ) ( ( u n s i g n ed ) p k C 0 D <<8 | p k C 1 D ) <<  16  | 
n n n n ((unsigned)pkC2D<<8|pkC3D); 
if  (sigparent)  -C 

n s i g pa r e n t -> k . va I i d i t y = ( wo r d 1 6 ) ( key e xp / ( 2 4*3600 ) ) ; 

> 


1=  PGP_SIGTRUSTF_TRIED; 


pgpPubKeyDestroy(pub); 
uncheckable: 

n n changemask  |=  s e t S i gT r u s t ( Sob j -> s , t); 

n n if  (func) 

n n n funcCarg,  iter,  i); 

n } 

n r i ng I t e r De s t roy ( i t e r ) ; 
n iter  = NULL; 


n for  (sp  = 0;  sp  < (int)(sizeof(hcstack)/sizeof(*hcstack));  sp++) 

n n pg pHa s h De  s t r oy  ( h c s t a c k C s p D ) ; n 


#if  0 

n /*  Set  the  trustchanged  bits  under  the  mask  */ 
n r i ng Poo  I Ma r kT r u s t C ha ng ed ( r i ng , changemask); 

#e  nd i f 

n r i ng I t e r De s t roy  (iter); 
n return  0; 


nomem : 

n i = PGPERR_NOMEH; 

n r i ng S i mp I e E r r ( s i g se t->poo I , i); 

fatal: 

n if  (iter) 

n n r i ng 1 1 e r De s t r oy ( i t e r ) ; 
n if  (pub) 

n n pgpPubKeyDestroy(pub); 

n for  (sp  = 0;  sp  < (int)(sizeof(hcstack)/sizeof(*hcstack));  sp++) 
n n pgp Ha s h De s t r oy ( h c s t a c k C s p 3 ) ; n 
n return  i; 

> 

/* 

* Update  the  hash  context  with  the  data  in  the  object. 

* 

* hen  n HashContext  to  update 

* objn  n Object  to  update  it  with 

* setn  n Set  which  holds  object,  used  for  fetching  its  data 

* h a s h n a me  I e ng t hn  if  true,  include  the  length  of  a name  packet  in  hash 

* 

* Returnn  0 on  success,  or  an  error  code 
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*/ 

int  ringHashObj  (struct  Pg p H a s h C o n t ex t *hc,  union  RingObject  *obj, 
a n struct  RingSet  const  *set,  int  h a s h n a me L e n g t h ) 

{ 

n si2e_t  objLen; 
n byte  const  *objbuf; 

n byte  tmpbufCSil; 

n if  (!hc  II  !obj  ||  !set) 

n H return  PGPERR.BADPARAM; 

n objbuf  = (byte  const  *)ringFetchObject(set,  obj,  SobjLen); 
n if  (lobjbuf) 

n n return  r i n g S e t E r r o r ( s e t ) ->e r r o r ; 
n /*  We  use  this  format  even  for  subkeys  */ 
n if  (OBJISKEY(obj  ) ) { 

n n pg p A s s e r t ( o b j L e n <=  65535); 

a n tmpbufCO:  = PKTB YT E_BU I L D ( PKTB YT E_ P UBKE Y , 1 ) ; 

n n tmpbufCID  = ( by t e ) ( o b j L e n>>8  ) ; 

n n tmpbufCZD  = (byte)objLen; 

n n pgpHashUpdate(hc,  tmpbuf,  3); 

n } else  if  ( OB J I S N AM E ( o b j ) &&  h a s h n a me L e ng t h ) { 
n n / * 

n n * Use  four  bytes  for  name  Length  for  future  expansion.  Can't  do 

n n * it  for  keys  due  to  backwards  compatibility. 

H n * / 

n n tmpbufCO:  = PKTB YT E_BU I LD ( PKTB YT E_N AM E , 0 ) ; 
n n tmpbufCI]  = ( by t e ) ( ob j L e n>> 2 4 ) ; 

n n tmpbufC2D  = ( by t e ) ( ob j L e n>> 1 6 ) ; 

n n tmpbufC33  = ( by t e ) ( ob j L en>>  8); 

n n tmpbufCAD  = ( by t e ) ( ob j L e n>>  0); 

n n pgpHashUpdate(hc,  tmpbuf,  5); 

n } 

n pgpHashUpdate(hc,  objbuf,  objLen); 
n return  0; 

} 

/* 

* Sign  the  specified  object  obj,  along  with  its  parents. 

* Should  be  member  of  RingSet  dest,  which  may  be  mutable  or  immutable. 

* Place  signature  into  sig  buffer. 

* sig  buffer  should  be  at  Least  pg pMa ke S i g Ma x S i z e ( s pe c ) bytes  Long. 

* Returns  size  of  sig  in  bytes  on  success,  negative  on  error. 

*/ 

int 

r i ng S i g nOb j ( by t e *sig,  struct  RingSet  *dest,  union  RingObject  *obj, 
n struct  PgpSigSpec  *spec,  struct  Pg p Ra ndomC o n t e x t const  *rc) 

{ 

n struct  PgpHashContext  *hc; 

n union  RingObject  * pa r e n t s C R I NGM AX D E PT H 3 ; 
n int  len; 
n inti  eve  L ; 
n int  retval; 

a int  sighashnew; 

a /*  Initialize  hash  */ 

a he  = pg p H a s h C r e a t e ( p g p S i g S pe c H a s h ( s pe c ) ) ; 
a if  (hc==NULL) 
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n n return  PGPERR_BAD_HASHNUM; 

n /*  Use  new  hashing  convention  (include  name  Length)  on  new  formats  */ 
n sighashnew  = pg p S i g S pe c Ve r s i o n ( s pe c ) > PG P V E R S I ON_2_6 ; 

n /*  Trace  object's  parents  up  to  top  Level  */ 
n Level  =0; 


n 

for 

( ; ; ) { 

fi 

□ 

pgpAssert  ( Leve  L < 

RINGMAXDEPTH  ) ; 

n 

n 

pa r e n t s [ L e ve 1 ++ D = 

ob  j ; 

n 

Q 

if  (0BJIST0P(obj ) ) 

□ 

n 

n break; 

n 

n 

obj  = obj->g.up; 

a } 

n /*  Hash  downwards  from  top  to  object  */ 
n while  ( — Level  >=  0)  { 

n n retval  = ringHashObj  (he,  pa r e n t s C L e v e L D , dest,  sighashnew); 
n n if  (retval)  { 
n n n pgpHashDestroy  (he); 

n n n return  retval; 

n n > 

n > 

n Len  = pgpHakeSig  (sig,  spec,  rc,  he); 
n pgpHashDestroy(hc); 
n return  Len; 

> 


DYNAMIC  KEY  EVALUATION  FOR  NON-TRUSTED  KEY  SOURCES  *********/ 


/* 


Dynamic  evaluation  functions.  This  is  a bottom-up  algorithm  rather 
than  the  top-down  algorithm  used  by  the  static  evaluation  functions 
To  evaluate  a name,  its  signatures  must  be  evaluated,  which  in  turn 
require  evaluation  of  the  signing  keys  names.  Thus,  the  algorithm 
is  recursive.  The  recursion  terminates  when  one  of  the  following 
conditions  are  detected: 


- The  key  to  which  the  name  is  attached  is  axiomatic 

- The  key  to  which  the  name  is  attached  is  revoked 

- The  signature  is  bad 

- The  signature  is  retired 

- The  signing  key  is  axiomatic 

- The  signing  key  is  revoked 

- The  signing  key  has  expired 

- A certification  Loop  is  detected 

- Cert  depth  is  exceeded 

Certification  Loops  are  detected  by  maintaining  a stack  that  represents 
the  certification  path  currently  being  evaluated.  If  the  key  we're 
Looking  at  is  already  on  the  stack,  then  it's  a loop.  Loops  are  handled 
in  a better  manner  than  the  static  top-down  algorithm  (which  sometimes 
discards  perfectly  good  signatures),  resulting  in  more  accurate  results. 

Objects  from  untrusted  keyrings  (keyfiles)  do  not  have  the  R I NGOB J F_T RU S T 
bit  set.  When  we  compute  the  validity  of  such  an  object,  the 
R I N G OB J F_TRU S T C H ANG E D bit  is  set  as  a record  that  this  has  been  done. 

aaa  TODO:  Optimize 
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The  comment  below  is  the  discovery  by  Colin  of  the  problem  with 
PGPTRUSTMODEL  1 that  trust  along  shared  paths  is  not  properly  discounted: 


a)  3 3 

3 3 3 

XXX 

XXX 

This 

code  i s buggy ! It 

does 

not  compute  the  right 

answer  ! 

3 33 

XXX 

Let  ' 

'X->Y"  mean  "X  signs 

Y"  . 

Consider  A->B->C->E, 

A 

1 

m 

A 

1 

< 

3 3 3 

XXX 

If  A 

is  perfectly  valid 

and 

all  signers  are  90%  valid. 

3 3 3 

XXX 

then 

*/ 

static  word16 

r i ng M n 1 1 n t Va I i d a t e N a me  (struct  RingSet  *set,  union  RingObject  *name, 
n n n int  depth); 

/*  aaa  note:  This  is  not  thread-safe  */ 


static  union  RingObject  *keystackC103;n  /*  max  certdepth  ==  10  */ 
static  int  keystack_ptr  = 0; 

«if  PGPTRUSTHODEL==0 

static  word16  t r u s t C PG P_KE YT RU ST_H A S K + 1 ] ; 

static  word16  thresh; 

static  RingPool  *trustpool  = NULL; 


static  void 

r i ngMn 1 1 n i t T r u s t (struct  RingSet  const  *set) 

{ 

unsigned  t; 

B 

B /*  Set  up  trust  table  once  only,  unless  pool  changes  */ 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


if  (trustpool  ==  set->pool) 
return; 

trustpool  = set -> pool; 

/* 

* This  is  a simple  scoring  system.  Multiply  the  number  of  completes 

* required  by  the  number  of  marginals  required.  This  gives  the 

* 'ultimate'  score.  Divide  the  total  by  the  number  of  completes  to 

* give  the  'score'  for  a complete,  and  by  the  number  of  marginals  to 

* give  the  'score'  for  a marginal. 

*/ 


for  (t  = 0;  t < s i z eof ( t ru s t ) / s i zeof ( *t ru s t ) ; 
B trustCt]  = 0; 

trust[:PGP_KEYTRUST_nARGINAL:  = 1; 
trustCPGP_KEYTRUST_COMPLETE:  = 1; 
trustCPGP_KEYTRUST_ULTIMATE:  = 1; 


if  ( s e t ->poo I ->n um_ma r g i na I s ) { 

B trust:PGP_KEYTRUST_COHPLETE] 
B trustCPGP_KEYTRUST_ULTIMATE] 

> else  ( 

B trust[PGP_KEYTRUST_MARGINAL: 
} 

if  ( s e t ->poo I ->n um_ c omp  I e t e s ) ( 

B trustCPGP_KEYTRUST_HARGINAL] 
B trust:PGP_KEYTRUST_ULTIHATE: 

> else  { 

B trust[PGP_KEYTRUST_COHPLETE] 


t + +) 

= s e t ->poo I ->n um_ma r g i n a I s ; 

= s e t ->poo I ->n um_ma r g i na  I s ; 

= 0; 

= s e t ->poo I ->n um_ c omp I e t e s ; 
*=  s e t ->poo I ->num_ c omp I e t e s ; 

= 0; 
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n > 

a thresh  = t r u s t [ PG P_KE YTRU ST_U LT I H AT E 3 ; 

} 

#endi f 

/*  Check  various  attributes  of  key:  revocation  status,  axiomatic,  expired. 
Ensure  alL  sigs  attached  to  the  key  have  been  checked  */ 


static  void 

r i ng Mn t I n t C h e c kKey  (struct  RingSet  const  *set,  union  RingObject  *key, 
n n int  *revoked,  int  *axiomatic,  int  *expired) 

{ 

n union  RingObject  *obj,  *obj2; 
a ringmask  mask  = set->mask; 
n struct  RingSet  *tmpset; 


n pgpAssert  (set); 

n pgpAssert  (key  &S  OBJISKEY  (key)); 

n pgpAssert  (revoked  &S  axiomatic  &&  expired); 

n *revoked  = 0;  *axiomatic  = 0;  *expired  = 0; 

□ 

n if  ( key-> k . t s t amp  > 0 88  key->k . va L i d i ty  > 0 88 
n (PGPTime)  ( key-> k . t s t amp  + 

n ( key-> k . va L i d i t y * 24  * 3600))  < pg pG e t T i me ( ) ) 

n n *expired=1; 


D 

□ 

n 

□ 

n 


if  (key->k. trust  8 PG P_KE YT R U ST F_BU C KSTO P ) 

n /*  Must  be  verified  by  passphrase  check,  not  by  simply  Looking 
n for  a secret  key.  So,  key  must  be  on  a Local  ring  and 

n must  have  the  buckstop  bit  set.  */ 

n *a  X i oma  t i c = 1 ; n 


n /*  Ensure  aLL  sigs  have  been  checked  for  this  key.  Copy  the 
n key  to  a temporary  set  and  pass  it  to  r i ng Poo L C he c k */ 


n tmpset  = r i ng S e t C r ea t e Cset->pooL); 
n pgpAssert  (tmpset); 

n for  (obj  = key->k.down;  obj;  obj  = obj->g.next)  { 

n n if  (OBJISBOT  (obj)) 

n n n r i ng S e t AddOb j e c t (tmpset,  obj); 

n n e L se  { 

n n n for  (obj2  = obj->g.down;  obj2;  obj2  = obj2->g.next) 

n n n n r i ng S e t AddOb j e c t (tmpset,  obj2); 

n n > 

n } 

n ri ngSet Freeze  (tmpset); 


#if  0 
n { 

□ a 

□ □ 
n n 
a n 
n n 
n Q 
n □ 

D D 


Send i f 


int  count  = 0; 

fprintf  (stdout,  "Checking  key:\n"); 
ringKeyPrint  (stdout,  set,  key,  0); 
if  ( *a  X i oma  t i c ) 

fprintf  (stdout,  "AXIOMATIC  KEY\n"); 
if  ((count  = r i ng Poo L C h e c k Cou n t (tmpset,  set,  0))  > 0) 
fprintf  (stdout,  "Checking  %d  signatures... \n", 
n count  ) ; 
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n r i ng Poo L C he c k (tmpset,  set,  0,  NULL,  NULL); 
n r i ng S e t D e s t r oy  (tmpset); 
n ringGarbageCoLLect  (set -> pool); 


□ 

Q 

□ 

□ 

Q 

□ 

n 

n 

} 


for  (obj  = key-> k . d o wn ; obj;  obj  = obj->g.next)  { 
n if  (mask  8 obj->g.mask  88  OBJISSIG  (obj))  { 
n n if  (obj->s.type  ==  PG P_S I GT Y P E_KE Y_ C OH P ROM  I S E 88 
n n obj->s.by  ==  key  88 

n n obj->s. trust  8 PG P_S I GT R U S T F_ C H E C K E D ) 

n n n *revoked=1; 

n } 

} 


/*  Check  that  the  sig  is  good.  Ensure  that  it  has  been  checked,  that 
it  has  not  expired,  that  it  a key  signature,  that  it  has  not  been 
superseded,  and  that  is  has  not  been  retired.  Expiration  or  revocation 
of  the  signing  key  is  checked  elsewhere. 

*/ 


static  int 

r i ngMnt Goods i g (struct  RingSet  const  *set,  union  RingObject  *sig. 


word32  const  timenow) 


union  RingObject  *sig2; 


Q 

(void) 

set 

/ 

□ 

pgpAssert 

(sig  88  OBJISSIG  (sig)); 

a 

if 

( ! (s 

i g- 

>s. trust  8 PGP_SIGTRUSTF_CHECKED) 

1 1 

□ 

! mn t S i g I s Va 1 i d (timenow,  s i g -> s . t s t a mp , 

sig->s. validity) 

□ 

sig 

->s 

.type  !=  PGP_SIGTYPE_KEY_GENERIC) 

□ 

B 

return 

0; 

s 

for 

( s i g 2 

= sig->s.up->g.down;  sig2;  sig2  = 

si g2->s . next ) f 

n 

i f 

(si 

g2->s.by  ==  sig->s.by)  C 

B 

B 

/* 

If  we  find  a revocation  sig  that' 

s newer. 

assume 

B 

fl 

B 

the  old  sig  is  bad  even  if  the  revocation 

sig  has 

B 

B 

fl 

not  been  checked  (it's  the  safest 

option  i 

n case 

B 

B 

B 

a good  revocation  sig  has  been  corrupted) 

*/ 

B 

fl 

i f 

( si g2->s . type  ==  PG P_ S I GT Y P E_KE Y_ 

UID_REV0KE  88 

B 

B 

B 

a 

s i g 2->s . t s t amp  > s i g-> s . t s t a mp ) 

B 

B 

B 

return  0; 

B 

B 

B 

/* 

Otherwise,  see  if  we  have  a newer 

sig  that 

' s been 

B 

fl 

B 

checked  and  is  valid.  */ 

B 

fl 

B 

i f 

( si g2->s . t rust  8 PG P_ S I GTRU S T F_C H E C KE D 88 

B 

B 

fl 

n 

si g2->s . tstamp  > s i g-> s . t s t a mp  88 

B 

fl 

fl 

a 

mnt S i g I sVa  1 i d (timenow,  sig2 

-> s . t s t a mp,  sig2- 

B 

B 

fl 

return  0; 

B 

B 

} 

B 

> 

B 

return 

1; 

/*  good  */ 

/* 

★ 

★ 

* 

* 


N0_RECURSI0N==1  causes  sig  validation  to  use  the  trust  and  confidence 
values  on  the  signing  key  and  its  names.  It  is  most  appropriate  for  a 
model  where  trusted  introducers  are  kept  on  a local  keyring  and  the 
regular  maintenance  pass  is  used  to  keep  their  trust  information  up  to 
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* date. 

* 

* NO_RECURSION==0  (e.g.  recursion)  causes  sig  validation  to  recursively 

* dynamically  check  the  validity  of  the  signing  key.  That  is  most 

* appropriate  for  the  case  where  none  of  the  public  keys  have  trust 

* information  and  the  dynamic  validation  is  run  each  time  a key  is  used. 
*/ 

#define  N0_RECURSI0N  1 


/*  Validate  a signature.  May  be  necessary  to  recursively  validate  the 
names  attached  to  the  signing  key.  */ 


static  word16 

r i ngMn t I n t Va I i da t e S i g (struct  RingSet  *set,  union  RingObject  *sig,  int  depth) 
{ 


union  RingObject  *key  = sig->s.by; 
n int  i ; 

n int  revoked  = 0,  axiomatic  = 0,  expired  = 0; 
n union  RingObject  *name  = NULL; 
tin  ! N0_RECURSI0N 
a uord16  validity  = 0; 
n word16  best_trust  = 0; 

#if  PGPTRUSTMODEL>0 

n word16  confidence  = 0,  trust  = 0; 
a uord16  be s t _ va  I i d i t y = 0; 

#e  nd  i f 
#e nd i f 

n pgpAssert  (set); 
n pgpAssert  (OBJISKEY  (key)); 
n if  (depth  > s e t ->poo I -> c e r t d e p t h ) 
n n return  0;n  n /*  exceeded  cert  depth  */ 

#if  0 

n fprintf  (stdout,  "Validating  sig,  depth  = %d\n",  depth); 
#end i f 


n /*  Check  the  stack  for  a certification  loop  */ 
n for  (i  = 0;  i < key s t a c k_p t r ; i++) 
n n if  (key  ==  key s t a c k C i 3 ) 

n n n return  0;n  /*  certification  loop  detected  */ 

n 

n if  (key->g.mask  ==  0) 
n n return  0;n  n /*  dummy  key  */ 

n /* 

n * See  if  key  has  any  potential  to  be  a trusted  introducer,  return  0 
n * i f not 

n * / 

#if  PGPTRUSTMODEL==0 

n if  ( ( key->k . t rust  S PGP_KE YTRU ST_M AS K ) <=  PG P_KE YT RU S T_N E V E R ) 
n return0; 

# e I s e 

n for  (name  = key->g.down;  name;  name  = name->n.next)  { 
n n if  (OBJISNAHE(name)  S& 

Ban  name->n . conf i dence  !=  PG P_N E WT RU ST_UN D E F I N E D &S 
n n n n n na me->n . c on f i d e n c e !=  0) 
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n n n break, -n  n n n /*  exit  Loop  with  nameoNULL  if  trusted  intr  */ 

B > 

B if  ( ! name ) 

B B return  0; 

#end  i f 

B /* 

B * This  call  may  be  overkill  as  it  checks  all  sigs  on  key,  while  if  we  are 

B * not  recursing  we  are  only  interested  in  revocation  sigs. 

B * / 

B ri ngMntIntCheckKey  (set,  key,  Srevoked,  Saxiomatic,  Sexpired); 

B if  (revoked  | | expired) 

B B return  0; 

B if  (axiomatic) 

B B return  0;b  b b b /*  XXX  Shouldn't  axiomatic  sigs  be  valid?  */ 


#if  N0_RECURSI0N 

B /*  If  a full  dynamic  validation  is  not  required,  simply 
B get  the  confidence  value  from  the  pre-computed  name 

B validities.  For  old  trust  model,  we  must  check  for  at  Least  one 

B valid  name,  and  then  return  the  trust  in  the  key  as  a 

B "score"  */ 


name->n . next ) { 


#if  PGPTRUSTMODEL==0 

B for  (name  = key->g.down;  name;  name 
if  (OBJISNAME  (name)  S& 

(name->n . t rust  & PGP_NAMETRUST_HASK)  > 
PGP_NAHETRUST_UNTRUSTED) 

return  t rust :key->k. trust  S PGP_KEYTRUST_MASK:; 


return  0; 

#e  L se 

B return  calctrust  (&key->k,  set->mask),- 
#e  nd i f 

#eLse  /*  !N0  RECURSION  */ 


B /*  Recurse  down  (or  up,  whichever  you  prefer)  and  dynamically 
B validate  the  signing  key.  */ 

B for  (name  = key->k.down;  name;  name  = name->g . next ) ( 

B B if  (lOBJISNAHE  (name)) 

B B B cont i nue ; 

#if  PGPTRUSTMODEL==0 

B B /*  If  the  total  "score"  for  a name  exceeds  thresh, 

B B then  we  consider  the  key  to  be  valid  and  can 

B B return  its  trust  as  a "score"  */ 

B B validity  = r i n g Mn t I n t Va L i d a t e Na me  (set,  name,  depth); 

B B if  (validity  >=  thresh)  /*  scored  a winner!  */ 

B B return  t r u s t C key-> k . t ru s t & PG P_KE YT RU S T_M AS KD ; 

#eLse  /*  PGPTRUSTHODEL>0  */ 

B B /*  Get  the  validity  of  the  name,  and  combine  with  the 
B B confidence  to  get  overall  trust  in  the  name. 

B B Keep  track  of  the  'best'  as  this  will  be  returned  as 

B B the  trust  in  the  signing  key.  */ 

B B if  ( name->n . c o n f i d e n c e ==  PG P_N E WT RU S T_ I N F I N I T E ) 

B B B confidence  = PG P_T RU S T_ I N F I N I T E ; 

B B else  if  ( n ame->n . c on f i d e n c e ==  PG P_N E WT R U S T_U N D E F I N E D ) 
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n n n confidence  = 0; 

n n else 

n n n confidence  = n a me->n . c o n f i d e n c e <<  T RU ST_C E RT S H I FT  ; 

n n /*  Don't  bother  validating  name  if  its  confidence  is  0, 

o a as  it  won't  contribute  to  the  confidence  in  the  sig  */ 

n n if  (confidence  > 0)  { 

a a a validity  = r i ng Hn 1 1 n t Va I i d a t e N a me  (set,  name,  depth); 

n n n trust  = mergetrust  (confidence,  validity); 

n n n if  (validity  > b e s t _ va I i d i t y || 


n 

n □ 

(validity  ==  b e s t _ va 1 i d i t y && 

n 

tt  n 

trust  > best_trust))  t 

n 

n n n 

b e s t _ va 1 i d i t y = validity; 

□ 

n Q D 

best_trust  = trust; 

n 

n n > 

n 

B > 

/tend  i f 

n 

} 

n 

return  best_trust; 

// e nd i f 

} 

/* 

Internal  name  validation  function.  Check  a 

ll  the  signatures 

name.  We  can  stop  early  if  we  hit  infinite 

validity.  ♦/ 

static  word16 

r i ngMn 1 1 n t Va L i da t eName  (struct  RingSet  *set,  union  RingObject  * 

D 

RingObject 

*ob  j , 

n 

*key; 

n 

wo  r d 1 6 

validity  = 0, 

n 

V = 0; 

D 

r i ngma  s k 

mask  = set->mask; 

n 

wo  rd32 

timenow  = pgpGetTime  (); 

#i  f 

PGPTRUSTH0DEL==2 

n 

Pathlist 

♦pathlist  = NULL; 

n 

Ri ngSetnn 

♦confidentset; 

n 

uns i gned 

maxdepth  = s e t ->poo 1 -> c e r t d e p t h ; 

n 

double 

confidence; 

//endi  f 

n 

pgpAssert 

( set ) ; 

n 

pgpAssert 

(OBJISNAME  (name)); 

Q 

key  = name 

->n . up; 

#if 

0 

n 

fprintf  (stdout,  "Validating  name,  depth  = 

%d\n",  depth); 

#endi f 


#if  PGPTRUSTH0DEL==2 

n confidentset  = r i ng S e t C on f i d e n t S e t (set); 

n r i ng F i nd Pa t h s Ba c k (name,  Spathlist,  maxdepth,  set,  pg pG e t T i me ( ) , 
n n set->poo  I ) ; 

n if  (pathlist)  { 

n n pathlist  = pa t h L i s t P r u n e (pathlist,  TOT A LP AT H M AX , set->pool); 
o a confidence  = pa  t h L i s t C o n f i d en c e (pathlist,  set->pool); 

n n if  (confidence  ==  1.) 
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n n n validity  = PG P_T RU ST_ I N F I N I T E ; 

n n else 

n n n validity  = r i ng D ou b I eToT r u s t (1.  / C 1 . -c o n f i d e n c e ) ) ; 

n D pathListFreeAll  Cpathlist,  set->pool); 

n a pathlist  = NULL; 

n > 


n niemPoolEmpty(&set->pool->pathpool); 
n se t ->poo I ->pa t h s = NULL; 

a set->pool->pathlists  = NULL; 
n r i ng S e t D e s t roy  ( c o n f i d e n t s e t ) ; 

#else  /*  PGPTRUSTMODEL ! =2*/ 


n key s t a c k C key s t a c k_p t r++ ] = key;nn  /*  push  key  on  the  stack  */ 

n /*  Combine  the  trust  in  each  signature  to  get  the  validity  of 

n the  name.  Must  be  careful  to  check  for  overflow,  and  need 

n special  handling  for  infinite  trust.  */ 


n 

validity  = 

0; 

□ 

for 

( ob  j = 

name->n . down;  obj;  obj  = obj->g.next)  { 

n 

n 

pgpAssert 

(OBJ ISSIG  (ob j ) ) ; 

Q 

n 

if  (mask  S 

obj->g.mask  &&  obj->s.by  !=  key)  { 

n 

n 

n i f 

( r i 

ngMntGoodSig  (set,  obj,  timenow))  { 

n 

□ 

Q u 

V 

= r i ngMn t I n t Va 1 i da t e S i g (set,  obj. 

Q 

n 

n n 

depth  + 1); 

//if 

PGPTRUSTMODEL= 

= 0 

n 

n 

n □ 

va 

lidity  +=  v;  /*  add  in  "score"  for  sig 

n 

n 

a n 

i f 

(validity  >=  thresh) 

n 

n 

n Q 

break;  /*  name  is  valid  */ 

#e  1 sen 

n n 

Q 

□ 

n n 

i f 

(v  ==  PGP_TRUST_INFINITE)  { 

n 

□ 

n n 

n 

validity  = v; 

n 

n 

n n 

Q 

break;  /*  can't  do  better  than  this! 

n 

n 

n n 

> 

□ 

n 

D □ 

e L 

se  if  (validity  < PG P_T RU ST_M AX ) { 

□ 

n 

n n 

n 

validity  +=  v; 

□ 

n 

n n 

n 

if  (validity  + 1 <=  v) 

n 

n 

n n 

Q 

validity  = PGP_TRUST_HAX; 

n 

n 

n n 

> 

#end i f n 

D n 

n 

n 

Q 

n > 

□ 

n 

> 

n 

> 

n 

keystack_pti 

;nn  /*  pop  key  off  the  stack  */ 

#endif  /*PGPTRUSTMODEL ! =2*/ 
n return  validity; 

> 


/*  Validate  a name  from  an  untrusted  keyfile.  Externally  visible.  */ 


void 

ri ngHntVa  I i dateName  (struct  RingSet  const  *set,  union  RingObject  *name) 

{ 

n word16  validity  = 0; 

a struct  RingSet  *allkeys; 

o int  axiomatic  = 0,  revoked  = 0,  expired  = 0; 
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n pgpAssert  (set); 

n pgpAssert  (name  SS  OBJISNANE  (name)); 


n i f 

(name->g . f Lags  S ( RI NGOBJ F_TRUST  | R I NGOB J F _TRU ST C H ANG E D ) ) 

n n 

return;n  /*  already  done  */ 

n if 

( ! (name->g . f lags  & R I NG OB J F _T RU ST C H A NG E D ) ) { 

n □ 

/*  Here's  a real  cheat.  We  copy  the  set  and  then 

n n 

copy  the  alLocmask  from  the  parent  pool  for  an  instant 

n Q 

union  of  all  keys  in  the  pool.  */ 

B 

B B 

alLkeys  = ringSetCopy  (set); 

B B 

pgpAssert  (alLkeys); 

B B 

r i ng S e t F r e e z e (alLkeys); 

B B 

a L L keys->ma s k = r i ng A L 1 o c Ma s k (set->pooL,  NULL); 

B B 

r i ng Hn t I n t C h e c kKey  (alLkeys,  name->n.up,  Srevoked,  Saxiomatic, 

B B 

n n Sexpired); 

#if  PGPTRUSTMODEL==0 

n n ri ngHntIni tTrust  (alLkeys); 


B fl 

if  (revoked) 

B B 

n validity  = PG P_N AH ETRU S T_U NT RU ST E D ; 

B B 

else  if  (axiomatic) 

B B 

n validity  = PGP_N AH ETRU ST_C OH P LET E ; 

fl  B 

else  { 

fl  B 

n validity  = ringHntlntValidateName  (alLkeys,  name,  0); 

fl  B 

n if  (validity  >=  thresh) 

B fl 

n n validity  = PG P_N AH ET RU ST_C OH P L ET E ; 

fl  B 

else  if  (validity  * 2 >=  thresh) 

fl  B 

n n validity  = PG P_N AH ET R U ST_H A RG I N A L; 

fl  fl 

n else 

B B 

n n validity  = PG P_N AH ET R U ST_U NT R U S T E D ; 

B B 

> 

B fl 

na me->n . t r u s t = ( na me->n . t r u s t & “ PG P_N AH ET RU ST_H A S K ) | 

B fl 

validity; 

Uelse 

fl  B 

name->n . va L i d = 0; 

fl  fl 

if  (revoked) 

B fl 

n name->n . va L i d = 0; 

fl  B 

else  if  (axi oma tic) 

fl  B 

n name->n . va L i d = PG P_TRU ST_I N F I N I T E ; 

B B 

else 

fl  fl 

name->n . va 1 i d = ringHntlntValidateName 

fl  fl 

n (allkeys,  name,  0); 

□ fl 

if  (name->n. valid  ==  PG P_T RU ST_ I N F I N I T E ) ( 

fl  B 

n name->n . va L i di ty  = PG P_N E WTRU S T_ I N F I N I T E ; 

fl  fl 

> else  { 

fl  fl 

n validity  = name->n . va 1 i d >>  T R U S T_C E RT S H I FT; 

fl  fl 

n name->n . va L i di ty  = (validity  > PG P_N E WTRU ST_H AX  ) ? 

fl  fl 

n PGP_NEWTRUST_HAX  : (byte)  validity; 

fl  fl 

> 

#endi f 

B fl 

name->g . f lags  |=  RINGOBJF_TRUSTCHANGED; 

fl  B 

r i ng S e t De s t r oy  (allkeys); 

n > 
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/*  Validate  a key  from  an  untrusted  keyfile.  Externally  visible.  */ 
void 

r i ngMn t Va I i da t eKey  (struct  RingSet  const  *set,  union  RingObject  *key) 

{ 

n union  RingObject  *name; 

n int  revoked  = 0,  axiomatic  = 0,  expired  = 0; 

□ 

n pgpAssert  (set); 

n pgpAssert  (key  8&  OBJISKEY  (key)); 

n if  ( ! ( key->g . f lags  8 ( R I NG OB J F_T RU ST  | R I N GOB J F _T R U ST C H AN G E D ) ) ) { 
n n r i ngMn t I n t C h e c kKey  (set,  key,  8revoked,  8axiomatic,  8expired); 
n n i f ( revoked ) 

n n n key->k. trust  |=  PG P_KE YT RU ST F_R E VO K E D ; 

n n key->g. flags  |=  R I NGOB J F_T R U ST C H A NG E D ; 
n } 

n for  (name  = key->k.down;  name;  name  = name->n.next)  ( 
n n if  ( r i n g 0 b j e c t Ty p e (name)  ==  R I N GT Y P E_N AM E ) 
n n n ringMntValidateName  (set,  name); 

n } 

} 

/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi:  ts=4  su=4 

* vim:  si 
*/ 
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/* 

* pgpRngMnt.h 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id;  pgpRngHnt . h,v  1.4. 2.1  1 997/06/07  09:50:37  mhw  Exp  $ 

*/ 

#ifndef  PGPRNGMNT.H 
^define  PGPRNGMNT.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  ..cpLuspLus 
extern  "C"  { 

#e  n d i f 


/* 

* Opaque  types 
*/ 

struct  Ringiterator; 

#ifndef  T Y PE.R I N G I T E R ATO R 
^define  T Y PE.R I N G I T E R ATO R 1 

typedef  struct  Ringiterator  Ringiterator; 
#endi f 


struct  RingPooL; 

#ifndef  T Y PE.R I NG POO L 
#define  T Y PE. R I N G POO L 1 
typedef  struct  RingPooL  RingPooL; 
#end  i f 

struct  RingSet; 

#ifndef  TYPE. RINGSET 
^define  TYPE. RINGSET  1 
typedef  struct  RingSet  RingSet; 
#end i f 


union  RingObject; 

#ifndef  T Y PE. R I NG OB J E CT 
#define  TYPE.RINGOBJ ECT  1 
typedef  union  RingObject  RingObject; 
#end  i f 


struct  PgpHashContext; 

#ifndef  T Y PE.PG PH A S H C ONT E XT 
#define  TYPE. PGPHASHCONTEXT  1 

typedef  struct  PgpHashContext  PgpHashContext; 
#en d i f 


struct  PgpRandomContext; 

#ifndef  T Y PE.PG PR AN D OM CONT E XT 
^define  T YP E.PG PR AN D OM CONT E XT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 
#e  nd i f 

struct  PgpSigSpec; 

#ifndef  T YP E.PG PS  I G S P E C 
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#define  TYPE_PGPSIGSPEC  1 

typedef  struct  PgpSigSpec  PgpSigSpec; 

# e n d i f 

word16  PGPExport  r i ng Ke y C a L c T r u s t C s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPExport  r i n g Mn t ( s t r u c t RingSet  const  *set,  struct  RingSet  *dest, 
n word32  const  timenou); 

int  PGPExport  r i n g Poo L C h e c kC o u n t C s t r u c t RingSet  const  *sigset, 
n n struct  RingSet  const  *keyset,n  int  aLLflag); 

int  PGPExport  r i ng Poo L C h e c k ( s t r u c t RingSet  const  *sigset, 
n struct  RingSet  const  *keyset,  int  aLLflag, 

n void  (*func)(void  * , struct  Ringiterator  *,  int),  void  *arg); 

int  PGPExport  ringHashObj  (struct  Pg p H a s h C on t ex t *hc,  union  RingObject  *obj, 

n n struct  RingSet  const  *set,  int  h a s h n a me L e n g t h ) ; 

int  PGPExport  r i n g S i g nOb j ( by t e *sig,  struct  RingSet  *dest, 

n union  RingObject  *obj,  struct  PgpSigSpec  *spec, 

n struct  Pg p Ra n dome  on t e X t const  *rc); 

void  PGPExport 

ri ngMntVa L i dateName  (struct  RingSet  const  *set,  union  RingObject  *name); 
void  PGPExport 

r i ngMn t Va L i da t eKey  (struct  RingSet  const  *set,  union  RingObject  *key); 

#ifdef cpLuspLus 

> 

#endi f 

#endif  /*  PGPRNGMNT_H  */ 
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/* 

* pgpRngPars.c  - parse  structures  from  a keyring.  Validates  its 

* inpout  very  carefully,  for  use  by  ringopen.c. 

* Also  includes  routines  to  "unparse"  and  assemble 

* keyri ngpackets . 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

* 

* $Id:  pg pRng Pa r s . c , V 1.6. 2. 4 1997/06/07  09:50:37  mhw  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


#include 

"config.h" 

# e n d i f 

^include 

<st  ri ng  . h> 

#include 

"pgpDebug.h" 

#include 

"pgpRngPars.h" 

ttinclude 

"pgpRngPriv. h"n/* 

ttinclude 

"pgpHash.h" 

^include 

"pgpUsuals.h" 

ttinclude 

"pgpKeySpec.h" 

^include 

"pgpErr.h" 

ttinclude 

"pgpPubKey.h" 

#include 

"pgpPktByte.h" 

#i f ndef 

NULL 

For  ringHashBuf,  pgpFingerprint20HashBuf  */ 


^define  NULL  0 
#endi f 


/* 

* Read  a key  from  the  buffer  and  extract  vital  statistics. 

* If  the  KeylD  cannot  be  determined,  a fake  keylD  with  a 32-bit  CRC 

* stuffed  in  the  middle  is  created.  This  is  designed  to  assist 

* matching  of  bad  keys. 

* 

* A key  is: 

* 0 Version:  1 byte 

* 1 Timestamp:  4 bytes 

* 5 Validity:  2 bytes  (skipped  if  version  PG P V E RS I 0N_3 ) 

* 7 Algorithm:  1 byte 

* C A I g o r i t hm-s p e c i f i c portion] 

* 8 Some  HP  number  from  which  we  can  extract  key  ID:  modulus,  etc. 

* COther  algorithm-specific  fields] 

* Cwith  possible  extra  data  if  it's  a secret  key] 

* 

* If  "secretf"  is  set,  additional  data  is  allowed  at  the  end  of  the 

* packet.  If  it  is  clear,  additional  data  results  in  PGPERR_KE Y_L0NG . 

* (The  format  of  the  extra  data  is  not  checked.) 

*/ 

i n t 

r i ngKey Pa r se ( by t e const  *buf,  size_t  len,  byte  *pkalg,  byte  keyIDCS], 
n word16  *keybits,  word32  *tstamp,  word16  *validity,  int  secretf) 

{ 

n unsigned  mien,  elen; 

CCCHK:6f87c50a256cda44332b37b66233bf4448bd6bd2619b52ea62d934142e05417e7]] 
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n int  err; 
n unsigned  vsize; 


n /*  Defaults  in  case  of  error  */ 
n i f ( key  I D ) 

n n memsetCkeylD,  0,  8); 

n if  ( keyb i t s ) 
n n *keybits  = 0; 

n i f Ctstamp) 
a n *tstamp  = 0; 

a if  (validity) 
n n *validity  = 0; 

n if  (pkalg) 
n n *pkalg=0; 

n if(len<1) 
n n goto  f a ke i d_ s ho r t ; 

n if  ( ! KNOWN_PGP_VERSION( buf C0:  ) ) { 
a a err  = PG P E R R_K E Y_ V E R S 1 0 N ; 

n n goto  fakeid; 

n > 

n /*  PGP\/ERSI0N_3  keys  have  no  validity  field  */ 
n if  (bufC0:  ==  PGPVERSI0N_3)  { 
a n vsize=0; 

B } e I s e { 

B B vsize=2; 

B } 

B if(len<5) 

B B goto  fakeid_short; 


B 

B 

B 

B 

n 

B 

B 

□ 

B 

B 

B 

B 

B 


if  (tstamp) 

B *tstamp  = ( wo r d 32 ) ( ( u n s i g ned ) bu f C 1 ] <<  8 | bufC2D)  <<  16  | 

B B ((unsigned)bufC3]  <<  8 | bufC4]); 
if  Clen  < 5 + vsize) 

B goto  f akei d_short; 
if  (validity  SS  vsize) 

B *validity  = ( uns i gned  ) buf C 5 ] <<  8 | bufC63; 
if  ( len  < 6 + vsize) 

B goto  f a ke i d_s h o r t ; 
if  (pkalg) 

B *pkalg  = bufCS  + vsize]; 
if  (len  < 8 + vsize) 

B goto  f a ke i d_ s h o r t ; 


B /*  Get  bytes  in  modulus  */ 

B mien  = ( u n s i g n e d ) bu f C 6 + vsizeD  <<  8 1 bufC7  + vsizeD; 

B i f ( key b i t s ) 

B B *keybits  = (wordi 6)mlen; 


B if  (mien  SS  len  > 8 + vsize  SS  bufC8  + vsizeD  >>  ((mlen-1)S7)  !=  1)  { 

B B err  = PG P E RR_KE Y_M0 DM P I ; 

B B goto  fakeid; 

B } 

B mien  = (mien  + 7)  / 8; 

B if  (len  < 8 + vsize  + mien) 

B B goto  f akei d_short; 


[i:CHK:0887d0e34b0c766bbb519e9ad6fa6447c979fe9118e00e0911 28071 0aa20ea6d4:D 


886 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngPars.c 


n if  (Len  < 10  + vsize  + mien) 
n n return  PGPERR_KEY_SHORT; 


n if  (bufC5  + vsize3  ==  PG P_ PKA LG_ R S A | | 
n bufCS  + vsize:  ==  PG P_PKA LG_ R S A_ E N C || 

n n bufCS  + vsize:  ==  PG P_ P KA LG_ R S A_ S 1 G ) { 

n n /*  Read  keylD  */ 
n n i f ( key  I D ) { 

nan  memc py ( key  I D , buf  + 8 + vsize  + mien  - 8,  8); 
n n n if(nLen<8) 

a n n n memsetfkeylD,  0,  8 - mLen); 

n n } 

an/*  Sanity  checks  on  the  exponent  */ 

a a elen  = ( u n s i g n ed  ) bu f C 8 + v s i z e + m L e n : <<  8 | b u f C 9 + v s i z e + m L e n : ; 

a a if  (eLen  SS  Len  > 1 0+ v s i z e+m L e n 88 

a a a a b u f C 1 0+v s i z e+m L e n : >>  ((eLen-1)87)  !=  1) 

a a a return  PG P E R R_KE Y_ E X PM P I ; 
a a eLen  = (elen  + 7)  / 8; 


n 

n 

B 

n 

n 

i f 

D 

n 

B 

n 

□ 

if 

□ 

Q 

B 

D 

□ 

i f 

n 

n 

B 

n 

> 

else 

n 

Q 

/* 

n 

n 

* i 

n 

n 

* 

o 

a 

* 1 

n 

a 

*/ 

o 

o 

>s 

n 

n 

i f 

n 

B 

B 

n 

B 

err 

Q 

B 

if 

Q 

B 

B 

if  (Len  < 1 0+ v s i z e+m L e n+e L e n ) 
return  PG P E R R_KE Y_S H 0 RT ; 

((bufC8  + vsize  + mLen-i:  8 1)  ==  0) 
return  PG P E R R_KE Y_MO D E V E N ; 

( ( bu f C 1 0+ V s i z e+m L e n+e L e n- 1 : 8 1)  ==  0) 
return  PGPERR_KEY_EXPEVEN; 

(Len  > 1 0+vs i ze+m L en+e L en  88  Isecretf) 
return  PG PE R R_KE Y_ LO NG ; 
if  (keylD)  ( 

Non-RSA  keys  use  newer  keylD  aLgorithm. 


Len  = r i ng Key Pa r s e Pu b L i c P r e f i X ( bu f , Len); 

= pgpFingerprint20HashBuf(buf,  Len,  hash); 
(err  < 0 ) 
return  err; 
pgpAssert  (err  ==  s i z e o f ( h a s h ) ) ; 
memcpy(keyID,  hash+sizeof(hash)-8,  8); 


a return  0; 


fakeid_short : 

a err  = PGPERR_KEY_SHORT; 
f a ke i d : 
n / * 

a * We  couLdn't  read  a KeylD.  Create  a bogus  one. 
a * The  tow  32  bits  are  0 (which  reaLLy  stands  out  in  a 

a * keyring  Listing  and  is  impossibLe  in  the  usuaL  case), 

a * but  the  high  32  bits  are  a CRC  of  the  packet,  to  reduce 
a * reports  of  keylD  coLLisions. 

n * / 

a i f ( key  I D ) ( 

a a word32  fake  = r i ng H a s h Bu f ( bu f , Len); 
a a keyIDC0:  = (byte)(fake  >>  24); 
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n 

a 

keyIDEI 3 

= (byte)(fake 

>>  16); 

Q 

u 

keyIDC23 

= (byte)(fake 

» 8); 

□ 

u 

keyIDC33 

= (byte)fake; 

u 

y 

u 

return  err; 

> 

/*  Extract  the  modulus  from  a key  and  return  it  (buffer  & Length)  */ 
byte  const  * 

r i ng Key Pa r s eMod  u L u s ( by t e const  *buf,  size_t  Len,  unsigned  *lenp) 

{ 

n unsigned  msize; 
n unsigned  vsize; 

n *Lenp  = 0; 

n if  (bufC0]  ==  PGPVERSI0N_3)  { 


n 

n 

vsize  = 0; 

n 

> 

else  { 

u 

n 

vsize  = 2; 

n 

> 

n 

i f 

(len  < 8+vsize 

1 1 

! KN0WN_PGP_VERSI0N(buf C03)  || 

n 

(bufC5+vsi ze3 

! = 

PGP_ 

PKALG_RSA 

&S 

□ 

bufC5+vsi ze3 

! = 

PGP_ 

PKALG_RSA_ 

ENc  as 

□ 

n 

bufC5+vsi ze3 

! = 

PGP_ 

PKALG_RSA_ 

SIG)  ) 

n 

Q 

return  0; 

n /*  Get  bytes  in  modulus  */ 

n msize  = ( u n s i g n e d ) b u f C 6+ v s i z e D <<  8 | bu f C 7+ v s i z e ] ; 

n msize  = (msize  + 7)  / 8; 

n *Lenp  = msize; 

n return  buf  + 8 + vsize; 

} 

/*  Extract  the  exponent  from  a key  and  return  it  (buffer  & Length)  */ 
byte  const  * 

r i ngKey Pa r s e Expon en t ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp) 

{ 

n unsigned  size; 

n unsigned  vsize; 

n *Lenp  = 0; 

n if  (bufC0:  ==  PGPVERSI0N_3)  C 
n n vsize=0; 

n } e I s e { 

n n vsize=2; 

n } 

n if  (Len  < 10  + vsize  ||  ! KNO WN_ PG P_ V E R S I ON ( b u f C 0 3 ) || 

n (buf C5+vsi ze3  !=  PG P_PK A LG_ R S A && 

n bufC5+vsize:  !=  PG P_PKA LG_ R S A_ E N C && 

n n bufCS+vsizeD  !=  PG P_PK A LG_ R S A_S I G ) ) 
n n return  NULL; 

a /*  Get  bytes  in  modulus  */ 

a size  = (unsigned)buflI6  + vsize3  <<  8 | bufC7  + vsize3; 
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a size  = (size  + 7)  / 8; 

n if  (Len  < 10  + vsize  + size) 

n n return  NULL; 

n /*  Skip  modulus  */ 

n size  +=  8 + vsize; 

n buf  +=  size; 

n Len  -=  size; 

n /*  Get  bytes  in  exponent  */ 

n size  = ( u n s i g ne d ) bu f C 0 D <<  8 | bufCID; 

n size  = (size  + 7)  / 8; 

n if  (len  < 2 + size) 
n n return  NULL; 

n *lenp  = size; 

n return  buf  + 2; 

> 

/* 

* Return  a pointer  to  the  "extra"  part  of  the  signature  packet,  the  part 

* which  gets  hashed.  We  use  two  different  conventions,  one  for  PGP  2.6 

* and  earlier,  and  the  other  for  the  Later  version  packets.  The  Latter 

* includes  the  whole  packet  up  through  the  variable  part. 

* 

* bufn  n Signature  buffer  pointer 

* lenn  n buf  Length  in  bytes 

* Lenpnn  Return  pointer  to  Length  of  extra  buffer 
*/ 

byte  const  * 

r i ng S i g Pa r s e E X t r a ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp) 

{ 

a *Lenp=0;nn  n n n /*Incaseoferror*/ 
n if  (bufC0:  ==  PGPVERSI0N_3)  ( 
n n unsigned  extralen; 

n n if  (Len  < 6)n  n n /*  Too  short  */ 

n n n return  NULL; 

n n extralen  = ( u n s i g n ed  ) bu f C 4 D <<8  | bufCSD; 

n n if  (Len  < 6 + extralen) 

n n n return  NULL;n  n /*  Too  short  */ 

n n *Lenp  = 6 + extralen; 

n n return  buf; 

n > e L s e { 

a a /*  Format  from  version  2.6  and  earlier  */ 

n n if  (Len  < 2 ||  ! KN 0WN_ PG P_ V E R S I ON ( bu f C 0 ] ) ||  Len  < 2u  + bufCID) 

n n n return  NULL;a  /*  Too  short  or  bad  version  */ 
n n *Lenp  = bufC13; 

n a return  buf+2; 

n } 

} 

/*  Extract  the  RSA  integer  from  a sig  and  return  it  (buffer  S Length)  */ 
byte  const  * 

r i ng S i g Pa r s e I n t eg e r ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp) 

{ 

n unsigned  size; 
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n *lenp  = 0; 

a if  (Len  < 2 ||  ! KN OWN_ PG P_ V E R S 1 0 N ( bu f C 0 ] ) ) 

H n return  NULL;n  /*  Too  short  or  bad  version  */ 

n if  (Len  < 16u  + bufCID) 

n n return  NULL;n  /*  Too  short  */ 

n /*  Skip  forward  to  PK  algorithm  */ 

n Len  -=  10  + bufCIIl; 

a buf  +=  10  + bufCI]; 

n if  (bufC0:  !=  PG P_PK A LG_ R S A &S 

n bufL0]  !=  PGP_PKALG_RSA_ENC  S&  bufC0]  !=  PG P_PK A LG_R S A_ S I G ) 

n n return  NULL;n  /*  Not  RSA  */ 

n /*  Get  bytes  in  modulus  */ 
a size  = (unsigned)bufC4]  <<  8 | bufCS]; 

n size  = (size  + 7)  / 8; 

n if  (Len  <6+  size) 
n n return  NULL; 

n *Lenp  = size; 
n return  buf  + 6; 

} 

/*  Forward  reference  */ 
static  int 

r i ng S i gPa r se3 ( by t e const  *buf,  size_t  Len,  byte  *pkaLg,  byte  keyIDC83, 
n word32  *tstamp,  word16  *vaLidity,  byte  *type,  byte  *hashaLg, 
n size_t  *extraLen,  byte  *version); 
static  int 

r i ng S i gPa r se S ubpa c ke t s ( by t e const  *buf,  byte  keyIDC83, 
n word32  *tstamp,  word16  *vaLidity); 


/* 

* Read  a signature  from  the  file,  positioned  just  after  the  header. 

* "Len"  is  the  Length  of  the  signature  packet.  Leaves  the  file 

* pointed  after  the  Length. 

* 

* A si gnature  i s : 

* 0 Version:  1 byte 

* 1 Length  of  following  material:  1 byte  (must  be  5!) 

* 2 Signature  type:  1 byte 

* 3 Timestamp:  4 bytes 

* 7 KeylD:  8 bytes 

* 15  PubLic-key  algorithm:  1 byte 

* 16  Hash  algorithm:  1 byte 

* 17  First  2 bytes  of  hash:  2 bytes 

* 19  MPl  of  signature  (header) 

* 21  HPI  of  signature  (data) 

* 

* This  reads  up  to  the  keylD  (15  bytes)  into  a buffer, 

* then  sets  up  the  various  fields. 

*/ 

int 

r i ng S i g Pa r s e ( by t e const  *buf,  size_t  Len,  byte  *pkaLg,  byte  keyIDC83, 
n word32  *tstamp,  word16  *vaLidity,  byte  *type,  byte  *hashaLg, 
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n size_t  *extraLen,  byte  *version) 

{ 

n unsigned  L;n/*  extraLen  */ 

n unsigned  t; 

n byte  alg; 

n /*  Default  settings  in  case  of  error  */ 
n if  (pkalg) 
n n *pkaLg  = 0; 

n i f ( key  I D ) 

n n memsetCkeylD,  0,  8); 
n if  (tstamp) 
n n *tstamp  = 0; 

n if  (validity) 
n n *validity  = 0; 

n i f ( type ) 
n n *type  = 255; 

a i f (hasha  Ig) 
n n *hashalg  = 255; 

n if  (extralen) 
n n *ext  ralen  = 0; 

a if  (version) 
n n *version  = 0; 

n if  (len<1) 

n n return  PG P E R R_ S I G_ S H 0 RT ; 
n /*  Forward  compatibility  */ 

n if  (bufi:0:  ==  PGPVERSI0N_3)  { 

n n return  r i ng S i g Pa r s e3 ( bu f , len,  pkalg,  keylD,  tstamp,  validity,  type. 


n 

n 

0 

n n n a hashalg,  extralen,  version); 

n 

} 

n 

i f 

(version) 

□ 

n 

*version  = bufC0]; 

Q 

i f 

(!KNOWN_PGP_VERSlON(bufC0:)) 

n 

□ 

return  PG P E R R_S I G_ V E RS 1 0 N ; 

n 

if 

( 1 en 

< 2) 

n 

n 

return  PG P E R R_S I G_S HO RT ; 

n 

L = 

bufCID; 

s 

if 

(extralen) 

n 

n 

*extralen  = 1; 

n 

i f 

( L > 

II 

o 

n 

if 

(len  < 3) 

n 

a 

0 

return  PG P E RR_S I G_S H ORT ; 

n 

a 

if 

( type ) 

a 

n 

0 

*type  = buf  C2II ; 

n 

Q 

if 

( 1 >=  5 &&  t stamp ) { 

n 

tt 

0 

if  (len  < 7) 

n 

n 

0 

n return  PG P E R R_ S I G_ S H 0 RT ; 

n 

n 

0 

*tstamp  = ( wo rd32 ) ( ( uns i g ned ) bu f C 3D<<8 1 buf C 4D ) << 

n 

n 

0 

( (unsi gned)bufC53<<8 | bufC63) ; 

n 

Q 

> 

n 

0 

i f 

(1  >=  7 SS  validity)  { 

n 

0 

0 

if  (len  < 9) 

n 

0 

0 

n return  PGPERR_SIG_SHORT; 

n 

0 

0 

*tstamp  = ( wo r d 1 6 ) bu f C 73 <<8  | bufC83; 

D 

0 

> 

n 

> 

n 

i f 

(text ralen  SS  1 !=  5) 
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a 

n 

return  PG P E R R_ S I G_ E XT R A L E N ; 

a 

i f 

( len  < 1 + 10) 

a 

n 

return  PG P E R R_S I G_S H 0 RT  ; 

a 

i f 

(keylD) 

a 

n 

memcpy(keyID,  buf  + 7,  8); 

a 

i f 

(len  < 1+11) 

a 

n 

return  PG P E R R_ S I G_ S H 0 RT ; 

a 

a Ig 

= bufCl+10:; 

a 

i f 

( p ka 1 g ) 

a 

a 

*pkalg  = alg; 

#i  f 

0 

a 

i f 

(bufi:i  + 10:  !=  PGP_PKALG_RSA  SS 

a 

bufCl+10]  !=  PGP_PKALG_RSA_ENC 

&S  bufCl+10] 

!=  PGP_PKALG_ 

a 

a 

return  PG P E R R_ S I G_ P KA LG ; 

#endi f 

a 

i f 

(len  < 1+12) 

a 

n 

return  PG P E R R_ S I G_ S H 0 RT ; 

a 

i f 

(hashalg) 

a 

n 

*hashalg  = bufCl+113; 

a 

i f 

(len  < 1+16) 

a 

n 

return  PG P E R R_ S I G _ S H 0 RT  ; 

a 

t = 

( u n s i g n e d ) b u f C 1 +1 4 D <<  8 | bufCl+15D; 

a 

i f 

(t  &&  len  > 1+16  &&  bufCl+16D  >> 

((t-1)&7)  != 

1 ) 

a 

n 

return  PG P E R R_ S I G _M P I ; 

a 

1 + 

= 16  + (t+7)/8; 

a 

i f 

(alg  ==  PGP_PKALG_RSA  || 

a 

alg  ==  PGP_PKALG_RSA_ENC  ||  alg 

==  PGP_PKALG 

_RSA_SIG)  { 

a 

n 

if  (len  ! = 1 ) 

a 

n 

B return  len  < 1 ? PGPERR_SIG 

_SH0RT  : PGPERR_SIG_LONG; 

a 

} 

a 

return  0; 

/* 

* Version  of  ringSigParse  for  the  signature  packet  formats  being  designed 

* for  a future  version.  We  do  not  fuLLy  handle  them  here,  but  we  do  a 

* basic  parse  on  the  sigs  and  we  make  sure  there  are  no  critical  fields 

* that  we  can't  handle. 

* 

* S i g I ayout : 

* 

* Of f se t , Leng t h Meaning 

*n  0n  n In  Version  byte  (=4) 

*n  In  n In  Signature  type  (included  in  hash)  (nested  flag) 

*n  2n  n In  PK  algorithm  (1  = RSA)  (included  in  hash) 

*n  3n  n In  Hash  algorithm  (1  = HD5)  (included  in  hash) 

*n  4n  n 2n  Length  of  extra  material  included  in  hash  (=y) 

*n  6b  b yn  Subpackets  (hashed) 

* 6+yBn  2b  Length  of  extra  material  not  included  in  hash  (=z) 

* 8+yBn  ZB  Subpackets  (unhashed) 

*===== 

*remainder  not  present  on  sig  headers 
★===== 

*n  8+y+zn  2b  First  2 bytes  of  message  digest  (16-bit  checksum) 

*n  10+y+zB  2+wbHPI  of  PK-signed  integer 
*n  12+y+z+w 

* 

*/ 
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static  i nt 

r i ng S i g Pa rse3 ( by t e const  *buf,  si2e_t  Len,  byte  *pkaLg,  byte  keyIDCSD, 
n word32  *tstamp,  word16  *validity,  byte  *type,  byte  *hashaLg, 
n size_t  *extraLen,  byte  *version) 

{ 


n 

uns i gnedn 

L ; B B B 

B / * 

n 

uns i gnedn 

t ; B B B 

B / * 

n 

size_tn  b 

mpi end;nB 

B / * 

a 

byten  b 

a L g ; n b 

B / * 

n 

if  (version) 

n 

B *ve  rs i on 

= bufi:0:; 

s 

if  (len  < 8) 

n 

a return  PGPERR_SIG_ 

SHORT; 

/*  extra  material  */ 


n if  (type) 
n B *type  = bufCID; 

B alg  = bufC2Il; 

n if  (pkalg) 

B B *pkaLg  = alg; 

n if  (hashalg) 

B B *hashaLg  = bufC33; 

n L = ( un  s i g n e d ) b u f C 4 D <<8  1 bufC5Il;n  t 
B if  (extra Len) 
n B *extraLen  = L; 

n if  (Len  < 6+L+2) 

B B return  PGPERR_SIG_SHORT; 

n L +=  (unsigned)bufCL+6D<<8  | bufCL+7D;n  /*  unhashed  extra  material  */ 
n if  (Len  < 8+L+2+2) 
n B return  PG PE R R_S I G_ S H 0 RT ; 

n t = ( un s i g n e d ) bu f C L +1 0 D <<  8 | bufCL+IID;  /*  first  MPI  size  in  bits  */ 

n mpiend  = 8+ I +2+2+ ( t +7 ) / 8 ; 
n if  (Len  < mpiend) 

B B return  PG PE R R_S I G_ S H 0 RT ; 

n if  (t  &&  buf:L+123  » ((t-1)&7)  !=  1) 


n 

n 

return  PG P E R R_S I G_M P I 

Q 

/* 

Special  checking  for  RSA  sigs 

*/ 

Q 

i f 

(alg 

==  PGP_PKALG_RSA 

1 1 

n 

a Ig 

==  PGP_PKALG_RSA_ 

ENC  1 1 

alg  ==  PGP_PKALG_RSA_ 

SIG)  { 

n 

n 

i f 

(Len  > mpiend) 

n 

n 

■V 

B 

return  PGPERR_SIG 

_LONG; 

n 

j 

n 

B 

Q 

/* 

Now 

parse  subpackets. 

pick  up 

keyid,  timestamp  and 

validity  info 

n 

return 

ri  ngSi gParseSubpackets  (buf  + 4,  keylD,  tstamp. 

validity); 

/* 

* Parse  the  "extra  data"  on  the  new-style  signature  packets. 

* 

* This  is  a chain  of  subpackets,  with  the  following  format: 

* 0 f f s e t , Le n g t h Meaning 

*n  0n  x(1-2)n  Subpacket  length  (=y) 

*B  xn  1b  Subpacket  type  (with  critical  flag) 

*B  x+1 ny-1 BSubpa c ket  data 

* 

* We  are  only  parsing  a few  of  the  subpackets  now,  returning  an  error 

* if  we  see  any  critical  ones  that  we  don't  handle.  Also,  we  require 
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keyid  subpacket  at  present  or  it  is  an  error. 

two-byte  count. 


* there  to  be 

* 

* There  are  two  such  chains,  each  preceded  by 

* first  is  hashed  and  the  second  is  not. 

*/ 

static  i n t 

r i ng S i g Pa r se Subpa c ke t s C by t e const  *buf,  byte  keyIDCS], 


The 


Q 

/ 

wo  rd32 

*tstamp,  word16  *vaLidity) 

X 

n 

unsignedn 

L e n ; n n n 

/* 

Length  of  chain  of  subpackets  */ 

s 

unsignedn 

subLen;nn  n n 

/* 

Length  of  subpacket  */ 

n 

i nt  a 

n 

type,n  n n n 

/* 

T ype  of 

subpacket  */ 

Q 

n n 

u 

prevtype; n n a 

/* 

T ype  of 

previous  subpacket  */ 

n 

i ntnn 

n 

critical  ;n  n n 

/* 

Critical 

flag  on  subpacket  */ 

D 

i ntnn 

n 

found_keyid  = 0;n 

/* 

True  if 

found  a keyid  subpacket  */ 

Q 

i ntnn 

n 

hashed;nn  n n 

/* 

True  if 

parsing  hashed  subpackets  */ 

n 

wo  r d3  2 n 

a 

c rea t i ont i me  = 0;n 

/* 

Creation 

time  from  subpacket  */ 

n 

wo  rd32n 

□ 

expirationtime  = 0; 

n / * 

Expiration  time  from  subpacket  */ 

n 

hashed 

= 1; 

n 

/*  Loop 

twice,  once  with  hashed 

= 1 

and  once  with  hashed  = 0 */ 

n 

do  ( 

n n prevtype  = 0; 

n n Len  = ( u n s i g n ed ) b u f C 0 3 <<8 

n n buf+=2; 

n n while  (Len)  { 


b u f [ 1 : ; 


n 

a 

a 

i f 

(len  < 2 ) 

n 

a 

a 

n 

return  PG P E R R_ S I G_B A D EXT R A ; 

n 

a 

a 

/* 

Subpacket  Length  may  be  one  or  two  bytes  */ 

a 

a 

a 

sublen  = ( u n s i g n ed ) b u f C 0 D ; 

n 

a 

a 

i f 

(sublen  < 0xc0)  { 

u 

a 

a 

a 

/*  sublen  is  the  Length  */ 

n 

a 

a 

a 

Len  -=  1 ; 

n 

a 

a 

a 

bu  f +=  1 ; 

n 

a 

a 

> else  if  ((sublen  & 0xe0)  ==  0xc0) 

n 

a 

a 

a 

sublen  &=  0x3f ; 

n 

a 

a 

a 

sublen  = (sublen  <<  8)  + ( uns i gned ) buf C 1 ] + 

n 

a 

a 

a 

Len  - = 2 ; 

n 

a 

a 

a 

buf  + = 2 ; 

n 

a 

a 

} else  { 

Q 

a 

a 

a 

/*  Badly  formatted  */ 

n 

a 

a 

a 

return  PG P E R R_ S I G_B A D E XT R A ; 

n 

a 

a 

> 

s 

a 

a 

i f 

(Len  < 1 ) 

a 

a 

a 

a 

return  PG P E R R_ S I G_B A D E XT R A ; 

a 

a 

a 

type  = bufC0]; 

a 

a 

a 

critical  = type  & S I G S UB F _C R I T I C AL; 

a 

a 

a 

type  &=  “SIGSUBF.CRITICAL; 

a 

a 

a 

bu  f 

+ = 1; 

a 

a 

a 

Len 

-=  1; 

a 

a 

a 

sublen  -=  1; 

a 

a 

a 

i f 

(Len  < sublen) 

a 

a 

a 

n 

return  PG P E RR_ S I G_B A D E XT R A ; 

a 

a 

a 

/* 

Illegal  to  have  critical  packets  in  unhashed 

a 

a 

a 

i f 

(critical  &&  !hashed) 

a 

a 

a 

n 

return  PGPERR_SIG_BADEXTRA; 

a 

a 

a 

/* 

Packets  in  order  of  nondecreasing  type  */ 

a 

a 

a 

i f 

(type  < prevtype) 

192; 
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Q 

B 

B 

B 

return  PG PE RR_S I G_B A D E XT R A ; 

n 

B 

B 

switch  (type)  { 

n 

B 

B 

case  SIGSUB_CREATION : 

n 

B 

B 

B 

if  (sublen  !=  4) 

n 

B 

B 

B 

n return  PG P E R R_S I G_B A D EXT R A ; 

n 

B 

B 

B 

if  (Jtstamp  &&  critical) 

n 

B 

B 

B 

n return  PG P E R R_S I G_B A D EXT R A ; 

n 

B 

B 

B 

creationtime  = ( wo r d32 ) ( ( un s i g n ed ) b u f C 0 D <<8 | bu f C 1 3 ) <<  16 

n 

B 

B 

B 

n n n n n ( ( un s i g n ed ) b u f C 2 3 <<8 | bu f C 3 3 ) ; 

n 

B 

B 

B 

if  (tstamp) 

ta 

B 

B 

B 

a *tstamp  = c rea t i ont i me; 

n 

B 

B 

B 

break; 

n 

B 

B 

case  SIGSUB_EXPIRATION : 

n 

B 

B 

B 

if  (sublen  !=  4 ||  lhashed) 

n 

B 

B 

B 

a return  PG P E R R_ S I G_B A D EXTR A ; 

n 

B 

B 

B 

/*  We  don't  really  handle  this  yet  */ 

n 

B 

B 

B 

if  (critical) 

n 

B 

B 

B 

a return  PGPERR_SIG_BADEXTRA; 

n 

B 

B 

B 

e X p i r a t i 0 n t i me  = ( wo r d32 ) ( ( u n s i g ne d ) bu f C 0 3 <<8 | bu f C 1 3 ) << 

B 

B 

B 

B 

a n n n a ( ( u n s i g ne d ) bu f C 2 3 <<8 | b u f C 3 3 ) ; 

B 

B 

B 

B 

/*  Store  it  as  days.  ex p i r a t i on t i me  is  really  valid  peril 

B 

B 

B 

B 

if  (validity  &&  c r ea t i on t i me ) 

B 

B 

B 

B 

a *vaLidity  = (word16)  ( exp i r a t i on t i me  / (24  * 3600)); 

B 

B 

B 

B 

break; 

B 

B 

B 

case  SIGSUB_KEYID: 

B 

B 

B 

B 

/*  Allow  Longer  than  8 byte  keyid's  unless  critical  */ 

B 

B 

B 

B 

if  (sublen  < 8) 

B 

B 

B 

B 

a return  PG P E R R_S I G_B A D E XT R A ; 

B 

B 

B 

B 

if  (critical  S&  (IkeylD  ||  sublen  !=  8)) 

B 

B 

B 

B 

a return  PGPERR_SIG_BADEXTRA; 

B 

B 

B 

B 

if  (keylD) 

B 

B 

B 

B 

a memc py ( key  I D , buf  + sublen  - 8,  8); 

B 

B 

B 

B 

f ound_keyi d = 1 ; 

B 

B 

B 

B 

break; 

B 

B 

B 

default : 

B 

B 

B 

D 

if  (critical) 

B 

B 

B 

n 

a return  PG P E RR_S I G_B A D EXT R A ; 

B 

B 

B 

> 

B 

B 

B 

bu  f 

+=  sublen; 

B 

B 

B 

L e n 

-=  sublen; 

B 

B 

B 

prevtype  = type; 

B 

B 

> 

B 

B 

hashed 

= [hashed; 

B 

> 

while 

(!hashed);n  n n /*  Two  iterations  */ 

B 

/* 

For 

now 

we  must  have  a keyid.  We  can  Live  without  a creation  time 

B 

i f 

(keylD  S&  ! f ound_ key i d ) 

B 

B 

return 

PGPERR_SIG_BADEXTRA; 

n return  PGPERR_OK; 

> 

/* 

* Look  for  a particular  subpacket  associated  with  the  given  signature. 

* See  comments  above  for  format  of  subpackets.  Return  pointer  to  the 

* subpacket  data,  after  the  Length  and  type  field. 

* Critical  and  hashed  tell  whether  the  packet  was  critical  and/or  in  the 

* hashed  region,  respectively  (return  parameters). 

* We  don't  need  to  do  consistency  checking,  it's  already  been  checked. 

* (I  couldn't  resist  doing  a bit  anyway.) 
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* nth  should  be  set  to  0 to  find  first  match,  1 for  second,  etc. 

* Returns  number  of  matches  total  in  *pmatches. 

*/ 

byte  const  * 

r i ng S i g F i ndSubpa c ke t ( by t e const  *buf,  int  subpacktype,  unsigned  nth. 


size_t  *plen,  int  *pcritical,  int  *phashed,  word32  *pcreation, 
unsigned  *pmatches) 


Q 

unsignedn 

L e n ; n n n 

/* 

n 

unsignedn 

sublen;nn  n 

n 

/* 

D 

i nt  n n 

type;n  n n 

Q 

/* 

n 

i ntnn  n 

critical, -n  n 

n 

/* 

n 

i ntnn  n 

hashed, -nn  n 

n 

/* 

a 

unsignedn 

nmatches  = 0;n 

n 

/* 

□ 

byte  const 

*pbuf  = NULL;n 

Q 

/* 

□ 

if  (bufC0] 

< PGPVERSI0N_3) 

n 

n return 

NULL; 

a 

subpacktype 

&=  "SIGSUBF.CRITICAL 

n 

b u f + = 4 ; 

n 

hashed  = 1; 

n 

/*  Loop  twice,  once  with  hashed 

= 

True  if  parsing  hashed  subpackets  */ 


1 and  once  with  hashed  = 0 */ 


do  { 


len  = ( u n s i g n e d ) b u f [ 0 D <<8  | bufCIH; 


n 

n 

buf 

+ = 

2; 

Q 

n 

while 

(len)  { 

n 

o 

n 

i f 

(len  < 2 ) 

a 

a 

n 

c 

return  NULL; 

s 

n 

B 

/* 

Subpacket  length  may  be 

n 

o 

B 

sublen  = ( u n s i g n ed ) bu f C 0 D ; 

n 

a 

B 

i f 

(sublen  < 0xc0)  { 

□ 

a 

B 

0 

/*  sublen  is  the  length 

a 

a 

B 

0 

len  -=  1 ; 

n 

a 

Q 

0 

buf  +=  1; 

a 

a 

n 

> 

else  if  ((sublen  S 0xe0) 

n 

B 

n 

0 

sublen  &=  0x3f; 

n 

n 

□ 

0 

sublen  = (sublen  <<  8) 

n 

n 

n 

0 

len  - = 2 ; 

o 

n 

n 

0 

buf  +=  2; 

n 

n 

0 

> 

else  { 

a 

n 

0 

0 

/*  Badly  formatted  */ 

n 

n 

0 

0 

return  NULL; 

a 

n 

0 

> 

Q 

Q 

0 

if 

(len  < 1 ) 

Q 

n 

0 

0 

return  NULL; 

n 

Q 

0 

type  = bui L0J ; 

□ 

n 

0 

critical  = type  S SIGSUBF_C 

n 

n 

0 

type  &=  ■SIGSUBF_CRITICAL; 

n 

n 

0 

buf  +=  1; 

□ 

n 

0 

len  - = 1 ; 

n 

B 

0 

sublen  -=  1; 

a 

B 

0 

i f 

(type  ==  subpacktype)  ( 

a 

B 

0 

0 

/*  Hatch!  */ 

n 

B 

0 

0 

if  (nmatches  ==  nth)  { 

n 

B 

0 

0 

n if  (pcritical) 

+ C u n s i g n ed ) b u f C 1 3 + 192; 
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Q 

tt 

n 

B 

n n *pcriticaL  = critical; 

n 

tt 

B 

B 

n i f (phashed) 

n 

tt 

B 

B 

n n *phashed  = hashed; 

Q 

tt 

B 

B 

n if  (pLen) 

U 

tt 

B 

B 

n n *pLen  = sublen; 

n 

tt 

B 

B 

a pbuf  = buf ; 

u 

tt 

B 

B 

> 

n 

tt 

B 

fl 

nmatches  +=  1; 

n 

tt 

B 

> 

n 

tt 

B 

i f 

(type  ==  SIGSUB_CREATION ) C 

n 

tt 

B 

B 

pgpAssert  (sublen  ==  4); 

D 

tt 

B 

B 

if  (pcreation)  { 

tt 

tt 

B 

B 

n *pcreation  = ( wo r d3 2 ) ( ( u n s i g n ed ) bu f C 0 ] <<8 | bu f C 1 ] ) 

n 

n 

B 

B 

n n ((unsigned)bufC23<<8|bufC3D); 

tt 

tt 

B 

B 

} 

tt 

tt 

B 

> 

a 

tt 

B 

/* 

Skip  to  next  packet  */ 

tt 

tt 

B 

buf 

+=  sublen; 

tt 

tt 

B 

Len 

-=  sublen; 

tt 

tt 

> 

tt 

tt 

hashed 

= lhashed; 

tt 

> 

while 

(!hashed);n  n n /*  Two  iterations  */ 

tt 

if 

(pmatches) 

tt 

B 

*pmatches  = nmatches; 

tt 

return 

pbu  f 

;n  n n n /*  Will  be  non-null  if  we  matched  nth 

> 


/* 

* Return  the  Length  of  the  prefix  of  a secret  key  which  is  a public  key, 

* or  0 if  it  can't  be  determined.  A key's  prefix  is: 

* 0 1 - Version 

* 1 4 - Creation  time 

* 5 2 - Vaidity  period  (days) 

* 7 1 - Algorithm 

* 8 ? - A I go r i t hm- s pe c i f i c parameters 
*/ 

si ze_t 

r i ngKey Pa r sePub L i c P ref  i X ( by t e const  *buf,  size_t  Len) 

{ 

n size_t  size; 
n unsigned  vsize; 

n if  (bufC0:  ==  PGPVERSI0N_3)  { 
n n vsize=0; 

a } e L se  { 

n n vsize=2; 

n } 

n /*  Check  version  bytes  */ 

a if  ( ! KNOWN_PGP_VERSION{buf C0] ) ||  Len  < 6+vsize) 

n n return  0; 

n size  = pg pPu bKey P r e f i x S i z e ( b u f C 5+ v s i z e 3 , buf+6+vsize,  L e n-6- v s i z e ) ; 
n if  (size) 

n n size  +=  6+vsize; 

n return  size; 
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} 

i nt 

r i ngKey Pa rs e F i nge rp r i n t 1 6 ( by t e const  *kbuf,  size_t  kLen,  byte  * f i ng e r p r i n t ) 
{ 

n struct  PgpHash  const  *h; 
n struct  Pg pHa s h C on t e X t *hc; 
byte  const  *buf; 
unsigned  Len; 

n h = pg p H a s h By N umb e r ( PG P_ H A S H _n D 5 ) ; 
n if  ( ! h) 

n n return  PGPERR_BAD_HASHNUM; 

n he  = pgpHashCreate(h); 

a if  ( ! h c ) 

a n return  PG P E R R_ N OM E M ; 

buf  = r i n g Key Pa r s e M od u L u s ( kb u f , kLen,  &Len); 
if  ( ! b u f ) 

n n goto  error; 

pg p H a s h U pd a t e ( h c , buf,  Len); 

buf  = ringKeyParseExponentCkbuf,  kLen,  8Len); 
if  ( ! buf  ) 

n n goto  error; 

pgpHa s h Upda t e C h c , buf,  Len); 

n buf  = pgpHa s h F i na L ( h c ) ; 

n mem c py ( f i ng e r p r i n t , buf,  h -> h a s h s i z e ) ; 
n pgpHashDestroyChc); 

n return  h-> h a s h s i z e ; n / * Success  */ 
error: 

n pgpHashDestroy(hc); 
o memsetCfingerprint,  0,  16); 

n return  r i ngKeyPa rse C kbuf , kLen,  NULL,  NULL,  NULL,  NULL,  NULL,  0); 

n /*  PkaLg  KeylD  Key b i t T s t a mp Va L i d */ 

} 


/*  Return  the  size  which  wiLL  be  used  to  create  the  key  prefix  buffer  */ 
si z e_t 

r i ng KeyBu f f e r Leng t h ( s t r u c t PgpKeySpec  const  *ks,  byte  pkaLg) 

{ 

n (void)pkaLg; 

n if  ( pg pKey S p e cV e r s i o n ( ks ) = = PG PV E R S 1 0 N_3 ) 
n n return  6;n  /*  v e r s i o n C 1 ) + t i me s t a mp ( 4 ) +p ka L g ( 1 ) */ 

n e L s e 

n n return  8;n  /*  v e r s i o n ( 1 ) + t i me s t a mp ( 4 ) + va L i d i t y ( 2 ) +p ka L g ( 1 ) */ 

} 

/*  Create  the  key  prefix  buffer  */ 
i n t 

r i ngKeyToBuf f e r ( by t e *buf,  struct  PgpKeySpec  const  *ks,  byte  pkaLg) 

{ 

n word32  tstamp; 

n word16  vaLidity; 

n unsigned  vsize; 
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n bufCOD  = pg pKey S pe c Ve r s i o n ( ks ) ; 
n if  (bufC0:  ==  PGPVERSI0N_3)  C 
n n vsize=0; 

n } e L se  { 

n n vsize=2; 

n > 

n tstamp  = pg pKey S pe c C r e a t i o n ( k s ) ; 
n bufCID  = (byte)(tstamp>>24); 

n bufC23  = Cbyte)(tstamp>>16); 

n bufC33  = ( by t e ) ( t s t a mp>>  8); 

n bufC43  = ( by t e ) ( t s t amp  ); 

n if  (vsize)  f 

n n validity  = pgpKeySpecVaLidity(ks); 

n n bufCSD  = ( by t e ) ( va L i d i t y>>8  ) ; 

n n bufC6]  = ( by t e ) C va L i d i t y ); 

a > 

n bufC5+vsize3  = pkaLg; 
a return  0; 

} 

/*  Return  the  size  of  a prefix  buffer  for  a secret  key  */ 
s i ze_t 

r i n g S e c Bu f f e r Le n g t h ( s t r u c t PgpKeySpec  const  *ks,  byte  pkalg) 

{ 

n return  r i ng Key Bu f f e r Le ng t h ( k s , pkalg); 

} 

/*  Create  the  prefix  buffer  for  a secret  key  */ 
i nt 

r i ng S e c ToBu f f e r ( by t e *buf,  struct  PgpKeySpec  const  *ks,  byte  pkalg) 
{ 

n return  ringKeyToBufferCbuf,  ks,  pkalg); 

> 


/* 

* Local  Variables: 

* t a b-w i d t h : 4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpRngPars.h 

★ 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg pR n g Pa r s . h , V 1.5. 2.1  1 997/06/07  09:50:38  mhw  Exp  $ 

*/ 

#ifndef  PGPRNGPARS_H 
#define  PGPRNGPARS_H 

#incLude  <stddef.h>n  /*  For  size_t  */ 

#incLude  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e nd i f 

struct  PgpKeySpec; 

int  r i ng Key  Pa r s e ( by t e const  *buf,  size_t  Len,  byte  *pkaLg,  byte  keyIDC83, 
a word16  *keybits,  word32  *tstamp,  word16  *vaLidity,  int  secretf); 

size_t  r i n g Key Pa r s e Pu b L i c P r e f i X ( by t e const  *buf,  size_t  Len); 

byte  const  * r i ng Key Pa r s e Modu L u s ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp); 
byte  const  * r i n g Key Pa r s e E xpon e n t ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp); 

int  r i ng Key  Pa r s e F i n g e r p r i n 1 1 6 ( by t e const  *kbuf,size_t  kLen,  byte  * f i n g e r p r i n t ) ; 
int  r i ng  S i g Pa  r s e ( by  t e const  *buf,  size_t  Len,  byte  *pkaLg,  byte  keyIDC8Il, 
n word32  *tstamp,  uord16  *vaLidity,  byte  *type,  byte  *hashaLg, 

Q size_t  *extraLen,  byte  *version); 

byte  const  * r i ng S i g Pa r s e E x t r a ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp); 
byte  const  * r i ng S i g Pa r se I n t ege r ( by t e const  *buf,  size_t  Len,  unsigned  *Lenp); 
byte  const  * r i n g S i g F i n d S u bpa c ke t ( by t e const  *buf,  int  subpacktype, 
n unsigned  nth,  size_t  *pLen,  int  *pcriticaL,  int  *phashed, 

n word32  *pcreation,  unsigned  *pmatches); 

size_t  r i ngKey Buf f e r Leng t h C s t r u c t PgpKeySpec  const  *ks,  byte  pkaLg); 
int  r i ng  KeyToBu  f f e r ( by  t e *bu'f,  struct  PgpKeySpec  const  *ks,  byte  pkaLg); 
size_t  ringSecBufferLengthCstruct  PgpKeySpec  const  *ks,  byte  pkaLg)  ; 
int  ringSecToBufferCbyte  *buf,  struct  PgpKeySpec  const  *ks,  byte  pkaLg); 

#ifdef  __cpLuspLus 

> 

# e nd i f 

#endif  /*  PGPRNGPARS  H */ 


[CCHK:645f6811d9922552733ee046fdd9fb3e9d8ff8e4dd57bb450bdd29]: 


900 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngPkt.c 


/* 

* pgpRngPkt.c  — Low-LeveL  keyring  packet  handling  routines. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by  CoLin  Plumb. 

* 

* $Id:  pgpRngPkt . c,v  1.4. 2.1  1997/06/07  09:50:38  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e  n d i f 


#incLude  <stdio.h> 

^include  <string.h>n  /*  For  memsetC)  and  memcmpC)  */ 


# i n c L ude 
^include 
# i n c L ude 
# i n c I ud e 
//include 
#i n c L ude 


"pgpDebug . h” 
"pgpPktByte  . h 
"pgpRngPkt . h" 
"pgpErr . h" 
"pgpUsuals.h" 
"pgpFi Le.h" 


#ifndef  NULL 
//def  i ne  NULL  0 
#end i f 


//ifdef  DEADCODE 


char 

□ 

n 

□ 

n 

□ 

a 

a 

□ 

a 

□ 

n 

□ 

n 

D 

□ 

D 


const 
"0 
"1 
"2 
"3 
"4 
"5 
"6 
"7 
"8 
"9 
"A 
"B 
"C 
"D 
"E 
" F 


>; 

//e nd i f 


* const  pa c ke t _ t y p e C 1 6 3 = { 
Unknown  packet  type". 
Public-key  encrypted  packet". 
Signature  packet". 

Unknown  packet  type". 

Unknown  packet  type". 

Secret  key". 

Public  key " , 

Unknown  packet  type". 
Compressed  packet". 
Conventional-key  encrypted". 
Unknown  packet  type". 

Literal  packet". 

Trust  packet". 

Key  name  packet". 

Comment  packet". 

Unknown  packet  type" 


/* 

* Returns  packet  byte,  0 on  normal  EOF,  or  error  code  < 0. 
*/ 
i n t 

pktByteGet ( St ruct  PgpFile  *f,  word32  *lenp,  word32  *posp) 

C 

n byte  pktbyte; 

n byte  buf4C4]; 

n word32  len=0; 
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□ 

i f 

( posp ) { 

Q 

n 

*po  s p 

= pgpFileTeLLCf); 

Q 

□ 

if  (*posp  ==  (word32)-1) 

D 

n 

n 

return  PG P E R R_KE Y I 0_ F T E L L; 

El 

> 

n 

i f 

( pgp F i L eRea d ( 8p k t by t e , 1,  f)  !=  1) 

a 

B 

return 

pgpFi LeErrorCf  ) ? PG P E R R_KE Y 1 0_R E A D I N G 

: 0; 

n 

•if 

(IS 

_OLD_PKTBYTE(pktbyte)  ) ( 

Q 

n 

s H i t c h ( PKTB YT E_ L L E N ( p k t by t e ) ) { 

El 

n 

case 

3: 

n 

n 

n 

/*  Indeterminate  Length,  can 

' t handle 

that  yet 

n 

n 

n 

return  PG P E R R_KE Y I 0_B A D PKT ; 

n 

n 

case 

2 : 

□ 

n 

B 

if  ( pg p F i L e Read ( buf 4,  4,  f) 

II 

n 

□ 

B 

n gotoerror; 

n 

El 

B 

len  = C wo r d32  ) bu f 4 C 03<<24  | 

(word32)buf4:i3«16 

n 

n 

B 

n (word32)buf  4[2:«8  | 

(word32)buf4C33; 

n 

n 

B 

break; 

n 

n 

case 

1 : 

n 

n 

B 

if  ( pg p F i L e Read ( buf 4,  2,  f) 

!=  2) 

n 

n 

B 

n gotoerror; 

n 

n 

B 

Len  = ( wo r d3 2 ) b u f 4 C 0 3 <<8  | ( wo r d32  ) b u f 4 C 1 3 ; 

n 

□ 

n 

break; 

n 

B 

case 

0: 

D 

B 

n 

if  ( pg p F i L e Rea d ( bu f 4 , 1,  f) 

! = 1) 

a 

n 

n 

n gotoerror; 

n 

□ 

□ 

Len  = (word32)buf4C03; 

a 

n 

□ 

break; 

s 

□ 

> 

n 

> 

else 

if  (IS_ 

NEW_PKTBYTE(pktbyte) ) { 

n 

□ 

if  ( pg p F i L e R ea d C b u f 4 , 1,  f)  !=  1) 

n 

n 

n 

goto  error; 

Q 

Q 

L e n = 

(word32)buf4:03; 

n 

n 

if  (Len  < 0xc0)  { 

n 

n 

B 

/*  Len  is  the  Length  */ 

n 

n 

} else 

if  ((Len  & 0xe0)  ==  0xc0)  < 

n 

Q 

n 

Len  8=  0x3f ; 

Q 

n 

D 

if  ( pgp F i L e Read ( buf 4,  1,  f) 

! = 1 ) 

n 

Q 

n 

n gotoerror; 

o 

□ 

n 

Len  = (Len  <<  8)  + ( wo r d32 ) bu f 4 E 0 3 + 

1 92; 

n 

B 

> else 

{ 

n 

B 

n 

/*  Indeterminate  Length,  can 

' t handle 

that  yet 

n 

B 

n 

return  PG P E R R_KE Y I 0_B A D PKT ; 

n 

B 

> 

a 

y 

else 

□ 

B 

return 

PGPERR_KEYIO_BADPKT; 

a 

* L enp  • 

= Len; 

a 

return 

(int)pktbyte; 

error: 

u 

i f 

( tpgpFi LeError(f)) 

a 

B 

return 

PGPERR_KEYI0_E0F; 

a 

pgpFi LeCLearError(f); 

u 

return 

PGPERR_ 

KEYI0_READING; 

> 
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/* 


c 


* Returns  the  number  of  bytes  which  will  be  output  by  pktBytePut  with  the 

* corresponding  args. 

*/ 

i n t 


pktByteLen 

(byte  pktbyte,  word32  len) 

n 

i f 

( IS_0LD_PKTBYTE (pktbyte ) ) { 

n 

B 

/*  "Promote"  packet  byte  lien  field 

a 

B 

/*  i f 

necessary  to  accomodate  length 

n 

B 

if  (len  ==  0xf f f f f f f ) { 

n 

B 

B 

pktbyte  |=  3; 

B 

B 

> else 

if  (len  > 0xffff)  { 

B 

B 

B 

if  (!(pktbyte  & 2)) 

B 

B 

B 

n pktbyte  = (pktbyte  & 

B 

B 

} else 

if  (len  > 0xff)  { 

B 

B 

B 

if  ((pktbyte  S 3)  ==  0) 

B 

B 

B 

n pktbyte  |=1; 

B 

B 

> 

B 

B 

s w i t c h ( p k t by t e & 3)  { 

B 

B 

case 

3 : 

B 

B 

B 

return  1; 

B 

B 

case 

2 : 

B 

B 

B 

return  5; 

B 

B 

case 

1 : 

B 

B 

B 

return  3; 

B 

B 

case 

0: 

B 

B 

B 

return  2; 

B 

B 

> 

B 

> 

else  { 

B 

B 

pgpAssert(IS_NEW_PKTBYTE(pktbyte)); 

B 

fl 

if  (PKTLEN_ONE_BYTE(  len) ) ( 

B 

B 

B 

return  2; 

B 

B 

> else 

{ 

B 

B 

B 

return  3; 

B 

B 

> 

B 

> 

B 

B 

/* 

Avoid  warning  */ 

B 

pgpAssert(0); 

B 

return  0; 

■3)  I 2; 


/* 

* Returns  the  packet  byte  actually  written,  whose  lien  field  may  be  greater 

* than  the  one  passed  in,  but  will  not  be  less,  or  error  code  < 0. 

*/ 

i n t 

p k t By t e Pu t ( s t r u c t PgpFile  *f,  byte  pktbyte,  word32  len) 

{ 

n byte  buf4C4D; 

n unsigned  lien; 


c 


if  (IS_OLD_PKTBYTE(pktbyte)  ) { 

n /*  "Promote"  packet  byte  lien  field  */ 

n /*  if  necessary  to  accomodate  length  */ 

n if  (len  ==  Oxfffffff)  { 
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□ 

n 

B 

pktbyte  |=  3; 

n 

n 

} 

e L s e 

if  (Len  > 0xffff)  ( 

n 

a 

B 

if  (!(pktbyte  S 2)) 

n 

n 

B 

n pktbyte  = (pktbyte  8 ~3)  | 2; 

n 

□ 

} 

e L se 

if  (Len  > 0xff)  ( 

n 

n 

B 

if  ((pktbyte  8 3)  ==  0) 

Q 

B 

B 

n pktbyte  |=1; 

a 

B 

> 

u 

B 

i f 

C pg p F i L e W r i t e ( &p k t by t e , 1,  f)  !=  1) 

a 

B 

B 

return  PG P E R R_KE Y I 0_W R I T I NG ; 

a 

B 

s w i t c h ( p k t by t e & 3)  C 

□ 

B 

case 

3: 

a 

B 

B 

/*  no  Length  fieLd  */ 

n 

B 

B 

break; 

n 

fl 

case 

2 : 

u 

B 

B 

buf4C0D  = (byte)(Len  >>  24); 

n 

B 

B 

buf4C1]  = (byte)(Len  >>  16); 

n 

B 

B 

buf4C2]  = (byte)(Len  >>  8); 

n 

B 

B 

buf4[3]  = (byte)(Len  ); 

n 

B 

B 

if  ( pg p F i L e W r i t e C buf 4,  4,  f)  !=  4) 

n 

B 

B 

n return  PG P E R R_K E Y I 0_ W R I T I NG ; 

□ 

B 

fl 

break; 

n 

B 

case 

1 : 

n 

B 

B 

buf4C0D  = (byte)(Len  >>  8); 

n 

B 

B 

buf4C1]  = (byte)(Len  ); 

n 

B 

B 

if  ( pgp F i L eW r i t e ( bu f 4,  2,  f)  !=  2) 

n 

B 

fl 

a return  PG P E R R_KE Y I 0_ W R I T I NG ; 

n 

B 

B 

break; 

□ 

B 

case 

0: 

n 

B 

B 

buf4C0]  = (byte)Len; 

n 

B 

fl 

if  ( pg p F i L e W r i t e ( b u f 4 , 1,  f)  !=  1) 

n 

B 

B 

n return  PG P E R R_KE Y I 0_ W R I T I NG ; 

n 

B 

fl 

break; 

n 

B 

> 

n 

> e L s e 

{ 

pgpAssertCIS_NEW_PKTBYTE(pktbyte)); 
buf4C03  = (byte)pktbyte; 
if  (PKTLEN  ONE  BYTE(Len))  { 


else  { 


bufACi:  = 
I L en  = 2; 

bufACi:  = 
buf4C2]  = 
I Len  = 3; 


PKTLEN_1 BYTEC  Len); 


□ 

D 
> 
a 
n 

D 

> 

if  ( pgp F i L eW r i t e C buf 4,  LLen,  f)  !=  ILen) 
n return  PG PE R R_KE Y I 0_W R I T I NG ; 


PKTLEN_BYTE0( Len)  ; 
PKTLEN_BYTE1 (Len); 


return  pktbyte; 


* Compare  data  from  a fiLe  to  a suppLied  buffer,  returning  < 0 

* on  a read  error,  0 on  equaL,  and  1 on  unequaL. 

*/ 

i nt 
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f i L eUnequa L Buf ( s t rue t PgpFiLe  *f,  char  const  *buf,  size_t  Len) 
{ 

n char  buf2C2563; 

n s i ze_t  amount  ; 


n 

while 

(Len)  { 

n 

n 

amount  = Len  < 

sizeof(buf2)  ? 

Len 

: sizeof(buf2); 

n 

n 

amount  = pg p F i L e R e a d ( bu f 2 , amount 

, f); 

n 

a 

if  ( ! amount ) 

n 

n 

n return 

pgpFi LeError(f) 

7 

PGPERR 

_KEYI0_ 

READING 

n 

n 

n n 

n 

: 

PGPERR 

_KEYI0_ 

EOF; 

n 

n 

if  ( mememp ( buf , 

buf2,  amount) 

! = 

0) 

D 

a 

n return 

1; 

n 

u 

Len  -=  amount ; 

n 

n 

buf  +=  amount ; 

return  0;n 


/*  Hatch  */ 
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/* 

* pgpRngPkt.h  --  Low-LeveL  pa c ke t - h a n d L i ng  routines  for  keyring  management. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg p Rn g P k t . h , V 1.3. 2.1  1997/06/07  09:50:38  mhw  Exp  $ 

*/ 

#ifndef  PGPRNGPKT.H 
^define  PGPRNGPKT.H 


SincLude  "pgpUsuaLs.h 

#ifdef cpLuspLus 

extern  "C"  { 

#end  i f 


struct  PgpFiLe; 

#ifdef  DEADCODE 

extern  char  const  * const  packet. typeCldT; 
#endif  /*  DEADCODE  */ 


int  p k t By t eG e t ( s t r u c t PgpFiLe  *f,  word32  *Lenp,  word32 
int  p kt By t e Pu t ( s t r u c t PgpFiLe  *f,  byte  pktbyte,  word32 
int  pktByteLen  (byte  pktbyte,  word32  Len); 
int  f i LeUnequa LBuf ( St ruct  PgpFiLe  *f,  char  const  *buf. 


*posp  ) ; 

L e n ) ; 

size.t  Len); 


#ifdef  ..cpLuspLus 

> 

# e n d i f 


#endif  /*  PGPRNGPKT.H  */ 


CCCHK:6eb41b8077bb7e22337633df01137ee5d39a05e:] 
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/* 

* pgpRngPriv.c  --  Private  helper  functions  for  keyring  manipulation. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by  Colin  Plumb. 

★ 

* $Id:  pg pRn g P r i V . c , V 1.13.2.3  1997/06/07  09:50:39  mhw  Exp  $ 

*/ 


#if  HAVE  CONFIG  H 


# i n c 1 ude 

#end i f 

"config. h" 

t/include 

<errno.h> 

# i n c 1 u d e 

<string.h> 

ttinclude 

<stdio.h> 

^include 

"pgpDebug . h" 

#i nc lude 

"pgpPktByte.h" 

#include 

" pgpRng  P r i V . h " 

ttinclude 

"pgpRngRead.h"nn 

# i n c 1 ude 

"pgpT  rstPkt . h" 

ttinclude 

"pgpHash.h" 

# i n c 1 ude 

"pgpEnv . h" 

#include 

"pgpErr.h" 

# i n c 1 ude 

"pgpHem. h" 

ttinclude 

"pgpSi gSpec . h"n/*  for 

# i n c 1 ude 

"pgpTrust.h" 

# i n c 1 ude 

"pgpUsuals.h" 

/*  For  r i ng F i I e Pu r g eT r ou b I e */ 


PGP  SIGTYPE  */ 


#i f ndef  NULL 
^define  NULL  0 
#endi f 


^define  PGP_TRUST_DECADE_INTERNAL  ( PG P_T RU S T_ D E C A D E >>  6) 

^define  PG P_TRU S T_0 C T A VE_I NT E RN A L ( PGP_TRUST_OCTAVE  >>  6) 

/* 

* Small  helpers  to  report  errors 
*/ 

/*  Report  an  general  I/O  error  */ 
void 

r i ng E r r ( s t r u c t RingFile  *file,  word32 
{ 

a struct  RingError  *err  = Sfile 

n e r r->f  = file; 

a err->fpos  = pos; 

a err->error  = code; 

n e r r->sy s e r r no  = errno; 

} 

/*  Report  a non-I/O  error  */ 
vo  i d 

r i ng S i mp I eE r r ( s t r u c t RingPool  *pool, 

C 

n pool->e.f  = (struct  RingFile 

n pool->e.fpos  = (word32)-1; 

EECHK: 65a0f bc748add1 477cab41 b60805f f b2aa1448c38f 9777e95333cf a3f 5d908679:: 
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Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


907 


pgpRngPriv.c 


n pooL->e. error  = code; 

n poo L ->e . s y s e r r n o = errno; 


/*  Report  an  allocation  failure  (called  from  many  places)  */ 
void 

r i n g A I I o c E r r ( s t r u c t RingPool  *pool) 

{ 

n r i n g S i mp I e E r r ( poo  I , PG P E R R_N0H E H ) ; 

> 


/* 

* 

* 

* 

* 

* 

* 

* 


* 

* 

*/ 


Hash  a string  of  bytes.  Uses  the  CRC-32  polynomial,  preset 
to  -1,  non-invert.  Used  to  reduce  userlD  collisions  and  to 
create  a fake  keylD  for  unparseable  keys. 

CRC-32  polynomial  in  little-endian  order: 

1+x  + x^2  + x''4  + x'‘5  + x''7  + x''8  + x''10  + x''11+x'‘12  + x''16  + x''2  2 + x''2  3 + x''2  6 + x''3  2 
1 1 2 2 2 3 

048260482 
= 111011011011100010000011001000001 
= edb88320 

= 0xedb88320 


^define  CRCPOLY  0xedb88320 
wo  rd32 

r i ng Ha s hBu f ( by t e const  *buf,  size_t  len) 
{ 

n word32  crc; 

a i n t i , j ; 

n static  word32  c r c t a b I e C 2 5 6 D ; 

n if  ( ! c r c t a b I e C 2 5 5 D ) { 


a 

n 

/*  crctableC0D  is  already  0 */ 

a 

Q 

crctableC1283  = crc  = CRCPOLY; 

a 

n 

i = 64; 

a 

n 

do  t 

o 

n 

s 

crc 

- crc>>1  * (crc  & 1 ? CRCPOLY  : 0); 

a 

n 

□ 

for 

(j  = 0;  j < 256;  j +=  2*i) 

a 

D 

n 

n 

c r c t a b 1 e C i + j D = crc  * crctableCjD; 

a 

□ 

} while 

( i 

>>=  1 ) ; 

a 

> 

a 

crc  = 

0xf f f f f f f f 

r 

a 

while 

( 1 en — ) 

n 

□ 

crc  = (crc 

>>  8)  ^ c r c t a b 1 e C ( c r c *buf  + +)  & 255]; 

n 

return 

crc; 

/* 

★ 

★ 

★ 

ic 

* 

it 

it 

it 


Return  the  index  of  the  least  significant  bit  in  the  given  mask, 
or  -1  if  the  mask  is  all  0.  This  uses  (almost)  no  branches, 
so  should  be  nice  and  fast  on  modern  processors. 

Oh,  how  does  it  *work*,  you  ask?  I do  confess  that  this  uses 
two  evil  bit-twiddling  tricks.  The  first  is  one  to  get  a mask 
of  the  least-significant  set  bit  in  few  instructions. 

Consider  a binary  number  x,  be  it  11010000  or  00101111. 
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* 

* 

ic 

★ 

•k 

•k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

*/ 


Then  think  about  the  form  of  x-1,  11001111  or  00101110. 

Notice  that  the  only  difference  is  that  some  L ea s t -s i g n i f i c a n t 
bits  have  been  complemented.  The  bits  complemented  are 
those  up  to  and  including  the  I ea s t -s i g n i f i c a n t set  bit. 

(x+1  does  the  same  with  *clear*  bits).  So  ANDing  the  two 
results  in  a number  like  the  original,  only  without  the 
I ea s t -s i g n i f i c a n t set  bit.  XORing  them  produces  a mask 
with  a number  of  I ea s t -s i g n i f i c a n t bits  set,  depending  on 
the  I ea s t - s i g n i f i c a n t set  bit,  00011111  or  00000001. 

Other  tricks:  x S (x-1)  returns  x,  but  with  the  I ea s t -s i g n i f i c a n t 
bit  cleared.  Twos  complement  negation  is  -x  = ~x+1  = “(x-1), 
so  X & -X  = X 8 “(x-1)  returns  only  the  I e a s t - s i gn i f i c a n t bit 
set  in  X . 


All  we  need  is  a routine  to  count  the  bits,  and  we're  done. 
This  is  the  *second*  trick.  Consider  an  8-bit  word: 
+-+-+-+-+-+-+-+-+ 


|a|b|c|d|e|f|g|h| 


+-+-+-+-+-+-+-+-+ 

Now  copy  this  word,  shift  one  copy  down  one  bit,  and  AND  both 
copies  with  0x55  (01010101),  to  produce  even  and  odd  bits: 
+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 


I |b|  |d|  |f|  |h|  I |a|  |c|  |e|  |g|  (the  blank  squares  are  zero) 


+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 
Then  add  the  words  together: 
+-+-+-+-+-+-+-+-+ 

I a + b I c + d I e + f | g + h | 

+-+-+-+-+-+-+-+-+ 

Note  that  each  two-bit  field  contains 
bits  set  in  that  part  of  the  original 
+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 
1 |c+d|  |g+h|  + I |a+b|  |e+f| 

+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 
and  once  more  produces: 
+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 
I |e+f+g+h|  + I |a+b+c+d| 

+-+-+-+-+-+-+-+-+  +-+-+-+-+-+-+-+-+ 


a count  of  the  number 
word.  Repeating  this 
+-+-+-+-+-+-+-+-+ 

= I a+b+c+d I e+f +g+h I 
+-+-+-+-+-+-+-+-+ 

+-+-+-+-+-+-+-+-+ 

= I a + b+c  + d + e + f + g + h I 
+-+-+-+-+-+-+-+-+ 


of 

produces: 


Ther  masking  is  needed  so  that  fields  don't  overflow  into 

adjacent  fields.  Once  the  fields  have  gotten  wide  enough, 

some  of  it  can  be  reduced  or  eliminated.  In  the  last  step, 

ab+c+d  and  e+f+g+h  are  both  at  most  4 (binary  100)  and 

their  sum  is  at  most  8 (binary  1000),  which  still  fits  into  a 

4-bit  field,  so  it  is  possible  to  not  mask  the  inputs  to 

the  addition.  It's  still  necessary  to  mask  the  output,  though, 

since  the  next  step  (adding  up  to  a maximum  of  16)  won't 

fit  into  a 4-bit  field.  Once  you  have  an  8-bit  field,  though, 

you  can  stop  masking  until  the  very  end  unless  you  have  a 

256-bi t word . 


i n t 

r i ng LsB i t F i nd ( r i ngma s k mask) 


n 

□ 

n 

#i  f 


if  (!mask) 
n return-1; 

mask  mask-1;n/*  Number  of  bits  set 

RINGMASKBITS  > 32 


is  position  of 


Isbi t + 1 */ 
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n mask  = (mask  8 0x5555555555555555)  + (mask  >>  1 8 0x5555555555555555); 

o mask  = (mask  8 0x3333333333333333)  + (mask  >>28  0x3333333333333333); 

n mask  = (mask  + (mask  >>  4))  8 0x0 F0 F0 F0 F0 F0 F0 F0 F ; 

n mask  +=  mask  >>  8; 

a mask  +=  mask  >>  16; 

n mask  +=  mask  >>  32; 

n return  (int)(mask  8 255)-1; 

#eLif  RINGMASKBITS  > 16 

n mask  = (mask  8 0x55555555)  + (mask  >>  1 8 0x55555555); 

n mask  = (mask  8 0x33333333)  + (mask  >>28  0x33333333); 

n mask  = (mask  + (mask  >>  4))  8 0X0F0F0F0F; 

n ma  s k +=  ma  s k >>  8; 

n mask  +=  mask  >>  16; 

n return  (int)(mask  8 255)-1; 


#eLif 

RINGMASKBITS  > 

8 

n 

mask  = 

(mask 

8 0x5555)  + (mask  >> 

1 

8 0x5555); 

n 

mask  = 

(mask 

8 0x3333)  + (mask  >> 

2 

8 0x3333); 

n 

mask  = 

(mask 

+ (mask  >>  4) ) 8 0X0F0F 

r 

Q 

mask  += 

mask 

>>  8; 

□ 

return 

(int)(mask  8 255)-1; 

#e  L se 

n 

mask  = 

(mask 

8 0x55)  + (mask  >>  1 

8 

0x55); 

n 

mask  = 

(mask 

8 0x33)  + (mask  >>  2 

8 

0x33 ) ; 

□ 

mask  = 

(mask 

+ (mask  >>  4))  8 0x0F 

r 

n 

return 

(int)(mask  - 1); 

#end i f 

> 

/* 

* Return  the  mask  of  bits  which  are  actually  in  use,  excepting  the 

* given  RingSet,  if  non-null.  I.e.  the  mask  which  would  be  in  use 

* if  that  RingSet  were  discarded.  RingFile  structures  are  not 

* included  on  the  sets  list,  so  they  are  accounted  for  in  the 

* poo  I -> f i I ema s k . 

*/ 

ringmask 

r i ng A I I o cHa s k ( s t r u c t RingPool  const  *pool,  struct  RingSet  const  *set0) 

{ 

n struct  RingSet  const  *set; 

n ringmask  mask  = poo  I -> f i I ema s k ; 

n for  (set  = pool -> sets;  set;  set  = set -> next) 

a a mask  |=  set->mask; 

n if  (set0)n  n /*  set0  may  or  may  not  be  on  the  sets  list  */ 

n n mask8=~set0->mask; 

n return  mask; 

} 

/*  Helper  function  for  r i ng Ga r ba g e C o I I e c t */ 
r i ngma  s k 

r i ng C I ea r Ma s k ( s t r u c t RingPool  *pool,  union  RingObject  **objp,  ringmask  mask) 
i 

n union  RingObject  *robj; 

n ringmask  omask; 

n ringmask  remmask  = 0; 

n while  ((robj  = *objp)  !=  (union  RingObject  *)  0)  f 

n omask  = robj->g.mask  8=  mask; 
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i f 


/* 


( ! OBJ ISBOT( rob j ) ) 

remmask  |=  ringCLearMaskCpooL,  &robj->g.down,  mask); 
Skip  dummy  objects  ( rob j ->g . ma s k ==  0),  but  delete 
objects  that  are  only  in  the  memory  ring.  Also  skip 


la 

tt 

keys  which  must  be  kept  as  dummy  keys 

(because  they've 

□ 

a 

signed  something).  */ 

n 

if  ( r 0 b j ->g . ma s k S&  ! ( oma s k8 “M EHR I NG M AS K ) 

&& 

Q 

n 

! ( OB J I SKE Y ( rob j ) &&  rob j ->k . s i g sby  ! = 

NULL) ) 

{ 

n 

a 

/* 

n 

n 

* Delete  no- 1 o ng e r-u s ed  object. 

n 

n 

* This  does  not  free  the  memring  data 

area. 

however  it  will 

n 

n 

* be  reclaimed  in  r i ng Ga r ba g e C o 1 1 e c t 

once  no 

objects  are  using 

n 

H 

* that  area. 

n 

n 

* 

a 

n 

*/ 

□ 

pg p Asse r t ( OB J I SBOT ( rob j ) ||  ! r ob j ->g . d o w n ) ; 

Q 

n 

*objp  = robj->g.next; 

n 

Q 

r i ng F reeOb j e c t ( poo  1 , robj); 

n 

} 

Q 

else  { 

n 

/*  Skip  to  next  object  */ 

remmask  |=  omask; 
objp  = &robj->g.next; 


return  r emma  s k ; 


/* 

* Reclaim  all  unused  bits  and  delete  any  unreferenced  memory  objects. 
*/ 
i n t 

r i ngGa rbageCo I I e c t ( s t rue t RingPool  *pool) 

{ 

n ringmask  mask; 


n 

D 

n 

n 

D 

□ 

n 

a 

D 

n 

D 

n 

n 

a 

□ 

> 


/*  Build  sig  lists  so  we  know  which  keys  act  as  signers. 

These  should  be  left  as  dummy  keys  rather  than  freed, 
r i ng Poo  I L i s t S i g sBy  (pool); 

mask  = r i ng A I I ocMa s k ( poo  I , (struct  RingSet  const  *)NULL); 
if  (mask  !=  poo  I ->a I I o cma s k ) ( 
n 
n 
n 

D 

n 
a 
n 
□ 

} 


*/ 


poo  I ->a I I o c ma s k = mask; 

mask  = r i ng C I ea r Ma s k ( poo  I , &pool->keys,  mask); 
if  (Krnask  & M EH  R I NGH  A S K ) ) ( 

memPoolEmpty(6pool->filesCHEMRINGBIT3. strings); 
memPoolEmpty(&pool->fi lesCHEHRINGBIT3 . fpos) ; 
pool->f i lesCHEMRINGBIi: . f reepos  = NULL; 
return  1;n  /*  Something  freed  */ 


return  0;n 


/*  Nothing  freed  */ 


/*  Remove  a single  key  from  its  hash  chain  */ 
static  void 

r i ngGa r bag e Ha c kKey ( s t r u c t RingPool  *pool,  struct  RingKey  *key) 
{ 

n struct  RingKey  **keyp; 


CCCHK: 1 651 081 78979a0ae88bfce1  951  22eb5029bb3b59f3900556b02220c170a3c2 8773: 


Pretty  (5ood  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


911 


pgpRngPriv.c 


□ 

n keyp  = &poo L ->h a s h t a b L e C key-> key  I D C 0 U 3 ; 

a while  (*keyp  !=  key)  { 

n n pg p A s s e r t ( * key p ) ; 

D n keyp  = 8 ( * key p ) -> u t i L ; 

n } 

n *keyp  = key->utiL; 

} 


/*  Remove  a single  signature  from  its  sigsby  list  */ 
static  void 

r i ng G a r ba g e H a c kS i g ( s t r u c t RingSig  *sig) 

{ 

n struct  RingKey  *key; 

n struct  RingSig  **sigp; 

□ 

n key  = 8sig->by->k; 

n pg p A s s e r t ( KE  Y I S KE  Y ( key  ) ) ; 


a / * 

n * This  could  be  one  loop  but  for  type  rules,  sigh... 

n * The  problem  doesn't  happen  often,  fortunately, 

n * (The  single  loop  can  be  expressed  in  C using  the 


n 

★ 

cheat  sigp  = (struct  RingSig  **)8key->sigsby; 

but 

n 

* 

while  that's  portable  in  practice,  we  eschew 

i t 

□ 

★ 

for 

the  sake  of  ANSI  C purity.) 

n 

*/ 

u 

if 

( 8key->s i g s by->s  ==  sig)  ( 

n 

□ 

key->sigsby  = (union  RingObject  * ) s i g ->nex t by ; 

n 

} else 

{ 

n 

n 

sigp  = 8 key-> s i g s by-> s . n ex t by ; 

n 

n 

while  (*sigp  !=  sig) 

□ 

n 

n sigp  = 8 ( * s i g p ) ->n e X t by ; 

□ 

n 

*sigp  = sig->nextby; 

□ 

y 

} 

/* 

* Delete  a single  object  from  the  global  pool  if  it  is  an  unreferenced 

* memory  object. 

*/ 

void 

r i ng G a r ba g e C o I I e c t Ob j e c t C s t r u c t RingPool  *pool,  union  RingObject  *robj) 
{ 

n union  RingObject  **objp; 


D 

□ 

n 

Q 

□ 

□ 

□ 

Q 

Q 

□ 


if  ( rob j ->g . mask  ==  HEHRINGHASK)  { 
n pg pAs s e rt (! rob j ->g . down  ) ; 

n objp  = OBJISTOP(robj)  ? 8pool->keys  : 8robj->g.up->g.down; 

n while  (*objp  !=  robj)  ( 

n n p g p A s s e r t ( *0 b j p ) ; 

n n objp  = 8(*objp)->g.next; 

n > 

n *objp  = rob j ->g . next ; 

n if  (OBJ  I SKEY( rob j ) ) 

n n r i n g Ga r ba g e H a c kKey ( poo  I , 8robj->k); 
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n n else  if  ( OB J I S S I G ( rob j ) ) 

n n n ringGarbageHackSig(&robj->s); 

n n r i ng F reeOb j e c t ( poo L , robj); 

n > 

} 


i n t 

r i ng B i t A L L o c ( s t r u c t RingPooL  *pooL) 
n ringmaskmask; 


n 

/* 

Allocate  a new  bit  */ 

a 

mask 

= ~pool->allocmask; 

n 

i f 

( ! 

! ma  s k ) 

{ 

a 

n 

/* 

Wups,  out  of  bits  - try 

something  before  dying 

n 

n 

r i 

ngGarbageCol  lectCpool); 

n 

a 

mask  = “ poo  1 ->a 1 1 0 cma s k ; 

a 

B 

i f 

( ! ma  s k ) f 

a 

B 

n 

ringSimpleErrCpool, 

PGPERR_NO_KEYBITS ) ; 

a 

B 

D 

return  PG P E R R_N0_KE YB I T S ; 

n 

B 

> 

return  r i ng Ls B i t F i nd ( ma s k ) ; 


/* 

* Allocate  and  deallocate  useful  structures. 

* Note  the  interesting  shenanigans  used  to  allocate 

* a structure  the  alignment  of  an  enclosing  union,  ensuring 

* that  even  on  a ma x i ma I I y-pe r ve r s e ANSI  C implementation, 

* it  is  safe  to  cast  the  returned  structure  pointer  to  a union 

* pointer. 

*/ 


uni  on  Ri ngObject  * 

r i ngNewOb j ec t ( s t r u c t RingPool  *pool,  int  objtype) 
{ 


D 

□ 

n 

□ 

n 

□ 

n 

n 

□ 

D 

D 

n 

a 

□ 

n 


union  RingObject  *robj; 

/*  How  to  initialize  each  object  to  empty  */ 
static  struct  RingKey  const  nullkey  = NULLRINGKEY; 

static  struct  RingSec  const  nullsec  = NULLRINGSEC; 

static  struct  RingName  const  nulLname  = NULLRI NGN AHE; 
static  struct  RingSig  const  nullsig  = NULLRINGSIG; 

static  struct  RingUnk  const  nullunk  = NULLRINGUNK; 

static  void  const  *nu  I I o b j s C R I N GT  Y PE_f1  AX  D = { 
n &nullkey,  &nullsec,  Snullname,  Snullsig,  Snullunk 

>; 

size_t  const  s i z e s C R I N GT Y P E_H AX D = { 

n s i z e o f ( s t r u c t RingKey),  s i z eo f ( s t r u c t RingSec), 

n s i z e o f ( s t r u c t RingName),  s i z eof ( s t r u c t RingSig), 

n s i z e o f ( s t r u c t RingUnk) 

>; 


n /*  Object  types  are  1-based  */ 

n pg p As s e r t ( ob j t y pe  > 0); 

n pg p As s e r t ( ob j t y p e <=  R I N GT Y P E_M A X ) ; 


n robj  = poo  I -> f r ee o b j s C o b j t y p e-1 D ; 

n if(robj){ 
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Q 

□ 

pool 

->freeobjsCobjtype-1D 

= robj ->g. next; 

n 

> else 

{ 

n 

n 

robj 

= (union  RingObject  *) 

n 

n 

n 

memPooLAl Loc(SpooL 

->structs,  s i z e s C 0 b j t y p e- 

□ 

Q 

n 

n a L i g no f ( u n i on  RingObject)); 

n 

n 

i f ( 

! rob  j ) { 

a 

n 

n 

ringALlocErr(pooL) 

/ 

n 

a 

□ 

return  NULL; 

n 

n 

} 

□ 

> 

n 

memcpyC  robj  , 

nuLLobjsCobjtype-l], 

sizesCobjtype-13); 

n 

pgpAssertlri 

n g Ob j e c t Ty p e ( r ob j ) = = 

objtype); 

a 

return 

rob  j ; 

> 

/* 

* Free  an  object.  This  does  not  do  any  cleanup  with  any  pointers  in  the 

* object. 

*/ 

void 

r i ng F r eeOb j e c t ( s t r u c t RingPooL  *pooL,  union  RingObject  *obj) 

{ 

n int  type  = r i ng 0 b j e c t Ty pe ( o b j ) ; 

n pg p A s s e r t ( t y p e > 0); 

n pgpAssertCtype  <=  R I N GT YP E_H AX ) ; 

n obj->g.next  = poo L -> f r e eo b j s C t y p e-1 ] ; 

n poo  L ->  f r e e o b j s C t y p e- 1 ] = obj; 

> 

/* 

* Remove  an  object  from  its  parent  and  free  it.  This  does  not  do 

* anything  with  the  object's  FilePos  List. 

*/ 

void 

r i ng R emOb j e c t ( s t r u c t RingPooL  *pooL,  union  RingObject  *obj) 

{ 

n union  RingObject  **objp; 

a pg p As s e r t ( ! OB J I STOP ( ob j ) ) ; 

n objp  = Sob j ->g . u p->g . do wn ; 

n /*  Unlink  the  object  from  its  parent  */ 

Q while  (*objp  !=  obj)  { 

n n pg p A s s e r t ( *ob j p ) ; 

n n objp  = & ( *ob j p ) ->g . next  ; 

n > 

n *objp  = obj->g.next; 

n r i ng F r e e 0 b j e c t ( poo L , obj); 

> 

/* 

* Rebuild  the  pool's  hash  table  from  scratch, 

* inserting  all  keys  and  subkeys. 

*/ 

void 

r i n g Poo L H a s h ( s t r u c t RingPooL  *pooL) 

:CCHK:6e53897888ac51183b0071556000d55b307c2144e9943df6a9442c802e49b48d2:: 


914 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngPriv.c 


{ 
n 
n 

n 
D 

n 

B 
n 
n 

B 
B 
B 
B 
> 

/* 

* Find  a key  given  a keyID. 

* 

* ViaCrypt  added  pkaLgs  2 and  3 which  are  Limited  RSA,  but  doesn't 

* completely  distinguish  beterrn  them,  so  this  doesn't  either.  Sigh. 

*/ 

union  Ri ngObject  * 

r i ng Poo L F i nd Key ( s t r u c t RingPooL  const  *pool,  byte  pkalg,  byte  const  keyIDFS]) 
{ 

n struct  RingKey  *key; 


n 

i f 

((pkalg 

1 1) 

= = 

3) 

n 

n 

pkalg  = 

1; 

n 

for 

(key  = 

pool 

->hashtabLeCkeyIDC0]];  key;  key 

= key->util) 

n 

n 

i f 

( memcmp ( key  I D , key->keyID,  8)  ==  0) 

{ 

n 

n 

□ 

i f 

(pkalg  ==  key->pkalg) 

n 

n 

n 

B 

break; 

n 

n 

n 

/* 

Cope  with  ViaCrypt's  things 

*/ 

n 

n 

n 

i f 

(pkalg  ==  1 &&  (key->pkaLg  | 

II 

II 

Q 

n 

n 

B 

break; 

n 

n 

> 

Q 

> 

n return  (union  RingObject  *)key; 

> 


union  RingObject  *key,  *subkey; 
i n t i ; 

for  (i  = 0;  i < 256;  i++) 
n poo L -> h a s h t a b L e C i ] = NULL; 

for  (key  = pool->keys;  key;  key  = key->g.next)  ( 
n pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

n RINGPOOLHASHKEY(pooL,  key); 

n for  (subkey  = key->g.down;  subkey;  subkey  = subkey->g.next)  { 

B B if  (OBJ ISKEY( subkey ) ) 

B B B RINGPOOLHASHKEY(pooL,  subkey); 

n } 

> 


/* 

* Ensure  that  each  key's  list  of  the  signatures  by  it  is 

* valid.  This  also  establishes  the  extra  invariant  (used  in 

* pgpRngMnt.c)  that  all  signatures  by  one  key  on  another  object 

* are  adjacent  on  that  key's  sigsby  List. 

*/ 

void 

r i ng Poo  I Li s t S i g s By ( s t r u c t RingPooL  *pool) 

{ 

n union  RingObject  *key,  *n,  *s; 

a /*  Initialize  sigsby  lists  to  null  */ 

n for  (key  = pooL->keys;  key;  key  = key->g.next)  t 

n B pg p A s s e r t ( OB J I S KE Y ( key  ) ) ; 
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n n key->k.sigsby=NULL; 

n } 


Q 

□ 

□ 

n 

□ 

Q 

D 

□ 

n 

□ 

□ 

D 

n 

□ 

> 


/*  Install  every  sig  on  a sigsby  list  */ 
for  (key  = pool->keys;  key;  key  = key->g.next)  { 
for  (n  = key->k.down;  n;  n = n->g.next)  { 
if  COBJISSIGCnl ) { 

n n->s.nextby  = (struct  RingSig  *)  n->s.by->k. sigsby; 

n n-> s . by->  k . s i g s by  = n; 

n } else  for  (s  = n->g.down;  s;  s = s->g.next)  { 

n if  (OBJISSIG(s) ) { 


□ 

n 

□ 

a 


s->s.nextby  = (struct  RingSig  *)  s -> s . by-> k . s i g s by ; 
n s -> s . by-> k . s i g s by  = s; 

> 

> 


> 


} 


/* 

* Return  the  mask  of  RingFiles  that  are  "better"  (higher  priority 

* for  fetching)  than  *any*  home  of  the  specified  object. 

*/ 

static  ringmask 

r i ng 0 b j Be t t e r s ( u n i o n RingObject  const  *obj,  struct  RingPool  const  *pool) 
{ 

n ringmask  better  = poo  I -> f i I ema s k; 

n ringmask  mask  = obj->g.mask  & poo  I -> f i I ema s k ; 

n i n t b i t ; 

n pg p As s e r t ( ma s k ) ; 

n do  { 

n n bit  = r i ng Ls B i t F i nd ( ma s k ) ; 

n n better  &=  poo  I -> f i I e s C b i t 3 . h i g h e r p r i ; 

n } while  (mask  8=  mask-1); 

n return  better; 

> 


/* 

* Find  the  best  Secret  which  is  a descendant  of  the  given  key, 

* in  the  given  set. 

*/ 

union  RingObject  * 

r i ngBe s t S e c ( s t r u c t RingSet  const  *set,  union  RingObject  const  *key) 

{ 

n ringmask  mask  = set->mask; 

n ringmask  better  = ( r i ngma s k ) “ ( r i n gma s k ) 0 ; 

n union  RingObject  *obj,  *best  = 0; 

n pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

n for  (obj  = key->g.down;  obj;  obj  = obj->g.next)  ( 

n n if  (obj->g.mask  8 better 

n □ 88  obj->g.mask  8 mask 

n n 880BJISSEC(obj)){ 
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a a a best=obj; 

n n n better  = ringObjBetters(obj,  set->pooL); 

n n > 

n > 

n return  best; 

> 

/* 

* Return  TRUE  if  the  specified  subkey  has  a valid  sig  from  the  main  key. 

* Assumes  subkey  sigs  are  always  tried,  which  should  happen  when  they  are 

* created  or  added  to  the  keyring.  The  only  time  this  isn't  true  is  when 

* we  are  considering  adding  a key.  We  will  give  the  sig  the  benefit  of 

* the  doubt  in  that  case  as  we  aren't  using  it  yet. 

*/ 

i nt 

r i ng Subkey Va I i d ( s t rue t RingSet  const  *set,  union  RingObject  *subkey) 

{ 

n union  RingObject  *sig; 

n union  RingObject  *key; 

n pgpAssert (OBJ ISSUBKEYC subkey)); 

n pg p As s e r t ( s u b key->g . ma s k & set->mask); 

n key  = s u b key->g . up ; 

n pgpAssertCOBJISTOPKEYCkey)); 


n 

D 

□ 

n 

□ 

n 

□ 

n 

D 

n 

n 

D 

n 

} 


if  (subkey->k . t rust  & ( PG P_KE YT RU S T F_ R EVOKE D | PG P_KE YT RU ST F_ E X P I R E D ) ) 
return  0; 

for  (sig  = subkey->g.down;  sig;  sig  = sig->g.next)  { 


if  ( OB J I S S I G ( 5 i g ) S&  (sig->g.mask  & set->mask)  SS 
r i ng S i g Ha ke r ( s e t , sig,  set)==key  && 

ri ngSi gType ( set , sig)  ==  PG P_ S I GT Y PE_KE Y_ SUBKE Y ) { 
if  ( 1 r i ng S i gT r i ed ( se t , sig)) 

n return  1;  /*  could  check  it  here...  */ 

if  ( r i ng S i gChe c ked ( se t , sig)) 
n return); 


return  0; 


void 

ri  ngPurgeCachedName( St ruct  RingName  *name,  ringmask  mask) 
{ 

n pg p As s e r t ( N AH E I S N AH E ( na me ) ) ; 


n 

n 

□ 

□ 

n 

n 

n 

> 


if  (NAHEISCACHED(name)  &&  (mask  >>  (name->flags  & N AH E F_ F I LE H A S K ) ) S 1) 
{ 

n /*  Replace  buffer  with  a hash  of  it  */ 

n name->name . h a s h = r i ng H a s h Bu f ( ( by t e const  * ) n a me->na me  . p t r , 

n n n n name->len); 

n NAHECLEARCACHED(name); 

> 


/* 

* This  function  is  called  by  the  HemPool  code  when  it  runs  out  of  memory. 

* We  try  to  free  up  more  memory  by  purging  the  uids  from  cache. 
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* Returns  zero  if  it  was  unable  to  make  more  memory  available; 

* non-zero  if  it  might  be  useful  to  retry  an  allocation. 

*/ 

static  int 

r i n g P u r g e U i d C a c h e ( VO i d *arg) 

{ 

n struct  RingPool  *pool  = (struct  RingPool  *)arg; 

n union  RingObject  *k,  *n; 

a inti; 

n / * 

n * Quick  check  to  see  if  we  can  do  anything.  As  memory  gets 

n * full,  the  full  walk  needed  to  clear  the  cache  gets  expensive, 

n * so  avoid  it  unless  it  does  some  good, 

n * / 

H i = 0; 

n while  ( memPoo 1 1 s Emp t y ( &poo I ->f i I e s C i ] . s t r i ng s ) ) { 

n n if  C++i  ==  MEMRINGBIT)  /*  Last  resort:  try  garbage  collect  */ 

n n n return  r i ng Ga r ba g e C o I I e c t ( poo  I ) ; 

n } 


Q 

n 

□ 

n 

□ 

n 

a 

n 

□ 

a 

n 

□ 

n 


/* 

* Okay,  we  have  something  cached  to  free;  replace  all  the 

* pointers  to  n o n-H E M R I NGB I T cached  named  with  hashes 

* of  the  names  and  then  deallocate  the  names. 

*/ 


for  ( k 

n 

a 

D 

a 

□ 

□ 

> 


= pool->keys;  k;  k = k->g.next)  ( 
pgpAssertCOBJISKEYCk)); 

for  (n  = k->g.down;  n;  n = n->g.next)  { 
n if  (OBJ ISNAME(n) ) 

n n r i ng Pu r g e C a c h e d Na me ( &n->n , 

a n (ringmask)~HEMRINGMASK); 

> 


n /*  Free  the  pools  */ 

n for  (i  = 0;  i < MEMRINGBIT;  i++) 

n n memPoo I Emp t y ( &poo I -> f i I e s L i 3 . s t r i ng s ) ; 


a return  1;n  /*  We  freed  some  memory  */ 

} 


/* 

* Helper  function  for  r i ng Poo  1 1 n i t . 
*/ 


static  void 

ringFileInit(struct  RingPool  *pool,  struct  RingFile  *file) 
{ 


B 

file->set.pool  = 

pool; 

B 

file->set.next  = 

NULL; 

B 

file->set.mask  = 

0; 

B 

f i le->set . type  = 

RINGSET_FILE; 

B 

f i le->f  = NULL; 

B 

fi  le->destructor 

= NULL; 

B 

file->arg  = NULL; 

B 

memPoolInit(&fi le 

->strings); 

B 

memPoolInit(&fi le 

->troublepool); 
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n memPoo L S e t Pu rg e ( 8f i I e-> t r ou b L e poo L , r i ng Pu r g e U i d C a c h e , (void  *)pooL); 

n f i L e->t roub L e = NULL; 

n f i L e-> t ro ub L e t a i I = &f i L e-> t rou b L e ; 

n memPoo L I n i t ( & f i L e-> f po s ) ; 

n memPoo L S e t Pu r g e ( 8f i L e->f po s , r i ng Pu rg e U i d C a c h e , (void  *)pooL); 

n f i L e->f reepos  = NULL; 

n fiLe->higherpri  = 0; 

n file -> flags  =0; 

> 

/* 

* Initialize  a newly  allocated  struct  RingPool. 

*/ 

void 

r i ng Poo  1 1 n i t ( s t ru c t RingPool  *pool,  struct  PgpEnv  const  *env) 
n inti; 

a memPoo  1 1 n i t ( 8poo I ->s t r u c t s ) ; 

n memPoo  I Se t Pu rge ( 8poo I ->s t r u c t s , r i ng Pu r g e U i d Ca c h e , (void  *)pool); 

a pool->keys  = NULL; 

n for  (i  = 0;  i < R I NGT Y P E_M AX ; i++) 

n a poo  I ->f r eeo b j s C i D = NULL; 

a pool->sets  = NULL; 

a poo  I ->f r e e s e t s = NULL; 

a poo  l->f r ee i t e r = NULL; 

a poo  l->pktbuf  = NULL; 

a pool->pktbuflen  = 0; 

a poo  I ->p k t bu f a 1 1 o c = 0; 

a /*  Reserve  last  keyring  for  memory  */ 

a poo l->a I locmask  = HEMRINGMASK; 

a pool->f i lemask  = HEHRINGMASK; 

a pool->flags  = 0; 

#if  PGPTRUSTMODEL==0 


n 

if 

( env ) { 

n 

n 

i = pg pen vG e t I n t ( e n V, 

PGPENV_CERTDEPTH,  NULL, 

N U L L ) ; 

n 

o 

poo  1 -> c e r t d ep t h = i; 

n 

n 

i = pg pen vG e t I n t ( e n V, 

PGPENV_MARGINALS,  NULL, 

NULL) ; 

D 

n 

poo  1 ->n um_ma r g i n a 1 s = 

(i  < 0)  ? 0 : (i  > 255) 

? 2 5 5 : i ; 

n 

n 

i = pg pen vG e t I n t ( e n V , 

PGPENV_COMPLETES,  NULL, 

NULL) ; 

n 

n 

poo  1 ->n um_comp 1 e t e s = 

(i  < 0)  ? 0 : (i  > 255) 

? 2 5 5 : i ; 

Q 

> 

else  { 

n 

n 

poo  1 -> c e r t d ep t h = 4; 

n 

n 

poo  1 ->n um_ma r g i na 1 s = 

2; 

□ 

Q 

\ 

poo  1 ->n um_comp 1 e t e s = 

1; 

#e  L se 

j 

□ 

if 

(env)  ( 

Q 

Q 

i = pg pen vG e t I n t ( en V , 

PGPENV_CERTDEPTH,  NULL, 

NULL) ; 

n 

Q 

poo  1 ->c e r t d e p t h = i; 

a 

n 

/*  Compute  values  for 

new  trust  settings  */ 

n 

Q 

i = pg pen vG e t I n t ( e n V , 

PGPENV_TRUSTED,  NULL,  NULL); 
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pooL->threshoLd  = (i  > PG P_N E WT R U S T_ I N F I N I T E ) ? 
n PGP_NEWTRUST_INFINITE  : (i  < 0)  ? 0 : i; 


i = pg p e n vG e t I n t ( e n V , PG P E N V_H A R G I N A L S , NULL,  NULL); 
i = (i  < 1)  ? 0 : CpooL->threshoLd+i-1)/i; 
poo L ->ma r g i n a L c o n f i d e n c e = i; 


□ 

D 
Q 
□ 

□ 
n 

Q 
Q 
□ 

#if  PGPTRUSTMODEL= 


} else  { 
n 
a 
n 
□ 

} 


i = pgpenvGetIntCenv,  PG P E N V_ C OH P L E T E S , NULL,  NULL); 
i = (i  < 1)  ? 0 : ( poo L -> t h r e s h o L d+ i - 1 ) / 1 ; 

poo L -> c omp L e t e c o n f i d e n c e = i; 

po o L -> c e r t d e p t h = 4; 

poo L->t h resho Ld  = 3*PGP_TRUST_DECADE_INTERNAL; 

poo L->nia rgi na L conf i dence  = 3*PGP_TRUST_DECADE_INTERNAL/2; 

pool->compLeteconf idence  = 3* PG P_T R U S T_ D E C A D E_ INTERNAL; 


a 

a 

D 

#e n d i f 
#end  i f 
n 


memPoolInit  (&pooL->pathpooL); 
pool->paths  = NULL; 
pooL->pathLists  = NULL; 


ringPooLCLearError(pooL); 


for  (i  = 0;  i < 256;  i++) 
n poo L -> h a s h t a b L e C i D = NULL; 


for  Ci  = 0;  i < R I NG M A S KB  I T S ; i++)  { 

n r i ng F i L e I n i t C poo L , &poo L -> f i L e s C i 3 ) ; 

n poo L -> f i L e s C i D . s e t . ma s k = (ringmask)l  <<  i; 


/*  Also  purge  strings  cache  if  needed  to  create  a new  object.  */ 
memPooLSetPurge(&pooL->fiLesCMEMRINGBITD. strings, 
r i ng Pu r g e U i d C a c h e , (void  *)pooL); 


/* 

* Deallocate  everything  in  sight  on  a RingPool  preparatory  to 

* deallocating  it. 

*/ 

void 

r i ng Poo  I F i n i ( s t r u c t RingPool  *pooL) 

{ 

n struct  RingFile  *file; 

i n t bit; 


/* 

* Do  this  first  part,  until  the  destructors  are  called, 

* "properly"  so  structures  aren't  dangling  undefined. 

*/ 

for  (bit  = 0;  bit  <=  HEHRINGBIT;  bit++) 
n ringFilePurgeTrouble(&pool->filesCbit3); 


for  (bit  = 0;  bit  <=  MEHRINGBIT;  bit++)  { 
n file  = &poo I -> f i I e s C b i t 3 ; 

n if  ( f i I e->de s t r u c t o r ) ( 


[CCHK:e332e4493624fe965d0e3ffffb44f7e99b32bb0d1b006011e2560ee4db0ebfa2933 


920 


Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngPriv.c 


n n n f i L e->d e s t r u c t o r ( f i L e , fiLe->f,  fiLe->arg); 

n n n f i L e->d e s t r u c t o r = NULL; 

n n } 

n > 

n meniPooLEmpty(8pooL->structs); 

PGPTRUSTH0DEL==2 

n menPoo L Emp t y ( &poo L ->pa t h p oo L ) ; 

#end i f 

n for  (bit  = 0;  bit  <=  MEHRINGBIT;  bit++)  ( 

n a file  = &poo  1. ->f  i L e s C b i t 3 ; 

n n memPooLEmpty(8fiLe->strings); 

n n memPoolEmpty(&fiLe->fpos); 

n > 

a pg pHem F r e e ( poo L ->p k t bu f ) ; 

a /*  Nuke  the  Lot  */ 

a memsetCpooL,  0,  sizeof(*pooL)); 

> 

/* 

* This  is  defined  as  a macro. 

* 

* void 

* r i ng F i L eMa r kD i r t y C s t r uc t RingFiLe  *fiLe) 

* { 

*a  fiLe->fLags  |=  R I NG F I LE F _ D I RT Y ; 

* > 

*/ 

/* 

* Hark  every  file  under  a given  mask  as  dirty. 

*/ 

void 

ri  ngPoo LMa r kD i r ty ( s t rue t RingPooL  *pooL,  ringmask  mask) 

{ 

a mask  &=  poo L ->f i L ema s k; 

a while  (mask)  ( 

a n r i ng F i L eMa r kD i r t y ( poo L ->f i L e s + r i ng Ls B i t F i nd ( ma s k ) ) ; 

a a mask8=mask-1; 

a > 

} 

void 

r i n g Poo L Ma r kT r u s t C h a ng e d ( s t r u c t RingPooL  *pooL,  ringmask  mask) 

{ 

a mask  8=  poo L -> f i L ema s k; 

a while  (mask)  ( 

a n poo  I -> f i L e s C r i ng L s B i t F i nd ( ma s k ) ] . f L a g s | = 

a a RINGFILEF_TRUSTCHANGED; 

a a ma  s k 8=  ma  s k-1  ; 

a > 

> 


/* 

CCCHK:a2f44c31ff8bfcee661fff 089591 52ff64dc692d4d4226b080448e4445f6017ff:] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


921 


pgpRngPriv.c 


* Do  a f i ng e rp r i n t 20  (SHA-1)  hash  on  the  specified  buffer,  which 

* should  be  key  data.  We  prefix  it  with  the  type  and  Length  bytes 

* for  compatibility  with  key  signature  hashes  (once  they  become  SHA 

* based).  Return  the  number  of  bytes  in  the  hash,  or  negative  on 

* error. 

*/ 

i n t 

pgp F i ng e r p r i n t 20Ha s hBu f ( by t e const  *buf,  size_t  ten,  byte  *hash) 

{ 

n struct  PgpHash  const  *h; 

n struct  PgpHashContext  *hc; 

a byte  tmpbuf[I33; 

n byte  const  *p; 

n h = pgpHashByNumber  ( PG P_ H A S H_S H A ) ; 

n i f ( ! h ) 

a a return  PG P E R R_B A D_ H A S H N UM ; 

n he  = pg pHa s h C r ea t e ( h ) ; 

n i f ( ! he ) 

n n return  PGPERR_NOHEH; 

n /*  We  use  this  format  even  for  subkeys  */ 

n tmpbuf:0]  = PKTBYTE_BUI LD C PKTBYTE_PUBKEY,  1 ) ; 

n tmpbufC13  = Cbyte)(Len>>8); 

a tmpbufC2D  = (byte)len; 

n pgpHashUpdateChc,  tmpbuf,  3); 

n pgpHashUpdateChc,  buf,  Len); 

n p = pgpHashFinaL(hc); 

o memcpy(hash,  p,  h->h a s h s i z e ) ; 

n pg  pHa  s h De  s t r oy  ( h c ) ; 

n return  h->hashsize; 

} 
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/* 

* pgpRngPriv.h 

★ 

* Copyright  CC)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pg pRng P r i V . h , V 1.11.2.1  1997/06/07  09:50:39  mhw  Exp  $ 

*/ 


#ifndef  PGPRNGPRIV.H 
(^define  PGPRNGPRIV.H 

#incLude  <stdio.h>n  /*  For  size.t  */ 

#incLude  "pgpRngPub.h" 

/*  Private  */ 

#incLude  " pg pHemPoo L . h " 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi f 


/* 

* This  number  shouLd  probabLy  be  increased  for  muLtipLe  keyrings  and  GUIs. 

* At  the  moment,  it  is  Lou  to  heLp  memory  consumption. 

*/ 

#ifndef  RINGHASKBITS 
^define  RINGMASKBITS  16 
#end  i f 

#define  HEHRINGBIT  ( R I NGM A S KBI T S -1 ) 


#if  RINGHASKBITS  <=  8 
typedef  byte  ring mask; 

#eLif  RINGHASKBITS  <=  16 
typedef  word16  ringmask; 

#eLif  RINGHASKBITS  <=  32 
typedef  word32  ringmask; 

#e  L se 

terror  Invalid  RINGHASKBITS  vaLue 
Send i f 


Sdefine  HEHRINGHASK  ( ( r i ngma s k ) 1 <<H EHR I NGB I T ) 


/*  PGP  version  information  */ 

Sdefine  PGPVERSI0N.2  2 

Sdefine  KNOWN.PG P. V E R S I ON ( x ) ( ( x ) = = PG PV E R S 1 0 N.2  ||  (x) 

n n n n D D n 

/*  Position  in  a fiLe  */ 
struct  FiLePos  { 
n u n i on  -C 

n a struct  FiLePos  *next; 

n n void*buf; 

n > p t r ; 

n word32  fpos; 

>; 


PGPVERSION.2.6  | | \ 

(x)==PGPVERSI0N.3) 
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#define  NULLFILEPOS  { { (struct  FiLePos  *)0  },  (worcl32)0  > 

/* 

* Since  C requires  in-order  allocation  of  structure  fields,  a poor  choice  of 

* field  order  can  cause  lots  of  holes  in  a structure  for  alignment  reasons. 

* E.g.  I ong / c ha r / I ong / c ha r / I on g / c h a r / I o n g / c h a r assuming  the  usual  4-byte 

* longs  aligned  on  4-byte  boundaries  requires  32  bytes  of  storage,  while 

* I ong / I ong / I ong / I on g / c h a r / c h a r / c h a r / c h a r requires  only  20. 

* Storage  required  can  be  minimized  by  allocating  the  largest  fields  in 

* the  structure  at  the  ends,  against  the  aligned  edges  of  the  structure, 

* and  filling  the  hole  in  the  middle  with  progressively  less  aligned 

* fields.  We  use  this  by  declaring  the  common  (generic)  fields  in 

* I a r g e s t - 1 o-sma I I e s t order,  then  the  type-specific  extensions  in 

* sma I I e s t - 1 o- I a r g e s t . 

* 

* The  sizes  listed  are  for  the  platform  where  memory  consumption  is  the 

* greatest  concern  - the  IBM  PC.  Other  platforms  aren't  quite  as  tight. 

*/ 


struct  RingGeneric 
{ 

/*  0*/n  union  RingObject  *next,  *down,  *up; 
/*12*/n  struct  FilePos  pos; 

/*20*/n  ringmask  mask; 

/*21*/n  byte  flags; 

1*22*1 

>; 


/*  Generic  flags  (apply  to  more  than  one  type)  */ 
#define  R I NG OB J F_T RU S T 128 
//define  RINGOBJ  F_TRUSTCHANGED  64 
/* 


* The  three  type  bits  are  encoded  as  follows: 

* 76543210 

* 1 - Name  ( n ) 

* 01  - Signature  (s) 

* 001  - Key  (k) 

* 0010  - Topkey 

* 0011  - Subkey  (letter  "B") 

* 0001  - Secret  (We  use  the  letter  "c"  for  this) 

* 0000  - Unknown  keyring  object 

* Changes  here  need  to  be  propagated  to  r i ngOb j e c t Ty pe ( ) . 
*/ 


//def  i ne 

RINGOBJ  F 

_NAME 

32n 

/* 

If 

1, 

lower 

bits 

are  used 

by  UID  */ 

//define 

RINGOBJ  F 

_SIG 

1 6nn 

/* 

If 

this  i 

s 

a 

signature 

*/ 

//define 

RINGOBJ  F 

_KEY 

8d 

n 

/* 

If 

1, 

this  i 

s 

a 

key  */ 

//define 

RINGOBJ  F 

_SUBKEY 

12n 

/* 

If 

both  bits 

set 

, this  is 

a subkey  */ 

#d e f i n e 

RINGOBJF 

_SEC 

4n 

n 

/* 

If 

1, 

this  i 

s 

a 

key's  secret  components 

/ * Comb 
//define 
//define 
//define 
//define 


nations  of  type 
RINGOBJ  F_NSn 
RINGOBJ  F_NSKn 
RINGOBJ  F_NSKBn 
RINGOBJF  NSKCn 


flags  * / 

(RINGOBJ F_NAME  | R I NGOB J F_S I G ) 
(RINGOBJF_NS  | R I N G OB J F _KE Y ) 

( RINGOBJ F_NSK  1 R I N GOB J F_ S UBKE Y ) 
( RINGOBJ F_NSK  | R I N GOB J F _ S E C ) 


//define  OB  J I S N AM  E ( ob  j ) ( ( o b j ) ->g  . f I a g s & R I N GOB  J F_N  AM  E ) 

//define  OB  J I S S I G ( ob  j ) ( ( ( o b j ) ->g  . f I a g s S RINGOBJF_NS)  ==  R I NGOB  J F _ S I G ) 
/*  Note  that  this  includes  top-level  keys  *and*  subkeys  */ 
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^define  OB J I S KE Y ( ob j ) ( ( ( ob j ) ->g . f I a g s & R I N GOB J F _N S K ) ==  RI NGOB J F_KE Y ) 

//define  OB  J I STOPKE  Y ( ob  j ) ( ( ( ob  j ) ->g  . f L a g s S R I N G OB  J F_N  S KB  ) ==  R I NG  OB  J F _ KE  Y ) 

//define  OB  J I S SUBKE  Y ( ob  j ) ( ( ( ob  j ) ->g  . f L a g s S RI  NGOB  J F_NSKB  ) ==  R I NGOB  J F_  S UBKE  Y ) 

//define  OB  J I S S E C ( o b j ) ( ( ( ob  j ) ->g  . f L a g s & R I N G OB  J F_N  S KC)  ==  RINGOBJF_SEC) 
//define  OB  J I S U N K ( o b j ) ( ( ( ob  j ) ->g  . f L a g s S R I N G OB  J F_N  S KC  ) ==  0) 


/*  These  versions  are  for  pgpAssertC)  macro  use  */ 

//define  N AH  E I S N AM  E ( na  me  ) ( ( na  me  ) ->  f L a g s & R I N G OB  J F_N  AM  E ) 

//define  S I GI  S S I G ( s i g ) ( ( ( s i g ) ->f  L a g s & RINGOBJF_NS)  ==  R I N G OB  J F _S  I G ) 

//define  KEYISKEYC  key)  ( ( ( key  ) ->f  L a g s S R I NG  OB  J F_N  SK ) ==  R I N GOB  J F _KE  Y ) 

//define  KE  Y I STO  PKE  Y ( key  ) ( ( ( key ) ->f  L a g s S R I NGOB  J F_N  S KB  ) ==  R I NGOB  J F_KE  Y ) 

//define  KE  Y I S S UBKE  Y ( key  ) ( ( ( key ) ->f  I a g s S R I N GOB  J F_N  S KB  ) ==  R I NGOB  J F_  S U BKE  Y ) 


//define 
//define 
//def  i ne 
#d  e f i n e 
//define 
#d  e f i n e 


OBJ FLAGS_NAMEn  R I NG OB J F_N AH E 
OBJ FLAGS_SIGn  RINGOBJF_SIG 
OBJ FLAGS_KEYn  RINGOBJF_KEY 
OBJFLAGS_SUBKEYnRINGOBJF_SUBKEY 
OBJ FLAGS_SECn  RINGOBJF_SEC 
OBJ FLAGS_UNKn  0 


/*  Does  this  object's  up  pointer  point  to  a meaningful  parent?  */ 
^define  OBJISTOP  OBJISTOPKEY 

/*  Does  this  object's  down  pointer  point  to  a meaningful  child?  */ 
//define  OB  J I SBOT  ( ob  j ) ( OB  J I S S I G ( o b j ) | | OB  J I S S E C ( o b j ) ) 


/*  Maximum  depth  of  nesting  in  a keyring  */ 
^define  RINGHAXDEPTH  3 


/*  A subkey  is  the  same,  but  the  "sigsby"  pointer  is  "up"  */ 
struct  RingKey 


{ 


n union  RingObject  *next, 

n struct  FilePos  pos; 

n ringmaskmask; 

n byte  flags; 

/ *22* la  byte  trust; 

/*23*/n  byte  pkalg; 

/*24*/n  word16  validity;n 
//if  PGPTRUSTHODEL>0 
1*26*1  word16  confidence;n 
//end  i f 


*down,  *sigsby; 


/*  Validity  period,  in  days  */ 
/*  A trust  value  temporary  */ 


/*28*/n  uord16  keybits; 
/*30*/n  word32  tstamp; 

/*34*/n  byte  keylDCSJ; 

/*42*/n  struct  RingKey  *util; 
/*46*/ 


>; 


//if  PGPTRUSTHODEL>0 

//define  NULLRINGKEY  { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 

n (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J F LAG S_KE Y , n \ 

n 0,  0,  (word16)0,  (word16)0,  (word16)0,  (word32)0,  \ 

n { 0,  0,  0,  0,  0,  0,  0,  0 },  (struct  RingKey  *)0n> 


//define  NU  LLRI  NG  S UBKE  Y { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 
n (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J F LAG S_ S UBKE Y , 

n 0,  0,  (word16)0,  (word16)0,  (word16)0,  (word32)0,  \ 

n { 0,  0,  0,  0,  0,  0,  0,  0 >,  (struct  RingKey  *)0n> 


\ 
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#e  L se 

#define  NULLRINGKEY  { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 

n (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J F L AG S_ KE Y , n \ 

n 0,  0,  (word16)0,  (word16)0,  (word32)0,n  \ 

a { 0,  0,  0,  0,  0,  0,  0,  0 y,  (struct  RingKey  *)0n> 


#d  e f i ne 
a 
□ 
n 

#end  i f 


N U LLR I NG S UBKE Y { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 
(union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OBJFLAGS_SUBKEY,  \ 
0,  0,  (word16)0,  (word16)0,  (word32)0,n  \ 

{ 0,  0,  0,  0,  0,  0,  0,  0 y,  (struct  RingKey  *)0n> 


/*  The  key  has  some  sort  of  error  */ 

#define  KEYF_ERROR  1 

/*  The  key  is  a trusted  introducer,  used  in  the  maintenance  pass.  */ 
#define  KEYF_TRUSTED  2 

/* 

* aaa  who 

* #def i ne 

* #def  i ne 

* #define 
*/ 

/* 

* This  is  used  to  record  information  about  the  Locations  for  a key's 

* secret  components.  If  present,  it  is  always  the  FIRST  child  of  a 

* key.  This  is  a very  boring  structure,  as  there's  nothing  we  can 

* read  in  about  the  encrypted  secret  componenets  without  the  passphrase. 

* (Option:  have  multiples  of  these  for  different  encrypted  forms  of  the 

* secret  components?) 

* 

* The  FilePos  entries  on  this  are  a subset  of  the  entries  in  the 

* parent  RingKey's. 

*/ 

struct  RingSec 

□ 
n 
□ 
a 

1*22*1 
/*24*/n 
/*28*/ 

>; 

#def i ne 


/* 

* If  SECF_VERSION_BLIG  is  set,  then  patch  the  version  byte  from  3 to  2 

* when  using  the  secret  key.  This  is  to  fix  a bug  in  2.6  through  early  2.9 

* that,  when  editing  a secret  key,  would  write  out  the  edited  secret  key 

* with  a version  byte  of  3 even  if  it  originally  had  a version  byte 

* of  2.  This  has  been  fixed  in  2.9,  but  it  is  common  enough  (due  to  2.6) 

* that  we  need  to  kludge  around  it. 

*/ 

[[CHK:9a37999cf3aa4665cc3724b993fc67a2576d1 50941 73355ccc38ac7a4f340a4d2:: 


union  RingObject  *next,  *down,  *up; 
struct  FilePos  pos; 
r i ngma  s k mask; 
byte  flags; 

word32  hash;n  /*  Hash  of  secret  fr  matching  purposes  */ 


NULLRINGSEC  { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 

(union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OBJFLAGS_SEC  } 


put  these  here?  They  conflict... 
KEYF_USE_SIGN  0x80 

KEYF_USE_ENCRYPT  0x40 

KEYF  USE  SIGN  ENCRYPT  (KEYF  USE  SIGN 


KEYF  USE  ENCRYPT) 
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#define  S E C F_ V E R S I ON_BUG  1 


#if  PGPTRUSTHODEL==0 


struct  Ri ngName 
{ 


□ 

n 

□ 

D 

/*22*/n 

/*23*/n 

/*24*/n 

/*26*/n 

/*28*/n 

n 


D 


n 

/*32*/ 


union  RingObject  *next,  *down, 

struct  FilePos  pos ; 

ringtnask  mask; 

byte  flags; 

byte  trust; 

byte  f Lags2; 

int  trustval; 

size_t  len; 

union  { 

n char  const  *ptr;n 

a word32  hash;a  a 

} n a m e ; 


>; 


*up; 


/*  If  cached,  pointer  to  string  */ 
/*  If  not  cached,  hash  code  */ 


Sdefine  NULLRINGNAME  { (union  RingObject  *)0,  (union  RingObject  *)0,a  \ 
a (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J F LAG S_N AM E , a \ 
a 0,  0,  0,  (size_t)0,  { (char  const  *)0  >> 


#eLse  /*  New  trust  */ 
struct  Ri ngName 
{ 


a union  RingObject  *next,  *down,  *up; 


a 

struct  FilePos  pos; 

a 

ringmask  mask; 

a 

byte 

flags; 

1*22* la 

byte 

trust; 

/*23*/a 

byte 

validity;aa  /* 

/*24*/a 

byte 

confidence;a  /* 

/*25*/a 

byte 

f lags2; 

/*26*/a 

word16  valid;a  a /* 

/*28*/a 

s i ze_ 

t 1 e n ; 

/*30*/a 

union 

{ 

a 

n 

char  const  *ptr;a 

a 

□ 

word32  hash;a  a 

a 

} name; 

/*34*/ 

}; 

Stored  validity  */ 

Stored  confidence  */ 

Computed  validity  */ 

/*  If  cached,  pointer  to  string  */ 
/*  If  not  cached,  hash  code  */ 


/* 

* The  intermediate  validity  results  are  16  bits  wide  instead  of  8. 

* This  is  used  for  extra  precision  (fraction  bits)  and  extra  range. 

* This  is  the  number  of  extra  precision  bits.  (4  more  range  bits 

* increases  the  upper  bound  to  10^-25.) 

*/ 

#define  TRUST_C ERTS H I FT  6 


//define  NULLRINGNAME  { (union  RingObject  *)0,  (union  RingObject  *)0,a  \ 
a (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J FLAGS_NAHE,a\ 
a 0,  0,  0,  0,  0,  (size_t)0,  { (char  const  *)0  >} 

//endi  f 


/*  Access  the  flags2  field  */ 

[ICCHK:446bc088c8dce7000500aedda21a46bf5c7ad5e0cedd7ffdb688e28441b765194]] 
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#define  N AM E F2_I S C AC H E Dni 28 
#define  N AH E F 2_ N E WT RU ST  64 
//define  NAMEF2  LEVELMASK  31 


#define  N AH E I S C A C H E D ( na me ) ( ( n a me ) -> f L a g s 2 & N AM E F 2_ I S C AC H E D ) 
//define  N AH  E S ET  C A C H E D ( na  me  ) ( ( na  me  ) ->  f L a g s 2 |=  N AM  E F 2 _ I S C A C H E D ) 

//define  N AH  E C LE  A RC  A C H E D ( n a me  ) C ( name  ) ->f  L a g s 2 &=  ‘ N AH  E F 2_  I S C A C H E D ) 


/*  Has  new-style  trust  info  */ 

#define  N AM E H A S N E WTR U S T ( na me  ) ( C na me ) ->f L a g s 2 & N AM E F 2 _N E WT R U S T ) 
#define  N AM E S ET N E WT R U ST ( na me ) ( ( name ) ->f L a g s 2 |=  N AM E F 2_N E WT R U ST ) 
//define  NAM  EC  LEARN  EWTRU  ST  ( name  ) ( ( na  me  ) ->  f L a g s 2 &=  ~ N AM  E F 2_N  E WT  R U S T ) 

/*  Certification  depth  */ 

#define  N AH E L EV E L ( n a me ) ( ( na me ) -> f L a g s 2 & N AH E F 2_ LEV E LH A S K ) 

//define  N AHE  S ET  LE  VE  L ( name,  I v ) \ 

n ( ( n a me ) -> f L a g s 2 = ( ( n a me ) ->f L a g s 2 & ■ N AM E F 2 _LE VE LH A S K ) + Lv) 


//define  N AM  E F _ F I LEM  A S K 31 

//if  NAMEF_FILEHASK+1  < RINGMASKBITS 
//error  N AH  E F _ F I LEM  A S K is  too  small.  .. 
//endi  f 


struct  RingSig 
{ 


n 

a 

□ 

n 

a 

/*22*/n 

/*23*/n 

/*24*/n 

/*25*/n 

/*26*/n 

/*28*/n 

/*32*/n 

/*36*/ 


union  RingObject  *next,  *by,  *up; 
struct  FilePos  pos; 
ringmask  mask; 
byte  flags; 

/*  Prefix  */ 
byte  trust; 
by t e type; 
byte  hashalg; 
byte  version; 

word16  validity;n  /*  Delete?  */ 

word32  tstamp; 

struct  RingSig  *nextby; 


>; 


//define  NULLRINGSIG  { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 
H (union  RingObject  *)0,  NULLFILEPOS,  (ringmask)0,  OB J F LAG S_ S I G , b \ 
B 0,  0,  0,  0,  (word16)0,  (word32)0,  (struct  RingSig  *)0  > 


/*  Signature  has  some  sort  of  parsing  error  */ 

#define  SIGF_ERROR  1 

/*  Extra  bytes  are  non-obvious  */ 

//define  S I G F _ N ON  F I V Eb  2 

/*  This  can  be  derived  in  other  ways,  but  is  kept  around  for  convenience  */ 
//define  SIGF  KEY  4 


/* 

* An  unknown  packet  in  a keyring.  "pktbyte"  is  the  type. 

* This  is  so  we  can  at  least  propagate  the  thing,  even  if  it's 

* incomprehensible. 

*/ 

struct  Ri ngUnk 

:[CHK:f9ff4000be2dd61d77cc3811a28bbfad04c9c6588f100d7a02009126163eff66333 
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{ 

n union  RingObject  *next,  *down, 

n struct  FiLePos  pos; 

n ringmaskmask; 

n byte  flags; 

n /*  Prefix*/ 

/*22*/n  byte  trust; 

/*23*/n  byte  pktbyte; 

/*24*/n  word32  hash; 

/*28*/ 

>; 


‘up; 


#define  NULLRINGUNK  { (union  RingObject  *)0,  (union  RingObject  *)0,n  \ 
n (union  RingObject  *)0,  NULLFILEPOS,  ( r i n gma s k ) 0 , OB J F LAG S_U N K, n \ 
n 0,  0,  (word32)0> 


/* 

* A generic  RingObject.  "obj->x.foo"  occurs  so  often  that  the  brevity 

* of  the  one-letter  tags  has  advantages  in  clarity  that  override  any 

* documentation  gains  from  greater  verbosity. 

*/ 


union  RingObject  { 


n 

struct 

RingGeneric  g; 

n 

struct 

RingKey  k; 

n 

struct 

RingSec  c;n 

□ 

struct 

RingName  n; 

n 

struct 

R i n g S i g s ; 

n 

struct 

RingUnk  u; 

>; 

/* 


/*  Note  this  odd  choice  of  letter  */ 


* The  basic  co 1 1 e c t i on-of -key s type. 

* This  comes  in  two  flavours:  mutable  and  immutable. 

* A mutable  set  can  have  members  added  and  removed, 

* while  an  immutable  one  cannot. 

*/ 


struct 

struct 

a 

a 

□ 

o 

n 

>; 


RingPool; 

Ri ngSet  ( 

struct  RingSet  *next; 
struct  RingPool  *pool; 
struct  RingError  err; 
ringmask  mask; 
char  type; 


^define  R I NG S ET_MUT AB LE  0 
^define  R I NG S ET_ I MMUT AB LE  1 

^define  RINGSET_ITERATOR  2n  /*  Also  immutable 

^define  RINGSET_FILE  3n  /*  Also  immutable  */ 
//define  RINGSET_FREE  4n  /*  Free  flag  */ 


*/ 


//define  R I NG  S ET I S HUT  AB  LE  ( s e t ) ( ! ( s e t ) ->  t y p e ) 


struct  RingTrouble; 

/*  A file  that  holds  information  about  a file  */ 
struct  RingFile  ( 
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n struct  RingSet  set; 

n struct  PgpFile  *f;n  /*  File  handle  */ 

n void  ( *d e s t r u c t o r ) ( s t r u c t RingFiLe  *,  struct  PgpFile  *,  void  *); 

a void*arg; 

n struct  MemPool  strings;n/*  Cache  of  name  strings  */ 

n struct  MemPool  troublepool; 

n struct  RingTrouble  const  *trouble,  ** t r o u b I e t a i I ; 

n struct  MemPool  fpos; 

n struct  FilePos  *freepos; 

n ringmask  higherpri;n  /*  see  ringFetchPacket  in  pgpRngRead.c  */ 

n byte  flags; 

PgpVersion  version; 

>; 

#if  PGPTRUSTM0DEL>1 
struct  Path; 
struct  PathList; 

# e nd i f 


/*  Flags  kept  updated  about  a file  */ 

#define  R I NG F I LE F_ D I RT Yn 1 

#define  R I N G F I LE F_TR U S T C H AN G E Dn  2 


/*  The  home  of  a lot  of  keys  */ 
struct  RingPool  { 
n struct  MemPool  structs; 

n union  RingObject  *keys; 

n union  RingObject  *freeobjsCRINGTYPE_MAX3; 

n struct  RingSet  *sets;n  /*  Dynamically  allocated  sets 

n struct  RingSet  *freesets; 

n struct  Ringiterator  *freeiter; 

n char  *pktbuf; 

n size_t  pktbuflen; 

a si2e_t  pktbufalloc; 

n ringmask  allocmask;n  /*  Bits  in  use  (cache)  */ 

n ringmask  filemask;n  /*  Bits  in  use  for  files  */ 

n word32  flags; 


(not  files!)  */ 


n struct  PgpEnv  const  *env; 

n i nt  certdepth; 

#if  PGPTRUSTMODEL==0 
n int  num_marginals; 

n int  n um_ c omp I e t e s ; 

# e I s e 

n /*  Translations  from  old  to  new  trust  models  */ 

n byte  ma r g i na I c on f i d e n c e ; 

n byte  c omp I e t e c on f i de n c e ; 

n int  threshold; 

#if  PGPTRUSTM0DEL==2 

struct  MemPool  pathpooL; 
struct  Path  *paths; 
n struct  PathList  *pathlists; 

# e n d i f 

# e n d i f 


n /*  In  case  of  error,  the  following  is  set  */ 

n struct  RingError  e; 
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n 

/*  Some 

Large  i terns  go 

at  the  end.. 

Q 

struct 

Ri ngKey 

*hashtabLeC256]; 

Q 

>; 

struct 

R i ng  F i L e 

f i LesCRINGMASKBITS: 

/*  Values  for  erraction 

*/ 

#def  i 

ne 

ACTERR_ 

NONEn 

0 

#def  i 

ne 

ACTERR_ 

READn 

1 

#def  i 

ne 

ACTERR_ 

WRITEn 

2 

#def  i 

ne 

ACTERR_ 

SEEKn 

3 

#def  i 

ne 

ACTERR_ 

OPEN 

4 

#def  i 

ne 

ACTERR_ 

CLOSE 

5 

#def  i 

ne 

ACTERR_ 

FLUSH 

6 

#def  i 

ne 

ACTERR_ 

HUGEq 

7 

#def  i 

ne 

ACTERR. 

EOFn 

n 

101 

#def  i 

ne 

ACTERR_ 

BADPKTBYTEn 

102 

#def  i 

ne 

ACTERR_ 

WRONGPKTBYTEn 

1 03 

#def  i 

ne 

ACTERR_ 

WRONGLENnn 

1 04 

#def  i 

ne 

ACTERR_ 

ALLOCn 

201 

/* 

* How  to  distinguish  starting  from  stopping? 

* It's  NULL  pointers  either  way. 

* Ah,  wait!  "Level"  is  the  most  recent  LeveL. 

* If  it's  0,  start  the  ring.  If  it's  1,  and  the  stack  is  NULL, 

* we're  at  the  end.  Yes,  that  works! 

•k 

* Okay,  so  it  works  Like  this: 

* The  stackCi]  array  holds  the  object  which  is  the  head  of  the 

* current  List,  the  Last  object  returned  at  LeveL  i+1. 

* The  Last  object  returned,  which  defines  the  maximum  depth  to 

* which  the  stack  is  valid,  is  at  "LeveL".  Stack  entries 

* up  to  LeveL-1  are  valid. 

* If  a stack  entry  is  NULL,  is  is  the  last  entry  at  LeveL-1, 

* and  indicates  that  the  List  at  this  level  is  finished. 

* Repeated  calls  wiLL  keep  returning  NULL. 

* 

* If  asked  for  a LeveL  one  greater  than  the  stored  LeveL,  that's 

* a clue  to  start  at  the  beginning  of  the  List. 

* 

* stackC-ID,  corresponding  to  a LeveL  of  0,  is  implicitly  the 

* Ring  Pool. 

*/ 

struct  Ringiterator  { 
n struct  RingSet  set; 

n unsigned  LeveL;n/*  1-based  */ 

n union  RingObject  * s t a c k C R I NGH AX D E PT H 3 ; 

>; 

void  r i ng E r r ( s t r u c t RingFiLe  *fiLe,  word32  fpos,  int  code); 
void  r i ng S i mp L e E r r ( s t r u c t RingPooL  *pooL,  int  code); 
void  r i ng A L L o c E r r ( s t r u c t RingPooL  *pooL); 

word32  r i ng H a s h Bu f ( by t e const  *buf,  size_t  Len); 
int  ri ngLsBi t Fi nd ( ri ngmask  mask); 

ringmask  r i ng A L L o c Ha s k ( s t r u c t RingPooL  const  *pooL,  struct  RingSet  const  *); 
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r i ngma  s k 

ringCLearMaskCstruct  RingPool  *pooL,  union  RingObject  **objp,  ringnask  mask); 
int  r i ng Ga r ba g e C o L L e c t ( s t r u c t RingPooL  *pooL); 

void  ringGarbageCoLLectObjectCstruct  RingPool  *pooL,  union  RingObject  *obj); 
int  r i ng B i t A I L o c ( s t r u c t RingPool  *pool); 


/*  Wise  utility  functions  */ 

union  RingObject  *ringNewObject(struct  RingPool  *pool,  int  objtype); 
#define  r i ng N e wKey ( poo  I ) r i n g N e wOb j e c t ( poo  I , R I N GT YP E_KE Y ) 

Sdefine  r i ngNewSe c C poo  I ) r i ng N euO b j e c t C poo  I , R I N GT Y P E_S E C ) 

^define  r i ng N e w Na me ( poo  I ) r i ng N e uO b j e c t C poo  I , R I NGT Y P E_N AH E ) 

^define  r i ng N e w S i g ( poo  I ) r i n g N e wOb j e c t ( poo  I , R I NGT Y P E_ S I G ) 

#define  ringNewUnkCpool)  ringNewObjectCpool,  RINGTYPE_UNK) 

void  ringFreeObjectCstruct  RingPool  *pool,  union  RingObject  *obj); 

void  ringRemObjectCstruct  RingPool  *pool,  union  RingObject  *obj); 


/*  Insert  a single  key  into  the  pool's  hash  table  */ 

#define  R I N G POO LH A S H KE Y ( poo  I , key)  \ 

n ( ( key ) -> k . u t i I = ( p oo I ) -> h a s h t a b I e C ( key ) -> k . k e y I D C 0 ] D , \ 

n ( poo  I ) ->ha s h t a b I e C ( key ) -> k . key  I D C 0D ] = 8Ckey)->k) 

void  ringPoolHashlstruct  RingPool  *pool); 
union  RingObject  * 

r i ngPoo I F i ndKey ( s t ru c t RingPool  const  *pool,  byte  pkalg,  byte  const  keyIDCS]); 
void  r i ng Poo  I L i s t S i g s By ( s t r u c t RingPool  *pool); 

#define  r i ng F i I e Ha r k D i r t y ( f i I e ) n ( ( f i I e ) -> f I a g s |=  R I N G F I LE F_ D I RT Y ) 

void  ringPoolHarkDirtyCstruct  RingPool  *pool,  ringmask  mask); 

void  r i ng Poo  I Ha r kT ru s t C ha ng ed ( s t ru c t RingPool  *pool,  ringmask  mask); 

union  RingObject  * r i n g Be s t S e c C s t r u c t RingSet  const  *set, 
n union  RingObject  const  *key); 

int  ri ngSubkeyVa I i d ( St ruct  RingSet  const  *set,  union  RingObject  *subkey); 
void  ringPurgeCachedNamelstruct  RingName  *name,  ringmask  mask); 

/*  To  be  added:  a function  to  allocate  one  of  these  first!  */ 
void  ringPoolInitCstruct  RingPool  *pool,  struct  PgpEnv  const  *env); 
void  r i ng Poo  I F i n i ( s t r u c t RingPool  *pool); 

int  pgpFingerprint20HashBuf(byte  const  *buf,  size_t  len,  byte  *hash); 

void  ringObj Check  (union  RingObject  *obj,  ringmask  validmask, 
a a a n n ringmask  parentmask); 


Sifdef  __cplusplus 
} 

# e nd i f 


#endif  /*  PGPRNGPRIV  H */ 
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/* 

* pgpRngPub.c  - keyring  management  public  functions. 

ic 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

* 

* $Id:  pg p Rng Pu b . c , V 1.26.2.4  1 997/06/07  09:50:40  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#include  "config.h" 

#end i f 


//include 

<ctype . h>n  /*  For 

//i  nc  lude 

"pgpDebug  . h" 

//include 

"pgpRngPriv. h" 

//include 

"pgpRngPars.h" 

//include 

"pgpT  rstPkt . h" 

//include 

"pgpTrust.h" 

//include 

"pgpRngMnt . h" 

//include 

"pgpErr.h" 

//include 

"pgpPubKey. h" 

//include 

"pgpRngPub.h" 

//include 

"pgpRngRead.h" 

//i  nc  lude 

"pgpSigSpec.h" 

//include 

"pgpHem. h" 

tolowerl) 


*/ 


#i f ndef  NULL 
//define  NULL  0 
#endi f 


/* 

* 


The  four  type  bits  are  encoded  as  follows: 


★ 

76543210 

★ 

1 - Name  (n) 

★ 

01  - Signature  (s) 

★ 

001  - Key  (k) 

it 

0001  - Secret  (We  use  the  letter 

"c"  for 

* 

0000  - Unknown  keyring  object 

*/ 

i nt 

ri ngOb j ectType ( uni  on  RingObject  const 

f 

*ob  j ) 

□ 

int  const  typesC16]  = ( 

□ 

□ 

n 

n 

>; 


RINGTYPE_UNK,  R I N G T Y P E _ S E C , R I NGT YP E_KE Y,  R I NGT YP E_KE Y , 
RINGTYPE_SIG,  R I NGT YP E_S I G , R I NGT YP E_ S I G,  R I NGT YP E_S I G , 
RINGTYPE_NAHE,  R I NGT YP E_N AH E , RINGTYPE_NAME,  R I N G T Y P E _ N AM E , 
RINGTYPE_NAHE,  R I NGT YP E_N AM E , R I NGT Y P E_N AM E , R I NGT Y P E_N AM E 


n pgpAssert  (obj); 

n return  t y p e s C ob j ->g  . f I ag s / R I NGOB J F_S E C S 153; 

> 

/* 

* These  are  intended  to  track  reference  counts  for  swapping 

* pieces  of  keyring  out  of  memory,  but  are  currently  no-ops. 


CnCHK:627adbbfe5e11eee138219a1  5955d399b1a7db1  1 1 2 06a f 8b744 02 1 1 ef6be45434:: 


Pretty  Good  Privacy  5.0“^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


933 


pgpRngPub.c 


* 

* They're  called  in  a few  places  in  the  code  as  placeholders,  but 

* that's  just  for  documentation  purposes. 

*/ 

void 

r i n g 0 b j e c t H o I d ( un i on  RingObject  *obj) 

{ 

o (void)obj; 

} 

void 

r i ngOb j e c t Re  I ea s e ( un i on  RingObject  *obj) 

{ 

n (void)obj; 

> 

struct  RingPool  * 

r i ng S e t Poo  I ( s t r u c t RingSet  const  *set) 

{ 

n if  ( ! set ) 

a a return  NULL; 

a return  set -> pool; 

} 

/* 

* Return  errors  in  all  sorts  of  cases. 

*/ 

struct  RingError  const  * 

r i ng Poo  I E r r o r ( s t r u c t RingPool  const  *pool) 

{ 

a pgpAssert  (pool); 
n return  &pool->e; 

} 

VO  i d 

r i ng Poo  I C I ea r E r r o r ( s t r u c t RingPool  *pool) 

{ 

n if  (pool)  { 

a a pool->e.f  = (struct  RingFile  *)NULL; 
a a pool->e.fpos  = (word32)-1; 
a a poo  I ->e . e r ro r = 0; 

a a poo  I ->e . sy s e r r no  = 0; 

n } 

} 

struct  RingError  const  * 

r i ng S e t E r r o r ( s t r u c t RingSet  const  *set) 

{ 

a pgpAssert  (set); 
n return  & s e t ->poo I ->e ; 

} 

void 

r i ng Se t C I ea r E r r o r ( s t r uc t RingSet  *set) 

{ 

n if  (set) 

a a ringPoolClearError(set->pool); 

> 
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struct  RingError  const  * 

r i ng I t e r E r ro r ( s t r u c t Ringlterator  const  *iter) 

{ 

n pgpAssert  (iter); 
n return  8 i t e r-> s e t . poo  I ->e ; 

} 

void 

r i ng I t e r C L ea r E r r o r ( s t r u c t Ringlterator  *iter) 

{ 

a if  (iter) 

n n r i ng  Poo  I C L e a r E r ro  r ( i t e r->  s e t . poo  I ) ; 

} 

struct  RingError  const  * 

r i ng F i L eE r ro r ( s t rue t RingFile  const  *f) 

{ 

n pgpAssert  (f); 
a return  8 f ->s e t . poo  I ->e ; 

> 

void 

r i ng F i L eC L ea r E r ro r ( s t r u c t RingFile  *f) 

{ 

n if  (f) 

n n ringPooLCLearError(f->set.pooL); 

} 

/* 

* Is  the  object  a member  of  the  set? 

* Returns  the  level  of  the  object,  or  0 if  it  is  not. 

*/ 

i nt 

r i ng S e 1 1 sHembe r ( s t r u c t RingSet  const  *set,  union  RingObject  const  *obj) 

{ 

n int  level  = 1; 

n while  (obj->g.mask  8 set->mask)  ( 
n n if  (0BJIST0P(obj ) ) 
n n n return  level; 

n n obj  = obj->g.up; 

n n level ++; 

n > 

a return  0;n  /*  Not  a member  of  the  iterator  */ 

} 

struct  RingSet  const  * 

r i ng I t e r S e t ( s t r u c t Ringlterator  const  *iter) 

{ 

n if  (liter) 
n n return  NULL; 

n return  8iter->set; 

> 

struct  RingSet  const  * 

r i ng F i I e S e t ( s t r u c t RingFile  const  *file) 

{ 
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n if  ( ! f i I e ) 

0 n return  NULL; 

n return  &fiLe->set; 

> 

PgpVersion 

r i n g F i L e Ve r s i o n ( s t r u c t RingFiLe  const  *fiLe) 

{ 

if  ( ! f i Le) 

n returnO; 

n return  f i L e-> ve r s i on ; 

} 

/* 

* An  iterator  involves  a current  position  which  is  a stack,  with  an 

* accessible  stack-depth  value.  The  stack  depth  equals  the  level 

* of  the  last  r i ng I t e r N e x t Ob j e c t call,  and  the  stack  entries 

* are  the  return  values.  If  a query  is  made  for  a level  which 

* is  greater  than  the  stack  depth,  the  first  entry  on  the  list 

* of  descendants  of  the  top  entry  on  the  stack  is  returned. 

* Only  the  highest-level  entry  may  be  NULL;  that  indicates  that  the 

* end  of  the  list  there  has  been  reached.  It  is  illegal  to 

* ask  for  descendants  of  a NULL  entry;  although  returning  NULL 

* is  another  reasonable  option,  the  usefulness  is  unclear  and  the 

* stricter  rule  has  the  advantage  of  catching  bugs  faster. 

*/ 

/* 

* Find  the  next  object  of  the  given  level  in  the  given  iterator. 

* Returns  <0  on  error,  0 if  there  is  no  object,  or  the  level  if 

* there  is  one. 

*/ 

1 n t 

r i ng 1 1 e r Nex t Ob j e c t C s t r u c t Ringiterator  *iter,  unsigned  level) 

{ 

a union  RingObject  *obj; 

n pg p A s s e r t C i t e r ) ; 
n pgpAssertClevel); 

n pg p A s s e r t ( i t e r-> s e t . t y p e ==  R I NG S ET_ I T E R ATO R ) ; 

n /*  Get  the  head  of  the  list  to  search  */ 

a if  (level  <=  iter->level)  ( 

n n /*  Going  along  an  existing  level  */ 

n n iter->level  = level; 

n n obj  = i t e r->s  t a c k C I e V e I - 1 !)  ; 

n n if  (!obj) 

n n n return0; 

n n pgpAssert(obj->g.mask  S iter->set.mask); 

n n obj  = obj->g.next; 

n } e I se  { 

B n /*  Going  down  a level  */ 

B B pgpAssertClevel  ==  i t e r-> I e ve I +1 ) ; 

B B if(level>1){ 

B B B obj  = i t e r -> s t a c k C I e ve  I -2 ] ; 

B n B pgpAssert(obj); 

n B B pg p A s s e r t ( ob j ->g . ma s k S i t e r-> s e t . ma s k ) ; 
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n 

n 

n 

if  (0BJISB0T(obj ) ) 

Q 

n 

n 

n return  0; 

n 

n 

n 

obj  = obj ->g. down; 

D 

□ 

> 

else  { 

n 

□ 

a 

obj  = iter->set.pooL->keys; 

□ 

n 

> 

n 

n 

iter->LeveL  = Level; 

□ 

> 

n 

/* 

Search  for  the  next  item  of  interest 

n 

while 

(obj  SS  ! ( 0 b j ->g . ma s k & iter->set 

Q 

□ 

obj  = obj->g.next; 

n pgpAssert ( Leve L <=  R I NG M A X D E PT H ) ; 
n iter->stackCLeveL-1]  = obj; 

n return  obj  ? Level  : 0; 

> 


/* 

* More  complex  because  we  need  to  find  the  head  of  the  enclosing  List  and 

* search  forwards  for  the  Last  matching  object  that's  not  the  target  object. 
*/ 

i n t 

r i ng I t e r P r e vOb j e c t ( s t r u c t Ringiterator  *iter,  unsigned  Level) 

{ 

n union  RingObject  *obj,  *found,  *target; 

n pgpAssert(iter); 
n pg p As s e r t ( L e ve L ) ; 

n pg p A s s e r t ( i t e r-> s e t . t y pe  ==  R I NG S ET_I T E R ATO R ) ; 

n /*  There's  nothing  before  the  beginning  of  a List  */ 
n if  (Level  > iter->LeveL)  { 
n n pgpAsse r t ( L eve L ==  i t e r-> L e ve L +1 ) ; 
n n return  0; 

n > 

n /*  The  thing  we  want  the  predecessor  of  */ 
n target  = i t e r-> s t a c k C L e ve L -1 D ; 

n /*  The  head  of  the  List  to  search  along  */ 
n if  (level  > 1)  ( 

n n obj  = iter->stackCLeveL-2]; 

n n pgpAssert (obj  ); 

n n pgpAssert(obj->g.mask  S iter->set.mask); 

n n obj  = obj->g.down; 

n n /*  obj  = i t e r->s  t a c k C L e ve  L -2  3 ->g  . d o wn  ; */ 
n > e L s e { 

n n obj  = i t e r ->s e t . poo L -> key s ; 
n > 

n / * 

n * Search  forward  along  the  List  until  we  hit  the  current 

n * object,  kepping  track  of  the  Last  object  in  the  desired 

n * ri ngSet  . 

n * / 

n found  = NULL; 
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n while  (obj  !=  target)  { 
n n pgp As se r t ( ob j ) ; 

n n if  (obj->g.mask  S iter -> set. mask) 
n n a found=obj; 

a n obj  = obj->g.next; 

n } 

n if  (Ifound)  { 

n n /*  Hit  beginning  of  List,  set  up  as  beginning  */ 
n n iter->LeveL  = LeveL-1; 

n n return  0; 

n } 

n i t e r-> s t a c k C L e ve I - 1 D = found; 

n if  (OBJISBOTCf ound)  ) { 

an/*  Found  an  object,  but  no  children.  */ 
n n return  iter->LeveL  = Level; 

a } e L s e { 

n a /*  An  object  with  children  - set  up  that  List  at  end  */ 
n n pgpAssertC level  <=  R I N G M AX D E PT H ) ; 
n H iter->stackCLeveLD  = NULL; 

a n iter->LeveL  = LeveL+1; 

a > 

n return  (int)LeveL; 

> 

/*  The  Level  of  the  most  recent  r i n g 1 1 e r N e x t Ob j e c t ( ) call  */ 
unsigned 

r i ng I t e rC u r r en t Le ve L ( s t rue t Ringiterator  const  *iter) 
f 

n return  iter->LeveL; 

} 


* A trivial  Little  function  that  just  returns  the  current  object 

* at  a given  Level,  again. 

*/ 

union  RingObject  * 

r i ng I t e rCu r r en t Ob j e c t ( s t rue t Ringiterator  const  *iter,  unsigned  Level) 
{ 

B pg p A s s e r t ( i t e r ) ; 

B pgpAssertClevel); 

B pgpAssertCiter->set.type  ==  RINGSET_ITERATOR); 

B return  Level  > iter->LeveL  ? NULL  : i t e r->s t a c k C L e ve L -1 T ; 

> 

/* 

* Seek  to  the  next  object  at  the  deepest  Level  possible. 

* 

* Equivalent  to: 

* i n t i ; 

* unsigned  L = ringIterCurrentLeveL(iter)+1; 

* 

* while  (L  &&  !(i  = r i ng I t e r Ne x t Ob j e c t ( i t e r , L))) 

*B  --1; 

* return  i; 

*/ 
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i n t 

r i ng I t e rNex t Ob j e c t Any whe re ( s t ru c t Ringiterator  *iter) 
{ 

n union  RingObject  *obj; 

n unsigned  Level  = iter->LeveL; 

n ringmask  mask  = i t e r-> s e t . ma s k ; 

n pg  p A s s e r t ( i t e r ) ; 


n 

pg p A s s e r t ( i t e r->s e t . t y pe  ==  R I N G S ET_ I T E R AT 0 R ) 

n 

/* 

Find 

first  object  to  be  considered  */ 

n 

if 

(! Level  ) { 

n 

D 

Level  = 1 ; 

n 

n 

ob  j 

= i t e r-> s e t . poo L -> key s ; 

n 

> e 

L se 

{ 

n 

Q 

ob  j 

= i t e r-> s t a c k C L e ve L -1 D ; 

n 

Q 

i f 

(obj)  { 

n 

n 

Q 

pg p A s s e r t ( ob j ->g . ma s k S mask); 

D 

n 

n 

if  (OBJISBOTCobj  ) ) { 

n 

n 

Q 

n obj  = obj->g.next; 

n 

o 

n 

> else  { 

o 

Q 

n 

n Level ++; 

n 

o 

n 

n obj  = obj->g.down; 

n 

Q 

n 

> 

Q 

D 

> 

n 

> 

n 

for 

) { 

n 

n 

while  (obj)  ( 

D 

n 

D 

if  (obj->g.mask  S mask) 

n 

□ 

n 

a i t e r-> s t a c k C 1 e ve L -1 D 

a 

n 

Q 

n iter->LeveL  = Level; 

a 

Q 

n 

n return  (int)LeveL; 

n 

n 

n 

} 

n 

D 

H 

obj  = obj->g.next; 

n 

n 

> 

n 

n 

if 

(!-- level) 

n 

n 

n 

break; 

n 

n 

obj 

= i ter->stackC Leve 1-1 ]; 

n 

n 

pgpAssertCobj ); 

n 

Q 

obj 

= obj->g.next; 

n 

> 

n 

/* 

End 

of  List,  no  Luck  */ 

o 

i t e r->s t a c kC 0 D = NULL; 

n 

i t e r->  level  = 1 ; 

Q 

return 

0; 

} 

/*  Reset  the  iterator  to  the  beginning  of  the  given  Level  */ 
i n t 

r i ng I t e r Rewi nd ( s t ru c t Ringiterator  *iter,  unsigned  level) 

{ 

n pg p A s s e r t ( L e ve L ) ; 

n pg p A s s e r t ( i t e r-> L e ve L >=  Level  - 1); 
n iter->Level  = Level-1; 
n return  0; 
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} 

/*  Reset  the  iterator  to  the  end  of  the  given  Level  */ 
i n t 

r i ng I t e r F a s t F o r wa r d ( s t r u c t Ringiterator  *iter,  unsigned  level) 

{ 

n pg p A s s e r t ( L e ve L ) ; 

n pgpAssertClevel  <=  iter->LeveL  + 1); 
n if  (Level  > R I NG H AX D E PT H ) 

n n level  = R I NG M AX D E PT H ; 

n else 

n n i ter->stackll  Leve  L-1  !1  = NULL; 
n iter -> Level  = Level; 
n return  0; 

} 

/* 

* Seek  the  iterator  to  the  given  object,  state  as  if  it  just 

* returned  the  object. n Returns  the  Level  of  the  object,  or  <0 

* on  error. 

*/ 

i nt 

r i ng I t e r S e e kTo C s t r u c t Ringiterator  *iter,  union  RingObject  *obj) 
{ 

n union  RingObject  *p,  *pp; 
n int  Level; 

n pg p A s s e r t ( i t e r->s e t . t y pe  ==  R I NG S ET_ I T E R ATO R ) ; 

n if  ( ! ( ob j ->g . ma s k & i t e r-> s e t . ma s k ) ) 
n n return  0;n  /*  Not  a member  */ 


Q 

/* 

A bit  ad-hoc;  there  i 

s a genera  L 

n 

i f 

(OBJ ISTOPCobj ) ) { 

n 

n 

i t e r-> s t a c k C 0 ] = obj 

r 

n 

n 

Level  = 1 ; 

n 

> 

else  { 

n 

Q 

p = obj->g.up; 

n 

n 

pgpAssert(p->g.mask 

& i ter->set . 

n 

n 

if  (OBJISTOP(p))  { 

Q 

D 

n i t e r-> s t a c k C 0 D = 

p; 

Q 

n 

n i ter->stackC1 3 = 

ob  j ; 

n 

n 

a Level  = 2; 

Q 

n 

> else  { 

a 

o 

n pp  = p->g.up; 

n 

n 

B pg p A s s e r t ( pp->g . 

mask  & iter- 

n 

n 

B pg p A s s e r t ( OB J I S TO P ( pp  ) ) ; 

n 

n 

B i t e r->s t a c k C 0 D = 

pp; 

n 

n 

B i t e r->s t a c k C 1 D = 

p; 

Q 

n 

B i t e r->s t a c k C 2 D = 

ob  j ; 

n 

Q 

B Level  = 3; 

n 

n 

> 

n 

> 

n 

return  iter->LeveL  = Level; 

static  void 

r i ng Se t Coun t Li s t ( un  i on  RingObject  const  *obj,  ringmask  mask, 
CCCHK:5590088b5b6fe2bb0fb570a940033188ca9edd969aa1e7e2487a8caa716643cbd]3 
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unsigned  *counts,  unsigned  depth) 

{ 

a while  (ob j ) { 

n n if  (obj->g.mask  S mask)  { 
n n n countsC0!]  + + ; 

n n n if  (depth  &S  ! OB J I S BOT ( o b j ) ) { 

n n n n r i n g S e t C o u n t Li s t ( ob j ->g . do w n , mask, 
n n n n counts+1,  depth-1); 

a a n } 

n n } 

n n obj  = obj->g.next; 

n } 

> 

/* 

* Count  the  number  of  objects  in  an  iterator  down  to  a given  depth. 

*/ 
i nt 

r i ngSet Count ( s t ru c t RingSet  const  *set,  unsigned  *counts,  unsigned  depth) 

n unsi gned  i =0; 

n for  (i  = 0;  i < depth;  i++) 

n n count  s C i 3 = 0; 

n if  (set  &&  set->mask  SS  depth  > 0) 

n n r i ng S e t C ou n t L i s t ( s e t ->poo L -> key s , set->mask,  counts,  depth-1); 
n return  0; 

} 


static  void 

ri ngSetCountTypesLi st ( uni  on  RingObject  const  *obj,  ringmask  mask, 

unsigned  *counts,  unsigned  max) 


{ 


Q 

i n t 

t; 

n 

while  (obj)  { 

n 

a 

if 

(obj->g.mask  S mask)  { 

n 

a 

a 

t = r i ngOb j ec t Ty pe ( ob j ) ; 

n 

a 

a 

if  ((unsigned)t  <=  max) 

n 

a 

a 

n c oun t s C t -1 3 ++; 

n 

a 

a 

if  ( ! OBJ  ISBOKob  j ) ) 

D 

a 

a 

n ri ngSetCountTypesLi St (obj 

n 

a 

a 

n counts. 

D 

a 

> 

S 

a 

obj 

= obj ->g .next; 

Q 

> 

/* 

* Count  the  number  of  objects  in  an  iterator  of  various  types. 
*/ 


i n t 

ri ngSetCountTypes ( St ruct  RingSet  const  *set,  unsigned  *counts,  unsigned  max) 
{ 

n unsigned  i = 0; 


n for  (i  = 0;  i < max;  i++) 

a n count  s C i 3 = 0; 
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n if  (set  &&  set->iiiask  &&  max  > 0) 

n n r i ng Se t Coun t Ty pe s Li s t ( se t ->poo I ->key s , set->mask,  counts,  max); 
n return  0; 

} 

struct  Ringiterator  * 

r i ng  1 1 e r C r ea t e ( s t r u c t RingSet  const  *set) 

{ 

n struct  RingPooL  *pooL  = set->pooL; 

n struct  Ringiterator  *iter; 

a pgpAssert(!RINGSETISMUTABLECset)); 

n /*  Allocate  the  structure  */ 
n iter  = pool->freeiter; 
n if  (iter)  { 

a n pool->freeiter  = (struct  Ringiterator  *)iter->set.next; 
n n pgpAssert ( i ter->set . type  ==  R I N G S ET_ F R E E ) ; 
a } e I s e { 

n n iter  = (struct  Ringiterator  * ) memPoo I N e w ( & poo  I -> s t r u c t s , 
n n n n n n n struct  Ringiterator); 

a n if  (liter)  { 

n n n r i n g A I I o c E r r ( poo  I ) ; 
n n n return  NULL; 

n n } 

n > 

n /*  Okay,  allocated  - fill  it  in  */ 
n iter->set.pool  = pool; 
n i t e r-> s e t . n ex t = pool->sets; 
n i ter->set . type  = R I NG S ET_ I T E R ATO R ; 
n pool->sets  = &iter->set; 
n i t e r->se t . ma s k = set->mask; 

H iter->level  = 0;n  /*  Rewind  to  beginning  */ 

n return  iter; 

> 

void 

r i ng  1 1 e r De s t roy ( s t r u c t Ringiterator  *iter) 

{ 

n struct  RingPool  *pool; 
n struct  RingSet  **setp; 


n if  (iter)  { 

n n pool  = i t e r-> s e t . poo  I ; 

n n pgpAssert ( i ter->set . type  ==  R I N G S ET_ I T E R ATOR  ) ; 
n a i ter->set . type  = R I NG S ET_ F R E E ; 

n n /*  Remove  it  from  the  list  of  allocated  sets  */ 
o a setp  = Spool -> sets; 

n n while  (*setp  !=  &iter->set)  { 
n n n pgpAssert(*setp); 

n n n setp  = &(*setp)->next; 

n n } 

n n *setp  = iter->set.next; 

n n /*  Add  to  the  list  of  free  iterators.  */ 
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H n iter -> set. next  = (struct  RingSet  *)pooL->freeiter; 

n a poo L -> f r e e i t e r = iter; 

n } 

> 

static  struct  RingSet  * 
r i ng S e t A L L o c ( s t r u c t RingPooL  *pooL) 

{ 


n 

struct  RingSet  *set; 

n 

/*  Allocate  the  structure  */ 

n 

set  = pooL->freesets; 

n 

if  (set)  { 

a 

n poo L ->f r ee s e t s = set->next 

r 

a 

> else  { 

a 

n set  = (struct  RingSet  * ) memPoo L N e w ( &poo L - 

a 

n n n n n struct 

RingSet); 

a 

n if  (!set)  ( 

n 

a a r i ng A L L o c E r r ( poo L ) ; 

a 

n n return  NULL; 

a 

n > 

a 

} 

a 

/*  Okay,  allocated  - fill  it  i 

n */ 

n 

set->poo  L = poo  1 ; 

n 

set->next  = pooL->sets; 

o 

pool -> sets  = set; 

n 

/*  set->mask  and  set->type  uni 

nitialized  */ 

n 

return  set; 

> 

struct  RingSet  * 

r i ng S e t C r ea t e ( s t r u c t RingPooL  *pooL) 

{ 

n ringmask  mask; 

n struct  RingSet  *set; 

n i nt  bit; 

n if  ( ! poo  L ) 

n n return  NULL; 

n /*  Allocate  a new  bit  */ 
n bit  = r i ngBi t A L L oc ( poo L ) ; 
n if(bit<0) 
n n return  NULL; 

n mask  = ( r i ng ma s k ) 1 <<b i t ; 

n /*  Allocate  the  structure  */ 
n set  = r i ng S e t A L L o c ( poo L ) ; 
n if  (set)  ( 
n n set->mask  = mask; 

n n set->type  = R I N G S ET_HUT AB L E ; 
n n poo  I ->a I L o c ma s k |=  mask; 
n } 

n return  set; 

> 
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void 

r i ng S e t De s t roy ( s t ru c t RingSet  *set) 
{ 

n struct  RingPooL  *pooL; 
n struct  RingSet  **setp; 


n 

i f 

(set)  { 

n 

□ 

pool  = set -> pool; 

n 

n 

pgpAssert(set->type  < RINGSET_FREE); 

n 

n 

set->type  = R I NG S ET_ F R E E ; 

n 

□ 

/*  Remove  it  from  the  list 

of  allocated 

n 

n 

setp  = Spool -> sets; 

n 

n 

while  (*setp  !=  set)  { 

□ 

n 

a pg p A s s e r t ( * s e t p ) ; 

□ 

□ 

a setp  = 8(*setp)->next; 

n 

n 

> 

n 

□ 

*setp  = set -> next; 

n 

n 

/*  Add  to  the  list  of  free 

sets . */ 

n 

n 

set->next  = poo  1 ->f r e e s e t s ; 

n 

u 

n 

> 

pool->freesets  = set; 

> 

/* 

* Freeze  a RingSet  so  that  you  can  start  doing  set  operations 

* on  it,  copying  it,  etc. 

*/ 

i nt 

r i ng S e t F r eeze ( s t r uc t RingSet  *set) 

{ 

n if  (set)  { 

n n if  (set->type  ==  R I NG S ET_M UT AB LE ) 

n n n set->type  = R I NG S ET_ I HHUT AB LE ; 

n n pg p A s s e r t ( s e t -> t y pe  ==  R I N G S ET_ I MHUT AB LE  ) ; 

n } 

n return  0; 

> 

struct  RingSet  * 

r i ng Se t Copy ( s t ru c t RingSet  const  *s) 

{ 

n struct  RingSet  *set; 

n if  ( ! s) 

a n return  NULL; 

n pgpAssert(!RINGSETISMUTABLE(s)); 
n set  = r i ng S e t A L L o c ( s ->poo L ) ; 
a if  (set)  { 

a a set->mask  = s->mask; 

a a set->type  = R I NG S ET_ I HMUT AB LE ; 
a > 

a return  set; 

} 
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/*  This  accepts  NULL  as  an  alias  for  "no  such  set"  */ 
struct  RingSet  * 

r i ngSe t Un i on ( s t ru c t RingSet  const  *s1,  struct  RingSet  const  *s2) 
{ 

a struct  RingSet  *set; 

n if  ( ! si  ) 

n n return  r i ng S e t C opy ( s 2 ) ; 

n set  = ringSetCopy(sl); 

n if(set&&s2){ 

n n pgpAssert ( si ->poo L ==  s2->pooL); 
n n pgpAssertC ! RINGSETISMUTABLE(s2)  ); 

n n set->mask  |=  s2->mask; 

n } 

n return  set; 

> 


/**  The  following  operations  only  apply  to  mutable  RingSets  **/ 

/* 

* Add  an  object  to  a mutable  RingSet.  That  includes  the  all  of  the 

* object's  parents  in  order  to  main  the  proper  RingSet  invariants. 
*/ 

i n t 

r i ng Se t AddOb j ec t ( s t r u c t RingSet  *set,  union  RingObject  *obj) 

{ 


n 

ringmask  mask  = set->mask; 

D 

pgpAssert (RINGSETISHUTABLE (set)); 

n 

pg p As s e r t ( ! ( ma s k & (mask-1))); 

Q 

if 

( ob  j 

&S  ! ( ob j ->g . ma s k & mask))  ( 

n 

n 

ob  j 

->g . ma  s k | = mask; 

n 

n 

/* 

Ensure  all  parents  are  added 

s 

n 

w h i 

le  ( ! OBJ IST0P(ob j ) ) { 

n 

n 

□ 

obj  = obj->g.up; 

Q 

n 

n 

if  (obj->g.mask  & mask) 

n 

Q 

□ 

n break; 

B 

Q 

a 

obj->g.mask  |=  mask; 

n 

n 

> 

n 

> 

n 

return 

0; 

} 

/* 

* Add  an  object  and  its  children  to  a mutable  RingSet.  Also  will  do 

* the  object's  parents.  src  RingSet  controls  which  children  are  added. 
*/ 

i nt 

ringSetAddObjectChildrenCstruct  RingSet  *dest,  struct  RingSet  const  *src, 
n union  RingObject  *obj) 

{ 

n struct  RingSet  const  *srcx; 

n struct  Ringiterator  *iter; 

n int  level,  initlevel; 

n int  nobjs; 
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□ 

n 

n 

n 

a 

n 

□ 

n 

u 

a 

n 

n 

n 

n 

n 

n 

n 

n 

n 

u 

n 

n 

n 

u 

0 
n 
n 
a 
n 

D 

n 

□ 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

□ 

> 

/* 

★ 

★ 

* 

*/ 

1 nt 


i n t e r r ; 

/*  Need  to  iterate  over  src,  make  a copy  if  necessary  */ 
srcx  = src; 

if  ( RINGSETISHUTABLE ( sr c ) ) { 

n struct  RingSet  *src1  = r i n g S e t C r e a t e (ringSetPooL  (src)); 
a if  (!src1) 

n n return  r i ng S e t E r r o r ( s r c ) ->e r r o r ; 
n r i n g S e t Ad d S e t Csrcl,  src); 

a r i n g S e t F r e e z e (srcl); 

n src  = (struct  RingSet  const  *)src1; 

> 

n n 

/*  First  add  the  object  */ 

if  ( ( e r r = r i n g S e t AddO b j e c t ( d e s t , obj))  < 0) 
n return  err; 

iter  = r i ng 1 1 e r C r e a t e ( s r c ) ; 
if  (liter) 

n return  ringSetError(src)->error; 


nobjs  = 1; 

initLeveL=ringIterSeekTo(iter,  obj); 
if  (initlevel  < 0) 
n return  initlevel; 
level  = initlevel  + 1; 
while  (level  > initlevel)  { 
n union  RingObject  *child; 

a err  = r i n g I t e r N e x t Ob j e c t ( i t e r , level); 
a if(err<0){ 
n n r i ng  1 1 e r De  s t r oy  ( i t e r ) ; 

n n return  err; 

n > 

n if  (err>0)  { 

n Q child  = ringIterCurrentObject(iter,  level); 

a n if  (Ichild) 

non  return  r i n g S e t E r r o r ( s r c ) ->e  r r o r ; 
n n if  ( ( e r r = r i n g S e t Ad d 0 b j e c t ( d e s t , child))  < 0) 
n n a returnerr; 

n n ++nobjs; 

n n ++ level; 

a } e I se  { 
n n --level; 

n > 

> 

ringlterDestroy(iter); 

/*  Destroy  set  copy  if  we  made  one  */ 
if  (src  !=  srcx) 

n r i ng Se t Des t roy  ((struct  RingSet  *)src); 
return  nobjs; 


Remove  an  object  from  a mutable  RingSet.  That  includes  the  all  of  the 
object's  children  in  order  to  main  the  proper  RingSet  invariants. 

(Done  recursively.) 
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r i ng S e t RemOb j e c t ( s t r u c t RingSet  *set,  union  RingObject  *obj) 

{ 

a pgpAsse rt( RINGS ETISHUTABLE( set)); 
n pg p A s s e r t ( ! ( s e t ->ma s k & ( s e t ->ma s k-1 ) ) ) ; 

n / * 

n * Remove  this  object  and  all  its  children, 
n * As  an  optimization,  omit  scanning  children  if  the 

n * object  is  not  already  in  the  set. 

n * / 

n if  (obj  &&  obj->g.mask  & set->mask)  { 
n n if  ( ! OB J ISBOTCob j ) ) { 

n n n union  RingObject  *obj2  = obj; 

n n n for  (obj2  = ob j 2->g . d o wn ; obj2;  obj2  = ob j 2->g . next ) 

n n n n ringSetRemObjectCset,  obj2); 

n n } 

n n obj->g.mask  &=  “set->mask; 

n n r i ngGa r ba geCo  I I e c t Ob j e c t ( se t->poo  I , obj); 

n > 

n return  0; 

} 

/*  Helper  function  for  r i ng S e t Add S e t */ 
static  void 

ri ngSet AddLi St (uni  on  RingObject  *obj,  ringmask  destmask,  ringmask  srcmask) 
{ 

n while  (obj)  ( 

n n if  (obj->g.mask  S srcmask)  ( 

n n n obj->g.mask  |=  destmask; 

n n n if  ( ! OB J I SBOT ( ob j ) ) 

n n n n r i n g S e t Add  Li s t ( ob j ->g . down , destmask,  srcmask); 

n n } 

n n obj  = obj->g.next; 

n > 

> 

i nt 

r i ngSe t AddSe t ( s t r u c t RingSet  *set,  struct  RingSet  const  *set2) 

{ 

n pgpAssert(RINGSETISMUTABLE(set)); 
n if  (set2)  ( 

n n pgpAsse rt ( set->poo I ==  set2->pool); 

n n ringSetAddList(set->pool->keys,  set->mask,  set2->mask); 

n } 

n return  0; 

} 

/* 

* Subtracting  sets  is  simplified  by  the  proper-set  requirement. 

* If  1 remove  a key  (because  it's  in  set2),  I have  to  remove  all 

* children  of  the  key,  so  I just  use  r i ng C I e a r Ha s k to  do 

* the  job.  If  I don't  (because  it's  not  in  set2),  then  it's 

* guaranteed  that  none  of  its  children  are  in  set2  either, 

* so  there's  no  need  to  examine  any  children. 

*/ 

i n t 

r i ng S e t S u b t r a c t S e t ( s t r u c t RingSet  *set,  struct  RingSet  const  *set2) 

CCCHK: 904330 10d636b8c71f3744d7330c2d6576aaa51ee662  8dccc1  0690292925ec3be:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


947 


pgpRngPub.c 


{ 

n union  RingObject  *obj; 
n ringmask  mask  = set->mask; 

n pgpAssertCRINGSETISMUTABLECset)); 
n pgpAssert(mask); 


n 

□ 

□ 

n 

n 

□ 

n 

□ 

n 

n 

□ 

□ 

> 


i f 

n 

□ 

n 

D 

n 

□ 

□ 

□ 

n 


(set2  &S  set2->mask)  { 
pgpAssert(set->pooL  ==  set2->pooL); 

for  (obj  = set->pooL->keys;  obj;  obj  = obj->g.next)  { 
n if  (obj->g.mask  S mask  SS  obj->g.mask  8 set2->mask)  { 
n n obj->g.mask  8=  "mask; 
n n if  ( ! OBJ ISBOTCob j ) ) 

n n n r i ng C I ea r Ha s k ( s e t ->poo L , 8ob j ->g . d o wn  , 

nnn  "mask); 

n > 

} 


} 


return  0; 


static  int 

r i ng S e t I n t e r se c t Li s t ( un i on  RingObject  *obj,  ringmask  ml,  ringmask  m2, 

ringmask  mdest) 

{ 

n int  flag  = 0; 


n 

wh  i 

L e (obj) 

{ 

n 

o 

1 f 

((obj 

->g.mask  8 ml)  88  (obj->g.mask  8 m2)) 

n 

n 

n 

flag 

= 1; 

n 

n 

D 

ob  j - 

>g.mask  |=  mdest; 

n 

n 

n 

i f ( 

! OBJ ISB0T(ob j ) ) 

n 

n 

□ 

n 

ringSetIntersectList(obj->g.down, 

□ 

n 

n 

□ 

ml,  m2,  mdest); 

n 

Q 

> 

u 

n 

obj 

= obj ->g . nex t ; 

n 

> 

u 

return 

flag; 

> 


struct  RingSet  * 

r i ng Se t I n t e r se c t i on ( s t r u c t RingSet  const  *s1,  struct  RingSet  const  *s2) 
n struct  RingSet  *set; 
a i f ( ! si  I I ! s2) 

n n return  (struct  RingSet  *)NULL; 

n pg p As s e r t ( s 1 ->poo L ==  s2->pooL); 

n pgpAssert (! RINGS ETISMUTABLE (si)); 
n pgpAsse rt(! RINGS ETISMUTABLE (s2)); 


n 

/* 

Do  a few  trivial  cases  without  alLocati 

ng  bits, 

. */ 

n 

□ 

i f 

n 

(!(s1->mask  8 "s2->mask))n 

return  r i ng S e t C o py ( s 1 ) ; 

/ * si  is  a 

subset 

0 f 

s2 

- copy 

si 

*/ 

n 

o 

i f 

□ 

(!(s2->mask  8 "s1->mask))n 

return  r i ng S e t C opy ( s 2 ) ; 

/*  s2  is  a 

subset 

0 f 

si 

- copy 

s2 

*/ 
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n 

Q 

n 

n 

□ 

n 

□ 

□ 

n 

□ 

□ 

D 

> 


set  = r i ngSe t C rea t e ( s 1 ->poo L ) ; 
if  (set)  { 

n if  ( ! r i ngS  e 1 1 n t e rsec  t Li  s t ( s 1 ->poo  L ->key  s , s1->niask,  s2->mask, 
B set->mask) ) 

B { 

B B /*  Empty  set  - free  bit  */ 

B B si ->poo  L ->a  L 1.  ocma  s k &=  ~set->mask; 

B B set->mask  = 0; 

B } 

B set->type  = R I NG S ET_ I MMUT AB LE ; 

> 

return  set; 


static  void 

ringSetDiffListCunion  RingObject  *obj,  ringmask  ml,  ringmask  m2, 
ringmask  mdest) 

{ 

B while  (obj)  { 

B B if  ( ( ob j ->g . ma s k & ml)  SS  ! ( ob j ->g . ma s k & m2))  { 

B B B obj->g.mask  |=  mdest; 

B B B if  ( ! OBJ ISBOTCob j ) ) 

B B n n r i n g S e t D i f f L i s t C ob j ->g . do wn , ml,  m2,  mdest); 

B B > 

B B obj  = obj ->g. next; 

B } 

} 

/*  Return  s1-s2.  */ 
struct  RingSet  * 

r i ng Se t D i f f e r en c e ( s t r u c t RingSet  const  *s1,  struct  RingSet  const  *s2) 

{ 

B Struct  RingSet  *set; 

B if  ( ! si  ) 

B B return  NULL; 

B i f C ! s2  I I ! s2->mask) 

B B return  r i ng S e t C opy C s 1 ) ; 

B pgp As s e r t ( s 1 ->poo L ==  s2->pooL); 

B pgpAssert(!RINGSETISMUTABLE(s1)); 

B pgpAssert(!RINGSETISHUTABLE(s2)); 

B if  (!(s1->mask  S ■s2->mask))  { 

B B /*  s1->mask  is  a subset  of  s2->mask,  so  result  is  empty  */ 

B B set  = r i ng S e t A I I o c ( s 1 ->poo  I ) ; 

B B if(set){ 

B B B set->mask=0; 

B B B set->type  = R I NG S ET_ I MMUT ABLE ; 

n n } 

B > e I s e f 

B B set  = r i ng S e t C r ea t e ( s 1 ->poo  I ) ; 

B B if  (set)  { 

B B B r i ng S e t D i f f Li  s t ( s 1 ->poo I -> key s , s1->mask,  s2->mask, 

B B B B n set->mask); 

B B B set->type  = RINGSET_IMHUTABLE; 

Bn} 

B } 
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n return  set; 

} 

i n t 

r i n g F i L e I s D i r t y ( s t r u c t RingFiLe  const  *fiLe) 

{ 

n return  file  ? fiLe->fLags  S R I N G F I LE F _ D I RT Y : 0; 

> 

i nt 

r i ng F i L e I sT r us t C hang ed ( s t r u c t RingFiLe  const  *fiLe) 

{ 

n return  file  ? fiLe->fLags  & R I N G F I L E F _T R U S T C H ANG E D : 0; 
} 

struct  RingPooL  * 

r i ng Poo L C r ea t e ( s t r u c t PgpEnv  const  *env) 

{ 

n struct  RingPooL  *pooL; 

n pooL  = (struct  RingPooL  * ) pg pMem A L L o c ( s i z eo f ( * poo L ) ) ; 
a if  (pooL) 

n n r i n g Poo L I n i t ( poo L , env); 
n return  pooL; 

} 


void 

ri ngPoo L Dest roy ( St ruct  RingPooL  *pooL) 
{ 

n if  (pooL)  { 
n n r i ng Poo L F i n i ( poo L ) ; 
n n pgpMemFree(pooL); 
n > 

} 


union  RingObject  * 

r i ng Key By  I d8 ( s t r u c t RingSet  const  *set,  byte  pkaLg,  byte  const  *keyID) 
{ 

n struct  RingKey  *key; 


n 

n 

n 

a 

a 

□ 

□ 

□ 

□ 

Q 

n 

n 

□ 

} 


if  ((pkaLgll)  ==  3)n/*  viacrypt  */ 
n pkaLg  = 1; 

for  (key  = se t->poo L ->ha s h t ab L e C key  I D C 0 D D ; key;  key  = key->utiL)  { 
n if  ( ( ( ( key->pka Lg I 1 ) ==  3)  ? 1 : key->pkaLg)  ==  pkaLg  SS 

n memc mp ( key  I D , key->keyID,  8)  ==  0)  { 

n n if  (!(key->mask  S set->mask)) 
ana  break; 

B B ringObjectHoLd((union  RingObject  *)key); 

B B return  (union  RingObject  *)key; 

B } 

} 

/*  Fai Led  */ 
return  NULL; 


/***  Access  functions  for  information  about  objects  ***/ 


i n t 
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ringKeyErrorCstruct  RingSet  const  *set,  union  RingObject  *key) 

{ 

n byte  const  *p; 
n site_t  Len; 

n pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

n pg p A s s e r t ( key->g . ma s k & set->mask); 

n if  ( ! ( key->g . f Lags  & KEYF_ERROR)) 
n n return  0; 

a p = (byte  const  * ) r i ng F e t c h Ob j e c t ( s e t , key,  &len); 
n if  ( ! p ) 

n n return  ringSetError(set)-> error; 

n return  ringKeyParseCp,  Len,  NULL,  NULL,  NULL,  NULL,  NULL,  0); 

> 

uns i gned 

r i ngKeyBi t s ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

n pgpAss e r t ( OB J I SKE Y ( key  ) ) ; 

n pg p A s s e r t ( key->g . ma s k & set->mask); 
n (void)set; 
n return  key-> k . key b i t s ; 

> 

wo  rd32 

r i ng Key C rea t i on ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

a pgpAs se r t ( OB J I SKE Y ( key ) ) ; 

n pgpAs se r t ( key->g . ma s k S set->mask); 

n (void)set; 
n return  key-> k . t s t a mp ; 

> 

wo  rd32 

r i ng Key  Exp i ra t i on ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

n pgp Asse r t ( OB J I SKE Y ( key ) ) ; 

n pgpAsse r t ( key->g . ma s k & set->mask); 
n (void)set; 

n if  ( key-> k . t s t a mp  ==  0 | | key->k . va L i d i ty  ==  0) 
n n return  0;  /*  vaLid  indefiniteLy  */ 

n e L s e 

a a return  key->k.tstamp  + <key->k.vaLidity  * 3600  * 24); 

> 

/* 

* If  caLLed  for  a subkey,  force  to  just  encryption. 

* If  caLLed  for  a key  with  a subkey,  return  the  "or"  of  both. 

* ELse  just  do  the  key  itseLf. 

*/ 

i n t 

ri ngKeyUseCstruct  RingSet  const  *set,  union  RingObject  *key) 

{ 

n int  use; 

n pg  p A s s e r t ( OB  J I S KE  Y ( key  ) ) ; 
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n pgpAssert(key->g.mask  S set->mask); 

n use  = pgpKeyUse(pgpPkaLgByNumber(key->k.pkaLg)); 
n if  ( OBJ ISSUBKEYC key ) ) 
n n use  &=  PG P_ P KU S E_ E N C R YPT ; 

B for  (key=key->g.down;  key;  key=key->g.next)  { 

B B if  ( OB J I S S UBKE Y ( key ) &&  r i ng S u b key Va L i d ( s e t , key)) 

B B n use  1=  pgpKeyUse(pgpPkaLgByNumberCkey->k.pkaLg)); 

B } 

B return  use; 

} 

byte 

r i ng Key T r u s t ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

B pgpAssert (OBJ ISKEYC key) ); 

B pg p A s s e r t ( ke y->g . ma s k S set->mask); 

B (void)set; 

B if  ( ! ( key->g . f Lags  & ( R I NGOB J F _T RU S T ) ) ) 

B n ringMntVaLidateKey  (set,  key);B 
B return  key->k. trust  S PG P_KE YT RU ST_H A S K; 

} 

void 

ri ngKeySetTrust (st ruct  RingSet  const  *set,  union  RingObject  *key,  byte  trust) 
{ 

B pgpAssert(OBJISKEY(key)); 

B pgp As se r t ( key->g . ma s k & set->mask); 

B pgpAssert(trust==PGP_KEYTRUST_UNKNOWN  ||  t r u s t == PG P_KE YT R U S T_N E V E R || 

B t rust==PGP_KEYTRUST_HARGINAL  ||  t r u s t ==PG P_KE YT RU ST_ C OH P LET E ) ; 

B pgpAssert  ( ! ( key-> k . t r u s t S PG P_KE YT R U ST F_BU C KS TOP ) ) ; 

B if  ( key->k . t rust  S ( PG P_KE YTRU S T F_R EVOKE D | PG P_KE YT R U ST F_ EX P I R E D ) ) 

B return; 

B if  ( ( key->k . t rust  S PG P_KE YTR U S T_M A S K ) !=  trust)  { 

B B key->k. trust  = ( key-> k . t r u s t S " PG P_KE YT R U ST_H A S K ) + trust; 

B B key->g. flags  |=  R I N G OB J F_T RU S T C H ANG E D ; 

B n ringPooLMarkTrustChanged  (set->pooL,  key->g.mask); 

B > 

B key->g. flags  |=  RINGOBJ F_TRUST; 

> 


/* 

* Used  to  set  a key  as  an  "axiomatic"  key,  that  is,  one  for  which 

* we  hold  the  private  key.  This  also  involves  setting  each  name  on  that 

* key  as  having  complete  validity. 

*/ 

void 

r i n g Key S e t A X i oma t i c ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

pgpAssert(OBJISKEY(key)); 

pgpAs se rt ( key->g . ma s k S set->mask); 

if  ( ! r i ngKey I s S e c (set,  key)  || 

B key->k. trust  S ( PG P_KE YT R U ST F_BU C KSTO P | PG P_KE YT R U S T F_R EVOKE D ) ) 
return;  /*  already  axiomatic  or  can't  set  */ 

key->k. trust  8=  ~ PG P_KE YT RU S T_M A S K; 

key->k. trust  |=  ( PG P_KE YT RU S T F _BU C KSTO P | PG P_KE YT R U S T_U LT I M AT E ) ; 
ringPooLMarkTrustChanged  (set->pooL,  key->g . ma s k ) ; 
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key->g. flags  |=  (RINGOBJF_TRUSTCHANGED  | RINGOBJF_TRUST); 

} 


/*  Reset  an  axiomatic  key.  Trust  is  set  to  undefined.  */ 
void 

ri ngKeyReset Axi omat i c (struct  RingSet  const  *set,  union  RingObject  *key) 
{ 

pgpAssert(OBJISKEY(key)); 
pg p A s s e r t ( key->g . ma s k & set->mask); 
if  ( ! ( key->k . t rust  S PGP_KE YTRUST F_BUCKSTOP  ) ) 
return;  /*  not  axiomatic  */ 

key->k. trust  8=  ~ PG P_KE YT R U ST F_BU C KSTO P ; 
key->k. trust  = ( key-> k . t r u s t 8 ‘ PG P_KE YT R U S T_M AS K ) + 

PGP_KEYTRUST_UNDEFINED; 

ringPooLMarkTrustChanged  (set->pooL,  key->g.mask); 
key->g. flags  |=  (RINGOBJF_TRUSTCHANGED  | RINGOBJF_TRUST); 

> 

i n t 

ri ngKeyAxi omat i c ( St ruct  RingSet  const  *set,  union  RingObject  *key) 

{ 

n (void)set;n  /*  Avoid  warning  */ 
n pgpAssert(OBJISKEY(key)); 
n pgpAssert(key->g.mask  8 set->mask); 
n return  key->k. trust  8 PG P_KE YTRU S T F_BU C KST 0 P ; 

> 


/*  Return  TRUE  if  the  key  is  a subkey  */ 
i nt 

r i ng Key  I s S u b key  (struct  RingSet  const  *set,  union  RingObject  *key) 
{ 

(void)set; 

return  OB J I S S UBKE Y ( key ) ; 

> 


i n t 

r i ngKey D i sa b I ed ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

n (void)set;n  /*  Avoid  warning  */ 
n pgpAs se r t ( OB J I SKE Y ( key ) ) ; 

n pgpAssert ( key->g .mask  8 set->mask); 
n return  key->k. trust  8 PG P_KE YT RU ST F_D I S AB L E D ; 

> 

void 

r i ngKey D i sa b I e ( s t r uc t RingSet  const  *set,  union  RingObject  *key) 

( 

n pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

n pg p A s s e r t ( key->g . ma s k 8 set->mask); 

n if  ( ! ( key->k. t rust  8 PGP_KE YT R U ST F_ D I S AB LE D ) ) C 

n n key->k. trust  |=  PG P_KE YT RU S T F_ D I S AB LE D ; 

n n key->g. flags  |=  R I NGOB J F_T R U ST C H ANG E D ; 

n B r i ngPoo  I Ma r kT r us t Cha nged  (set->pool,  key->g . ma s k ) ; 

B } 
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n key->g. flags  |=  RINGOBJ F_TRUST; 

} 

void 

r i ng Key  Ena b I e ( s t ru c t RingSet  const  *set,  union  RingObject  *key) 
{ 

n pg p A s s e r t ( OB J I S K E Y ( key ) ) ; 

n pg p As s e r t ( key->g . ma s k & set->mask); 

n if  ( key->k . t rust  & PG P_K E YT RU ST F _ D I S AB L E D ) { 

n n key->k. trust  &=  “ PG P_KE YT RU S T F _ D I S AB L E D ; 

a a key->g. flags  |=  R I N G OB J F_T RU S T C H ANG E D ; 

a a ringPoolMarkTrustChanged  (set->pool,  key->g.mask); 

a > 

a key->g. flags  |=  R I NGOB J F _T RU S T ; 

} 


i n t 

r i ngKey Re voked ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 
{ 

a pgp As se r t ( OB J I S KE Y ( key ) ) ; 
a pgpAssert(key->g.mask  S set->mask); 
a (void)set; 

#if  PGPTRUSTMODEL>0 

a if  ( ! ( key->g . f lags  & ( R I NGOB J F_T R U ST  ) ) ) 
a a r i ngHn t Va I i da t eKey  (set,  key); 

#endi  f 

a return  key->k. trust  S PG P_KE YT RU S T F_ R EVOKE D ; 

} 


/* 

* Return  true  if  the  specified  signature  has  been  revoked,  that  is, 

* if  there  is  a newer  signature  by  the  same  key  which  is  of  type 

* UID_REVOKE. 

*/ 

i nt 

r i ng S i g Revo ked  (struct  RingSet  const  *set,  union  RingObject  *sig) 

{ 

a RingObjecta  n *parent, 

a a a a n *sibling; 

a (void)set;B  /*  Avoid  warning  */ 

a pgpAssert  ( OB J 1 S S 1 G ( s i g ) ) ; 
a pgpAssert  (sig->g.mask  8 set->mask); 


Q 

Q 

n 

n 

Q 

D 

n 

a 

Q 

n 

a 


parent 
for  ( s 
a if 

□ B 

a if 
a a 

B B 

B B 

B B 

B B 
B B 


= sig->g.up; 

bling  = parent->g.down,-  sibling  ; sibling  = sibling->g.next)  { 
( ! OB J I S S I G ( s i b I i ng ) ||  sibling  ==  sig) 

continue; 

( si b I i ng->s . by  ==  sig->s.by)  { 
if  ( s i b I i ng-> s . t r u s t 8 PG P_ S I GT R U S T F_ C H E C KE D ) { 
a if  ( s i b I i ng->s . t s t amp  > s i g -> s . t s t a mp  ) { 

a B if  (sibling->s.type  ==  PG P_ S I GT YP E_KE Y_ U I D_ R E VOKE ) { 
a B B /*  Valid  revocation  */ 

B B B return  TRUE; 

B B > 
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□ D a □ } 

n n n > 

n n } 

n > 

n return  FALSE; 

> 


PgpT  rustModel 

pg pT r u s t Mode L (struct  RingPooL  const  *pooL) 

{ 

n (void)pool; 

#if  PGPTRUSTMODEL==0 
n return  PGPTRUST0; 

# e n d i f 

#if  PGPTRUSTH0DEL==1 
n return  PGPTRUST1; 

#e n d i f 

Uif  PGPTRUSTH0DEL==2 
n return  PGPTRUST2; 

#endi f 
} 

wo  rdl  6 

r i ngKey Con f i dence ( s t ru c t RingSet  const  *set,  union  RingObject  *key) 
{ 

#if  PGPTRUSTMODEL==0 
n (void)set; 
n (void) key; 
n pgpAssert(0); 
a return  0; 

#e  L se 

n pgpAs s e r t ( OB J I SKE Y ( key ) ) ; 

n pg  p A s s e r t ( key->g  . ma  s k S set->niask); 

n (void)set; 

n if  ( ! ( key->g . f Lags  & ( R I NG OB J F _T RU ST ) ) ) 
n n r i ngMn t Va L i da t e Key  (set,  key); 

n /*  r i ngKey Ca L cT rus t handles  r e vo ked / e xp i r ed  keys  */ 

n return  r i ng Key C a L c T r u s t (set,  key); 

# e nd i f 

> 

void 

r i ng Key  I D8 ( s t rue t RingSet  const  *set,  union  RingObject  const  *key, 
a byte  *pkaLg,  byte  *buf) 

{ 

n pgpAssert(OBJISKEY(key)); 
n pg p A s s e r t ( key->g . ma s k S set->mask); 

a (void)set; 
n if  (pkaLg)  { 
n n *pkaLg  = key-> k . p ka L g ; 

n n if  ((*pkaLg  | 1)  ==  3)n  n /*  ViaCrypt  */ 

n n n *pkalg=1; 
n } 

n if  ( buf ) 

n n memcpy(buf,  key-> k . key  I D , 8); 

} 
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i n t 

r i ngKey F i nge r p r i n t 1 6 C s t ru c t RingSet  const  *set,  union  RingObject  *key, 
n byte  *buf) 

{ 

n byte  const  *p; 
n size_t  Len; 

H pgpAssert(OBJISKEY(key)); 
n pgpAssert(key->g.mask  S set->mask); 

n p = (byte  const  * ) r i ng F e t c h Ob j e c t ( s e t , key,  8Len); 
a if  ( ! p ) 

n n return  ringSetError(set)-> error; 
n return  r i n g Key  Pa r s e F i ng e r p r i n 1 1 6 ( p,  Len,  buf); 

} 

i n t 

r i n g Key F i n g e r p r i n t 2 0 ( s t r u c t RingSet  const  *set,  union  RingObject  *key, 
n byte  *buf  ) 

{ 

n size_t  objLen; 
n byte  const  *objbuf; 

n pgp  As  s e r t ( OB  J I S KE  Y ( key  ) ) ; 

n pgp A s se r t ( key->g . ma s k & set->mask); 

n objbuf  = (byte  const  *)ringFetchObject(set,  key,  SobjLen); 
n return  pg p F i n g e r p r i n t 2 0 H a s h Bu f ( ob j bu f , objLen,  buf); 

} 

i n t 

r i ngKeyAdd S i g sby ( s t r u c t RingSet  const  *set,  union  RingObject  *key, 
n struct  RingSet  *dest) 

{ 

n struct  RingSig  *sig; 
n i n t i = 0 ; 

n pg p A s s e r t ( OB J I S KE Y ( ke y ) ) ; 

n pgp As s e r t ( key->g . ma s k & set->mask); 

n pgpAssert(RINGSETISHUTABLE(dest)); 

n for  (sig  = &key->k.sigsby->s;  sig;  sig  = sig->nextby)  { 
n n if  (sig->mask  & set->mask)  ( 
n n a i ++; 

a a a ringSetAddObject(dest,  (union  RingObject  *)sig); 

a a > 

n > 

n return  i; 

} 

/*  Return  TRUE  if  the  key  has  a secret  in  the  given  set  */ 
i n t 

r i n g Key  I s S e c ( s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

a pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

n pgpAssert(key->g.mask  8 set->mask); 

n for  (key  = key->g.doun;  key;  key  = key->g.next) 
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n n if  ( ( key->g . ma s k S set->mask)  SS  OB J I S S E C ( key ) ) 
n n n returni; 
n return  0; 

> 

/* 

* Return  TRUE  if  the  key  comes  only  from  sources  where  it  has  secret 

* objects.  In  other  words,  the  key  comes  from  a secret  key  ring.  This 

* is  used  in  adding  that  key  so  that  we  only  add  it  to  the  secret  ring, 

* which  is  necessary  due  to  complications  relating  to  the  "version  bug". 

* Otherwise  if  we  add  a secret  keyring  we  may  end  up  putting  the  key  on 

* the  pubring,  and  it  could  have  the  incorrect  version. 

* (See  pgpRngRead.c  for  discussion  of  the  version  bug.) 

* Don't  count  if  just  on  MEHRING,  otherwise  newly  created  keys  return  TRUE. 
*/ 

i nt 

r i ng Key I s S e cOn I y C s t r u c t RingSet  const  *set,  union  RingObject  *key) 

{ 

n struct  RingPool  *pool  = set->pool; 
n int  keyfilemask  = key->g.mask  & poo l->f i I ema s k; 
n int  secfilemask  = 0; 

n if  (keyfilemask  ==  HEHRINGMASK) 

n n return  0;n  n n /*  Newly  generated  keys  */ 

n for  (key  = key->g . down ; key;  key  = key->g.next)  { 

n n if  ( ( key->g . ma s k S set->mask)  &&  OB J I S S E C ( key ) ) { 

n n n secfilemask  = key->g.mask  & poo  I -> f i I ema s k ; 

an} 
n } 

n return  ! ( key f i I ema s k & “secfilemask); 

> 


/* 

* Return  the  most  recent  subkey  associated  with  the  key,  if  there  is  one. 
*/ 

union  RingObject  * 

r i ng Key S ub key ( s t r u c t RingSet  const  *set,  union  RingObject  const  *key) 

{ 

n ringmask  mask  = set->mask; 
n union  RingObject  *obj,  *best  = NULL; 
n word32  objtime,  besttime  = 0; 


□ 

□ 

n 

a 

n 

n 

n 

n 

a 

□ 

a 

a 

} 


pgpAssert(OBJISKEY(key)); 


for 

( ob  j = 

key->g.down;  obj;  obj  = obj->g.next) 

D 

i f 

((obj->g.mask  & mask)  &&  OB J I S SUBKE Y ( ob j ) 

n 

&& 

r i ng Sub keyVa 1 i d ( se t , obj))  { 

o 

D 

objtime  = r i ng Key C r e a t i on ( s e t , obj); 

o 

n 

i f 

(besttime  <=  objtime)  ■( 

n 

n 

n 

best  = obj; 

n 

o 

□ 

besttime  = objtime; 

Q 

n 

} 

n 

> 

> 

return 

best 

f 
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/*  Given  a subkey,  return  its  master  key  */ 
union  RingObject  * 

ri ngKeyMasterkey  (struct  RingSet  const  *set,  union  RingObject  const  *subkey) 
{ 

n (void)set; 

n pgpAssert  ( OB J I S S UBKE Y ( s u b key ) ) ; 
n pgpAssert  (OBJISTOPKEY(subkey->g.up)); 
n return  s u b k ey->g . u p ; 

> 


/* 

* Given  a public  key  on  the  keyring,  get  the  corresponding  PgpPubKey. 

* Use  is  a usage  code  which  Limits  the  kinds  of  keys  we  will  accept. 

* For  keys  which  have  subkeys  this  chooses  which  one  to  use.  If  use  is 

* 0 we  do  a straight  conversion  of  the  key  or  subkey;  if  nonzero  we 

* verify  that  the  key  has  the  required  use.  Return  NULL  if  we  can't 

* get  a key  with  the  required  use. 

*/ 

struct  PgpPubKey  * 

r i ng Key PubKey ( s t r u c t RingSet  const  *set,  union  RingObject  *key,  int  use) 
{ 

n byte  const  *p; 
n size_t  Len; 
n struct  PgpPubKey  *pub; 

n union  RingObject  *subkey  = NULL; 

n unsigned  vsize; 
n int  i ; 


n pgpAssertCOBJISKEYCkey)); 
n pg p A s s e r t ( key->g . ma s k & set->mask); 


n 

/* 

Select 

between  subkey  and  key  if  necessary  */ 

□ 

if 

(use 

&& 

(OBJISSUBKEY(key) 

n 

□ 

n 

1 1 

( ( sub key= r i ngKey Sub  key ( se t , key))  !=  NULL))) 

n 

n 

i f 

(use  ==  PGP_PKUSE_SIGN_ENCRYPT)  { 

n 

n 

n 

ringSimpLeErr(set->pool,  PGPERR_PUBKEY_UNIHP); 

n 

n 

Q 

return  NULL; 

□ 

Q 

> 

n 

Q 

i f 

(use  ==  PGP_PKUSE_ENCRYPT)  { 

□ 

n 

n 

if 

(OBJISTOPKEY(key))  ( 

n 

n 

a 

a 

pgpAssert(subkey); 

n 

n 

n 

n 

key  = subkey; 

D 

n 

u 

n 

pgpAssert  ( OB J I S S UBKE Y ( key ) ) ; 

□ 

Q 

n 

> 

n 

n 

} else 

if  (use  ==  PGP_PKUSE_SIGN)  ( 

n 

□ 

n 

i f 

(OBJISSUBKEY(key))  { 

Q 

n 

n 

s 

key  = key->g.up; 

n 

n 

n 

a 

pgpAssert  ( OB J I S TO PKE Y ( key ) ) ; 

n 

n 

n 

y 

□ 

n 

> 

n 

> 

n 

/* 

Verify 

key  satisfies  required  usage  */ 

n 

i f 

(use 

s& 

((pgpKeyUse(pgpPkaLgByNumber(key->k.pkaLg)) 

n 

n 

r i ngSi mp L eErr( set -> pool,  PGPERR_PUBKEY_UNIHP); 

n 

□ 

return 

NULL; 
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n p = (byte  const  * ) r i ng F e t c h 0 b j e c t ( s e t , key,  8Len); 
n if  ( ! p ) 
n n return  NULL; 

n if  ( key->g . f Lags  & KEYF_ERROR  ||  Len  < 8)  ( 

n n i = r i ng Key  Pa r s e ( p , Len,  NULL,  NULL,  NULL,  NULL,  NULL,  0); 
n n r i ng S i mp L e E r r ( se t->poo L , i); 

n n return  NULL; 

n > 

n / * 

n * A key  starts  with  5 or  7 bytes  of  data,  an  aLgorithm  byte,  and 
n * the  pubLic  components, 

n */ 

n if  (pC0:  ==  PGPVERSI0N_3)  ( 
n n vsize=0; 

n } e L se  { 

n n vsize=2; 

n } 

n pg p A s s e r t ( p C 5+ V s i z e D ==  key-> k . p ka L g ) ; n /*  Checked  by  r i n g Key Ve r i f y */ 

n pub  = pgpPubKey  F r omBuf  ( p II5  + VS  i zeD  , p + 6 + vsize,  Len-6-vsize,  &i); 
n if  (!pub)  f 

n n r i ng S i mp L e E r r ( se t->poo L , i); 

n n return  NULL; 

n } 

n memcpy(pub->keyID,  key->k.keyID,  sizeof(key->k.keyID)); 
n return  pub; 

> 

/* 

* Return  the  version  for  a secret  key.  ALso  permissibLe  to  pass  a key. 

* This  shouLd  be  used  when  we  edit  a pass  phrase  to  preserve  the  version 

* number  and  avoid  the  infamous  "version  bug". 

*/ 

PgpVersion 

r i ng S ec Ve r s i on  (struct  RingSet  const  *set,  union  RingObject  *sec) 

{ 

n byte  *secdata; 
n size_t  secdataLen; 

n if  ( ! OBJ 1SSEC( sec ) ) { 
n n sec  = r i ngBe s t S e c ( se t , sec); 
a n if(!sec){ 

n n n r i ng S i mp L e E r r ( s e t ->poo L , PG P E R R_N0_ S E C KE Y ) ; 

n n n return  ( Pg p Ve r s i on ) 0 ; 

n n } 

n } 

n secdata  = (byte  * ) r i ng F e t c h 0 b j e c t (set,  sec,  8s e c d a t a L e n ) ; 
n return  ( Pg p Ve r s i on ) s e cda t a C 0 ] ; 

> 


/* 

* Given  a secret  on  a keyring,  get  a struct  PgpSecKey  (possibLy  Locked). 

* As  a hack  to  heLp  the  Lazy  programmer,  you  can  aLso  pass  a key. 

* Use  is  a usage  code  which  Limits  the  kinds  of  keys  we  wiLL  accept. 

* For  keys  which  have  subkeys  this  chooses  which  one  to  use. 

*/ 
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struct  PgpSecKey  * 

r i ng S e c S e c Ke y ( s t r u c t RingSet  const  *set,  union  RingObject  *sec,  int  use) 
{ 


n 

byte  const  *p; 

n 

si ze_t 

1 e n ; 

o 

struct 

PgpSecKey  *seckey; 

n 

uni 

on  RingObject  *key; 

Q 

uni 

on  RingObject  *subkey  = NULL; 

□ 

unsigned  vsize; 

a 

int 

i ; 

n 

i f 

COBJISSEC(sec) ) { 

n 

n 

key 

= sec->g.up; 

□ 

> else 

{ 

□ 

B 

key 

= sec; 

n 

> 

n 

pgpAssert(OBJISKEYCkey)); 

n 

pg p As s e r t ( s e c->g . ma s k S set->mask); 

n 

/* 

Select  between  subkey  and  key  if  necessary 

a 

i f 

(usen  as  (OBJ ISSUBKEYC key) 

u 

B 

B 

1 1 ( ( s u b ke y = r i n g Key S u b key ( s e t , key))  ! 

n 

B 

i nt 

newkey  = 0; 

n 

B 

i f 

(use  ==  PGP_PKUSE_SIGN_ENCRYPT)  { 

s 

B 

B 

ringSimpleErr(set->pool,  PGPERR_PUBKEY 

n 

B 

B 

return  NULL; 

n 

B 

> 

□ 

B 

i f 

(use  ==  PGP_PKUSE_ENCRYPT)  { 

n 

B 

B 

if  (OBJ  I ST0PKEY( key ) ) { 

n 

B 

B 

n pg p A s s e r t ( s u b key  ) ; 

n 

B 

B 

n key  = subkey; 

n 

B 

B 

n pgpAssert  ( OB J I S S UBKE Y ( key  ) ) ; 

n 

B 

B 

n newkey  = 1; 

n 

B 

B 

} 

n 

B 

} else  if  (use  ==  PG P_PKU S E_ S I G N ) { 

n 

B 

B 

if  (OBJ ISSUBKEY( key ) ) { 

Q 

B 

B 

n key  = key->g . up; 

n 

B 

B 

n pgpAssert  (OBJISTOPKEY(key)); 

n 

B 

B 

n newkey  = 1; 

n 

B 

B 

> 

n 

B 

> 

n 

B 

i f 

(newkey  ||  ! OB J I S S E C ( s e c ) ) { 

n 

B 

B 

sec  = r i ng Be s t S e c ( s e t , key); 

n 

B 

B 

if  (!sec)  { 

Q 

B 

B 

a r i ng S i mp 1 e E r r ( s e t ->poo  1 , PGPERR_N0 

Q 

B 

B 

n return  NULL; 

Q 

B 

fl 

> 

n 

B 

> 

a 

> else 

if  (OBJ ISKEY( sec  ) ) { 

a 

B 

sec 

= ringBestSec(set,  sec); 

a 

B 

i f 

( ! s e c ) { 

ringSimpLeErr(set->pooL,  PGPERR_NO_SECKEY); 
return  NULL; 


n /*  Verify  key  satisfies  required  usage  */ 

n if  (use  &S  ( ( pg p Key U s e ( pg p P ka L g By N umb e r ( key-> k . p ka L g ) ) & use)  !=  use)){ 
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n n ringSimpLeErr(set->pooL,  PG P E R R_ PU BKE Y_UN I HP ) ; 
n n return  NULL; 

n > 

n p = (byte  const  *)ringFetchObject(set,  sec,  &Len); 
a if  ( ! p ) 

n n return  NULL; 

a if  ( s e c ->g . u p->g . f L a g s & KEYF_ERROR  | | ten  < 8)  { 
n n i = ringKeyParseCp,  Len,  NULL,  NULL,  NULL,  NULL,  NULL,  0); 
n n r i ng S i mp L e E r r C s e t ->poo L , i); 

n n return  NULL; 

n > 

n if  (pC0:  ==  PGPVERSI0N_3)  { 
n n vsize=0; 

n > e L se  { 

n n vsize=2; 

n > 

n pgpAssertCpCS+vsizeD  ==  sec->g.up->k.pkaLg);  /*  Checked  by  ringKeyVerify  */ 
n seckey  = pgpSe cKey F romBuf ( p C 5+vs i ze D , p+6+vsize,  Len-6-vsize,  Si); 
n if  (Iseckey)  { 

n a r i ng S i mp L e E r r ( s e t ->poo L , i); 

n n return  NULL; 

n > 

n memcpy(seckey->keyID,  sec->g.up->k.keyID,  sizeof(sec->g.up->k.keyID)); 
n return  seckey; 

} 


/*  There  ain't  much  to  know  about  a name...  */ 
char  const  * 

r i ngNameName ( s t rue t RingSet  const  *set,  union  RingObject  *name,  size_t  *Lenp) 
{ 

n pg p A 5 s e r t ( OB J 1 S N AH E ( name ) ) ; 

n return  (char  const  *)ringFetchObject(set,  name,  Lenp); 

> 

/*  Return  the  validity  (*not*  the  trust)  of  a name  */ 
byte 

r i n g N a meT r u s t ( s t r u c t RingSet  const  *set,  union  RingObject  *name) 

union  RingObject  *key; 
n 

pgpAssert (OBJISNAnE(name) ) ; 
pgpAssert(name->g.mask  & set->mask); 

(void)set; 

key  = name->g.up; 

pgpAssert(OBJISTOPKEY(key)); 

/*  Force  returned  value  if  key  is  revoked,  expired,  or  axiomatic  */ 
if  (key->k. trust  8 ( PG P_KE YT RU ST F_R EVOKE D | PGP_KEYTRUST F_EXPI RED ) ) 
return  PG P_N AH ET RU ST_U NT RU S T E D ; 
if  ( key->k . t rust  8 PG P_KE YT RU S T F_BU C KS TO P ) 
return  PGP_NAHETRUST_COHPLETE; 
if  ( ! ( name->g . f lags  8 ( RI NGOB J F_TRUST ) ) ) 
r i ngHn t Va I i d a t e N ame  (set,  name); 
return  na me-> n . t r u s t 8 PG P_N AH ET RU S T_H A S K; 

} 
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i nt 

r i ng N a me Wa r n on L y ( s t r u c t RingSet  const  *set,  union  RingObject  *name) 

{ 

n p g p A s s e r t ( OB J I S N AM E ( n a me ) ) ; 

n pg p As s e r t ( name->g . ma s k 8 set->mask); 

n (void)set; 

a return  n a me->n . t r u s t 8 PG P_N AM ET R U S T F_W AR NON L Y ; 

> 

void 

r i ng Name Se t Wa r non L y C s t ru c t RingSet  const  *set,  union  RingObject  *name) 

{ 

n pg p A s s e r t ( OB J I S N AM E C n a me ) ) ; 

n pgpAssert(name->g.mask  8 set->mask); 
n if  ( ! (name->n . t rust  8 PG P_N AM ETRU ST F_W A R N ON L Y ) ) { 
a a name->n . t rust  |=  PG P_N AM ETR U S T F_W A R NON L Y ; 

n n name->g . f lags  |=  R I NGOB J F _T R U ST C H ANG E D ; 

n n r i ng Poo L Ha r kT r u s t C h a n g ed  (set->pooL,  name->g . ma s k ) ; 
n } 

n name->g . f Lags  |=  R I N G OB J F _T R U ST ; 

> 

wo  r d 1 6 

r i ng Na me Va L i d i t y ( s t r u c t RingSet  const  *set,  union  RingObject  *name) 
f 

#if  PGPTRUSTMODEL==0 
(void)set; 

(voi d)name; 
pgpAssert(0) ; 
return  0; 

Seise 

union  RingObject  *key; 

pgpAssertCOBJISNAHECname)); 

pg p A s s e r t ( n a me->g . ma s k 8 set->mask); 

(void)set; 

key  = name->g.up; 

pgpAssert  (OBJISTOPKEY(key)); 

/*  Force  returned  value  if  key  is  revoked,  expired,  or  axiomatic  */ 
if  ( key->k. trust  8 ( PG P_KE YT RU ST F_R EVOKE D | PG P_KE YTRU S T F_ E X P I R E D ) ) 
return  0; 

if  ( key->k . t rust  8 PG P_KE YT R U ST F_BU C KS TOP ) 
return  PG P_T R U ST_ I N F I N I T E ; 
if  ( ! (name->g . f Lags  8 ( R I NGOB J F_T R U ST ) ) ) 
ringHntValidateName  (set,  name); 
return  r i n gT r u s t To  I n t e r n ( name->n . va L i di ty ) ; 

# e nd i f 
} 

wo  r d 1 6 

r i n g Na me C on f i d e n c e ( s t r u c t RingSet  const  *set,  union  RingObject  *name) 

{ 

#if  PGPTRUSTMODEL==0 
n (void)set; 
n (void)name; 
n pgpAssert(0); 
n return  0; 

Seise 

B pgpAssertCOBJISNAHECname)); 
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n p g p A s s e r t C n a me ->g . ma s k S set->mask); 

n (void)set; 

n return  r i ng T r u s t To  I n t e r n ( na me  — >n . c on f i de n c e ) ; 

#end i f 
} 

i n t 

ringNameConfidenceUndefinedCstruct  RingSet  const  *set,  union  RingObject  *name) 
{ 

#if  PGPTRUSTriODEL  = = 0 
n (void)set; 
n (void)name; 
n pgpAssert(0); 
n return  0; 

#e  L s e 

n p g p A s s e r t ( OB J I S N A H E ( n a me ) ) ; 
n pg p As s e r t C name->g . ma s k S set->mask); 
n (void)set; 

n return  ( na me-> n . c on f i d en c e ==  PGP_N E WT RU ST_U N D E F I N E D ) ; 

#end  i f 

> 


void 

ringNameSetConf idenceCstruct  RingSet  const  *set,  union  RingObject  *name, 
n n word16  confidence) 

f 

#if  PGPTRUSTMODEL==0 
n (void)set; 
n (void)name; 
n ( VO i d ) c on f i d e n c e ; 
n pgpAssert(0); 

#e  L se 

n pg p A s s e r t ( OB J I S N AHE ( name ) ) ; 

n pgp As se r t ( name->g . ma s k S set->mask); 

n confidence  = Cword16)  r i ngT r u s t To E x t e r n (confidence); 
n 

n if  ( ! ( name->n . f L a g s 2 S N AM E F 2_N E WT RU ST  ) || 
n na me->n . c on f i den c e !=  confidence)  { 

n n name->n . conf i dence  = (byte)  confidence; 
n n name->n . f L a g s 2 |=  NAME F2_NEWTRUST; 

n n name->g . f Lags  |=  R I NGOB J F_T RU ST C H AN G E D ; 

Q n r i n g Po o L M a r kT r u s t C h a n g e d (set— >pooL,  na me->g . ma s k ) ; 

n > 

n na me->g . f L a g s |=  R I NGOB J F_T R U ST ; 

#end  i f 

> 

i n t 

r i ngS i gEr ror ( s t rue t RingSet  const  *set,  union  RingObject  *sig) 

{ 

n byte  const  *p; 
n size_t  Len; 

a pg p A s s e r t ( OB J I S S I G ( s i g ) ) ; 

n pg p A s s e r t ( s i g ->g . ma s k 8 set->mask); 
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n if  C ! (sig->g. flags  & SIGF_ERROR)) 
n n return  0; 

n p = (byte  const  * ) r i n g F e t c h Ob j e c t ( s e t , sig,  SLen); 

n if  ( ! p) 

n n return  ringSetError(set)-> error; 

n return  r i n g S i g Pa r s e ( p , Len,  NULL,  NULL,  NULL,  NULL,  NULL, 
a a NULL,  NULL,  NULL); 

> 

union  Ri ngOb j ect  * 

ringSigHakerCstruct  RingSet  const  *sset,  union  RingObject  *sig, 
n struct  RingSet  const  *kset) 

{ 

n ( VO i d ) s s e t ; n /*  Avoid  warning  */ 

n pgpAssertCOBJISSIGCsig)); 
n pgpAssert(sig->g.mask  S sset->nask); 

n sig  = sig->s.by; 

n pgpAssert(OBJISKEY(sig));n  /*  "sig"  is  now  a key!  */ 

B if  ( I ( s i g->g . ma s k & k s e t ->ma s k ) ) 
n n return  NULL; 

B ringObjectHoLd(sig); 
n return  sig; 

> 

void 

ringSigID8(struct  RingSet  const  *set,  union  RingObject  const  *sig, 

B byte  *pkaLg,  byte  *buf) 

{ 

n pgpAssertCOBJISSIGCsig)); 

B pgpAssert(sig->g.iiiask  & set->mask); 
n (void)set; 
n sig  = sig->s.by; 

B pgpAssertCOBJISKEYCsig)  ); 

B if  (pkalg)  { 
n n *pkaLg  = s i g-> k . p ka L g ; 
n n if  ((*pkaLg  | 1)  ==  3) 
n n n *pkaLg  = 1;n/*  ViaCrypt  */ 
n > 

n if  ( buf ) 

n n metncpyCbuf,  s i g->  k . key  I D , 8); 

} 

byte 

r i ngS i gTrus t ( s t rue t RingSet  const  *set,  union  RingObject  *sig) 

{ 

n pgpAssertCOBJISSIGCsig)); 

B pgpAssert(sig->g.mask  & set->mask); 
n (void)set; 

n if  ( ri ngSi gError  (set,  sig)) 
n n return  PGP_SIGTRUST_INVALID; 

n if  (sig->s.by  ==  NULL) 

B B return  PG P_ S I GT R U S T_N OKE Y ; 

B if  C ! (si g->s . t rust  & PG P_ S I GT R U S T F_T R I E D ) ) 
n n return  PGP_SIGTRUST_UNTRIED; 

n if  ( I ( si g->s . t rust  8 PG P_S I GT RU ST F _C H E C KE D ) ) 

B B return  PGP_SIGTRUST_BAD; 
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n 

n 

□ 

□ 

n 

a 

} 


if  (! Csig->g. flags  & ( R I N G OB J F_T RU ST  ) ) ) { 
n r 1 ngMn t Va L i da t e Key  (set,  sig->s.by); 
n return  s i g -> s . by-> k . t r u s t & PG P_KE YT R U S T_M A S K; 
> 

else 

return  sig->s. trust  & PGP_KEYTRUST_MASK; 


i nt 

r i ng S i g C he c ked C s t r u c t RingSet  const  *set,  union  RingObject  *sig) 
{ 

n pgpAssertCOBJISSIGCsig)); 
n pgpAssert(sig->g.mask  S set->mask); 
n (void)set; 

n return  sig->s. trust  8 PG P_ S I GT R U ST F _ C H E C K E D ; 

} 


i nt 

r i n g S i g T r i ed ( s t r u c t RingSet  const  *set,  union  RingObject  *sig) 

{ 

n pgpAssertCOBJISSIGCsig)); 
n pgp As se r t ( s i g->g . ma s k 8 set->mask); 
n (void)set; 

n return  sig->s. trust  8 PGP_ S I GT RU ST F _TR I E D ; 

} 

/*  Call  ringSigTrust  to  get  sig  status,  then  call  this  function  if 
sig  is  good  and  the  confidence  is  required.  */ 

wo  r d 1 6 

r i ng S i g Con f i d e n c e ( s t r u c t RingSet  const  *set,  union  RingObject  *sig) 
{ 

#if  PGPTRUSTHODEL==0 
a (void)set; 
a (void)sig; 
a pgpAssert(0); 
a return  0; 

#e  I s e 

a pgpAssertCOBJISSIGCsig)); 
a pgpAssert(sig->g.mask  8 set->mask); 
a Cvoid)set; 


n 

if  C 

sig 

->s.by  !=  NULL)  { 

n 

n 

i f 

(set->niask  8 s i g->s  . by->g  . ma  s k ) { 

n 

n 

n 

if  C ! ( si g->s . by->g . f lags  8 ( R I NGOB J F_T R U ST ) ) ) 

□ 

a 

o 

a r i n g Mn t Va  1 i da t e Key  (set,  sig->s.by); 

n 

a 

n 

if  ( si g->s . by->k. t rust  8 PG P_KE YTR U S T F_R EVOKE D ) 

D 

a 

Q 

a return  0; 

n 

a 

n 

else 

n 

a 

n 

a return  r i ng Key C a 1 c T r u s t (set,  sig->s.by); 

n 

n 

> 

n 

a 

else 

□ 

a 

o 

return  0; 

Q 

> 

n 

else 

a 

n 

return  0; 

# e n d i f 

} 
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i n t 

ri ngS i gType ( s t rue t RingSet  const  *set,  union  RingObject  const  *sig) 

{ 

a pg p A s s e r t C OB J I S S I G ( s i g ) ) ; 

B pg  p A s s e r t ( s i g ->g  . ma  s k S set->niask); 

n (void)set; 

B return  sig->s.type; 

} 

wo  rd32 

r i ngS i gTi mes t amp  ( s t rue t RingSet  const  *set,  union  RingObject  const  *sig) 
{ 

B pgpAssertCOBJISSIGCsig)); 

B pg p A s s e r t ( s i g->g . ma s k & set->mask); 

B (void)set; 

B return  s i g-> s . t s t a mp ; 

} 

/**  Filtering  functions  to  get  sets  from  sets  **/ 

/*  The  generic  one  - according  to  the  predicate  */ 
i nt 

r i ng Se t F i L t e r ( s t ru c t RingSet  const  *src,  struct  RingSet  *dest, 

B int  C *p r ed i ca t e ) ( VO i d *arg,  struct  Ringiterator  *iter, 

B B union  RingObject  *object,  unsigned  level), 

B void*arg) 

{ 

B struct  Ringiterator  *iter; 

B union  RingObject  *obj; 

B unsigned  level; 

B int  i ; 

B unsigned  total  = 0; 

B if  ( ! sre  II  ! dest ) 

B B return  0; 

B pgpAssertCiRINGSETISMUTABLElsrc)); 

B pgpAssertCRINGSETISMUTABLECdest)); 

B iter  = ringlterCreate(src); 


a 

i f 

( ! i 

ter) 

n 

n 

return 

ri ngSetError(src)->error; 

n 

level 

= 1; 

n 

for 

(; 

;>  < 

Q 

a 

i 

= r i n 

g I t e r N ex t Ob j e c t ( i t e r , level); 

n 

n 

i f 

C i > 

0)  { 

n 

o 

n 

ob  j 

= r i ng 1 1 e r C u r r e n t Ob j e c t ( i t e r , level); 

n 

n 

D 

i = 

p r e d i c a t e ( a r g , iter,  obj,  level); 

n 

n 

Q 

i f 

(i  < 0)  { 

n 

n 

s 

Q 

ringlterDestroy(iter); 

n 

n 

a 

n 

return  i; 

n 

a 

a 

> 

n 

a 

D 

i f 

(i  ) { 

n 

a 

a 

n 

/*  Calculate  total  number  of  keys  */ 

Q 

a 

D 

n 

total  +=  (level  ==  1); 
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□ an 
ana 

□ D a 

n n a 

n n } 

n > e L se  { 

n n i f ( i < 0 I I 

n n n break; 

n > 

> 


/*  r i ng Se t AddOb j e c t ( de s t , obj)  */ 
obj->g.niask  |=  dest->mask; 
++LeveL;  /*  Recurse!  */ 
ringlterRewindCiter,  Level); 


! -- L e ve  L ) 


ringlterDestroy(iter); 

/*  Return  error  or  number  of  keys  found  */ 


return  (i  < 0)  ? i 


(total  < INT  MAX)  ? total 


INT_MAX; 


/* 

★ 

★ 

■k 


Return  pointer  to  first  instance  of  (si, 11)  in  (s0,L0), 
ignoring  case.  Uses  a fairly  simple-minded  algorithm. 
Search  for  the  first  char  of  si  in  s0,  and  when  we  have  it. 


* 

k 

scan  for  the  rest. 

* 

Is 

it  worth  mucking  with  Boyer-Moore  or  the 

Like? 

*/ 

static 

char  const  * 

xmem i mem ( c h a r const  *s0,  size_t  10,  char  const 

*s1 , si 

n 

char  c0,  cl,  c2; 

n 

s i 

z e _ t L ; 

B 

/* 

n 

* 

The  trivial  cases  - this  means  that  NULL 

inputs 

B 

★ 

if  the  corresponding  Lengths  are  zero. 

B 

★ 

/ 

B 

if 

(10  < 11  ) 

B 

B 

return  NULL; 

B 

if 

(111) 

B 

B 

return  s0; 

B 

L0 

-=  LI; 

B 

cl 

= toLower((unsigned  char)*s1); 

B 

do 

{ 

B 

B 

c0  = t o L owe r ( ( u n s i g n ed  char)*s0); 

B 

B 

if  (c0  ==  cl)  { 

B 

B 

n 1 = 0; 

B 

B 

n do  ■( 

B 

B 

n n if(++L==L1) 

B 

B 

n n n return  s0; 

B 

B 

n n c0  = t 0 L o we r ( ( un s i g ne d char)s0CL3); 

B 

B 

n n c2  = 1 0 L o we r ( ( un s i g ned  c h a r ) s 1 C L 3 ) ; 

B 

B 

n > while  (c0  ==  c2); 

B 

B 

} 

B 

B 

S0  + +; 

B 

> 

while  (10 — ); 

t 11  ) 


return  NULL; 


struct  KeySpec  { 
n char  const  *keyid,  *name; 
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n size_t  keyidLen,  nameLen; 
n int  use; 

>; 


/* 

* Allowed  formats  for  the  keyspec  are: 

* NULL,  - Match  everything 

* "0x123c"  - match  everything  with  a keylD  containing  "123c" 

* "Name"  - match  everything  with  a name  containing  "name"  ( c a s e- i n s e n s i t i ve  ) 

* "0x123c:name"  - match  everything  satisfying  both  requirements 

* 

* This  returns  pointers  to  "keyidspec"  and  "uidspec",  the  portions  of  the 

* input  keyspec  string  which  should  match  the  keylD  and  userlD  portions, 

* or  NULL  if  there  are  no  such  portions  (which  means  "always  mauch"). 

* 


* This  function  cannot  have  any  errors.  At  worst,  the  entire  string 

* is  taken  to  be  a uid  match.  Some  corner  cases: 

* 


0 -> 
0x  -> 

0x : -> 

0x12345678:  -> 

0x12345678:foo  -> 
0x1 2345678;f 00  -> 
0x12345678n  -> 


No  keyidspec,  namespec  of  "0" 

Empty  keyidspec,  no  namespec 
Empty  keyidspec,  empty  namespec 
Keyidspec  of  "12345678",  empty  namespec 
Keyidspec  of  "12345678",  namespec  of  "foo' 
No  keyidspec,  namespec  of  " 0x 1 2 34 5 6 78 ; f o o ' 
Keyidspec  of  "12345678",  no  namespec 


* Keyid's  are  now  allowed  to  be  up  to  16  characters  long.  If  they  are 

* 8 chars  or  less,  they  are  only  matched  against  the  low  32  bits  of 

* the  key's  keyid.  If  greater,  they  are  matched  against  the  full  64 

* bits  of  keyid. 

*/ 

static  void 

key s pe c S p I i t ( c ha r const  *string,  int  use,  struct  KeySpec  *spec) 
n unsigned  i ; 


n spec->use  = use; 

n spec->keyidlen  = spec->namelen  = 0;n/*  Hatch  anything  */ 

n /*  NULL  is  nothing  */ 
n if  (Istring) 

n n return; 


n 

/* 

Does  it  look  like  it  might  start  with 

a keylD  spec? 

B 

i f 

(stringC0]  ==  '0'  SS  CstringC13  ==  'x' 

' II  stringCID 

B 

B 

i 

= 2; 

B 

B 

/* 

Accept  no  more  than  16  hex  digits 

*/ 

B 

B 

while  ( i sxd i g i t ( s t r i ng C i D ) SS  ++i  ! = 

2 + 16) 

B 

B 

B 

r 

B 

B 

/* 

Then  check  for  proper  termination; 

; NULL  or  : */ 

fl 

B 

i f 

(Istring Ci])  { 

B 

B 

B 

spec->keyid  = string+2; 

B 

fl 

B 

spec->key i d 1 en  = i-2; 

B 

B 

B 

return; 

B 

B 

> 

else  if  (stringCi]  ==  ':')  ( 

B 

fl 

fl 

spec->keyid  = string+2; 

B 

fl 

fl 

spec->keyidlen  = i-2; 
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n n string  +=  i+1; 

n > /*  Otherwise  forget  it,  it's  all  namespec  */ 


/*  If  not  it's  a pattern  */ 

if  (stringCOD  !=  '*'  ||  stringCID)  { 

H spec->name  = string; 
n s pe c->na me L e n = s t r L en ( s t r i ng ) ; 

} 


/* 

* Return  true  if  string  "arg"  (terminated  by  nuLL  or  ':')  appears  in 

* the  hex  expansion  of  the  given  keyID.  C a s e - i n s e n s i t i v e . 

*/ 

static  int 

matchKeyIDCbyte  const  keyIDCS],  char  const  *pat,  size_t  Len) 

{ 


Q 

char 

buf C163; 

n 

char 

const  hexC163  = C 

n 

n ' 

'0' 

1 -I  I I 

2',  '3', 

'4', 

' 5 

n 

n ' 

' 8 ' 

I n 1 I 

a',  'b'. 

'C, 

' d 

n 

>; 

a 

buf  C 

83 

- h ex C 

keyIDC43 

>>  4 

3; 

n 

buf  C 

93 

= hexC 

keyIDC43 

S 15 

3; 

n 

buf CI0: 

= h e X C 

keylDC53 

>>  4 

3; 

n 

buf Cl  1 3 

= h e X C 

keyIDC53 

& 15 

3; 

Q 

buf Cl  2: 

= hex  C 

keyIDC63 

>>  4 

3; 

n 

buf CI3: 

= h e X C 

keyIDC63 

& 15 

3; 

n 

buf C14: 

= hexC 

keyIDC73 

>>  4 

3; 

n 

buf Cl  53 

= hexC 

keyIDC73 

8 15 

3; 

n 

if  (Len 

A 

II 

00 

rS 

n n return  xmem i mem ( bu f +8 , 8,  pat,  Len) 
n > 


NULL; 


n 

/ * Here 

i 

f i nput  keyl D 

was  > 

8 

n 

buf C03 

= 

hexC 

keyIDC03 

>> 

4 

3; 

n 

buf Cl  3 

= 

hexC 

keylDC03 

& 

1 5 

3; 

n 

buf C23 

= 

hexC 

keyIDCI 3 

>> 

4 

3; 

n 

buf C33 

= 

hexC 

keyIDCI 3 

& 

1 5 

3; 

n 

buf C43 

= 

hexC 

keyIDC23 

>> 

4 

3; 

D 

buf C53 

= 

hexC 

keyIDC23 

& 

1 5 

3; 

n 

buf C63 

= 

hexC 

keyIDC33 

>> 

4 

3; 

n 

buf C73 

= 

hexC 

keyIDC33 

& 

1 5 

3; 

n 

return 

xmem i mem ( bu f , 16 

V 

pat 

/ 

chars,  we  Look  at  fuLL  64  bit  keyid  */ 


static  int 

p r ed i c a t e F i L t e r Name ( VO i d *arg,  struct  Ringiterator  *iter, 
n union  RingObject  *obj,  unsigned  LeveL) 

{ 

n struct  KeySpec  const  *spec; 

n struct  RingSet  const  *set; 

a byte  i d8[8:]; 

n char  const  *nam; 
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size_t  len; 
i n t i ; 


□ 

n 


if  (Level  > 1) 

n return  1;n  /*  ALL  children  included  if  top  Level  is  */ 


pgpAssertCOBJISKEYCobj )); 


n spec  = (struct  KeySpec  const  *)arg; 
n set  = r i n g I t e r S e t ( i t e r ) ; 


n /*  Check  for  usage  */ 

n if  (spec->use  SS  ( r i n g Key U s e ( s e t , ob j ) & s pe c->u s e ) !=  spec->use) 

n n return  0;a  /*  Doesn't  have  required  usage  */ 


i f 
□ 

□ 

□ 

a 

a 

D 

n 

D 

□ 

> 


(spec->keyi d Len)  { 
r i n g Key  I D8 ( s e t , obj,  NULL,  id8); 

if  ( ! ma t c h Key  I D ( i d8,  spec->keyid,  s p e c -> key i d L en ) ) { 


union  RingObject  *subkey  = r i n g Ke y S u b key ( s e t , obj); 
if  (Isubkey) 
n return  0; 

ringKeyID8(set,  subkey,  NULL,  id8); 

if  ( ! ma t c h Key  I D ( i d8,  spec->keyid,  s pe c-> key i d L e n ) ) 
n return  0; 


This  isn't  quite  consistent,  because  it'LL  accept  a key 
with  *no*  names  if  the  name  specification  is  empty. 


*/ 


/* 

* 

* 

*/ 

if  ( spec->name L en  ==  0) 
n return  1;n  /*  Match! 

/* 

* Search  names  for  a matching  name.  If  *one*  is  found, 

* the  entire  key,  including  aLL  names,  is  taken 
*/ 

while  ((i  = r i ng I t e r Nex t Ob j e c t ( i t e r , 2))  > 0)  { 
n obj  = r i ng 1 1 e r C u r r e n t Ob j e c t ( i t e r , 2); 
n if  (ringObjectType(obj ) !=  R I NGT Y PE_N AM E ) 

n n continue; 

□ nam  = r i ng NameName ( se t , obj,  Slen); 
n if  (Inam) 

n n return  r i ng S e t E r r o r ( s e t ) ->e r r o r ; 
n if  ( xmem i mem ( n a m,  Len,  spec->name,  s p e c->n a me L e n ) ) 
n n return  1,-n  /*  Match,  take  it!  */ 

} 


return  ^ 


/*  No  match  or  error  */ 


/* 

* Perform  filtering  based  on  a keyspec. 

* Use  is  a PGP_PKUSE  value  to  specify  the  purpose  of  the  key. 

* Pass  0 to  match  all  keys.  PG P_P KU S E _ S I G N_ E N C R Y PT  gets  only  ones  which 

* can  do  both  things. 

*/ 

i n t 
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ringSetFi LterSpecCstruct  RingSet  const  *src,  struct  RingSet  *dest, 
n char  const  *string,  int  use) 

{ 

n struct  KeySpec  spec; 

n keyspecSpli t (stri ng,  use,  8spec); 

n return  r i n g S e t F i L t e r ( s r c , dest,  p r ed i c a t e F i L t e r Na me , (void  *)&spec); 

> 


/* 

* Find  the  most  recent  secret  key  matching  a keyspec. 

* Limit  keys  to  those  which  have  the  specified  use.  Pass  0 to  match 

* all  uses.  If  tstamp  is  nonzero,  also  checks  for  expiration  of  keys. 
*/ 

union  RingObject  * 

r i ng La t es t Sec r e t ( s t rue t RingSet  const  *set,  char  const  *string, 
n n uord32  tstamp,  int  use) 

{ 

n struct  KeySpec  spec; 

n struct  Ringiterator  *iter; 

n union  RingObject  *obj,  *best  = NULL; 
n word32  objtime,  besttime  = 0; 

a word32  expt i me; 

n int  i ; 


n if  (!set) 
n n return  NULL; 


n iter  = r i ng 1 1 e r C r ea t e ( s e t ) ; 
n if  (liter) 

n n return  NULL;n  /*  How  to  distinguish  from  no  Luck?  */ 
n keyspeeSp L i t ( St ri ng,  use,  Sspec); 


n 

□ 

a 

n 

a 

n 

□ 

n 

n 

□ 

D 

n 

o 

n 

n 


while  ( r i ng I t e r Nex t Ob j e c t ( i t e r , 1)  > 0)  ( 

n obj  = ringIterCurrentObject(iter,  1); 
n pgpAssert(obj); 
n if  ( ! r i n g Key  I s S e c ( s e t , obj)) 
n n continue; 

n if  ( r i ng KeyRevoked ( se t , obj)) 
n n continue; 

n i = p r e d i c a t e F i L t e r N a me ( ( V o i d *)&spec,  iter,  obj,  1); 
n if  ( ! i ) 

n n continue; 

n if(i<0){ 

n n r i n g Ob j e c t Re L ea s e ( be s t ) ; 

n n best  = NULL; 
n n break; 

n > 


n □ 
n n 
n □ 
n n 

D Q 

n n 
a Q 
n □ 


objtime  = r i ng Key C r ea t i on ( s e t , obj); 
exptime  = r i n g Key  Ex p i r a t i on ( s e t , obj); 
if  (besttime  <=  objtime  &S  (Itstamp  ||  lexptime  || 
n n n tstamp  <=  exptime))  { 

n r i ng 0 b j e c t Re L e a s e ( be s t ) ; n /*  OK  if  best  = NULL  */ 
a best  = obj; 
n r i ngOb j ec t Ho L d ( be s t ) ; 
n besttime  = objtime; 
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n n > 

n > 

n ringlterDestroy(iter); 
n return  best; 

> 


/* 

* Return  key  self-sig  subpacket  information.  Searches  all  sigs  below 

* the  key  for  a self  sig,  finds  most  recent  one  with  desired  info. 

* nth  is  0 to  find  first  matching  packet,  1 for  second,  etc. 

* The  rule  is  that  if  we  find  two  different  sigs  which  both  have 

* packets  of  the  matching  type,  we  take  the  more  recent  sig.  It  is 

* assumed  to  supercede  the  earlier  one,  even  if  the  earlier  had  more 

* packets  of  that  type. 

* 

* keyn  n o key  to  use 

* setn  □ n set  containing  key 

* subpacktypen  subpacket  type  to  search  for 

* nthn  n n nth  matching  subpacket  to  find 

* *plenn  n return  length  of  data 

* *pcriticaln  return  criticality  field  of  subpacket 

* *phashednn  return  whether  subpacket  was  in  hashed  region 

* *pcreationn  return  creation  time  of  matching  signature 

* *pmatchesn  return  number  of  matches  of  this  subpack  type 

* *errorn  b return  error  code 

* 

* Function  returns  pointer  to  the  data,  of  length  *plen,  or  NULL  with  *error 

* set  for  error  code.  If  matching  packet  is  not  found,  return  NULL 

* with  *error  = 0. 

*/ 


byte  const  * 
ringKeyFindSubpacket 
B int  subpacktype, 

B si ze_t  *plen,  i nt 
B unsigned  *pmatches 


n 

Ri ngOb j ectB 

n 

D 

RingIteratorB 

n 

word32B  B 

a 

a 

i ntBtj  n 

n 

n 

byte  constB 

n 

□ 

si 2e_tB  B 

n 

a 

i ntBB  n 

n 

o 

i n t BB  n 

n 

( Ri ngOb j ect  *ob j 
unsi gned  nth, 
*pcritical,  int 
int  *error) 

*sig,  *bestsig; 

*i ter; 

bestcreation; 

bestmatches; 

*p,  *bestp; 
best  I en; 
bestcritical; 
besthashed; 


struct  RingSet  *set, 
*phashed,  word32  *pcreation. 


B pgpAssert(OBJISKEYCobj)); 

B pgpAssert  (obj->g.mask  & set->mask); 

B 

B bestlen  = bestcritical  = besthashed  = bestmatches  = bestcreation  = 0; 

B sig  = NULL; 

B bestp  = NULL; 

B bestsig  = NULL; 

B if  (error) 

B B *error=0; 

B iter  = ri ngIterCreate  (set); 

B if  (liter)  { 
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n 

Q 

i f 

(error) 

n 

□ 

n 

*error  = ringSetError(set)-> error; 

n 

n 

return  NULL; 

n 

> 

n 

r i n g I t e r S e e kTo  (iter,  obj); 

a 

while 

(TRUE)  { 

n 

□ 

intnn  Level; 

n 

Q 

word32n  creation; 

D 

n 

intnn  matches; 

a 

n 

s i 

ze_tn  L en; 

a 

□ 

if 

((level  = r i ng  1 1 e r Nex t Ob j ec t Any wh e r e (i 

ter))  <= 

0) 

n 

n 

D 

break; 

n 

n 

sig  = ri ngIterCurrentOb j ect  (iter.  Level); 

n 

D 

/* 

n 

n 

* 

Abort  when  we  come  to  a subkey  or  another  key. 

S i g s 

n 

n 

* 

shouldn't  count,  I don't  think. 

Q 

n 

•k 

/ 

n 

D 

i f 

(OBJ ISKEY( si g ) ) 

n 

a 

n 

break; 

n 

n 

i f 

( !0BJISSIG(sig)) 

n 

n 

n 

continue; 

n 

□ 

/* 

Only  count  self-sigs  that  have  been  validated  * 

/ 

n 

□ 

if 

( r i n g S i g Ha ke r (set,  sig,  set)  !=  obj) 

n 

n 

n 

conti nue; 

n 

a 

i f 

( ( ri ngSi gType  (set,  sig)  & 0xf0)  !=  PGP 

_SIGTYPE 

_KEY_ 

D 

n 

n 

continue; 

n 

Q 

i f 

( ! ri ngSi gChecked  (set,  sig)  ||  r i ng S i g R e vo ked  (set. 

n 

D 

n 

conti nue; 

n 

n 

/* 

Here  we  have  a self  signature  */ 

Q 

n 

P = 

= (byte  const  *)ringFetchObject(set,  sig 

, & L e n ) ; 

n 

n 

i f 

( ! p)  { 

D 

n 

n 

if  (error) 

n 

Q 

n 

n *error  = ringSetError(set)-> error; 

n 

□ 

n 

return  NULL; 

n 

n 

> 

n 

□ 

P = 

= r i ng S i g F i ndSubpa c ke t (p,  subpacktype. 

0,  NULL, 

NULL 

n 

n 

Q 

NULL,  Screation,  (unsigned  int  *)  &matches); 

n 

n 

if 

(p)  f 

n 

n 

n 

if  (creation  > be s t c r e a t i on ) { 

o 

D 

n 

n bestcreation  = creation; 

n 

a 

D 

n bestmatches  = matches; 

n 

n 

n 

n if  (bestsig) 

n 

□ 

n 

a n r i ngOb j e c t R e L e a s e (bestsig); 

n 

n 

n 

n bestsig  = sig; 

n 

D 

n 

n ringObjectHoLd  (bestsig); 

D 

n 

n 

} 

n 

a 

> 

n > 

n r i n g I t e r De s t roy  (iter); 

o if  Cbestsig)  { 

n a /*  This  had  the  most  recent  sig  with  the  type  we  need  */ 

n n p = (byte  const  *)ringFetchObject(set,  bestsig,  Sbestlen); 

n n pgpAssert  (p); 

n n bestp  = r i n g S i g F i nd S ubpa c ke t (p,  subpacktype^  nth,  SbestLen, 
n n n RbestcriticaL,  Sbesthashed,  NULL,  NULL); 

n n r i ng Ob j e c t R e L e a s e (bestsig); 

n } 
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Q 

n 

a 

u 

a 

n 

a 

n 

n 

□ 

n 

} 


if  ( p L en ) 

n *pLen  = best  Len; 
if  (pcriticaL) 

n *pcriticaL  = b e s t c r i t i c a L ; 
if  (phashed) 

a *phashed  = besthashed; 
if  (pcreation) 

n *pcreation  = be s t c r ea t i on  ; 
i f ( pmat  ches  ) 

n *pmatches  = bestmatches; 
return  bestp; 


/* 

* Find  a key  recovery  key  for  the  given  key,  if  one  exists.  nth  teLLs 

* which  one  to  find.  *pkeys  is  set  to  the  number  of  key  recovery  keys, 

* *pcLass  is  set  to  the  class  byte  associated  with  the  recovery  key. 

*/ 

union  Ri ngOb j ect  * 

r i n g Key Re c 0 V e r y Key  (union  RingObject  *obj,  struct  RingSet  *set,  unsigned  nth, 
H n n n n byte  *pclass,  unsigned  *pkeys,  int  *error) 

{ 


n 

RingObjectn 

*rkey;n  n n 

/♦ 

Message  recovery  key  ♦/ 

□ 

byte  constn 

♦krpdata ;n  n 

/♦ 

Pointer  to  key  recovery  data  ♦/ 

n 

s i ze_tn  n 

Q 

krdatalen;n  a 

/♦ 

Length  of  krdata  ♦/ 

n 

i ntnn  n 

n 

critical;n  n 

/♦ 

True  if  recovery  field  was  critical 

n 

uns i gnedn 

o 

matches;!!  n 

/♦ 

Number  of  mrk's  found  ♦/ 

Q 

byten  n 

n 

fingerpC203;n 

/♦ 

Fingerprint  of  mrk  ♦/ 

n 

byten  n 

n 

krdataC22D;nn 

/♦ 

Copy  of  key  recovery  data  packet  ♦/ 

n pgpAssertCOBJISKEYCobj)); 
n pgpAssert  (obj->g.mask  S set->mask); 

n pgpAssert  (error); 


n 

□ 

n 

n 

□ 

n 

D 

n 

□ 

n 

□ 

n 

a 

□ 

n 

n 

D 

□ 

n 

n 

□ 

n 


♦error  = 0; 

krpdata  = r i ngKey F i ndS ubpa c ke t (obj,  set,  S I G S UB_KE Y_ R E C OV E R Y_KE Y , nth, 
n Skrdatalen,  Scritical,  NULL,  NULL,  Smatches,  error); 
if  ( ! krpdata ) ( 
n return  NULL; 

} 

if  (pkeys) 

n *pkeys  = matches; 

/* 

* krdata  is  1 byte  of  class,  1 of  pkalg,  20  bytes  of  fingerprint. 

* Last  8 of  20  are  keyid.  Make  a copy  because  data  is  volatile  when 

* we  do  other  operations.  Return  class  info  even  if  we  don't  have  the 

* MRK,  it  will  help  caller  decide  how  serious  this  is. 

*/ 

pgpAssert  (krdatalen  >=  sizeof(krdata)); 
pg p C opy Memo r y (krpdata,  krdata,  s i z e o f ( k r da t a ) ) ; 
if  (pclass)  { 
n *pclass  = krdataC03; 

} 

/*  Do  we  have  MRK?  */ 

rkey  = ringKeyByIdS  (set,  krdataCI],  k r da t a + 2 + 2 0-8  ) ; 
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n i f ( ! rkey)  { 

n n /*  Have  a problem  - we  don't  have  the  KR  key  */ 
n n *error  = PG P E R R_N 0_R E C 0 V E R YK E Y ; 

n n return  NULL; 

n } 

n ringKeyFingerprint20  (set,  rkey,  fingerp); 
n if  (memcmp  (fingerp,  krdata+2,  20)  !=  0)  { 

n n /*  Have  a bogus  key  that  matches  in  keyid  but  wrong  fingerprint  */ 

n n *error  = PG PE R R_N0_R E C 0 V E R YKE Y ; nn  /*  XXX  different  error?  */ 

n n return  NULL; 

n > 

n /*  Else  success  */ 
n return  rkey; 

} 

a 

/*  Check  obj  for  consistency,  make  sure  valid  mask  bits  are  in 
* parent  mask 
*/ 

void 

ringObjCheck  (union  RingObject  *obj,  ringmask  validmask, 
n n n ringmask  parentmask) 

{ 

n pgpAssert  ( ! ( ( ob j ->g . ma s k8 va I i dma s k ) & “ p a r e n t ma s k ) ) ; 
n if  (OBJ ISSIG (ob j ) ) C 

n /*  sig  should  point  to  top-level  key  */ 

n pgpAssert  ( OB J I STO PKE Y ( ob j -> s . by ) ) ; 

n } 

n if  (OBJISBOKobj  ) ) 

n n return; 

n for  (obj=obj->g . down;  obj;  ob j =o b j ->g . n ex t ) { 

n n ringObjCheck  (obj,  validmask,  parentmask  & ob j ->g . ma s k ) ; 
n } 

} 

/*  Perform  a consistency  check  on  ring  pool  data  structures  */ 
void 

ri  ngPoolConsi stent  (struct  RingPool  *pool,  int  *pnsets,  int  *pnfiles) 

{ 

n ringmask  alloc mask; 

n ringmask  filemask  = poo  I -> f i I ema s k; 
n ringmask  mask; 

n struct  RingSet  *set; 

n union  RingObject  *obj; 

n allocmask  = (ringmask)0; 

n for  (set  = pool->sets;  set;  set  = set->next) 

n n allocmask  |=  set->mask; 

a pgpAssert  (!(allocmask  & filemask)); 
n mask  = allocmask  | filemask; 

n for  (obj=pool->keys;  obj;  obj=obj->g.next)  ( 
n n ringObjCheck  (obj,  mask,  mask); 

n } 

n i f (pnsets)  ( 

n n int  nsets  = 0; 

n n while  (allocmask)  ( 
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n 

Q 

□ 

□ 

□ 

□ 

□ 

n 

a 

Q 

H 

a 

□ 

> 


n n ++nsets; 

a n aLLocmask  &=  a L L o c ma s k-1  ; 
n > 

n *pnsets  = nsets; 

> 

if  (pnfiLes)  { 
a int  nfiLes  = 0; 
n while  (filemask)  { 
n n + + nf i L e s ; 

a a filemask  8=  filemask-1; 

n > 

n *pnfiles  = nfiles; 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpRngPub.h 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpRngPub . h, V 1.15.2.2  1997/06/07  09:50:41  mhw  Exp  $ 

*/ 

Sifndef  PGPRNGPUB.H 
//define  PGPRNGPUB.H 
/*  PubLic  */ 

//incLude  "pgpUsuaLs.h" 

//ifdef  ..cpLuspLus 
extern  "C"  f 
//e nd i f 

//ifndef  PGPTRUSTMODEL 
//define  PGPTRUSTMODEL  0 
//endi  f 

typedef  enum  { 

n PGPTRUST0=0,  PGPTRUST1,  PGPTRUST2 
> PgpT rustHode  L ; 

/*  Signature  subpacket  types.  Most  of  these  are  not  supported  yet.  */ 
enum  si gsubbyte  f 

n /*  Signature  specific  properties  */ 

n SIGSUB.VERSIONn  n a =1, 

n SIGSUB. CREATION, 

a SIGSUB.EXPIRATION, 

n /*  Properties  of  key  being  seLf  signed  */ 
n SIGSUB. KEY. CAPABILITIES  = 8, 

n SIGSUB. KEY. EXPIRATION, 

n SIGSUB. KEY. RECOVERY. KEY, 

n SIGSUB. PREFERRED. ALGS, 

n /*  Hints  to  find  signer  */ 
n SIGSUB. KEYIDn  n n = 16, 

n SIGSUB. USERID, 

n SIGSUB. URL, 

a SIGSUB. FINGER 

>; 

/* 

* Opaque  types 
*/ 

union  RingObject; 

//ifndef  TYPE.RINGOBJ  ECT 

//define  T Y P E.RI  NG  OB  J E CT  1 

typedef  union  RingObject  RingObject; 

//endi  f 

struct  RingSet; 

//ifndef  TYPE. RINGSET 

//define  TYPE. RINGSET  1 

typedef  struct  RingSet  RingSet; 

//endi  f 
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struct  R i ng I t e r a t o r ; 

#ifndef  T YPE_R I N G I T E R ATOR 
#define  T Y P E_ R I NG I T E R ATO R 1 
typedef  struct  Ringiterator  Ringlterator; 
#end  1 f 

struct  RingFile; 

#ifndef  T Y P E_ R I NG F I LE 

^define  T YP E_R I NG F I L E 1 

typedef  struct  RingFile  RingFile; 

# e n d i f 

struct  RingPool; 

#ifndef  TYPE_RINGP00L 

#define  TYPE_RINGP00L  1 

typedef  struct  RingPool  RingPool; 

#endi f 

/* 

* Types  not  defined  here 
*/ 

struct  PgpEnv; 

#ifndef  TYPE_PGPENV 
#define  TYPE_PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 

#endi f 


struct  PgpPubKey; 

#ifndef  TYPE_PGPPUBKE Y 
#define  T YPE_PGPPUBKE Y 1 
typedef  struct  PgpPubKey  PgpPubKey; 
#e nd i f 

struct  PgpSecKey; 

#ifndef  T Y PE_ PG PS E C KE Y 
^define  T YP E_PG PS E C KE Y 1 
typedef  struct  PgpSecKey  PgpSecKey; 
# e nd i f 


/* 

* Okay,  finally  we  start  the  function  declarations. 

*/ 

struct  RingPool  PGPExport  * r i ng Poo  I C r ea t e ( s t r u c t PgpEnv  const  *env); 
/*  Destroy  everything  immediately,  dropping  all  locks!  */ 
void  PGPExport  r i ng Poo  I De s t r oy ( s t r u c t RingPool  *); 


struct  RingError  { 

a struct  RingFile  *f;n/*  The  RingFile  for  I/O  errors  */ 

a word32  fpos;n  /*  The  file  position  for  I/O  errors  */ 

n int  error ;n  /*  PGP  error  code  - PGPERR_*  */ 

n int  syserrno;n  /*  Don't  use  plain  "errno";  that's  a macro!  */ 

>; 


#ifndef  T YPE_ R I N G E R RO R 
#define  T Y P E_R I NG E R R OR  1 
typedef  struct  RingError  RingError; 
# e n d i f 
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struct  RingError  const  PGPExport  *ringPooLError(struct  RingPooL  const  *); 
void  PGPExport  ringPooLCLearErrorCstruct  RingPooL  *); 


/* 

* A RingSet  is  the  root  of  a tree  of  objects.  The  RingSet  itself 

* is  not  a RingObject,  but  everything  else  under  it  is. 

* A fuLL  tree  Looks  basically  Like  this: 

* RingSet 

* + — Key 


★ 

1 

+ — Secret  (0  or  more) 

★ 

1 

+--S ignature  (0  or 

more) 

* 

1 

+ — S ignature  (0  or 

more) 

★ 

1 

+--Name  (0  or  more) 

* 

1 

1 +--S ignature  (0 

0 r 

more) 

* 

1 

1 \--S ignature  (0 

o r 

more) 

* 

1 

\ — Name  (0  or  more) 

* 

1 

\--S ignature  (0 

o r 

more) 

* 

+ — 

Key 

* 

1 

+ — et  c . 

* 

etc. 

★ 


* A "secret"  object  is  present  if  the  key's  secret  components  are 

* available.  In  the  standard  PGP  keyring  file  format,  this  is 

* actually  stored  with  the  key  as  a different  type  of  key  packet, 

* but  the  representation  here  is  Logically  equivalent. 

4r 

* There  is  one  secret  object  per  encrypted  form  of  the  secret 

* components.  Barring  duplicate  key  errors,  there  is  only  one 

* secret  object  per  file  (if  you  attempt  to  write  out  more,  the 

* Library  will  make  a guess  at  the  best  and  write  that  out),  but, 

* for  example,  changing  the  passphrase  will  create  a second  secret. 

* 

* Some  sets  are  mutable,  and  RingObjects  can  be  added  to  or  deleted  from 

* them,  but  the  tree  property  is  always  preserved.  Adding  an  object 

* implicitly  adds  all  of  its  parents.  Deleting  an  object  implicitly 

* deletes  all  of  its  children. 

*/ 


int  PGPExport  r i n g Ob j e c t Ty pe ( un i on  RingObject  const  *obj); 

/*  Type  0 is  reserved  for  application  use;  it  will  never  be  allocated  */ 

^define  R I NGT YP E_KE Yb  1 

^define  R I NGT YP E_ S E C n 2 

^define  R I NGT Y P E_N AM En  3 

#define  R I NGT Y PE_S I Gn  4 

#define  RINGTYPE_UNKn  5n  /*  Object  of  unknown  type  */ 

#define  RI NGT YPE_HAXn  5 

/*  Adding  a new  type  needs  to  update  r i ng Ob j e c t Ty pe ( ) and  r i ng N e wOb j e c t ( ) 


*/ 


/* 

* Increase  and  decrease  RingObject  reference  counts.  The  ringiter 

* functions  hold  their  current  objects  (at  the  current  Level  and  all 

* parent  levels)  automatically  and  release  them  when  the  ringiterator  is 

* advanced  to  another  Location.  If  you  wish  to  refer  to  them  after 

* advancing  the  Ringiterator,  Other  functions  that  return  RingObject 

* pointers  hold  them  automatically,  and  they  must  be  released  explicitly 

* by  ri ngObjectRe Lease! ) . 

*/ 

void  PGPExport  r i ng 0 b j e c t Ho  I d ( u n i o n RingObject  *obj); 
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void  PGPExport  ringObjectReleaseCunion  RingObject  *obj); 

/*  Operations  on  RingSets  */ 

struct  RingPooL  PGPExport  *ringSetPooL(struct  RingSet  const  *); 

struct  RingError  const  PGPExport  *ringSetError(struct  RingSet  const  *); 
void  PGPExport  r i n g S e t C L ea r E r r o r ( s t r u c t RingSet  *); 

int  PGPExport  r i n g S e t I s M embe r ( s t r u c t RingSet  const  *set, 
a union  RingObject  const  *object); 

int  PGPExport  r i ng S e t C ou n t ( s t r u c t RingSet  const  *set,  unsigned  *counts, 
n unsigned  depth); 

int  PGPExport  r i ng S e t C ou n t Ty pe s ( s t r u c t RingSet  const  *set,  unsigned  *counts, 
n unsigned  max); 

/*  Create  a new  mutable  RingSet  */ 

struct  RingSet  PGPExport  * r i n g S e t C r e a t e ( s t r u c t RingPool  *pool); 

/*  Free  a RingSet  (mutable  or  immutable)  */ 

void  PGPExport  r i ng S e t D e s t r oy ( s t r u c t RingSet  *set); 

/*  Operate  on  a mutable  RingSet  */ 

int  PGPExport  ringSetAddObjectCstruct  RingSet  *set,  union  RingObject  *obj); 
int  PGPExport  ringSetRemObjectCstruct  RingSet  *set,  union  RingObject  *obj); 
int  PGPExport  ringSetAddSetCstruct  RingSet  *set,  struct  RingSet  const  *set2); 
int  PGPExport  r i ng S e t S ub t r a c t S e t ( s t r u c t RingSet  *set, 
n struct  RingSet  const  *set2); 

int  PGPExport  r i n g S e t Ad dOb j e c t C h i I d r e n ( s t r u c t RingSet  *dest, 
n struct  RingSet  const  *src,  union  RingObject  *obj); 

/*  Convert  a mutable  RingSet  to  immutable  */ 
int  PGPExport  ringSetFreeze(struct  RingSet  *set); 

/*  Operate  on  immutable  RingSets  */ 

struct  RingSet  PGPExport  *ringSetCopy(struct  RingSet  const  *s); 
struct  RingSet  PGPExport  * 

r i ng Se t Un i on ( s t ru c t RingSet  const  *s1,  struct  RingSet  const  *s2); 
struct  RingSet  PGPExport  * 

r i ng S e 1 1 n t e r se c t i on ( s t r u c t RingSet  const  *s1,  struct  RingSet  const  *s2); 
struct  RingSet  PGPExport  * 

ringSetDifferenceCstruct  RingSet  const  *s1,  struct  RingSet  const  *s2); 

/*  Lookups  by  keylD  */ 
union  RingObject  PGPExport  * 

r i ng Key By  I d8 ( s t r u c t RingSet  const  *set,  byte  pkalg,  byte  const  *keyid); 

/*  Operations  on  R i ng I t e ra t o r s */ 

struct  Ringiterator  PGPExport  *ringIterCreate(struct  RingSet  const  *set); 
void  PGPExport  r i ng I t e r D e s t r oy ( s t r u c t Ringiterator  *iter); 

struct  RingSet  const  PGPExport  * r i ng  1 1 e r S e t ( s t r u c t Ringiterator  const  *iter); 
struct  RingError  const  PGPExport  * r i ng I t e r E r r o r ( 
n struct  Ringiterator  const  *iter); 

void  PGPExport  r i ng  1 1 e r C I e a r E r r o r ( s t r u c t Ringiterator  *iter); 

int  PGPExport  ringIterNextObjectCstruct  Ringiterator  *iter,  unsigned  level); 
int  PGPExport  r i n g I t e r P r e vOb j e c t ( s t r u c t Ringiterator  *iter,  unsigned  level); 
unsigned  PGPExport  r i n g 1 1 e r C u r r e n t Le v e I ( s t r u c t Ringiterator  const  *iter); 
union  RingObject  PGPExport  * r i n g I t e r C u r r e n t Ob j e c t ( 
n struct  Ringiterator  const  *iter,  unsigned  level); 
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int  PGPExport  r i ng I t e r N e x t 0 b j e c t Any w h e re ( s t r u c t Ringiterator  *iter); 
int  PGPExport  r i ng I t e r R e w i nd < s t r u c t Ringiterator  *iter,  unsigned  level); 
int  PGPExport  r i n g I t e r F a s t F o r wa r d ( s t r u c t Ringiterator  *iter,  unsigned  level); 
int  PGPExport  r i ng I t e r S e e kTo ( s t r u c t Ringiterator  *iter, 
n union  RingObject  *obj); 


/*  RingFile  access  functions  */ 


struct  PgpFile  PGPExport  * r i ng F i I e F i I e ( s t r u c t RingFile  const  *file); 
struct  RingSet  const  PGPExport  * r i ng F i I e S e t ( s t r u c t RingFile  const  *file); 
PgpVersion  PGPExport  ringFileVersionCstruct  RingFile  const  *file); 


int  PGPExport  ringFilelsDirtyCstruct  RingFile  const  *file); 

int  PGPExport  r i ng F i I e I sT r u s t C h a ng ed ( s t r u c t RingFile  const  *file); 


/*  Alias  for  r i ng S e t E r r o r ( r i n g F i I e S e t ( f i I e ) ) */ 

struct  RingError  const  PGPExport  * r i ng F i I e E r r o r ( s t r u c t RingFile  const  *file); 
void  PGPExport  r i n g F i I e C I e a r E r r o r ( s t r u c t RingFile  *file); 

i nt  PGPExport 

r i ngSet F i I t e r { s t rue t RingSet  const  *src,  struct  RingSet  *dest, 

int  (*predi cate) ( voi d *arg,  struct  Ringiterator  *iter, 

union  RingObject  *object,  unsigned  level), 

void  *arg); 

int  PGPExport  r i n g S e t F i I t e r S pe c ( s t r u c t RingSet  const  *src, 
n struct  RingSet  *dest,  char  const  *string,  int  use); 

union  RingObject  PGPExport  * 

r i ngLa t es t Sec  ret ( s t ruct  RingSet  const  *set,  char  const  *string,  word32  tstamp, 
n int  use); 


/*  Object  access  functions  */ 

PgpTrustHode  I PGPExport  pg pT r u s t Hod e I ( s t r u c t RingPool  const  *pool); 
int  PGPExport  ringKeyErrorlstruct  RingSet  const  *set,  union  RingObject  *key); 
unsigned  PGPExport  r i ng Key B i t s ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

word32  PGPExport  r i ng Key C r e a t i on ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

word32  PGPExport  r i n g Key  Ex p i r a t i on ( s t r u c t RingSet  const  *set, 
o union  RingObject  *key); 

void  PGPExport  r i ng Key  I D8 ( s t r u c t RingSet  const  *set, 
a union  RingObject  const  *key,  byte  *pkalg,  byte  *buf); 

int  PGPExport  ringKeyUseCstruct  RingSet  const  *set,  union  RingObject  *key); 
byte  PGPExport  r i ng Key T r u s t ( s t r u c t RingSet  const  *set,  union  RingObject  *key); 
void  PGPExport  r i n g Key S e t T r u s t ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  byte  trust); 

int  PGPExport  r i n g Key D i s a b I e d ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

void  PGPExport  r i n g Key D i sa b I e ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

void  PGPExport  r i ng Key E na b I e ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPExport  r i ng Key  Re vo ke d ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

void  PGPExport  r i n g Key S e t Ax i oma t i c ( s t r u c t RingSet  const  *set, 
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n union  RingObject  *key); 

void  PGPExport  r i n g Key R e s e t Ax i oma t i c ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPExport  r i ng Key Ax i oma t i c ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPExport  r i n g Key  I s S ub key ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPExport  r i ng Key F i n g e r p r i n t 1 6 ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  byte  *buf); 

int  PGPExport  r i ng Key F i ng e r p r i n t 2 0 ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  byte  *buf); 

int  PGPExport  r i n g Key Ad d S i g s by ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  struct  RingSet  *dest); 

/*  Given  a Ring  Object,  obtain  a PgpPubKey  or  a PgpSecKey  */ 

int  PGPExport  r i ng Key  I s S e c ( s t r u c t RingSet  const  *set,  union  RingObject  *key); 
int  PGPExport  r i n g Key I s S e c On L y ( s t r u c t RingSet  const  *set, 
n n n n union  RingObject  *key); 

union  RingObject  PGPExport  * r i ng Key S ub key ( s t r u c t RingSet  const  *set, 
n n Q n union  RingObject  const  *key); 

union  RingObject  PGPExport  * r i n g Key Ha s t e r key ( s t r u c t RingSet  const  *set, 
n n n n union  RingObject  const  *subkey); 

struct  PgpPubKey  PGPExport  * r i ng Key  Pub  Key ( s t r u c t RingSet  const  *set, 
n n n n union  RingObject  *key,  int  use); 

struct  PgpSecKey  PGPExport  * r i ng S e c S e c Key ( s t r u c t RingSet  const  *set, 

D B n n union  RingObject  *sec,  int  use); 

PgpVersion  PGPExport  r i ng S e c V e r s i on  (struct  RingSet  const  *set, 

B B n B union  RingObject  *sec); 

char  const  PGPExport  * r i ng Name Na me ( s t r u c t RingSet  const  *set, 
n union  RingObject  *name,  size_t  *Lenp); 
byte  PGPExport  r i ng NameT r u s t ( s t r u c t RingSet  const  *set, 
n union  RingObject  *name); 

int  PGPExport  r i ng N a me Wa r non L y ( s t r u c t RingSet  const  *set, 
n union  RingObject  *name); 

void  PGPExport  r i ng Na me S e t Wa r non L y ( s t r u c t RingSet  const  *set, 
n union  RingObject  *name); 

int  PGPExport  ringSigErrorCstruct  RingSet  const  *set,  union  RingObject  *sig); 
union  RingObject  PGPExport  * r i ng S i gHa ke r ( s t r u c t RingSet  const  *sset, 
n union  RingObject  *sig,  struct  RingSet  const  *kset); 
void  PGPExport  r i ng S i g I D8 ( s t r u c t RingSet  const  *set, 
n union  RingObject  const  *sig,  byte  *pkaLg,  byte  *buf); 

byte  PGPExport  ringSigTrustCstruct  RingSet  const  *set,  union  RingObject  *sig); 
int  PGPExport  r i n g S i g C h e c ke d ( s t r u c t RingSet  const  *set, 
n union  RingObject  *sig); 

int  PGPExport  r i ng S i gT r i ed ( s t r u c t RingSet  const  *set,  union  RingObject  *sig); 
int  PGPExport  r i ng S i gTy pe ( s t r u c t RingSet  const  *Set, 
n union  RingObject  const  *sig); 

word32  PGPExport  r i n g S i gT i me s t a mp ( s t r u c t RingSet  const  *Set, 
n union  RingObject  const  *sig); 

int  PGPExport  r i ng S i g Re vo ke d (struct  RingSet  const  *set, 
n union  RingObject  *sig); 


/*  Only  valid  if  Pg pT r u s t Hod e L > PGPTRUST0  */ 

word16  PGPExport  r i ng Key C on f i d e n c e ( s t r u c t RingSet  const  *set, 
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a union  RingObject  *key); 

word16  PGPExport  r i ng Na me Va L i d i t y ( s t r u c t RingSet  const  *set, 
a union  RingObject  *name); 

wordia  PGPExport  r i ng Name C on f i d e n c e ( s t r u c t RingSet  const  *set, 
a union  RingObject  *name); 

int  PGPExport  r i ng Na me C on f i den c e U nd e f i ne d ( s t r u c t RingSet  const  *set, 
n a a a union  RingObject  *name); 

void  PGPExport  r i ng N a me S e t C on f i d e n c e ( s t r u c t RingSet  const  *set, 
n a a union  RingObject  *name,  uord16  confidence); 

uord16  PGPExport  r i ng S i g C on f i de n c e ( s t r u c t RingSet  const  *set, 
a union  RingObject  *sig); 


byte  const  PGPExport  * 

ri  ngKey Fi ndSubpacket  (RingObject  *obj,  struct  RingSet  *set, 
a int  subpacktype,  unsigned  nth, 

a size_t  *plen,  int  *pcriticaL,  int  *phashed,  word32  *pcreation, 
a unsigned  *pmatches,  int  *error); 
union  RingObject  PGPExport  * 

r i ng Key R e CO ve r y Key  (union  RingObject  *obj,  struct  RingSet  *set,  unsigned  nth, 
a a a a a byte  *pcLass,  unsigned  *pkeys,  int  *error); 


void  PGPExport  r i ng Poo L Con s i s t e n t (struct  RingPooL  *pooL,  int  *pnsets, 
a int  *pnfiLes); 


#ifdef  cpLuspLus 

> 

Send i f 


# e nd i f 


/*  PGPRNGPUB.H  */ 


/* 

* Loca  L Variables: 

* tab-width:  4 

* End  : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpRngRead.c  - Read  in  various  parts  of  a keyring. 

★ 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* The  big  function  (>500  Lines,  yeep!)  is  ringFiLeOpenC);  it  opens  another 

* keyring  and  merges  it  with  the  coLLection  in  memory. n Most  of  the  others 

* are  its  heLpers.  This  is  where  PGPLib's  great  robustness  in  the  face  of 

* badLy  mangLed  keyrings  is  achieved. n *Every*  keyring  comes  through  here, 

* and  it  vaLidates  its  inputs  to  the  point  of  paranoia. 

* 

* This  fiLe  is  too  big  - what  shouLd  be  spLit  out? 

* There  are  a Lot  of  s i m i L a r-bu t -n o t -q u i t e functions. n Perhaps  some 

* rethinking  wiLL  aLLow  parts  of  them  to  be  merged? 

* 

* Written  by  CoLin  PLumb. 

★ 

* $Id:  pgpRngRead . c,v  1.24.2.12  1997/06/11  22:29:47  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end i f 


#i nc  Lude  <errno . h> 
#incLude  <stdio.h> 
#incLude  <string.h> 


#incLude 

"pgpDebug.h" 

# i nc  L ude 

"pgpMakeSig.h" 

#incLude 

"pgpMemPooL  .h" 

# i n c L ude 

"pgpPktByte.h" 

#incLude 

"pgpRngMnt . h" 

ttincLude 

"pgpRngPars . h" 

#incLude 

"pgpRngPkt . h" 

#incLude 

"pgpRngPriv.h" 

#i nc  Lude 

"pgpTrust.h" 

ttincLude 

"pgpT  rstPkt . h"nn 

SincLude 

"pgpHash . h" 

# i n c L ude 

"pgpKeySpec . h" 

#incLude 

"pgpMem. h" 

#i nc  Lude 

"pgpCipher.h" 

#incLude 

"pgpEnv.h" 

# i n c L ude 

"pgpErr.h" 

#incLude 

"pgpPubKey . h" 

#i ncLude 

"pgpFi Le.h" 

ttincLude 

"pgpRngRead.  h" 

#incLude 

"pgpSigSpec.h" 

/*  for  PGP_SIGTRUSTF_CHECKED_TRIED  */ 


#ifndef  NULL 
#def i ne  NULL  0 
#end  i f 


/*  We  have  optionaL  code  to  wrap  newer  packets  in  comments  */ 
#define  WRAP  NONE  1 


/* 

* The  Largest  LegaL  PGP  key  uses  a 64Kbit  key,  which  is  SKbytes. 
i:i:CHK:61f21d859961  92c532ad722d7224fb79592cb2a4e3221  edd42ffcaaa365555  73  5]: 
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* As  a public  key,  there's  also  12  bytes  of  overhead,  plus  a 

* public  exponent  (usually  1 byte,  sometimes  3,  it's  just  stupid 

* to  make  it  any  larger). 

* Stored  in  a secret  key  an  extra  11+IV  bytes  of  overhead  and 

* the  secret  exponent  (8K),  factors  p and  q (4+4=8K),  and  multiplicative 

* inverse  u (4K).  A total  of  28K  of  data,  plus  23+IV+e  extra  bytes. 

* With  an  8-byte  IV,  that's  31+e  bytes.  Add  an  extra  byte  to  allow 
*forpandqofdifferinglengths. 

* But  for  now,  reduce  this  by  a factor  of  8,  to  8Kbits,  which  changes 

* the  maximum  sizes  to  IK+overhead  and  3.5K  + overhead. 

* 

* Without  these  limits,  a non-fatal  error  (object  too  big)  becomes 

* a fatal  error  (out  of  memory)  and  the  implementation  becomes 

* less  robust.  However,  the  limits  can  be  set  quite  high  without 

* harm.  (Keep  the  maximum  key  size  to  64K,  though.) 

* 

* The  limits  above  were  derived  for  RSA  keys.  DSA/EIG  keys  have  a prime 

* p,  a small  ("160  bit)  prime  q,  a generator  g,  and  a public  exponent  y. 

* That's  four  numbers,  one  of  them  small.  If  we  allow  enough  space  for  four 

* full-sized  numbers  that  should  be  safe.  Secrets  have  in  addition  a 

* secret  exponent  x,  generally  small,  so  allow  an  additional  number. 

* Signatures  are  small  with  DSA,  two  160  bit  numbers.  However  the  new 

* signature  packets  can  in  principle  have  a lot  of  data.  Allow  two  full 

* sized  numbers  to  give  us  plenty  of  room;  we  may  have  to  increase  the  value 

* in  the  future . 

*/ 

^define  R I NGMPI _M AXn 1 024n  ana/*  Maximum  8Kbits  */ 

^define  R I NGKE Y_H AX L E Nn  ( 4*R I NG M P I _M AX ) n / * Public  key  maximum  size  */ 

^define  RINGSEC_HAXLENn  ( 5 * R I N GH P I _H AX ) n / * Secret  key  maximum  size  */ 

^define  RI NGNAME_MAXLENn1 024un  n n /*  Name  maximum  size  */ 

^define  R I NG S I G_H AX L ENn  ( 2*R I NG MP I _M AX ) n / * Signature  maximum  size  */ 

^define  RINGUNK.HAXLENn  R I NG S E C _H AX LE N 
/*  RINGTRUST_MAXLEN  is  implicit  */ 

/***  Working  with  the  FilePos  chain  ***/ 

/* 

* A note  about  the  FilePos  chain.  Each  object  has  one  FilePos  right 

* inside  itself,  which  is  the  head  of  a list  of  external  (allocated) 

* ones.  There  is  one  FilePos  for  each  key  file  an  object  exists  in, 

* and  they  are  kept  in  increasing  order  by  bit  number. 

* Every  object  (except  dummy  keys,  which  aren't  excessively  numerous, 

* especially  in  large  keyrings)  is  present  in  at  least  one  physical 

* keyring,  so  this  saves  one  next  pointer  when  we're  trying  to  conserve 

* memory  for  MS-DOS,  at  the  expense  of  complicating  the  task  of 

* adding  to  and  removing  from  the  list. 

* 

* This  is  because  the  first  entry  in  the  chain  is  statically  allocated. 

* An  actual  allocation  is  performed  when  an  entry  is  added  to  the 

* chain  in  a location  other  than  the  first,  or  is  bumped  from  first 

* place  by  something  else.  A FilePos  is  freed  when  an  entry  is  deleted 

* from  the  chain,  or  the  first  one  is  deleted  and  the  second  moves  into 

* its  place. 

* 

* One  more  piece  of  magic:  because  there  is  no  need  for  the  FilePos  chain 

* to  be  n u I I — t e r m i n a t e d (the  number  of  entries  in  it  is  given  by  the 

* mask),  physical  key  ring  HEMRINGBIT  (which  is  the  last  FilePos  in  the 

* chain,  so  its  next  pointer  is  unused)  is  reserved  for  memory  objects. 
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* the  next  pointer  and  fpos  record  the  Location  in  memory  and  size  of 

* the  memory  buffer  holding  the  object,  respectively. 

*/ 

/*  Find  the  position  of  an  object  in  the  given  file  */ 
static  struct  FilePos  * 

r i ng F i L ePos ( uni  on  RingObject  const  *obj,  struct  RingFile  const  *fiLe) 

{ 

n struct  FilePos  const  *pos  = &obj->g.pos; 

n ringmask  mask; 

n pg p A s s e r t ( o b j ->g  . ma  s k & f i L e->s e t . ma  s k ) ; 

n mask  = obj->g.mask  & fiLe->set.pooL->fiLemask  & (fiLe->set. mask-1); 
n while  (mask)  { 
n n pos  = pos->ptr.next; 

n n mask  &=  mask-1 ; 

n > 

n return  (struct  FilePos  *)pos; 

} 

/*  Allocate  a FilePos  from  a RingFile.  */ 
static  struct  FilePos  * 

r i ng F i I eNew F i L ePos ( s t r u c t RingFile  *fiLe) 
f 

a struct  FilePos  *pos  = fiLe->freepos; 
a if  (pos)  { 

n n f i L e-> f r ee po s = pos->pt r . next ; 

n > e L se  { 

a n pos  = (struct  FilePos  * ) memPoo L N e w ( & f i L e-> f po s , s t r u c t FilePos); 

n n i f ( 1 pos  ) 

n n n r i ng A I I oc E r r ( f i L e->set . poo L ) ; 

n } 

n return  pos; 

> 

static  void 

r i ng Fi L e F ree F i L ePos ( s t ruct  RingFile  *fiLe,  struct  FilePos  *pos) 

{ 

n pos->pt r . next  = f i I e->f r e e po s ; 
n f i L e->f reepos  = pos; 

} 

/* 

* Allocate  and  add  a FilePos  to  the  object's  chain  in  the  right  place. 

* This  function  makes  no  attempt  to  initialize  the  resultant  FilePos. 

* 

* NOTE  that  the  bit  specified  to  add  may  or  may  not  be  present  in 

* the  ring's  filemask.  This  function  must  not  care. 

*/ 

static  struct  FilePos  * 

r i ng Add F i L ePos ( uni  on  RingObject  *obj,  struct  RingFile  *fiLe) 

{ 

n ringmask  mask  = obj->g.mask  S f i L e-> s e t . poo L -> f i L ema s k; 
n ringmask  mask2  = f i L e->s e t . ma s k ; 
n struct  FilePos  *pos,  *pos2; 
n i n t bit; 
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n pgpAssertCKmask  & mask2)); 
n if  (mask  8 (mask2-1))  ( 

n n /*  FiLePos  to  add  is  not  the  first  in  the  chain  */ 
n n mask  8=  (mask2-1); 


pos2  = r i ng F i L e Ne w F i I e Po s ( f i I e ) ; 


n 

n 

i f 

( ! pos2  ) 

n 

D 

g 

return  NULL; 

n 

Q 

/* 

Find  the  predecessor  of  the 

one  to  be 

n 

S 

pos 

= 8ob j ->g . pos  ; 

n 

Q 

while  ((mask  8=  mask-1)  !=  0) 

{ 

n 

n 

g 

pos  = pos->pt r . next  ; 

D 

□ 

g 

pgpAssert(pos); 

n 

□ 

> 

c 

a 

/* 

Insert  pos2  into  the  chain 

after  pos 

n 

□ 

pos2->pt r . next  = po s->p t r . n e x t 

n 

n 

pos 

->ptr.next  = pos2; 

n 

> 

else 

n 

n 

/* 

First  FiLePos  in  the  chain 

*1 

tt 

n 

pos2  = 8obj->g.pos; 

n 

n 

i f 

( ! ma  s k ) ( 

n 

□ 

g 

/*  First  and  only  FiLePos 

on  chain  * 

n 

□ 

g 

pos  = NULL; 

n 

n 

} else  { 

o 

D 

g 

/*  First  FiLePos;  bump  down  the  oLd 

n 

n 

g 

bit  = ringLsBitFind(mask); 

n 

Q 

g 

pg p As s e r t ( b i t >=  0); 

n 

Q 

g 

file  = 8file->set.pooL->fiLesCbit]; 

n 

n 

g 

pos  = r i ng  F i L eN e w F i L e Pos  ( f i L e ) ; 

D 

n 

g 

if  ( ! pos ) 

n 

g 

g 

n return  NULL; 

□ 

g 

g 

*pos  = *pos2; 

D 

g 

> 

n 

g 

pos2->pt r . next  = pos; 

obj->g.mask  |=  mask2; 
return  pos2; 


stati c i nt 

r i ng AddPos ( un i on  RingObject  *obj,  struct  RingFiLe  *fiLe,  word32  fpos) 

{ 

n struct  FiLePos  *pos; 

n pos  = r i ng Add F i L e Pos ( ob j , file); 
n if  ( ! pos ) 

n n return  PG P E R R_N0M EM ; 
n pos->fpos  = fpos; 
n return  0; 

> 

/* 

* This  is  needed  in  one  obscure  error  case  to  keep  things 

* consistent.  The  case  is  when  a secret  key  appears  in  the  same 

* file  as  the  corresponding  public  key,  only  Later. 

*/ 
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static  void 

r i ng A L t e r F i L e Pos ( un i on  RingObject  *obj,  struct  RingFile  const  *fiLe, 
n word32  f pos  ) 

{ 

n ringmask  mask  = obj->g.mask  & f i L e->s e t . poo L ->f i L ema s k; 
n struct  FiLePos  *pos; 

n pgpAssertCmask  S fiLe->set.mask); 

n mask  &=  f i L e-> s e t . ma s k - 1; 

B for  (pos  = &obj->g.pos;  mask;  mask  &=  mask-1) 

B B pos  = pos->pt r . next ; 

B pos->fpos  = fpos; 

> 

/* 

* Remove  a FiLePos  from  an  object's  List. 

★ 

* fiLe  is  the  fiLepos  corresponding  to  "bit",  pos  is  the  head  of  a 

* FiLePos  chain,  mask  is  the  bitmask  of  physicaL  key  rings,  and 

* bit  is  the  number  of  the  ring  to  have  its  position  removed. 

* 

* NOTE  that  the  bit  specified  to  remove  may  or  may  not  be  present  in 

* the  r i ng->f i L ema s k . This  function  must  not  care. 

*/ 

static  void 

r i ng Rem F i L ePos ( un i on  RingObject  *obj,  struct  RingFiLe  *fiLe) 

{ 


n 

r i 

ngmask  mask  = obj->g.mask 

8 

fiLe 

->set .pooL- 

>fi Lemask; 

Q 

ringmask  mask2  = fiLe->set. 

mask; 

n 

struct  FiLePos  *pos,  *pos2; 

a 

i n t bit; 

a 

/* 

Is  the  bit  to  remove  *not* 

the 

Least  signi 

f i cant 

bit?  */ 

n 

i f 

(mask  & (mask2-1))  { 

a 

B 

/*  FiLePos  to  remove  is 

not  the  first  in 

the  chain  */ 

□ 

B 

/*  Find  the  predecessor 

of 

the 

one  to  be 

removed 

*/ 

Q 

B 

mask  8=  (mask2-1); 

B 

B 

pos  = 8obj->g.pos; 

B 

B 

whiLe  ((mask  8=  mask-1) 

j = 

0) 

{ 

B 

B 

n pos  = pos->pt r . next 

f 

B 

B 

n pg p A s s e r t ( po s ) ; 

B 

B 

> 

B 

B 

/*  pos->next  is  the  one 

t 0 

be 

removed  */ 

B 

B 

pos2  = pos->pt r . next ; 

B 

B 

pgpAssert(pos2); 

B 

B 

pos->ptr  = pos2->ptr; 

B 

B 

if  (mask2  ==  H E M R I NGH AS K ) n 

/* 

Debugg i ng 

aid  * / 

B 

B 

n pos->pt r . next  = NULL; 

B 

> 

e L s e { 

B 

B 

/*  First  FiLePos  - copy 

second 

to  first. 

remove 

second  */ 

B 

B 

/*  CLear  this  bit  from 

the 

mask  (in  case 

we  need 

to)  */ 

B 

B 

mask  8=  ~mask2; 

B B / * 

B B * That's  it?  WeLL,  return  then.  The  caLLer  better 

B B * deaLLocate  this  object,  'cause  it  no  Longer  exists 
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n 

0 

* 

anywhere.  Use  position  -1  to  mark  an  unused 

n 

0 

*/ 

n 

0 

if 

( ! ma  s k ) { 

D 

0 

0 

obj->g.mask  &=  "mask2; 

0 

0 

0 

if  (mask2  ==  M EHR I N G M A S K ) n /* 

Debugging  aid 

0 

0 

0 

n ob j ->g . po s . p t r . n e X t = NULL; 

0 

0 

0 

obj->g.pos.fpos  = (word32)-1;n 

/*  Debugging 

0 

0 

0 

return; 

o 

0 

} 

0 

0 

/* 

Find  the  bit  of  the  object  we  are  removing  */ 

0 

0 

b i t 

= ringLsBitFind(mask); 

0 

0 

pg p A s s e r t ( b i t >=  0); 

0 

0 

file  = 8f i 1 e->s e t . poo  1 ->f i 1 e s C b i t 3 ; 

0 

0 

/* 

Copy  the  next  pos  to  the  current 

one  * / 

0 

o 

pos2  = ob j ->g . pos . p t r . nex t ; 

0 

0 

pgpAssert(pos2); 

o 

0 

ob  j 

->g .pos  = *pos2; 

0 

> 

0 

/* 

Free 

the  FilePos  */ 

0 

r i ng F i 1 e F r e e F i 1 e Po s ( f i 1 e , pos2); 

0 

ob  j 

->g  ■ 

mask  &=  ~mask2; 

> 


/***  Closing  a RingfiLe  ***/ 

/* 

* Set  the  destruction  function  for  a RingFile. 

*/ 

void 

r i ng F i L e S e t D e s t r u c t o r ( s t ru c t RingFile  *file, 

a void  ( *des t ru c t o r ) ( s t ru c t RingFile  *,  struct  PgpFile  *,  void  *), 
n void  *a  rg ) 

{ 

n f i I e->des t r uc t o r = destructor; 
n f i I e->a  rg  = a rg  ; 

> 

/* 

* Helper  function  for  r i ng F i I e D o C I o s e . 

* 

* Delete  the  given  file's  FilePos  entries  from  the  objects  in 

* the  given  list,  and  delete  the  objects  if  they  are  no  longer 

* needed  (mask  has  gone  to  0).  Recurse  as  necessary. 

* 

* Note  that  this  is  not  used  on  the  main  keys  list,  because 

* there  we  need  to  preserve  dummy  keys  which  this  does  not 

* understand. 

* 

* This  also  removes  any  cached  names  from  objects. 

*/ 

static  void 

r i ng F i I eC I ose Li s t ( un  i on  RingObject  **objp,  struct  RingFile  *file) 

{ 

n union  RingObject  *obj; 

n ringmask  const  mask  = f i I e-> s e t . ma s k ; 
n ringmask  const  filemask  = f i I e-> s e t . poo  I ->f i I ema s k ; 

FCCHK: b82b788f 00609776271  30e044aa5b695c9c49222d871  b54d1 29d0621  e74941  adS:: 


989 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngRead.c 


n 

n 

□ 

n 

n 

o 

a 

a 

n 

n 

n 

□ 

n 

□ 

□ 

n 

n 

n 

Q 

n 

a 

> 


while  ((obj  = *objp)  !=  NULL)  { 
n if  (mask  S obj->g.mask)  { 
n n if  ( ! OBJISBOTCobj  ) ) 

n n n r i n g F i L e C L o s e L i s t ( &ob j ->g . do wn , file); 

n n ringRemFilePosCobj,  file); 

n n / * 

n n * May  have  a child  obj  in  the  HEHRING  which  didn't 
n n * get  deleted  because  it  was  not  in  this  RingFile. 
n n * / 

n n if  ( ! (obj->g . mask  S filemask  & “ H E M R I NG M A S K ) SS 

n n n C OB J I S BOT ( ob j ) | | ! o b j ->g . do wn ) ) { 

n n n *objp  = obj->g.next; 

n n n r i n g F r e eOb j e c t C f i I e-> s e t . poo  I , obj); 

n a > e I s e { 

n n n if  ( OB J I S N AM E ( ob j ) ) 

naan  r i n g Pu r g e C a c h e d Na me ( So b j ->n , mask); 

n n n objp  = &ob j ->g . n e x t ; 

n n > 

n } e I s e 

n a objp  = Sob j ->g . ne X t ; 

> 


/* 

* Close  the  given  Ringfile.  Returns  an  error  if  it  can't  due  to 

* conflicts,  in  which  case  the  file  is  NOT  closed. 

* 

* This  performs  four  passes  over  the  pool. 

* 1.  The  first  does  the  bulk  of  the  deletion,  removing  the 

* FilePos  from  the  objects  and  deleting  all  things 

* at  levels  greater  than  1. 

* 2.  The  second  rebuilds  the  sigs-by  lists  which  were  broken  by 

* deleting  objects  in  the  middle  of  them. 

* 3.  The  third  finds  all  keys  that  are  not  referenced  and  do  not 

* make  any  signatures,  and  deletes  those  keys. 

* 4.  The  fourth  rebuilds  the  hash  index  of  the  remaining  keys. 

* 

* Note  that  the  second  and  third  passes  delete  any  a I located-but-not 

* linked  keys,  which  are  left  by  ringFileOpen  if  it  runs  out  of  memory 

* in  mid-operation. 

*/ 

static  void 

r i ng F i I e D oC I o s e C s t r u c t RingFile  *file) 

{ 

n union  RingObject  *obj,  **objp; 
n struct  RingPool  *pool  = f i I e-> s e t . poo  I ; 
a ringmask  mask  = f i I e->s e t . ma s k ; 
n ringmask  filemask  = poo l->f  i I ema s k; 

n ringmask  allocmask  = ringAllocMaskCpool,  &file->set); 
a i n t i ; 


n /*  Free  some  memory  right  away  */ 
n r i n g F i I e Pu r g eT r o u b I e ( f i I e ) ; 

n /*  1:  Remove  everything  in  the  keyring,  but  don't  delete  the  keys  */ 
n for  (obj  = pool->keys;  obj;  obj  = obj->g.next)  { 

n n if  (mask  & obj->g.mask)  -C 
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n n n if  ( ! OB J I S BOT ( ob j ) ) 

n n n n ringFiLeCLoseList(&obj->g.down,  file); 

n n n r i ng R em F i L e Po s ( ob j , file); 

n n > 

n > 


n /*  2:  Recreate  the  shattered  sigs-by  Lists  */ 
n r i ng Poo L Li s t S i g s By ( poo L ) ; 


□ 

n 

□ 

Q 

□ 

n 

□ 

□ 

D 

Q 

n 

a 

□ 

□ 

n 

n 

Q 

n 

n 

D 


/*  3:  Now  purge  the  unneeded  keys  */ 
objp  = &pooL->keys; 
while  ((obj  = *objp)  !=  NULL)  f 
n pgpAssertCOBJISKEYCobj ) ); 

n if  ( ( ob j ->g . ma s k S fiLemask  & ~ H EM R I NGM A S K ) | | obj->g.down)  { 

n n objp  = &obj->g.next; 

n > else  if  ( o b j -> k . s i g s by  ) { 
n n /*  Retain  key  as  a dummy  key  */ 

n n pgpAssert ( ! (ob j->g . mask  S alLocmask  S “ HEHR I NGM AS K ) ) ; 

H n pgp As s e r t ( ! ob j ->g  . down ) ; 
n n obj->g.mask  = 0; 

n n objp  = 8obj->g.next; 

n > e I se  { 

n D /*  Delete  the  key  */ 

n n pg p A s s e r t ( ! ( ob j ->g . ma s k & alLocmask  & “MEHRI NGMASK)  ) ; 
n n pg p As s e r t C 1 o b j ->g . do wn  ) ; 
n n *objp  = obj->g.next; 

n n r i ng F r eeOb j e c t ( poo  I , obj); 

n > 

> 


n /*  4:  Re-i ni t i a L i ze  the  hash  chains  */ 
n r i ng Poo L Ha s h ( poo L ) ; 


n /*  Clean  up  the  file's  memory  pools  */ 
n memPoo L Emp t y ( &f i L e->s t r i ng s ) ; 

n f i L e->f reepos  = NULL; 
n memPoo I Emp t y ( 8f i L e->f po s ) ; 


n pg p As s e r t ( ! f i L e-> s e t . n ex t ) ; 


n /* 

n * If  there's  nothing  in  the  structs  MemPooL  that's 
n * allocated,  purge  all  the  memory, 

n * / 


n 

i f 

( ! pooL->keys  88 

!pooL->sets)  { 

n 

D 

for  (i  = 0;  i < 

RINGTYPE_MAX; 

n 

□ 

n pooL->freeobjsCiII  = NULL; 

n 

S 

pool->freesets 

= NULL; 

n 

n 

pooL->freei ter 

= NULL; 

n 

n 

memPooLEmpty(8pooL->structs); 

n > 


n 

n 

a 

n 

D 


/*  Cal  the  file's  destructor  function,  if  any  */ 
if  ( f i I e->d e s t r u c t o r ) C 

n f i L e->des t ru c t o r ( f i L e , fiLe->f,  fiLe->arg); 

n f i L e->d e s t r u c t o r = NULL; 

} 
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n /*  Final  deallocation  of  the  file  */ 
a file->flags  = 0; 
n poo  I ->f i I ema s k 8=  "mask; 

> 

/* 

* Check  to  see  if  an  object  anywhere  on  the  list  (including  children, 

* recursively)  is  included  in  "allocmask"  but  not  in  "filemask." 

* Such  an  object  is  orphaned,  an  undesirable  state  of  affairs. 

* We  have  to  check  the  entire  keyring,  recursively,  because  a 

* given  key  or  name  might  be  duplicated  in  another  keyring,  but 

* a signature  lower  down  might  not  be. 

*/ 

static  int 

r i n g F i I e C h e c k L i s t ( u n i o n RingObject  const  *obj,  ringmask  filemask. 


n 

f 

ringmask  allocmask) 

V 

n 

while 

(obj)  { 

Q 

o 

i f 

(obj->g.mask  8 allocmask)  ( 

n 

n 

n 

/*  Would  closing  orphan  this  object?  */ 

Q 

n 

n 

if  ( ! ( ob j ->g . ma s k 8 filemask)) 

n 

n 

n 

n return  1; 

s 

n 

n 

/*  Would  closing  orphan  its  children?  */ 

n 

n 

n 

if  ( ! OB J I S BOT ( ob j ) 88  r i ng F i 1 e C h e c k L i s t ( o b j ->g . do wn 

n 

n 

a 

fi  lemask. 

n 

n 

n 

allocmask)) 

a 

n 

n 

n return  1; 

a 

□ 

> 

n 

n 

obj  = ob j->g . next; 

Q 

> 

n 

return 

0; 

} 

/*  Is  it  safe  to  close  the  given  file?  */ 
i nt 

r i ng F i I e C h e c kC I o s e ( s t r u c t RingFile  const  *file) 

{ 

n struct  RingPool  const  *pool  = f i I e-> s e t . poo  I ; 

n if  (!file) 

n n return  0; 

n return  r i n g F i I e C h e c k Li s t ( poo  I -> key s , poo l->f i I ema s k 8 " f i I e-> s e t . ma s k, 
n ringAllocMaskCpool,  8file->set)); 

} 

/* 

* Close  the  given  Ringfile.  Returns  an  error  if  it  can't  due  to 

* conflicts,  in  which  case  the  file  is  NOT  closed. 

*/ 

int 

r i n g F i I e C I o s e ( s t r u c t RingFile  *file) 

{ 

n if  (!file) 

n n return  0;n  /*  closeCNULL)  is  defines  as  harmless  */ 

a if  ( r i ng F i I e C h e c kC  I ose ( f i I e ) ) 
n n return  -1; 
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n /*  Okay,  nothing  can  fail  now  */ 
n r i n g F i L e Do C L o s e ( f i L e ) ; 

n return  0; 

> 

/***  Routines  for  fetching  things  from  the  keyring  ***/ 

/*  Hake  sure  the  pool's  packet  buffer  is  Large  enough  */ 
static  char  * 

r i n g Re s e r ve ( s t r u c t RingPooL  *pooL,  size_t  Len) 

{ 

n char  *p; 

n if  ( poo L->pktbuf a L loc  >=  Len) 

n n return  pooL->pktbuf; 

n p = (char  * ) pg pHemRea L L o c ( po o L ->p k t bu f , Len); 
n i f { ! p)  { 

a n r i ng A L L o c E r r ( poo L ) ; 

n n return  NULL; 

n } 

n pooL->pktbufaLLoc  = Len; 

n return  pooL->pktbuf  = p; 

} 

/* 

* File  priorities  are  handled  by  a "higherpri"  mask  with  each  file, 

* which  is  a mask  of  other  files  of  higher  priority  than  that  file. 

* If  obj->g.mask  S poo L->f i Lma s k &S  f i L e-> h i g h e r p r i is  0, 

* this  is  the  h i g h e s t -p r i o r i t y file. 

*/ 

/*  Set  file  to  the  highest  priority,  except  for  the  memory  file  */ 
void 

r i ng F i L e H i g h P r i ( s t r u c t RingFiLe  *fiLe) 

{ 

n struct  RingPooL  *pooL  = f i L e->set . poo L ; 
n ringmask  mask  = f i L e-> se t . ma s k ; 
n i n t i ; 

n /*  Add  this  file  to  everything  else's  higher  priority  mask  */ 
n for  (i  = 0;  i < MEMRINGBIT;  i++) 
n n poo L ->f i L e s C i D . h i g h e r p r i 1=  mask; 

n /*  The  only  thing  higher  priority  than  this  file  is  MEHRING  */ 
n f i L e->h i g h e r p r i = MEHRINGHASK; 

> 

/*  Set  file  to  the  Lowest  priority  */ 
void 

r i ng F i L e LowP r i ( s t r u c t RingFiLe  *fiLe) 

{ 

n struct  RingPooL  *pooL  = f i L e->set . poo L ; 
n ringmask  mask  = ~ f i L e->s e t . ma s k; 
n i n t i ; 

n /*  Remove  this  file  from  everything  else's  higher  priority  mask  */ 
n for  (i  = 0;  i < MEMRINGBIT;  i++) 

n n poo  L ->f  i L e s C i II . h i g h e r p r i 8=  mask; 
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n /*  Everything  is  higher  priority  than  this  file  (except  itself)  */ 
n f i L e-> h i g h e r p r i = mask; 

} 


/*  The  mask  of  sets  that  this  key  has  *any*  secret  components  in  */ 
static  ringmask 

ri ngKeySecHaskCuni on  RingObject  const  *obj) 

{ 

n ringmask  secmask  = 0; 
n pgpAssertCOBJISKEYCobj)); 

n for  (obj  = obj->g.down;  obj;  obj  = obj->g.next) 
n n if  (OBJISSECCobj )) 

° n n secmask  |=  obj->g.mask; 

a return  secmask; 

} 

/* 

* Given  an  object,  find  the  best  RingFiLe  to  fetch  it  from, 

* for  fetching  purposes.  Bits  set  in  "avoidmask"  are 

* NOT  valid  for  fetching. 

*/ 

static  struct  RingFile  * 

r i ngBes t F i I e ( s t r u c t RingPool  *pool,  union  RingObject  const  *obj, 
n ringmask  avoidmask) 

{ 

n ringmask  mask  = obj->g.mask  S poo  I -> f i I ema s k ; 
n struct  RingFile  *file; 
n i n t bit; 

n if  (!(mask  & "avoidmask)) 

n n return  NULL; 


□ 

/* 

find 

h i ghe s t-p r i 0 r i t y fetchable  file  */ 

n 

for 

) { 

n 

n 

/* 

Is  least-significant  bit  set  in  mask  fetchable? 

n 

Q 

i f 

(!(mask  8 -mask  8 avoidmask))  E 

n 

D 

n 

bit  = r i ng LsBi t F i nd ( ma s k ) ; 

n 

n 

Q 

file  = 8poo  1 ->f i 1 e s E b i t 3 ; 

□ 

n 

c 

/*  Is  it  highest  priority?  */ 

n 

n 

a 

if  (!(mask  8 f i 1 e-> h i g h e r p r i 8 "avoidmask)) 

n 

n 

a 

n break; 

a 

Q 

a 

pgpAssert(file->f); 

n 

n 

> 

D 

n 

mask  8=  mask-1; 

Q 

a 

pgpAssert(mask) ; 

n 

} 

n 

return 

file; 

/*  Macro  wrapper  to  inline  the  important  part  */ 

#define  r i ng R e s e r ve ( poo  I , len)  \ 

a ( ( poo  I )->pktbuf a I loc  < (len)  ? r i n g R e s e r ve ( poo  I , len)  : ( poo  I ) ->p k t bu f ) 

/* 

* This  is  the  routine  which  fetches  a packet  from  a keyring  file. 

* It  tries  the  h i g h e s t -p r i o r i t y file  that  the  object  is  in  which  is  also 

EEC HK: 8677703f 835  5 f7ad22 cl  43c e278cb337dd946 c7876d1 e744499 596651  1 f 82a 9a6:] 
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* Listed  in  "avoidmask."  If  the  memory  keyring  is  one  of  those,  it  has 

* absolute  priority.  (It  is  also  not  verified;  it  is  assumed  correct.) 

* Otherwise,  the  object  is  fetched  from  the  h i g h e s t -p r i o r i t y open  file. 

* 

* The  files  are  assigned  priorities  for  fetching.  The  default  is 

* that  the  first  opened  file  is  highest  and  subsequent  files  are  of 

* lower  priority.  This  is  done  by  having  each  Ringfile  keep  a mask 

* of  higher-priority  RingFiles.  We  walk  along  the  List  until  we  hit 

* a RingFile  whose  higher-priority  mask  doesn't  include  any  files  that 

* the  object  being  sought  is  in. 

* 

* The  packet  fetched  must  pass  the  following  validity  checks: 

* - It  must  be  of  the  given  packet  type. 

* - It  must  be  no  Longer  than  "maxLen". 

* - If  those  pass,  it  must  be  read  into  memory  successfully. 

* - It  must  then  pass  the  caller-supplied  "verify"  function, 

* which  checks  ob j e c t - t y p e- s pe c i f i c information  against  the 

* summary  information  stored  in  the  RingObject. 

* 

* Question:  what  to  return  when  the  avoidmask  doesn't  allow  anything  to 

* be  fetched?  Is  this  case  just  an  error? 

*/ 


static  void  const  * 

r i ng Fet chPa cket C s t rue t RingPooL  *pooL,  union  RingObject  const  *obj, 
n ringmask  avoidmask,  int  pkttype,  si2e_t  maxlen,  size_t  *Lenp, 

n int  ( *ve r i f y ) ( un i o n RingObject  const  *,  byte  const  *,  size_t)) 

{ 


□ 

n 

Q 

□ 

n 


struct  RingFile  *fiLe; 
struct  FilePos  const  *pos; 
word32  Len; 
int  i ; 
void  * p ; 


n /*  find  h i g h e s t -p r i o r i t y fetchable  file  */ 
n file  = r i ngBe s t F i L e ( poo L , obj,  avoidmask); 
n if  (Ifile)  ( 
n n *Lenp  = (size_t)0; 

n n return  NL)LL;n  /*  Is  this  The  Right  Thing?  */ 

n } 

n pos  = ringFilePosCobj,  file); 
n pgpAssert(pos); 


a /*  If  it's  in  memory,  that  was  easy...  */ 

n if  (f i le->set .mask  ==  MEHRINGMASK)  { 

n n pgpAssert  (Iverify 

n a II  verify(obj,  (byte  * ) po s -> p t r . bu f , pos->fpos)  ==  0); 

n n *lenp  = pos->fpos; 

n n return  pos->pt r . buf ; 

n > 


n /*  We  now  have  h i g h e s t -p r i o r i t y fetchable  file  */ 
n pgpAsse rt ( f i L e->f ) ; 

n if  ( pgp F i I e S e e k ( f i L e-> f , pos->fpos,  SEEK_SET)  !=  0)  ( 
n n i = PGPERR_KEYIO_SEEKING; 

n n goto  err; 

n > 

n i = pktByteGet(fiLe->f,  &len,  (word32  *)NULL); 


:[CHK:b7a00f1c8b0fed06721ff076a4e80d9aa9893033baae16bd655fb4ea18131178f]] 
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n 

D 

n 

Q 

n 

n 

D 

B 

B 

B 

B 

B 

B 


if  ( i <=  0 ) 
n goto  err; 

if  (PKTBYTE_TYPE(i  ) !=  pkttype 


Len  > maxLen)  { 


i = PGPERR_KE YIO_BADPKT; 
goto  err; 


B 
B 
> 

p = ringReserveCpooL,  (size_t)Len); 
if  ( ! p ) 

B goto  errmem;B  /*  ringErrC)  already  called  */ 
pool->pktbuflen  = Csize_t)len; 

i = pgp F i I e Rea d ( poo  I ->p k t buf , (size_t)len,  file->f); 
if  ((size_t)i  !=  (size_t)len)  { 

n i = pgpFi leErrorCf i le->f ) ? PG P E R R_KE Y I 0_R E A D I NG 


n 

n 

B 

n B PGPERR_KEYI0_E0F; 

n 

n 

goto 

1 err; 

n 

> 

n 

P 

= pool 

->pktbuf; 

n 

/* 

Okay, 

now  verify  with  supplied  function  */ 

n 

i f 

(verify  88  (i  = verify(obj,  (byte  const  *)p 

A 

len)) 

! = 

n 

n 

if  (pkttype  ==  PKTB YT E_S E C KE Y 

n 

n 

88  len 

n 

Q 

88  obj->g. flags  8 S E C F_ V E R S I 0N_BU G 

n 

n 

88  ((byte  *)p):0:  ==  PG PV E R S I 0N_2_6 ) { 

n 

D 

fi 

/* 

n 

n 

n 

* Failure  may  be  due  to  version  bug; 

f 1 

X and 

try 

n 

□ 

□ 

* again.  If  success,  put  it  back  so 

we 

behave 

n 

n 

n 

* consistently.  Verify  doesn't  always 

fail 

with 

n 

n 

s 

* version  bug,  it  depends  on  whether 

sec  or 

pub 

n 

□ 

□ 

* seen  first. 

n 

n 

a 

*/ 

n 

n 

n 

((byte  *)p)i;03  = PG  P V E R S 1 0N_2  ; 

Et 

a 

Q 

if  (verify  88 

n 

□ 

D 

(i  = verify(obj,  (byte  const  *)p. 

len))  ! 

II 

n 

Q 

n 

n goto  err; 

n 

n 

u 

((byte  *)p)C0]  = PGPVERSI0N_2_6; 

Q 

□ 

> else  { 

n 

n 

n 

goto  err; 

n 

Q 

> 

n 

> 

n 

/* 

Success!  */ 

n 

* 1 enp  = 

len; 

n 

return  p 

n 

/* 

Error 

cases  (out  of  line)  */ 

0)  { 


err: 

B ringErrCfile,  pos->fpos,  i); 
e r rme  m : 

B *lenp  = 0; 

B return  NULL; 

} 


/* 

* The  verify  functions  here  should  *never*  fail  under  normal 

* conditions.  They  fail  only  if  the  keyring  file  has  been 

* changed  while  PGP  is  accessing  it  (which  causes  a fatal  error). 

* Did  I mention  that  this  code  is  *paranoid*? 

[i:CHK:c9543ad63c5dd1ec7729b971d1a117d37dd8e4544d177ab875c115b9fa7932f47]: 
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* ("The  computer  is  your  friend.  The  computer  wants  you  to  be  happy.") 

* 

* They  operate  by  re-parsing  the  fetched  data  and  checking  that 

* the  cached  data  matches  the  data  just  fetched. 

*/ 

/*  Verify  that  the  key  we  just  read  Looks  Like  the  one  we  wanted  to  read.  */ 
static  int 

r i ng Key V e r i f y ( u n i on  RingObject  const  *obj,  byte  const  *p,  size_t  Len) 

{ 

a int  i ; 

n byte  pkaLg,  keyIDCSD; 
a word16  keybits,  vaLidity; 

a word32  tstamp; 


n i = r i ng Key Pa r s e ( p , Len,  8pkaLg,  keylD,  Skeybits, 
n 8tstamp,&vaLidity,0); 


n if 

( memcmp ( key  I D 

, obj->k. keylD,  8) 

a 

88 

keybi t s 

= = ob j ->k . key b i t s 

n 

88 

tstamp 

==  obj->k. tstamp 

/*n 

88 

vaLidity 

==  ob j->k . va L i di ty 

a 

88 

pkaLg 

==  obj->k. pkaLg 

n 

88 

II 

II 

==  !(obj->g.fLags 

n n 

return  0;a 

/*  ALL  copasceti c 

= = 0 


VaLidity  sometimes  stored  eLsewhere  */ 

8 KEYF_ERROR)) 

*/ 


n return  PG P E R R_KE Y I 0_B A D PKT ; 

> 


/*  Verify  that  the  secret  we  just  read  Looks  Like  the  one  we  wanted  to  read.  */ 
static  int 

r i n g S e c Ve r i f y ( u n i on  RingObject  const  *obj,  byte  const  *p,  size_t  Len) 

{ 

n int  i ; 

n byte  pkaLg,  keyIDCSD; 
n word16  keybits,  vaLidity; 

n word32  tstamp; 

n union  RingObject  *key  = obj->g.up; 


n pg  p A s s e r t ( OB  J 1 S S E C ( ob  j ) ) ; 
n pg  p As  s e r t ( OB  J I S KE  Y ( key ) ) ; 


n i = r i ngKey Pa r s e ( p,  Len,  8pkaLg,  keylD,  8keybits, 
n 8tstamp,  8vaLidity,  1); 


a if 
a 
a 
a 

/ * n 

n 

Q 

D a 


( r i ng H a s h Bu f ( p , Len)  ==  obj->c.hash 
88  memcmp ( key  I D,  key->k . key  I D,  8)  ==  0 
88  keybits  ==  key-> k . key b i t s 
88  tstamp  ==  key-> k . t s t a mp 

88  vaLidity  ==  key-> k . va L i d i t ya  VaLidity  sometimes  stored  eLsewhere  */ 
88  pkaLg  ==  key->k.pkaLg 

88  (i  ==  0)  ==  ! ( key->g . f Lags  8 KEYF_ERROR)) 
return  0;a  /*  ALL  copascetic  */ 


□ 

} 


return  PGPERR_KE YIO_BADPKT; 


/* 


Ci:CHK:dca544e3d5a28ee0aaeba775ffd330d4a1224dd944700b0fdc78ddaff8bb9b4b4:: 
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* Verify  that  the  signature  we  just  read  Looks  Like  the  one  we  wanted  to  read. 
*/ 

static  int 

rings igVerifyCunion  RingObject  const  *obj,  byte  const  *p,  size_t  Len) 
f 

n int  i ; 

n byte  pkaLg,  keylDCSD; 
n word32  tstamp; 

n word16  vaLidity; 

n size_t  extraLen; 

n byte  type,  hashaLg; 

o byte  version; 

n i = r i ng S i g Pa r s e C p , Len,  SpkaLg,  keylD,  Ststamp,  SvaLidity, 
n Stype,  ShashaLg,  SextraLen,  Sversion); 

n if  (memcmp ( key  I D,  ob j -> s . by-> k . key  I D , 8)  ==  0 
n n &&  version  ==  o b j -> s . ve r s i o n 
n 8S  tstamp  ==  o b j ->s . t s t a mp 

n &&  vaLidity  ==  ob j -> s . va L i d i t y 

o &&  type  ==  obj->s.type 

n SS  hashaLg  ==  obj->s. hashaLg 

n &S  (extraLen  ==  5)  ==  ! ( o b j ->g . f L a g s S S I G F _ N ON F I V E ) 

n &&  (i  ==  0)  ==  ! (ob j->g . f Lags  S SIGF_ERROR)) 

n n return  0;n  /*  ALL  copascetic  */ 

a return  PG P E RR_KE Y I 0_B A D PKT ; 

} 

/* 

* Verify  that  the  unknown  we  just  read  Looks  Like  the  one  we  wanted  to  read. 

*/ 

static  int 

r i ngUnkVe r i f y ( un i on  RingObject  const  *obj,  byte  const  *p,  size_t  Len) 

{ 

n if  ( r i ng Ha s hBu f ( p,  Len)  ==  obj->u.hash) 

n n return  0;n  /*  ALL  copascetic  */ 

n return  PG P E R R_KE Y I 0_B A D PKT ; 

} 

/* 

* Getting  names  is  speciaL  due  to  the  in-memory  cache. 

* We  don't  have  to  support  "avoidmask",  though. 

* 

* Return  a pointer  to  a name  string.  Note  that  the  string  is  NOT 

* nuLL-terminated;  aLL  256  vaLues  are  LegaL!  The  "Lenp"  argument 

* returns  the  Length.  Tries  to  get  it  from  memory  if  possibLe, 

* then  tries  to  Load  it  into  the  cache.  If  it  can't  Load  it  into 

* the  preferred  fiLe  cache.  Load  it  into  the  pktbuf.  If  even 

* that  faiLs,  try  to  find  another  cache  that  it  wiL  fit  into. 

* 

* Note  that  ringNamesDiffer()  uses  the  fact  that  this  either  returns 

* with  N AM E I S C A C H E D ( n a me ) true,  *or*  the  buffer  returned  is  the 

* pktbuf.  Never  both,  and  never  a third  choice. 

* 

* aaa  is  the  ability  to  hande  a pooL=  = NLILL  stiLL  useful? 

*/ 

static  char  const  * 

i;[CHK:c50b770fa8577634112144cff333ce2d812332dd9be0d7035ca7b300076bc2363:: 
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ringPooLGetNameCstruct  RingPooL  *pool,  struct  RingName  *name,  size_t  *Lenp) 
{ 

n i nt  i ; 

n struct  HemPooL  cut; 

n ringmask  mask; 

n struct  RingFiLe  *fiLe,  *fiLe2; 

n struct  FiLePos  const  *pos; 

a char  *str; 

n word32  Len; 


n *Lenp  = name->Len; 


n /*  If  we  already  have  it,  boom.  */ 
n if  (NAHEISCACHED(name) ) 
n n return  n a me->na me . p t r ; 

n /*  If  we  weren't  given  a pool,  we  can't  fetch  it  */ 
n if  ( ! poo  L ) 

n n return  NULL; 

n /*  find  h i g h e s t -p r i o r i t y fetchable  file  */ 
n file  = r i ngBes t F i L e ( poo  I , (union  RingObject  *)name,  0); 
n pgpAssert(fiLe); 

o pgpAssert(fiLe->f  ||  fiLe->set.mask  ==  MEHRINGHASK); 


n pos  = r i n g F i L e Po s ( ( u n i o n RingObject  *)name,  file); 
n pgpAssert(pos); 

/*  If  it's  in  memory,  that  was  fast  - set  cached  if  it  wasn't  already*/ 
n if  ( f i I e-> s e t . ma s k ==  HEHRINGMASK)  ( 
n n pg p As s e r t ( po s->f po s ==  name->len); 

n n p g p A s s e r t ( r i n g H a s h Bu f ( C b y t e * ) po s — >p t r . bu f , name->len)  = = 

n n name->name . ha sh ) ; 

n n NAHESETCACHED(name); 

n n name->flags  &=  “NAME F_ F I LEHASK; 

n n name->flags  |=  HEMRINGBIT; 

n n return  name->name . pt r = (char  * ) pos->pt r . buf ; 

n > 


n /*  Allocate  cache  space  for  it  */ 
n /*  Dummy  loop  to  break  out  of  */ 
n do  { 

n n /*  Try  the  preferred  cache  */ 
n n file2=file; 

n a cut  = f i I e2->s t r i ngs;n  /*  Remember  cutback  position  */ 

n n str  = (char  * ) memPoo I A I I o c ( &f i I e 2-> s t r i ng s , name->len,  1); 

n n if  (str) 

n n n break; 

n n /*  Try  the  pktbuf  */ 

n n str  = r i ng Re s e r ve ( poo  I , name->len); 
n n if  (str)  { 

n n a file2=NULL; 

n n n poo  I ->p k t bu f I e n = name->len; 
n n n break; 

n n > 

n n /*  Okay,  desperation  time  - look  for  any  cache  */ 
n n mask  = name->mask  & poo  I ->f i I ema s k & “MEMRI NGHASK; 

n n pos  = 8name->pos; 

CCCHK:44ca5276aa00ff00e3ff0c655acc390943486ee21fc829d35d178250b4159318b:] 
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B 

B 

for 

(;;)  { 

B 

B 

B 

i = ringLsBitFind(mask); 

B 

B 

B 

pgpAssertCi  >=  0); 

B 

B 

B 

pgpAssert  (i  < HEMRINGBIT); 

B 

B 

B 

pgpAssert(pooL->fi  LesCiil.f); 

B 

B 

B 

fiLe2  = Spool ->fiLes[IiD; 

B 

B 

B 

cut  = f i L e 2-> s t r i n g s ; 

B 

B 

B 

str  = (char  * ) memPoo 1 A L L o c ( &f i L e2-> s t r i ng s 

B 

B 

B 

name->  Len,  1 ) ; 

B 

B 

B 

if  (str) 

B 

B 

B 

n break; 

B 

B 

B 

if  (!(mask  8=  mask-1))  { 

B 

B 

B 

n r i ng A L L 0 c E r r ( poo L ) ; 

B 

B 

B 

n return  NULL; 

B 

B 

B 

} 

B 

B 

B 

pos  = pos->ptr.next; 

B 

B 

> 

B 

> 

while 

(0);n  /*  Dummy  Loop  to  break  out  of  */ 

B 

/* 

Okay, 

we  got  buffer  space...  get  the  packet  */ 

a if  (pgpFi LeSeekCf i Le->f , pos->fpos,  SEEK_SET)  !=  0)  { 
n n i = PGPERR_KEYIO_SEEKING; 

a a goto  error; 

n } 

n i = pkt By t eGe t ( f i L e->f , &Len,  (word32  *)NULL); 

n i f ( i < 0 ) 

n n goto  error; 

a if  CPKTBYTE_TYPE(i  ) !=  PKTBYTE_NAHE  ||  len  !=  name->Len) 

n n goto  badpkt; 


n i = pg p F i L e Read ( s t r , (size_t)Len,  fiLe->f); 
n if  ((size_t)i  !=  (size_t)Len)  { 

n n i = pgpFi  leErrorCf i Le->f  ) ? PG P E R R_KE Y 1 0_ R E A D I N G : 

n n n n n PG P E R R_KE Y I 0_ EO F ; 

n n goto  error; 
n > 


n /*  Double-check  that  we  got  the  right  thing.  */ 
a if  ( r i ngHa shBuf ( ( by t e *)str,  Len)  !=  name->name . h a s h ) 
n H goto  badpkt; 

n /*  Success  at  Last!  */ 

n if  (f i Le2)  { 

a a /*  It's  cached  in  fiLe2  - set  flags  appropriately  */ 
a a NAMES ETCACHEDC name); 

n n name->fLags  &=  ~ N AM E F_ F I LEM A S K; 

n n name->fLags  |=  r i n g L s B i t F i nd  ( f i L e 2->s e t . ma s k ) ; 
n n name->name . pt r = str; 

n } 

n return  str; 
a 

badpkt : 

n i = PGPERR_KEYIO_BADPKT; 
error: 

n if  (f i Le2) 

n n memPoo L C u t Ba c k ( &f i L e 2->s t r i ng s , &cut); 

n r i n g E r r ( f i L e , pos->fpos,  i); 


Ci:CHK:091ed629eeab32c92dddd614f4d7edd4552bcc1fdd72392217888d3003e25ef4a:: 


1000 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRngRead.c 


a return  NULL; 

> 


void  const  * 

r i ng Fet chOb j ec t ( s t ruct  RingSet  const  *set,  union  RingObject  *obj,  size_t  *Lenp) 
{ 

n byte  const  *buf  = NULL; 

n ringmask  secmask,  bestfiLe;B/*  Needed  in  RINGTYPE_KEY  */ 
n struct  RingPooL  *pooL  = set->pooL; 
n byte  pktbyte; 

n pgpAssertCobj->g.mask  & set->mask); 
a pg p A s s e r t ( o b j ->g . ma s k & poo L ->f i I ema s k ) ; 


D 

n 

n 

n 

n 

□ 

n 

n 

n 

D 

a 

n 

n 

□ 

n 

n 

n 

n 

a 

D 

□ 

□ 

□ 

D 

Q 

D 

D 

n 

Q 

n 


switch  ( ri ngOb j ectTypeCob j ) ) { 

case  RINGTYPE_NAHE : 


n 

buf  = 

(byte 

const 

*)ringPoolGetName(pool,  &obj->n,  lenp); 

a 

break; 

case  RINGTYPE 

_SIG  : 

n 

buf  = 

(byte 

const 

* ) r i n g F e t c h Pa c ke t ( poo  1 , obj,  0,  PKTBYTE 

n 

n □ 

n 

RINGSIG_MAXLEN,  lenp,  ringSigVerify); 

n 

break; 

case  RINGTYPE 

_UNK: 

n 

buf  = 

(byte 

const 

* ) r i ng F e t c h Pa c ke t ( poo  1 , obj,  0, 

tt 

PKTBYTE_TYPE(obj->u. pktbyte). 

n 

n n 

n 

RINGUNK_HAXLEN,  lenp,  r i ng Un kVe r i f y ) ; 

n 

break; 

case  RINGTYPE_SEC : 


pktbyte  = OB J I STOPKE Y ( ob j ->g . up ) ? PKTB YT E_S E C KE Y : 

n PKTBYTE_SECSUBKEY; 

n buf  = (byte  const  * ) r i ng F e t c h Pa c ke t ( poo L , obj,  0, 
n pktbyte,  R I N G S E C_H AX L E N , 

n (enp,  r i ng S e c Ve r i f y ) ; 

/*  Compensate  for  version  bug  */ 


n if  (buf 
a &&*Lenp>0 

n &&  obj->g. flags  S S E C F_ V E R S I 0N_BUG 

n &&  buf[0:  ==  PGPVERSI0N_2_6) 

n n ((byte  *)buf)C0]  = PG P V E R S I 0N_2 ; 
n break; 

case  RINGTYPE_KEY : 

n /*  File  we'd  like  to  fetch  from  */ 
n bestfile  = r i n g Be s t F i I e ( poo  I , obj,  0 ) ->s e t . ma s k ; 
n /*  Where  secrets  are  located  */ 
n secmask  = r i ng Key S e c Ma s k ( o b j ) ; 


n n 

□ n 

D □ 

n n 

□ □ 

n D 

n a 

n Q 

□ s 

a n 

n o 


/*  Is  where  we  want  to  fetch  from  secret?  */ 
if  (bestfile  & secmask)  { 

n pktbyte  = OB J I STO PKE Y ( ob j ) ? PKTB YT E_S E C KE Y : 
n n PKTBYTE_SECSUBKEY; 

n /*  Have  to  fetch  the  secret  key  and  extract.  */ 

n obj  = obj->g.down; 

n while  (!(obj->g.mask  & bestfile)  ||  !OBJISSEC(obj))  { 

n n obj  = obj->g.next; 

n n pg p A s s e r t ( ob j ) ; 

n } 

n buf  = (byte  const  * ) r i n g F e t c h Pa c ke t ( poo  I , obj. 
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n 

El 

n 

B 

B 

"secmask,  pktbyte,  R I N G S E C _M AX L E N , 

□ 

n 

a 

B 

B 

lenp,  r i n g S e c Ve r i f y ) ; 

n 

n 

tt 

i f 

(buf)  { 

n 

Q 

n 

B 

size_t  len; 

n 

n 

n 

B 

/* 

Compensate  for  version  bug  */ 

n 

n 

n 

B 

i f 

(*lenp  > 0 

n 

□ 

n 

B 

&S  obj->g. flags  S S E C F_ V E R S 1 0 N_BU G 

El 

n 

El 

B 

&8  bufC0:  ==  PGPVERSION_2_6) 

n 

n 

n 

B 

a 

((byte  *)buf)i:0:  = PG  PVE  R S I 0 N_2  ; 

□ 

n 

n 

B 

len 

= r i ngKey Pa rs e Pub  1 i c P ref i X ( bu f , *lenp) 

n 

n 

B 

B 

/* 

If  unparseable,  take  the  whole  thing.  * 

n 

Q 

B 

B 

i f 

(len) 

n 

a 

fl 

B 

n 

*lenp  = len; 

Q 

n 

B 

} 

□ 

Q 

> 

else 

{ 

□ 

n 

B 

pktbyte 

= 0BJIST0PKEY(obj ) ? PKTB YT E_ PUB KE Y : 

n 

El 

B 

Q 

PKTBYTE_PUBSUBKEY; 

El 

n 

B 

/* 

Fetch  public  components  */ 

n 

n 

B 

buf 

= (byte  const  * ) r i ng F e t c h Pa c ke t ( poo  1 , obj. 

Q 

n 

B 

pktbyte,  R I N GKE Y_H AX L E N , 

□ 

n 

B 

lenp,  ri ngKeyVeri f y ) ; 

Q 

n 

> 

n 

a 

break; 

n default: 

n n pgpAssert(0); 

n n break; 

n } 


s e cma  s k 


n return  buf; 
} 


/***  Various  bookkeeping  helper  functions  ***/ 

/* 

* Sort  all  the  keys  in  a pool  into  keylD  order.  This  uses  8 passes 

* of  a byte-wise  radix  sort.  Each  pass  is  stable,  so  sorting  on  the 

* least  significant  byte,  proceeding  to  the  most  will  result  in  a 

* completely  sorted  list. 

* 

* Actually,  it's  sorted  with  the  *visible*  part  (the  low  32  bits)  of  the 

* keylD  more  significant  than  the  invisible  part.  This  makes  the  ordering 

* more  sensible  to  a human  watching  what's  going  on. 

* 

* There  are  256  lists,  with  a head  and  a tail  pointer. n The  tail 

* pointer  is  a pointer  to  a pointer,  namely  the  slot  the  pointer  to 

* the  next  entry  to  be  added  to  the  list  goes  in.  It  is  initialized 

* to  point  to  the  head  pointer.  So  adding  an  element  to  the  list 

* consists  of  setting  *tail  = object;  and  then  tail  = &o b j e c t ->n ex t ; 

* 

* After  each  pass,  concatenate  the  lists,  starting  at  the  end. 

* Begin  with  an  empty  list  and  keep  appending  the  current  list  to 

* the  tail  of  the  one  before  it,  grabbing  the  head  as  the  new 

* current  list. 

*/ 

#if  0 

static  int 

r i ngKey I D cmp ( by t e const  id1C8],  byte  const  id2C8]) 
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{ 

n i nt  i ; 

n i = memcmp ( i dl +4,  id2+4,  4); 

n return  i ? i : memcmp ( i d1 , id2,  4); 

> 

#endi f 
static  void 

r 1 ng So r t Key s ( s t r u c t RingPooL  *pool) 

{ 

#if  1 

n /* 

n * Disable  sort,  users  who  switch  back  to  old  versions  of 

n * PGP  are  unhappy  to  see  their  keyring  reordered.  The  reason 

n * for  the  sort  was  to  hide  the  order  with  which  keys  had  been 

n * added  to  the  keyring,  and  to  make  merges  more  efficient. 

a * For  now  neither  of  those  is  compelling  enough  to  keep, 

n * / 

n (void) pool; 

#e  I s e 

B int  i,  j; 

n int  pass; 

B int  lastpass; 

B union  RingObject  *list  = pool->keys; 

B union  RingObject  *headC256D; 

B union  RingObject  **tailC256D; 

B for  (pass=0;  pass<9;  ++pass)  f 

B B /*  XXX  Experimental  backwards  compat  code  - put  DSA  keys  at  end  */ 
B B /*  On  last  pass  we  sort  by  pkalg  */ 

B B lastpass  = (pass==8); 

n B i = (pass  < 4)  ? (3~pass)  : (11“pass);  /*  3, 2, 1,0, 7, 6, 5, 4 */ 


o 

n 

/* 

Clear  the  table  for  the  next  distribution  pass 

a 

a 

for 

(j  = 0;  j < 256;  j++) 

a 

a 

B 

tailCj]  = head+j; 

a 

n 

/* 

Distribute  the  list  elements  among  the  sublists 

n 

n 

while  (list)  { 

n 

a 

n 

if  (lastpass) 

n 

s 

n 

B j = list ->k. pkalg; 

n 

Q 

n 

else 

n 

Q 

□ 

B j = 1 i s t->k . key  I D C i D ; 

n 

□ 

D 

*tailCj]  = list; 

a 

s 

n 

tailCjH  = 8list->k.next; 

□ 

Q 

n 

list  = list ->k. next; 

n 

Et 

> 

n 

n 

j = 

256; 

n 

n 

/* 

list  is  already  0 from  the  previous  loop  */ 

n 

n 

/* 

Gather  the  sublists  back  into  one  big  list  */ 

a 

n 

while  (j--)  { 

a 

a 

D 

*tailCj3  = list; 

a 

a 

n 

list  = headCjH; 

n 

a 

> 

a 

} 
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n pool->keys  = List; 

#end  i f 

> 

static  void 

ri  ngPoo L Li nkKey ( s t rue t RingPooL  *pooL,  union  RingObject  *parent, 
n union  RingObject  *key,  byte  pkaLg,  byte  const  keyIDCS]) 

{ 

n union  RingObject  **ptr; 

n pgpAssert (OB J ISKEYC key ) ) ; 

n memcpy(key->k.keyID,  keylD,  8); 
n key->k. pkaLg  = pkaLg; 

n if  (parent)  t 
n n key->g.up  = parent; 

n n ptr  = &pa r e n t ->g  . d o wn ; 
n n whiLe  (*ptr) 

° n n ptr  = & ( *p t r ) ->g . n e x t ; 
n > e L s e ( 

n n ptr  = &pooL->keys; 

n } 

n key->g.next  = *ptr; 
n *pt  r = key ; 

a RING P00LHASHKEY( poo L,  key); 

> 

/*  Remove  specified  key  from  the  top-LeveL  keys  List  */ 
static  void 

r i ngPoo L Un L i nkKey ( s t rue t RingPooL  *pooL,  union  RingObject  *key) 

{ 

n union  RingObject  *obj,  **objp; 
n pgpAssert(pooL  &&  key); 
n objp  = &pooL->keys; 

n whiLe  ((obj  = *objp)  !=  NULL  &&  obj  !=  key)  { 
n n objp  = Sob j ->g  . n e X t ; 
n > 

n pgpAssert(obj  ==  key); 
n *objp  = key->g.next; 
n key->g.next  = NULL; 
n return; 

} 

/* 

* Same  as  r i ng Poo L F i n d Key , but  creates  a dummy  key  with  the  given  parent 

* if  one  is  not  found. 

* Note  that  a dummy  key  is  a RingObject  with  its  mask  set  to  0. 

*/ 

static  union  RingObject  * 

r i ng Poo L F i nd Dummy Key ( s t ru c t RingPooL  *pooL,  union  RingObject  *parent, 
n byte  pkaLg,  byte  const  keyIDCS]) 

{ 

a union  RingObject  *key  = r i n g Poo L F i n d Key ( poo L , pkaLg,  keylD); 
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n if  (!key)  { 

n n key  = ringNewKeyCpooL); 

n B if(key){ 

B B B if  (parent) 

B B B B key->k. flags  |=  RINGOBJ F_SUBKEY; 

B B B r i ng Poo L Li n kKey ( p o o L , parent,  key,  pkalg,  keylD); 

B B > 

B > 

B return  key; 

> 

/* 

* Free  an  entire  tree  of  objects. 

* This  does  not  do  anything  with  the  FiLePos  chain,  but  since  the 

* first  entry  is  p r e a L L o ca t e d , if  the  object  has  at  most  one  FilePos, 

* (as  is  the  case  in  newly  created  objects),  no  memory  is  leaked. 

*/ 

static  void 

r i ng F reeTree ( s t rue t RingPool  *pool,  union  RingObject  *obj) 

{ 

B union  RingObject  *down; 

B if  ( ! 0BJISB0T(obj ) ) { 

B B while  ((down  = obj->g.down)  !=  NULL)  ( 

B B B obj->g.down  = down->g . next ; 

B B B r i ng F r e eT r e e ( poo  I , down); 

B B > 

B } 

B r i ng F reeOb j ec t ( poo  I , obj); 

> 

/* 

* Free  up  a newly  created  dummy  key. 

* Unlink  it  from  the  pool  and  free  it  and  all  descendants. 

*/ 

static  void 

ri  ng F reeDummyKey ( St ruct  RingPool  *pool,  union  RingObject  *key) 

{ 

B union  RingObject  **objp; 

B pg p A s s e r t ( OB J I S KE Y ( key ) ) ; 

B /*  Find  head  of  list  this  object  is  on  */ 

B if  (OBJISTOP(key)  ) 

B B objp  = 8pool->keys; 

B else 

B B objp  = &key->g . up->g . down; 

B while  (*objp  !=  key)  ( 

B B pgp As s e r t ( *ob j p ) ; 

B B objp  = 8(*objp)->g.next; 

B > 

B *objp  = key->g.next; 

B r i ng F r eeT r e e ( poo  I , key); 

> 

/* 

* Return  0 if  the  packet  in  the  pktbuf  is  the  same  as  the  packet  in 
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* the  given  file  at  the  given  offset,  and  the  file  packet  is  of  type 

* pkttype.  Returns  1 if  they  differ,  and  -1  (and  sets  the  ring's  error 

* status)  if  there  is  an  error,  including  an  unexpected  packet  byte. 

* Compare  at  most  max  bytes. 

* 

* This  does  NOT  examine  any  more  of  the  object  than  its  filepos 

* chain;  in  particular,  it  does  NOT  examine  the  object's  type. 

* Thus,  it  is  possible  to  have  a key  object  and  use  it  to 

* fetch  a secret-key  packet. 

* 

* Special  case:  returns  pktbufC03  if  pktbufC0]  is  2 or  3 and  the  file's 

* packet  begins  with  5 -p  k t b u f C 0 II  . This  is  used  by  the  key  difference 

* code  to  detect  the  version  byte  bug.  The  other  things  can  ignore  it, 

* and  just  treat  all  positive  return  values  as  "different". 

*/ 

static  int 

r i ngPa c ket D i f f e r s ( s t rue t RingFile  *file,  union  RingObject  const  *obj, 
n int  pkttype,  word32  max) 

{ 

n struct  RingPool  *pool  = f i I e->set . poo  I ; 
n struct  FilePos  const  *pos; 
n byte  *p; 

H struct  PgpFile  *f,- 

n word32  len; 

n int  i ; 
n byte  c ; 
n int  magic; 


n pos  = r i ng F i I ePos ( ob j , file); 


□ 

n 

□ 

□ 

n 

□ 

Q 

n 

D 

n 

□ 

n 

n 

n 

□ 

n 

n 

n 

D 

n 

n 

□ 


/* 
i f 

D 

□ 

O 

n 

□ 

□ 

a 

n 

□ 

o 

D 

Q 

n 

□ 

n 

n 

□ 

n 

n 

} 


Memory  file,  special  case  for  comparison  */ 

(f i le->set .mask  ==  MEHRINGMASK)  { 
len  = pos->fpos; 
if  (len  > max) 
n len  = max; 
if  (max  > poo  I ->p kt buf I en ) 
n max  = poo  I ->p k t bu f I e n ; 
if  (len  !=  max) 

n return  1;n  /*  Different  */ 

if  (lien) 
a return  0; 

/*  Check  first  character  specially  */ 
p = (byte  *)pos->ptr.buf; 
magic  = 0; 

if  (pC0]  !=  ((byte  * ) poo  I ->p k t bu f ) C 0 ] ) { 

o if  ((pC03  ^ ((byte  * ) poo  I -> p k t b u f ) [ 0 ] ) !=  1 

n II  (pC0]  S ((byte  * ) poo  I ->p k t bu f ) C 0 D ) !=  2) 

n n return  1;n  /*  First  char  different  */ 

n magic  = ((byte  *)pool->pktbuf)C0];  /*  First  char  magic  */ 

} 

return  memcmp(p+1,  pool->pktbuf+1,  (size_t)len-1)  ? 1 : magic; 


a /*  Usual  case  - external  file  */ 
a f = file->f; 
a pgpAssert(f); 

a i = pgpFileSeek(f,  pos->fpos,  SEE K_ SET); 
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n 

1 f 

Ci  !=  0)  { 

n 

B 

r i ng E r r ( f i 1 e , pos->fpos,  PG P E RR_KE Y 1 0_ 

SEEKING); 

n 

B 

return  PG P E RR_KE Y I 0_ S E E KI NG ; 

D 

> 

n 

1 

= p k t By t eGe t ( f , &len,  (word32  *)NULL); 

n 

i f 

(i  < 0)  < 

n 

B 

r i ng E r r ( f i 1 e , pos->fpos,  i); 

D 

B 

return  i ; 

n 

> 

n 

i f 

(PKTBYTE.TYPECi ) !=  pkttype)  { 

n 

B 

r i ng E r r ( f i 1 e , pos->fpos,  PG PE R R_KE Y 1 0_ 

BADPKT); 

n 

B 

return  PG P E RR_KE Y I 0_B AD PKT ; 

D 

> 

Q 

i f 

(len  > max) 

□ 

B 

len  = max; 

n 

i f 

(max  > poo  1 ->p k t bu f 1 e n ) 

n 

B 

max  = pool->pktbuf len; 

n 

i f 

(len  !=  max) 

n 

B 

return  1;n  /*  Different  */ 

□ 

i f 

(lien) 

n 

B 

return  0; 

s 

/* 

Check  first  character  specially  */ 

n 

i f 

( pg p F i 1 e Re  a d ( & c , 1,  f)  !=  1)  ( 

n 

B 

i = pgpFi  leError(f ) ? PG P E RR_KE Y I 0_ R E A D I N G : PG PE R R_KE Y 1 0_ 

□ 

B 

r i ng E r r ( f i 1 e , pos->fpos,  i); 

n 

B 

return  i; 

n 

> 

n 

i 

= c & 255; 

n 

magic  = 0;n  /*  First  char  the  same  */ 

a 

i f 

(i  !=  ((byte  * ) poo  1 ->p k t bu f ) C 0 D ) ( 

n 

B 

if  ((i  ''  ((byte  * ) poo  1 ->p  k t bu  f ) C 0 D ) ! = 

1 

n 

B 

n II  (i  & ((byte  * ) poo  1 ->p k t bu f ) C 0 H ) 

!=  2) 

n 

B 

n return  1; 

n 

B 

magic  = ((byte  * ) poo l->p kt buf ) C0D ; /* 

First  char  magic  */ 

D 

> 

n 

i 

= f i 1 e Un e q ua 1 Bu f ( f , poo  1 ->p k t bu f + 1 , ( s i ze_t ) 1 en-1  ) ; 

n 

i f 

(i  < 0) 

B 

B 

r i ng E r r ( f i 1 e , pos->fpos,  i); 

B 

return  i ? i : magic; 

/* 

* 

* 

* 

* 


Return  1 if  the  key  in  the  ring's  pktbuf  differs  from  the 
key  in  its  other  homes,  0 if  it  is  the  same,  and  <0  if  there 
is  some  sort  of  error. 

Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 
(I.e.  if  it  needs  to  seek  filel,  it  saves  and  restores  the  file 
position.  It  doesn't  bother  for  other  files.  Use  the  HEMRING  file 
if  you  don't  need  this  feature.) 


SPECIAL  CASE: 

Returns  >1  if  the  version  byte  bug  was  detected.  This  is  the  case 
wherein  version  2.6  would  write  out  an  edited  secret  key  with  a 

* version  byte  of  3 even  if  it  was  originally  2. 

* This  function  returns  the  current  pktbuf's  version  byte  (2  or  3) 

* if  the  keys  are  identical  except  that  the  version  byte  differs 

* from  something  read  previously. 
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* The  caller  must  decide  what  sort  of  trouble  to  log. 

*/ 

static  int 

keysdi f f e r ( s t rue t RingFile  *file1,  union  RingObject  const  *key,  int  pktbyte) 
{ 


struct  RingPool  *pool  = fi  lei -> set. pool; 

struct  RingFile  *file2; 

size_t  savelen,  publen; 

ringmask  seemask; 

uord32  max; 

int  i,  type; 

long  retpos=0; 


H pgpAssert(OBJISKEY(key)); 
n pgpAssert ( f i I el ->f  ||  f i I e 1 -> s e t . ma s k 


MEHRINGMASK)  ; 


□ 

□ 

□ 

n 

Q 

n 

Q 

□ 

a 

D 

a 

Q 


/* 

* If  this  is  a secret  key,  find  the  prefix  which  is  a public  key, 

* and  limit  it  to  that  if  reasonable. 

*/ 

savelen  = poo  I ->p k t b u f I e n ; 

if  C(PKTBYTE_TYPE(pktbyte)  ==  PKTB YT E_S E C KE Y || 
n PKTBYTE_TYPE(pktbyte)  ==  PKTB YT E_ S E C S UBKE Y ) 

SS  ! ( key->g . f lags  & KEYF_ERROR)) 


publen  = r i ngKey Pa r sePub I i c Pr e f i X ( ( by t e const  * ) poo  I ->p kt bu f , 

pool->pktbuflen); 

if  (publen) 

n poo  I ->p k t bu f I e n = publen; 


n /*  Find  a file  containing  the  key  - try  for  public  first  */ 
n seemask  = r i ng Key S e c Ma s k ( key ) ; 


n 

B 

B 

B 

B 

B 

B 

B 

B 

B 


file2  = r i ngBe s t F i I e ( poo  I , key,  seemask); 
i f (f i le2)  { 


max  = (word32)-1; 

type  = OBJISTOPKEY(key)  ? PKTBYTE_PUBKE Y 


> else  { 


file2  = ringBestFile(pool,  key,  0); 

pgpAssertCfi  le2); 

max  = (word32)pool->pktbuflen; 

type  = OBJISTOPKEY(key)  ? PKTB YT E_ S E C KE Y 


PKTBYTE_PUBSUBKEY; 


PKTBYTE_SECSUBKEY; 


i f 

B 

B 

} 

B 

i = 
/* 

* 

* 

* 

*/ 
i f 


(file2  ==  filel  &S  file1->f  SS  ( r e t po s = pg p F i I eT e I I ( f i I e 1 ->f  ) ) < 0)  { 
ringErr(file1,  pgpFileTell(file1->f),  PGPERR_KEYIO_FTELL); 
return  PG P E R R_KE Y I 0_ FT E L L; 


ringPacketDiffers(file2,  key,  type,  max); 

If  we  compared  against  a secret  key,  and  encountered  the  version 
bug,  and  the  version  bug  has  already  been  noted,  ignore  the 
difference. 

Ci  ==  PGPVERSION  2 
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&&  type  ==  PKTBYTE_SECKEY 


Q 

SS  key->g. flags  & S E C F_VERS 1 0N_BUG  ) 

Q 

n 

i = 0; 

Q 

i f 

(file2  ==  filel  &&  file1->f  8& 

n 

n 

n pgpFi leSeekCf i le1->f , retpos,  SEEK_ 

SET)  ! = 0)  { 

n 

a 

ringErrCfi Lei,  P9pFi LeTeLLCfi Le1~>f),  PGPERR_KEYIO_SEEKING); 

n 

u 

return  PG P E R R_KE Y I 0_S E E KI NG ; 

□ 

n 

} 

a 

/* 

Restore  pktbuflen,  may  have  been  changed 

above  * / 

n 

poo 

l->pktbuflen  = savelen; 

n 

return  i ; 

/* 

* Return  1 if  the  secret  in  the  ring's  pktbuf  differs  from  the 

* key  in  its  other  homes,  0 if  it  is  the  same,  and  <0  if  there 

* is  some  sort  of  error. 

* Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 

* 

* SPECIAL  CASE: 

* Returns  >1  if  the  version  byte  bug  was  detected.  This  is  the  case 

* wherein  version  2.6  would  write  out  an  edited  secret  key  with  a 

* version  byte  of  3 even  if  it  was  originally  2. 

* This  function  returns  the  current  pktbuf's  version  byte  (2  or  3) 

* if  the  keys  are  identical  except  that  the  version  byte  differs 

* from  something  read  previously. 

* The  caller  must  decide  what  sort  of  trouble  to  log. 

*/ 

/* 

* Return  1 if  the  signature  in  the  ring's  pktbuf  differs  from  the 

* sig  in  its  various  homes,  0 if  it  is  the  same,  and  <0  if  there 

* is  some  sort  of  error. 

* Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 

* CI.e.  if  it  needs  to  seek  filel,  it  saves  and  restores  the  file 

* position.  It  doesn't  bother  for  other  files.  Use  the  HEMRING  file 

* if  you  don't  need  this  feature.) 

*/ 

static  int 

secsdifferCstruct  RingFile  *file1,  union  RingObject  const  *sec) 

{ 

n struct  RingPool  *pool  = f i I e 1 -> s e t . poo  I ; 
n struct  RingFile  *file2; 
n long  retpos=0; 

n byte  pktbyte; 

n int  i ; 

a pg p As  s e r t ( OB  J I S S E C ( se c ) ) ; 

n /*  Find  a matching  signature  */ 
n file2  = r i n gBe s t F i I e ( poo  I , sec,  0); 
n pg p As s e r t ( f i I e 2 ) ; 

n pgpAsse rt ( f i I e2->f  ||  f i I e 2 -> s e t . ma s k ==  M E M R I NGM A S K ) ; 

n if  (file2  ==  filel  &S  file1->f  &&  ( r e t po s = pg p F i I eTe I I ( f i I e 1 ->f ) ) < 0)  t 

n n ringErrCfilel,  pgpFileTellCfilel— >f),  PGPERR_KEYIO_FTELL); 

n n return  PGPERR_KEYIO_FTELL; 
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Q 

y 

Q 

pktbyte  = OB J I S TO PKE Y ( s e c->g . u p ) ? PKTBYTE_ 

.SECKEY  : 

n 

PKTBYTE_SECSUBKEY; 

a 

i 

= r i ng Pa c ke t D i f f e r s ( f i 1 e2 , sec,  pktbyte. 

(word32)-1); 

a 

i f 

( i < 0 ) 

n 

□ 

return  i; 

n 

i f 

(file2  ==  filel  S&  file1->f  SS 

n 

n 

n pgp F i 1 e S ee k ( f i 1 e 1 ->f , retpos,  SEEK_ 

SET)  ! = 0)  { 

n 

u 

r i ngE r r ( f i 1 el , s e c ->g . po s . f po s , PGPERR_ 

KEYIO_SEEKING); 

□ 

n 

return  PG P E R R_KE Y I 0_ S E E KI NG ; 

tt 

y 

n 

return  i; 

> 

static  union  RingObject  * 

r i ng F i ndSec ( s t rue t RingFiLe  *fiLe,  union  RingObject  *parent) 
{ 

n struct  RingPool  *pooL  = f i L e -> s e t . poo L ; 
n union  RingObject  *sec,  **secp; 
n inti; 

n /*  Properties  of  the  secret  */ 
a word32  hash; 


a hash  = r i ng H a s h Bu f ( ( by t e const  * ) poo L ->p k t b u f , poo L ->p k t bu f L e n ) ; 
n 


□ 

/* 

Search  for  matching  sigs  */ 

n 

for 

(secp=&parent->g.down;  (sec=*secp)  !=  NULL;  secp= 

&sec->g . next  ) 

n 

n 

if  (OBJISSECCsec) 

n 

n 

&&  sec->c.hash  ==  hash 

□ 

D 

&&  Ci  = se c sd i f f e r ( f i 1 e , sec))  <=  0) 

n 

n 

n return  i<0  ? NULL  : sec; 

D 

y 

□ 

/* 

Not  found  - allocate  a new  secret  */ 

n 

sec 

= r i ngNewSe c C poo  1 ) ; 

D 

i f 

( sec  ) { 

n 

n 

/* 

n 

n 

* Make  secret  object  the  first  thing.  This  is  assumed  by 

n 

Q 

* ringFindSig  which  tries  to  keep  sigs  together 

just  past 

n 

n 

* the  sec  obj.  Especially  important  with  subkey 

s where  it's 

u 

n 

* hard  to  tell  which  sigs  go  with  which  keys  as 

we  read. 

u 

n 

*/ 

n 

n 

sec->g.next  = pa r e n t ->g . d o wn ; 

n 

n 

parent->g.down  = sec; 

n 

a 

sec->g.up  = parent; 

a 

n 

sec->c.hash  = hash; 

n 

> 

a 

return  sec; 

> 

/* 

* Return  1 if  the  name  in  the  ring's  pktbuf  differs  from  the 

* name  in  its  various  homes,  0 if  it  is  the  same,  and  <0  if  there 

* is  some  sort  of  error. 

* Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 
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* (I.e.  if  it  needs  to  seek  fiLel,  it  saves  and  restores  the  file 

* position.  It  doesn't  bother  for  other  files.  Use  the  MEMRING  file 

* if  you  don't  need  this  feature.) 

*/ 

static  int 

namesdi f f erCst ruct  RingFile  *fiLe1,  union  RingObject  const  *name) 
f 

n struct  RingPooL  *pooL  = f i L e 1 -> s e t . poo  I ; 
n struct  RingFile  *file2; 
n long  retpos=0; 

a int  i ; 


n /*  Find  a matching  name  */ 
n file2  = ringBestFileCpool,  name,  0); 

n pgpAssert  (file2->f  ||  f i I e 2-> s e t . ma s k ==  M E MR  I NGM AS K ) ; 

n if  (file2  ==  filel  &S  file1->f  &8  ( r e t po s = pg p F i I eT e I I ( f i I e 1 ->f  ) ) < 0)  f 
n n r i n g E r r ( f i I e 1 , pg p F i I eT e I I ( f i I e 1 ->f ) , PG PE RR_KE Y 1 0_ F T E LL ) ; 
n n return  PG P E R R_KE Y I 0_ FT E L L; 
a > 

n if  (file2->f  &S 

n pgp F i I e See k ( f i I e2->f , n a me->g . pos . f po s , SEEK_SET)  !=  0)  { 

n n r i n g E r r ( f i I e 2 , name->g . po s . f pos , PG P E R R_KE Y 1 0_S E EKI N G ) ; 

n n return  PG P E R R_KE Y I 0_ S E EKI NG ; 

n > 

n i = r i n g Pa c ke t D i f f e r s ( f i I e 2 , name,  PKTB YT E_N AM E , (word32)-1); 


n if  (file2  ==  filel  &&  file1->f  88 

n n n pg p F i I e S e e k ( f i I e 1 ->f , retpos,  SEEK_SET)  !=  0)  f 

n n r i ng E r r C f i I e 1 , name->g . po s . f po s , PG P E RR_KE Y 1 0_S E E KI NG ) ; 
n n return  PGPERR_KEYIO_SEEKING; 
n > 

n return  i; 

} 


/* 

* Exported  variant  of  namesdiffer.  This  has  a similar  function,  but 

* a very  different  interface  - it  does  not  assume  that  the  name  has  been 

* fetched  into  the  pktbuf. 

* Returns  1 if  the  two  names  differ,  0 if  the  same,  < 0 on  error. 

*/ 

int 

ri ngNamesDi f f er  (struct  RingSet  const  *set,  union  RingObject  *name1, 
a union  RingObject  *name2) 

{ 

n char  const  *buf1,  *buf2;n  /*  Pointers  to  the  names  */ 
n unsigned  len,  tlen; 

n word32  hashi,  hash2;n  n /*  Hashes  of  the  two  names  */ 
n 

n pgpAssert  ( OB J I S N AM E ( name  1 ) ) ; 
n pgpAssert  ( OB J I SNAHE ( name2 ) ) ; 

n pgpAssert  (set— >mask  8 na me  1 ->g . ma s k 8 n a me 2->g . ma s k ) ; 


n /*  Quick  test  of  lengths  */ 
n len  = na me  1 -> n . I e n ; 
n if  (len  !=  na me 2->n . I en  ) 
n n return  1; 
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n 

n 

n 

□ 

n 

n 

n 

n 

a 

n 

n 

n 

n 

n 

n 

D 

n 

D 

n 

a 

n 

n 

n 

a 

n 

n 

n 

a 

n 

u 

u 

n 

n 

a 

n 

□ 

Q 

n 

n 

Q 

a 

n 

n 

n 

Q 

n 

n 

u 

u 

n 

n 

> 

n 

/* 

★ 

★ 


/*  Trivial  case:  both  names  are  in  memory  */ 

if  (NAMEISCACHED(&name1->n)  S&  N AM E I S C A C H E D ( &na me  2 ->n  ) ) 

n return  memcmp(name1->n.name.ptr,  name2->n.name.ptr,  ten)  !=  0; 

/*  First,  compare  hashes  to  see  what's  what  */ 
hashi  = NAHEISCACHED(8name1->n) 

o ? ri ngHashBuf (( const  unsigned  char  *)  na me  1 ->n . na me . p t r , Len) 
n : name1->n. name. hash; 
hash2  = NAHEISCACHED(8name2->n) 

n ? r i ng Ha s hBu f ( ( con s t unsigned  char  *)  n a me  2 ->n . na me . p t r , Len) 
n : name  2 ->n . na me . h a s h ; 


i f 

(hashi  ! 

= h a s h 2 ) 

□ 

return 

1; 

/* 

* 

At  this 

point,  we're 

99% 

sure  the 

names  are  the 

same,  but 

★ 

we  need 

to  confirm... 

★ 

Load  the 

first  name. 

Th  i 

s may  go 

into  a cache. 

or  the  pktbuf 

*/ 

bufi  = r i ngPoo L Get  Name C r i ng Se t Poo L C s et ) , 
n n n n n 8name1->n, 

° ° ° ° n (unsigned  Long  *)  8tLen); 

if  ( ! buf 1 ) 

n return  ringSetError(set)-> error; 
pgpAssertCtLen  ==  Len); 

/*  If  name2  is  available  without  using  the  pktbuf,  great.  */ 
if  (NAMEISCACHED(8name2->n) ) { 
n buf2  = name2->n . name . pt r; 
n return  memcmpCbufI,  buf2,  Len)  !=  0; 

} 

/* 

* Otherwise,  if  namel  isn't  in  the  pktbuf,  we  can  fetch  name2 

* without  fear  of  clobbering  it. 

*/ 

if  (NAMEISCACHED(8name1->n) ) { 
n pgpAssert (buf 1 ==  namel ->n . name . pt r ) ; 

a buf2  = r i ng  Poo  I Ge  t Na  me  ( r i ng  S e t Poo  L ( s e t ) , 

n n n n n n 8name2->n, 

“ n “ n n n (unsigned  Long  *)  8tLen); 

n if  (!buf2) 

n n return  ringSetError(set)-> error; 

n pgpAssert(tLen  ==  Len); 
n return  memcmp(buf1,  buf2,  len)  !=  0; 

} 

/*  namel  is  not  cached,  so  it's  in  the  pktbuf...  */ 
pgpAssert(buf1  ==  ringSetPooL(set)->pktbuf); 

/* 

* Otherwise,  compare  namel  in  pktbuf  to  name2  on  disk. 

* Use  MEMRING  as  dummy  entry  for  fiLel;  it  is  only  used  to 

* make  sure  that  any  seeks  which  move  its  position  get  undone, 

* and  we  don't  care  about  that  at  this  point. 

*/ 

return  namesdiffer(8ringSetPooL(set)->fiLesCMEMRINGBIT:,  name2); 


Get  a struct  RingName  on  the  given  chain  matching  the  one  in  the  ring's 
pktbuf.  Returns  0 if  it  runs  out  of  memory  or  can't  read  the  file. 
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* (The  ring's  error  is  set  to  reflect  this.) 

* It  does  *not*  add  the  FilePos  or  set  the  mask  bit. 

* Does  *not*  alter  the  given  file's  read  position  unless  there  is  an  error. 
*/ 

static  union  RingObject  * 

ringFindNameCstruct  RingFile  *file,  union  RingObject  *parent) 

{ 

n struct  RingPool  *pool  = f i I e-> s e t . poo  I ; 
n union  RingObject  *name,  **np,  **pname=NU LL; 
n size_t  const  len  = poo  I ->p k t bu f I e n ; 
a word32  hash; 
n i n t i ; 

n char  *buf;n  /*  Used  when  trying  to  cache  name  */ 
n hash  = r i ng H a s h Bu f ( ( by t e const  * ) poo  I ->p k t b u f , len); 


n pname  = &pa r e n t ->g . do wn ; 

n for  (np  = Spa rent->g . down;  (name=*np)  !=  NULL;  np  = 8name->g . next ) { 

n n /*  Position  name  after  names,  key-sigs,  sec's  */ 

n n if  (OBJISNAME(name)  ||  OB J I S S I G ( na me  ) ||  OB J I S S E C ( na me ) ) 

n n n pname  = 8name->g . next  ; 

n n /*  If  not  a name  or  wrong  length,  no  match  */ 

n n if  ( !OBJISNAME(name)  ||  name->n.len  !=  len) 

n n n continue; 


n n 
D a 
D n 
n D 
n n 

D □ 
n D 
n n 
□ n 
n } 


/*  If  in  memory,  compare  that  */ 
if  (NAMEISCACHED(8name->n) ) { 

n if  ( memcmp ( name->n . na me . p t r , poo  I ->p k t bu f , len) 
n n return  name;n  /*  Success  */ 

} else  ■( 

n if  ( na me->n . na me . ha s h ==  hash 
n 88  (i  = name sd i f f e r ( f i I e,  name))  <=  0) 

n n return  i<0  ? NULL  : name; 

} 


0) 


n /*  Failed  to  find  a name  - create  one  */ 
n name  = r i ngNewName ( poo  I ) ; 
n if  (name)  { 

n n name->g.next  = *pname; 

n n *pname  = name; 

n n name->g.up  = parent; 

n n name->n.len  = len; 

n n name->n . name . hash  = hash;n  /*  Hay  overwrite  below  */ 
n n /*  Default  new  names  to  unknown  trust  */ 
n n name->n . t r u s t = PG P_N AH ET R U ST_UN KN 0 W N ; 

#if  PGPTRUSTHODEL>0 

n a name->n . va I i d = na me->n . va I i d i t y = 0; 
a a name->n . conf i dence  = PG P_N E WT R U ST_U N D E F I N E D ; 
a a NAHESETNEWTRUST(8name->n) ; 

#end i f 


#if 

1 

s 

0 

/* 

You 

might  want  to  disable  this  for  HSDOS  */ 

Q 

O 

if 

( ! (f i le->set .mask  8 H EHR I NGH A S K ) ) { 

0 

0 

0 

/* 

Don't  "cache"  in  memring,  it  is  for  new  creations 

0 

0 

0 

bu  f 

= (char  *)memPoo 1 A 1 loc (8f i 1 e->s t r i ngs,  len,  1); 

0 

0 

0 

i f 

(buf)  { 

0 

0 

0 

a 

memcpylbuf,  poo  1 ->p k t bu f , len); 

*/ 
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naan 
n a n n 
a n a n 
n a n n 
n n n > 
n n } 

#end i f 
n > 


name->n . name . pt r = buf; 

name ->g. flags  &=  ~NAMEF_FILEMASK; 

name->g . f Lags  |=  r i n g Ls B i t F i nd ( f i L e-> s e t . ma s k ) ; 

NAMESETCACHED(8name->n); 


n return  name; 

> 


/* 

* Return  1 if  the  signature  in  the  ring's  pktbuf  differs  from  the 

* sig  in  its  various  homes,  0 if  it  is  the  same,  and  <0  if  there 

* is  some  sort  of  error. 

* Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 
*/ 

static  int 

si gsd i f f e r ( s t rue t RingFile  *fiLe1,  union  RingObject  const  *sig) 

{ 

n struct  RingPooL  *pooL  = fi Lei -> set. pool; 
n struct  RingFile  *fiLe2; 
n Long  retpos=0; 
n int  i ; 

n int  b i t ; 


n /*  Find  a matching  signature  */ 

n bit  = r i ng LsBi t F i nd ( s i g->g . ma s k & poo L ->f i L ema s k ) ; 
n pgpAssertCbit  >=  0); 
n fileZ  = &pooL->fiLesCbitD; 

a pgpAssertCf i le2->f  ||  f i I e 2-> s e t . ma s k ==  H EM R I NG M A S K ) ; 
n if  (fiLe2  ==  filel  &S  fiLe1->f  &S 
“ n n (retpos  = pg p F i L eTe L L ( f i L e 1 -> f ) ) < 0)  { 
n a r i ngE r r ( f i L el , pg p F i L eTe L I ( f i L e 1 ->f ) , PG P E R R_KE Y I 0_ FT E LL)  ; 
n n return  PGPERR_KEYIO_FTELL; 
n } 


n if  (fiLe2->f  && 

n n H pgpFi LeSeekCf i Le2->f , s i g->g . po s . f po s , SEEK_SET)  !=  0)  { 

n n ringErrCf  i Le2,  s i g->g . po s . f po s , PG P E R R_KE Y 1 0_S E E KI NG ) ; 

n n return  PGPERR_KEYIO_SEEKING; 

n > 

n i = ringPacketDi  f f ers(f i Le2,  sig,  PKTBYTE_SIG,  (word32)-1); 
n if  (fiLe2  ==  filel  &&  fiLe1->f  &S 

n n n pg p F i L e S e e k ( f i L e 1 ->f , retpos,  SEEK_SET)  !=  0)  { 

n n ringErrCf  i Lei,  sig->g.pos.fpos,  PGPERR_KEYIO_SEEKING); 

n n return  PG P E R R_KE Y I 0_ S E E KI NG ; 

n > 

n return  i; 

} 


static  union  RingObject  * 

r i ng F i ndS i g ( s t r u c t RingFile  *fiLe,  union  RingObject  *parent) 
{ 

H Struct  RingPooL  *pooL  = fiLe->set.pooL; 

n union  RingObject  *key; 

n union  RingObject  *sig,  **sigp,  **fsigp; 
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n i n t i ; 

n /*  Properties  of  the  signature  */ 

n int  err; 

n byte  pkaLg,  keylDCS^; 
n word32  tstamp; 

n word16  validity; 

n byte  type;n 

n byte  hashalg; 

n byte  version; 

n size_t  extralen; 


n pkaLg=0; 

n err  = r i ng S i g Pa r s e ( ( by t e const  * ) poo L — >p k t bu f , poo  I — >p k t b u f L en , 
n Spkalg^  keylD,  Ststamp,  &vaLidity,  Stype, 

n &hashaLg,&extraLen, aversion); 

n /*  Get  key  this  signature  is  by  */ 

n key  = r i ngPoo I F i ndDummyKey C poo L , NULL,  pkalg,  keylD); 
n if  ( ! key ) 
n n return  NULL; 


n 

Q 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  Search  for  matching  sigs  */ 
fsigp  = &parent->g.down; 

for  (sigp  = fsigp;  (sig  = *sigp)  !=  NULL;  sigp  = &s i g->g . next ) i 
n if  (OBJISSEC(sig)  ||  OB J I S S I G ( s i g ) ) 

n fsigp  = 8sig->g.next;  /*  predecessor  to  new  sig  */ 
if  (OBJISSIG(sig) 

&&  sig->s.by  ==  key 

55  (sig->s.by->k. pkaLg  ==  pkaLg  ||  pkaLg==1)  /*  ViaCryi 
&&  si g->s . tstamp  ==  tstamp 

65  sig->s.type  ==  type 

n &&  s i g-> s . ve r s i on  ==  version 

56  s i g->s . va L i di t y ==  vaLidity 

66  s i g-> s . h a s h a L g ==  hashaLg 
&&  ! ( si g->g . f Lags  & SIGF_ERROR)  ==  !err 
88  ! Csig->g.f Lags  8 S I G F_N0N F I VE ) ==  (extraLen  ==  5) 

88  (i  = s i g s d i f f e r ( f i L e , sig))  <=  0) 


return  i<0  ? NULL 


sig; 


B 

/* 

Not  found  - aLLocate  a new  sig  */ 

B 

sig 

= ringNewSig(pooL); 

B 

i f 

(sig)  { 

B 

B 

/*  Add 

new  sig  before  any  user  ID's 

B 

B 

s i g->g . 

next  = *fsigp; 

B 

B 

*f  s i gp 

= sig; 

B 

B 

s i g->s . 

by  = (union  RingObject  *)key 

B 

B 

s i g->g . 

up  = parent; 

B 

B 

if  (err) 

B 

B 

B sig 

->g.fLags  1=  SIGF_ERR0R; 

B 

B 

if  (extraLen  !=  5) 

B 

B 

B sig 

->g.fLags  |=  S I G F _N0N F I V E ; 

B 

B 

if  (OBJ ISKEY ( parent ) ) 

B 

B 

n sig 

->g.fLags  1=  SIGF_KEY; 

B 

B 

s i g->s . 

tstamp  = tstamp; 
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n 

n 

s i g->s . va 1 i d i t y = validity 

Q 

n 

sig->s.type  = type; 

a 

n 

s i g-> s . ve r s i on  = version; 

n 

n 

sig->s.hashalg  = hashalg; 

n 

u 

sig ->s. trust  = 0; 

□ 

y 

a 

return  sig; 

> 


/* 

* Return  1 if  the  blob  in  the  ring's  pktbuf  differs  from  the 

* blob  in  its  various  homes,  0 if  it  is  the  same,  and  <0  if  there 

* is  some  sort  of  error. 

* Does  *not*  alter  filel's  read  position  unless  there  is  an  error. 
*/ 

static  i nt 

unkdifferCstruct  RingFile  *file1,  union  RingObject  const  *unk) 

{ 

n struct  RingPool  *pool  = file1->set.pool; 

n struct  RingFile  *file2; 

n long  retpos=0; 
n i n t i ; 

n int  bit; 


n /*  Find  a matching  unk  */ 
n file2  = ringBestFileCpool,  unk,  0); 
n bit  = r i ngLsBi t Fi nd C unk->g . mas k 8 poo  I ->f i I ema s k ) ; 
n pgpAssertCbit  >=  0); 
n file2  = 8pool->filesCbit]; 

a pgpAssert  (file2->f  ||  f i I e 2->s e t . ma s k ==  M EH R I NG M A S K ) ; 

n if  (file2  ==  filel  88  file1->f  88  ( r e t po s = pg p F i I eT e I I ( f i I e 1 -> f ) ) < 0)  { 
n n ringErrCfilel,  pgpFileTell(file1->f),  PGPERR_KEYIO_FTELL); 

n n return  PGPERR_KEYIO_FTELL; 

n } 


n i f ( f i le2->f  88 

n n n pg p F i I e S ee k ( f i I e2-> f , u n k->g . po s . f pos , SEEK_SET)  !=  0)  { 

n n ringErrCf i le2,  un k->g . po s . f pos , PG P E R R_KE Y 1 0_S E E KI N G ) ; 

a n return  PG PE R R_KE Y I 0_S E E KI NG ; 
n } 

a i = ri ngPacket Di f f ers( f i le2,  unk,  PKTB YT E_T Y PE ( u n k->u . p k t by t e ) , 

° poo  I ->p kt buf  I en  + 1 ) ; 


a if  (file2  ==  filel  88  file1->f  88 

“ ° ° pgpFi  leSeekCf i le1->f , retpos,  SEEK_SET)  !=  0)  { 

a n ringErrCfilel,  un k->g . po s . f po s , PG PE R R_KE Y I 0_S E E KI N G ) ; 
n n return  PGPERR_KEYIO_SEEKING; 
n > 

n return  i; 

> 


/* 

* Get  a struct  RingUnk  on  the  given  chain  matching  the  one  in  the  ring's 

* pktbuf  with  the  given  pktbyte.  Returns  0 if  it  runs  out  of  memory 

* or  can't  read  the  file.  (The  ring's  error  is  set  to  reflect  this.) 

* It  does  *not*  add  the  FilePos  or  set  the  mask  bit. 

* Does  *not*  alter  the  given  file's  read  position  unless  there  is  an  error. 
*/ 
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static  union  RingObject  * 

ringFindUnktstruct  RingFiLe  *fiLe,  union  RingObject  *parent,  byte  pktbyte) 
{ 

n struct  RingPooL  *pool  = f i L e->s e t . poo L ; 
n union  RingObject  *unk,  **unkp; 
n uord32  hash; 
n inti; 

n hash  = r i ng H a s h Bu f ( ( by t e const  * ) poo L -> p k t bu f , poo L ->p k t b u f L en  ) ; 


n 

for 

( un  kp  = 

&parent->g.down; 

Cunk=*unkp)  != 

NULL; 

n 

n 

n 

unkp  = 8unk->g . next ) 

{ 

a 

a 

/* 

n 

n 

* 

If  the  type,  hash  and 

pktbyte  match. 

try  to  compare 

Q 

s 

★ 

Note 

that  the  pktbyte 

*must*  match  or 

namesdifferC) 

n 

Q 

★ 

wi  1 1 

complain  loudly. 

n 

□ 

*/ 

n 

n 

i f 

(OBJISUNK(unk) 

n 

Q 

8S 

u n k->u .hash  = = 

hash 

Q 

n 

&& 

un k->u . p kt by t e == 

pktbyte 

□ 

n 

S& 

(i  = unkdifferCfi 

le,  unk))  <=  0) 

Q 

n 

i 

Q 

n 

n 

return  i<0  ? NULL  : 

unk; 

n 

n 

> 

n > 

n /*  Failed  to  find  a name  - create  one  */ 

n unk  = r i ng N e wU n k ( poo L ) ; 

n i f (unk)  { 

n n *unkp  = unk; 

n n unk->g.up  = parent; 

n n unk->u . pkt by t e = pktbyte; 

n n unk->u.hash  = hash; 

n n /*  Default  new  names  to  unknown  trust  */ 

a > 

n return  unk; 

> 

/*  Return  the  list  of  trpuble  associated  with  a RingFile.  */ 
struct  RingTrouble  const  * 

r i ng F i I eT r oub I e ( s t r u c t RingFile  const  *file) 

{ 

n return  f i I e->t roub  I e ; 

> 

/* 

* Functions  for  manipulating  the  Trouble  list. 

*/ 

/*  Zero  out  a RingFile's  Trouble  list;  it  has  been  dealt  with.  */ 
void 

r i ng F i I e Pu r g eT r oub I e ( s t r u c t RingFile  *file) 

{ 

n memPoolEmpty(&fi le->troublepool); 
n f i I e->t roub I e = NULL; 
n f i I e-> t r oub I e t a i I = &f i I e-> t r ou b I e ; 

> 
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/* 

* Log  some  trouble  with  a RingFile. 

*/ 

static  int 

ri ng F i L eLog ( s t rue t RingFile  *file,  union  RingObject  *obj,  word32  num, 
n word32  fpos,  int  type) 

{ 

n Struct  RingTrouble  *t; 

n t = (struct  RingTrouble  * ) memPoo  I New ( &f i I e->t roub I epoo I , 
a a a struct  RingTrouble); 

n if  ( ! t ) 

o a return  PG P E R R_N OH  EH ; 

n t->next  = NULL; 

B t->obj  = obj; 

B t->num  = num; 

B t->fpos  = fpos; 

B t->type  = type; 

B *file->troubletail  = t; 

B f i I e-> t r oub I e t a i I = &t->next; 

B return  0; 

> 

/* 

* aaa  This  needs  fixing  - we  should  complain  about  a key  without 

* names  in  *this*  file,  even  if  it  has  names  in  others. 

*/ 

static  union  RingObject  const  * 
r i ng Key Ha s Name ( un i on  RingObject  const  *obj  ) 

{ 

B for  (obj  = obj->g.down;  obj;  obj  = obj->g.next) 

B B if  (OBJISNAHE(obj  ) ) 

B B n break; 

B return  obj; 

> 

/* 

* How  to  skip  things.  Various  helper  functions  return  either 

* negative  fatal  error  codes  or  these  codes  indicating  what  to 

* do  to  recover  from  any  warnings.  These  never  exceed  15  bits, 

* so  "int"  is  the  right  type. 

*/ 

typedef  int  skip_t; 

#define  SKIP_TRUST  1 
#define  SKIP_SIG  2 
^define  SKIP_NAHE  4 
#define  SKIP_SUBKEY  8 
#define  SKIP_KEY  16 

#define  SKIP_SIGS  (SKIP_TRUST  | SKIP_SIG) 

#define  SKIP_TO_KEY  (SKIP_SIGS  | SKIP_NAHE  | SKIP.SUBKEY) 

//define  PB_PUBKEY  ( key ) ( OB  J I S T 0 PKE  Y ( key ) ? \ 

B PKTBYTE_BUILD(PKTBYTE_PUBKEY,  0)  : \ 

B PKTBYTE_BUILD(PKTBYTE_PUBSUBKEY,  0)) 
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#define  PB_S E C KE Y ( key ) ( OB J I STO PKE Y ( key ) ? \ 

n PKTBYTE_BUILD(PKTBYTE_SECKEY,  0)  : \ 

n PKTBYTE_BUILD(PKTBYTE_SECSUBKEY,  0)) 

^define  PB_SIG  PKTB YTE.BU I LD ( PKTB YT E_S I G,  0) 

/* 

* Add  a new  key  to  the  Pool,  with  its  *parent*  at  the  given  Level 

* (0  means  adding  top-LeveL  key)  in  the  R i ng I t e ra t o r . Leave  the 

* Ringiterator  pointing  to  the  newly  created  key.  Return  <0  on  error, 

* 0 if  the  key  was  created,  and  a skip  code  > 0 if  it  was  created  with 

* a warning  of  some  sort. 

*/ 

static  int 

ringAddKeylstruct  RingFile  *fiLe,  struct  Ringiterator  *iter,  word32  fpos. 


n 

r 

int  trusted,  byte  pkttype) 

\ 

s 

union  1 

RingObject  *key,  *sec,  *parent; 

n 

byte  pkalg,  keylDCSD; 

n 

wo  rdl 6 

keybi ts; 

n 

wo  rd32 

t s t a m p ; 

u 

wo  r d 1 6 

validity; 

n 

int  i , 

err.  Level; 

n 

pkalg 

= 0; 

n 

err  = 

r i n g Ke y Pa r s e ( ( b y t e const  * ) f i L e— > s e t . poo 

l->pktbuf , 

n 

fi Le->set .pooL->pktbufLen, 

8pka  Lg, 

n 

keylD,  akeybits,  Btstamp,  Bvalidity,  0); 

n 

i f 

(pkttype  ==  PKTBYTE_PUBSUBKEY)  ( 

o 

n 

/* 

Subkey  */ 

n 

n 

1 f 

(!iter-> Level)  ( 

Q 

a 

n 

i = ri ngFi LeLogCf i Le,  NULL,  0,  fpos. 

n 

Q 

n 

n n PGPERR_TROUBLE_UNXSUBKEY); 

n 

n 

n 

return  i < 0 ? i : SKIP_SIGS; 

D 

n 

> 

D 

n 

parent  = i t e r-> s t a c k C 0 D ; 

n 

n 

Level  = 1; 

n 

> 

else 

{ 

n 

n 

parent  = NULL; 

n 

n 

Level  = 0; 

n 

n 

i f 

(iter-> Level)  ( 

n 

n 

n 

key  = i ter->stackC0!]; 

n 

D 

n 

pgpAssertCOBJISKEYCkey)); 

n 

n 

s 

/*  Complain  about  a key  with  no  Names 

*/ 

n 

n 

n 

if  ( ! r i ngKey Ha sName ( key ) ) ( 

n 

Q 

n 

n i = r i ng F i L e Log ( f i L e , key,  0, 

n 

n 

n 

n n n r i ng F i L e Po s ( key , fiLe)->fpos, 

n 

n 

n 

n n n PGPERR_TROUBLE_BAREKEY); 

Q 

n 

o 

n if(i<0) 

n 

n 

D 

n n return  i; 

n 

n 

n 

} 

n 

Q 

n 

/*  aaa  should  we  not  care  about  this? 

*/ 

□ 

n 

n 

/*  If  keys  not  in  sorted  order,  dirty 

*/ 

f 

0 

Q 

n 

D 

/*  aaa  ringSortKeys  orders  keys  by  algorithm 

CCCHK: 
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“ ® ° so  this  test  no  longer  works.  */ 

° ° i f ( ri ngKeylDcmpC key->k . keylD,  keylD)  > 0) 

° ° ° ringFileHarkDirtyCfile); 

# e n d i f 
a a > 
a > 

n /*  Find  the  matching  key  structure  */ 

H key  = r i ngPoo I Fi ndDummyKey (f i le->set . poo L,  parent,  pkalg,  keylD); 
n if  ( ! key ) 

a a return  r i n g F i L e E r r o r C f i L e ) -> e r r o r ; 


a 

a 

a 

a 

a 

a 

a 

n 

n 

□ 

n 

a 

n 

□ 

n 

a 

B 

B 

B 


/* 
i f 
n 
n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


See  if  it's  a new  key  or  the  same  key  */ 

C key->g .mask  ==  0 ) { 

/*  Newly  created  dummy  key;  fill  in  info  */ 
if  (pkttype  ==  PKTB YT E_ PUBS UBKE Y S&  OB J I STOPKE Y ( key  ) ) 
a / * 

a * Here  on  a former  dummy  top-level  key  which 

a * has  turned  out  to  be  a subkey.  Dummy  key 

a * would  have  been  created  if  we  saw  a sig  by 

n * it.  Change  key  to  a subkey. 

a * / 

a i = r i ng F i I eLog ( f i le,  NULL,  0,  fpos, 
nan  PG P E R R_T ROUB LE_ S I G S UBKE Y ) ; 

a if(i<0) 
a a return  i; 

a r i ng Poo  I Un I i n kKey ( f i I e->se t . poo  I , key); 
n key->k. flags  |=  R I NGOB J F_S UBKE Y ; 
a r i ng Poo  I Li n kKey ( f i I e->s e t . poo  I , parent,  key, 

n n n pka  Ig,  keylD) ; 

> 


{ 


n a key->k.pkalg  = pkalg;a  /*  ViaCrypt  */ 
n a key->k. tstamp  = tstamp; 

n a key->k . va I i di ty  = validity; 
a a key->k . key b i t s = keybits; 

a a key->k. trust  = 0; 

a a if  (err) 

ana  key->g. flags  |=  KEYF_ERROR; 


□ 

y 

else  if  (keybits 

! = key->k .keybits 

n 

B 

II  pka  Ig 

! = key-> k . pka 1 ga  a 

/*  Vi aCrypt  */ 

n 

B 

II  tstamp 

!=  key->k. tstamp 

/ *n 

B 

II  validity 

!=  key->k . va 1 i di tya 

Validity  may  be 

B 

B 

II  parent 

!=  (OBJISTOP(key)  ? 

NULL  : key->g . up ) 

B 

a 

B 

i 

II  ! ( key->g 

flags  S KEYF_ERROR) 

! = ! e r r ) 

B 

B 

i = ringFi leLog(f i le,  key,  0,  fpos. 

B 

B 

PGPERR_TROUBLE_DUPKEYID); 

B 

B 

return  i < 0 ? 

i : SKIP_TO_KEY; 

n sig  * / 


a 

a 

a 

a 

a 

a 

a 


} else  if  ( ( i =keysdi f f er ( f i le, key,PB_PUBKEY( key  ) ) ) !=  0)  { 
a i f ( i < 0 ) 
a a return  i; 

a if  ( COBJISTOPKEY(key)  &S  p kt t ype == PKTB YT E_PUB S UBKE Y ) || 

a (OBJISSUBKEY(key)  SS  p k 1 1 y pe  = = PKTB YT E_PUBKE Y ) ) { 

a a i = r i ng F i I e Log ( f i I e,  key,  0,  fpos, 

a a a PG P E R R_TR0UB L E_KE Y SUBKEY); 
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n n n return  (i  < 0)  ? i : SKIP_TO_KEY; 
o n > 

/*  KLUDGE:  version  byte  bug  */ 


n 

n 

n 

n 

D 

□ 

□ 

n 

n 

n 

n 

n 

n 

s 

n 

n 

n 

n 

□ 

n 

Q 


n 

n 

n 

n 

Q 

n 

n 

□ 

n 

Q 

n 

Q 

□ 

n 

□ 

n 

n 

Q 

n 

□ 

n 

s 

n 


/* 

* 


A key  with  a version  byte  of  2 only  overrides  previous 
keys  with  a byte  of  3 if  they  are  all  untrusted 
secret  keys  and  this  is  either  a secret  key  or  from 
a trusted  public  keyring.  A key  with  a version  byte 
of  3 is  only  overridden  if  it's  secret  and  previous 
keys  include  a secret  key  or  a trusted  public  key. 


* 

* 

* 

* 

★ 

*/ 

if  (i  == 


PGPVERSION  2 


SS  t rusted 

&&  ! ( key->g . f lags  & RINGOBJ F_TRUST) 

&S  ! ( ( r i ngKey  SecHa  sk  ( key  ) key->g.mask) 
& f i I e->s e t . poo  I ->f i I ema s k ) ) 


{ 
n 
□ 

□ 
n 

D 

n 
o 
a 

> else  { 


i = r i ng F i I e Log ( f i I e , key,  0,  fpos, 

PGPERR_TROUBLE_VERSION_BUG_PREV); 
if  ( i < 0 ) 
n return  i; 

/*  Set  all  those  secret  version  bug  flags  */ 
for  (sec  = key->g.down;  sec;  sec  = sec->g.next) 
n if  (OBJ ISSEC ( sec ) ) 

n n sec->g. flags  |=  S E C F_V E R S I 0N_BUG ; 


/*  End  of  KLUDGE  */ 


n 

a 

n 

i = 

r i n g F i 

leLog(file,  key. 

0,  fpos 

n 

n 

n 

a 

B PGPERR 

_TROUBLE_DUPKEYID); 

n 

n 

D 

i f 

( i < 0) 

n 

n 

n 

n 

return 

1 ; 

n 

n 

n 

return  i < 

0 ? 

i : SKIP_T0 

_KEY; 

n 

a 

> 

n > 


n /* 

n * Already  present  in  this  keyring? 

n * If  so,  accept  following  sigs  & userids  (they  may 

n * not  be  duplicates),  but  flag  a warning, 

n * / 

n if  (key->g.mask  S f i I e-> s e t . ma s k ) ( 

a n i = r i ng F i I e Log ( f i I e , key,  0,  fpos,  PG P E R R_T ROUB LE_ D U PKE Y ) ; 
n n if(i<0) 

n n n goto  failed; 

n B i = SKIP_TRUST; 

B } e I s e { 

B B /*  Add  the  FilePos  */ 

B B i = ri ng AddPos ( key,  file,  fpos); 

B B if(i<0) 

B B B goto  failed; 

B > 

B /*  Add  successful;  indicate  it  in  the  mask  */ 

B key->g.mask  |=  iter->set.mask; 

B i t e r->s t a c kC  I e ve  I 3 = key; 

B iter->level  = level+1; 

B return  i; 


f ai led : 
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n i f ( ! key->g .mask) 

n n r i ng F ree Dummy Key ( f i L e->s e t . poo L , key); 

n return  i; 

> 


/* 

* Add  a new  secret  to  the  Pool,  as  two  objects:  a key  (with  its  *parent* 

* at  the  given  Level  in  the  R i n g I t e r a t o r ; 0 means  add  a top-LeveL  key) 

* and  a signature  as  its  child.  Leave  the  Ringiterator  pointing  to  the 

* newly  created  secret.  Return  <0  on  error,  0 if  the  key  was  created, 

* and  a skip  code  >0  if  they  key  was  created  with  a warning  of  some  sort. 

* 

* This  is  *ri di cu Lous Ly*  hairy.  Is  there  a way  to  clean  it  up? 

* aaa  TODO:  Add  PGPERR_TR0UBLE_0LDSEC  and  _NEWSEC  handling. 

*/ 

static  i n t 

r i ng AddSec ( s t rue t RingFile  *fiLe,  struct  Ringiterator  *iter,  word32  fpos, 
n byte  pkttype) 

{ 

n union  RingObject  *key,  *sec,  *parent; 
n byte  pkalg,  keyIDCS]; 
n word16  keybits; 

n word32  tstamp; 

n word16  validity; 

n int  i,  err; 

n int  Level; 

a int  flags  = 0; 


n pkalg  =0; 

B err  = r i n gKey Pa r s e ( ( by t e const  * ) f i L e-> s e t . poo L ->p k t bu f , 

B f i le->set . pooL->pktbuf Len,  Spkalg, 

B keylD,  Skeybits,  Ststamp,  &validity,  1); 


□ 

i f 

(pkttype  ==  PKTBYTE_SECSUBKEY)  { 

n 

a 

/* 

Subkey  */ 

a 

a 

1 f 

(!iter-> Level)  { 

a 

a 

a 

i = ri ngFi LeLog(f i Le,  NULL,  0,  fpos. 

a 

a 

a 

B n PGPERR_TROUBLE_UNXSUBKEY); 

a 

a 

a 

return  i < 0 ? i : SKIP_SIGS; 

a 

a 

> 

a 

a 

parent  = i t e r->s t a c k C 0 3 ; 

a 

a 

level  = 1 ; 

a 

> 

else 

{ 

a 

a 

parent  = NULL; 

a 

a 

level  = 0; 

a 

a 

1 f 

(iter->  level)  { 

a 

a 

a 

key  = i ter->stacklI0Il; 

a 

a 

a 

pgpAssert(OBJISKEY(key)); 

a 

a 

a 

/*  Complain  about  a key  with  no  Names  */ 

a 

a 

a 

if  ( ! ri  ngKeyttasName  ( key  ) ) { 

a 

a 

a 

B i = r i ng F i L e Log ( f i 1 e , key,  0, 

a 

a 

a 

B B H ringFiLePos(key,  fiLe)->fpos 

a 

a 

a 

nan  PGPERR_TROUBLE_BAREKE Y ) ; 

a 

a 

a 

B if  ( i < 0 ) 

a 

a 

a 

B B return  i; 

a 

a 

a 

} 
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n 

n 

n 

/* 

n 

n 

n 

/* 

#if 

0 

n 

n 

Q 

/* 

n 

Q 

□ 

n 

n 

n 

i f 

o 

n 

Q 

n 

#end i f 

n 

Q 

> 

fi 

> 

aaa  should  we  not  care  about  this?  */ 

If  keys  not  in  sorted  order,  dirty  */ 

aaa  ringSortKeys  orders  keys  by  algorithm 
so  this  test  no  longer  works.  */ 

( r i ng Key  I D c mp ( key-> k . key  I D , keylD)  > 0) 
ri ngFi leMarkDi rtyCfi le); 


n /*  Find  the  matching  key  structure  */ 

n key  = r i ng Poo  I F i nd D ummy Key ( f i I e-> s e t . poo  I , parent,  pkalg,  keylD); 
n if  ( ! key ) 

a n return  r i ng F i I e E r r o r C f i I e ) -> e r r o r ; 


n 

n 

D 

n 

n 

□ 

Q 

n 

n 

n 

Q 

Q 

D 

n 

n 

□ 

n 

n 

□ 


/*  See  if  it's  a new  key  or  the  same  key  */ 
if  (key->g.mask  ==  0)  { 

n /*  Newly  created  dummy  key;  fill  in  info  */ 
n if  (pkttype  ==  PKTB YT E_S E C S UBKE Y SB  OB J I STOPKE Y C key  ) ) { 
n n / * 

n n * Here  on  a former  dummy  top-level  key  which 

n n * has  turned  out  to  be  a subkey.  Dummy  key 

n n * would  have  been  created  if  we  saw  a sig  by 

n n * it.  Change  key  to  a subkey. 

n n * / 

n n i = r i ng F i I eLog ( f i I e,  NULL,  0,  fpos, 

n n n n PG P E R R_T ROUB L E_ S I G S UBKE Y ) ; 

n n if(i<0) 

n n n return  i; 

n a r i ngPoo I Un I i n kKey ( f i I e->se t . poo  I , key); 
n n key->k. flags  |=  R I NGOB J F _ S UBKE Y ; 
n n r i ng Poo  I Li n kKey ( f i I e->s e t . poo  I , parent,  key, 

□ n a □ pkalg,  keylD); 

n } 


n n /*  Newly  created  dummy  key;  fill  in  info  */ 
n n key->k. pkalg  = pkalg;n  /*  ViaCrypt  */ 

n n key->k. tstamp  = tstamp; 

n n key->k . va I i d i t y = validity; 
n n key-> k . key b i t s = keybits; 

a a key->k. trust  = 0; 

n n if  (err) 

n n n key->g. flags  |=  KEYF_ERROR; 

n > else  if  (keybits  !=  ke y-> k . key b i t s 


Q 

n 

1 1 

pkalg 

!=  key-> k . p ka 1 gn  n 

/*  ViaCrypt  */ 

n 

Q 

1 1 

tstamp 

! = key->k .tstamp 

/ *n 

n 

1 1 

validity 

!=  key-> k . va 1 i d i t y n 

Validity  may  be  in  sig  */ 

n 

n 

1 1 

parent 

!=  (OBJ IST0P( key ) ? 

NULL  : key->g . up ) 

n 

n 

r 

1 1 

! ( key->g 

flags  8 KEYF_ERR0R) 

! = ! e r r ) 

Q 

n 

D 

i = r i ng F i 1 e Log ( f i 1 e , key,  0,  fpos. 

PGPERR_TROUBLE_DUPKEYID); 

n 

n 

return 

i < 0 ? 

i : SKIP_T0_KEY; 

n 

> 

else  if 

((i=keysdiffer(f i le,key,PB_SECKEY(key)))  !=  0)  i 

D 

n 

if  (i 

< 0) 
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□ 

Q 

n 

n 

n 

i f 

Q 

n 

n 

□ 

n 

n 

n 

a 

n 

n 

a 

n 

n 

y 

/* 

KLUDGE  : 

u 

a 

/* 

a 

n 

■k 

s 

n 

* 

n 

□ 

★ 

Q 

c 

★ 

n 

Q 

* 

n 

n 

★ 

a 

□ 

*/ 

Q 

n 

if 

n 

n 

Q 

Q 

n 

n 

n 

n 

n 

n 

Q 

□ 

n 

□ 

n 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

o 

n 

n 

n 

n 

u 

n 

□ 

> e 

Q 

o 

n 

n 

n 

n 

{ 

n 

Q 

n 

n 

n 

o 

n 

□ 

n 

n 

n 

D 

a 

n 

Q 

n 

n 

Q 

n 

n 

n 

u 

n 

> el 

return  i; 

: (OBJ ISTOPKEYC key ) &S  p k 1 1 y p e = = PKTB YT E_ PUBS UBKE Y ) 
(OBJISSUBKEY(key)  &&  p k t t y pe==PKT B YT E_PU BKE Y ) ) { 
i = r i ng  F i L e Log  ( f i L e,  key,  0,  fpos, 
n PGPERR_TROUBLE_KEYSUBKEY); 
return  (i  < 0)  ? i : S KI P_T0_KE Y ; 


A key  with  a version  byte  of  2 only  overrides  previous 
keys  with  a byte  of  3 if  they  are  all  untrusted 
secret  keys  and  this  is  either  a secret  key  or  from 
a trusted  public  keyring.  A key  with  a version  byte 
of  3 is  only  overridden  if  it's  secret  and  previous 
keys  include  a secret  key  or  a trusted  public  key. 

(i  ==  PGPVERSI0N_2 
S&  ! ( key->g . f lags  & R I N G OB J F _T RU S T ) 

SS  ! ( ( r i n g Key S e c Ma s k ( key  ) * key->g.mask)  S 
fi le->set.pool->fi  lemask)) 

i = r i n g F i I e Log ( f i I e , key,  0,  fpos, 

PGPERR_TROUBLE_VERSION_BUG_PREV); 
if  ( i < 0 ) 
n return  i; 

/*  Set  all  those  secret  version  bug  flags  */ 
for  (sec  = key->g.down;  sec;  sec  = sec->g.next) 
n if  (OBJISSEC(sec)) 

n n sec->g. flags  |=  S E C F_ VE R S 1 0 N_BUG ; 

Ise  if  (i  ==  PGPVERSI0N_2_6 

S&  ( key->g . f lags  & R I N G OB J F_T RU ST 
II  r i n g Key  S e c Ma  s k ( key  ) ) ) 

i = r i ng F i I eLog ( f i I e , key,  0,  fpos, 

PGPERR_TROUBLE_VERSION_BUG_CUR); 
if  ( i < 0 ) 
n return  i; 

flags  1=  SECF_VERSION_BUG,- 
/*  Fix  the  problem  */ 

((byte  * ) f i I e->s e t . poo  I ->p k t buf ) C 0 J = PG PV E R S 1 0N_2 ; 
Ise  { 


/* 

End 

of 

KLUDGE  */ 

n 

Q 

n 

i = r i ng F i 1 e Log ( f i 1 e , key. 

0,  fpos. 

n 

□ 

n 

n n PGPERR_TROUBLE_DUPKEYID); 

n 

D 

n 

if  ( i < 0 ) 

n 

a 

u 

n return  i; 

n 

n 

n 

return  i < 0 ? i : SKIP_T0_ 

KEY; 

n 

n 

y 

n 

> 

n 

/* 

Okay,  we've  got  the  public  key. 

Now  add 

n 

sec 

= 

r i n g F i n d S e c ( f i 1 e , key); 

□ 

i f 

( ! sec)  { 

n 

n 

i 

= r i ng F i 1 e E r r 0 r ( f i 1 e ) -> e r r 0 r ; 

n 

n 

goto  failed; 

n 

> 

Q 

sec 

->c 

.flags  1=  flags; 
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n if  ( se  c->g  . ma  s k & f i L e->  s e t . ma  s k ) -C 

n B i = r i n g F i L e Log ( f i I e , key,  0,  fpos,  PG P E R R_TR0UB LE_ D U PS E C ) ; 


a 

Q 

i f 

(i  < 0) 

□ 

n 

B 

goto  faiLed; 

n 

n 

i 

= SKIP_TRUST; 

n 

> 

else 

{ 

a 

Q 

/* 

Add  the  FiLePos  */ 

n 

Q 

i 

= ringAddPosCsec,  fiLe,  fpos); 

a 

B 

if 

(i  < 0)  { 

n 

B 

B 

pgpAssert(sec->g.mask); 

n 

B 

B 

goto  faiLed; 

n 

B 

> 

D 

> 

n 

/* 

Q 

* 

ALready  present  in  this  keyring? 

□ 

* 

If 

so,  accept  foLLowing  sigs  S userids  (they  may 

n 

* 

not 

be  dupLicates),  but  fLag  a warning. 

n 

★ 

If 

the  previous  instances  were  aLL  pubLic  keys. 

n 

★ 

but 

this  is  a secret  key,  "upgrade"  the  reference. 

n 

★ 

/ 

□ 

i f 

(key->g.mask  & f i L e-> s e t . ma s k ) { 

n 

B 

/* 

OnLy  do  this  if  it  wasn't  a dupLicate  *secret* 

Q 

B 

if 

(i  !=  SKIP_TRUST)  { 

□ 

B 

B 

i = r i ng  F i L e Log  ( f i L e , key,  0,  fpos. 

D 

B 

B 

n n PGPERR_TROUBLE_DUPKEY) ; 

n 

B 

B 

if  ( i < 0 ) 

n 

B 

B 

n goto  faiLed; 

Q 

B 

B 

r i ng A L t e r F i L ePos ( key  , fiLe,  fpos); 

n 

B 

B 

i = SKIP_TRUST; 

n 

B 

> 

n 

> 

else 

{ 

n 

B 

/* 

Add  the  FiLePos  */ 

n 

B 

err  = i ; 

n 

B 

i 

= ringAddPosCkey,  fiLe,  fpos); 

Q 

B 

if 

( i < 0 ) 

n 

B 

B 

goto  faiLed; 

n 

B 

i 

= err; 

Q 

> 

n 

/* 

Add 

successfuL;  indicate  it  in  the  mask  */ 

n 

key->g 

.mask  1=  i t e r->se t . ma s k; 

Q 

s e c->g 

.mask  1=  i ter->set . mask; 

n iter->stackCLeveLD  = key; 
n i t e r->s t a c kC L e ve L+1 3 = sec; 

n iter->LeveL  = LeveL+2; 
n return  i; 

f a i Led: 

n if  ( ! key->g . ma s k ) 

B B r i ng  F ree Dummy Key ( f i L e->s e t . poo L , key); 
n return  i; 

> 

/* 

* Add  the  name  in  the  RingPooL's  pktbuf  to  the  sets  mentioned 

* in  the  given  iterator,  which  points  to  the  Location  where  the 

* name  shouLd  be  added.  Leaves  the  Ringiterator  pointing  to  the 
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* name  just  added. 

*/ 

static  int 

r i ng AddName ( s t ru c t RingFiLe  *fiLe,  struct  Ringiterator  *iter,  word32  fpos) 
{ 

n union  RingObject  *name; 
n inti; 

n pg p A s s e r t ( i t e r-> I e ve L >=  1); 
n name  = r i ng Fi ndName ( f i L e,  i t e r-> s t a c k C 0 D ) ; 
n if  ( ! name ) 

a a return  r i n g F i L e E r r o r ( f i L e ) -> e r r o r ; 
n / * 

n * Already  present  in  this  keyring? 

n * 

n * If  so,  accept  following  sigs  (they  may  not  be 

n * duplicates),  but  flag  a warning, 

n * / 

n if  ( name->g . ma s k & f i I e-> s e t . ma s k ) { 

n a i = ringFi leLogCf  i le,  name,  0,  fpos,  PG P E R R_T ROUB L E_ D U PN AM E ) ; 
n n i f ( i < 0 ) 

n n n returni; 

n n i = SKIP_TRUST; 
n > e I s e { 

n n /*  Add  the  FilePos  */ 
n n i = ringAddPoslname,  file,  fpos); 
n n if(i<0){ 

n n n pg p A s s e r t ( na me->g . ma s k ) ; 

n n n returni; 

n n > 

n > 

n name->g.mask  |=  i t e r-> s e t . ma s k ; n / * All  done  */ 
n i ter->stackC1 ] = name; 

n iter -> level  = 2; 

n return  i; 

} 

static  int 

r i ng Adds i g ( s t r u c t RingFile  *file,  struct  Ringiterator  *iter,  word32  fpos) 

{ 

n union  RingObject  *sig; 
n int  level; 

n int  i ; 

n p g p A s s e r t C i t e r-> I e ve I >=  1); 

n /*  Stack  position  of  parent:  0 or  1 */ 
n level  = (iter->level  > 1 && 

a n (OBJISNAHE( i ter->stack[1 ] ) ||  OB J I S S U BKE Y ( i t e r-> s t a c k C 1 ] ) ) ) ; 

n sig  = ringFindSigCfile,  iter->stackClevelD); 
n if  ( ! s i g ) 

n n return  r i ng F i I e E r r o r ( f i I e ) ->e r r o r ; 

n /*  Already  present  in  this  keyring?  Complain.  */ 
n if  (sig->g.mask  S f i I e-> s e t . ma s k ) { 

a a i = ringFi  leLogCfi le,  sig,  0,  fpos,  PG P E R R_T RO UB L E_ D U PS  I G ) ; 
n n i f ( i < 0 ) 

n n n returni; 
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n a i = SKIP_TRUST; 
n > e I s e { 

n n /*  Add  the  FiLePos  */ 
a a i = r i ng AddPos ( s i g , file,  fpos); 
n n if(i<0){ 

non  pgpA s se r t ( s i g->g . ma s k ) ; 

n n n returni; 

n n > 

n > 

n sig->g.mask  |=  i t e r->s e t . ma s k; n /*  ALL  done  */ 
n 1 t e r->s t a c kC L eve L+1 D = sig; 
n iter->LeveL  = LeveL+2; 
n return  i; 

> 


/* 

* Add  the  unknown  object  in  the  RingPooL's  pktbuf  to  the  sets  mentioned 

* in  the  given  iterator,  which  points  to  the  Location  where  the 

* object  shouLd  be  added.  Leaves  the  Ringiterator  pointing  to  the 

* object  just  added. 

*/ 

static  int 

r i ng AddUn k ( s t r uc t RingFiLe  *fiLe,  struct  Ringiterator  *iter,  word32  fpos, 
n byte  pktbyte) 

{ 

n union  RingObject  *unk; 
n i nt  L eve  L ; 
n inti; 

n pgpAsse r t ( i t e r-> L e ve L >=  1 ) ; 

□ 

n /*  Stack  position  of  parent:  0 or  1 */ 
n LeveL  = iter->LeveL  - 1; 
n /*  PLace  this  */ 

n if  ( OB J I SUNK! i t e r->s t a c kC L e ve L D ) SS  LeveL) 
n n LeveL  — ; 

n /*  Can't  put  it  beLow  a bottom-LeveL  object,  make  it  a sib  */ 
n if  ( OB J I SBOT ( i t e r->s t a c kC L e ve L 3 ) SS  LeveL) 
n n LeveL  — ; 

n unk  = r i ng F i ndUn k ( f i L e,  i t e r->s t a c k C L e ve L D , pktbyte); 
n if  (!unk) 

n n return  r i ng F i L e E r r o r ( f i L e ) ->e r r o r ; 


n 

/* 

n 

•k 

ALready  present  in  this  keyring?  If 

a 

*/ 

n 

if 

(unk 

->g.mask  S f i L e->se t . ma s k ) { 

n 

n 

i = 

r i ng F i L e Log ( f i L e , unk,  0,  fpos. 

a 

n 

i f 

( i < 0 ) 

n 

n 

n 

return  i; 

n 

n 

i = 

SKIP_TRUST; 

n 

} e L s e 

{ 

n 

n 

/* 

Add  the  FiLePos  */ 

n 

□ 

i = 

ri ngAddPos ( unk,  fiLe,  fpos); 

n 

n 

i f 

(i  < 0)  { 

n 

□ 

n 

pgpAssert(unk->g.mask); 

□ 

n 

n 

return  i; 

n 

□ 

> 

so,  warn... 


PGPERR_TROUBLE_DUPUNK); 
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n } 

n /*  ALL  done,  we're  happy...  */ 
n unk->g.mask  |=  i t e r->s e t . ma s k; 
n i ter->stackC Leve L + 1 ] = unk; 

n iter->LeveL  = LeveL+2; 
n return  i; 

} 

/***  The  feature  presentation  ***/ 

/* 

* KLUDGE:  PGP  2.6  had  a bug  wherein  if  you  changed  the  passphrase  on 

* a secret  key,  the  newLy  encrpyted  secret  key  wouLd  be  written  out 

* with  a version  byte  of  PG P V E R S 1 0 N_2_6  (.=  3),  even  if  the  originaL 

* was  PGPVERSI0N_2  (=  2).  PGP  2.6  didn't  notice  the  probLem  and 

* wouLd  continue  to  function  very  happiLy  with  the  probLem. 

* 

* The  code  here  notices  and  attempts  to  undo  the  probLem, 

* "overriding"  the  version  byte  of  3 and  forming  a consistent 

* idea  of  the  key's  version  byte. 

* The  onLy  probLem  is  avoiding  a d e n i a L -o f - s e r v i c e attack  if 

* someone  sends  me  a pubLic  key  with  a version  byte  of  2 and 

* I compare  it  with  my  secret  key  with  a (correct)  version 

* byte  of  3,  and  fix  my  secret  key  to  2 to  correspond. 

* It  couLd  cause  probLems  unfixabLe  except  with  a binary  fiLe 

* editor.  So  we  onLy  accept  evidence  of  the  bug  under  certain 

* conditions.  To  be  precise: 

* 

* - A key  with  a version  byte  of  2 can  onLy  override  the  previous 

* version  bytes  of  3 if  aLL  previous  keys  are  secret  keys 

* without  trust  information  and  the  key  is  either  a secret  key 

* or  from  a trusted  pubLic  keyring. 

* - A key  with  a version  byte  of  3 is  onLy  overridden  by  previous 

* keys  if  it  is  a secret  key  and  the  previous  keys  incLude  a 

* secret  key  or  a key  from  a trusted  keyring. 

* 

* A TroubLe  record  is  Logged  in  either  case.  TROUB L E_ V E R S I 0N_BUG_PR E V 

* if  previous  keys  had  the  version  bug  and  T ROUB LE_ V E R S I 0N_BUG_ C U R if 

* the  current  key  has  it. 

* 

* - Fixing  instructions: 

* - We  want  to  spLit  out  a function  to  add  a singLe  object. 

* - RepLace  parse  tree  state  with  r i n g I t e r a t o r . 

* - FiddLe  with  trust  packets  somehow. 

* - Use  the  fact  that  r i ng F i L e DoC L os e gets  rid  of  haLf-buiLt 

* keys  to  simpLify  the  pub L i c - key-g a t h e r i n g part. 

* DANGER,  WILL  ROBINSON:  What  about  running  out  of  memory  when  creating 

* a new  key?  That's  one  case  when  it's  *not*  desirable  to  cLose 

* the  whoLe  fiLe.  GrumbLe  moan  bitch  compLain... 

* 

* Okay  a few  cases: 

* - The  secret  is  oLd,  as  is  the  key. 

* In  that  case,  we're  onLy  11 
*/ 

struct  RingFiLe  * 

r i ng F i L eOpen ( s t r u c t RingPooL  *pooL,  struct  PgpFiLe  *f,  int  trusted,  int  *error) 
{ 
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n /*  Oy,  what  a Lot  of  variables!  */ 

n /*  The  RingFiLe  being  opened  */ 

n struct  RingFiLe  *fiLe; 

n ri ngmask  mask; 
n i n t b i t ; 

n /*  The  current  state  of  the  parse  tree  */ 
n struct  Ringiterator  iter; 
n union  RingObject  *obj; 


n /*  Current  packet  info  */ 
n int  pktbyte; 
n word32  Len,  fpos; 

n char  *buf;n  n /*  Current  pktbuf  */ 

n /*  Information  from  seLfsig  subpackets  associated  with  parent  key  */ 
n union  RingObject  *s i g key pa r e n t = NULL; 


n 

word32n  n 

n 

n 

s i g key  va  1 i d i t y = 0; 

n 

/*  Various 

temporaries  */ 

n 

int  i ; n n 

n 

/* 

Multi-purpose  temp  */ 

#i  f 

n 

PGPTRUSTMODEL>0 

int  j,  k;n  n 

/* 

Additional  trust  packet  bytes  */ 

#end i f 

n byte  c;nn 

n 

/* 

for  pgpFileRead  */ 

n 

si ze_t  size 

a 

/*  Return  value  from 

pgpFi LeReadC ) 

n 

byte  *tp;n 

□ 

/* 

Pointer  to  trust  byte 

*/ 

n 

struct  RingTrouble 

const  *troubLe; 

n /*  Flags  */ 

n int  dirty  = 0,  trustdirty  = 0; 
n skip_t  skip; 

n int  trustf;nn  /*  1 for  trust,  2 for  optional  trust  */ 
a int  t r u s t m i s s i ng ; n /*  OR  of  trustf  values  */ 

n / * 

n * The  code  starts  here 

n * / 

n i f ( ! f I I I pool  ) { 
n n *error=0; 

n n return  (struct  RingFiLe  *)NULL; 

n > 

Q n 

a pg p As s e r t ( I ( poo L -> f i L ema s k & ~ poo L ->a L L o c ma s k ) ) ; 


n bit  = r i ng B i t A L L o c ( poo L ) ; 
n if(bit<0)( 

n n *error  = PG P E R R_N0_KE YB I T S ; 
n n return  NULL; 
n > 

n pg p As s e r t ( b i t < MEHRINGBIT); 

n file  = &pooL->fiLesCbit!]; 

n mask  = (ringmask)l  <<  bit; 

n pg p As se r t ( f i I e->se t . ma s k ==  mask); 


n poo L->f i L ema s k |=  mask; 


pgpRngRead.c 
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n poo L->a L Locmask  |=  mask; 

n /*  Set  this  file  as  the  L owe s t -p r i o r i t y file  */ 
n r i n g F i L e LowP r i ( f i L e ) ; 

n pgpAssert ( ! f i Le->set  . next ); 

n fiLe->f  = f; 
n f i L e->de s t r u c t o r = NULL; 

n fiLe->arg  = NULL; 
n f i L e->ve rs i on  = PG P V E R S 1 0N_2  ; 

n /*  Start  out  with  a clean  slate  */ 
n *error  = 0; 


□ 

/*  Initialize  a null  Ringiterator 

*/ 

n 

iter. 

set. pool  = pool; 

n 

iter. 

set. mask  = 0; 

D 

/*  There  is  no  current  key  */ 

n 

iter. 

level  = 0 ; 

n 

/*  There  is  no  current  packet  to  give 

trust  to  */ 

o 

trustf  = 0; 

n 

/*  No 

trust  is  missing,  yet  */ 

□ 

trustmissing  = 0; 

n 

/*  Pay  attention  to  all  the  packets  */ 

n 

n 

skip 

= 0; 

n 

/* 

n 

* The  main  loop  over  each  packet. 

a 

*/ 

s 

w h i 1 e 

(Cpktbyte  = p k t By t eGe t ( f i 1 e- 

>f. 

&len,  Sfpos)) 

□ 

n switch  (PKTBYTE_TYPE(pktbyte)) 

{ 

ski p key : 

n 

n n 

skip  = SKIP_T0_KEY; 

n 

n n 

goto  skippkt; 

s k i pname : 

Q 

n n 

skip  = SKIP_SIGS; 

n 

n u 

goto  ski ppkt ; 

s k i pu n k : 

s k i p s i g : 

a 

n □ 

skip  = SKIP_TRUST; 

n 

Q n 

goto  skippkt; 

Q 

a 

default: 

n 

Q a 

/* 

n 

n u 

* Add  it  as  an  unknown  object 

if  it's  not 

n 

n n 

* thing  in  the  keyring... 

Q 

n n 

*/ 

□ 

n n 

if  (liter. level)  { 

n 

n n 

n i = r i ng  F i 1 e Log  ( f i 1 e , 

(union  Ri ngOb j ect 

n 

Q n 

n n 0,  fpos,  PGPERR_TROUBLE_UNXUNK) ; 

n 

u u 

n 

A 

n 

n n 

n a goto  failed; 

n 

n □ 

n goto  skipunk; 

n 

n Q 

> 

n 

Q n 

if  (len  > RINGUNK_MAXLEN) 

{n/* 

Too  big  */ 

n 

n n 

n i = r i ng F i 1 e Log ( f i 1 e. 

(union  RingObject 
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□ 

□ 

a 

n n len,  fpos,  PGPERR_TR0UBLE_UNK2BIG); 

□ 

n 

a 

a 

A 

O 

n 

n 

a 

n n goto  failed; 

n 

u 

a 

n goto  skipunk; 

n 

n 

a 

> 

n 

n 

a 

/*  Read  in  the  unknown  for  hashing  */ 

n 

n 

a 

buf  = r i ng Re s e r ve ( poo L , ( s i ze_t ) L en  ) ; 

n 

u 

a 

if  (!buf) 

n 

n 

a 

n goto  fatal; 

n 

n 

a 

size  = pgp F i 1 eRead ( buf , Csize_t)len,  file->f) 

r 

n 

□ 

a 

if  (size  !=  (size_t)len) 

o 

n 

a 

n goto  readerr; 

n 

n 

a 

poo  1 ->p k t b u f 1 en  = size; 

n 

n 

a 

i = ringAddUnkCfile,  Siter,  fpos,  pktbyte); 

□ 

n 

a 

if  ( i < 0 ) 

n 

n 

a 

n goto  failed; 

n 

n 

a 

obj  = i t e r . s t a c kC i t e r . 1 e ve 1 -1 ] ; 

n 

n 

a 

n 

Q 

a 

/*  Unexpected  packet  */ 

n 

n 

a 

i = r i ng F i 1 e Log ( f i 1 e , obj,  pktbyte,  fpos. 

a 

n 

a 

PGPERR_TROUBLE_UNKPKTBYTE); 

a 

Q 

a 

if  ( i < 0 ) 

u 

n 

a 

n goto  failed; 

a 

n 

a 

break; 

u 

n 

case  PKTBYTE.COHHENT : 

a 

n 

a 

/*  Silently  ignore  this  packet  */ 

# i f nd  e f 

WRAP_N0NE 

n 

a 

a 

/*  peek  inside  comment  packets  if  we  wrap  them  */ 

Q 

a 

a 

if  (len)  { 

a 

a 

a 

n byte  innerbyte; 

n 

a 

a 

n /*  Peek  at  first  byte,  then  back  up  */ 

n 

a 

a 

n i = pg p F i 1 e Re  a d ( & i n n e r by t e , 1,  file->f) 

r 

n 

a 

a 

n pgpFileSeek  (file->f,  -1,  SEEK_CUR); 

n 

a 

a 

n if(i<0) 

n 

a 

a 

n n goto  readerr; 

n 

a 

a 

n if  (PKTBYTE_TYPE(innerbyte)  ==  PKTBYTE. 

PUBKEY  1 1 

D 

a 

a 

n n PKTBYTE_TYPE(innerbyte)  ==  PKTBYTE. 

PUBSUBKEY) 

Q 

a 

a 

n n break ;n  /*  Read  contents  of  comment  packet 

n 

a 

a 

n > 

n 

a 

a 

> 

# e n d 1 f 

ski ppkt 

n 

a 

a 

trustmissing  |=  trustf; 

n 

a 

a 

trustf  = 0; 

n 

a 

a 

dirty  = 1; 

skiptrust: 

n 

a 

a 

i = pg p F i 1 e S ee k ( f i 1 e-> f , len,  SEEK. CUR); 

□ 

a 

a 

II 

H 

a 

a 

n goto  readerr; 

n 

a 

a 

break; 

□ 

a 

case  PKTBYTE. PUBKEY : 

Q 

a 

case  PKTBYTE. PUBSUBKEY : 

n 

a 

a 

trustmissing  |=  trustf; 

n 

a 

a 

trustf  = 1; 

n 

a 

a 

if  (skip  & SKIP. KEY) 
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D 

n 

a 

B 

goto  skippkt; 

D 

n 

n 

skip  = 0 ; 

n 

a 

a 

/* 

Check  for  grossly  oversized  key  */ 

a 

a 

n 

i f 

CLen  > RINGKEY_HAXLEN)  { 

u 

a 

n 

B 

i = r i n g F i L e Log ( f i L e , (union  RingObject  * 

n 

a 

Q 

B 

n Len,  fpos,  PG P E R R_T RO UB L E_KE Y2 B I G ) ; 

c 

n 

n 

B 

if  ( i < 0 ) 

tt 

n 

□ 

B 

n goto  failed; 

D 

a 

n 

B 

goto  skipkey; 

□ 

a 

n 

> 

□ 

a 

B 

buf 

= r i n g Re s e r ve ( poo  1 , ( s i z e_ t ) 1 e n ) ; 

n 

n 

B 

i f 

( ! buf  ) 

n 

a 

B 

B 

goto  fatal; 

s 

n 

B 

size  = p g p F i 1 e Re  a d ( bu  f (size_t)Len,  fiLe->f) 

Q 

n 

B 

i f 

(size  !=  (size_t)len) 

□ 

n 

B 

B 

goto  readerr; 

U 

a 

B 

poo L ->p k t bu f L e n = size; 

U 

Q 

B 

i = 

r i n g Ad d Key ( f i 1 e , &iter,  fpos,  trusted. 

n 

n 

B 

B 

PKTBYTE_TYPE(pktbyte)); 

Q 

a 

B 

i f 

(i  < 0) 

□ 

a 

B 

B 

goto  failed; 

□ 

a 

B 

skip  = i ; 

□ 

a 

B 

trustf  = 1; 

n 

n 

B 

break; 

n 

n 

case 

PKTBYTE_SECKEY: 

n 

a 

case 

PKTBYTE_SECSUBKEY : 

Q 

a 

B 

trustmissing  |=  trustf; 

n 

n 

B 

trustf  = 1; 

D 

u 

B 

i f 

(skip  S SKIP_KEY) 

n 

a 

B 

B 

goto  skippkt; 

n 

a 

B 

skip  = 0 ; 

n 

n 

B 

/* 

Check  for  grossly  oversized  key  */ 

n 

n 

B 

i f 

(len  > RINGSEC_MAXLEN)  { 

Q 

□ 

B 

B 

i = r i ng F i 1 e Log ( f i 1 e,  (union  RingObject  * 

U 

Q 

B 

B 

n len,  fpos,  PGPERR_TR0UBLE_KEY2BIG); 

□ 

n 

B 

B 

if  ( i < 0 ) 

n 

a 

B 

B 

n goto  failed; 

□ 

o 

B 

B 

goto  skipkey; 

n 

n 

B 

> 

n 

a 

B 

buf 

= r i n g Re s e r ve ( poo  1 , ( s i ze_t  ) 1 en  ) ; 

a 

a 

B 

i f 

( ! buf) 

a 

□ 

B 

fl 

goto  fatal; 

a 

a 

B 

size  = pg p F i L e R ea d ( b u f , (size_t)Len,  fiLe->f), 

a 

□ 

B 

i f 

(size  !=  (size_t)len) 

D 

n 

B 

B 

goto  readerr; 

H 

n 

B 

poo L ->p k t b u f L e n = size; 

n 

a 

B 

i = 

ringAddSec(file,  &iter,  fpos. 

n 

a 

B 

B 

n PKTBYTE_TYPE(pktbyte)  ); 

n 

Q 

B 

i f 

(i  < 0) 

n 

a 

B 

B 

goto  failed; 

skip  = 
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n 

a 

a 

trustf  = 1; 

n 

a 

a 

break; 

n 

a 

case 

PKTBYTE_NAME : 

□ 

a 

a 

trustmissing  |=  trustf; 

Q 

a 

a 

trustf  = 1; 

n 

a 

a 

i f 

(skip  & SKIP_NAHE) 

Q 

a 

a 

a 

goto  skippkt; 

Q 

a 

a 

skip  = 0; 

n 

a 

a 

if 

(iter. Level  < 1)  ( 

n 

a 

a 

a 

i = ringFileLoglfile,  (union  RingObject  * 

n 

a 

a 

a 

n e,  fpos,  PGPERR_TROUBLE_UNXNAME); 

□ 

a 

a 

a 

if  ( i < 0 ) 

n 

a 

a 

a 

n goto  failed; 

n 

a 

a 

a 

goto  ski pname; 

n 

a 

a 

> 

n 

a 

a 

/* 

Check  for  grossly  oversized  name  */ 

n 

a 

a 

i f 

(Len  > RINGNAHE_MAXLEN)  { 

n 

a 

a 

a 

i = r i ng F i 1 e Log ( f i L e , (union  RingObject  * 

Q 

a 

a 

a 

n Len,  fpos,  PGPERR_TR0UBLE_NAME2BIG); 

n 

a 

a 

a 

if  ( i < 0 ) 

n 

a 

a 

a 

n goto  failed; 

n 

a 

a 

a 

goto  skipname; 

n 

a 

a 

> 

n 

a 

a 

buf 

= r i ngRese rve ( poo L , ( s i z e_ t ) L e n ) ; 

a 

a 

a 

if 

( ! buf) 

a 

a 

a 

a 

goto  fatal; 

a 

a 

a 

size  = pg p F i L e R ea d ( bu f , (size_t)Len,  file->f) 

a 

a 

a 

i f 

(size  !=  (size_t)Len) 

a 

a 

a 

a 

goto  readerr; 

a 

a 

a 

poo L->pktbuf len  = size; 

n n n i = ringAddNameCfile,  Siter,  fpos); 

n n n if(i<0) 

n n n n goto  f ai  led; 

a a n skip=i; 


t rus  t -f 


1; 


a 

a 

a 

break; 

a 

a 

case 

PKTBYTE_SIG : 

a 

a 

a 

trustmissing  |=  trustf; 

a 

a 

a 

trustf  = 1 ; 

a 

a 

a 

a 

a 

a 

i f 

(skip  8 SKIP_SIG) 

a 

a 

a 

a 

goto  skippkt; 

a 

a 

a 

skip  = 0 ; 

a 

a 

a 

if 

(iter.  L eve  L < 1 ) f n 

a 

a 

a 

a 

i = r i ng F i L e Log ( f i L 

a 

a 

a 

a 

n 0,  fpos,  PGPERR 

a 

a 

a 

a 

if  ( i < 0 ) 

a 

a 

a 

a 

n goto  failed; 

a 

a 

a 

a 

goto  skipsig; 

/*  No  key  yet  - huh?  */ 
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n □ 
n a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 


n > 

n if  (Len  > R I NG S I G_M AX L E N ) fa/*  Sig  too  damn  big  */ 

n a i = r i ng F i L e Log ( f i L e , (union  RingObject  *)NULL, 

nan  Len,  fpos,  PG P E R R_T ROU B LE_S I G 2 B I G ) ; 
a a if(i<0) 

n a a goto  failed; 

a a goto  skipsig; 

a > 

a /*  Read  in  the  signature  for  future  analysis  */ 
n buf  = r i ng R e s e r V e ( poo L , ( s i z e_t ) L en ) ; 
a if  ( ! buf ) 
n a goto  fatal; 

n size  = pgpFileReadCbuf,  Csize_t)Len,  fiLe->f); 
a if  (size  !=  (size_t)Len) 

a a goto  readerr; 

a pooL->pktbuflen  = size; 


a a 
a a 
a a 
a a 
a a 


a i = r i ng Add S i g ( f i I e , &iter,  fpos); 
a if  (i  <0) 
a a goto  failed; 
n skip=i; 
a trustf  = 1; 


a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 


a 

/* 

We 

wi  L L 

put  these  values  into  the  key  if  sig  is  valid  */ 

a 

sigkeyparent  = NULL; 

a 

s i g key va L i d i t y = 0; 

a 

0 b j 

= 

iter. 

stackCiter. LeveL-1]; 

a 

i f 

(i 

= = 0) 

{ 

a 

a 

/* 

See 

if  a self  signature;  if  so,  store  some  info  */ 

a 

a 

RingObject  *sigowner  = obj;  /*  top  Level  key  above  sig  */ 

a 

a 

RingObject  *sigparent  = NULL;  /*  first  key  above  sig  */ 

a 

a 

/* 

Find 

key  above  sig  */ 

a 

a 

do 

a 

a 

a 

sigowner  = s i goune r->g . up; 

a 

a 

a 

i f 

( OB J I S KE Y ( s i g owne r ) S&  Isigparent)  { 

a 

a 

a 

n 

sigparent  = sigowner; 

a 

a 

a 

> 

a 

a 

> 

while 

(lOBJISTOPKEYCsigowner)); 

a 

a 

i f 

(obj 

->s.by  ==  sigowner)  { 

a 

a 

a 

/* 

Self  signature  */ 

a 

a 

a 

byte  const  *pk; 

a 

a 

a 

pk 

= r i ng S i g F i nd Subpa c ke t ((const  unsigned  char  *)  buf. 

a 

a 

a 

a 

n n n n n S I G S U B_KE Y_ E X P I R AT  I ON , 

a 

a 

a 

a 

n n n n n 0,  NULL,  NULL,  NULL, 

a 

a 

a 

a 

n B n n n NULL,  NULL); 

a 

a 

a 

i f 

(pk)  { 

a 

a 

a 

a 

word32  keyexp; 

a 

a 

a 

a 

keyexp  = ( wo r d32 ) ( ( u n s i g n ed ) p k C 0 D <<8 | p k C 1 ] ) <<  16  | 

a 

a 

a 

a 

B B n n ( ( u n s i g ned ) p k C 2 3 <<8 1 p k C 3 ] ) ; 

a 

a 

a 

a 

/*  These  values  will  be  used  Later  if  sig  is  trusted 

a 

a 

a 

a 

sigkeyparent  = sigparent; 

a 

a 

a 

a 

sigkeyvalidity  = (word16)  (keyexp  / (24  * 3600)); 

a 

a 

a 

> 

a 

a 

> 

a 

> 

a 

break; 

a a case  PKTBYTE  TRUST: 
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n 

n 

n 

if  ( ! t rustf ) 1 

n 

n 

n 

n i = r i ng F i 1 eLog ( f i L e,  NULL,  Len,  fpos. 

o 

Q 

n 

n PGPERR_TROUBLE_UNXTRUST); 

a 

n 

o 

n i f ( i < 0 ) 

n 

n 

a 

n n goto  failed; 

n 

n 

D 

n goto  skippkt; 

n 

n 

n 

> 

n 

n 

n 

pgpAssertCiter. Level); 

Q 

Q 

n 

trustf  = 0; 

n 

n 

n 

if  (skip  & SKIP_TRUST) 

n 

n 

n 

a goto  skippkt; 

n 

n 

n 

skip  = 0; 

D 

n 

n 

/*  If  not  a trusted  keyring,  ignore  trust  packet 

n 

n 

n 

if  (Itrusted) 

n 

n 

n 

n goto  skiptrust; 

□ 

a 

n 

obj  = i t e r . s t a c k C i t e r . L e ve L -1  ] ; 

D 

n 

n 

if  (OBJISSECCobj  ) ) { 

n 

tt 

n 

n pg p A s s e r t ( i t e r . L e ve L >=  2); 

□ 

n 

Q 

n obj  = iter.stackCiter.LeveL-2D; 

o 

n 

Q 

> 

PGPTRUSTHODEL==0 

n 

n 

n 

/*  Skip  bad  trust  packets  */ 

Q 

n 

n 

if  (Len  !=  1 ) ( 

n 

s 

n 

n i = r i ng F i L e Log ( f i L e,  obj,  Len,  fpos. 

n 

n 

n 

n n PGPERR_TROUBLE_BADTRUST) ; 

n 

n 

n 

n goto  skippkt; 

n 

n 

n 

> 

u 

n 

Q 

if  ( pg p F i L eRe a d ( &c , 1,  fiLe->f)  !=  1) 

n 

n 

n 

n goto  readerr; 

D 

n 

n 

i = c & 255; 

D 

Q 

n 

/*  Set  the  appropriate  flags  */ 

a 

a 

o 

pgpAssert ( ! 0BJISSEC(obj ) ) ; 

n 

n 

n 

switch  ( r i ng Ob j e c t Ty p e ( ob j ) ) { 

n 

n 

n 

default: 

n 

a 

n 

n pgpAssert(0); 

n 

n 

n 

case  RINGTYPE_KEY: 

a 

n 

n 

n tp  = &ob j ->k . t r us t ; 

n 

n 

n 

n break; 

Q 

n 

n 

case  RINGTYPE_NAME : 

□ 

Q 

n 

n tp  = &ob j ->n . t r u s t ; 

n 

Q 

n 

n break; 

a 

n 

n 

case  RINGTYPE_SIG : 

n 

n 

n 

n tp  = Sob j ->s . t r us t ; 

n 

Q 

n 

a break; 

□ 

n 

n 

case  RINGTYPE_UNK: 

n 

n 

Q 

n tp  = Sob j ->u . t rus t ; 

n 

n 

n 

n break; 

n 

n 

n 

> 

n 

Q 

n 

if  (obj->g . f Lags  & R I NGOB J F_TRU ST  ) { 

n 

n 

n 

n if  (i  !=*tp) 

n 

Q 

n 

n n trustdirty  = 1; 

n 

n 

□ 

> else  { 

n 

n 

n 

n *tp  = (byte)i; 

n 

n 

D 

n obj->g. flags  |=  R I NGOB J F_T RU ST ; 

n 

n 

n 

> 

#e  L s e 

/*  1 

NEWTRUST  */ 
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n 

B 

B 

f 

(OBJ ISNAMECob j ) ) { 

n 

fl 

B 

B 

/* 

□ 

B 

B 

fl 

* Name  trust  packets  can  be  up  to  3 bytes 

n 

B 

fl 

fl 

* long: 

n 

B 

fl 

fl 

* Byte  1:  old-style  trust  packet 

n 

B 

fl 

B 

* Byte  2:  validity  of  name 

□ 

B 

B 

B 

* Byte  3:  confidence  in  name  as  introduce 

n 

B 

B 

fl 

*/ 

n 

B 

fl 

B 

1 

f(len<1  II  len>3){ 

B 

B 

B 

fl 

fl 

i = ringFileLogCfile,  obj,  len. 

n 

B 

fl 

fl 

fl 

a fpos,  PGPERR_TROUBLE_BADTRUST)  ; 

n 

B 

fl 

fl 

fl 

goto  skippkt; 

Q 

B 

fl 

fl 

> 

n 

B 

fl 

fl 

i 

f ( pg p F i 1 e Rea d ( 8 c , 1,  file->f)  !=  1) 

D 

B 

fl 

fl 

B 

goto  readerr; 

n 

B 

fl 

fl 

i 

= c 8 255; 

a 

B 

fl 

B 

/*  Default  trust  and  validity  bytes  */ 

n 

B 

B 

fl 

switch  (i  S PGP_NAMETRUST_MASK)  { 

n 

B 

fl 

fl 

case  PGP_NAMETRUST_COMPLETE : 

n 

B 

fl 

fl 

/*  j = poo  1 -> t h r e s h 0 1 d ; */ 

Q 

B 

fl 

fl 

fl 

j = poo  1 -> c omp 1 e t e c 0 n f i d e n c e ; 

□ 

B 

B 

fl 

fl 

break; 

n 

B 

fl 

fl 

case  PGP_NAMETRUST_HARGINAL: 

Q 

fl 

B 

fl 

/*  j = poo  1 -> t h r e s h 0 1 d / 2 ; */ 

n 

B 

fl 

fl 

fl 

j = poo  1 ->ma r g i n a 1 con f i d e n c e ; 

□ 

B 

B 

fl 

fl 

break; 

n 

B 

B 

B 

default  : 

n 

B 

B 

fl 

B 

j = 0; 

B 

B 

fl 

fl 

B 

break; 

B 

B 

B 

fl 

> 

B 

B 

B 

fl 

pgpAssert(OBJISKEY(obj->g.up)); 

B 

fl 

fl 

B 

k 

= ob j ->g . u p-> k . t r u s t ; 

B 

B 

fl 

fl 

switch  (k  S PGP_KEYTRUST_HASK)  { 

B 

fl 

B 

fl 

case  PGP_KEYTRUST_ULTIHATE : 

B 

fl 

fl 

fl 

fl 

k = PGP_NEWTRUST_INFINITE; 

B 

fl 

fl 

fl 

Q 

break; 

B 

fl 

fl 

B 

case  PGP_KEYTRUST_COMPLETE : 

B 

fl 

B 

fl 

fl 

k = poo  1 -> c omp 1 e t e c on f i d e n c e ; 

B 

fl 

fl 

B 

□ 

break; 

B 

fl 

fl 

fl 

case  PGP_KEYTRUST_HARGINAL: 

B 

fl 

fl 

fl 

fl 

k = poo  1 ->ma r g i na  1 c on f i d e n c e ; 

B 

fl 

B 

B 

B 

break; 

B 

fl 

fl 

fl 

case  PGP_KEYTRUST_UNDE FINED : 

B 

fl 

fl 

fl 

fl 

k = PGP_NEWTRUST_UNDEFINED; 

B 

fl 

B 

B 

fl 

break; 

B 

fl 

B 

B 

default  : 

B 

fl 

fl 

fl 

fl 

k = 0; 

B 

fl 

fl 

fl 

fl 

break; 

B 

fl 

fl 

fl 

> 

B 

fl 

B 

fl 

i 

f ( len  > 1)  { 

B 

fl 

fl 

B 

f i le->version  = PG PV E R S I 0 N _3 ; 

B 

fl 

fl 

fl 

fl 

/*  Fetch  validity  */ 

B 

fl 

fl 

B 

fl 

if  ( pgp F i 1 e Rea d ( 8c , 1,  file->f)  !=  1) 

B 

fl 

B 

fl 

fl 

n goto  readerr; 

B 

fl 

B 

B 

□ 

j = c 8 255; 

B 

fl 

fl 

fl 

B 

if  (len  > 2 ) < 

B 

fl 

fl 

B 

B 

n /*  Fetch  confidence  */ 
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Q 

n 

B 

fl 

B 

n if  ( pg p F i 1 e Read ( Sc , 1,  fiLe->f) 

n 

n 

B 

B 

fl 

II 

B 

Q 

Q 

B 

fl 

fl 

a a goto  readerr; 

a 

n 

B 

fl 

B 

a k = c 8 255; 

D 

n 

B 

B 

fl 

> 

O 

□ 

fl 

B 

> 

n 

n 

B 

B 

i f 

(obj->g . f Lags  8 RI NGOBJ F_TRUST ) { 

n 

n 

B 

fl 

B 

if  (i  !=  obj->n. trust 

n 

n 

B 

B 

B 

II  j !=  0 b j ->n . va L i d i t y 

Q 

n 

B 

B 

B 

II  k !=  ob j ->n . conf i dene e 

n 

s 

B 

B 

fl 

II  ( ten  ==  1 ) ! = 

n 

n 

B 

fl 

B 

!NAMEHASNEWTRUST(8obi->n)) 

n 

a 

B 

fl 

B 

a trustdirty  = 1; 

n 

□ 

B 

fl 

> 

else  { 

a 

Q 

B 

B 

fl 

obj->n. trust  = (byte)i; 

u 

n 

B 

B 

B 

ob j ->n . va L i d i t y = (byte)j; 

□ 

n 

B 

fl 

fl 

ob i ->n . c on f i d en c e = (byte)k; 

a 

□ 

B 

fl 

B 

obj->g. flags  |=  RINGOBJ F_TRUST; 

n 

n 

B 

fl 

fl 

if  (Len  > 1) 

n 

s 

B 

fl 

fl 

a NAHESETNEWTRUST(8obj->n); 

n 

n 

B 

B 

B 

obj->n. valid  = r i ngT r u s t To  I n t e r n (j); 

n 

n 

B 

B 

> 

n 

n 

B 

} 

else 

(a  /*  Not  a name  */ 

Q 

B 

B 

B 

1 f 

(Len  ! = 1 ) { 

n 

B 

B 

fl 

fl 

i = r i ng F i L e Log ( f i L e , obj,  Len, 

n 

B 

B 

B 

fl 

a fpos,  PGPERR_TROUBLE_BADTRUST); 

n 

B 

B 

B 

B 

goto  skippkt; 

n 

B 

B 

B 

} 

□ 

B 

B 

B 

i f 

( pg p F i L e Rea d ( 8 c , 1,  fiLe->f)  !=  1) 

n 

B 

B 

B 

B 

goto  readerr; 

n 

B 

B 

B 

1 

= c 8 255; 

n 

B 

B 

B 

/* 

Set  the  appropriate  flags  */ 

n 

B 

B 

B 

pgpAssert( ! OBJlSSECCobj  ) ); 

n 

B 

B 

fl 

switch  ( r i ng Ob j e c t Ty pe { ob j ) ) { 

n 

B 

B 

fl 

default: 

n 

B 

B 

fl 

B 

pgpAssert(0); 

n 

B 

B 

fl 

case  RINGTYPE_KEY : 

n 

B 

B 

fl 

B 

tp  = Sob j ->k . t rust ; 

□ 

B 

B 

fl 

fl 

break; 

n 

B 

B 

fl 

case  RINGTYPE_SIG : 

u 

B 

B 

fl 

B 

tp  = Sob j->s . t rust; 

n 

B 

B 

fl 

B 

break; 

n 

B 

B 

fl 

case  RINGTYPE_UNK: 

n 

B 

B 

B 

B 

tp  = Sob j->u . t rust; 

n 

B 

fl 

fl 

B 

break; 

n 

B 

B 

B 

> 

n 

B 

fl 

B 

i f 

(ob j->g . f Lags  8 R I NG OB J F_T R U S T ) { 

D 

B 

fl 

B 

B 

if  (i  !=  *tp) 

D 

B 

fl 

fl 

B 

a trustdirty  = 1; 

n 

B 

fl 

B 

} 

else  { 

n 

B 

fl 

B 

fl 

*tp  = (byte)i; 

n 

B 

B 

B 

B 

obj->g. flags  |=  R I NGOB  J F_TRLI  ST  ; 

n 

B 

B 

B 

> 

o 

B 

B 

} 

#end  i f 

n 

B 

fl 

/* 

Handle  information  from  s e L f -s i g n a t u r e s */ 

n 

B 

B 

i f 

(OBJ ISSIGCob j ) S&  (obj->s. trust  & PG P_ S I GTRU ST F_C H E C KE D ) ) { 
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□ 

n 

Q D 

i f 

(sigkeyparent)  ( 

□ 

n 

n n 

n 

s i g keypa rent->k . va 1 i d i ty  = sigkeyval 

i di ty; 

□ 

n 

n n 

n 

sigkeyparent  = NULL; 

n 

n 

n n 

n 

sigkeyvalidity  = 0; 

n 

Q 

n n 

> 

□ 

n 

n > 

n 

n 

a break; 

s 

n 

} / * s w i 

t c h 

(PKTBYTE_TYPE(pktbyte) ) */ 

a 

> 

/*  while  ((pktbyte  = p k t By t eG e t ( f i 1 e-> f ) ) > 0)  */ 

□ 

/* 

Okay,  we' 

r e 

done  - handle  errors  in  pktByteGet() 

and  return 

n 

i f 

(pktbyte 

< 0)  { 

Q 

n 

/* 

D 

Q 

* Call 

i t 

fatal  if  it  was  on  the  first  packet. 

May  not 

n 

D 

* have 

been  a keyring  file  at  all. 

a 

n 

*/ 

□ 

n 

if  (iter 

.level  ==  0)  { 

□ 

s 

a ringErr 

(file,  fpos,  pktbyte); 

D 

Q 

a goto 

fatal; 

n 

n 

} 

□ 

n 

len  = ( wo r d32 ) e r r n 0 ; a /*  Capture  before  *ANY* 

libc  calls 

1 oe  r ro  r : 

Q □ 


error  = pktbyte; 


n 

n 

i 

= ringFileLog(file, 

(union  RingObject  *)NULL, 

n 

Q 

fpos. 

pktbyte); 

□ 

n 

i f 

( i < 0 ) 

□ 

n 

n 

goto  failed; 

n 

s 

/* 

A keyring  with  errors  is  *always*  dirty  */ 

n 

□ 

dirty  = 1 ; 

a 

n 

□ 

n 

Q 

□ 

□ 

a 

n 

□ 

Q 

Q 

n 

n 

n 

n 

a 

D 


/* 

* Did  we  get  any  bad  trouble  reports?  "Dirty"  means  that 

* the  result  of  writing  out  the  RingFile's  set  will  not 

* be  the  same  as  the  original  file.  Some  troubles  don't 

* have  that  property. 

*/ 

for  (trouble  = f i I e->t roub I e;  trouble;  trouble  = t roub  I e->next  ) { 
n if  (trouble->type  !=  PG P E R R_T ROUBLE_ V E R S I ON_BUG_P R E V 
n &S  trouble->type  !=  PG P E R R_T ROUB L E_0 L D S E C 

n &&  t rouble->type  !=  PG PE R R_T RO U B LE_N E W S E C 

a S&  trouble->type  !=  PG P E R R_T RO U B LE_B A R E KE Y ) 

a { 

a a break; 
a } 

} 

if  (dirty  ||  trouble) 
a r i ng Poo  I Ha r k D i r t y ( poo  I , mask); 

if  (trusted  SS  (trustdirty  ||  ( t r u s t m i s s i n g & 1))) 

a ringPoolMarkTrustChanged(pool,  mask); 


B r i ng So r t Key s ( poo  I ) ; 
a r i ng Poo  I L i s t S i g s By ( poo  I ) ; 


a return  file; 
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n / * 

n * Read  error:  figure  out  error  code  and  use  general  error 
n * handler.  Not  fatal, 

n * / 

r ea  d e r r : 

a /*  If  an  error,  or  neither  error  nor  eof  (i.e.  unknown),  error  */ 

n len  = ( wo r d32 ) e r r no ; n /*  Capture  before  *ANY*  libc  cals  */ 

n if  (pgpFileError(file->f)  ||  !pgpFileEofCfile->f)) 
n n pktbyte  = PG P E R R_KE Y I 0_ R E A D I NG  ; 
n else 

a a pktbyte  = PG P E R R_KE Y I 0_ E 0 F ; 
n goto  ioerror; 

n / * 

n * Fatal  errors:  undo  all  work  in  memory,  return  NULL, 
n * *error  is  non-zero, 

n * / 

fatal : 

n i = r i ng Poo  I E r r o r { poo  I ) ->e r r o r ; 

failed:nn  n /*  Generic  fatal  entry  point,  error  in  "i"  */ 
n *error  = i; 

n ( VO i d ) r i ng F i I e C I o s e ( f i I e ) ; 

n return  NULL; 

} 

/**  Keyring  writing  (this  is  a *lot*  simpler!)  **/ 

/* 

* Write  out  the  trust  packet  for  an  object. 

* 

* This  is  generally  pretty  simple,  but  there  are  different  formats  based 

* on  the  object  type  and  version,  and  there  is  a kludge  to  omit 

* writing  out  trust  on  signatures  on  keys  if  the  signature  is  good. 

* This  is  a PGP  2.x  compatibility  feature,  since  that  chokes  if  it 

* finds  a trust  packet  on  a key  signature. 

*/ 

static  int 

r i ng CopyT r us t ( un i on  RingObject  const  *obj,  struct  PgpFile  *f, 

PgpVersion  version) 

{ 

n char  trustCSD; 
n size_t  trustlen  = 1; 
n int  i ; 

n /*  Suppress  warning  */ 
n (void)  version; 

n switch  ( r i n gOb j e c t Ty pe ( ob j ) ) { 
n case  R I NGT Y P E_KE Y : 

n n trustC0D  = (char)obj->k. trust; 
n n break; 

n case  R I NGT Y P E_S E C : 

n n trustCOD  = ( c h a r ) ob j ->g . u p-> k . t r u s t ; 
n B break; 

n case  RI NGTYPE_NAME : 

B B /* 

B B * Names  have  1 to  3 bytes  of  trust.  The  first  byte 
C[CHK:dd82e6ec46555c282536644aaa776fcf6e2af32709a110116e4d9c0d37feeb70d]] 
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is  a 2 . x-c ompa t i b I e trust  byte.  The  second  is 
a validity  value  (how  sure  are  we  that  this  name 
is  correct  - computed),  and  the  third  is  a confidence 
in  the  named  individual  as  an  introducer. 

Note:  If  we  are  requested  to  write  out  a pre-PGP  3.0 

keyring,  the  name  validity  is  not  converted  back  to 
an  old  KEYLEGIT  value.  We  could  do  this,  but  it's 
better  that  a maintenance  pass  is  run  prior  to 
using  such  a keyring. 

aaa  is  this  really  the  best  way  to  handle  it? 


n n * 

B n * 

B B * 

B B * 

B B * 

B B * 

B B * 

Bn  * 

B B * 

B B * 

n B * 

n n * / 

B n trustC03  = (char)obj->n. trust; 
#if  PGPTRUSTHODEL>0 

B B if  (version  >=  PGPVERSION  3)  ( 


B n 

B n 

B B 

B B 

#end  i f 

B n 


trustCID  = ( c h a r ) ob j ->n . va I i d i t y ; 
trustC23  = ( c h a r ) ob j ->n . c on f i de n c e ; 
trustlen  = 3; 


break; 

case  RINGTYPE_SIG : 

/* 

* 2.x  compatibility  kludge:  Don't  write  trust 

* on  good  compromise  certificates.  PGP  2.x 

* maintenance  dies  (assert  fail)  if  it  finds 

* trust  packets  on  key  sigs. 

*/ 

trustC0]  = (char)obj->s. trust; 
if  (/*version  < PGPVERSI0N_3  &&*/ 

OB J I S KE Y ( ob j ->g . u p ) S&  obj->g.up  ==  obj->s.by 
S&  obj->s.type  ==  PGP_S I GT YPE_KE Y_C0MPR0MI S E ) 
n return  0; 
break; 
default: 

pgpAssert(0); 


= pktBy tePut ( f , PKTB YT E_BU I LD ( PKTB YT E_TRU ST , 0),  trustlen); 
if  ( i < 0 ) 
n return  i ; 

if  ( pgp F i I e W r i t e ( t r us t , trustlen,  f)  !=  trustlen) 
n return  PG P E R R_KE Y I 0_ W R I T I NG ; 
return  0; 


/*  Return  the  length  of  the  packet  we  will  create  for  the  object  */ 
static  int 

r i ng Pa c ke t S i z e (struct  RingSet  const  *set,  union  RingObject  *obj) 

{ 

B void  const  *buf; 
n size_t  len; 
n int  i ; 
n byte  pktbyte; 

n static  int  const  p k t by t e s C R I NGT Y P E_H A X ] = { 
n B PKTBYTE_BUILD(PKTBYTE_PUBKEY,  1), 

B n PKTBYTE_BUILD(PKTBYTE_SECKEY,  1), 

B n PKTBYTE_BUILD(PKTBYTE_NAME,  0), 

B n PKTBYTE_BUILD(PKTBYTE_SIG,  1) 

CCCHK:e469fac701c949cd22f16867e72b2dfb805b2bba2ce88cceebcb5bb37d9cfae82DD 
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n >; 

n pgpAssert  ( ob j ->g . ma s k S set->mask); 
n buf  = r i ng Fe t c hOb j e c t ( se t , obj,  &Len); 
n i = r i ngOb j e c t Type ( obj ) ; 
a pgpAssertCi  > 0 88  i <=  R I N GT Y PE_M AX ) ; 
n if  (OBJISSUBKEYCob j ) ) 

n n pktbyte  = PKTB YT E_BU I LD ( PKTB YT E_PU BS U BKE Y , 1 ) ; 
n else  if  ( OB J I S S E C ( ob j ) 88  OB J I S S UBKE Y ( ob j ->g . up ) ) 
n n pktbyte  = PKTB YT E_BU I LD ( PKTB YT E_S E C S UBKE Y , 1 ) ; 
n else 

n n pktbyte  = (i  ==  R I NGT Y P E_U N K ) ? ob j -> u . p k t by t e : p k t by t e s C i - 1 D ; 
n return  Len  + pktByteLen  (pktbyte,  Len); 

> 


/*  Return  the  Length  of  the  object  and  all  its  sub  objects  */ 
static  int 

r i ng Pa c ke t S i z e A L L (struct  RingSet  const  *set,  union  RingObject  *obj) 
{ 

n si ze_t  Len; 

n union  RingObject  *obj1,  *obj2; 


a 

□ 

n 

n 

□ 

n 

n 

n 

a 

a 

n 

D 

Q 

n 

n 

D 

a 

a 

y 

a 


Len  = r i ng Pa c ke t S i z e (set,  obj); 
if  ( ! OBJISBOKob  j ) ) { 


for  (objl  = obj->g.down;  objl;  objl  = obj1->g.next)  { 
n if  ( ! ( ob j 1 ->g . ma s k 8 set->mask)) 
n cont i nue ; 

pgpAssert  ( ! OB J I S S E C ( ob j 1 ) ) ; 

Len  +=  r i ng Pa c ke t S i z e (set,  objl); 
if  ( ! OBJ  ISBOKob  j 1 ) ) { 


for  (obj2  = obj1->g.down;  obj2;  obj2  = 
n if  ( ! ( ob j 2->g . ma s k 8 set->mask)) 
n n continue; 

Q pgpAssert  ( ! OB J 1 S S E C ( ob j 2 ) ) ; 
n Len  +=  r i ng Pa c ke t S i z e (set,  obj2); 
} 


obj  2->g . next  ) { 


return  Len; 


/* 

* For  backwards  c ompa t i b i L i t y we  are  wrapping  the  new  key  types. 

* For  secret  objects,  don't  caLL  this. 

* We  actuaLLy  have  three  modes,  WRAP_N0NE  where  we  don't  wrap 

* anything,  WRAP_SUB  where  we  onLy  wrap  the  subkey,  and  WRAP_NEW 

* where  we  wrap  keys  with  post  RSA  aLgorithms. 

* We  output  a comment  header  of  the  necessary  size  for  obj,  which 

* is  in  set,  to  fiLe  f.  We  return  an  error  code  or  0 for  success. 
*/ 

static  int 

r i ng W r a pOb j e c t (struct  RingSet  const  *set,  union  RingObject  *obj, 
n struct  PgpFiLe  *f) 

{ 

n int  i ; 
n size_t  Len; 
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#if  def ined(WRAP_NONE) 
n (void)set; 
n (void)obj; 
n (void)f; 
n return  0; 

#elif  d e f i ne d ( W R A P_ S UB ) ; 
n /* 

n * Just  wrap  subkeys,  we'lL  Let  old  PGP  complain  about  DSA  keys, 
n * It  can't  handle  subkeys  as  we  have  them  now. 
n * / 

n if  ( ! OBJ ISSUBKEYCob j ) ) 
n n return  0; 

# e I s e 

n * Wrap  top  Level  DSA  keys  and  everything  under  them  */ 
n if  ( ! OBJ ISTOPKEYCob j ) ) 
n n return  0; 

# en d i f 

a if  { o b j -> k . p ka L g <=  3) 
n n return  0; 

n if  ( r i ngBe s t S e c ( s e t , obj)) 
n n return  0; 

n Len  = ringPacketSizeALL  (set,  obj); 

n i = pktBytePut  (f,  PKTB YT E_BU I L D ( PKTB YT E_ C OMM E NT , 0),  len); 
n return  i; 

} 

I* 

* Copy  the  packet  to  the  given  file.  If  "trust"  is  non-negative, 

* it  is  appended  as  a trust  packet.  If  "file"  is  non-NULL  and  the 

* write  is  successful,  the  Location  in  that  file  is  Listed  as  a 

* position  for  the  object. 

* 

* This  function  is  careful  to  not  add  a FilePos  to  the  object  until 

* it  is  known  to  be  completely  written  out. 

* 

* If  keyobj  is  non-null,  it  is  a key  object  corresponding  to  the  secret 

* object  we  are  writing  out,  and  we  must  set  the  FilePos  for  it,  too. 

*/ 

static  int 

r i ng C o py 0 b j e c t ( s t r u c t RingSet  const  *set,  union  RingObject  *obj, 
n union  RingObject  *keyobj,  struct  PgpFile  *f,  int  writetrust, 
n PgpVersion  version,  struct  RingFile  *fiLe) 

{ 

n void  const  *buf; 
n size_t  Len; 
n inti; 
n byte  pktbyte; 

n Long  pos  = 0;n  /*  Initialized  to  suppress  warnings  */ 

n static  int  const  p k t by  t e s C R I N GT  Y PE_H  A X D = ■( 

n n PKTBYTE_BUILD(PKTBYTE_PUBKEY,  1), 

n n PKTBYTE_BUILD(PKTBYTE_SECKEY,  1), 

n n PKTBYTE_BUILD(PKTBYTE_NAnE,  0), 

n n PKTBYTE_BUILD(PKTBYTE_SIG,  1) 

n }; 

n /*  XXX  experimental  backwards  compat  code  */ 
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n /*  Wrap  new-style  objects  for  backwards  compatibility  when  exporting  */ 
n if  C ! f i Le)  { 

n n i = ri ngWrapOb j ect  (set,  obj,  f); 

n n if(i<0) 

n n n returni; 

n > 

n buf  = ringFetchObjectCset,  obj,  8Len); 
n if  ( ! buf ) 

n n return  r i n g S e t E r r o r ( s e t ) -> e r r o r ; 

n /*  If  this  is  a secret  object  and  it  has  the  version  bug, 

a then  *do  not*  fix  it  on  disk.  This  ensures  that  if  the 

a packet  exists  in  more  than  ringFile,  the  packets  remain 

a consistent.  We'Ll  always  have  to  check  for  the  bug  in 

a the  future  anyway,  so  doing  this  doesn't  cause  any  harm.  */ 

a 

a if  (OBJISSECCobj  ) &S  ( ob j ->g . f L a g s & S E C F _ V E R S 1 0N_BUG  ) ) 
a ((byte  *)  buf)C03  = PG P V E R S I 0N_2_6 ; 

a if  (file)  { 
a a pos  = pg p F i L eTe L I ( f ) ; 

a a i f ( pos  ==  -1 ) 

a a n return  PG P E R R_KE Y I 0_ F T E LL; 

a } 

a i = r i ngOb j e c t Ty pe ( ob j ) ; 
a pgpAssert(i  > 0 88  i <=  R I NGT Y P E_H AX  ) ; 
a if  (OBJISSUBKEY(obj  ) ) 

a a pktbyte  = PKTB YT E_BU I LD ( PKTB YT E_PUBS UBKE Y , 1); 
a else  if  ( OB J 1 S S E C ( ob j ) 88  OB J I S S UBKE Y ( ob j ->g . up ) ) 
a a pktbyte  = PKTB YT E_BU I L D ( PKTB YT E_S E C S U BKE Y , 1); 
a else 

a a pktbyte  = (i  ==  R I NGT  YPE_U  N K ) ? ob  j ->u  . p k t by  t e : p k t by  t e s C i -1  II  ; 


a i = p k t By t e Pu t ( f , pktbyte,  len); 
a if(i<0) 
a a return  i; 

a if  ( pg p F i I e W r i t e ( bu f , Len,  f)  !=  len) 
a a return  PGPERR_KEYIO_WRITING; 
a if  (writetrust)  ( 

a a i = r i ng C o py T r u s t ( ob j , f,  version); 
a n if(i<0) 

a a n returni; 

a > 

a /*  ALL  successful  - add  to  file  if  requested  */ 
a if  (file)  f 

a a i = ringAddPos  (obj,  file,  ( wo r d32 ) po s ) ; 
a a if  (keyobj  88  !i) 

a a a i = ringAddPos  (keyobj,  file,  ( wo r d3 2 ) po s ) ; 
a a return  i; 

a } 

a return  0; 

} 


i nt 

r i ngS e t W r i t e ( s t r uc t RingSet  const  *set,  struct  PgpFile  *f, 
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n struct  RingFiLe  **fiLep,  PgpVersion  version,  int  flags) 

{ 

n struct  RingFiLe  *fiLe; 

n struct  Ringlterator  *iter; 

n union  RingObject  *obj,  *sec; 

n union  RingObject  *keyobj; 

n unsigned  Level; 

a ringmask  mask; 

a int  i ; 

a int  writetrust; 

a pgpAssert(set); 

a pgpAssert(f); 

a if  (filep)  { 

a a /*  Set  up  a RingFiLe  to  add  to  */ 

a a pgpAssert(f); 

a a pg p As s e r t ( ! ( se t ->poo L ->f i L ema s k & " s e t ->poo L ->a L L o c ma s k ) ) ; 

a a i = ringBitALLoc(set->pooL); 

n a if(i<0){ 

a a a *fiLep  = (struct  RingFiLe  *)0; 

a n a return  PGPERR_NO_KEYBITS; 

a a > 

a n pgpAssertCi  < HEHRINGBIT); 

a a file  = 8 s e t ->poo I -> f i L e s C i ] ; 

a a mask  = (ringmask)l  <<  i; 

a a pg p A s s e r t ( f i L e-> s e t . ma s k ==  mask); 

a a pg p As s e r t ( ! ( se t->poo L ->f i L ema s k 8 mask)); 

a a s e t ->poo L -> f i L ema s k |=  mask; 


n 

0 

s e t->poo L ->a L L 0 ema s k |=  mask; 

□ 

0 

pgpAssertC !fi Le->set.next); 

0 

0 

fiLe->f  = f; 

0 

0 

f i L e->d e s t ru c t o r = NULL;b  /*  Hay  be  set 

Later  */ 

0 

0 

fiLe->arg  = 0; 

0 

0 

*fiLep  = NULL;b  /*  For  now,  to  be  fixed  Later  */ 

0 

> 

else  { 

0 

0 

file  = NULL; 

0 

0 

mask  = 0; 

o 

> 

0 

iter  = r i n g 1 1 e r C r e a t e ( s e t ) ; 

0 

i f 

(liter)  ■( 

0 

n 

r i n g F i L e C L o s e ( f i L e ) ; a /*  Okay  for  file 

to  be  NULL 

0 

□ 

return  r i ng S e t E r r o r ( s e t ) ->e r ro r ; 

0 

} 

0 

/* 

Okay,  the  main  Loop  */ 

0 

Level  = 1; 

0 

writetrust  = 0;b/*  Silence  warnings  */ 

0 

while  ((i  = r i ng I t e r N ex t Ob j e c t Any wh e r e ( i t e r ) ) 

> 0)  { 

0 

0 

obj  = r i ng 1 1 e r C u r r en t Ob j e c t ( i t e r , ( uns i gned ) i ) ; 

0 

0 

keyobj  = NULL; 
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n 

a 

pgpAssert(obj); 

a 

n 

i f 

(0BJISKEY(obj ))  { 

n 

n 

n 

writetrust  = flags  8 PG P_WR I T ET RU ST_ 

PUB; 

n 

n 

n 

sec 

= ringBestSec(set,  obj); 

n 

a 

n 

if 

( sec ) { 

n 

□ 

D 

a 

keyobj  = obj; 

n 

n 

n 

n 

obj  = sec;n  /*  Write  out  the  sec 

*/ 

a 

n 

n 

n 

if  (0BJIST0P(obj ) ) 

a 

□ 

n 

Q 

n writetrust  = f 1 a g s8PG P_WR I T ET R U ST_ S E C ; 

n 

n 

n 

} 

n 

a 

} 

else 

if  (0BJISSEC(obj ) ) { 

a 

n 

n 

cont i nue; 

n 

n 

> 

a 

a 

i 

= r i n 

g CopyOb j e c t ( se t , obj,  keyobj,  f. 

wri tetrust 

a 

a 

i f 

(i  < 

0) 

a 

n 

n 

break; 

a 

> 

/ * while 

ri ngIternextObj ect Anywhere  */ 

n r i ng 1 1 e r De s t roy ( i t e r ) ; 


version. 


f i L e ) ; 


n 

n / * 

n * If  ue  broke  out  on  error,  close  the  output  file.  We  could  leave 

n * the  partial  file  open,  as  all  the  pointers  that  exist  are  valid, 

n * Is  that  useful? 

n * / 

n if  (i  <088  file) 

n n r i ng F i I e C I o s e ( f i I e ) ; 

n else  if  (filep) 
n n *filep  = file; 


n return  i; 

> 


/* 

* Bring  an  object  into  the  HEHRING. 

*/ 

static  int 

r i ng C a c h eOb j e c t C s t r u c t RingSet  *set,  union  RingObject  *obj) 

{ 

n byte  *buf; 

n byte  const  *pktbuf; 

n size_t  buflen; 

n struct  HemPool  cut; 

n struct  RingFile  *file; 

n int  err; 

n /*  Do  nothing  if  already  there  */ 
n if  (obj->g.mask  8 MEHRINGMASK)  { 
n n return  0; 

n > 

a 

n /*  Get  the  object  into  the  pktbuf  */ 

n pktbuf  = (byte  const  * ) r i ng F e t c hOb j e c t (set,  obj,  8buflen); 
n if  (Ipktbuf)  { 

n n return  r i n g S e t E r r o r ( s e t ) ->e r r o r ; 
n > 

n 

n /*  Allocate  space  in  memory  ringfile  */ 
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a file  = &se t ->poo L ->f i L e s CMEHR I NGBITD ; 
n cut  = f i L e-> s t r 1 n g s ; 

n buf  = (byte  *)inemPooLAlLoc(&fiLe->strings,  (unsigned)bufLen,  1); 

n if  (!buf)  { 

n n return  PGPERR_NOHEM; 
n } 

n /*  Copy  to  memory  file  buffer  */ 
n memcpyCbuf,  pktbuf,  buflen); 

n /*  Add  the  FilePos  */ 

n err  = r i n g Ad d Po s ( ob j , file,  ( wo r d3 2 ) b u f I en  ) ; 
a if  (err<0)  { 

n n memPoo I C u t Ba c k C & f i I e-> s t r i ng s , &cut); 
n n return  r i n g S e t E r r o r ( s e t ) ->e r r o r ; 
n } 

n ringFilePosCobj,  file)->ptr.buf  = buf; 

n return  0; 

> 

/* 

* Bring  the  ancestors  of  an  object  into  the  HEMRING. 

* 

* When  we  create  a new  object  using  the  routines  below,  it  is  necessary 

* that  any  parents  of  the  object  be  brought  into  the  HEMRING.  This  is 

* so  that  we  can  maintain  our  global  invariant  that  all  of  an  object's 

* ancestors  are  in  all  sets  that  the  object  is  in. 

*/ 

static  int 

r i ng Ca c hePa ren t s (struct  RingSet  *set,  union  RingObject  *obj) 

{ 


a 

int 

err  ; 

n 

if 

(0BJIST0P(obj ) ) { 

n 

D 

return  0; 

a 

> 

B 

do 

{ 

B 

Q 

obj  = obj->g.up; 

B 

B 

err  = r i ng C a c h eOb j e c t ( s e t 

B 

B 

if  (err  < 0) 

B 

B 

n return  err; 

a > while  ( ! OBJ IST0P(ob j ) ) ; 
n 

a return  0; 

> 


/* 

* 

* Create  a new  name  in  a mutable  RingSet. 

* 

* This  is  example  code.  Modifying  it  a bit  is  probably  a good  idea. 

*/ 

union  RingObject  * 

r i ngC r ea t eName ( s t ru c t RingSet  *dest,  union  RingObject  *key, 
n char  const  *str,  size_t  len) 
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{ 

n struct  Ringlterator  iter; 

n struct  HemPooL  cut; 

n struct  RingFile  *fiLe; 

n byte  *pktbuf,  *buf; 

n i n t i ; 

n pgpAssertC RINGS ETISHUTABLECdest  )); 
n pgpAssert(OBJISKEY(key)); 

n pgpAs se r t ( key->g . ma s k S dest->mask); 

a iter. set  = *dest; 

n if  (Len  >=  RI NGN AHE_HAXLEN ) C 

n n r i ng S i mp L e E r r ( d e s t ->poo L , PG P E R R_T R 0 UB LE_ N AH E2 B I G ) ; 

n n return  NULL; 

n > 

n pktbuf  = (byte  *)ringReserve(dest->pooL,  Len); 

n if  (Ipktbuf)  { 

n n r i n g A L L o c E r r ( d e s t ->poo L ) ; 

n n return  NULL; 

n } 


n /*  Add  to  memory  file  */ 
a fiLe  = &de s t ->poo L -> f i L e s C M EM R I N GB I T 3 ; 
n cut  = f i Le->st ri ngs; 

a buf  = (byte  * ) memPoo L A L L o c ( & f i L e->s t r i n g s , ( u n s i g n e d ) L e n , 1); 
n if  (!buf)  { 

n n r i ng A L L oc E r r ( de s t->poo L ) ; 
n n return  NULL; 
n } 


a memc py ( p k t bu f , str,  Len); 
n dest->pooL->pktbuf Len  = Len; 
n i t e r . s t a c kC 0 D = key; 
n iter.LeveL  = 1; 

n i = ringAddName(fiLe,  Siter,  (word32)Len); 

n pgpAssert(i  < 0 ||  iter.LeveL  ==  2);n  /*  error  or  object  created  */ 


n /*  ringAddName  returns  <0  on  error,  and  >0  on  dupLicate! 
n Note:  "DupLicate"  means  it's  aLready  on  the  memring, 

n *not*  that  it's  aLready  on  dest.  ringAddName  adds 

n it  to  dest,  so  we  can't  easiLy  check  to  see  if  it's  a 

n rea  L dup  L i cate . */ 

n if  (i  !=  0)  { 

n n memPoo L Cu t Ba c k ( &f i L e->s t r i ng s , &cut); 
n n return  i < 0 ? NULL  : i t e r . s t a c k C 1 3 ; 
n } 


n /*  Make  sure  name's  parent  key  is  in  the  HEMRING  too  */ 
n i = r i ng C a c h e Pa r en t s ( d e s t , i t e r . s t a c k C 1 3 ) ; 
n if(i<0){ 

n n memPoo L C u t Ba c k ( &f i L e->s t r i ng s , &cut); 
n n return  NULL; 
n } 

n /*  Okay,  success  - we  can't  faiL  */ 
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□ 


/* 


□ 


□ 


n 


n 


□ 


n 


a 


□ 


□ 


* Remember  that  the  memory  pool's  FilePos  pointers  are  a bit 

* wierd.  Instead  of  po s ->p t r . n e x t , we  have  po s->p t r . b u f , 

* a pointer  to  a buffer  holding  the  object.  And  pos->fpos 

* is  the  length  of  the  object.  That  is  already  filled  in 

* by  r i ng Ad d N a me ( ) , but  the  ptr->buf  needs  to  be  done 

* explicitly.  (The  r i ng AddName ( ) code  is  optimized  for 

* the  r ea d i n g-f r om-a - f i I e case,  since  that's  by  far  the 

* most  common  one.) 

*/ 


n memcpyCbuf,  str,  len); 

o r i ng F i I e Pos ( i t e r . s t a c kC 1 ] , f i I e ) ->p t r . bu f = buf; 

n /*  Ta-dah!  */ 
n return  iter.stackCI]; 

> 

/* 

* Create  a new  signature  object  in  a mutable  RingSet. 

*/ 

union  RingObject  * 

r i ng C rea t e S i g ( s t r u c t RingSet  *dest,  union  RingObject  *obj, 
n byte  *sig,  size_t  siglen) 

{ 

n struct  Ringlterator  iter; 

a struct  MemPool  cut; 

n struct  RingFile  *file; 

n union  RingObject  *newsig; 

n byte  *pktbuf,  *buf; 

n i n t i ; 

a pgpAssertCRINGSETISMUTABLECdest)); 
n pgpAssert Cob j->g . mask  & dest->mask); 

n iter. set  = *dest; 

n i t e r . s e t . t y pe  = R I N G S ET_ I T E R ATO R ; /*  kludge  for  r i ng 1 1 e r S e e kTo ( ) */ 

H i = ringlterSeekToC&iter,  obj); 

n pgpAssertCi  >=  0); 

n if  (siglen  >=  R I NG S I G_MAX LEN ) { 

n a ringSimpleErr(dest->pool,  PGPERR_TR0UBLE_SIG2BIG); 

n n return  NULL; 

n } 

n pktbuf  = (byte  *)ringReserve(dest->pool,  siglen); 

a if  (Ipktbuf)  { 

n n r i ng A I I oc E r r ( des t->poo  I ) ; 

n n return  NULL; 

n } 

n /*  Add  to  memory  file  */ 

n file  = &dest->pool->f i lesCMEHRINGBIi:; 
n cut  = f i I e-> s t r i n g s ; 

n buf  = (byte  * ) memPoo I A I I o c ( & f i I e-> s t r i ng s , ( u n s i g n ed ) s i g L e n , 1); 
n i f ( I buf  ) { 

n n r i ng A I I o c E r r ( d e s t ->poo  I ) ; 

a n return  NULL; 
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n > 


n mem c py ( p k t bu f , sig,  sigLen); 
n d e s t ->poo L ->p k t b u f I e n = siglen; 

n i = ringAddSigCfiLe,  Siter,  (word32)sigLen); 
n newsig  = i t e r . s t a c kC i t e r . L e ve L - ID; 

n /*  ringAddSig  returns  <0  on  error,  and  >0  on  duplicate!  */ 
n if  (i  !=  0)  { 

n n memPoo L Cu t Ba c k ( &f i L e->s t r i ng s , Scut); 
n n return  i < 0 ? NULL  : newsig; 
n > 


a /*  Make  sure  sig's  parent  objects  are  in  the  MEHRING  too  */ 
n i = r i ng Ca c h e Pa r e n t s ( d e s t , newsig); 
n if(i<0){ 

n n memPoo L C u t Ba c k C 8f i L e->s t r i ng s , Scut); 

n n return  NULL; 

n > 


n 

a 

a 

D 

□ 

n 

□ 

n 

Q 

n 

Q 

n 

□ 


/*  Okay,  success  - we  can't  fail  */ 

/* 

* Remember  that  the  memory  pool's  FilePos  pointers  are  a bit 

* wierd.  Instead  of  po s ->p t r . n ex t , we  have  pos->pt r . buf , 

* a pointer  to  a buffer  holding  the  object.  And  pos->fpos 

* is  the  length  of  the  object.  That  is  already  filled  in 

* by  r i ng AddName ( ) , but  the  ptr->buf  needs  to  be  done 

* explicitly.  (The  r i ngAddName ( ) code  is  optimized  for 

* the  r ea d i ng-f r om-a -f i I e case,  since  that's  by  far  the 

* most  common  one.) 

*/ 

memcpyCbuf,  sig,  siglen); 

ringFilePosCnewsig,  file)->ptr.buf  = buf; 


n return  newsig; 

) 


/* 

* Create  a new  public  key  in  a mutable  RingSet.  To  create  a 

* pu b I i c / s e c r e t key  pair,  use  r i ngC r ea t e Sec . That  is  normally 

* the  routine  to  use,  not  this  one. 

*/ 

union  RingObject  * 

r i ng C r e a t e Key ( s t r u c t RingSet  *dest,  union  RingObject  *parent, 
n struct  PgpPubKey  const  *key,  struct  PgpKeySpec  const  *ks,  byte  pkalg) 
{ 

n struct  Ringiterator  iter; 
n struct  MemPool  cut; 

n struct  RingFile  *file; 

n union  RingObject  *newkey; 
n byte  *pktbuf,  *buf; 

n size_t  len,  prefixlen; 

n byte  pkttype; 

n i n t i ; 

n pgpAssertCRINGSETISHUTABLECdest)); 
n 
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n prefixLen  = r i ng Key Bu f f e r Le n g t h ( k s , pkalg); 
n Len  = prefixLen  + pgpPubKeyBufferLength(key); 
n if  (Len  >=  R I NG KE Y_M AX L E N ) { 

n n ringSimpLeErr(dest->pooL,  PGPERR_TR0UBLE_KEY2BIG); 

n n return  NULL; 

n > 

n /*  Add  to  pktbuf  for  c ompa t i b i L i t y with  other  routines  */ 
n pktbuf  = (byte  * ) r i ng Re s e r ve ( d e s t ->poo L , Len); 
a if  (Ipktbuf)  { 
n n r i ng A L L o c E r r ( d e s t ->poo L ) ; 

n n return  NULL; 

n > 

n r i n g Key ToBu f f e r ( p k t bu f , ks,  pkaLg); 
n pgpPubKeyToBuf f e r ( key  , p k t bu f + p r e f i x L e n ) ; 

n des t ->poo L ->p kt buf L en  = Len; 

n /*  Add  to  memory  fiLe  as  permanent  home  for  data  */ 
n fiLe  = &d e s t ->poo L ->f i L e s C H EH R I NG B I T ] ; 
n cut  = f i L e-> s t r i ng s ; 

n buf  = (byte  * ) memPoo L A L L o c ( & f i L e-> s t r i ng s , ( u n s i g n e d ) L e n , 1); 
n i f ( ! buf  ) { 

o n r i ng A L L o c E r r ( d e s t -> poo L ) ; 

a a return  NULL; 

n > 

n memcpy(buf,  pktbuf,  Len); 

n /*  Set  iter  to  point  at  beginning  */ 

n iter. set  = *dest; 

a if  (parent)  { 

n n i ter  . stackC0D  = parent; 

n n iter.LeveL  = 1; 

n > e L s e { 

n n iter.LeveL  = 0; 

n > 

n 

n pkttype  = parent  ? PKTBYTE.PUBSUBKE Y : PKTBYTE_PUBKE Y; 

n i = ringAddKey(fiLe,  Siter,  (word32)Len,  1/*trusted*/,  pkttype); 

n /*  ringAddKey  returns  <0  on  error,  and  >0  on  dupLicate!  */ 

n pgpAssert(i  < 0 ||  ( i n t ) i t e r . L e v e L ==  1 + (parent  !=  NULL)); 

n if  (i  !=  0)  { 

n n memPoo L C u t Ba c k ( &f i L e->s t r i n g s , Scut); 
n n return  i < 0 ? NULL  : i t e r . s t a c k C 1 D ; 
n } 

n 

n /*  Set  buffer  pointer  in  FiLePos  */ 
n newkey  = i t e r . s t a c k C 0 ] ; 
n pg p As s e r t ( OB J I S KE Y ( n eu key ) ) ; 
n r i ng F i L ePos ( newkey , f i L e ) ->pt r . buf  = buf; 

n /*  Put  key  into  right  pLace  in  key  ring  (sorted  by  keylD)  */ 
n r i ng So r t Key s ( f i L e->se t . poo L ) ; 

n return  newkey; 
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} 


/* 

* Create  a new  pub L i c / se c re t keypair.  Return  pointer  to  the  RingKey  object, 

* which  will  be  followed  by  a RingSec. 

*/ 

union  RingObject  * 

r i ng C rea t eSec ( s t r u c t RingSet  *dest,  union  RingObject  *parent, 
a struct  PgpSecKey  const  *sec,  struct  PgpKeySpec  const  *ks,  byte  pkalg) 

{ 

n struct  Ringiterator  iter; 

n struct  MemPool  cut; 

n struct  RingFile  *file; 

n union  RingObject  *newkey,  *newsec; 

n byte  *pktbuf,  *buf; 
n size_t  len,  prefixlen; 
n byte  pkttype; 
a i n t i ; 

n pgpAssertCRINGSETISMUTABLECdest)); 

□ 

n prefixlen  = r i n g S e c Bu f f e r Le ng t h ( k s , pkalg); 
n len  = prefixlen  + pg p S e c Key Bu f f e r Leng t h ( s e c ) ; 
n if  (len  >=  R I N G S E C _M AX L E N ) { 

n n r i ng S i mp I e E r r C d e s t ->po o I , PG P E R R_T RO UB LE_S E C 2 B I G ) ; 
a n return  NULL; 

n } 

n /*  Add  to  pktbuf  for  compatibility  with  other  routines  */ 
n pktbuf  = (byte  * ) r i ng Re s e r ve ( d e s t ->poo  I , len); 
n if  (Ipktbuf)  { 

a n ringAllocErr(dest->pool); 

n n return  NULL; 

n > 

n r i ngSe cToBuf f e r ( p kt buf , ks,  pkalg); 
n pgpSecKeyToBuffer(sec,  pktbuf+prefixlen); 
n dest->pool->pktbuflen  = len; 

n /*  Add  to  memory  file  as  permanent  home  for  data  */ 
n file  = &d e s t ->poo I ->f i I e s C H EH R I N GB I T 3 ; 
n cut  = file->strings; 

n buf  = (byte  * ) memPoo I A I I o c ( & f i I e->s t r i ng s , ( u n s i g n e d ) I e n , 1); 
n if  (!buf)  { 

n n r i ng A I I o c E r r ( des t->poo  I ) ; 

n n return  NULL; 

n } 

n memcpy(buf,  pktbuf,  len); 

n /*  Set  iter  to  point  at  beginning  */ 
n iter. set  = *dest; 
n i f ( pa  rent  ) C 
n n i ter . stackC0]  = parent; 

n n iter. level  = 1; 

n > e I se  { 
n n iter. level  = 0; 

n > 
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a pkttype  = parent  ? PKTB YT E_ S E C S UBKE Y : PKTB YT E_S E C KE Y ; 
n / * 

a * Clear  trouble  list  so  we  can  distinguish  duplicate  keys  from 
n * duplicate  sigs 

n */ 

n ringFilePurgeTrouble(file); 

n /*  Create  the  secret  object  and  the  parent  key  */ 
n i = r i ng AddSe c ( f i I e , &iter,  (word32)len,  pkttype); 

n /*  ringAddSec  returns  <0  on  error,  and  >0  on  duplicate!  */ 

n pgpAssertCi  < 0 ||  (int)iter.  level  ==  2 + (parent  !=  NULL)); 

n if{i>0){ 

n n struct  RingTrouble  const  *trouble  = ringFileTrouble(file); 
n n pgpAssert  (trouble); 
n n / * 

n n * If  this  sec  was  a dup,  just  return  it;  if  it  was 

a a * something  else  it  was  probably  a duplicate  key  and 

n n * so  we  can  ignore  it  and  use  the  new  mempool  data 

n n * / 

n n if  (trouble->type  ==  PG P E R R_T ROUB L E_ D U PS E C ) { 

B n n memPoolCutBack(&file-> strings.  Scut); 

n n n return  i t e r . s t a c k C 1 D ; 
n n > 

n } 

n if(i<0){ 

n n memPoo I Cu t Ba c k ( &f i I e->s t r i ng s , &cut); 
n n return  NULL; 

n } 

□ 

n /*  Set  buffer  pointer  in  FilePos  */ 

B newkey  = iter. stackCi ter. level-2D; 

B pg p A s s e r t ( OB J I S KE Y ( n e w key  ) ) ; 

B newsec  = i t e r . s t a c kC i t e r . I e ve I -1 3 ; 

B pg p A s s e r t ( OB J 1 S S E C ( n e w s e c ) ) ; 

B r i ng F i I e Pos ( ne w key , f i I e ) ->p t r . b u f = buf; 

B r i ng F i I e Pos ( n e w s e c , f i I e ) ->p t r . b u f = buf; 
a 

B /*  Put  key  into  right  place  in  key  ring  (sorted  by  keylD)  */ 

B r i ng So r t Key s ( f i I e->s e t . poo  I ) ; 

B return  newkey; 

} 


/* 

* Takes  a name  and  moves  it  to  the  front  of  the  list  of  names  on  a 

* key.  Normally  ri ngCreateName  puts  the  new  name  at  the  end;  this  can 

* move  it  up . 

*/ 

i nt 

r i ng Ra i seName ( s t r u c t RingSet  *dest,  union  RingObject  *name) 

C 

B union  RingObject  *key; 

B union  RingObject  **np,  **np1; 
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a pgpAssert  ( R I NG S ET I S HUT AB LE ( d e s t ) ) ; 
n pgpAssert  (OBJISNAHE(name)); 

n pgpAssert  ( name->g . ma s k & dest->mask); 

n pgpAssert  ( ! OB J I S TO P ( na me ) ) ; 
n key  = name->g.up; 
n pgpAssert  ( OB J I S KE Y ( key ) ) ; 

□ 

a /*  Guaranteed  to  hit  at  Least  one  name,  ours  */ 
n np  = &key->g . down; 

n while  ( ! ( d e s t ->ma s k S ( *n p ) ->g . ma s k &&  OB J I SNAME ( *np  ) ) ) { 
n n np  = & ( *n p ) ->g . nex t ; 
a } 

n /*  Continue  till  we  hit  pointer  to  our  name  */ 
n npl  = np; 

n while  {*np1  !=  name) 

n n npl  = 8 ( * n p 1 ) ->g . n ex t ; 

n /*  Swap  if  not  already  first  */ 
n if(np!=np1){ 

n n *np1  = name->g . ne x t ; n /*  Delete  name  from  the  List  */ 

n n name->g.next  = *np;n/*  Set  its  tail  pointer  as  *np  */ 

n n *np  = name;nn  /*  Insert  it  in  new  spot  */ 
n } 

n return  0; 

> 


/* 

* Signs  an  object  (and  its  parents);  then  deposits  the  new  signature 

* object  in  place  on  the  set. 

*/ 

i n t 

r i ng S i g nO b j e c t ( s t r u c t RingSet  *set,  union  RingObject  *obj, 
n struct  PgpSigSpec  *spec,  struct  Pg pRa ndomC on t e x t const  *rc) 

{ 

n byte  *sig; 

n int  siglen; 

n union  RingObject  *sigobj; 

n siglen  = pg pNa ke S i gMa x S i z e (spec); 
n sig  = (byte  * ) pg pHemA I L o c (siglen); 

n siglen  = ringSignObj  (sig,  set,  obj,  spec,  rc); 
n if  (siglen  < 0)  { 

n n pgpHemFree  (sig); 

n n return  siglen; 

n } 

n if  (Isiglen)  ■( 

n a pgpHemFree  (sig); 

n a return  PGPERR_NOHEH; 

n } 

n sigobj  = r i ng C r ea t e S i g (set,  obj,  sig,  siglen); 

a si  gob j->s . t rust  = PG P_S I GT RU ST F_ C H E C KE D_T R I E D | PG P_KE YT R U S T_C OH P LET E ; 
n pgpHemFree  (sig); 

n return  sigobj  ? 0 : PGPERR_NOHEH; 

} 
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/* 

* Given  a seckey,  two  mutable  ringsets,  and  some  other  information, 

* create  the  ring  objects  and  put  them  on  the  appropriate  ringsets. 

* Then  self-sign  the  pubkey. 

*/ 

i n t 

ri  ngCreateKeypai  r (struct  PgpEnv  const  *env,  struct  PgpSecKey  *seckey, 
n n struct  PgpKeySpec  *keyspec, 

n a char  const  *name,  size_t  namelen, 

n n struct  Pg p R a n d omC o n t e x t const  *rc, 

n n struct  RingSet  *pubset,  struct  RingSet  *secset) 

{ 

n union  RingObject  *keyobj,  *nameobj; 
o struct  PgpSigSpec  *sigspec  = NULL; 

n word16  validity; 

n int  keyv3; 

n int  error  = 0; 

#define  C H E C KR ET V A L ( va  I , err)  if  (val)  { error  = err;  goto  cleanup;  > 
n /*  SECRET  KEY  stuff  */ 


n keyv3  = s e c key-> p k A I g > PG P_PKA LG_ R S A + 2; 
n i f C key v3 ) 

n n pgpKeySpecSetVersion  (keyspec,  PGPVERSI0N_3); 

n keyobj  = ringCreateSec  (secset,  NULL,  seckey,  keyspec,  seckey->pkAlg); 
n CHECKRETVAL  (Ikeyobj,  PG P E R R_N OM EH  ) ; 
n pg p A s s e r t ( OB J I S KE Y ( key ob j ) ) ; 

n memc py ( se c key-> key  I D,  key o b j -> k . key  I D , s i z e o f C ke y ob j -> k . key  I D ) ) ; 
n nameobj  = ringCreateName  (secset,  keyobj,  name,  namelen); 
n CHECKRETVAL  (inameobj,  PGPERR_NOMEH ) ; 

n /*  PUBLIC  KEY  stuff  */ 

a error  = ringSetAddObject  (pubset,  keyobj); 
o CHECKRETVAL  (error,  error); 

n error  = ringSetAddObject  (pubset,  nameobj); 
a CHECKRETVAL  (error,  error); 


Q 

□ 

n 

a 

n 

a 

a 

a 

a 

Q 

Q 

n 

n 

□ 

Q 

Q 


/*  Self-Sign  the  new  pubkey  */ 

if  ( pgpKeyUs e ( pgpPka I gByNumbe r ( se c key->p kA I g ) ) & PG P_PKU S E_ S I G N ) { 
n sigspec  = pg p S i g S p e c C r ea t e (env,  seckey, 
n n n PG P_ S I GT Y P E_KE Y_G E N E R I C ) ; 

CHECKRETVAL  (Isigspec,  PGPERR_NOHEM ) ; 
if  (keyv3)  ( 

n /*  New  keys  self-sign  with  special  info!  */ 

static  byte  prefsC]  = { PG P_ C I PH E R_ C A S T5 , PG P_C I PH E R_ I D E A , 
n n n n n PGP_CIPHER_3DES>; 

pgpS i g Spe c S e t Pr ef A I g s (sigspec,  prefs,  s i z e o f ( p r e f s ) ) ; 
pgpSigSpecSetVersion  (sigspec,  PGPVERSI0N_3); 
if  ( ( va I i d i t y=pgpKey Spe c Va I i d i t y (keyspec))  !=  0)  { 
pgpSigSpecSetKeyExpi ration  (sigspec, 
n ( wo r d 32 ) va I i d i t y *2 4*60*60  ) ; 

key o b j -> k . va  I i d i t y = validity; 


^define  KRTEST 
#if  KRTEST 
n n n { 


0 
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n 

n 

Q 

□ 

/* 

For  testing,  add  all  other  keys  on  ring  as  recovery  keys  */ 

n 

n 

n 

n 

Ringiterator  *iter; 

□ 

D 

n 

n 

RingSet  *secset2  = ringSetCreate  (ringSetPool(secset)); 

a 

Q 

n 

n 

i nt 

rkeynum  = 0; 

n 

n 

n 

n 

ringSetAddSet  (secset2,  secset); 

n 

n 

n 

n 

r i ng S e t F r e e z e (secset2); 

n 

n 

n 

n 

iter  = r i ng I t e r C r ea t e (secset2); 

n 

n 

D 

n 

w h i 

le  ( r i ng 1 1 e r N e X t Ob j e c t (iter,  1)  > 0)  { 

n 

n 

n 

n 

n 

byte  krinfoC22!]; 

Q 

n 

n 

□ 

Q 

RingObject  *krkey  = ringIterCurrentObject  (iter,  1); 

n 

n 

D 

n 

n 

if  (krkey  ==  keyobj) 

n 

n 

n 

n 

a 

n continue; 

n 

n 

n 

n 

a 

/*  Point  to  the  encryption  key  */ 

n 

n 

n 

Et 

n 

if  ( ri ngKeySubkey  (pubset,  krkey)) 

n 

n 

n 

n 

u 

n krkey  = ringKeySubkey  (pubset,  krkey); 

a 

n 

a 

n 

a 

krinfoC0D  = 1;n  /*  must  be  nonzero,  some  kind  of  status  */ 

n 

n 

n 

Q 

u 

krinfoCI]  = krkey->k.pkalg; 

n 

n 

n 

n 

n 

r i n g Key F i ng e r p r i n t 2 0 (secset2,  krkey,  krinfo+2); 

n 

n 

n 

n 

n 

pgpSi  gSpecSetRecoveryKey  (sigspec,  krinfo,  s i z eo f ( k r i n f o ) , 

n 

n 

n 

n 

a 

n n n n n n rkeynum++); 

n 

n 

o 

n 

> 

n 

Et 

Q 

a 

ringSetDestroy  (secset2); 

n 

n 

n 

D 

r i n g 1 1 e r De s t r oy  (iter); 

o 

n 

n 

> 

#end i f 

Q 

Q 

> 

n 

D 

n 

> 

error  = 

ri ngSi gnOb j ect  (pubset,  nameobj,  sigspec,  rc); 

n /*  This  sets  both  key  and  name  trust  */ 
n r 1 ngKey Se t Ax i oma t i c ( se c se t , keyobj); 

cleanup: 

n if  (sigspec) 

n n pgpS i g Spe c De s t roy  (sigspec); 
n return  error; 

} 

/* 

* Given  a seckey,  two  mutable  ringsets,  and  some  other  information, 

* create  subkey  ring  objects  and  put  them  on  the  appropriate  ringsets. 

* Then  sign  the  pubkey  using  the  master  signature  key. 

* seckey  is  the  secret  key  coresponding  to  the  master  signature  key, 

* subseckey  is  the  secret  key  to  be  used  for  creating  the  new  subkey. 

*/ 

i n t 

r i ng C r ea t eSubkey pa i r (struct  PgpEnv  const  *env,  struct  PgpSecKey  *seckey, 
n struct  PgpSecKey  *subseckey,  struct  PgpKeySpec  *keyspec, 
n struct  PgpRandomContext  const  *rc, 
n struct  RingSet  *pubset,  struct  RingSet  *secset) 

{ 

n union  RingObject  *keyobj; 

n union  RingObject  *subkeyobj; 

n struct  PgpSigSpec  *sigspec; 
n int  error; 
n word16  validity; 
n int  keyv3; 
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a keyv3  = s e c key->p k A L g > PGP_PKALG_RS A + 2; 
n i f ( keyv3 ) 

n n pgpKey S pe c S e t Ve r s i on  (keyspec,  PG P V E R S I 0N_3 ) ; 


n /*  Get  keyobj  for  the  master  key  */ 

n keyobj  = r i n g Ke y By  I d 8 ( s e c s e t , s e c key->p kA L g , s e c key-> key  I D ) ; 
n pgpAssert(keyobj); 


a /*  Create  the  subkey  object  on  the  secret  keyring  */ 
n subkeyobj  = r i ng C r e a t e S e c (secset,  keyobj,  subseckey, 
o n n n keyspec,  subseckey->pkALg); 

n i f ( ! subkeyobj ) 

n n return  PGPERR_NOMEM; 

n memc py ( subs e c key->key I D,  s u b ke y o b j -> k . key I D , 
n s i z eo f ( s u b key o b j -> k . key I D ) ) ; 


n /*  Add  it  to  the  public  keyring  */ 
n error  = r i n g S e t Ad d 0 b j e c t (pubset,  subkeyobj); 
n if  (error) 

n n return  error; 


n 

n 

□ 

Q 

Q 

□ 

n 

D 

□ 

n 

Q 

a 

□ 

□ 

n 

Q 

Q 


/*  Sign  the  encryption  key  with  the  master  signature  key  */ 
sigspec  = pgpSigSpecCreate  Cenv,  seckey,  PGP_SIGTYPE_KEY_SUBKEY); 
if  (Isigspec) 
n return  PGPERR_NOHEM; 
if  (keyv3)  { 

n /*  New  keys  self-sign  with  special  info  */ 
n if  ( ( va I i di ty=pgpKeySpecVa I i di ty  (keyspec))  !=  0)  { 
n n pg p S i g Spe c S e t Ve r s i on  (sigspec,  PG PV E R S 1 0N_3 ) ; 

a a pgpSigSpecSetKeyExpiration  (sigspec,  (word32)validity*24*3600); 

n n subkeyobj->k. validity  = validity; 

n } 

} 

error  = r i n g S i g nOb j e c t (pubset,  subkeyobj,  sigspec,  rc); 
pgpSigSpecDestroy  (sigspec); 
if  (error) 
n return  error; 

ringKeySetAxiomatic(secset,  subkeyobj); 


n return  0;n  n /*  success  */ 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpRngRead . h 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg p Rng R ea d . h , V 1.4. 2. 2 1997/06/07  09:50:43  mhu  Exp  $ 

*/ 


#ifndef  PGPRNGREAD_H 
^define  PGPRNGREAD.H 

#include  <stdio.h>n  /*  For  size.t  */ 

^include  "pgpUsuals.h" 

ftiidef  __cplusplus 
extern  "C"  { 

#e  n d i f 

union  RingObject; 

tfifndef  TYPE.RINGOBJ ECT 

^define  T Y PE_R I NGOB J E CT  1 

typedef  union  RingObject  RingObject; 

#endi f 

struct  RingPool; 

#ifndef  T YPE_R I N G POO L 

^define  T YPE_ R I N G POO L 1 

typedef  struct  RingPool  RingPool; 

#end i f 

struct  RingSet; 

#ifndef  TYPE.RINGSET 

^define  TYPE.RINGSET  1 

typedef  struct  RingSet  RingSet; 

Send i f 

struct  PgpKeySpec; 

Sifndef  TYPE.PGPKE YSPEC 

Sdefine  TYPE.PGPKEYSPEC  1 

typedef  struct  PgpKeySpec  PgpKeySpec; 

Send i f 

struct  PgpSigSpec; 

Sifndef  T YPE.PG P S I G S PE C 

Sdefine  TYPE.PGPSIGSPEC  1 

typedef  struct  PgpSigSpec  PgpSigSpec; 

S end i f 

struct  Pg pRa nd omC o n t ex t ; 

Sifndef  T YPE.PG P R A N DOMC ONT EXT 
Sdefine  T YPE.PG P R AN DOHC ONT EXT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

Sendi f 

/*  Semi-public  (you  can  use  this,  but  probably  don't  want  to)  */ 
void  const  PGPExport  * 

r i ng Fe t c hOb j ec t ( s t r u c t RingSet  const  *set,  union  RingObject  *obj, 
CnCHK:6abadf00daaffaa4599ae4a44501a8856be1196bc111985550cda4428e372678bIl!] 
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n size_t  *Lenp); 

/*  Public  */ 

struct  RingFiLe  PGPExport  * r i ng F i L e 0 pe n ( s t r u c t RingPooL  *pooL, 
n struct  PgpFiLe  *i , int  trusted,  int  *error); 

void  PGPExport  r i n g F i L e S e t D e s t r u c t o r C s t r u c t RingFiLe  *fiLe, 
a void  ( *d e s t r u c t o r ) ( s t r u c t RingFiLe  *,  struct  PgpFiLe  *,  void  *), 

n void*arg); 

void  PGPExport  r i ng  F i L e FI  i g h P r i ( s t r u c t RingFiLe  *fiLe); 
void  PGPExport  r i n g F i L e Lo w P r i ( s t r u c t RingFiLe  *fiLe); 


Struct 

n 

a 

RingTroubLe  { 

struct  RingTroubLe  const  *next; 

union  RingObject  *obj;n  /*  The  pertinent 

object. 

if  applicable 

n 

word32  num;n  /* 

An  integer  parameter. 

if  app  L 

icabLe  */ 

□ 

word32  fpos;n  /* 

File  position  related 

to  the 

error  * / 

n 

>; 

int  type;n  /* 

PGPERR_  code  from  pgpE 

r r . h * / 

# i f nde  f 

#d  e f i n e 

typedef 

TYPE_RINGTROUBLE 
TYPE_RINGTROUBLE  1 
struct  RingTroubLe 

Ri ngT  rouble; 

#e  nd i f 


struct  RingTroubLe  const  PGPExport  * r i n g F i L eT  r ou  b L e ( 
n struct  RingFiLe  const  *fiLe); 

void  PGPExport  ringFiLePurgeTroubLeCstruct  RingFiLe  *fiLe); 

int  PGPExport  ringFiLeCheckCLoseCstruct  RingFiLe  const  *fiLe); 
int  PGPExport  ringFiLeCLoseCstruct  RingFiLe  *fiLe); 

#define  PGP_WRITETRUST_PUBn  1 

#define  PG P_WR I T ET RU S T_S E Cn  2 

int  PGPExport  r i ng S e t W r i t e ( s t r u c t RingSet  const  *set,  struct  PgpFiLe  *f, 
n struct  RingFiLe  **fiLep,  PgpVersion  version,  int  flags); 


int  r i ngName s D i f f e r ( s t r uc t RingSet  const  *set,  union  RingObject  *name1, 
n union  RingObject  *nanie2); 


union  RingObject  PGPExport  * r i n g C r e a t e Na me ( s t r u c t RingSet  *dest, 
n union  RingObject  *key,  char  const  *str,  size_t  Len); 

union  RingObject  PGPExport  * r i ng C r e a t e S i g ( s t r u c t RingSet  *dest, 
n union  RingObject  *obj,  byte  *sig,  si2e_t  sigLen); 

union  RingObject  PGPExport  * r i ng C r e a t e Key C s t r u c t RingSet  *dest, 
n union  RingObject  *parent,  struct  PgpPubKey  const  *key, 

n struct  PgpKeySpec  const  *ks,  byte  pkaLg); 

union  RingObject  PGPExport  * r i n g C r ea t e S e c ( s t r u c t RingSet  *dest, 
n union  RingObject  *parent,  struct  PgpSecKey  const  *sec, 

n struct  PgpKeySpec  const  *ks,  byte  pkaLg); 

int  PGPExport  r i ng Ra i s e Name ( s t r u c t RingSet  *dest,  union  RingObject  *name); 

int  PGPExport  r i ng S i g nOb j e c t ( s t r u c t RingSet  *set,  union  RingObject  *obj, 
n a struct  PgpSigSpec  *spec,  struct  Pg p Ra nd omC o n t e x t const  *rc); 


int  PGPExport  r i ng C r e a t e Key pa i r (struct  PgpEnv  const  *env, 
a a struct  PgpSecKey  *seckey. 


[CCHK:0044aa5388f77c11de0ee362cce1aa0aad3f88c663b0e335332991000b35211d3]: 
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n 

B 

struct  PgpKeySpec  *keyspec. 

n 

B 

char  const  *name,  size_t  nameLen, 

n 

B 

struct  PgpRandomContext  const  *rc 

/ 

n 

B 

struct  RingSet  *pubset,  struct  RingSet  *secset); 

int  PGPExport  r i ng C r ea t e S u b key pa i r (struct  PgpEnv  const 

*env. 

n 

B 

B 

struct  PgpSecKey  *seckey. 

D 

B 

B 

struct  PgpSecKey  *subseckey. 

n 

B 

B 

struct  PgpKeySpec  *keyspec. 

n 

B 

B 

struct  PgpRandomContext  const 

* r c , 

B 

B 

B 

struct  RingSet  *pubset,  struct 

RingSet  *secset); 

# i f d e f 

__  C 

pLusplus 

/ 

#endi f 

#end  i f 

/* 

PGPRNGREAD 

H */ 

CCCHK: 2a5af1a2c99b6aa8e653eeb3D 
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/* 

* 

* 

★ 

* 

★ 

★ 

* 

* 

★ 


pgpRngView.c  — display  the  contents  of  a keyring,  with  various 

options.  This  is  a simple  example  of  a scrolling  list  of 
keys  and  how  it  can  be  maintained.  ringPickC)  is  the 
function  that  gives  the  spiffy  displays. 

Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

Written  by  Colin  Plumb. 


* $Id: 

pg p R ng V i e w . c , V 1.3. 

2 . 1 

1997/06/07  09:50:43 

*/ 

#include 

" f i r s t . h " 

# i n c 1 u d e 

<ctype.h> 

#i nc lude 

<stdio.h> 

#include 

<string.h>n  /* 

for 

strchr()  */ 

^include 

"pgpDebug . h" 

#include 

"ringview.h" 

^include 

"pgpTimeDate.h"n 

/*  for  datePrint  */ 

# i n c 1 u d e 

"pgpT  rust . h"n  /* 

For 

PGP_KEYTRUSTF_*  */ 

#include 

"pgpl)serI0.h"n  /* 

for 

userTrans  */ 

#i nc 1 ude 

"pgpKludge.h" 

static  char  const  hexcharC16i] 

= { 

n 

'0','1','2','3','4' 

, '5 

I I i 1 171 

n 

'8','9','A','B','C' 

, ' D 

1 1 r 1 1 p I 

>; 

/* 

* Print 

a key  fingerprint. 

i n 

one  of  the  forms: 

* 111111111 12222222222333333333344444444 

* 012345678901234567890123456789012345678901234567 

* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF  (48 

* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF  (47 

* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF  (40 

* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF  (39 

* 01234567  89ABCDEF  01234567  89ABCDEF  (36 

* 01234567  89ABCDEF  01234567  89ABCDEF  (35 

* 01 23456789ABCDEF  0 1 2 34 5 6789 ABC D E F (33 

* 01 23456789ABCDEF01 23456789ABCDEF  (32 

* 0123456789ABCDEF0123456789ABCDE 

* 01 23456789ABCDEF01 23456789ABCD 

* 01 23456789ABCDEF01 23456789ABC 

* (truncation  continues  as  needed) 

* depending  on  the  "wid"  argument. 

*/ 

i n t 

p u t F i ng e r p r i n t ( by t e const  *hash,  FILE  *f,  unsigned  wid) 
{ 

n static  char  const  limitsC163  = { 

n n -1,  46,  38,  46,  34,  46,  38,  46, 

n n 32,  46,  38,  46,  34,  46,  38,  46  }; 

H char  buf[!48D; 

n char*p=buf; 

n inti; 


chars) 

chars) 

chars) 

chars) 

chars) 

chars) 

chars) 

chars) 


CCCHK:6e59a71f6de99124ff3ed2aa11927bba50e365141940c668a9bad16887edf61f9:: 
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n 

pgpAssert(f) ; 

□ 

pgpAssert(hash); 

n 

for 

(i  = 0;  i < 16;  i++)  { 

n 

n 

/*  Print  each  space  i 

f f 

it's  okay 

n 

n 

if  (wid  > limitsCi:) 

n 

n 

a *p  + + = ' ' ; 

n 

n 

/*  Double  space  in  the  middle  if 

n 

n 

if  (i  ==  8 &&  wid  >= 

36 

&&  wid  ! = 

n 

n 

n *p++  = ' ■; 

n 

n 

*p++  = hexcha r C *ha s h 

>> 

4 S 15:; 

□ 

n 

*p++  = h ex c h a r C * h a s h++  S 

15:; 

n 

> 

a 

/* 

Final  truncation  as  necessary 

*/ 

n 

1 = 

p-buf ; 

n 

if 

( i > wid) 

n 

n 

i = wid; 

n 

return  fwrite(buf,  1,  i,  f); 

i n t 

pu t Ke y I D ( by t e const  *keyID, 
{ 


n 

char  bufC8:; 

n 

char  *p 

= b u f ; 

D 

i n t i ; 

n 

if  (keylD)  { 

D 

n 

key  I D +=  4; 

n 

n 

for  (i  = 0;  i 

D 

n 

a *p  + + 

n 

tt 

n *p  + + 

□ 

n 

} 

n 

> else 

{ 

n 

H 

memset(buf,  ' 

□ 

> 

D 

return 

fwrite(buf,  1, 

> 


FILE  *f) 


< 4;  i++)  { 

h ex c h a r C * key  I D >>  4 & 15D; 
hexcharC*keyID++  & ISD; 

■,  8); 

1,  8,  f); 


Write  out  the  given  string  with  all  funny  characters  \-escaped  in 
the  manner  of  C strings,  up  to  "maxlen"  characters.  Returns  the 
actual  number  of  characters  printed,  which  will  always  be  <=  maxlen. 
If  f is  NULL,  prints  nothing.  (Hay  be  useful  for  justification 
computations.)  The  string  is  surrounded  by  quotes  q1  and  q2 
(if  not  '\0').  q2  is  also  \-escaped  if  it  appears  in  the  string. 


/* 

* 

* 

* 

* 

* 

* 

*/ 

unsigned 

pu t S t r i ng ( cha r const  *str, 
□ 

{ 
n 
n 
n 
□ 

□ 


size_t  len,  unsigned  maxlen,  FILE  *f. 


char  q1,  char  q2) 


i n t c ; 
unsigned  t ; 
char  const  *p; 

unsigned  remaining  = maxlen; 
static  char  const  escapesCD  = 
static  char  const  lettersCD  = 


"\a\b\f\n\r\t\v"; 

{'a','b','f','n','r','t','v'}; 


CECHK: 749666dd460d2ec5bddda3ba67790368a89df eeel 37f4c829879a046bf 5371 389:: 
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o 

/* 

Opening 

quote  * / 

n 

i f 

(q1 

&&  remaining)  { 

n 

B 

i f 

(f  ) 

Q 

B 

B 

putcCql,  f); 

□ 

B 

rema ini ng--; 

n 

> 

n 

for 

) { 

D 

B 

/* 

Printing  can  only  expand  the  string,  so  truncate  i 

n 

B 

i f 

(Len  > remaining) 

□ 

B 

n 

Len  = remaining; 

Q 

B 

/* 

Find  a directly  printable  substring  */ 

Q 

B 

P = 

: str;n  /*  Remember  start  of  substring  */ 

□ 

B 

while  (ten)  { 

n 

B 

B 

c = *st  r; 

n 

B 

B 

if  (lisprintCc)  ||  c ==  '\\'  | | c ==  q2) 

a 

B 

B 

n break; 

n 

B 

B 

s t r + + ; 

u 

B 

B 

1 en  — ; 

n 

B 

> 

□ 

B 

/* 

Print  from  p up  to  str  */ 

Q 

B 

t = 

( u n s i g n ed ) ( s t r - p); 

□ 

B 

i f 

Ct)  { 

n 

B 

B 

if  (f) 

n 

B 

B 

n fwriteCp,  1,  (size_t)t,  f); 

n 

B 

B 

remaining  -=  t; 

Q 

B 

> 

n 

B 

/* 

Done  with  the  string?  */ 

n 

B 

i f 

( ! 1 e n ) 

n 

B 

B 

break; 

□ 

B 

/* 

Note  that  len  <=  remaining,  so  remaining  !=  0 */ 

n 

B 

/* 

n 

B 

★ 

c is  a character  to  print  that  needs  escaping. 

n 

B 

★ 

Now  we're  going  to  print  it,  so  remove  it  from  the 

n 

B 

*/ 

B 

B 

ten 

/ 

B 

B 

St  r + +; 

B 

B 

/* 

Start  with  the  obligatory  backslash  */ 

B 

B 

i f 

(f ) 

B 

B 

D 

putcC'W',  f); 

B 

B 

i f 

( (--remaining) 

B 

B 

n 

break; 

B 

B 

/* 

Simple  case  1:  escaping  printable  characters  */ 

B 

B 

i f 

(isprint(c))  { 

B 

B 

n 

if  (f  ) 

B 

B 

a 

n p u t c ( ( c h a r ) c , f); 

B 

B 

a 

--remaining; 

B 

B 

n 

continue; 

B 

B 

> 

B 

B 

/* 

Simple  case  2:  standard  C escape  */ 

[[CHK:ff80ee00750ccb01c93d9221  052661  1 eaf00a736822befa55560d8acc635735d7:] 
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n 

p 

= s t r c h r ( e s c a pe s , c); 

Q 

n 

i f 

(p  &&  c)  { 

n 

n 

n 

if  (f) 

n 

n 

n 

n 

p u t c ( 1 e 1 1 e r s C p - e s c a p e s ] , 

n 

n 

n 

--remaining; 

□ 

n 

n 

continue 

r 

n 

n 

> 

n 

D 

/* 

General  octal 

escapes  */ 

n 

n 

/* 

If  next  char 

makes  it  ambiguous. 

force 

n 

n 

i f 

(len  SS  isdig 

it(*str))n  /* 

Force  i 

n 

□ 

Q 

c +=  256 

/ 

n 

n 

i f 

(c  > 077)  { 

n 

n 

Q 

if  (f) 

s 

Q 

Q 

n 

put  c ( ' 0 ' + ( c>>6  & 

3),  f) 

n 

n 

n 

if  (!--remaining) 

n 

n 

n 

n 

break; 

n 

n 

} 

n 

Q 

i f 

o 

V 

n 

n 

n 

if  (f) 

n 

n 

n 

n 

putc('0'  + (c>>3  S 

7),  f) 

n 

n 

n 

if  (!--remaining) 

n 

□ 

n 

n 

break; 

Q 

n 

> 

n 

n 

i f 

(f ) 

Q 

n 

n 

put  c ( ' 0 ' 

+ (c  & 7),  f); 

n 

n 

— 

remaining; 

n 

> 

Q 

/* 

Closing 

quote  * / 

n 

i f 

(q2  S& 

remaining)  { 

n 

n 

i f 

(f  ) 

Q 

Q 

□ 

putc(q2. 

n 

o 

rema ini ng--; 

n 

} 

9,  too  ! */ 


return  maxLen  - remaining; 


/* 

* Print  info  about  a key,  in  the  format 

* 

* 1024  bits.  Key  ID  FBBB8AB1,  created  1994/05/07 

* 

* The  ",  created"  part  is  omitted  if  the  creation  timestamp  is  0. 

*/ 

void 

key  I n f oP r i n t ( by t e const  keyIDCSD,  word16  keybits,  word32  tstamp, 
word16  validity,  byte  trust,  FILE  *f) 

( VO i d ) va I i d i t y ; n / * Not  used  for  now  */ 

fprintflf,  userTrans("%6u  bits.  Key  ID  (unsigned)keybits); 

pu t Key I D ( key  I D , f); 
if  (tstamp)  { 

n fputsCuserTransC",  created  "),  f); 

a da t e P r i n t ( t s t amp , f); 

} 


CCCHK:e3b9975558214b80ef232835fd555390a844211179e057d8a417ad66be61387c3]] 
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n putc('\n',  f); 

n if  (trust  8 PG P_KE YT R U ST F _ R E VOK E D ) 

n n f p u t s ( u s e r T r a n s ( " T h i s key  has  been  revoked  by  its  ownerXn"), 

n n n f ) ; 

> 


[CCHK: c90337d9d3b3:: 
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/* 

* pgpRngWrit.c  --  Functions  to  write  out  a keyring. 

* The  main  function  is  r i ng Poo L W r i t eV i r t , which  converts 

* a virtual  keyring  into  a physical  one. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by  Colin  Plumb. 

* 

* $Id:  pg pRng W r i t . c , V 1.2. 2.1  1997/06/07  09:50:43  mhw  Exp  $ 


*/ 

ttinclude 

<stdi 0 . h> 

//include 

<string.h> 

//include 

"pgpDebug . h" 

//include 

"pgpPktByte . h 

//include 

"pgpRngPars  . h 

Mi  nc lude 

"pgpRngPriv.h 

//include 

"pgpT  rust . h" 

//include 

"pgpErr.h" 

//include 

"pgpRngRead.h 

//include 

"pgpUsuals.h" 

//include 

"pgpKludge . h" 

/*  This  should  go  in  a header  somewhere...  */ 

#ifndef  PGPVERSI0N_2 
#define  PGPVERS10N_2  2 
#endi f 

/* 

* Copy  the  packet  to  the  given  file.  If  "trust"  is  non-negative, 

* it  is  appended  as  a trust  packet.  If  "file"  is  non-NULL  and  the 

* write  is  successful,  the  location  in  that  file  is  listed  as  a 

* position  for  the  object. 

*/ 

static  i nt 

r i ng Copy Ob j e c t ( s t r u c t RingSet  const  *set,  union  RingObject  *obj,  FILE  *f. 


n 

r 

int  trust,  struct  RingFile  *file) 

\ 

n 

void 

const  *buf; 

□ 

s i 2e_ 

t 1 e n ; 

D 

int  i 

r 

n 

long 

pos; 

n 

s t a t i 

c int  const  p k t by t e s C R I NGT Y P E_H AX D = 

Q 

n 

PKTBYTE_BUILD(PKTBYTE_PUBKEY, 

1), 

n 

D 

PKTBYTE_BUILD(PKTBYTE_SECKEY, 

1 

n 

D 

PKTBYTE_BUILD(PKTBYTE_USERID, 

0), 

n 

Q 

PKTBYTE_BUI LD ( PKTBYTE_SIG,  1) 

D 

>; 

a 

buf  = 

r i ng F e t c h Pa c ke t ( s e t , obj); 

n 

if  ( ! 

buf  ) 

n 

□ 

return  r i ng S e t E r r ( s e t ) ->e r r o r 

n 

if  (f 

i 1 e ) { 

a 

□ 

pos  = ftell(f); 

CCCHK:6d8d24f  131  bbe4442f 34d77766f d9776b5a7dad84822cc2a58064e00f 31 beba46:: 
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□ 

n i f ( pos  ==  -1 ) 

□ 

n n return  PGPERR_KEYIO_FTELL; 

n 

> 

rt 

i = r i ng 0 b j e c t T y pe ( 0 b j ) ; 

n 

pgpAssertCi  > 0 &&  i <=  R I N GT Y P E_M A X ) ; 

u 

i = pktBytePutCf,  pktbytesCi-ID,  ten); 

n 

if  ( i < 0 ) 

n 

n returni; 

a 

if  (fwriteCbuf,  1,  Len,  f)  !=  len) 

n 

n return  PGPERR_KEYIO_WRITING; 

n 

if  (trust  > 0) 

tt 

a if  (putc(PKTBYTE_BUILD(PKTBYTE_TRUST,  0),  f)  ==  EOF 

u 

n ||putc(1,f)==E0F 

n 

n II  putcCtrust,  f)  ==  EOF) 

u 

n n return  PGPERR_KEYIO_WRITING; 

n 

> 

□ 

if  (file) 

Q 

n return  ringAddPosCobj,  file,  (word32)pos); 

n 

else 

n 

n return0; 

> 

#d  e f i n e 

WRITETRUST_PUBn  1 

#def i ne 

WRITETRUST_SECn  2 

i n t 

r i ng Poo L W r i t e ( s t r u c t RingSet  const  *set,  FILE  *f,  struct  RingFiLe  **fiLep, 


□ 

int  flags) 

□ 

struct  RingFiLe  *fiLe; 

n 

struct  Ringiterator  *iter; 

n 

union  RingObject  *obj; 

n 

unsigned  Level; 

n 

ringmask  mask; 

n 

int  i ; 

n 

int  type; 

□ 

int  writetrust; 

n 

int  trust; 

n 

pgpAssert(set); 

n 

pgpAssert(f); 

n 

if  CfiLep)  { 

□ 

n pgpAssertCf); 

n 

n pg p A s s e r t ( ! ( poo L -> f i L ema s k S ~ poo L ->a L L o cma s k ) ) ; 

D 

n i = r i ng B i t A L L 0 c ( poo L ) ; 

□ 

n if(i<0){ 

Q 

n n *fiLep  = (struct  RingFiLe  *)0; 

n 

n n return  PG P E R R_N 0_KE YB I TS ; 

B 

n > 

n 

n pgpAssert(i  < HEHRINGBIT); 

n 

n file  = &poo L ->f i L e s C i 3 ; 

B 

n mask  = (ringmask)l  <<  i; 

B 

n p g p A s s e r t ( f i L e-> s e t . ma s k ==  mask); 

[CCHK: 79449551  91  7a7a5c0aa7aec11 cl 39e2f722d7e3662dddaffa9232553e364a9b87]: 
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n 

n 

pg p A s s e r t ( ! ( poo L ->f i L ema s k & mask)); 

n 

n 

poo L ->f i L ema s k |=  mask; 

□ 

n 

po 0 L ->a L L 0 cma s k |=  mask; 

□ 

a 

pgpAssertC !fi Le->set.next); 

n 

D 

f i L e->f  = f ; 

Q 

□ 

fiLe->destructor  = 0;n  /*  Hay  be  set  Later 

n 

n 

fiLe->arg  = 0; 

Q 

> else 

{ 

Q 

n 

file  = (struct  RingFiLe  *)0; 

□ 

n 

mask  = 0; 

n 

> 

n 

iter  = 

ringlterNew(set); 

n 

if  ( ! i 

ter)  { 

n 

a 

ringfiLeCLose(fiLe);n  /*  Okay  for  file  to 

n 

n 

return  r i ng S e t E r r o r ( s e t ) ->e r r o r ; 

n 

> 

n 

Level 

= 1; 

D 

for  ( ; 

;)  t 

n 

n 

ob  j 

= r i ng 1 1 e r Nex t Ob j e c t ( i t e r ) ; 

n 

n 

i f 

( 

! ob  j ) { 

□ 

n 

□ 

if  ( ! -- 

Level) 

Q 

n 

n 

n 

return  0;n  /*  Successful  completion  */ 

n 

n 

n 

continue; 

D 

n 

> 

n 

a 

type 

= ri ngOb j ectTypeCob j ); 

n 

n 

i f 

( L eve  L++  = = 

1 ) { 

n 

n 

a 

if  (type  ==  RINGTYPE_KEY  S&  r i ng Key  I s S e c ( s e t , obj))  { 

n 

a 

a 

a 

writetrust  = flags  & WRITETRUST_SEC; 

n 

a 

a 

a 

continue;n  /*  Skip  in  favour  of  sec  */ 

n 

□ 

a 

> 

n 

D 

a 

writetrust  = flags  S U R I T ET RU ST_PUB; 

D 

Q 

> 

n 

n 

i f 

(writetrust) 

{ 

n 

a 

a 

swi tch 

( type ) { 

n 

n 

a 

case 

RINGTYPE_KEY : 

n 

n 

a 

a 

trust  = ob j -> k . t r u s t ; 

n 

n 

a 

a 

break; 

n 

n 

a 

case 

RINGTYPE_SEC : 

n 

a 

a 

a 

trust  = ob j ->g . up-> k . t r u s t ; 

n 

o 

a 

a 

break; 

n 

o 

a 

case 

RINGTYPE_NAME : 

n 

B 

a 

a 

trust  = obj->n.trust; 

n 

Q 

a 

a 

break; 

n 

D 

a 

case 

RINGTYPE.SIG  : 

n 

n 

a 

a 

/* 

n 

n 

a 

a 

* 2.x  compatibility  kludge:  Don't  write  trust 

n 

n 

a 

a 

* on  good  compromise  certificates.  PGP  2.x 

a 

n 

a 

a 

* maintenance  dies  (assert  fail)  if  it  finds 

Q 

n 

a 

a 

* trust  packets  on  key  sigs. 

n 

a 

a 

a 

*/ 

□ 

a 

a 

a 

if  (Level  ==  2 SS  obj->g.up  ==  obj->s.by 

n 

a 

a 

a 

&&  obj->s.type  ==  S I GT Y P E_C OHPROM I S E 

a 

a 

a 

a 

&S  ICtrust  & SIGTRUSTF_CHECKED_TRIED)  ) 

CCCHK: 
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n 

n 

n 

D 

n 

trust 

= -1; 

n 

a 

n 

a 

else 

a 

n 

n 

□ 

D 

trust 

= 0 b j 

->s 

■trust; 

n 

□ 

□ 

n 

break; 

n 

□ 

Q 

> 

n 

Q 

> 

else 

n 

Q 

Q 

trust 

= -1; 

n 

□ 

> 

n 

n 

1 

= r i ng C opy Ob j e c t ( s e t , 

S 

O 

trust. 

f i L e ) ; 

n 

□ 

if 

( i < 0 ) 

n 

□ 

□ 

break; 

n 

> /*  for  ( 

n 

/* 

n 

* We 

break  out  on  error.  We  could  Leave  the 

partial  file  open. 

n 

* as 

a 1 L 

the  pointers 

that  exist  are 

valid 

. 

Is  that  useful? 

n 

*/ 

n 

ringfi leCLoseCfi Le);n 

/*  Okay 

for  f 

i 1 e to 

be 

NULL  */ 

n 

*f 1 L ep 

= NULL; 

n 

return 

i ; 

} 


[[CHK:5759226e54899eab504b0842e27a:: 
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/* 

* pgpTrstPkt.c  --  Manage  transLations  of  trust  description  strings 

* for  the  maintenence  display. 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

it 

* Written  by  Colin  Plumb. 

* 

* $Id:  p g p T r s t P k t . c , V 1.2. 2.1  1997/06/07  09:50:44  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e nd i f 


//include  <string.h> 


//include  " pg  pT  r s t P k t . h 
//include  " pg  pMemPoo  L . h 


//define  USERTRANS(x)  x 
//define  userTrans(x)  x 


char  const  * keyT r u s t Ta b L e C 1 4 D = { 
n USERTRANSC'undef ined"). 


Q 

USERTRANS ( 

"unknown") 

n 

USERTRANS ( 

"untrusted 

n 

"<3>", 

n 

"<4>", 

n 

USERTRANS  C 

"marginal" 

Q 

USERTRANS ( 

"complete" 

n 

USERTRANS  C 

"ultimate" 

/ * Some 

special  cases  displa 

y ed 

s 

D 

f 

USERTRANS ( 

"retired") 

/ 

n 

USERTRANS ( 

"revoked") 

/ 

□ 

USERTRANS ( 

"untested" 

n 

USERTRANS ( 

"INVALID" ) 

o 

USERTRANSC 

"**  BAD  ** 

" ) 

>; 

char  const  *ui dVa  L 

idityTabLeC43 

n 

USERTRANSC 

"undefined 

n 

USERTRANSC 

"invalid") 

/ 

Q 

USERTRANSC 

"margina  L" 

n 

USERTRANSC 

"complete" 

>; 

/* 

* Translate  the  trust  tables  at  once, 

* displaying  the  output. 

*/ 


same  col umn  */ 


to  avoid  massive  overhead  while 


//if  0 
void 

trustlnitTablesCvoid) 

{ 

n static  int  initialized  = 0; 

n inti,Len,- 

n char  const  *s; 
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n char*p; 


n if  (initialized) 

n H return; 


u 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

n 

s 

Q 

n 

Q 

□ 

tt 

u 

u 

n 

n 

n 

Q 

n 

} 

#end i f 


for  ( i 
n 

D 

Q 

Et 

n 

n 

n 

□ 

a 

> 

for  ( i 

Et 

i 

n 

□ 

n 

n 

n 

n 

Et 

n 

n 

> 


= 0;  i < s i zeof  C keyT  r us  t Ta  b L e ) / s i z eof  ( * keyT  r us  t Ta  b L e ) ; i++)  -C 
s = u s e r T r a n s ( k e yT r u s t Ta b L e C i D ) ; 
if  Cs  !=  key  T r u s t Ta  b L e C i ] ) -C 
n ten  = strLen(s)+1; 

n p = memPoo L A L L o c ( &M i s c Poo L , Len,  1); 

n i f C p ) -C 

n n memcpyCp,  s,  Len); 

n n keyTrustTabLeCi]=p; 

n > 

> 


= 0;  i < sizeof(uidVaLidityTable)/sizeof(*uidVaLidityTabLe); 
n i ++  ) 


s 

i f 

n 

n 

D 

n 

□ 

n 


userTransCuidValidityTableCiD); 

(s  !=  u i d Va  L i d i t yTa  b I e C i II ) { 

Len  = strLen<s)+1; 

p = memPooLALLocC&HiscPooL,  Len,  1); 
if  (p)  { 

n memcpyCp,  s,  Len); 

n uidVaLidityTableCi]  = p; 

> 


> 
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/* 

* pgpTrstPkt.h 

* 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpTrstPkt . h,v  1.4. 2.1  1997/06/07  09:50:44  mhw  Exp  $ 

*/ 


#ifndef  PGPTRSTPKT.H 
#define  PGPTRSTPKT.H 


/* 

* Key  trust  byte : 

* 8 H 1 

* I I BUCKSTOP  bit  - this  is  an  axiomatic  key 

* 7 + — + 

* I I 

* 6 +--+ 

* I I Disabled  - don't  use  at  user  request 

* 5 + — + 

* I I Revoked  - don't  use  at  issuer  request 

* 4 +--+ 

* I I 

* 3 +--+ 

* I I Introducer  trust.  6 Levels  are  used: 

* 2 + + 000  - undefined,  need  to  ask  user 

* I I 001  - Unknown,  consider  to  be  zero 

* 1 + + 010  - Not  trusted 

* I I 011  -unused 

* 0 H + 100  - unused 

* 101  - Marginal  - partially  trusted 

* 110  - Complete  - completely  trusted 

* 111  - Ultimate  - ultimately  trusted 

*/ 


#de  f i n e 
#def i ne 
#def i ne 
#def i ne 


PGP.KEYTRUSTF.BUCKSTOPn  0x80u 
PGP. KEYTRUSTF. EXPIRED  0x40u 
PGP.KEYTRUSTF.DISABLEDn  0x20u 
PGP  KEYTRUSTF. REVOKEDn  0x10u 


#de  f i n e 
#def i ne 
#d  e f i n e 
#def i ne 
#def i ne 
#def i ne 
#def i ne 


PGP. KEYTRUST. MASK  0x7u 
PGP.KEYTRUST.UNDEFINEDn  0x0u 
PGP. KEYTRUST. UNKNOWNn  0x1u 
PGP. KEYTRUST. NEVERn  0x2u 
PGP. KEYTRUST. MARGINALn  0x5u 
PGP. KEYTRUST. completed  0x6u 
PGP. KEYTRUST. ULTIMATEn  0x7u 


/* 

* Name  trust  byte: 

* 8 +--+ 

* I I WARNONLY  bit  - yes,  it's  okay  to  use  even  though  not  fully  trusted 

* 7 + — + 

* I I unused 

* 6 +--+ 

* I I unused 

* 5 +--+ 

* I I unused 


i::CHK:6f4dffee7bbc8ce9562e07ba359e4dbd2bb3c399ad52f0992be202b391 9238534:: 
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* 4 +--+ 

* I I unused 

* 3 + — + 

* I I unused 

* 2 +--+ 

* I I Confidence  in  name's  validity. 

* 1 + + 00  - Not  known 

* I I 01  -Not  trusted 

* 0 +--+  10  - Partially  trusted 

* 11  - Completely  trusted 

* 

* New  trust  packets  are  followed  by  up  to  two  more  bytes,  which  are  the 

* certainty  PGP  has  of  the  name's  validity  and  the  confidence  the  user 

* has  assigned  to  this  name  as  an  introducer,  respectively.  The  byte 

* b represents  probability  of  10''(-b/40)  that  the  name  is  incorrect, 

* up  to  252.  255  means  "total  confidence",  253  means  confidence  is 

* undefined,  and  254  is  reserved  for  now. 

* 

* aaa  Reserve  0 for  "undefined/I  dunno",  1 for  "untrusted"  and  offset 

* everything  that  way.  It  might  be  more  natural... 

* 

* The  following  pattern  repeats  each  40: 

★ 


* 

0 

= 

1 . 00000 

9 

= 

1 . 67880 

1 8 

= 

2 .81838 

27 

= 

4.73151 

36 

= 

7 . 

94328 

★ 

1 

= 

1 .05925 

1 0 

= 

1 . 77828 

1 9 

= 

2.98538 

28 

= 

5.01187 

37 

= 

8. 

41395 

★ 

2 

= 

1.12202 

1 1 

= 

1 .88365 

20 

= 

3.16228 

29 

= 

5 . 30884 

38 

= 

8. 

91251 

★ 

3 

= 

1 . 1 8850 

1 2 

= 

1 . 99526 

21 

= 

3.34965 

30 

= 

5 . 62341 

39 

= 

9. 

44061 

★ 

4 

= 

1 .25893 

13 

= 

2.11349 

22 

= 

3.54813 

31 

= 

5 . 95662 

40 

= 

1 0 

. 0000 

★ 

5 

= 

1 . 33352 

1 4 

= 

2 . 23872 

23 

= 

3 .75837 

32 

= 

6.30957 

41 

= 

10 

. 5925 

* 

6 

= 

1.41254 

1 5 

= 

2.37137 

24 

= 

3 .98107 

33 

= 

6 . 68344 

42 

= 

1 1 

.2202 

* 

7 

= 

1 . 49624 

1 6 

= 

2.51189 

25 

= 

4 . 21697 

34 

= 

7 . 07946 

43 

= 

1 1 

. 8850 

★ 

ic 

8 

= 

1 .58489 

1 7 

= 

2 . 66073 

26 

= 

4.46684 

35 

= 

7.49894 

44 

= 

1 2 

. 5893 

★ 

A s 

you  can  see 

r 

f(12)  ■=  2, 

f (19) 

■=  3,  * 

and 

f(24)  ■= 

4. 

* The  converse  of  this  is  that  f(40-12)  = f(28)  = 10/f(12)  "=  10/2  = 5 

* and  similarly  f(21)  "=  10/3  = 3.33  and  f(16)  '=  10/4  = 2.5. 

* The  system  was  chosen  because  all  of  those  nice  integer  ratios 

* work  out . 

* 

* This  is  very  close  to  2''(-b/12),  the  difference  being  the  1 024/1  000 

* mismatch  that  programmers  are  used  to  ignoring.  Thus,  each  12  steps 

* is  an  octave  and  each  single  step  is  a semitone. 

* 

* From  the  API,  these  values  are  translated  to  16-bit  values,  which  are 

* all  the  programmer  sees.  The  16-bit  values  are  shifted  by  6 bits, 

* giving  a minimum  representable  error  of  abut  2.5*10^-26. 

*/ 

#define  PGP_NAMETRUSTF_WARNONLYn0x80u 

#define  PGP_NAMETRUST_MASK  0x3u 

#define  PGP_NAMETRUST_UNKNOWNn  0x0u 
//define  PGP_NAHETRUST_UNTRUSTEDn0x1u 
^define  PG P_N AM ET RU S T_H ARG I N A Ln  0x2u 
//define  PGP_NAHETRUST_COMPLETEn  0x3u 

/*  The  following  bytes  apply  to  validity  and  confidence  bytes  on  names  */ 
#define  PG P_N E WT R U S T_M AX  252 

#define  PG P_N E WT RU S T_U N D E F I N E D 253 

C[CHK:9c4a65a38d2d39bf7f66871a8f94527f7462c0fbed91872cce20444f7c937e566:: 
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^define  PGP_N E WTR U S T_I N F I N I T E 255 


/* 

* Signature  trust  byte: 

* 8 H 1 

* I I unused 

* 7 +--+ 

* I I Checked  - Signature  is  good 

* 6 "t 1 

* I I Tried  - Signature  verification  attempted 

* 5 +--+ 

* I I unused 

* 4 + 

* I I unused 

* 3 + — + 

* I I Introducer  trust,  copied  from  key  that  makes  it 

* 2 + + 

* I I 

* 1 + + 

* I I 

* 0 +--+ 

*/ 


* The 

* the 

* the 
*/ 


Lou  3 bits  of  a signature's  trust  are  generally  the  same  as 
corresponding  key's  trust  ( PG P_KE YT R U ST_UN D E F I N E D if  none),  but 
following  signature  p s e ud o- t r u s t s used  in  some  printing  contexts: 


#def i ne 

PGP_SIGTRUST_ 

NOKEYn 

0x8un 

/* 

#def i ne 

PGP_SIGTRUST_ 

RETIRED 

0x9u 

/* 

#def i ne 

PGP_SIGTRUST_ 

REVOKED 

0x  Au 

/* 

#def i ne 

PGP_SIGTRUST_ 

UNTRIEDn 

0xBud 

/* 

ttdei  i ne 

PGP_SIGTRUST_ 

INVALIDn 

0xCuQ 

/* 

#def i ne 

/* 

PGP_SIGTRUST_ 

BADd 

0x  D un 

/* 

There  are  four  possible  signature  states  worth  noting,  actually: 

- No  verification  attempted  (includes  key  not  found) 

- Verification  impossible  (format  problem  or  key  Length) 

- Verified  bad  (format  correct,  but  signature  is  no  good) 

- Verified  good 

In  practice,  the  middle  two  can  be  merged,  and  the  Last  marked  by 

the  PGP_SIGTRLISTF_CHECKED  bit  for  compatibility  with  2.x.  The  first  two 

can  be  d i s t i ng u i d h ed  through  the  use  of  the  PG P_S I GT R U ST F_T R I E D bit. 

If  clear,  the  signature's  verification  has  never  been  attempted. 


* At  some  future  point,  we  should  make  CHECKED=1  and  TRIED=0  mean  that 

* a signature  was  bad,  but  postpone  on  that  for  a while;  the  state  is 

* CHECKED=0,  TRIED=1  for  now.  If  we  see  CHECKED  set,  that  implies 

* TRIED . 

*/ 

^define  PGP_SIGTRUSTF_TRIEDn  0x20un  /*  Visited  by  sig  check  (-kc)  */ 

#define  PG P_S I GTRU ST F_ C H E C KE Dn  0x40un  /*  Checked  out  good  */ 

^define  PG P_S I GT RU ST F_ C H E C KE D_T R I E D ( PG P_S I GT R U ST F _ C H E C KE D | \ 

n n n n n n n PGP  S I GT RU ST F _T R I E D ) 


#ifdef  cpLuspLus 
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extern  "C"  { 

# e nd  1 f 

extern  char  const  PGPExport  * key T r u s t Ta b L e C D ; 
extern  char  const  PGPExport  *uidVaLidityTabLeCD; 

#ifdef  __cpluspLus 
} 

#end i f 

#endif  /*  PGPTRSTPKT  H */ 
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/* 

* pgpTrust.c 

★ 

* Copyright  <C)  1994-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $ld:  pgpTrust.c, V 1.6. 2.1  1 997/06/07  09:50:44  mhw  Exp  $ 

*/ 

# i n c L ude  <ma  t h . h> 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#endi f 


#incLude 

^include 

#incLude 

#incLude 


pgpDebug.h" 

pgpRngPriv.h 

pgpTrust.h" 

pgpTrstPkt.h 


byte 

r i ng T r u s t To  Ex t e r n ( wo r d 1 6 trust) 

{ 

#if  PGPTRUSTHODEL==0 
a (void)trust; 

n pgpAssert(0); 

n return0; 

#e  L se 

n if  (trust  ==  PGP_TRUST_INFINITE) 

n n return  (byte)  PGP_NEWTRUST_IN FINITE; 

n trust  >>=  TRUST.CERTSHI FT; 

n if  (trust  > PGP_NEWTRUST_MAX ) 

n n trust  = PG P_N E WT RU S T_H AX; 

n return  (byte)  trust; 

#end i f 
} 


wo  r d 1 6 

r i ngT r us t Tol n t e rn ( by t e trust) 
{ 

#if  PGPTRUSTHODEL==0 
n (void)trust; 

n pgpAssert(0); 

n return  0; 


#e  L se 

n 

□ 

□ 

n 

n 

n 

a 

# e nd i f 


if  (trust  > PGP_NEWTRUST_MAX)  ( 
n if  (trust  ==  PGP_NEWTRUST_INFINITE) 

n n return  (word16)  PG P_TRU S T_I N F I N I T E ; 

n else 

n n return  0;n  /*  Undefined  */ 

} 

return  (word16)  trust  <<  TRU ST_C ERT SHIFT; 


} 


i n t 

r i ngT r u s t Va L i d ( s t r u c t RingSet  const  *set,  word16  validity) 
{ 

#if  PGPTRUSTMODEL==0 
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u 
a 
a 
a 

If  else 
a 
a 
□ 

D 

# e n d i f 
} 

static  double  k1,  k2; 

static  double  kmaxt;n  /*  Maximum  value  of  trust  in  terms  of  1/n  error  prob  */ 

static  void 
ringTrustlnit(void) 

{ 

n double  d = log{10.0); 

n k1  = d/PGP_TRUST_DECADE; 

n k2  = PGP_TRUST_DECADE/d; 

n kmaxt  = exp  ( PGP_TRUST_HAX  * k1); 

} 

^define  RINGTRUSTINIK k)  if  (!k)  r i ngT r u s 1 1 n i t () 
unsigned 

r i ng I n t ToT r u s t C u n s i g ne d long  r) 

{ 

n RINGTRUSTINIT(k2); 

n return  (unsigned)  (log  ((double)  r)  * k2  + 0.5); 

> 


(void)set; 

(void)validity; 
pgpAssert(0); 
return  0; 

if  (validity  >=  ( s e t ->poo I -> t h r e s h o I d <<  T R U ST_ C E RT S H I FT ) ) 

n returni; 

else 

n return0; 


unsigned  long 

r i ng T r u s t To  I n t ( u n s i g ne d t) 

{ 

n RINGTRUSTINIT(k1 ); 

n return  (unsigned  long)  (exp  (t  * k1 ) + 0.5); 

} 

#ifdef  __GNIIC nn  /*  XXX:  Should  be  something  like  HAS_L0NG_L0NG  */ 

unsigned  long  long 
r i ng T r u s t ToU I I ( un s i g ned  t) 

{ 

n RINGTRUSTINIT( k1  ); 

a return  (unsigned  long  long)  (exp  (t  * k1)  + 0.5); 

} 

# e n d i f 


J 
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doub  I e 

r i ngT r u s t ToDoub I e ( uns i gned  t) 
{ 

n RINGTRUSTINIT(k1  ); 

n return  exp  (t  * k1); 

> 

unsigned 


pgpTrust.c 


r 1 ng Do ub L eToT ru s t ( dou b L e d) 

{ 

n pgpAssert  (d  >=  .9); 

n RINGTRUSTINIT(k2); 

n 1 f ( d >=  kmaxt ) 

n n return  PGP_NEWTRUST_MAX; 

□ else 

n n return  (unsigned)  (Log  (d)  * k2  + 0.5); 

> 

#if  0 

SincLude  <stdio.h> 


static  void 

p r e t t y t r u s t ( u n s i g n ed  t,  int  wid) 

{ 

n int  d = t - PG P_T R U ST_ D E C A D E - PG P_T R U ST_OCT A V E ; n /*  Tweak  this*/ 

n char  bufC10!l; 

n i n t i ; 

n unsigned  Long  L; 


if  (d  >=  0)  { 

n /*  Straightforward  */ 

n d -=  d % PGP_TRUST_DECADE; 

n i = d / PGP_TRUST_DECADE; 

n L = r i ngT r u s t To  I n t ( t -d ) ; 


n 

n 

if  ( i ) 

n 

n 

n 

wid  - 

= printf("1/%Lu%0*u", 

L,  i,  0); 

n 

n 

e L se 

Q 

n 

D 

wid  - 

= printf("1/%Lu",  L); 

□ 

> else 

{ 

Q 

n 

/*  Do 

d e c i ma  L 

point  thing  */ 

n 

n 

i = 0; 

n 

n 

do  ( 

n 

a 

n 

i+  + ; 

n 

n 

n 

Q. 

+ 

II 

PGP_TRUST_DECADE; 

o 

Q 

a 

t += 

PGP_TRUST_DECADE; 

n 

n 

} wh  i L 

e ( d < 

0); 

n 

n 

sprintf(buf. 

"%Lu",  r i ngT r u s t To  I n t ( t ) ) ; 

n 

n 

i = ( i n t ) s t r L en ( buf  ) - i; 

n 

a 

wid  - = 

printf("1/%.*s.%s",  i,  buf. 

b u f + i ) ; 

n 

> 

n 

while 

( — wi  d > 

= 0) 

n 

s 

put  cha  r ( ' ' ) ; 

int 

main(void) 

{ 

n unsigned  t; 

n unsigned  Long  Long  j; 


□ 

□ 


n 

n 


for  (t  = 0;  t <=  65535;  t++)  { 
n j = ringTrustToULL(t); 

n printf("%5u  = 1/%-9Lu  = ",  t,  j); 

n p r e t t y t r u s t ( t , 28); 
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a n putchar('\n'); 

n > 

a returnO; 

> 

# e nd i f 
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/* 

* pgpTrust.h 

★ 

* Copyright  (C)  1994-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

"k 

* $Id:  pgpTrust.h, V 1.4. 2.1  1997/06/07  09:50:44  mhw  Exp  $ 

*/ 


#ifndef  PGPTRUST_H 
//define  PGPTRUST.H 


//incLude  "pgpUsuaLs.h 


//define  PG  P_TRU  ST_  D E C A 0 E (40*64) 
#define  PGP_TRUST_OCTAVE  (12*64) 
#define  PGP_TRUST_MAX  0xfffe 
//define  PGP_T  RU  ST_  I N F I N I T E 0xffff 


//ifdef  __cpLuspLus 
extern  "C"  ( 

//e nd i f 


byte  PGPExport  ringTrustToExtern(word16  trust); 

word16  PGPExport  ringTrustToIntern(byte  trust); 

unsigned  PGPExport  ringIntToTrust(unsigned  Long  r); 

unsigned  Long  PGPExport  ringTrustTolnt(unsigned  t); 

unsigned  PGPExport  r i n g D o u b L eToT r u s t ( doub L e d); 

doubLe  PGPExport  r i ng T r u s t To Dou b L e ( u n s i g n e d t); 

int  PGPExport  r i ng T r u s t Va L i d ( s t r u c t RingSet  const  *set, 

n word16  vaLidity); 

//ifdef GNUC nn  /*  XXX:  ShouLd  be  something  Like  HAS_L0NG_L0NG  */ 

unsigned  Long  Long  PGPExport  ringTrustToULL(unsigned  t); 

// end i f 


//ifdef  __cpLuspLus 
} 

//end  i f 

//endif  /*  PGPTRUST.H  */ 
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ft 

ft  L i b/pgp/pi  pe/Hakef  i le  . i n 
ft 

ft  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 


J 


ft 


ft  $Id:  Ma  ke  f i L e . i n , V 1.1  4.4.2  1 997/06/07  09:50:46  mhw  Exp  $ 
ft 

S UBD I RS=u t i L s fiLe  sig  crypt  text  parser 

LI B D ON E=u t i L s / DON E fiLe/DONE  sig/DONE  crypt/DONE  text/DONE  parser/DONE 
a L L : : LIBDONE 

do-cLean: : 

n $(RM)  LIBDONEn 


J 


J 
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It 

tt  L i b / pg p / p i pe  / ma  ke f i L e . ms  c 
# 

It  Copyright  (C)  1 996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

M 

U $Id:  makef i Le.msc,v  1.4. 2.1  1997/06/07  09:50:46  mhw  Exp  $ 

# 

lincLude  " ma ke f i L e . i n " 

aLL  check  cLean  depend  headers  instaLL  very-cLean:: 
n for  %d  in  ( $(SUBDIRS)  ) do  \ 

n n cd  %d  S&  $(MAKE)  /$ C MAKE F LAG S ) /f  makefiLe.msc  $3  S&  cd  .. 

LIBDONE : 
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U 

U Mb/pgp/pipe/crypt/Makefi  Le.  in 
# 

It  Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

# $Id:  Makef i Le . i n,v  1.12.2.4  1997/06/07  09:50:47  mhw  Exp  $ 

# 

LOCALINCLUDES=  - I ../../ i n c L ud e 

0BJS  = n pgpC i ph rMod  . o pgpConvMod.o  pgpHakePKE.o  pgpPKEHod.o 
SHAREDHDRS=  pgpC i ph rMod . h pgpConvMod.h  pgpPKEMod.h 

a L L : : DONE 
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n 

M Lib/pgp/pipe/crypt/makefi Le.msc 
# 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

ft  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:50:47  mhw  Exp  $ 

U 

CFLAGS=  -I..\..\..\..\incLude  -I..\..\..\incLude  \ 
n -I . . \ \ \ . -DHAVE_CONFIG_H  $(DEBUG) 

PGPLIB=. .\. .\. .\pgpLib. Lib 

a L L : : a Lib 

headers:n  incL 

MncLude  "makefiLe.in" 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

n n for  Zf  in  C $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ \ i n c L u d e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( $(PRIVHDRS)  ) do  copy  %f  . . \ \ \ i n c L u d e 

D0S0BJS=  SCOBJS: .o=.obj ) 

Lib:n  SCDOSOBJS) 

. c . ob  j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 

c Lean : 

n de  L * . ob j 

DONE  : 

a if  exist  $(PGPLIB)  L i b / ou t : $ ( PG PLI B ) SCPGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpCiphrMod.c  --  A module  to  perform  Block  Cipher  encryption  and  Decryption 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <ua r I o r dSM I T . E D U> 

* 

* $Id:  pgpCiphrMod.c, V 1.6. 2. 2 1997/06/07  09:50:47  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG  H 


//include 

"config.h" 

// e nd i f 

//include 

<stdio.h> 

//include 

"pgpDebug.h" 

//include 

"pgpAddHdr.h” 

#include 

"pgpCiphrMod.h" 

//include 

"pgpPktByte. h" 

//include 

"pgpCFB. h" 

#include 

"pgpMem. h" 

#i nc  lude 

"pgpPipeline.h" 

#include 

"pgpUsuals.h" 

//if  (BUFSIZ  < 1 6384)  S&  (MACINTOSH  || 

//define 

kPGPCipherModBufSi zen 

1 6384 

//else 

//define 

kPGPCipherModBufSizen 

BUFSIZ 

#e nd i f 

//define 

CIPHERMODMAGICn  0x0c1fec0de 

//define 

CIPHERMOD_DECRYPT  0 

//define 

CIPHERMOD_ENCRYPT  1 

struct  Context  { 

n byte 

bufferCkPGPCipherModBufSizeD; 

n byte 

*buf pt  r ; 

n size 

_t  buflen; 

n struct  PgpPipeline  *tail; 

n struct  PgpC f b C on t e X t *cfb; 

a int 

(*progress)(); 

n byte 

>; 

encrypt ; 

WIN32) 


static  int 

DoFlush  (struct  Context  *context) 
{ 

n int  error  = 0; 
n size_t  retlen; 


n /*  Try  to  flush  anything  that  we  have  buffered  */ 
n while  ( con t e x t ->bu f I e n ) { 

n n retlen  = c on t ex t -> t a i I -> w r i t e ( c on t ex t -> t a i I , 
n n n n n c on t e x t ->b u f p t r , 

n n n n n c on t e x t -> b u f I e n , 

n n n n n Serror); 

n n context->buflen  -=  retlen; 
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n n memset  (context->bufptr,  0,  retLen); 

n n context->bufptr  +=  retLen; 

n n if  (error) 

n n n return  error; 

n > 

n return  error; 

} 

static  int 

Flush  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  Context  *context; 
a int  error; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  C I PH E RMO D M AG  I C ) ; 

n context  = (struct  Context  * ) my se L f->p r i v; 
n pgpAssert  (context); 
n pgpAssert  ( c o n t e x t -> t a i I ) ; 

n error  = DoFLush  (context); 
n if  (error) 

n n return  error; 

n return  c o n t e x t -> t a i L -> f L u s h ( c on t e x t -> t a i L ) ; 
} 


static  size_t 

Write  (struct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n size_t  written  = 0; 

n pgpAssert  (myself); 

a pgpAssert  ( my s e L f ->ma g i c ==  C I P H E RMO DM AG  I C ) ; 
n pgpAssert  (error); 


n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i L ) ; 


n dot 


□ 

a 

*error  = DoFLush  (context); 

n 

n 

i f 

(*error) 

o 

a 

B 

return  written; 

a 

□ 

/* 

a 

n 

* 

Now  that  we  dont  have  anything  buffered,  bri 

ng  i 

n more 

n 

B 

* 

data  from  the  passed-in  buffer,  process  it. 

and 

buffer 

a 

B 

* 

that  to  write  out. 

a 

B 

*/ 

a 

B 

context->bufptr  = context->buffer; 

a 

a 

c on t e X t ->bu f L e n = min  (size,  sizeof  ( c on t ex t -> bu f f e r ) ) ; 

a 

B 

/* 

Tell  user  how  many  bytes  we're  doing,  allow 

him 

to  interrupt 

a 

B 

i f 

( context->progress  S&  c o n t e x t ->b u f L e n ) { 

□ 

B 

Q 

if  ( c on t e x t ->p r og r e s s ( c 0 n t e X t ->bu f L e n ) < 0) 

{ 

[CCHK:e9a115bb2206005998fccaf00a00701333d1999f554fecc0596d200bb0f23e397]] 
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n 

n 

a 

B 

/*  User  requested  interruption  */ 

n 

n 

n 

B 

*error  = PG P E RR_ I NT E R RU PT E D ; 

n 

n 

a 

B 

return  written; 

n 

n 

a 

> 

n 

n 

} 

□ 

□ 

if 

(context->encrypt) 

Q 

a 

u 

pg p C f b E n c r y p t ( c on t e x t -> c f b , (byte  *)buf. 

n 

n 

B 

B 

context->buffer,  context->buflen); 

n 

n 

e L 

s e 

n 

□ 

B 

pg p C f b D e c r y p t ( c on t e x t -> c f b , (byte  *)buf. 

n 

n 

B 

B 

context->buffer,  context->buflen); 

n 

D 

b u f + = 

context->buflen; 

Q 

n 

s i 

11 

1 

at 

N 

context->buflen; 

n 

n 

w r i 1 1 e n 

+ = c on t ex t ->bu f 1 e n ; 

n > while  (context->bufLen  > 0); 

n /*  Continue  until  we  have  nothing  buffered  */ 

n return  written;n 
} 


static  int 

Annotate  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 
n int  error; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  C I PH E RMO DM AG  I C ) ; 


n context  = (struct  Context  *)myself->priv; 

a pgpAssert  (context); 

n pgpAssert  (context -> tail); 


n error  = DoFlush  (context); 
n if  (error) 

n n return  error; 


n return  con t e x t -> t a i I ->a n no t a t e ( c on t ex t -> t a i I , origin,  type, 
n n n n n string, size); 

> 


static  int 

SizeAdvise  (struct  PgpPipeline 

r 

B 

struct  Context  *context; 

B 

int  error; 

B 

pgpAssert 

(myself); 

B 

pgpAssert 

( my s e 1 f ->ma g i c = 

B 

context  = 

(struct  Context 

B 

pgpAssert 

(context); 

B 

pgpAssert 

(context->tai  1); 

B 

error  = DoFlush  (context); 

*myself,  unsigned  long  bytes) 

= CIPHERHODMAGIC); 

*)myse I f->pri v; 
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a if  (error) 

n n return  error; 

n return  c o n t e x t -> t a i L ->s i z e Ad v i s e ( c on t e x t -> t a i L , bytes); 

} 

static  void 

Teardown  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  Context  *context; 
n pgpAssert  (myself); 

n pgpAssert  ( myse L f->mag i c ==  C I PH E RHO DM AG  I C ) ; 

a context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n if  (context->taiL) 

n n con t ex t-> t a i L ->t ea r down  ( c o n t ex t -> t a i L ) ; 

n pgpCfbDestroy  (context->cfb); 
n memset  (context,  0,  sizeof  (*context)); 
a pgpMemFree  (context); 

n memset  (myself,  0,  sizeof  (*myself)); 
n pgpMemFree  (myself); 

} 

struct  PgpPipeline  ** 

pg pC  i p h e r Mod D e c r y p t C r e a t e (struct  PgpPipeline  **head, 
n n n struct  Pg p C f b C on t ex t *cfb,  struct  PgpEnv  const  *env) 

{ 

n struct  PgpPipeline  *mod; 

n struct  Context  *context; 

n pgpAssert  (cfb); 

n if  (!head)  ( 

n n pgpCfbDestroy  (cfb); 

n n return  NULL; 

n > 

n context  = (struct  Context  * ) pg pM emA I I o c (sizeof  (*context)); 
n if  (!context)  { 

a n pgpCfbDestroy  (cfb); 

a n return  NULL; 

n } 

a mod  = (struct  PgpPipeline  * ) pg pMem A I I o c (sizeof  (*mod)); 

n if  (!mod){ 

n n pgpCfbDestroy  (cfb); 

n n pgpMemFree  (context); 

n n return  NULL; 

n > 

a mod->magic  = C I P H E RMO D M AG  I C ; 
n mod->write  = Write; 

n mod->flush  = Flush; 

n mod-> s i z e Ad V i s e = SizeAdvise; 

n mod->annotate  = Annotate; 

[CCHK:d338bbdda336ee2002001980f44c7ee24400ede88a157ce6c21cc7bf7ce5380e2:: 


1089 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpCiphrMod.c 


n mod->t ea rdown  = Teardown; 

n niod->name  = "Cipher  Decryption  Module"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  C*context)); 

n c on t e X t ->bu f p t r = c on t ex t ->b u f f e r ; 

n context->cfb  = cfb; 

n context->encrypt  = CIPHERMOD_DECRYPT; 

n c on  t ex  t->p  r og  r e s s = pgpe  n vGe  t Po  i n t e r (env,  PG  P E N \/_  E N C R Y PT 1 0 N C A L LB  AC  K, 

n n NULL,  NULL); 

n c on t e X t -> t a i L = *head; 

n *head  = mod; 

n return  &context->ta i L ; 

> 

struct  PgpPipeLine  ** 

pgpCi pherModEncryptCreate  (struct  PgpPipeLine  **head,  PgpVersion  version, 
n n n struct  PgpFifoDesc  const  *fd, 

n n n struct  Pg pC f bC on t e x t *cfb, 

n n n byte  const  ivCI\/LEN-2D,  struct  PgpEnv  const  *env) 

{ 

n struct  PgpPipeLine  *mod,  **taiL; 

n struct  Context  *context; 

n byte  e n c_ i v C I V LEN ] ; 

n pgpAssert  (cfb); 

n if  (!head) 

n n return  NULL; 

n context  = (struct  Context  * ) pg pMemA L L o c (sizeof  (*context)); 
n if  ([context) 

n n return  NULL; 

n mod  = (struct  PgpPipeLine  *)pgpMemALLoc  (sizeof  (*mod)); 

n i f ( I mod  ) { 

n n pgpMemFree  (context); 

n n return  NULL; 

n > 

n mod->magic  = C I P H ERMO DM AG  I C ; 
n mod->write  = Write; 

n mod->fLush  = Flush; 

n mod->s i zeAdvi se  = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardown; 

n mod->name  = "Cipher  Encryption  Module"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 

n c on t ex t ->bu f p t r = con t ex t ->bu f f e r ; 

n context -> cfb  = cfb; 

n c on t ex t ->e n c r y p t = C I PH E RMO D_E N C R Y PT ; 

n con t e X t ->p r og r e s s = pg pe n vG e t Po i n t e r (env,  PG P EN V_ E N C R Y PT I ON C A LLB A C K, 

n n NULL,  NULL); 

n /*  Splice  in  the  module  */ 

n CO n t e X t -> t a i L = *head; 
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a tail  = 8context->taiL; 

a /*  Created  the  encrypted  IV  */ 
a memcpy  (enc_iv,  iv,  IVLEN-2); 
a memcpy  ( enc_i v+I VLEN-2,  e n c _ i v+ 1 V LE N-4 , 2); 
a pgpCfbEncrypt  (cfb,  enc_iv,  enc_iv,  IVLEN); 
a pgpCfbSync  (cfb); 

a tail  = pgpAddHeaderCreate  (taiL,  version,  fd,  PKTBYTE 
a a n n enc_iv,  IVLEN); 

a 

a memset  (enc_iv,  0,  IVLEN); 
a if  (ItaiL)  { 
a a pgpMemFree  (context); 

a a pgpMemFree  (mod); 

a a return  NULL; 

a } 

a *head  = mod; 
a return  tail; 

} 

/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpCiphrMod.h  --  secret-key  cipher  module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r dSH I T . E D U> 

★ 

* $Id:  pg p C i ph r Mod  . h , V 1 . 4. 2.1  1 997/06/07  09:50:48  mhu  Exp  $ 

*/ 

Sifndef  PGPCIPHRMOD.H 
^define  PGPCIPHRMOD.H 

#incLude  "pgpUsuaLs.h" 

^include  "pgpEnv.h" 

#ifdef  ..cpluspLus 
extern  "C"  { 

# e nd i f 

struct  PgpPipeline; 

#ifndef  TYPE. PGPPIPELINE 

^define  T YP E.PG PP I P E L I N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

#endi 1 

struct  PgpCfbContext; 

#ifndef  T Y PE. PG PC F BC ONT E XT 
#define  TYPE.PGPC FBCONTEXT  1 

typedef  struct  PgpCfbContext  PgpCfbContext; 

# e n d i f 

struct  PgpFifoDesc; 

#ifndef  T Y PE.PG P F I F 0 D E S C 

^define  TYPE.PGPFI FODESC  1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#endi f 

/* 

* Create  a Cfb  Decryption  Module 

* This  module  assumes  control  of 

* it  upon  teardown. 

*/ 

struct  PgpPipeline  PGPExport  ** 
pgpCipherHodDecryptCreate  (struct 
n n n struct 

/* 

* Create  a Cfb  Encryption  Module  using  the  passed-in  PgpCfbContext.  The 

* user  must  pass  in  an  8-byte  iv,  which  will  be  encrypted  into  the 

* stream.  The  Cipher  Module  assumes  control  of  the  PgpCfbContext  and 

* will  clear/free  it  upon  teardown. 

*/ 

struct  PgpPipeline  PGPExport  ** 

pgpC i phe rMod En c ry p t C r ea t e (struct  PgpPipeline  **head,  PgpVersion  version. 


n 

u 

n 

struct 

PgpFifoDesc  const  *fd. 

n 

n 

n 

struct 

PgpCfbContext  *cfb. 

n 

n 

n 

byte  const  i v C I V L E N-2 D , 

CCCHK: 6c9af cbbf f 1 bb6779300521  e992348ee4b39bbd03a95f ee95c9c2ddc872  51  51d9]: 
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n n n 

struct  PgpEnv  const  *env); 

#ifdef  __cpLusplus 

> 

# e n d i f 

#endif  /*  PGPCIPHRMOD.H  */ 

::CHK:333433db89db2c]] 
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/* 

* pgpConvMod.c  --  ConvetionaL  Encryption  Module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Uses  the  cipher  module  to  encrypt  a message;  this  will  output  the 

* appropriate  PGP  headers  (ESK-type)  packets  associated  with  the 

* requested  encryption  type  and  pass  phrase  string. 

* 

* Written  by:n  Derek  Atkins  < wa r L o r dSM I T . E D U> 

* 


* $Id: 

pgpConvMod . c , 

V 

*/ 

#ifdef  HAVE_C0NFIG_H 

//include 

"config.h" 

// e nd i f 

//include 

<stdio. h> 

//include 

"pgpConvMod  . 

h" 

//include 

"pgpPktByte  . 

h" 

//include 

"pgpCFB. h" 

#i nc  Lude 

"pgpCipher.h 

" 

//include 

"pgpConvKey. 

h" 

#incLude 

"pgpJoi n . h" 

#incLude 

"pgpMem. h" 

//include 

"pgpErr.h" 

#i nc  Lude 

"pgpPipeline 

. h 

//include 

"pgpStr2Key. 

h" 

//include 

"pgpUsua  L s . h 

" 

conventional  ESK  has  the  following  format: 
<packet  header>  (type.  Lien,  Length) 
versionCID 
cipherCI D 

StringToKey  ObjectCxD 
ESK  ( op t i on  a I ) C y D 


* A 
*n 
*n 
*n 
*n 
*n 
*/ 

static  int 

addConvESKs  (struct  PgpPipeline  *join,  PgpVersion  version,  byte  cipher. 


struct  PgpSt ri ngToKey  const  *s2k, 
struct  PgpConvKey  const  *convkeys, 
byte  const  *session) 


D 

struct 

PgpSt ri ngToKey  const  *sToK 

n 

struct 

PgpCipher  const  *sc  = NULL 

n 

struct 

PgpCfbContext  *cfb  = NULL; 

n 

size 

_t 

esklen.  Last  = 0; 

n 

byte 

★ 

buf  = NULL,  *ptr; 

n 

byte 

* 

key  = NULL; 

n 

i nt 

err  = 0 ; 

s 

if  ( 

! c) 

n 

n 

return  PGPERR_BADPARAM; 

n 

if  (session)  ( 

^c  = pg pC i p h e r By N umbe r (cipher); 
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u 

n 

s c 

= pgpCi pherByNumber  (*session); 

a 

n 

i f 

( ! s c ) 

a 

n 

n 

return  PG P E R R_B A D P A R AM ; 

a 

n 

c f b 

= pgpCfbCreate  (c); 

n 

B 

i f 

( ! cf b) 

a 

B 

n 

return  PG P E R R_N OM EM ; 

n 

B 

key 

= (byte  * ) pgpMemA 1 L oc  ( c-> ke y s i z e ) ; 

B 

B 

i f 

(!key)  ( 

B 

B 

B 

pg p C f b D e s t r oy  (cfb); 

B 

B 

B 

return  PGPERR_N0MEM; 

B 

B 

} 

B 

> 

B 

for  ( ; 

convkeys;  convkeys  = c on v ke y s-> n e x t ) { 

B 

B 

sToK  = ( c on V key s-> s t r i n gToKey  ? c on v key s-> s t r i ng To  Key  : s2k); 

B 

B 

eskLen  = 1 + 1 + sToK->en code L en ; 

B 

B 

i f 

(sc) 

B 

B 

B 

eskLen  +=  sc->keysize  + 1; 

B 

B 

i f 

(eskLen  + 3 > Last)  { 

n 

B 

Q 

buf  = (byte  * ) pg pM emR ea L L o c (buf,  eskLen  + 3); 

n 

B 

n 

if  ( ! buf  ) { 

n 

B 

B 

a err  = PG PE R R_N0M EM ; 

B 

B 

B 

n break; 

B 

B 

B 

} 

B 

B 

□ 

Last  = eskLen  + 3; 

B 

B 

} 

B 

B 

i f 

(eskLen  > 8192)  ( 

B 

B 

D 

err  = PG P E RR_ E S K_T00 LON G ; 

B 

B 

□ 

break; 

B 

B 

> 

B 

n 

pt  r 

= b u f + 3 ; 

B 

n 

*ptr++  = (byte)  version; 

B 

Q 

*pt  r + + = cipher; 

B 

n 

memcpy  Cptr,  sToK->e n c od i ng , s T oK->e n c ode  1 e n ) ; 

B 

n 

p t r 

+=  sToK->encode L en; 

B 

n 

/* 

Add  optionaL  ESK  */ 

B 

n 

i f 

(sc)  { 

B 

B 

B 

pg p S t r i ng ToKey  (sToK,  c on v key s->pa s s , 

B 

B 

B 

n n con vkey s->pa ss L en,  key,  c->keysize); 

B 

B 

B 

pgpCfblnit  (cfb,  key,  NULL); 

B 

B 

B 

memset  (key,  0,  c->keysize); 

B 

B 

B 

pgpCf bEncrypt  (cfb,  session,  ptr,  s c-> key s i z e+ 1 ) ; 

B 

B 

B 

pgpCfbWipe  (cfb); 

B 

B 

B 

ptr  +=  sc->keysize  + 1; 

B 

B 

> 

B 

B 

/* 

Create  the  ConvESK  Packet  */ 

B 

B 

i f 

(PKTLEN_ONE_BYTE(eskLen) ) { 

B 

B 

n 

bufCi:  = PKTBYTE_BUILD_NEU  ( PKTB YT E_C0 N V E S K ) ; 

n 

B 

B 

bufC2:  = PKTLEN_1BYTE(eskLen); 

n 

B 

B 

ptr  = buf +1 ; 

n 

B 

B 

eskLen  +=  2; 

n 

B 

> e 

L s e { 

Q 

n 

n 

bufC0:  = PKTBYTE_BUILD_NEU  ( PKTB YT E_ C ON V E S K ) ; 

n 

Q 

B 

bufCi:  = PKTLEN_BYTE0(eskLen); 

B 

n 

B 

buf[2]  = PKTLEN_BYTE1 (eskLen); 

B 

□ 

B 

ptr  = buf ; 

B 

n 

B 

eskLen  +=  3; 
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n 

n 

} 

n 

a 

if  ( pg p J 0 i nBuf f e r (join,  ptr. 

n 

n 

n err  = PG P E R R_N0M E M ; 

n 

n 

n break; 

n 

n 

} 

n 

> 

Q 

i f 

(key)  { 

n 

n 

memset  (key,  0,  c-> key s i z e+1 ) 

□ 

n 

pgpMemFree  (key); 

Q 

> 

n 

i f 

(buf)  { 

n 

Q 

memset  (buf,  0,  Last); 

n 

n 

pgpMemFree  (buf); 

n 

> 

n 

i f 

( c f b ) 

n 

n 

pgpCfbDestroy  (cfb); 

n 

return  err; 

!=  eskLen)  { 


Struct  PgpPi pe 1 i 

ne  ** 

pgpConvModC reate 

(struct 

D n 

struct 

n n 

struct 

o n 

struct 

n n 

byte  c 

struct  PgpFifoDesc  const  *fd, 
struct  Pg p S t r i n g ToKey  const  *s2k, 
struct  PgpConvKey  const  *convkeys, 
byte  cipher,  byte  const  *session) 

struct  PgpPipeLine  *join  = NULL,  **taiL  = Sjoin; 


n 

/* 

Only 

aLLow  conventional  ESKs  with 

PGPVERSI0N_ 

n 

i f 

(version 

<=  PGPVERSI0N_2_6)  { 

n 

B 

if 

(cipher  != 

PGP_CIPHER_IDEA 

1 1 convkey 

Q 

fl 

B 

return  NULL; 

n 

B 

B 

D 

B 

if 

( convkey s- 

>stringToKey) 

n 

B 

B 

i f ( 

! pgpS2Ki sOldVers 

(convkeys-; 

n 

B 

B 

□ 

return  NULL; 

n 

B 

else 

D 

B 

B 

if  ( ! 

pgpS2Ki sOLdVers 

(s2k)) 

a 

B 

B 

B 

return  NULL; 

n 

> 

n 

t a i 

L = 

pgpJoi nCreate 

(Sjoin,  fd); 

s 

i f 

( ! ta 

i L ) 

Q 

B 

return  NULL; 

s 

/* 

Add 

the 

conventional  ESKs  here  */ 

Q 

i f 

(version 

> PGPVERSI0N_2_6)  C 

B 

B 

if 

(addConvESKs  (join,  version,  cipher. 

B 

B 

B 

B 

session))  { 

B 

B 

B 

join- 

>teardown  (join) 

r 

B 

B 

B 

return  NULL; 

B 

B 

> 

B 

> 

B 

/* 

Sp  L i 

ce  i 

n the  join 

module  */ 

session) 


n *taiL=*head; 
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n *head=join; 

n return  tail; 

> 
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/* 

* pgpConvMod.h  --  Conventional  Encryption  Module 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  By : n Derek  Atkins  < wa r I o r d0H I T . E D U> 

* 

* $Id:  pgp C on vMod . h , V 1.4. 2.1  1 997/06/07  09:50:48  mhw  Exp  $ 

*/ 

#ifndef  PGPCONVMOD.H 
^define  PGPCONVMOD  H 


^include  "pgpUsuals.h 


#ifdef  __cplusplus 
extern  "C"  C 
# e n d i f 

struct  PgpPipeline; 

#ifndef  TYPE.PGPPIPELINE 
//define  T Y P E_PG  P P I PE  L I N E 1 
typedef  struct  PgpPipeline  PgpPipeline; 
// en d i f 

struct  PgpFifoDesc; 

#ifndef  T YP E_PG P F I F 0 D E S C 
#define  T YP E_PG P F I F 0 D E S C 1 
typedef  struct  PgpFifoDesc  PgpFifoDesc; 
//e nd i f 


struct  PgpConvKey; 

//ifndef  TYPE.PGPCONVKE Y 

//define  TYPE.PGPCONVKE Y 1 

typedef  struct  PgpConvKey  PgpConvKey; 

//e nd i f 

struct  PgpS t r i ngToKey ; 

//ifndef  TYPE.PGPSTRI  NGTOKEY 
//define  TYPE.PGPSTRI  NGTOKEY  1 

typedef  struct  PgpStringToKey  PgpStringToKey; 
//end i f 


struct  PgpPipeline 
pg pC on vModC r ea t e ( 


PGPExport  ** 

struct  PgpPipeline  **head,  PgpVersion 
struct  PgpFifoDesc  const  *fd, 
struct  PgpStringToKey  const  *s2k, 
struct  PgpConvKey  const  *convkeys, 
byte  cipher,  byte  const  *session); 


version. 


//ifdef cplusplus 

> 

// end i f 


#endif  /*  PGPCONVMOD.H  */ 
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/* 

* pgpMakePKE.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpMakePKE . c, V 1.3. 2.1  1 997/06/07  09:50:49  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end  i f 


#incLude 
#incLude 
#i nc  Lude 
#incLude 
# i n c L ude 


pgpDebug . h" 
pgpMakePKE. h 
pgpErr.h" 
pgpPubKey . h " 
pgpUsuaLs.h" 


/*  The  maximum  size  of  the  PKE  */ 
si z e_  t 

makePkeMaxSi ze  (struct  PgpPubKey  const  *pub,  PgpVersion  version) 
{ 

n /*  version  + keylD  + type  +bit  count  + mpi  */ 

n return  10  + pg p Pu bKey M a x e s k ( pu b , version); 

> 


/* 

* Given  a buffer  of  at  Least  " ma ke P keMa x S i z e " bytes,  make  a PKE 

* into  it  and  return  the  size  of  the  PKE,  or  <0. 

* 

* Format  of  PKE  packets: 

★ 


★ 

Of f setn 

Leng  t hn 

Mean i ng 

★ 

0n 

In 

Version  byte  (=2). 

★ 

1 n 

8n 

KeylD 

*n 

9n 

In 

PK  aLgorithm  (1  = RSA) 

* 

1 0n 

2 + ?n 

MPI  of  PK-encrypted  integer 

*/ 
i nt 

makePke  (byte  *buf,  struct  PgpPubKey  const  *pub, 
n struct  PgpRandomContext  const  *rc, 

n byte  const  *key,  unsigned  keyLen,  PgpVersion  version) 

{ 

n size_t  eskLen; 

n inti; 

n (void)  version; 

n /*  XXX  ShouLd  "die"  gracefuLLy,  here  */ 

n pgpAssert  ( p u b->e n c r y p t ) ; 


n i = pg p Pu b Key E n c r y p t (pub,  key,  keyLen,  buf+10,  &eskLen,  rc,  version); 

n i f ( i < 0 ) 

n n returni; 

Q 

n /*  Okay,  buiLd  the  PKE  packet  - fixed  version  number.  */ 

n buft0:  = (byte)PGPVERSI0N_2_6; 

n /*  KeylD  */ 
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n memcpy { buf +1 , pub->keyID,  8); 

n /*  Type  */ 

n bufC93  = pub->pkAlg; 

n return  ( i n t ) e s k I en+1 0; 

} 
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/* 

* pgpMakePKE.h  --  Hake  a Public  Key  Encrypted  packet  from  a pubkey  and  a 

* sessionkey. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpMakePKE . h,v  1.2. 2.1  1 997/06/07  09:50:49  mhw  Exp  $ 

*/ 

#ifndef  PGPMAKEPKE.H 
//define  PGPMAKEPKE.H 

#incLude  <stddef.h>n  /*  For  size.t  */ 

#incLude  " pg pU s u a L s . h " n /*  For  byte  and  PgpVersion  */ 


# i f d e f 

extern 

// end i f 

..cpluspLus 

"C"  { 

struct 

struct 

PgpPubKey; 

PgpRandomContext ; 

/*  The 

size.t 

maximum  size  of  the  p ub L i c - key-e n c r y p t ed  packet  */ 

ma ke P keHa X S i z e ( s t r u c t PgpPubKey  const  *pub,  PgpVersion  version); 

/* 

* Given  a buffer  of  at  Least  "makePkeHaxSize"  bytes,  make  a PKE  packet 

* into  it  and  return  the  size  of  the  PKE,  or  0. 

*/ 

int  makePkeCbyte  *buf,  struct  PgpPubKey  const  *pub. 


n 

Q 

struct  PgpRandomContext  const  *rc, 

byte  const  *key,  unsigned  keylen,  PgpVersion  version); 

#i f def 

} 

//endi  f 

..cpluspLus 

//endi  f 

/*  PGPMAKEPKE  H */ 
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/* 

* pgpPKEMod . c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpPKEMod . c,v  1.2. 2.1  1997/06/07  09:50:49  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#endi f 


#incLude 

<stdio.h> 

#incLude 

"pgpDebug  . h" 

#incLude 

"pgpMakePKE.h" 

# i n c L ude 

"pgpPKEMod. h" 

#i nc  Lude 

"pgpPktByte.h" 

# i n c L ude 

"pgpFIFO.h" 

# i n c L ude 

"pgpJoin.h" 

# i n c L ude 

"pgpMem. h" 

#incLude 

"pgpErr.h" 

# i n c L ude 

" PgpPipeLine. h 

#def i ne 

PKEMODMAGICn 

0x90b1 1 c47 


struct  Context  C 
n byte*key; 

n size_t  keyLen; 

n byte*buf; 

n si2e_t  bufLen; 

n PgpVersion  version; 

n struct  PgpPipeLine  *taiL; 

>; 

static  int 

FLush  (struct  PgpPipeLine  *iiiyseLf) 
{ 

n struct  Context  *context; 


a pgpAssert  CmyseLf); 

n pgpAssert  ( my s e L f ->ma g i c ==  PKEMO D M AG  I C ) ; 


n 


n 

□ 


context  = 
pgpAssert 
pgpAssert 


(struct  Context  * ) my s e L f ->p r i v ; 
(context); 

(context->taiL); 


n return  con t e x t -> t a i L -> f L u s h ( c on t e x t -> t a i L ) ; 

} 


static  size_t 

Write  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n pgpAssert  (myseLf); 

n pgpAssert  ( my s e L f ->ma g i c ==  PKEMO D M AG  I C ) ; 

n pgpAssert  (error); 


CCCHK:6f1b8b559e7799f3ae04d188cc90f549c66663225ee29ddbdd8b6ffb385681e4f:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1102 


pgpPKEMod.c 


n 

Q 


□ 


context  = 
pgpAssert 
pgpAssert 


(struct  Context  * ) tny  s e L f ->p  r i v ; 
(context); 

(context->tai L); 


Q 

n 

a 

n 

□ 

□ 

Q 

n 

□ 

□ 

□ 

□ 


/* 
i f 
n 
□ 

Q 

a 

n 

n 

a 

□ 

a 


Once  data  is  written,  clear  out  the  key!  */ 

(context -> key)  { 

memset  (context->key,  0,  context->keyLen); 
pgpMemFree  ( c o n t e x t -> key ) ; 
context->key  = NULL; 
if  ( con t ex t->buf  ) { 

n memset  ( c on t e x t ->bu f , 0,  c o n t e x t ->bu f L e n 

n pgpMemFree  ( c on t e x t ->bu f ) ; 

n context->buf  = NULL; 

n c on t ex t ->b u f L e n = 0; 

} 


> 


n return  c on t e x t -> t a i L -> w r i t e ( c o n t e x t -> t a i I , buf,  size,  error); 

> 


static  int 

Annotate  (struct  PgpPipeline  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

B pgpAssert  (myself); 

B pgpAssert  ( my se  I f->mag i c ==  PKEMO DM AG  I C ) ; 

B context  = (struct  Context  * ) my s e I f ->p r i v; 

B pgpAssert  (context); 

B pgpAssert  (context->tail); 

B return  c on t e x t -> t a i I ->a n n o t a t e ( c on t e x t -> t a i I , origin,  type, 

B B n B n string, size); 

} 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 
{ 


n 

struct  Context  *context; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e 1 f ->ma g i c ==  PKEMO D M AG  I C ) ; 

n 

context  = 

(struct  Context  * ) my s e 1 f ->p r i v ; 

n 

pgpAssert 

(context)  ; 

□ 

pgpAssert 

(context ->tai  1); 

□ 

} 

return  c o n t e x t -> t a i 1 ->s i z e Ad v i s e (context 

static 

void 

Teardown  (struct  PgpPipeline  *myself) 
{ 


bytes); 


B struct  Context  *context; 
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n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  PKEMODHAG I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 


n if  ( cont ext->ta i L ) 

n n c o n t ex t -> t a i I -> t ea r down  ( c o n t e x t -> t a i L ) ; 


□ 

D 

□ 

n 

□ 

n 

n 

□ 

n 

n 

a 

□ 

n 

□ 

n 

> 


if  ( context->key)  { 

n memset  ( con t ex t -> key , 0,  c o n t e x t -> key L en  ) ; 

n pgpMemFree  ( c on t ex t -> key ) ; 

n context->key  = NULL; 

> 

if  ( con t ex t->buf  ) { 

n memset  ( con t ex t ->bu f , 0,  c o n t e x t ->bu f I en  ) ; 

n pgpMemFree  (context ->buf); 

n context->buf  = NULL; 

n context ->bufLen  = 0; 

> 

memset  (context,  0,  sizeof  (‘context)); 
pgpMemFree  (context); 

memset  (myself,  0,  sizeof  (‘myself)); 
pgpMemFree  (myself); 


/‘ 

‘ This  adds  a new  PKE  packet  to  the  head  of  the  message.  If 
‘ context->key  is  NULL,  return  an  error.  Also,  return  an  error  if 
‘ what  we  buffer  is  not  as  much  as  we  thought  we'd  written 
‘/ 


i nt 

pgpPkeAddKey  (struct  PgpPipeline  ‘myself,  struct  PgpPubKey  const  ‘pubkey, 
n struct  PgpRandomContext  const  ‘rng) 

{ 

n struct  Context  ‘context; 

n byte  ‘p; 

n size_t  size; 

n i n t i ; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  PKEMODMAGI C ) ; 


context  = (struct  Context  ‘ ) my s e I f ->p r i v ; 
pgpAssert  (context); 
pgpAssert  ( con t ex t -> t a i I ) ; 


a 

□ 

□ 

D 

a 

n 

n 

n 


size  = ma kePkeMa xS i ze ( pub  key , c on t ex t -> ve r s i on ) +3 ; 
if  ( con t e X t ->buf I e n < size)  { 

n p = (byte  ‘ ) pg pMemRea I I o c ( c on t ex t ->bu f , size); 

n i f ( ! p ) 

n n return  PGPERR_NOMEM; 

n context ->buf  = p; 

n c o n t e X t ->buf I e n = size; 

> 


n i = ma keP ke ( con t ex t->buf +3,  pubkey,  rng, 

n context->key,  con t ex t -> key  I e n , c on t ex t -> v e r s i on  ) ; 
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n 

i f 

(i  < 0) 

n 

a 

return  i; 

n 

if 

(context 

->version  > PG P V E R S 1 0 N_2_6 ) C 

n 

□ 

i f 

( PKTLEN_ONE_BYTE ( i ) ) { 

n 

□ 

n 

context->buf [1 : = PKTB YT E_BU I L D _ 

NEW( PKTBYTE_ 

ESK); 

□ 

n 

n 

context->buf  1:2:  = PKTLEN_1  B YTE  ( i 

>; 

n 

n 

□ 

p = c on t e X t ->bu f + 1 ; 

n 

n 

n 

size  = (size_t)i  + 2; 

n 

□ 

> e L s e { 

n 

n 

n 

context->buf  1:0:  = PKTBYTE_BUILD_ 

NEW( PKTBYTE_ 

ESK)  ; 

Q 

□ 

n 

context->buf :i ] = PKT LE N_B YT E 0 ( i ) ; 

D 

n 

a 

context->buf C2:  = PKT LE N_B YT E 1 ( i 

); 

□ 

n 

n 

p = c on t e X t ->bu f ; 

n 

n 

a 

size  = (size_t)i  + 3; 

□ 

n 

> 

n 

> e 

L s e { 

#if  0 

/*  PGP 

X 

(NJ 

wants  to 

see  2 byte  Length  fieLd  */ 

□ 

n 

i f 

(i  < 256)  { 

n 

□ 

n 

context->buf Cl : = PKTB YT E_BU I L D 

( PKTBYTE_ESK 

, 0); 

Q 

n 

n 

c 0 n t e X t -> bu f C 2 ] = (byte)i; 

□ 

n 

n 

p = c 0 n t e X t -> b u f + 1 ; 

n 

n 

□ 

size  = (size_t)i  + 2; 

n 

n 

> e 

L s e { > 

# e n d i f 

n 

Q 

context->buf [0:  = PKTBYTE_BUI LD  (PKTBYTE 

_ESK,  1); 

□ 

n 

c 0 n t ex t ->b u f C 1 3 = (byte)(i  >>  8); 

□ 

□ 

c on t ex t ->b u f C 2 3 = (byte)i; 

□ 

a 

P = 

context->buf; 

u 

n 

size  = (size_t)i  + 3; 

n 

> 

n 

i f 

( pgp J 0 i nBuf f e r ( c on t e x t -> t a i L , p,  size)  !=  si 

z e ) 

□ 

n 

return  PG P E R R_N0M EM; 

return  0; 


struct  PgpPipeLine  ** 

pgpPkeCreate  (struct  PgpPipeLine  **head,  PgpVersion  version,  byte  const  *key. 


s i ze_t  key  L en ) 

struct  PgpPipeLine  *mod,  *joinhead  = NULL,  **taiL; 
struct  Context  *context; 
byte  *buf; 

pgpAssert  (key); 


if  ( ! head  ) 

n return  NULL; 


context  = (struct  Context  * ) pg pMemA L L o c (sizeof  (*context)); 
if  ([context) 
n return  NULL; 

mod  = (struct  PgpPipeLine  *)pgpMemALLoc  (sizeof  (*mod)); 
if  ( ! mod ) { 

n pgpMemFree  (context); 
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n return  NULL; 

> 

tail  = pgpJoinCreate  (6joinhead,  SpgpByteFifoDesc); 
if  ( ! tai  L)  { 

n pgpMemFree  (context); 

n pgpMemFree  (mod); 

n return  NULL; 

> 

buf  = (byte  * ) pg pH em A L L o c (keyLen); 
if  ( ! buf  ) { 

n pgpMemFree  (context); 

n pgpMemFree  (mod); 

n j o i n h ea d-> t ea r d o wn  (joinhead); 

n return  NULL; 

) 

memcpy  (buf,  key,  keyLen); 

mod->magic  = PKEHODHAGIC; 
mod->write  = Write; 
mod->fLush  = Flush; 
mod-> s i z e Ad V i s e = SizeAdvise; 
mod->a n no t a t e = Annotate; 
mod-> t e a r d o wn  = Teardown; 
mod->name  = "PKE  Module"; 
mod->priv  = context; 

memset  (context,  0,  sizeof  (*context)); 
context->key  = buf; 
context -> keyLen  = keyLen; 
con t ex t -> V e r s i on  = version; 

context->taiL  = joinhead; 

*taiL  = *head; 

*head  = mod; 
return  tail; 


c 
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/* 

* pgpPKEMod.h  --  A Module  to  create  Public  Key  Encrypted  packets 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpPKEMod . h, V 1.3. 2.1  1 997/06/07  09:50:50  mhw  Exp  $ 

*/ 

#ifndef  PGPPKEMOD.H 
#define  PGPPKEMOD.H 

^include  "pgpUsuals.h" 

#ifdef  ..cplusplus 
extern  "C"  { 

Send  i f 

struct  PgpPipeline; 

Sifndef  T Y P E. PG P P I P E L I N E 

Sdefine  T Y P E.PG P P I P E L I N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

# e n d i f 

struct  PgpRandomContext ; 

Sifndef  T Y P E. PG P R A N DOM C 0 NT  EXT 
Sdefine  T YP E.PG P R A N D OH C ONT E XT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

# e n d i f 

struct  PgpPubKey; 

Sifndef  TYPE. PGPPUBKEY 

Sdefine  TYPE. PGPPUBKEY  1 

typedef  struct  PgpPubKey  PgpPubKey; 

Send  i f 

/* 

* Create  a module  to  output  PKE  packets.  The  key  is  a block  of  data 

* of  size  keylen  which  is  the  session  key  and  cipher  type  which  should 

* be  encrypted  in  the  public  keys  of  the  recipients. 

*/ 

struct  PgpPipeline  PGPExport  ** 

pgpPkeCreate  (struct  PgpPipeline  **head,  PgpVersion  version,  byte  const  *key, 
n size.t  keylen); 

/* 

* Encrypt  the  session  key  in  the  passed-in  public  key  and  add  that 

* to  the  PKE  list.  This  will  return  0 on  success  or  an  error  code. 

* 

* Note:  Once  any  data  is  written  to  this  module,  no  more  public 

* keys  can  be  added.  Calling  this  function  after  any  data  has  been 

* written  will  always  return  an  error. 

*/ 

int  PGPExport  pgpPkeAddKey  (struct  PgpPipeline  *myself, 

a struct  PgpPubKey  const  *pubkey,  struct  PgpRandomContext  const  *rng); 

#ifdef  ..cplusplus 
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> 

# e nd i f 

#endif  /*  PGPPKEnOD_H  */ 
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n 

# L i b /pgp /p  i pe  / f i L e /Ma  kef  i L e . i n 

n 

K Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

# $Id:  Makef i Le . i n,v  1.15.2.4  1997/06/07  09:50:50  mhw  Exp  $ 

# 


LOCALINCLUDES=  - I ../../ i n c L ud e 

OBJS=n  pgpArmor.o  pg p A rmr F i L . o pgpFiLeMod.o  pgpCRC.o  pgpHeader.o  \ 
n pgpPrsAsc.o  pgpRadix64.o 

SHAREDHDRS=  pgpArmor.h  pgpArmr Fi L . h pgpFiLeMod.h  pgpHeader.h  pgpPrsAsc.h 
a L L : : DONE 
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# 

# L i b /pgp / pi pe / f i L e /ma ke f i L e . ms c 
ft 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

tt  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:50:51  mhw  Exp  $ 

# 

CFLAGS=  -I..\..\..\..\incLude  -I..\..\..\incLude  \ 
n -I . . \ \ \ . -DHAVE_CONFIG_H  $(DEBUG) 

PGPLIB=. .\. .\. .\pgpLib. Lib 

a L L : : n Lib 


headers:n  incL 

lincLude  "makefiLe.in 

i n c L : 


n i f 

not  ' 

'$(SHAREDHDRS)"==""  \ 

Q n 

for  %f  in  C 

$( SHAREDHDRS ) ) do  copy  %f 

n if 

not  ' 

’SCPRIVHDRS)' 

’=  = "■■  \ 

D n 

for  %f  in  ( 

SCPRIVHDRS)  ) do  copy  %f  .. 

D0S0BJS=  SCOBJS 

: . 0= . ob  j ) 

Lib:n  $(D0S0BJS) 


. c . ob  j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 


c L ean  : 

n de  L * . ob j 

DONE  : 

n if  exist  SCPGPLIB)  L i b / ou t : $ ( PG P LI B ) $(PGPLIB)  $(D0S0BJS) 

a if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpArmor.c  --  a module  to  perform  Ascii  Armor 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  < wa r L o r d SH I T . E D U> 

* 

* $Id:  pgpArmor.c, V 1.6. 2. 2 1997/06/07  09:50:51  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 


#incLude 

#end i f 

"config.h" 

//include 

<stdi 0 . h> 

//include 

<ctype.h> 

//include 

"pgpDebug.h" 

//include 

"pgpArmor.h" 

//include 

"pgpCRC.h" 

//include 

"pgpPktByte.h" 

//include 

"pgpRadix64.h" 

//include 

"pgpAnnotate. h 

//include 

"pgpFI FO . h" 

//include 

"pgpHash.h" 

//include 

"pgpJoin.h" 

//include 

"pgpEnv. h" 

//include 

"pgpMem. h" 

//include 

"pgpEnv.h" 

//include 

"pgpPipeline.h 

//include 

"pgpRndom.  h" 

//include 

"pgpSpLit.h" 

//include 

"pgpUsua  Is  . h" 

^define  ARHORMAGICn  0xa4904f11 

□ □ 

/*  Max  Length  of  a Line  in  MIME  c on t en t -p r i n t a b L e encoding  */ 
#define  HIMEMAX  76 


/* 

* PGP-MIHE  headers.  We  chose  as  boundary  since  it  can't  occur  in 

* a quoted-printable  encoding,  nor  in  base64. 

*/ 


#def i ne 
#def i ne 
n 

Q 

#def i ne 

n 

n 

D 

n 


n 

#def i ne 
#def i ne 
#def i ne 
#def i ne 
n 


MIHESEP  "= — " 

MIMESIGHDR  "Mime-Version:  1.0\n"  \ 

” Con t e n t -Type : mu L t i pa r t / s i g n e d ; boundary=\""  MIMESEP  "\";\n"  \ 
" protocoL  = \"appLication/pgp-signature\",-  " 

MIMEENCHDR  " M i me- V e r s i o n : 1.0\n"  \ 

" C on t e n t -Ty pe : mu L t i pa r t / e n c r y p t e d ; boundary=\""  MIMESEP  "\";\n 
" protocoL=\"appLication/pgp-encrypted\";\n\n"  \ 

" — " MIMESEP  "\nContent-Type : a p p L i c a t i o n / pg p-e n c r y p t ed \ n \ n " \ 
"Version:  1\n\n — " MIMESEP  "\n"  \ 

"Content-Type:  appLication/octet-stream\n\n" 

MIMEMIC  "micaLg=pgp-" 

MIMEDFLTMIC  "pgp-md5" 

MIMETOPBOUND  "\n\n  — " MIMESEP  "\n" 

MIMEMIDBOUND  "\n — " MIMESEP  "\n"  \ 

"Content-Type:  appLication/pgp-signature\n\n" 


\ 
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#define  MIMEENDBOUND  "\n  — " MIMESEP  " — \n" 

Sdefine  MIMETOPHDR  "Content-Type:  text/pLain;  charset=iso-8859-1\n"\ 
n "Content-Transfer-Encoding:  quoted-printabLe\n\n" 


struct  Context  { 

n struct  PgpPipeline  *taiL; 

struct  PgpFifoDesc  const  *fd; 
struct  PgpFifoContext  *fifo; 
struct  PgpFifoContext  *header; 
unsigned  Longn  crc; 


a 

□ 

n 

n 

□ 

□ 

Q 

n 

□ 

n 

#if  0 

n 

#e  L s e 
□ 

# e nd i f 


unsigned  Longn 
unsi gned  Longn 
unsignedn 
unsignedn 
intn  scope_depth; 
byten  inputC48];n 


armorLines; 
L i neno; 
thispart; 
maxparts; 


/*  Maximum  48  bytes  */ 
charn  ou  t pu  t C 6 5 II  ; n /*  Maximum  63  buyes  + \r  and/or  \n  */ 

charn  o u t p u t C M I M E M AX+2 D ; /*  MIME  Line  pLus  \n  pLus  nuLL  */ 

/*  This  is  aLLocated  in  create  */ 


n 

char 

*n  outptr; 

D 

char 

*n  messageid;n  /* 

□ 

char 

const  *n 

bLocktype; 

n 

char 

const  *n 

comment; 

a 

char 

const  *n 

charset; 

n 

PgpVe 

r s i 0 nn 

version; 

by  t en 
byten 
byten 
byten 


i n L e n ; 
out  L en ; 
cLearsign; 
pgpmime; 


Sdefine  PGPMIMESIG  1 
^define  PGPMIMEENC  2 


Q 

byten 

didheader; 

n 

byten 

didfooter; 

n 

byten 

s i zeva  Lid; 

n 

byten 

state; 

Q 

>; 

byten 

Linebuf; 

/* 

* 

Armor  3 raw 

bytes  into  4 

* 

If  armoring 

n < 3 bytes. 

make  the  traiLers  zero, 
* then  overwrite  the  traiLing  3-n  bytes  with  '=' 

*/ 

static  void 

a r mo r Mo r s e L ( by t e const  rawC3D,  char  armorC4D) 


and 


armorC03  = a r mo  r Ta  b L e C r a w C 0 II  >>  2 & 0x3fll; 
armorCI]  = a r mo r Ta b L e C C r a w C 0 D <<  4 & 0x30) 
armorC2D  = a r mo r Ta b L e C ( r a w C 1 D <<28  0x3c) 
armorC3D  = a r mo r Ta b L e C r a w C 2 D 8 0x3f]; 


(rawCI]  >> 
(rawC2I]  >> 


8 0x0f)II; 
8 0x03)3; 


static  void 

a rmo r W r i t eC L a s s i f y (struct  Context  *context,  byte  const  *buf) 
f 

n if  ( c o n t e X t -> b L o c k t y p e ) 
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□ 


a return; 


a if  (PKTBYTE_TYPE(*buf ) ==  PKTBYTE_PUBKE Y ) 

a n context->bLocktype  = "PUBLIC  KEY  BLOCK"; 

a else 

n n context->bLocktype  = "MESSAGE"; 

> 


static  int 

a r mo r F L u s h H ea d e r (struct  Context  *context) 
{ 

n byte  const  *ptr; 

n unsigned  Len; 

n interror; 

n size_t  retLen; 


□ 

n 

n 

Q 

n 

n 

D 

Q 

n 

D 

□ 

> 


ptr  = pgpFifoPeek  (context->fd,  context->header,  &Len); 
while  (len)  { 

n retlen  = con t ex t -> t a i I ->w r i t e ( c on t e x t -> t a i I , ptr,  len, 

n n n n fierror); 

a pgpFifoSeek  (context ->fd,  context -> header,  retlen); 

n if  (error) 

n n returnerror; 

Q 

n ptr  = pgpFifoPeek  ( con t ex t ->f d , c on t ex t ->h ea d e r , &len); 

} 

return  0; 


static  void 

a rmo rMa keHeade r (struct  Context  *context) 
{ 

n char  temp[20D; 


n if  ( con t e X t ->pg pmi me  ==  PGPHIHEENC)  { 

n n pgpFifoUrite  ( co n t ex t->f d , c on t e x t ->h ea d e r , 

n n n (byte  const  * ) M I H E EN C H D R,  s t r I e n ( H 1 ME E N C H D R ) ) ; 

n > 

n pgpFifoWrite  ( c on t ex t->f d , con t ex t ->h e a d e r , 

n n (byte  const*)" BEGIN  PGP",  15); 

n pgpFifoWrite  ( context->f d,  con t ex t ->h e a d e r , (byte  * ) c on t ex t->b  I o c k t y pe , 

a n strlen  ( c on t ex t->b I o c k t y pe ) ) ; 


D 

n 

Q 

n 

D 

n 

n 

n 

n 

n 

n 

n 

n 

□ 

□ 


i f 

n 

a 

n 

n 

n 

n 

n 

n 

a 

a 

a 

n 

a 


( con t ex t ->ma X pa r t s ) { 

pgpFifoWrite  ( c on t ex t ->f d , c on t e x t ->h e a d e r , 
n (byte  const  *)",  PART  ",  7); 

sprintf  (temp,  "%02u",  context->thispart); 

pgpFifoWrite  ( cont ext->f d,  c on t e x t ->h e a d e r , (byte  const  *)temp, 

n strlen(temp)); 

if  ( c on t ex t -> V e r s i on  <=  PG P V E R S 1 0 N_2_6  | | 

context->thi spart  ==  c on t ex t ->ma xpa r t s ) { 
n pgpFifoWrite  ( c on t e x t -> f d , c on t e x t -> h ea d e r , 

n a (byteconst*)"/",1); 

a sprintf  (temp,  "%02u",  c on t e x t ->ma x pa r t s ) ; 

a pgpFifoWrite  ( c on t e x t ->f d , c on t e x t -> h ea d e r , 

a a (byte  const  *)temp,  strlen  (temp)); 

) 


} 
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n 

Q 

Q 

□ 


a 


pgpFifoWrite 

a 

pgpFi foWri te 

n 

n 


( c on t e X t -> f d , c o n t ex t -> h ea d e r , 

(byte  const  *)" \nVersion:  ",  15); 

C c on t e X t -> f d , c o n t e x t ->h e a d e r , 

(byte  const  * ) pg p L i b V e r s i on S t r i ng , 
strLen  ( pg p L i bV e r s i on S t r i n g ) ) ; 


n 

n 

n 

n 

Q 

Q 

n 


i f 
□ 
a 
n 
n 
n 
> 


( c on t e X t ->me s s a g e i d ) { 

pgpFifoWrite  ( c on t e x t -> f d , c o n t e x t -> h ea de r , 
n (byte  const  * ) " \ n Me s s a g e 1 D : ", 

pgpFifoWrite  ( c o n t e x t -> f d , c on t e x t -> h ea d e r , 
n (byte  const  * ) c on t e x t ->me s s a g e 

n StrLen  ( c o n t e x t ->me s s a g e i d ) ) ; 


12); 

d. 


□ 

□ 

n 

Q 

Q 

n 

Q 


i f 

Q 

n 

n 

n 

n 

> 


(context->comment) 

pgpFifoWrite 

a 

pgpFifoWrite 

D 

n 


{ 

( c o n t e x t -> f d , c on t e x t -> h ea d e r , 
(byte  const  * ) " \ nCommen t : ",  10); 

( c o n t e X t -> f d , c on  t e x t -> h e a d e r , 
(byte  const  * ) c o n t ex t -> c omme n t , 
StrLen  ( c on t e x t -> c omme n t ) ) ; 


□ 

n 

Q 

n 

n 

n 

□ 


i f 
n 

D 

a 

n 

a 

> 


(context->charset) 
pgpFi f oWri te 
□ 

pgpFifoWrite 

D 

n 


{ 

( c o n t e X t -> f d , c on t e x t -> h ea d e r , 
(byte  const  *)"\nCharset:  ",  10); 
( c on t e X t -> f d , c on t ex t ->h e a d e r , 
(byte  const  * ) c o n t ex t -> c h a r s e t , 
StrLen  ( c on t ex t -> c h a r s e t ) ) ; 


n pgpFifoWrite  ( c on t e x t -> f d , c on t e x t -> h ea d e r , (byte  *)"\n\n",  2); 

n context ->didheader  = 1; 

} 


static  void 

a rmo rMa ke Foo t e r (struct  Context  *context) 
{ 

n char  tempC20]; 

n byte  crcC3]; 


B /*  Emit  CRC,  MSB-first  */ 

B crcC0]  = ( by t e ) ( c on t e X t -> c r c >>  16); 

B crcCI]  = (byte)(context->crc  >>  8); 

B crcC2]  = ( by t e ) c on t e X t -> c r c ; 

B armorMorseL  (crc,  temp); 

B pgpFifoWrite  ( c on t e x t -> f d , c on t e x t -> h e a d e r , (byte  const  *)"=",  1); 

B pgpFifoWrite  ( c on t e x t -> f d , c on t ex t -> h ea d e r , (byte  const  *)temp,  4); 


/*  Now  emit  the  end  */ 

pgpFifoWrite  ( c on t e x t -> f d , c o n t e x t ->h ea d e r , 

B (byte  const  *)"\n END  PGP  ", 

pgpFifoWrite  ( con t e x t ->f d , c o n t e x t ->h e a d e r , 

B (byte  const  * ) c o n t e x t ->b L o c k t y p e , 

B StrLen  ( c o n t e x t ->b L o c k t y pe ) ) ; 


14); 


B if  ( context->maxpa rt s ) { 
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n 

□ 

n 

□ 

n 

Q 

n 

n 

□ 

n 

□ 

n 

n 

n 

n 

□ 


n 

n 

n 

a 

n 

n 

a 

n 

□ 

n 

n 

a 

n 

> 


pgpFifoWrite  ( c on t ex t -> f d , c o n t e x t ->h e a d e r , 
n (byte  const  *)",  PART  ",  7); 

sprintf  (temp,  "%02u",  context->thispart); 
pgpFifoWrite  (context->fd,  context->header, 
n (byte  const  *)temp,  strLen  (temp)); 

if  ( cont ext->ve rs i on  <=  PG P V E R S I 0N_2_6  || 

con t ex t->t h i s pa r t ==  c o n t e x t ->ma x pa r t s ) ( 

n pgpFifoWrite  ( con t e x t -> f d , c o n t e x t -> h e a d e r , 

n n (byteconst*)"/",1); 

a sprintf  (temp,  "%02u",  context->maxparts); 

a pgpFifoWrite  ( c on t e x t -> f d , c o n t e x t ->h ea d e r , 

n n (byte  const  *)temp,  strLen  (temp)); 

> 


pgpFifoWrite  ( c on t e x t-> f d , c on t e x t -> h e a d e r , 
n (byte  const  *)" \n",  6); 


n if  ( c on t e X t ->pg pmi me ) { 

n n pgpFifoWrite  ( c o n t e x t ->f d , c o n t e x t -> h e a d e r , 

n n (byte  const  *)HIMEENDBOUND,  strLen(MIMEENDBOUND)); 

n } 

n context ->didfooter  = 1; 

n context->crc  = CRC_INIT; 

} 


static  int 

armorNewFile  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  Context  *context  = (struct  Context  * ) my s e L f -> p r i v ; 

n interror; 

n unsigned  thispart; 


n / * 

a * First,  if  we're  already  in  a part,  then  close  off  the  Last 

n * one . 

n * / 

n if  ( con t ex t -> t h i s pa r t ) ( 

n n if  ( ! context->di df ooter) 

n n n armorMakeFooter  (context); 


n 

Q 

error  = armorFLushHeader  (context); 

n 

n 

i f 

(error) 

n 

n 

n 

return  error; 

n 

n 

error  = c on t e x t -> t a i L -> s i z e A d v i s e ( c on t e x t -> t a i L , 0); 

n 

n 

i f 

(error) 

n 

n 

n 

return  error; 

n 

n 

error  = c on t ex t -> t a i L ->a n n o t a t e 

(context 

->taiL,  myself 

n 

n 

n 

n n n 

PGPANN_ 

MULTI ARH0R_END 

Q 

a 

i f 

(error) 

n 

n 

n 

return  error; 

n 

> 

Q 

thispart 

= 

context->thi spart+1 ; 

n 

error  = 

con t ex t ->t a i L ->anno t a t e (context 

->t  a i L , 

myself. 

n 

n 

n 

n n PGPANN_ 

MULTI ARM0R_BEGIN, 

0); 
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n 

n 

□ 

u 

n 

(byte 

const  *)&thispart. 

Q 

n 

n 

s 

n 

si  z e 0 f 

(thispart)); 

n 

i f 

(error) 

n 

n 

return 

error; 

n c on t e X t -> t h i s pa r t ++ ; 

n c on t e X t ->d i d h ea d e r = 0; 

n c on  t ex  t ->d  i d f 00 1 e r = 0; 

n c o n t e X t ->  L i n e n o = 0; 

n /*  And  give  it  an  appropriate  header  */ 

n a rmo r Ha ke H ea d e r (context); 

n return0; 

> 


/* 

* The  method  here  to  do  the  armoring  is  somewhat  tricky. 

* Most  lines  just  have  inlen  = 48  which  maps  to  48*4/3  = 64 

* output  characters.  But  the  Last  Line  has  a short  inlen. 

* This  Leads  to  a truncated  Last  group,  which  Looks  Like  one  of: 

* xx==  (if  the  Last  group  contains  1 byte  - 4 bits  of  padding  are  zero) 

* xxx=  (if  the  Last  group  contains  2 bytes  - 2 bits  of  padding  are  zero) 

* xxxx  (if  the  Last  group  contains  3 bytes) 

* To  do  this,  we  make  sure  that  we've  added  an  extra  0 byte  to  the 

* end  of  the  input,  then  encode  it  in  blocks  of  3 bytes,  then  note  by 

* how  much  the  encoding  overshot  the  input  Length,  Len  - inlen. 

* This  is  2,  1,  or  0.  Overwrite  that  many  trailing  characters  with  '='. 

* Then  a newline  can  be  appended  for  output. 

*/ 

static  int 

armorLine  (byte  const  *in,  unsigned  inlen,  char  *out) 

{ 

n unsigned  Len; 

n i n t t ; 

n char  const  *out0  = out; 


n 

□ 

□ 

n 

Q 

n 


/*  Fill  the  output  buffer  from  the  input  buffer  */ 
for  (Len  = 0;  Len  < inlen;  Len  +=  3)  ( 
n armorMorseL  (in,  out); 

n i n +=  3; 

n out+=4; 

} 


D 

□ 

□ 

□ 

n 

n 

} 


/*  Now  back  up  and  erase  any  overrun  */ 

t = (int)(inLen  - Len);nn  /*  Zero  or  negative  */ 

while  (t) 

n outCt++D='='; 

return  (out  - out0); 


static  void 

a rmorProcessLi ne  (struct  Context  *context) 

{ 

n /*  Update  CRC  */ 

n context->crc  = crcUpdate  ( c on t ex t -> c r c , c on t e x t -> i n pu t , 

n n n n c on t ex t -> i n L e n ) ; 


[;[;CHK:fbc1170c00c222aa6fce018c6f219f01  649770ae433373a888ccdd201c1b54f9333 


1117 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpArmor.c 


n 

n 

n 

n 

a 

n 

a 


/*  Apply  padding  so  that  we  can  overshoot  */ 
if  ( con t ex t ->i n L en  < sizeof  ( context->i nput ) ) 
n context->inputCcontext->inLenIl  = 0; 

/*  Refill  the  output  buffer  from  the  input  buffer  */ 
c on t ex t ->ou t I en  = armorLine  ( c on t e x t -> i n p u t , c on t ex t -> i n I en , 
n n n context->output); 


n c on t ex t ->o u t pu t C c on t ex t ->ou t I e n++]  = '\n'; 

n c on t ex t ->ou t p t r = c on t ex t ->ou t pu t ; 

n c on t e X t -> i n I e n = 0; 

> 


static  int 

Flush  (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *context; 

n interror; 

n size_t  retlen; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  ARMORMAGIC); 


n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 

n pgpAssert  (context -> tail); 


n 

/ * Try 

t 0 

flush  anything  that  we  have 

buffered.  */ 

n 

while 

( c 0 n t ex t ->ou t 1 en  ) { 

n 

a 

retlen  = c on t e x t -> t a i 1 ->w r i t e 

(cont  ext->ta i 1 , 

n 

n 

n 

o n 

(byte  *) context->outpt r. 

□ 

n 

n 

n D 

context->out  len. 

Q 

n 

n 

a o 

Serror); 

Q 

n 

context->outlen  -=  retlen; 

n 

n 

cont ext->out pt r +=  retlen; 

n 

□ 

i f 

( ! context->out  len) 

Q 

n 

D 

context->lineno++; 

n 

n 

i f 

(error) 

n 

a 

n 

return  error; 

Q 

> 

n 

return 

0; 

} 


/* 

* First,  try  to  flush  out  the  output  buffer.  Once  that  is  empty, 

* refill  the  output  buffer  from  the  input  buffer,  append  a newline, 

* and  set  the  input  buffer  to  0 input.  Then  try  to  write  that  out, 

* too. 

*/ 

static  int 

DoFlush  (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *context  = (struct  Context  * ) my s e I f ->p r i v ; 

n interror=0; 
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a /* 

n * Try  to  flush  anything  that  we  have  buffered.  I know  that 

n * the  first  time  Flush  is  called,  outlen  WILL  be  zero! 

n */ 

D error  = Flush  (myself); 

n if  (error) 

n n returnerror; 

n /*  Next,  try  to  output  anything  in  the  header  fifo  */ 

a error  = a r mo r F I u s h H ea d e r (context); 

n if(error) 

n n returnerror; 


a /*  Finally,  process  the  input  buffer  and  flush  it  out  again  */ 

n if  ( con t ex t-> i n I en ) { 

n n a r mo r P r o c e s s L i n e (context); 

n n error  = DoFlush  (myself); 

n > 

n return  error; 

} 

/* 

* Write  a single  line. 

*/ 

static  si ze_t 

a rmo r W r i t eBy t e s (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size. 


n 

f 

a 

int  *error) 

\ 

n 

struct 

Context  *context  = (struct  Context  *)myself- 

>p  r i v; 

n 

s i ze_t 

size0  = size; 

n 

unsigned  t; 

n 

/* 

n 

* Try 

to  flush  anything  that  we  have  buffered. 

I 

know  that 

n 

* the 

first  time  Flush  is  called,  outlen  WILL  be 

zero! 

n 

*/ 

n 

♦error 

= Flush  (myself); 

n 

if  (*error) 

n 

Q 

return  0; 

n 

/ * try 

to  fill  up  the  input  buffer  */ 

n 

t = min 

((sizeof  ( c on t ex t -> i n pu t ) - c on t e x t -> i n 1 e n ) 

, size); 

n 

mem  c py 

( con t e X t -> i n pu t + c on t e x t -> i n 1 e n , buf,  t); 

n 

buf  + = 

t; 

Q 

size  -= 

t; 

C 

context 

->inlen  +=  t; 

Q 

/*  If  we've  filled  it  up,  then  flush  it  out  */ 

n 

if  ( con t ex t-> i n 1 en  ==  sizeof  ( c o n t ex t -> i n pu t ) ) { 

n 

B 

armorWriteClassify  (context,  context -> input); 

n 

B 

n 

B 

/* 

D 

B 

* check  if  we  need  a new  file.  This  is 

ca 

lied  if  we 

B 

B 

* exceed  armorlines,  or  when  we  do  have 

multiparts  and 

B 

B 

* not  have  a current  part. 
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n 


n 

□ 

n 


*/ 


if  ( context->a rmor L i nes  && 
□ on 

d n n 


(context->Lineno  >= 
context->a rmor L i nes  | | 
! c 0 n t e X t -> t h i s pa r t ) ) i 


nun 
n n n 
n Q s 
nun 
n n n 
n n n 
n n n 


/* 

* Set  maxparts  to  -1  if  this  _is_  multipart  armor 

* using  one-pass  processing. 

*/ 

if  ( c on t ex t ->ve r s i o n > PG PV E R S 1 0N_2_6  && 

! c on t e X t ->ma X pa r t s &&  ! c o n t e x t -> s i z e va  I i d ) 

n c on t e X t ->ma xpa r t s = -1; 


n 0 d 

d d d 
d d d 
d d > 


♦error  = armorNewFile  (myself); 
if  (*error) 

d return  size0-size; 


d 

d 

0 

d 

0 

d 

d 


d 

0 

d 

d 

d 

d 

> 


if  ( ! context->di dheader  &&  c on t e x t -> i n L e n ) 
d armorMakeHeader  (context); 

♦error  = DoFLush  (myself); 
if  (♦error) 

d return  size0-size; 


d return  size0-size; 

> 


/♦ 

♦ Minimally  perform  a DoFlush(),  but  try  to  flush  the  fifo,  too! 

★ 

* If  context->versi  on  > PG P V E R S 1 0N_2_6  then  we  only  start  writing 

* things  out  con  t ex  t ->a  rtno  r L i n e s ==  0 or  when  we  have  a full  block 

* worth  of  data  (48  * ( context->a rmor L i nes  - c o n t e x t -> L i n e no  ) ) . If 

* c on t ex t ->s i z e va L i d ==  2,  we  have  an  EOF  and  should  flush  the  rest 

* of  the  fifo  regardless. 

*/ 

static  int 

a rmo r F I ush F i f o (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *context  = (struct  Context  * ) my s e I f ->p r i v ; 

n byte  const  *ptr; 

n unsigned  len; 

n si ze_t  ret len; 

n interror; 


n 

n 

n 

Q 

D 

□ 

□ 

n 

n 

n 


pt  r = 

while 

a 

a 

□ 

n 

n 

n 

n 

n 


pgpFifoPeek  ( con t e x t ->f d , c o n t ex t -> f i f o , &len); 
(len)  { 

if  ( c on t e X t ->v e r s i on  > PG P V E R S I 0N_2 _6  && 
con t e X t ->s i z e V a I i d < 2 && 
con t ex t ->a r mo r I i n e s &S 

pgpFifoSize  ( c on t ex t -> f d , c o n t e x t ->f i f o ) < 
( c on t ex t -> I i n e no  ==  c on t e x t ->a r mo r I i n e s ? 
c on t ex t ->a r mo r I i ne s : 

( c on t e X t ->a r mo r I i ne s - c o n t e x t -> I i n e n o ) ) ) 
n returnO; 


48  * 
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retlen  = a rmo r W r i t eBy t es  (myself,  ptr,  Len,  Serror); 
pgpFifoSeek  ( c o n t e x t -> f d , c o n t e x t -> f i f o , retlen); 
if  (error) 

n return  error; 


n 

} 

return 


ptr 

0; 


pgpFifoPeek  (context->fd,  context->fifo,  &len); 


/* 

* 

★ 


This  is  the  function  that  processes  a clearsigned  message. 
context->state  to  tell  it  what  it  is  doing: 


It  uses 


*n 

0 ) at 

the 

begi nni ng 

— check  it 

*n 

1)  middle 

of  line. 

pass  it  through 

* 2) 

end  of 

line 

with  \ r - 

- check  next  character  for  \n  */ 

s t a t i 

c si ze_t 

a r mo r D 0 C 1 ea r s i g n (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size. 

n 

r 

o 

i nt  *e  r ro  r ) 

\ 

Q 

struct  Context  *context  = (struct  Context  * ) my s e 1 f ->p r i v ; 

n 

s i z e_ 

t written,  size0  = size; 

n 

byte 

const 

*ptr; 

n 

byte 

const 

f r om C ] = 

"From  "; 

n 

i n t i 

, t. 

flag; 

D 

Q 

while 

( s i z 

e)  { 

n 

n 

i f 

(context 

->state  ==  2)  { 

□ 

n 

n 

context->state  = 0; 

n 

□ 

n 

i f 

(*buf  ==  '\n')  { 

Q 

n 

n 

n 

ptr  = buf+1; 

n 

n 

n 

□ 

goto  do_write; 

Q 

Q 

n 

> 

n 

Q 

} 

n 

n 

n 

Q 

n 

/* 

n 

n 

* 

Here,  we 

check  the  beginning  of  the  line.  We  use  the 

n 

n 

* 

flag  to 

denote  what  we've  f o u nd / bu f f e r ed : 

n 

n 

*n  0 ) 

no  match 

n 

n 

*n  1 ) 

full  match 

Q 

n 

*n  2) 

partial  match  (and  we  buffered  data) 

n 

n 

★ 

/ 

Q 

n 

1 f 

( ! c on t e X t -> s t a t e ) C 

n 

n 

n 

flag  = 0 ; 

a 

n 

n 

i f 

( ! c 0 n t e X t -> 1 i ne b u f ) { 

Q 

Et 

B 

B 

/*  nothing  is  buffered  */ 

D 

n 

B 

B 

if  (*buf  ==  '-') 

□ 

n 

B 

B 

n f 1 a g = 1 ; 

□ 

Q 

B 

> 

n 

n 

B 

i f 

( ! f lag)  { 

o 

n 

B 

B 

t = min  (5,  size  - c on t e x t -> 1 i neb u f ) ; 

n 

D 

B 

B 

for  (i  = 0;  i < t;  i++) 

n 

n 

B 

fl 

n if  (bufCiD  !=  f r om C c on t e x t -> 1 i n e b u f 

n 

n 

B 

B 

n n n i D ) { 

n 

n 

B 

B 

n n pgpFifoWrite 

n 

n 

B 

B 

n n a ( c 0 n t e X t -> f d , 

n 

n 

B 

B 

n n n c on t e x t -> h ea d e r , 
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B 

B 

B 

B 

B B 

n c on t e X t -> i n p u t , 

B 

B 

B 

fl 

B B 

n context-> L i nebuf ) ; 

B 

B 

B 

fl 

B B 

c on t ex t -> L i n e bu f = 0; 

B 

B 

B 

fl 

B B 

break; 

B 

B 

B 

B 

B > 

B 

B 

B 

fl 

if  (i  ==  t)  { 

B 

B 

B 

B 

B / * We 

matched  the  whole  input  buffer 

B 

B 

B 

B 

B i f ( i 

+ c on t ex t -> L i n e b u f ==  5) 

B 

B 

B 

B 

B B 

flag  = 1 ; 

B 

B 

B 

B 

B e L se  { 

B 

B 

B 

B 

B fl 

memcpy  ( c o n t ex t -> i n pu t + 

B 

B 

B 

B 

fl  B 

n context-> L i nebuf , buf 

B 

B 

B 

B 

B fl 

n t ) ; 

B 

B 

B 

B 

fl  B 

context ->linebuf  +=  t; 

B 

B 

B 

B 

B fl 

size  -=  t; 

B 

B 

B 

B 

fl  fl 

buf  +=  t ; 

B 

B 

B 

B 

fl  fl 

flag  = 2; 

B 

B 

B 

B 

B > 

B 

B 

B 

B 

> 

B 

B 

B 

> 

B 

B 

B 

i f 

( f Lag 

= = 1 ) { 

B 

B 

B 

B 

pgpFifoWrite  ( c on t e x t ->f d , c on t ex t ->h e a d e r , 

B 

B 

fl 

B 

B 

(byte  const  *)"-  ",  2); 

B 

B 

fl 

B 

if  ( context->  L 

i nebuf ) t 

B 

B 

B 

B 

n pgpFifoWrite  ( co n t e x t ->f d , 

B 

B 

fl 

B 

fl  fl 

context->header. 

B 

B 

B 

fl 

fl  B 

context -> input. 

B 

B 

B 

fl 

B fl 

context ->Linebuf); 

B 

B 

B 

B 

n cont ext-> 1 i nebuf  = 0; 

B 

B 

B 

B 

} 

B 

B 

fl 

> 

B 

B 

B 

i f 

(■flag 

!=  2) 

B 

B 

B 

B 

context->state 

= 1; 

B 

B 

> 

B 

B 

*error  = a rmo r F L u s h H ea d e r (context); 

B 

B 

1 f 

(*error) 

B 

B 

B 

return  size0  - size; 

B 

B 

for 

( pt  r = 

buf  ; 

ptr  < buf+size 

; ptr++)  { 

B 

B 

B 

i f 

( *pt  r 

==  '\r'  II  *ptr  ==  '\n')  { 

B 

B 

B 

B 

context -> state 

= ( *pt  r + + ==  ' \ r ' ) ? 

B 

B 

fl 

B 

n 2:0; 

B 

B 

fl 

fl 

break; 

B 

B 

B 

> 

B 

B 

> 

do 

_w  r i t e : 

B 

B 

written  = con t ex t -> t a i L -> w r i t e 

( context->tai 1,  buf. 

B 

B 

B 

B 

B fl 

ptr-buf,  error); 

B 

B 

buf 

+=  written; 

B 

B 

size  -=  written; 

B 

B 

i f 

(*error) 

return  sizeO  - size; 
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return  size0  - size; 


/* 

* 

★ 

* 

★ 

★ 

* 

★ 


This  function  creates  a pgp-mime  mu L t i pa r t / s i g n e d C c L e a r s i g n e d ) message. 

It  performs  the  MIME  quoted  printable  c a no n i c a L i z a t i on , except  for 
handling  end  of  line  characters. 

c on t ex t ->o u t pu t is  used  to  build  up  an  output  line.  MIME  quoted  printable 
limits  its  size. 

c o n t e X t -> s t a t e is  used  to  record  its  status: 

2 - just  after  '\r' 

* 1 - just  after  '\n' 

* 0 - otherwise 

*/ 

static  size_t 

armorDoMi mesi gn  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size. 


int  *error) 


struct  Context  *context  = (struct  Context  * ) my s e I f ->p r i v ; 


n 

size 

_t  written. 

size0  = size; 

B 

char 

const  *ptr 

/* 

point  into  buf  * / 

B 

char 

* p t r 2 ; n 

B 

/* 

point  into  c o n t e x t ->ou t pu t */ 

B 

char 

c ; BB 

B 

/* 

character  we  are  manipulating 

B 

char 

pushback[2] ;a 

/* 

pushback  char  array  */ 

fl 

unsigned  pbsize 

= 

0 ; n / * 

chars  in  pushback  */ 

B 

int 

mimequote;n 

fl 

/* 

true  if  char  needs  mime  quotii 

B 

char 

const  fromC] 

= "From"; 

B 

p t r 

= (char  *)buf; 

B 

pt  r2 

= context- 

>output  + context->out len; 

B 

/*  Loop  till  we 

have  consumed  all  input  */ 

B 

w h i L 

e (size  | | 

pbsi ze)  { 

B 

fl 

/*  Loop 

per  line  of 

output  */ 

fl 

B 

while  (ptr 

< (char 

*)buf  + size  II  pbsize)  { 

B 

B 

B 

i f 

(pbsize) 

{ 

B 

B 

fl 

fl 

c = 

pushbackn--pbsi ze]; 

B 

B 

fl 

> 

else  { 

B 

B 

fl 

fl 

c = 

*pt  r + +; 

B 

B 

B 

> 

B 

B 

fl 

/* 

state  = 

2 means  prev  line  termed  with 

fl 

B 

B 

if 

(context 

->state  ==  2)  { 

fl 

B 

fl 

fl 

/* 

eat  If  */ 

fl 

fl 

B 

fl 

i f 

(c  ==  ’ \n'  ) { 

B 

B 

fl 

B 

n 

c on t e X t -> s t a t e = 1; 

fl 

B 

B 

fl 

n 

continue; 

fl 

B 

B 

B 

} 

fl 

B 

B 

} 

fl 

fl 

B 

context->state  = 0; 

B 

B 

fl 

mimequote  = 

0; 

fl 

fl 

fl 

if 

c 

II 

II 

u 

L. 

-»*' 

II 

II 

U 

B 

B 

B 

fl 

i f 

(ptr2  > c 0 n t e X t ->ou t pu t && 

B 

B 

B 

B 

(ptr2C-1]  ==  ' ' II  ptr2[-i: 

fl 

B 

fl 

fl 

fl 

/*  Fixup  space  at  end  of 

B 

fl 

B 

fl 

B 

— ptr2; 

B 

B 

fl 

fl 

fl 

pushbackCpbsi ze++]  = c; 

B 

fl 

fl 

B 

B 

c = ptr2C0]; 

fl 

B 

B 

fl 

fl 

mi mequot  e = 1 ; 

c r * / 


\t ' ) ) { 
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Q 

n 

0 

0 

> 

else 

{ 

n 

n 

0 

0 

0 

context->state  = (c  ==  '\r')  ? 2 : 1; 

Q 

Q 

0 

0 

0 

break; 

s 

D 

0 

0 

> 

Q 

n 

0 

} else 

i f 

( ( c ! = 

•\t'  &8  c<32)  II  c ==  '=■  II  c > 126)  { 

Q 

n 

0 

0 

mimequote  = 1; 

o 

a 

0 

> else 

i f 

( p t r 2 

- c 0 n t ex t ->o u t pu t >=  HIHEMAX)  { 

n 

a 

0 

0 

/* 

need 

soft  break  */ 

n 

n 

0 

0 

pushbackCpbsize++i]  = c; 

a 

n 

0 

0 

pushbackCpbsize++]  = ptr2C-1D; 

n 

0 

0 

0 

ptr2C-1]  = 

n 

0 

0 

0 

context 

->state  = 1;  /*  force  newline  */ 

n 

o 

0 

0 

break; 

n 

0 

0 

> else 

i f 

O 

II 

II 

' ' && 

n 

0 

0 

o 

p t r 2 

- c on t ex t ->ou t pu t ==  s i z eo f ( f r om ) -1  S& 

n 

0 

0 

0 

s t r ncmp ( ( cha r * ) con t e x t ->ou t pu t , from. 

Q 

0 

0 

0 

0 

sizeof(from)  - 1)  ==  0)  { 

n 

0 

0 

0 

mimequote  = 1; 

□ 

0 

0 

> else 

{ 

n 

0 

0 

0 

*p  t r 2 + + 

= c; 

n 

0 

0 

> 

n 

0 

0 

if  (mimequote) 

{ 

Q 

0 

0 

0 

mimequote  = 0; 

n 

0 

0 

0 

i f 

Cptr2  - c 0 n t ex t ->ou t pu t > MIMEHAX  - 3)  { 

n 

0 

0 

0 

o 

/*  Need  soft  break  */ 

n 

0 

0 

0 

0 

pushbackCpbsize++D  = c; 

n 

0 

0 

0 

o 

if  (ptr2  - context->output  >= 

n 

0 

0 

0 

0 

MIMEMAX)  C 

n 

0 

0 

o 

0 

n /*  Need  another  pushback  */ 

o 

0 

0 

0 

0 

n pgpAssert (pbsi ze  < 

D 

0 

0 

0 

0 

n n sizeof(pushback)); 

n 

0 

0 

0 

0 

a p u s h ba c k C p b s i z e++ D = ptr2C-1D; 

n 

o 

0 

0 

0 

a ptr2:-i:  = '='; 

n 

0 

0 

o 

o 

} else  { 

n 

0 

0 

0 

0 

a *pt  r2  + + = ' = ' ; 

n 

0 

o 

0 

o 

> 

D 

0 

0 

0 

0 

c on t ex t -> s t a t e = 1;  /*  force  newline  */ 

a 

0 

0 

0 

0 

break; 

n 

0 

0 

0 

} 

else 

{ 

Q 

0 

0 

0 

0 

*ptr2++  = '='; 

n 

0 

0 

0 

0 

*ptr2  + + = "01  23456789ABCDEF"i:c>>4:; 

n 

0 

0 

0 

0 

*ptr2++  = "01 23456789ABCDEF":c&0xf 3; 

n 

0 

0 

0 

> 

n 

0 

0 

> 

n 

0 

} 

s 

0 

i f 

( c 0 n t ex t -> s t a t e ) f 

n 

0 

0 

/*  Output 

line 

now  */ 

n 

0 

0 

♦error 

= a 

r mo r F 1 u s h H e a d e r (context); 

n 

0 

0 

if  (*error) 

n 

0 

0 

0 

return 

size0  - size; 

n 

0 

0 

*pt  r2  + + 

= 

■\n'; 

n 

0 

0 

*pt  r2  = 

' \0'  ; 

n 

0 

0 

written 

= 

0; 

n 

0 

0 

context 

->out  pt  r 

= context -> output; 

n 

0 

0 

while  (written 

< ( s i z e_ t ) ( p t r 2 - c on t e x t ->ou t p t r ) ) { 

n 

0 

0 

0 

written 

+ = c 0 n t e X t -> t a i 1 ->w r i t e ( c on t e x t -> t a i 1 , 

n 

0 

0 

o 

0 

a (byte  * ) c on t e x t ->o u t p t r , 
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□ 

□ 

n u 

n n p t r 2- c 0 n t ex t ->ou t p t r , 

Q 

n 

n n 

context->outptr  +=  written; 

□ 

Q 

n u 

if  (*error) 

n 

□ 

D □ 

n return  ptr  - (char  *)buf; 

Q 

n 

n > 

□ 

n 

> 

Q 

n 

size  -=  ptr  - (char  *)buf; 

Q 

n 

buf  = (byte  *)ptr; 

□ 

n 

ptr2  = context- 

>output ; 

n 

> 

□ 

CO n t e X t ->ou t 1 e n = ptr2 

- context->output; 

Q 

> 

return 

size0  - size; 

static 

s i ze_t 

Write 

(struct 

PgpPipeline  *myse 

If,  byte  const  *buf,  size_t  size,  int  * 

n 

struct 

Context  *context 

f 

□ 

s i ze_t 

retval,  written 

= 0; 

n pgpAssert  (myself); 

a pgpAssert  ( my s e L f ->ma g i c ==  ARMORMAGIC); 

n pgpAssert  (error); 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

o pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i L ) ; 


if  ( c o n t ex t ->ou t L e n ) { 
n *error  = DoFlush  (myself); 

n if  (*error) 

n n returnO; 


if  ( con t ex t->c  I ea r s i g n ) { 


if  ( c on t e X t ->pg pm i me ) 

n return  a r mo r D oM i me s i g n (myself,  buf,  size,  error); 

else 

n return  a r mo r Do C I e a r s i g n (myself,  buf,  size,  error); 


if  ( ! con t ex t ->s i ze va I i d ||  c on t e x t -> ve r s i o n > PG P V E R S 1 0 N_2_6 ) { 
n written  = pgpFifoWrite  (context ->fd,  context ->fifo,  buf,  size); 


if  ( c o n t ex t -> ve r s i on  <=  PG PV E R S 1 0 N_2 _6 ) 
n return  written; 


*error  = a r mo r F I u s h F i f o (myself); 

if  (*error  ||  c o n t e x t -> ve r s i on  > PG P V E R S 1 0 N_2_6 ) 
n return  written; 


/*  Try  to  write  all  the  data  we  were  given  */ 
do  { 

n retval  = armorWriteBytes  (myself,  buf,  size,  error); 

n written  +=  retval; 
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u 

n 

buf  +=  retval; 

n 

n 

size  -=  retval; 

n 

n 

if  (*error) 

n 

n 

B return  written; 

n 

> while 

(size); 

□ 

return 

written; 

> 

static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
a byte  const  *string,  si2e_t  size) 

{ 

n struct  Context  *context; 

n interror=0; 

n pgpAssert  (myself); 

B pgpAssert  ( my s e L f ->ma g i c ==  ARMORMAGIC); 

B context  = (struct  Context  * ) my s e L f -> p r i v ; 

B pgpAssert  (context); 


B 

a 

B 

B 

B 

B 

B 

} 


if  ( c on t ex t -> t a i I ) 

B error  = c o n t ex t -> t a i L ->a n n o t a t e ( c on t e x t -> t a i I , origin,  type, 

B B B B string,  size); 

if  (lerror) 

B PGP_SCOPE_DEPTH_UPDATE(context->scope_clepth,  type); 

pgpAsse r t ( con t ex t->s cope_dep t h !=  -1); 
return  error; 


static  int 

SizeAdvise  (struct  PgpPipeLine  *myseLf,  unsigned  Long  bytes) 
{ 

B Struct  Context  *context; 

B interror=0; 

B unsigned  Long  total; 


n 

pgpAsse  rt 

(myself); 

s 

pgpAsse  rt 

( my s e L f ->ma g i c = 

= ARMORMAGIC); 

n 

context  = 

(struct  Context 

*)myseLf->priv; 

n 

pgpAssert 

(context); 

□ 

pgpAssert 

(context->tai L); 

n 

/*  Only  handle  bytes  until 

EOF  */ 

n 

if  ( con t ex t ->s cope_dep t h ) 

a 

B return0; 

n 


B 

B 

B 

B 


/*  Then  compute  maxparts  */ 
if  ( ! context->si zeva L i d ) { 

B if  ( c on t e X t ->a r mo r L i ne s ) { 

B B total  = bytes  + pgpFifoSize  ( c on t e x t ->f d , 

B B B B B context->fifo); 


if  ( c on t e X t ->ve r s i on  > PG PV E R S 1 0 N_2 _6  SS 
con t ex t->t h i spa r t ) { 

B total  +=  48  * c o n t ex t ->a r mo r L i n e s * 
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n 

n 

n 

n 

n 

n 

n 

n 

d 

n 

n 

□ 

n 

□ 

□ 

n 

n 

D 

a 

u 

n 

tt 

n 

n 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

D 

n 

n 

n 

n 

a 

n 

n 

n 

n 

n 

n 

n 

u 

n 

n 
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n n (context ->thispart-1); 

n total  +=  48  * context->Lineno; 

> 


n 

n 

n 

n 

c 

> 


n /*  48  bytes  / Line  */ 

n c o n t e X t ->ma X pa r t s = total  / ( context->a rmor L i nes  * 48); 

n if  ( c on t ex t ->ma xpa r t s ) 

n n context“>maxparts++; 

> 


context->sizevaLid  = 1; 
if  (bytes) 

n return  0;n  /*  dont  handle  any  more  non-zero  sizeAdvises  */ 


/*  This  is  the  end  */ 
context->sizevalid  = 2; 


/*  Clear  out  the  cLearsign  buffer,  if  we  have  it.  */ 
if  ( c on  t e X t ->  c I e a r s i g n &&  c o n t e x t ->  I i n e b u f ) -C 

n pgpFifoWrite  ( c o n t e x t -> f d , c o n t e x t -> h e a d e r , cont ext“>i nput , 

n u c o n t e X t -> L i n e b u f ) ; 

n c on t ex t -> I i ne bu f = 0; 

> 

/* 

* If  clearsign  input  ended  with  *\r*,  will  be  hashed  with  *\r\n*  but 

* the  output  file  will  be  missing  the  *\n*.  Add  it  here. 

*/ 

if  ( con t ex t ->c I ea r s i g n &&  c on t e x t -> s t a t e = = 2 ) < 
n pgpFifoWrite  ( c on t ex t ->f d , 


Q 

n 

context->header. 

n 

n 

(const  unsigned  char 

n 

a 

1 ); 

□ 

context 

-> state  = 0; 

> 


error  = a rmo r F I u s h F i f o (myself); 
if  (error) 

n return  error; 

error  = DoFLush  (myself); 
if  (error) 

n return  error; 

if  ( ! c 0 n t e X t ->  c L e a r s i g n ) -C 
n a r mo r Ma ke F 00 t e r (context); 

n /*  Set  clearsign  so  we  don't  emit  another  CRC  */ 

n c o n t ex t -> c I ea r s i g n = 1; 

n error  = DoFlush  (myself); 

n if  (error) 

n n returnerror; 

> 

if  (context->taiL) 

n error  = c on t e x t -> t a i I -> s i z e Ad v i s e ( c on t e x t -> t a i I , bytes); 

return  error; 


e8aa13b0b53e99844b137a99e0f1e8438e6651bb73880557cca3f1181c3882414]D 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpArmor.c 


static  void 

Teardown  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  ARMORHAGIC); 


context  = (struct  Context  * ) my s e L f ->p r i v ; 
pgpAssert  (context); 


if  ( c on t e X t -> t a i L ) 

n c on t ex t -> t a i L -> t ea r d o wn  ( c on t ex t -> t a i I ) ; 


pg p F i f o D e s t r oy  ( c o n t e x t -> f d , c on t e x t -> f i f o ) ; 
pgpFifoDestroy  (context->fd,  context->header); 
if  ( con t ex t ->me s sage i d ) 

n pgpMemFree  ( con t e x t ->me s s a g e i d ) ; 

memset  (context,  0,  sizeof  (*context)); 
pgpMemFree  (context); 

memset  (myself,  0,  sizeof  (*myself)); 
pgpMemFree  (myself); 


ne 

ATYPE_ 

NORMALn 

0 

n e 

ATYPE_ 

CLEARSIGn 

10 

n e 

ATYPE_ 

SEPSIGn 

20 

ne 

ATYPE_ 

SEPSIGMSGn21 

ne 

ATYPE_ 

HIMESIGn 

30 

ne 

ATYPE_ 

HIMEENCn 

40 

ne 

ATYPE_ 

HIMESEPSIG 

50 

static  struct  PgpPipeline  ** 
a rmo r DoC r ea t e (struct  PgpPipeline  **head. 


struct  PgpEnv  const  *env. 


PgpVersion  version,  struct  PgpFifoDesc  const  *fd, 

struct  PgpRandomContext  const  *rc,  unsigned  long  armorlines, 

int  armortype,  byte  const  *hashlist,  unsigned  hashlen) 

struct  PgpPipeline  *mod; 

struct  Context  ‘context; 

struct  Pg p F i f o C o n t ex t *fifo; 

struct  PgpFifoContext  ‘header; 

char  ‘mid; 

byte  messageC24D; 

int  I e n ; 


if  ( ! h ea  d ) 

n return  NULL; 


pgpAssert  (fd); 


context  = (struct  Context  ‘ ) pg pMem A I I o c (sizeof  (‘context)); 
if  ([context) 
n return  NULL; 

mod  = (struct  PgpPipeline  ‘ ) pg pHem A I I o c (sizeof  (‘mod)); 
if  ( ! mod ) { 
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n n pgpMemFree  (context); 

n n return  NULL; 

n > 

n fifo  = pgpFifoCreate  (fd); 

n i f ( ! f i f o)  { 

n tj  pgpHetnFree  (context); 

o n pgpMemFree  (mod); 

n n returnNULL; 

n > 

n header  = pgpFifoCreate  (fd); 

n if  (Iheader)  { 

n n pgpFifoDestroy  (fd,  fifo); 

a a pgpMemFree  (context); 

n H pgpMemFree  (mod); 

n n returnNULL; 

n } 

n mid  = (char  *)pgpMemALLoc  (((4*(sizeof(message)+3))/3)+1); 

n if(!mid){ 

n n pgpFifoDestroy  (fd,  fifo); 

n n pgpFifoDestroy  (fd,  header); 

n n pgpMemFree  (context); 

n n pgpMemFree  (mod); 

n n returnNULL; 

n > 

n mod->magic  = ARMORMAGIC; 

n mod->urite  = Write; 

n mod->fLush  = Flush; 

n mod->sizeAdvise  = SizeAdvise; 

a mod->annotate  = Annotate; 

n mod-> t ea r do wn  = Teardown; 

n mod->name  = "ASCII  Armor  Write  Module"; 

n mod->priv  = context; 

a memset  (context,  0,  sizeof  (*context)); 

n c on t ex t ->ou t p t r = c on t e x t ->ou t pu t ; 

n c on t e X t ->a r mo r I i n e s = armorlines; 

n context->crc  = CRC_INIT; 

a context->fd  = fd; 

n c on t e X t -> f i f o = fifo; 

a c o n t e X t -> h ea d e r = header; 

a c o n t e X t -> V e r s i on  = version; 

n context->comment  = pg pe n vGe t S t r i ng  (env,  PG P E N V_C OMM E NT , NULL,  NULL); 


D 

/* 

Create  a random  message  id  */ 

□ 

i f 

( r c ) 

{ 

n 

n 

pg p Ra ndomG e t By t e s (rc,  message,  sizeof  (message)); 

n 

□ 

len  = armorLine  (message,  s i z eo f ( me s s a g e ) , mid); 

n 

n 

mi dC  len]  = ' \0  ' ; 

a 

a 

c on t e X t ->me s s a g e i d = mid; 

a 

> e 

1 s e 

D 

n 

pgpMemFree  (mid); 

n 

i f 

(armortype  ==  AT YP E_C L E A R S I G ) ( 

#d  e f i n e 

CLRSIGN 

" BEGIN  PGP  SIGNED  MESSAGE " 

n 

Q 

i nt  dohash=0; 

Q 

n 

struct  PgpHash  const  *hash; 
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D 

□ 

n 


□ 


pgpFifoWrite  (fd,  header,  (byte  const  *)CLRSIGN, 
n strLen  (CLRSIGN)); 

context ->clearsign  = 1; 
context->armorLines  = 0; 


c L ea  rs i g_end : 


else 


□ 

□ 

n 

D 

n 

n 

n 

D 

n 

n 

Q 

o 

o 

n 

n 


n 

n 

n 

a 

} else 
□ 

} else 

D 

> else 

D 

a 

n 

> else 

n 

n 


/* 

* Now  deal  with  multiple  hash  types.  If  we  don't  specify 

* the  hash  type,  or  the  only  hash  used  is  HD5,  then  ignore 

* the  Hash  header.  Otherwise,  we  should  print  the  out 
*/ 


if  (lhashlen  ||  (hashlen  ==  1 &&  *hashlist  ==  PG P_H AS H_M D 5 ) ) 
n goto  c I ea r s i g_e nd ; 

pgpFifoWrite  (fd,  header,  (byte  const  *)"\nHash:  ",  7); 
while  (hashlen — ) ( 

n hash  = pgpHashByNumber  (*hashlist++); 


n 

D 

Q 

n 

□ 

n 

n 

n 

n 

} 


if  (hash)  { 
n if  (dohash) 

n n pgpFifoWrite  (fd,  header, 

n n n (byteconst*)",  ",2); 

n pgpFifoWrite  (fd,  header, 

n n (byte  const  * ) h a s h->naine  , 

n n strlen(hash->name)); 

n dohash=1; 

> 


pgpFifoWrite  (fd,  header,  (byte  const  *)"\n\n",  2); 
f (armortype  ==  AT Y PE_H I M E S I G ) ( 

pgpFifoWrite  (fd,  header,  (byte  const  * ) M I H ET 0 P H 0 R , 
n strlen(HIMETOPHDR)); 

con t ex t -> c I ea r s i g n = 1; 
con t ex t->a rmo r I i ne s = 0; 


con t ex t ->pg pm i me  = PGPHIHESIG; 
if  (armortype  ==  AT YP E_S E PS  I G ) ( 
con t ext->b I oc kt y pe  = "SIGNATURE"; 
if  (armortype  ==  AT YP E_S E PS  I GM S G ) { 
con t ext->b I o c kt y pe  = "MESSAGE"; 
if  (armortype  ==  AT YP E_H I H E S E PS  I G ) ( 
c on t ex t ->b I o c k t y pe  = "MESSAGE"; 
c on t ex t ->pg pmi me  = PGPMIMESIG; 
c on  t ex  t ->a  r mo  r I i n e s = 0; 
if  (armortype  ==  AT Y PE_M I M E EN C ) ( 
cont ext->pgpmi me  = PGPMIMEENC; 
context->armorlines  = 0; 


n > 


a context->tai  I = *head; 

n *head  = mod; 

n return  Scon t ex t -> t a i I ; 

> 


struct  PgpPipeline  ** 

pgpArmorWri teCreate  (struct  PgpPipeline  **head,  struct  PgpEnv  const  *env, 
n n struct  PgpFifoDesc  const  *fd, 

n n struct  Pg p Ra nd omC on t e x t const  *rc,  PgpVersion  version, 

n n byte  armortype) 

{ 

n i nt  type  = 0; 
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Q 

unsigned  Long  armorLines; 

Q 

int  error; 

n 

if  ( ! head  > 

n 

a return  NULL; 

n 

if  (armortype  ==  PG P_ A RMO R_NO R« A L)  { 

B 

n if  ( pg  p e n vG  e 1 1 n t Cenv,  PG  P E N\/_  PG  PH  I M E , NULL,  Serror))  { 

B 

n n type  = AT Y P E_H I M E E N C ; 

B 

n n rc  = NULL;  /*  prevents  messageid  appearing  */ 

B 

n > e L se  { 

B 

n n type  = AT Y P E _N0 R H A L; 

B 

n } 

B 

> eLse  if  (armortype  ==  PG P_ A RMO R_ S E P S I G ) i 

fl 

n type  = AT Y P E_ S E PS  I G ; 

B 

> eLse  if  (armortype  ==  PG P_ A R M 0 R_ S E P S I GM S G ) C 

B 

n type  = AT Y PE_ S E P S I G H S G ; 

B 

} eLse  { 

B 

a return  NULL; 

B 

> 

B 

armorLines  = pgpenvGetInt  (env,  PG P E N V_ A R M 0 R LI N E S , NULL,  NULL); 

B 

return  ( a rmo r D o C r e a t e (head,  env,  version,  fd,  rc,  armorLines, 

B 

n n type, NULL, 0)); 

struct  PgpPipeLine  ** 

pgp A rmo r W r i t e C rea t eC L ea r s i g (struct  PgpPipeLine  **texthead, 
n n n struct  PgpPipeLine  **signhead. 


B 

n o struct  PgpEnv  const  *env. 

B 

n n struct  PgpFifoDesc  const  *fd. 

B 

n n PgpVersion  version,  byte  *hashList, 

B 

n n unsigned  hashLen) 

{ 

B 

struct  PgpPipeLine  *txthead  = NULL,  *sighead  = NULL; 

B 

struct  PgpPipeLine  **joinhead,  **sigtaiL,  **taiL; 

B 

struct  Context  *context; 

B 

if  (Itexthead  ||  isignhead) 

B 

n return  NULL; 

B 

joinhead  = a r mo r Do C r e a t e (Stxthead,  env,  version,  fd,  NULL,  0, 

B 

n n n AT Y P E_ C L E A R S I G , hashList,  hashLen); 

B 

if  (Ijoinhead) 

B 

o return  NULL; 

B 

taiL  = pg p J 0 i n C r e a t e (joinhead,  fd); 

B 

if  (ItaiL)  { 

B 

n txthead->teardown  (txthead); 

B 

n return  NULL; 

B 

} 

B 

sigtaiL  = a rmo r DoC r ea t e (Ssighead,  env,  version,  fd,  NULL,  0, 

B 

n n n AT Y P E_ S E PS  I G , NULL,  0); 

B 

if  (IsigtaiL)  t 

B 

n txthead->teardown  (txthead); 
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n n returnNULL; 

n > 

n /*  Add  the  charset  used  when  generating  the  cLearsigned  message  */ 

n context  = (struct  Context  *)sighead->priv; 

n pgpAssert  (context); 

n con t ex t -> c h a r s e t = pgpenvGetSt ri ng  (env,  PG PE N V_C H A R S ET , NULL,  NULL); 

n *sigtaiL  = pg p J o i n Ap p e n d (*joinhead); 

B if  (!*sigtaiL)  { 

B B txthead->teardown  (txthead); 

B B s i g h e a d-> t ea r do wn  (sighead); 

B B returnNULL; 

B } 

n B 

B pgpJoinBuffer  (*sigtaiL,  (byte  *)"\n",  1); 

B *texthead  = txthead; 

B *signhead  = sighead; 

B return  tail; 

} 


struct  PgpPipeLine  ** 
pgpArmorWri teCreatePgpH 


B B B 
B B B 
B B B 
B B B 
B B B 
{ 


mesig  (struct  PgpPipeLine  **texttaiL, 
struct  PgpPipeLine  **signtaiL, 
struct  PgpEnv  const  *env, 
struct  PgpFifoDesc  const  *fd, 
PgpVersion  version,  byte  *hashList, 
unsigned  hashLen) 


B 

a 

B 


Struct 

struct 

struct 


PgpPipeLine  *txthead  = NULL,  *sighead  = NULL; 
PgpPipeLine  **joinhead,  **sigtaiL,  **taiL; 
PgpPipeLine  **spLithead,  **spLittaiL; 


B if  (ItexttaiL  ||  isigntaiL) 

B B returnNULL; 


B spLithead  = a rmo r Do C r e a t e (Stxthead,  env,  version,  fd,  NULL,  0, 

B B B B ATYPE_HIHESIG,hashList, hashLen); 

B if  (IspLithead) 

B B returnNULL; 


B /*  Create  spLit  to  take  output  from  cLearmime  armor  moduLe  */ 

B joinhead  = pgpSp L i t C r ea t e ( s p L i t head ) ; 

B /*  Set  second  spLit  output  to  go  to  signing  pipeLine  */ 

B spLittaiL  = pgpSpLitAdd  ( * s p L i t h e a d ) ; 

B *spLittaiL  = *texttaiL; 

B taiL  = pgpJoinCreate  (joinhead,  fd); 

B if(!taiL){ 

B B t X t h e a d-> t ea r do wn  (txthead); 

B B returnNULL; 

B } 


B sigtaiL  = a r mo r Do C r e a t e (Ssighead,  env,  version,  fd,  NULL,  0, 

n B B B ATYPE_MIHESEPSIG,NULL,0); 

B if  (IsigtaiL)  ■( 
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txthead->teardown  (txthead); 
return  NULL; 


*sigtaiL  = pgpJoinAppend  (*joinhead); 
if  (!*sigtaiL)  { 

a t X t h e a d-> t e a r do wn  (txthead); 

n sighead->teardoun  (sighead); 

a return  NULL; 

> 


pgpjoi nBuf f er  (*joinhead,  (byte  * ) M I M E S I G H D R , s t r L e n ( M I H E S I G H D R ) ) ; 
if  (Ihashlen)  ( 

n pgpJoinBuffer  (*joinhead,  (byte  *)HIMEHIC,  strLen(MIMEMIC)); 

n pgpJoinBuffer  (*joinhead,  (byte  * ) M I H E D F LTM I C , 

n n n strlen(MIHEDFLTMIC)); 

> else  { 

n while  (hashlen — ) { 

n n struct  PgpHash  const  *hash  = NULL; 

n n unsignedi,Len; 

n a char  h a s h na me C 30 ] ; /*  Lower  case  name  */ 


hash  = pg p H a s h By N umb e r ( * h a s h L i s t + + ) ; 
pgpAssert(hash); 

Len  = strLen(hash->name); 
pgpAssert  (Len  < s i zeof ( ha s hname  ) ) ; 
pgpJoinBuffer  (*joinhead,  (byte  *)MIHEMIC, 
a strlen(MIHEMIC)); 

for  (i=0;  i<Len;  ++i) 

n hashnameCi]  = toLower(hash->nameCi3); 

pgpJoinBuffer  (*joinhead,  (byte  *)hashname, 
n Len); 

pgpJoinBuffer  (*joinhead,  (byte  *)";",  1); 


pgpJoinBuffer  (*joinhead,  (byte  * ) H I M ETOPBOU N D , s t r L e n ( H I M ETO PBOUN D ) ) ; 
pgpJoinBuffer  (*sigtaiL,  (byte  * ) M I M EM  I DBOU N D , s t r L e n ( M I M EM  I D BOU N D ) ) ; 


*texttaiL  = txthead; 
*signtaiL  = sighead; 
return  tail; 
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/* 

* pgpArmor.h  --  Create  an  armor  write  module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa r L o r dSM I T . E D U> 

* 

* $Id:  pgpArmor.h, V 1.5. 2.1  1997/06/07  09:50:52  mhw  Exp  $ 

*/ 

#ifndef  PGPARMOR.H 
#define  PGPARMOR.H 

#incLude  "pgpUsuaLs.h” 

#ifdef  ..cpLuspLus 
extern  "C"  { 

#end  i f 

struct  PgpPipeLine; 

#ifndef  TYPE.PGPPI PELI NE 

^define  T Y PE.PG PP I P E LI N E 1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

#end  i f 

struct  PgpFifoDesc; 

#ifndef  T YPE.PG P F I FO D E S C 

#define  TYPE.PGPFI FODESC  1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#e  nd i f 

struct  PgpRandomContext; 

#ifndef  TYPE. PGPRANDOMCONTEXT 
^define  TYPE. PGPRANDOMCONTEXT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

#end i f 

struct  PgpEnv; 

#ifndef  TYPE.PGPENV 
^define  TYPE.PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 

#endi f 

/* 

* This  creates  a module  that  will  take  its  input  and  mask  it  in  ASCII 

* Armor.  The  armortype  should  be  one  of  ARMOR. NORMAL,  for  a normal 

* armor,  or  ARMO R.S E PS  I G , which  is  a separate  signature. 

*/ 

struct  PgpPipeLine  PGPExport  ** 

pg p A rmo r U r i t e C r ea t e (struct  PgpPipeLine  **head,  struct  PgpEnv  const  *env, 
n n struct  PgpFifoDesc  const  *fd, 

n n struct  PgpRandomContext  const  *rc,  PgpVersion  version, 

n n byte  armortype); 

/* 

* These  are  the  valid  armortypes  that  can  be  passed  into  p g p A r mo r U r i t e C r ea t e 
*/ 

#define  PGP. ARMOR. NORMALn  n 0 
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#define  PGP  ARMOR  SEPSIGh  n 1 


/* 


* XXX:  PGP_ARHOR_SEPSIGHSG  is  identical  to  PG P_ A RHO R_ S E P S I G , except  that 

* it  outputs  "BEGIN  PGP  MESSAGE"  instead  of  "BEGIN  PGP  SIGNATURE"  for 

* use  in  a PGP/HIME  clear-signed  message.  This  is  only  temporary,  and 

* should  be  deprecated  when  the  library  handles  PGP/MIME  internally. 

*/ 

Sdefine  PGP  ARMOR  SEPSIGMSGn  n 2 


/* 

* Create  an  armor  pipeline  for  clear  signatures.  You  should  pass  in  the 

* tail  pointers  for  the  end  of  the  text  stream  and  the  end  of  the  signature 

* stream.  This  will  return  a pointer  to  the  stream  that  will  contain  the 

* clearsigned  message.  Pass  in  a list  of  hash-type-bytes  so  it  can  say 

* what  is  being  used. 

*/ 


struct  PgpPipeline  PGPExport 
pgpArmorWriteCreateClearsig 


** 


(struct  PgpPipeline 
struct  PgpPipeline 
struct  PgpEnv  const 
struct  PgpFifoDesc 
PgpVersion  version, 
byte  *hashlist,  uns 


**texthead, 

**s i gnhead, 
*env, 

const  *f d, 
igned  hashlen); 


/* 

* Create  an  armor  pipeline  for  clear  signatures,  based  on  the  PGPMIME 

* spec.  You  should  pass  in  the  tail  pointers  for  the  end  of  the  text 

* stream  and  the  end  of  the  signature  stream. 

* This  will  return  a pointer  to  the  stream 

* that  will  contain  the  clearsigned  message.  Pass  in  a list  of 

* ha s h- t y pe-by t e s so  it  can  say  what  is  being  used. 

*/ 


struct  PgpPipeline  PGPExport  ** 

pgpA rmo rW r i t eC r ea t e PgpM i me s i g (struct  PgpPipeline  **texttail. 


□ 

n 

u 

struct 

PgpPipeline 

**si gntai  1, 

Q 

□ 

n 

struct 

PgpEnv  const 

*e  n V , 

n 

n 

n 

struct 

PgpFi foDesc 

const  *f d. 

s 

n 

n 

PgpVersion  version. 

n 

n 

n 

byte  *hashlist,  uns 

igned  hashl 

#ifdef  __cplusplus 
} 

#end i f 


#endif  /*  PGPARMOR  H */ 
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/* 

* pgpArmrFil.c  — an  Armor  File  Write  module.  It  watches  for  MULTIARHOR 

*n  annotation  scopes  and  will  open  multiple  files  if  it  occurs. 

*n  Otherwise,  it  will  only  a single  file  when  data  is  first  written. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r I o r d 31*1 1 T . E D U> 

•k 

* $Id:  pg p A r m r F i I . c , V 1.4. 2.1  1997/06/07  09:50:52  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

# e n d i f 

//include  <stdio.h> 


//i  nc  lude 
//i  nc  lude 
//include 
//i  nc  lude 
//include 
//i  nc  lude 
//include 
//include 


pgpDebug . h" 
pgpArmrFi  l.h" 
pgpAnnot  a t e . h 
pgpFi leHod.h" 
pgpHem. h" 
pgpErr.h" 
pgpFi  le.h" 
pgpPipeline.h 


//define  ARMOR  WR I T E F I L EH  AG  I C n 0xa434f11e 


struct  Context  { 

n struct  PgpPipeline  *tail; 

n struct  PgpFile  * (*fileOpen) 

□ □ □ n 

void  *a  rg; 

n void  const  *baseName; 

n int  scope_depth; 

>; 

static  int 

Flush  (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  ARMO R W R I T E F I LEM AG  I C ) ; 

n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 

n if  ( ! con t e X t -> t a i I ) 

n n return0; 

n return  c on t ex t -> t a i I -> f I u s h ( c on t e x t -> t a i I ) ; 

} 


(void  *arg, 

void  const  *baseName,  unsigned  number); 


static  int 

openFile  (struct  Context  *context,  unsigned  num) 

{ 

n struct  PgpPipeline  *tail  = NULL; 

n struct  PgpFile  *fp; 
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n 

int  error; 

El 

pgpAssert  ( ! c on t ex t -> t a i 1 ) ; 

Q 

fp  = c 0 n t e X t -> f i 1 eOpe n ( c on t e x t ->a r g , c on t ex t ->ba s e N a me , num); 

tt 

if  ( ! f p) 

a 

n return  PGPERR_NO_FILE; 

n 

n 

if  ( ! pg p F i 1 e W r i t eC r ea t e (Stail,  fp,  1))  ( 

El 

n error  = pgpFileClose  (fp); 

n 

n if  (error) 

□ 

n n returnerror; 

El 

n return  PGPERR_NOMEM; 

□ 

> 

n 

c 0 n t ex t -> t a i 1 = tail; 

n 

return  0; 

} 

static  size_t 

Write  (struct  PgpPipeline  *tnyseLf,  byte  const  *buf,  size_t  size,  int  *error) 


El 

struct  Context  *context; 

El 

pgpAssert  (myself); 

n 

pgpAssert  (myse lf->magi c ==  ARMORWRI TE F I LEM AG  I C ) ; 

El 

pgpAssert  (error); 

n 

context  = (struct  Context  *)myself->priv; 

El 

pgpAssert  (context); 

Q 

if  ( ! c on t e X t -> t a i 1 ) { 

n 

n *error  = openFile  (context,  0); 

□ 

n if  (*error) 

a 

n n return0; 

n 

> n n 

n 

return  c o n t e x t -> t a i 1 ->w r i t e ( c on t ex t -> t a i 1 , buf,  size,  error); 

} 

static  int 

Annotate  (struct  PgpPipeline  *myseLf,  struct  PgpPipeline  *origin,  int  type. 


n 

byte  const  *string,  size_t  size) 

i 

o 

struct  Context  *context; 

n 

int  error  = 0; 

□ 

unsigned  num; 

n 

( VO  i d ) 0 r i g i n; n /*  Avoid  warning  */ 

Q 

(void)size; 

D 

pgpAssert  (myself); 

Q 

pgpAssert  ( my s e 1 f ->ma g i c ==  ARHO R W R I T E F I LE M AG  I C ) ; 

□ 

context  = (struct  Context  * ) my s e 1 f ->p r i v ; 

n 

pgpAssert  (context); 

n 

/*  See  what  we  should  do  here  */ 

El 

switch  (type)  { 

El 

case  PGPANN_MULTIARMOR_BEGIN : 
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Q 

n 

n 

Q 

n 

Q 

n 

n 

n 

Q 

Q 

a 

tt 

n 

n 

□ 


n pgpAssert  ( ! con t ex t -> t a i L ) ; 

n pgpAssert  (size  ==  sizeof  (num)); 

n num  = *((unsigned  *)string); 

n error  = openFile  (context,  num); 

n break; 

case  PGPANN_MULTI ARM0R_END : 
n pgpAssert  ( con t e x t -> t a i L ) ; 

n error  = c on t ex t -> t a i L -> s i z e Ad v i s e ( c on t ex t -> t a i L , 0); 

n if  (error) 

n n returnerror; 

n c on t ex t-> t a i L -> t e a r do wn  ( c o n t e x t -> t a i L ) ; 

n c o n t ex t -> t a i L = NULL; 

n break; 

default; 

° ; 

} 


n if  (lerror) 

n n PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 

n pgpAssert ( context->scope_depth  !=  -1); 

n return  error; 

} 


static  int 

SizeAdvise  (struct  PgpPipeline  *myseLf,  unsigned  Long  bytes) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  ARMO R WR I T E F I LEM AG  I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n if  ( ! context->tai L ) 

n n return0; 

n return  c on t ex t-> t a i L ->s i z e Ad v i s e ( c on t e x t -> t a i I , bytes); 

} 

static  void 

Teardown  (struct  PgpPipeline  *myseLf) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

a pgpAssert  ( my se I f ->ma g i c ==  ARMORWRITE F I LEHAGI C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 

n if  ( con t ex t->t a i L ) 

n n con t ex t -> t a i L -> t e a r do wn  ( c o n t e x t -> t a i L ) ; 

a memset  (context,  0,  sizeof  (*context)); 

n pgpHemFree  (context); 

n memset  (myself,  0,  sizeof  (*myseLf)); 

n pgpHemFree  (myself); 

} 
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struct  PgpPipeLine  * 

pg p A rmo r F i L e W n' t e C r e a t e (struct  PgpPipeLine  **head. 


struct  PgpFiLe  * (*fiLeOpen)  (void  *arg, 
n n n void  const  *baseName, 

n n n unsigned  number), 

void  *arg, 

void  const  *baseName) 


struct  PgpPipeLine  *mod; 
struct  Context  *context; 


if  (!head  ||  !fi LeOpen) 
n return  NULL; 


context  = (struct  Context  * ) pg pM em A L L o c (sizeof  (*context)); 
if  (Icontext) 
n return  NULL; 

mod  = (struct  PgpPipeLine  *)pgpMemALLoc  (sizeof  (*mod)); 
if  ( ! mod ) { 

n pgpMemFree  (context); 

n return  NULL; 

} 


n mod->magic  = A R MO R W R I T E F I LE H AG  I C ; 

n mod->write  = Write; 

n mod->fLush  = FLush; 

n mod-> s i z e Ad V i s e = SizeAdvise; 

n mod->a n no t a t e = Annotate; 

n mod-> t ea r d o wn  = Teardown; 

n mod->name  = "Armor  FiLe  Write  HoduLe"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 

n c on t ex t ->f i L eOpen  = fiLeOpen; 

D context ->arg  = arg; 

n con t e X t ->ba s e N a me  = baseName; 


*head  = mod ; 
return  mod; 
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/* 

* pg p A rm r F i L . h — Armor  Write  File  module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Creates  output  files  based  upon  a "name".  If  the  data  is  within  a 

* MULTIARMOR  scope,  multiple  files  will  be  opened  for  the  output. 

* Otherwise,  just  a single  file  will  be  output  when  data  is  first 

* written  into  this  module. 

* 

* Written  By:n  Derek  Atkins  < wa r I o r d SM I T . E D U> 

* 

* $Id:  pgpArmrFi I . h,v  1.4. 2.1  1997/06/07  09:50:53  mhw  Exp  $ 

*/ 

#ifndef  PGPARMRFIL.H 
#define  PGPARMRFIL.H 

#ifdef  cplusplus 

extern  "C"  { 

#en  d i f 

struct  PgpPipeline; 

#ifndef  T Y P E.PG P P I PE  LI N E 

^define  TYPE. PGPPIPELINE  1 

typedef  struct  PgpPipeline  PgpPipeline; 

#end i f 

struct  PgpFile; 

#ifndef  TYPE. PGPFILE 

#define  TYPE. PGPFILE  1 

typedef  struct  PgpFile  PgpFile; 

#end i f 

struct  PgpPipeline  PGPExport  * 

pg p A r mo r F i I e W r i t e C r ea t e (struct  PgpPipeline  **head. 


Q Q n 

struct  PgpFile 

* C*fiLeOpen) 

(void 

*a  rg. 

Q Q Et 

n 

n 

n 

void 

const  *baseName 

n n n 

□ 

n 

n 

u n s i 

gned  numbe  r ) , 

n n n 

void 

*a  rg. 

H n n 

void 

const  *baseName); 

#ifdef  __cpLuspLus 
\ 

/ 

# e nd i f 

#endif  /*  PGPARMRFIL.H 

*/ 
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/* 

* pgpCRC.c  - CRC  computation  routines  (wow,  how  thrilling!) 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb 

* 

* $Id:  pgpCRC.c, V 1.1. 2.1  1 997/06/07  09:50:54  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 

#include  "pgpCRC.h" 

^include  "pgpUsuals.h" 

/*  PRZ's  magic  24-bit  polynomial  - (x+1)  * (irreducible  of  degree  23)  */ 
#define  P0LY24  0x1864cfbu 


/* 

* Build  the  CRC-24  table. 

* 

* A by t e-a t -a - 1 i me  CRC  table  is  simply  a table  of  the  CRCs 

* of  the  individual  bytes. 

* 


* From  basic  CRC  theory,  crc(c*y)  = crc(x)  * crc(y). 

* (*  is  XOR,  which  is  addition  to  CRCs.) 

* 

* Through  this  code,  h holds  the  CRC  of  i.  (i  is  a power  of  2.) 

* The  CRCs  of  the  values  from  i to  2*i-1  are  the  CRCs  of  the 

* values  from  0 to  i-1,  XORed  with  h. 

* 

* Then  when  you  get  to  2*i,  shift  h up  one  bit,  XOR  in  the  polynomail 

* if  necessary  to  get  the  right  high  8 bits,  and  continue  for  2*i 

* through  4*i-1. 

* 

* This  drastically  reduces  the  amount  of  b i t - t w i dd I i ng  necessary 

* to  generate  a CRC  table. 

*/ 


static  void 

c r c I n i t ( wo r d3 2 tableC2563) 
{ 


n 

unsigned  i,  j; 

n 

word32  h;n 

/*  CRC  of  i. 

where  i is 

a power  of 

2 */ 

n 

table[!0]  = 0; 

n 

tabled  : = h = 

P0LY24; 

a 

for  (i  = 2;  i 

< 256;  i *=  2) 

{ 

a 

n i f ( ( h 

<<=  1 ) 8 0x1 000000 ) n 

/*  h <<=  1 

(mod 

a 

n □ 

h P0LY24; 

a 

n f o r ( j 

= 0;  j < i;  j++) 

a 

Q a 

tableCi+j3  = 

tableCj: 

h; 

a 

} 
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/* 

* Update  a CRC  to  reflect  the  addition  of  some  more  bytes. 

* It  doesn't  matter  how  the  bytes  are  broken  up;  the  CRC  is  the  same. 

* I.e.  crcUpdateC0,  "abed",  3)  ==  crcUpdate(crcUpdate(0,  "ab",  2),  "cd",  ); 
*/ 

wo  r d32 

c r c U pd a t e ( wo r d32  cre,  byte  const  *buf,  unsigned  Len) 

{ 

n static  word32  t a b L e C 2 5 6 II  ; n /*  Initialized  to  0 */ 

n if  (!tableC1D) 

n n c r c I n i t C t a b I e ) ; 

n whi le  ( len--) 

n n cre  = crc<<8  * tableC*buf++  * ( by t e ) ( c r c>> 1 6 ) ] ; 

n return  cre  S 0xffffff; 

} 
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/* 

* pgpCRC.h  --  this  is  used  for  CRC  Checksums. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpCRC.h, V 1 . 2. 2.1  1 997/06/07  09:50:  54  mhw  Exp  $ 

*/ 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  f 
#end  i f 

word32  c r c U pda t e { wo r d 32  crc,  byte  const  *buf,  unsigned  Len); 

#ifdef  __cpLuspLus 
} 

#endi  f 

^define  CRC_INIT  0xb704ceu 
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/* 

* pgpFileMod.c  — File  I/O  modules. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r I o r d0M I T . E D U> 

* 

* $Id:  pg p F i I eHod . c , V 1.9. 2. 2 1 997/06/07  09:50:55  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 


#include 

"config.h" 

# e n d i f 

#i nc lude 

<stdio.h> 

#ifdef  HAVE_UNISTD_H 

#i nc lude 

<unistd.h> 

# e nd i f 

#ifdef  MACINTOSH 

^include 

<un i X . h> 

ttinclude 

<s  t a t . h> 

#e  1 s e 

^include 

<sy s / t y pe s . h>n  n 

/^include 

<sys/ stat . h> 

#endi f 

#i nc lude 

"pgpDebug.h" 

/^include 

"pgpFi leMod.h" 

^include 

"pgpAnnotate.h" 

#i nc lude 

"pgpMem.h" 

#include 

"pgpErr.h" 

^include 

"pgpFi le.h" 

# i n c 1 ude 

"pgpPipeline.h" 

//include 

"pgpUsuals.h" 

//include 

"pgpKludge.h" 

/*  required  for  Ultrix  */ 


#define  F I LEHO DM AG  I Cn  0xfeedf11e 


struct  Fi  leHodContext  { 


n 

struct  PgpFile  *file; 

n 

i nt 

closeFlag; 

n 

int 

in_newfi  le; 

Q 

>; 

int 

scope_depth; 

/* 

★ 

If  we  have  a file,  flush  it.  Then, 

if  we  are 

allowed  to  close 

* 

it. 

then  do  so.  If  we  successfully 

closed  it. 

then 

set  the  file 

★ 

pointer  to  0.  Return  from  any  error 

with  the 

error 

numbe  r . 

*/ 

static  int 

fileModClose  (struct  F i I eModCont ext  *context) 

{ 

n int  error  = 0; 
n if  ( context->f i le)  < 

n a error  = pgpFileFlush  ( c on t ex t ->f i I e ) ; 
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□ 

B 

i f 

(error) 

a 

B 

B 

return  error; 

a 

B 

i f 

( c 0 n t ex  t ->  c 1 0 s e F 1 a g ) { 

Q 

B 

B 

error  = pgpFileClose  (context 

Q 

B 

B 

if  (error) 

n 

B 

B 

a return  error; 

B 

B 

B 

context -> file  = 0; 

B 

B 

> 

a } 

n return  0; 

} 

static  int 

Flush  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  F i L e Mod C o n t ex t *context; 
n pgpAssert  (myself); 

n pgpAssert  (myseLf->magic  ==  FILEMODHAGIC); 

a context  = (struct  F i I e Mo d C on t e x t * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 

n if  ( 1 con t ex t ->f i I e ) 
a n return  0; 

n return  pgpFileFlush  ( c o n t ex t -> f i I e ) ; 

} 

static  size_t 

fileUrite  (struct  PgpPipeLine  *myseLf,  byte  const  *buffer,  size_t  size, 
n int  *error) 

{ 

n struct  F i L eMod C on t ex t *context; 

n size_t  retval; 

n pgpAssert  (myself); 

a pgpAssert  ( my s e L f ->ma g i c ==  F I LE MO D M AG  I C ) ; 

n context  = (struct  FileModContext  *)myseLf->priv; 

n pgpAssert  (context); 

n if  ( ! con t e X t ->f i L e ) { 

n n if  (error) 

n n n *error  = PGPERR_NO_ F I LE;  /*  No  such  file  or  directory*/ 

n n returnO; 

n > 

n retval  = pgpFileWrite  (buffer,  size,  context->fiLe); 
n if  (retval)  { 

n n if  (error) 

n n n *error=0; 

n n return  retval; 

n } 

a if  (error  S&  pgpFileError  ( c on t e x t -> f i I e ) ) 
a a *error  = PGPERR_FILE_OPFAIL; 
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n pgpFiLeCLearError  {context->fiLe); 
n return  0; 

} 


/* 

* We  accept  certain  annotations  to  tell  us  that  we  should  change 

* the  file  we  are  writing.  If  we  have  an  open  file,  then  a change 

* will  either: 

*n  1)  Return  an  error  (if  c o n t e x t -> c I o s e F I a g !=  0),  or 
*n  2)  Be  ignored  (if  c on t e x t -> c I o s e F I a g ==  0) 

4r 

* For  the  end  context,  close  the  file  (similar  to  sizeAdvise)  and 

* return  the  error  we  get. 

*/ 

static  i nt 

fileAnnotate  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int 
n byte  const  *string,  size_t  size) 

{ 

n struct  FileModContext  *context; 

n FILE  *fp; 

n char  f i I e na me C F I LE N AH E_M AX D ; 

n size_t  len; 

n int  error; 

n ( VO i d ) o r i g i n; n /*  Not  used  */ 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  FILEMODHAGIC); 

n context  = (struct  FileModContext  *)myself->priv; 

n pgpAssert  (context); 


n switch  (type)  ( 
n case  PG P AN N_N E W F I LE_S T A RT : 

n n pgpAssert (! context->fi le  ||  ! c on t e x t -> c I o s e F I a g ) ; 

n n if  ( con t ex t -> f i I e ) ( 

n n n error  = fileModClose  (context); 

n n n if  (error) 

n n n n return  error; 

n n > 


n a pgpAssert  ( ! con t ex t ->f i I e ) ; 
n n { 

n a n struct  PgpFile  *pgpf; 


□ n 

a □ 

□ n 

□ a 

n n 

n n 

o D 

a n 

n D 

D n 

n a 

Q n 


n len  = min  (size,  sizeof  (filename)  - 1); 
n memcpy  (filename,  string,  len); 
n f i I e na me C I en 3 = '\0'; 
a 

n /*  I need  to  know  if  this  should  be  binary  or  not  */ 
n fp  = fopen  (filename,  "wb"); 
n if  ( ! f p) 

n n return  PG P E R R_N 0_ F I L E ; 

n pgpf  = pgpFileUriteOpen  (fp,  NULL); 
n if  (!pgpf)  { 

n n fclose  (fp); 

n n return  PGPERR_NOMEH; 
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n n n } 

n n n context -> file  = pgpf; 
n n n c o n t ex t -> c L o s e F L a g = 1; 

n n } 

n n c on t ex t -> i n_n e w f i L e = 1; 

n n break; 

a default: 

n n ; a a /*donothing*/ 

n } 
a a 

o PG P_S C 0 PE_ D E PT H _ U P D AT E ( c on t e X t -> s c o pe_d e p t h , type); 

n pgpAssert(context->scope_depth  !=  -1); 

n return  0; 

} 

static  int 

f i I e S i z e Ad V i s e (struct  PgpPipeline  *myseLf,  unsigned  Long  bytes) 

{ 

n struct  F i I eModCont ext  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  F I LE M 0 DM AG  I C ) ; 

a context  = (struct  F i L e Mod C o n t ex t * ) my s e L f ->p r i v ; 
n pgpAssert  (context); 

n if  (bytes  ||  c o n t ex t -> s c o pe_d e p t h ) 
n n return  0; 

n if  ( c o n t ex t -> i n_ n e u f i L e &S  ! c o n t e x t -> c L o s e F L a g ) 
n n return  0; 

n return  fileHodCLose  (context); 

} 

static  void 

fileTeardown  (struct  PgpPipeline  *myseLf) 

{ 

n struct  FileModContext  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  F I L EMO D M AG  I C ) ; 

n context  = (struct  FileModContext  * ) my s e L f ->p r i v ; 
n pgpAssert  (context); 

n fileModCLose  (context); 
n n 

n memset  (context,  0,  sizeof  (*context)); 
n pgpMemFree  (context); 

n memset  (myself,  0,  sizeof  (*myself)); 
n pgpMemFree  (myself); 

} 

struct  PgpPipeline  * 

pg p F i L e W r i t e C r ea t e (struct  PgpPipeline  **head,  struct  PgpFile  *fiLe, 
n n n int  cLoseFLag) 

[[CHK:702de4991115cc1ccfba88844e77135aa577c70998005444432665591bbc6cf97:: 
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{ 

n struct  PgpPipeLine  *mod; 

n struct  FileHodContext  *context; 

n if  ( ! head ) 

n n return  NULL; 

n *head  = 0; 

n context  = (struct  FileHodContext  *)pgpHemALLoc  (sizeof(*context)); 
n if  (!context) 

n n return  NULL; 

n mod  = (struct  PgpPipeLine  * ) pg pHemA I I o c ( s i z eo f ( *mod ) ) ; 

n if  (!mod)  { 

n n pgpMemFree(context); 

n n return  NULL; 

n > 

n mod->magic  = F I LE MO  DM AG  I C ; 
n mod->urite  = fileWrite; 

n mod->fLush  = Flush; 

n mod->si zeAdvi se  = f i L e S i z e Ad v i s e ; 
n mod->a nno t a t e = f i L e Annot a t e ; 

n mod-> t ea r d own  = f i L eT ea r do wn ; 

n mod->name  = "Write  file"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 
n context -> file  = file; 

n context ->cLoseFLag  = cLoseFLag; 

n *head  = mod; 

n return  mod; 

> 

#if  (BUFSIZ  < 16384)  SS  (MACINTOSH  ||  WIN32) 

^define  k PG PRe a dBu f S i z enn  16384 
Uelse 

//define  kPGPReadBuf  S i zenn  BUFSIZ 
//end i f 

//if  0 

/*  Enable  this  for  debugging  - it  stresses  the  hell  out  of  the  pipeline  */ 
//undef  kPG PRea dBu f S i z e 
//define  k PG  PRe  a dBu  f S i z e 1 
//endi  f 

struct  PgpFileRead 
{ 


n 

PgpPi pe  L i nenn 

□ 

mod; 

n 

Pg p F i L e 

*n 

n 

n 

file; 

D 

by  t en 

D 

Q 

n 

bufferCkPGPReadBufSi ze:; 

□ 

byte  *n 

n 

n 

n 

p; 

Q 

of f _tn 

n 

n 

n 

fi Lesize; 

n 

of f _tn 

n 

n 

n 

sizeleft; 

n 

s i z e_  t n 

n 

n 

n 

L en  ; 

n 

PGPFi LeReadCalLBackncalLBack; 

n 

void  *n 

n 

n 

D 

cal  LBackArg; 
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□ 

i n t nn 

n 

n 

B 

annsent ; 

n 

i n t nn 

a 

B 

B 

sizesent; 

n 

i ntnn 

a 

B 

B 

closeFLag; 

>; 

struct  PgpFiLeRead  * 

pgp F i L eRead C rea t e (FILE  *stdioFiLe,  int  closeFLag) 

{ 

a / * 

a * XXX  Potential  space  Leak  if  <cLoseFLag>  is  false,  although  it's 

a * never  called  that  way  from  anywhere  in  PGP  5.0 

n * / 

a return  pg p PG P F i L e Re  a d C r ea t e ( pg p F i L e Rea dOpe n (stdioFile,  NULL,  NULL), 
n n n n n n n n closeFLag); 

} 

struct  PgpFiLeRead  * 

pg p PG P F i L e Re  a d C r ea t e (PgpFile  *input,  int  closeFLag) 

{ 

n struct  PgpFiLeRead  *context; 
n long  sizeAdvise; 

n pgpAssert  (input); 


n context  = (struct  PgpFiLeRead  *)pgpHemALloc  (sizeof  (*context)); 
n if  (Icontext) 
n n return  NULL; 
n 

n sizeAdvise  = pgpFileSizeAdvise  (input); 


n 

□ 

n 

□ 

□ 

n 

a 

n 

□ 

n 

a 

n 

□ 

n 

n 

□ 

Q 

□ 


memset  (context,  0,  sizeof  (*context)); 
context -> file  = input; 
context->p  = c o n t ex t ->b u f f e r ; 
if  (sizeAdvise  < 0) 

{ 

n /*  Dont  trust  the  size  if  its  not  a regular  file  */ 
n context->f i Lesi ze  = 0; 
n con t e X t -> s i z e s e n t = -1; 

> 

else 

{ 


n con t ex t -> f i L e s i z e = sizeAdvise; 
n context->sizesent  = 0; 

} 

c on t ex t -> s i z e L e f t = c on t e x t -> f i L e s i z e ; 
context->caLLBack  = NULL; 
context -> closeFLag  = closeFLag; 
c on t e X t ->mod . na me  = "File  Read  Module"; 


n return  context; 
} 


VO  i d 

pgp F i L eReadS e t Ca L L Ba c k (PgpFiLeRead  *context,  PG P F i L e Rea d C a L L Ba c k calLBack, 
n n n n n n void  * c a L L Ba c k A r g ) 

{ 

n c on t ex t -> c a L I Ba c k = calLBack; 
n context->ca L LBackArg  = calLBackArg; 

CCCHK:e48339b721f9c6aa5cf6dd996c995564f7cb2a69ea53cb7aa42239fa5585243a7:3 
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} 


byte  const  * 

pgp F i L eReadPee k (struct  PgpFileRead  *context,  size_t  *Len) 
{ 


pgpAssert  (context); 


n /*  Compress  data  to  beginning  of  buffer  */ 
n if  (context->p  !=  c on t e x t ->bu f f e r ) ( 

n n memmove  ( c on t ex t ->bu f f e r , context->p,  c on t ex t -> L e n ) ; 
n n context->p  = c on t ex t ->b u f f e r ; 
n > 


n /*  Now  try  to  fill  the  buffer  */ 
n if  (!pgpFiLeEof  ( c on t e x t -> f i L e ) ) 

II  n context->Len  +=  pgpFiLeRead  (context->p  + c on  t ex  t ->  L e n , 
n n n n s i z eo f ( c on t e x t ->b u f f e r ) - c o n t ex t -> L e n , 

n n n n c on t e x t -> f i L e ) ; 

n if  ( L en ) 

n n *Len  = c o n t ex t -> L e n ; 


n return  context->p; 

> 


void 

pg p F i I e R e a d D e s t r oy  (struct  PgpFiLeRead  *context) 


{ 

a 

n 

□ 

n 

}n 


pgpAssert  (context); 
if  ( c on t e X t -> c L o s e F L a g ) 

n (void)  pgpFiLeCLose  ( c o n t ex t -> f i L e ) ; 
pgpHemFree  (context); 


i nt 

pgpFi leReadC Lose  (struct  PgpFiLeRead  *context,  struct  PgpPipeLine  *head) 
{ 

n int  error  = 0; 
n if  ( context->annsent  < 2)  { 

n n error  = h ea d->a nno t a t e (head,  & c o n t e x t ->mod , PG P AN N_ F I LE_ E N D , 
n n n n n NULL,0); 

n n if  (error) 

n n n return  error; 

n n context->annsent  = 2; 

n } 

n return  error; 

> 


int 

pgpFi LeReadPump  (struct  PgpFiLeRead  *context,  struct  PgpPipeLine  *head) 

{ 

n int  error  = 0; 
n size_t  retLen; 

n pgpAssert  (context); 
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a 

pgpAssert  (head); 

a 

/* 

a 

* 

Size  should  be  sent  outside  scope.  Also  send 

it  inside  for  consistency 

a 

★ 

with  past  behavior;  that  is  not  necessary  but 

should 

not  hurt. 

a 

*/ 

a 

i f 

( ! c 0 n t ex t -> s i z e s e n t ) ( 

a 

a 

error  = h e a d-> s i z e Ad v i s e (head,  c o n t ex t -> s i z e L e f t ) ; 

a 

a 

if  (error) 

a 

a 

n return  error; 

a 

> 

a 

i f 

( ! c on t e X t ->a n n s e n t ) { 

a 

a 

error  = h ea d ->a n no t a t e (head,  & c on t ex t ->mod , 

PGPANN_ 

FILE_BEGIN, 

a 

a 

n a n NULL,0); 

a 

a 

if  (error) 

a 

a 

n return  error; 

H n c on t e X t ->a n n s e n t = 1; 

n > 

n if  ( ! c o n t e X t -> s i z e s e n t ) i 

n n error  = h ea d-> s i z e Ad v i s e (head,  cont ext->s i ze L ef t ) ; 
n a if  (error) 

n n n return  error; 

n n con t ex t->s i z e s en t = 1; 

n > 


□ 

□ 

n 

n 

Q 

□ 

□ 

n 

o 

n 

n 

n 

tt 

n 

n 

a 

a 

Q 

n 


do 

n 

n 

□ 

□ 

n 

n 

n 

Q 

□ 

Q 

n 

Q 

Q 

n 

n 

n 

n 

n 


/*  Write  out  anything  in  my  buffer  */ 
while  ( con  t ex  t ->  I en  ) <. 

n retlen  = head->write  (head,  context->p, 
n n n c on t e x t -> L e n , Serror); 

n con t ex t “> L e n -=  retlen; 

n context->p  +=  retlen; 
n context“>sizeleft  -=  retlen; 


a 

i f 

(error) 

a 

a 

return  error; 

a 

i f 

( con t ex t->ca 1 1 Ba c k !=  NULL) 

a 

{ 

a 

a 

error  = ( * c on t e x t -> c a 1 1 Ba c k ) ( c o n t e x t ->c a 1 1 Ba c k A r g , 

a 

a 

a a a 

c 0 n t ex t ->f i 1 e s i z e - c on t e x t -> s i z e 1 e f t , 

a 

a 

a a a 

context->fi  lesize); 

a 

a 

if  (error  ! 

!=  PGPERR_0K) 

a 

a 

a return 

error; 

a 

> 

> 


n a context->p  = c on t e x t ->b u f f e r ; 
n a if  (pgpFileEof  ( c on t e x t -> f i I e ) ) 
a a a break; 

a a context->len  = pgpFileRead  (context->p,  s i z eo f ( c on t e x t ->bu f f e r ) , 
n « con t ex t->f i I e ) ; 


a > while  ( cont ext->  I en ) ; 


a /*  If  I get  here,  then  I*m  at  the  end  of  the  file  */ 
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n if  ( c on t e X t -> s i z e L e f t S&  c o n t e x t -> s i z e s e n t > 0) 
n n return  PGPERR_SIZEADVISE; 

n error  = head->sizeAdvise  (head,  0); 
n if  (error) 

n n return  error; 

n error  = pg p F i L e Re  a d C L o s e (context,  head); 
a if  (error) 

n n return  error; 

n return  PGPERR_0K; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pg p F i L eHod . h --  Pipeline  Module  to  (read  and)  write  files. 

★ 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r I o r d SIM  I T . E D Ll> 

★ 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pg p F i I eMod  . h , V 1.6. 2. 2 1 997/06/07  09:50:56  mhw  Exp  $ 

*/ 

#ifndef  PGPFILEMOD.H 
#define  PGPFILEMOD.H 

^include  "pgpUsuals.h" 

#include  "pgpTypes.h" 

#include  "pgpErr.h" 

#ifdef  ..cplusplus 
extern  "C"  { 

#endi  f 

struct  PgpPipeline; 

#ifndef  T Y P E.PG PP I P E LI N E 

#define  T Y P E.PG P P I P E LI N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

# e nd i f 

struct  PgpFileRead; 

#ifndef  T Y P E.PG P F I L E R E A D 

#define  T Y P E.PG P F I LE R E A D 1 

typedef  struct  PgpFileRead  PgpFileRead; 

# end i f 

struct  PgpFile; 

#ifndef  TYPE. PGPFILE 

#define  TYPE. PGPFILE  1 

typedef  struct  PgpFile  PgpFile; 

# end i f 

typedef  PGPError  ( * PG P F i I e Rea d C a I I Ba c k ) ( vo i d *arg,  size.t  soFar, 
n n n n n size.t  total); 

/* 

* Create  a module  to  write  into  the  appropriate  file.  Will  perform  a 

* fileCloseC)  is  close  is  non-zero  when  a s i z e Ad v i s e ( 0 ) is  received. 

*/ 

struct  PgpPipeline  PGPExport  * 

pgp F i I eW r i t eC r ea t e (struct  PgpPipeline  **head,  struct  PgpFile  *file, 
n n int  c I o s e.a t . eo f ) ; 

/* 

* Create  a context  that  is  used  to  pump  a file  through  a pipeline. 

* It  will  close  the  file  when  it  reaches  the  end  if  close  is  non-zero 
*/ 

struct  PgpFileRead  PGPExport  *pg p F i I e Re  a d C r ea t e (FILE  *stdioFile, 
n int  close.at.eof); 

i:CCHK:644e867c3b44fcccabbeddd385d777977ff6400660aa23ede0aa27c4fe86b2747]] 


1153 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpFileMod.h 


struct  PgpFiLeRead  PGPExport  *pg p PG P F i L e R ea d C r e a t e (PgpFile  *input, 
n int  c L o s e_a t _e o f ) ; 

void  PGPExport  pg p F i L e Rea d S e t C a L L Ba c k (PgpFiLeRead  *context, 
n PGPFiLeReadCaLLBack  caLLBack,  void  *caLLBackArg); 

/* 

* Forcibly  close  a FileRead  Context.  This  is  only  necessary  if  you 

* need  to  cause  the  fileread  module  to  close  itself  forcibly,  rather 

* than  waiting  for  the  end.  Basically  it  just  sends  an  end  annotation 
*/ 

int  PGPExport  pg p F i L e Rea d C I o s e (struct  PgpFiLeRead  *context, 
n struct  PgpPipeline  *head); 

/* 

* Destroy  a F i L e R ea d C on t e x t . Close  the  file  if  necessary 
*/ 

void  PGPExport  pg p F i L e Rea d D e s t r oy  (struct  PgpFiLeRead  *context); 

/* 

* pgpFi LeReadPump  takes  the  context  and  pipes  the  file  down  the  pipeline 

* until  it  hits  an  error.  It  then  returns  the  error.  It  returns  0 

* when  it  reaches  the  end  of  the  file  and  successfully  sends  its  data. 

*/ 

int  PGPExport  pg p F i L e R ea d Pump  (struct  PgpFiLeRead  *context, 
n struct  PgpPipeline  *head); 

/* 

* Peek  at  the  input  buffer  of  a PgpFiLeRead  object.  This  is  useful  to 

* check  if  it  is  a text  or  binary  file,  or  to  use  the  file  contents 

* to  obtain  some  amount  of  entropy.  This  will  return  a pointer  to 

* the  buffer,  and  will  fill  in  Len  with  the  amount  of  data  in  the 

* buffer. 

*/ 

byte  const  PGPExport  *pg p F i L e Rea d Pe e k (struct  PgpFiLeRead  *context, 
n si 2e_t  *Len); 

#ifdef  __cpLuspLus 

> 

Send  i f 

Sendif  /*  PGPFILEMOD_H  */ 
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/* 

* pgpHeader.c  --  write  out  a file  header. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

★ 

* currently,  the  header  is:  1 01  01  000b  \003  P G P ==  " \ 2 5 0 \ 003 PG P " . In 

* other  words,  this  is  an  OLD  LiteraL-1  packet  which  PGP  2.6.2  supports 

* for  backwards  compatibility  with  pre-release  versions  of  PGP  2.0,  but 

* have  never  been  generated  by  any  released  version  of  PGP.  PGP  2.6.2 

* will  see  this  as  a Literal  packet  of  type  'P',  which  is  an  unknown  type, 

* therefore  complaining  that  it  needs  a newer  version  of  PGP. 

* 

* PGPLib,  on  the  other  hand,  will  know  to  just  ignore  this  completely. 

★ 

* This  module  will  wait  for  input.  It  will  then  check  the  first  byte 

* of  the  message.  If  it  is  an  old-style  PGP  message  (10xxxxxx)  then  it 

* does  nothing.  If  it  is  a new-style  PGP  message  (llxxxxxx)  then  it  will 

* emit  the  header. 

* 

* Written  by:n  Derek  Atkins  < wa r L o r d SM I T . E D U> 

★ 

* $Id:  pgpHeader . c,v  1.3. 2.1  1 997/06/07  09:50:56  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end  i f 

#incLude  <stdio.h> 


# i n c L ude 
#incLude 

# i n c L ude 
#i nc  Lude 
#incLude 
#incLude 


pgpDebug.h" 
pgpHeader. h" 
pgpPktByte.h" 
pgpMem. h" 
pgpErr.h" 
pgpPipeline.h 


^define  HEADERMAGICn  0x4eade640 


static  byte  const  pgpheaderCD  = { 168,  3,  'P',  'G',  'P'  }; 


struct 

Q 

n 

Q 

□ 

□ 

>; 


Context  { 

byte  h ea de r C s i z eo f ( pg p h ea d e r ) D ; 
size_t  hdrlen; 
size_t  offset; 
struct  PgpPipeline  *taiL; 
byte  done; 


static  int 

DoFLush  (struct  Context  *context) 

{ 

n interror=0; 

n size_t  retlen; 

n /*  Try  to  flush  anything  that  we  have  buffered  */ 

n while  ( c on t e x t -> h d r L e n ) { 

n D retlen  = c o n t e x t -> t a i L -> w r i t e ( c on t ex t -> t a i L , 
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n 

n 

n 

n 

□ 

a 

n 

□ 

n 

> 


□ 

n n 

n 

D 

n n 

□ 

n 

n n 

n 

n 

context->hdrlen 

- = 

r e 1 1 en ; 

n 

context->of f set 

+ = 

ret len; 

n 

if  (error) 

□ 

n return 

error; 

> 

return  error; 


context->header+context->offset, 
context->hdr  Len, 

Serror); 


static  int 

Flush  (struct  PgpPipeline  *myseLf) 
{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  (myself  — >magic  ==  HEADERMAGIC); 


n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 

a pgpAssert  ( c on t ex t -> t a i I ) ; 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 


n return  c o n t ex t -> t a i I -> f I u s h ( c on t ex t -> t a i I ) ; 

} 

static  size_t 

Write  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 


pgpAssert  (myself); 

pgpAssert  ( my s e I f ->ma g i c ==  HEADERMAGIC); 
pgpAssert  (error); 


n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i I ) ; 


Q 

i f 

( ! cont ext->done  ) f 

n 

n 

i f 

( ! s i z e ) 

s 

Q 

D 

return  0; 

Q 

n 

1 f 

(IS_NEW_PKTBYTE  (*buf)) 

n 

Q 

H 

switch  ( NEW_PKTBYTE_TYPE 

n 

n 

□ 

n 

/*  XXX:  These  shi 

D 

D 

D 

case 

PKTBYTE_ESK: 

n 

n 

n 

case 

PKTBYTE_SIG : 

n 

n 

n 

case 

PKTBYTE_CONVESK: 

n 

n 

n 

case 

PKTBYTE_1 PASSSIG  : 

n 

n 

n 

case 

PKTBYTE_SECKEY  : 

n 

n 

a 

case 

PKTBYTE_PUBKEY  : 

n 

n 

n 

case 

PKTBYTE_SECSUBKEY  : 
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n 

B 

B 

case 

PKTBYTE_PUBSUBKEY : 

□ 

B 

B 

case 

PKTBYTE_COHPRESSED : 

n 

B 

B 

case 

PKTBYTE_C0NVENTI0NAL: 

n 

B 

B 

case 

PKTBYTE_LITERAL : 

□ 

B 

B 

B 

memcpy  ( c on t e x t -> h ea d e r , 

pgpheader. 

n 

B 

B 

B 

n s i z e 0 f ( pg p h e a d e r ) ) ; 

□ 

B 

B 

B 

c on t e X t -> h d r 1 e n = sizeof 

(pgpheader) ; 

n 

B 

B 

B 

break; 

B 

B 

B 

> 

B 

B 

context 

->done 

= 1; 

B 

> 

n *error  = DoFLush  (context); 

n if  (*error) 

n n return  0; 

n return  c o n t e x t -> t a i I ->w r i t e ( c o n t e x t -> t a i L , buf,  size,  error); 

} 


static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  H E A D E RH AG  I C ) ; 


n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n pgpAssert  (context -> tail); 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 


n 

n 


} 


return  c on t e x t -> t a i I ->a n no t a t e 
n Q n n 


( c o n t e X t -> t a i I , origin, 
string,  size); 


type. 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 
{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  H E A D E RH AG  I C ) ; 


a 

Q 


n 


context  = 
pgpAssert 
pgpAssert 


(struct  Context  *)myself->priv; 
(context); 

(context ->tai  1); 


n /*  Can't  send  the  sizeAdvise  until  we've  figured  out  who  we  are  */ 

n 

n if  ( ! c o n t e x t ->don e ) 
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n n returnO; 

n error  = DoFLush  (context); 

n if(error) 

n n returnerror; 

n return  c o n t e x t -> t a i L -> s i z e Ad v i s e ( c o n t e x t -> t a i L , bytes); 

} 

static  void 

Teardown  (struct  PgpPipeLine  *niyself) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  H E AD E RM AG  I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n if  ( c o n t e X t -> t a i I ) 

n n context->ta i L->tea rdown  ( c on t ex t -> t a i L ) ; 

a memset  (context,  0,  sizeof  (*context)); 

n pgpMemFree  (context); 

n memset  (myself,  0,  sizeof  (*myself)); 

n pgpMemFree  (myself); 

} 

struct  PgpPipeline  ** 

pgpHeaderCreate  (struct  PgpPipeline  **head) 

{ 

n struct  PgpPipeline  *mod; 

n struct  Context  *context; 

n if(!head) 

n n returnNULL; 

n context  = (struct  Context  *)pgpMemAlloc  (sizeof  (*context)); 

n if  ([context) 

n n returnNULL; 

n mod  = (struct  PgpPipeline  * ) pg pMemA 1 1 o c (sizeof  (*mod)); 

n if(lmod){ 

n n pgpMemFree  (context); 

n n returnNULL; 

n } 

n mod->magic  = HEADERMAGIC; 

B mod->write  = Write; 

B mod->flush  = Flush; 

B mod->s i z e Ad V i s e = SizeAdvise; 

B mod->a n n o t a t e = Annotate; 

B mod-> t e a r d o wn  = Teardown; 

B mod->name  = "File  Header  Module"; 

B mod->priv  = context; 

B memset  (context,  0,  sizeof  (*context)); 
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n context->tail  = *head; 

n *head  = mod; 

n return  & c o n t ex t -> t a i L ; 

> 
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/* 

* pgpHeader.h  — Create  a PGP  File  Header.  It  Looks  Like  a broken 

* ESK  to  oLder  PGP  versions,  but  this  new  code  wiLL 

* understand  i t . 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r L o r dSH I T . E D U> 

* 

* $Id:  pgpHeader . h,v  1.4. 2.1  1997/06/07  09:50:56  mhw  Exp  $ 

*/ 

#ifndef  PGPHEADER_H 
^define  PGPHEADER.H 

#incLude  " pg  pL)  s u a L s . h " 

#ifdef  __cpLuspLus 
extern  "C"  C 
#e nd i f 

struct  PgpPipeLine; 

#ifndef  T Y P E_PG P P I P E LI N E 

#define  T Y PE_PG P PI P E LI N E 1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

#endi f 

struct  PgpPipeLine  PGPExport  **pgpHeaderCreate  (struct  PgpPipeLine  **head); 

#ifdef  __cpLuspLus 

> 

#e nd i f 

#endif  /*  PGPHEADER.H  */ 
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/* 

* pgpPrsAsc.c  --  ascii  dearmor  parser.  This  is  fairly  complicated.  Read 

* nthe  comment  a page  down  for  a description  of  how  this  system  works. 

*n  The  nice  part  is  that  you  can  input  multipart  armor  in  any  order 

*n  and  it  will  work.  In  fact,  you  can  intersperse  armor  parts  from 

* a multiple  messages  and  it  will  work.  Moreover,  you  can  input  binary 
*n  PGP  messages  and  it  will  still  work!  My  god,  can  this  man  think 

*n  of  everything  or  what? 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r I o r d SM I T . E D U> 

* 

* $Id:  pgpPrsAsc . c,v  1.13.2.3  1997/06/07  09:50:57  mhw  Exp  $ 

*/ 

#ifdef  HAVE_C0N FIG_H 
#include  "config.h" 

# e n d i f 


^include  <ctype.h> 

#include  <stdio.h> 

#include  <string.h> 

/*  [Hal]  I am  working  on  adding  PGP/HIHE  parsing  to  this.  */ 
#ifndef  MIMEPARSE 
#define  MIMEPARSEn  n 0 
# e n d i f 

#include  "pgpDebug.h" 

^include  "pgpCharMap.h"nn  /*  for  charHapIdentity  */ 
//include  " pg  p C o py  Mod  . h " 

#include  "pgpCRC.h" 

#include  "pgpPrsAsc.h" 

//include  " pg  p Ra  d i x 64  . h " 

//include  "pgpAnnotate.h" 

//if  MIMEPARSE 

//include  " pgp  D eM  i meMod  . h " 

//end  i f 


//include 

"pgpFIFO.h" 

//include 

"pgpFi leType . h" 

^include 

"pgpHash.h" 

#include 

"pgpJoin.h" 

#include 

"pgpMem. h" 

//include 

"pgpPrsBin.h" 

^include 

"pgpEnv.h" 

//include 

"pgpErr.h" 

#include 

"pgpPipeline.h" 

//include 

"pgpSplit.h" 

//include 

"pgpTextFi  It.h” 

#include 

"pgpUsuals.h" 

//include 

"pgpVeri fyRa . h" 

/* 

* This  i 

s a complicated  piece 

0 f 

code. 

Less  politely. 

this 

code  is  a 

* bitch. 

It  needs  to  be  able 

t 0 

keep 

track  of  many  different  things 

* at  the 

★ 

same  time  in  order  to 

combine 

pieces  of  armor 

into 

whole  messages 
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★ 

* 

★ 

★ 

* 

ic 

•k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

*n 

*n 

*n 

*n 

*n 

* 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

*/ 


There  are  three  entities  defined  here.  First  is  an  armor  part,  which 
is  defined  as  the  range  from  BEGIN  PGP  MESSAGE  to  the  END.  Second  is 

a message,  which  is  PGP  message  made  up  of  one  or  more  parts. 

And  third,  there  are  files,  which  can  contain  parts. 

Parts  must  be  fully  contained  within  a file,  however  there  can  be 
multiple  parts  in  a single  file.  On  the  other  hand,  messages  can 
cross  file  boundaries. 

This  code  will  output  PGP  messages  in  a stream  of  input  "files" 
wherever  the  first  part  of  the  message  came  in  the  stream.  In  a 
multipart  message,  this  will  require  the  least  amount  of  buffering 

since  buffering  is  only  required  when  pieces  come  out  of  order. 

This  can  also  handle  the  degenerate  cases  of  interleaved  messages, 
although  that  requires  possibly  large  amounts  of  buffering. 

That  case  happens  rarely  enough  that  the  resource  requirement  is 
not  onsidered  a problem. 

A picture  best  describes  this  behavior: 

W1  W2  XI  X2  X3  Y1  Y2  Y3  Z1  Z2 

II  A2  I I I I B I I A1  I I I I C2  I I Cl  I I I |A3|  | 

I + + I I + + + + I I + + + + I I + — + I 

+ + + + + + + + 

Filel  File2  File3  File4 

A A 

I Everything  is  buffered  | 

+ + 

W,X,Y,Z  are  file  header  and  footer  text  which  is  outside  the  PGP  armor. 

The  numbers  are  used  to  associate  where  in  the  data  stream  they  occur. 


A,B,C  are  3 PGP  messages.  The  numbers  are  the  actual  multipart  parts 
which  may  occur  out  of  order. 


If  this  input  stream  were  given  to  this  armor  parser,  the  following 
output  would  occur: 

I W1  “ W2  I XI  B X2  A X3  I Y1  ■ Y2  C Y3  I Z1  ■ Z2  I 


Whe  re  : n 
n n 

n a 

n n 

a n 

a n 


I ==  A file  separation  annotation  (or  multiple  annotations) 

~ ==  An  armor  annotation  (an  armor  part  occured  here) 

W,X,Y,Z  ==  The  exact  unencrypted  text  that  arrived  in  the 
i nput  . 

A,B,C  ==  The  full  messages,  wrapped  in  "PGP  data"  annotations, 
which  will  be  sent  to  a binary  parser  for  decryption. 


As  you  can  see,  the  messages  are  output  in  the  order  B,  A,  C,  each 
message  occurring  in  the  place  in  the  unenecrpted  text  stream  where 
part  1 is  located.  Other  parts  are  replaced  with  an  annotation  that  just 
notes  the  deletion. 


While  decryting  message  A,  all  the  data  between  A1  and  A3  (including 
annotations)  needs  to  be  buffered.  In  the  usual  case  where  the  text 
between  parts  is  short  (e-mail  headers,  mostly)  and  there  aren't 
multiple  interleaved  parts,  not  very  much  needs  to  be  buffered. 

Not  much  can  be  done  to  improve  the  worst  case. 
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#define  k PG P P r s A s c C md Bu f S i z en 


4096 


^define  D E A RHO RH AG  I C n 


0xdea4304 


/*  List  of  commands  */ 

//define  CMD_WRITEn  1 
//define  CHD_ANNOTATEn  2 

//define  LINE_LENn  256n/*  256  bytes  is  MORE  than  Ascii  armorsize!  */ 


struct  Message ;na 


/*  forward  reference  */ 


struct  MsgPart  { 

a unsigned  num;a  a /*  Which  part  number  is  this?  */ 

n struct  PgpPipeLine  *mod;  /*  Pointer  to  the  join  module  for  this  part  */ 
n struct  PgpPipeLine  *text;  /*  cLearsigned:  the  text  goes  here  */ 
n struct  PgpPipeLine  *sig;  /*  cLearsigned:  the  sig  goes  here  */ 
a struct  Message  *msg;n  /*  What  message  does  this  belong  to?  */ 

n struct  MsgPart  *next;n  /*  Pointer  to  the  next  part  */ 

n byte  first;na  /*  Is  this  the  first  section  Left  to  do?  */ 

n byte  done;n  a /*  is  this  part  complete?  */ 

>; 

struct  Message  { 

n char  *name;na  /*  The  name  of  this  message  */ 

n unsigned  size, -a  a /*  How  many  parts  does  this  have,  if  known  */ 

B struct  PgpPipeLine  **taiL;  /*  Tail  pointer  for  this  message  */ 

n struct  MsgPart  *parts;n  /*  The  message  parts  */ 

n struct  Message  *next;n  /*  The  next  message  */ 

a int  m s g _n umb e r ; na  /*  What  is  this  message  number  */ 

n byte  writing;n  a /*  Are  we  writing?  */ 

n byte  foundpart1;n  /*  Did  we  find  part  1?  */ 

>; 

struct  Context  { 

a struct  PgpFifoDesc  const  *fifod;n  /*  Fifo  Descriptor  */ 

n struct  PgpFifoContext  *ann;  /*  Fifo  to  hold  the  saved  annotations  */ 

B struct  PgpFifoContext  *data;  /*  Fifo  to  hold  saved  non-PGP  data  */ 
a struct  Message  *msgs;n  /*  List  of  current  messages  */ 

a struct  MsgPart  *part;a  /*  The  current  message  part  */ 

n struct  PgpPipeLine  *myseLf;  /*  Pointer  to  this  pipeline  module  */ 

a struct  PgpPipeLine  *taiL;  /*  Tail  pointer  for  rest  of  the  pipeline  */ 

n struct  PgpUICb  const  *ui; 

n struct  PgpEnv  const  *env; 

a void  *ui_arg; 

a unsigned  Long  written;n  /*  Fifo  delta  from  Last  command  */ 

a unsigned  long  Left/a/*  Bytes  Left  in  fifo  until  next  command  */ 

a unsigned  thispart;a  /*  This  part,  obtained  from  the  PGP  header  */ 

a unsigned  maxparts;n  /*  Max  parts,  obtained  from  the  PGP  header  */ 

n int  state;B  a /*  fSM  state  */ 

n int  a nno t a t i on ; aa  /*  Annotation  State  */ 

n int  d e p t h_a t _a n n ; a /*  Scope  depth  when  we  sent  the  annotation  */ 

n int  s c ope_de p t h ; a /*  Count  of  scopes  we're  inside  */ 

a char  me s s a g e i d C L I N E_LE N 3 ; /*  Message  ID,  obtained  from  the  PGP  header*/ 

n byte  da t a bu f C 5 1 ] ; n /*  Space  to  hold  raw  data  48+sLush  */ 

a byte  *dataptr;a  a /*  Pointer  into  the  data  buffer  */ 

B unsigned  dataLen;n  /*  Length  of  data  buffer  */ 
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n 

byte 

armorlineCLINE 

_LEN];  /*  line  of  armor  */ 

n 

byte 

*a  rmorpt  r;nn 

/* 

pointer 

into  armorline  */ 

Q 

u n s i 

gned  armorlen;n 

/* 

length 

of  line  */ 

n 

unsigned  long  crc;n 

/* 

CRC  Checksum  */ 

a 

byte 

hashli stn2553; 

n / * 

List  of 

hashes  */ 

n 

byte 

hashlen;n  n 

/* 

Length 

of  the  list  of  hashes  */ 

B 

byte 

cmda r g C kPG PP r s As c C mdBu f S i z e D ; n /*  buffered  command  */ 

B 

unsigned  cmdlen;n 

/* 

length 

of  buffered  command  */ 

B 

int 

msg_count ; n n 

/* 

A count 

of  the  number  of  messages  */ 

B 

byte 

command ;B  a 

/* 

the  command  that  is  buffered  */ 

B 

byte 

buffering;nn 

/* 

A flag 

— are  we  buffering  everything?  */ 

B 

byte 

eol;n  n /* 

Our 

readLine  EOL  flag  */ 

B 

byte 

eob;n  n /* 

End 

of  Buffer  flag  (from  readLine)  */ 

B 

byte 

expectcrc;nn 

/* 

Are  we 

expecting  the  CRC  line  next?  */ 

B 

byte 

crlf;n  n /* 

The 

type  of 

crlf  we  have  */ 

B 

byte 

saved_crlf;B 

/* 

Save  it 

of f . . . */ 

B 

byte 

fi rstheader;B 

/* 

True  if 

looking  for  1st  header  line  */ 

B 

byte 

doublespace;B 

/* 

True  if 

every  other  line  is  blank  */ 

#if 

MIHEPARSE 

B 

byte 

raime_signed;B 

/* 

Dealing 

with  a PGP/MIME  clearsigned  message  */ 

B 

byte 

no_mime_headers;B 

n / * 

Don't  have  mime  headers.  Look  in  body  */ 

B 

byte 

mime_boundaryC2563 

; B /* 

MIME  boundary  with  " — " */ 

B 

int 

mime_bound_len; 

n/* 

s t r 1 e n ( m i me_bou nda r y ) */ 

Send  i f 
>; 


static  char  d ea rmo rTa b L e C 2 5 6 D ; 
static  int  inited  = 0; 


/*  forward 
static  int 
static  int 
non 
static  int 


references  */ 

writeMessage  (struct  Context  *ctx,  struct  Message  *msg); 
sendAnnotate  (struct  Context  *ctx,  struct  PgpPipeLine  *origin, 
int  type,  byte  const  *string,  size_t  size); 
flushMessage  (struct  Context  *ctx,  struct  Message  *msg); 


/* 

* Close  this  part.  This  makes  sure  that  this  message  is  being  written 

* before  it  does  this.  It  will  call  a sizeAdvise  (0)  on  the  join 

* module  and  then  possibly  a teardown,  too. 

*/ 

static  int 

closePart  (struct  MsgPart  *part) 

{ 

n int  error; 


n if  (!  pa r t ->ms g-> w r i t i ng  ) 
n n return  0; 


if  (part->sig)  ( 


error  = pa r t ->s i g-> s i z e Ad v i s e (part->sig,  0); 
if  (error) 
a return  error; 


n if  (par  t ->mod ) ( 

n n error  = pa r t ->mod-> s i z e Ad v i s e (part->mod,  0); 
n n if  (error) 

n n n return  error; 
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n } 

n if  (part->text)  { 

n n error  = pa r t -> t e x t -> s i z e A d v i s e (part->text,  0 ) ; 
n n if  (error) 

n n n return  error; 

n > 


n part->done  = 2; 
n return  0; 

} 


/* 

* Free  a message  part;  this  tears  down  the  join  module,  which  must  be 

* unhooked  from  the  pipeline  first. 

*/ 

static  void 

freePart  (struct  MsgPart  *part) 

{ 

n struct  MsgPart  **partp  = 8pa r t ->ms g ->pa r t s ; 


n 

Q 

n 

n 

D 

□ 


if  (part->mod) 

n pa r t ->mod-> t e a r d o wn  (part->mod); 

if  (part -> text) 

n pa r t ->t ex t -> t ea rdown  ( pa r t -> t e x t ) ; 
if  (part->sig) 

n pa r t->s i g->t ea rdown  (part->sig); 


n while  ( *pa  rt  p ) { 

n n if  (*partp  ==  part)  { 

a a a *partp  = part->next; 

n n n memset  (part,  0,  sizeof  (*part)); 

n n n pgpMemFree  (part); 

n n n return; 

□ n > 

n > 

n /*  no  match  found  */ 
n return; 

} 


/* 

* We  are  done  with  the  current  part,  so  mark  it  as  done.  We  should 

* also  close  this  part  if  we  are  writing  this  message  and  either 

* there  is  a next  part  or  this  is  the  last  part.  Then  try  to  flush 

* the  message,  in  case  we  have  anything  buffered.  Finally,  clear  the 

* part  from  the  context  so  we  know  we  don't  have  a current  part. 

*/ 

static  int 

donePart  (struct  Context  *ctx) 

{ 

o struct  MsgPart  *part  = ctx->part; 
n int  error; 


n pgpAssert  (part); 

n pa  rt->done  = 1 ; 
n if  ( pa r t ->m s g->w r i t i n g ) ( 

naif  (part->next  | | part->num  ==  pa r t ->ms g -> s i z e ) { 
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a B B error  = cLosePart  (part); 

B B B if  (error) 

B B B B return  error; 

B B ) 

B B error  = fLushHessage  (ctx,  part->msg); 

B B if  (error) 

B B B return  error; 

n } 

n ctx->part  = NULL; 
n return  0; 

} 

/* 

* We're  going  to  start  a new  part.  Therefore  we  need  to  pass  in  the 

* message  that  it  is  a part  of,  and  then  create  the  new  part  or 

* return  the  pre-created  part.  If  we  ask  for  a part  number  in  this 

* message  that  is  beyond  the  highest  number  in  the  List,  then  we 

* create  that  many  more  parts  up  to  the  number  passed  in. 

* 

* Should  we  close  old  parts  if  we  can?  I don't  know,  yet.  If  we've 

* already  written  out  part  one  and  we  just  got  part  two,  should  I close 

* part  one  here?  I don't  know,  yet. 

*/ 

static  struct  MsgPart  * 

getPart  (struct  Context  *ctx,  struct  Message  *msg,  unsigned  num) 

{ 

n struct  MsgPart  *temp  = NULL,  **part  = &msg->parts; 

B struct  PgpPipeline  *Last  = NULL; 

B unsigned  highest  = 0; 

B /*  Initialize  the  CRC  counter!  */ 
n ctx->crc  = CRC_INIT; 

B while  ( *pa  rt ) { 

B B if  (num  ==  ( *pa r t ) ->n urn ) 

B B B return  *part; 

B B highest  = (*part)->num; 

B B last  = (*part)->mod; 

n n part  = 8(*part)->next; 

n > 

B /*  We  need  to  allocate  a bunch  of  parts  */ 


n 

for 

(highest++;  highest  <=  num;  highest++)  { 

n 

a 

temp  = (struct  MsgPart  * ) pgpMemA L L oc  (sizeof 

(*temp)); 

n 

n 

i f 

( I t emp ) 

n 

n 

n 

return  NULL; 

o 

n 

memset  (temp,  0,  sizeof  (*temp)); 

n 

n 

temp->num  = highest; 

n 

n 

temp->msg  = msg; 

D 

o 

i f 

(Last)  { 

D 

D 

Q 

temp->mod  = pgpJoinAppend  (Last); 

n 

n 

> 

else  { 

D 

n 

n 

msg->tail  = pg p J o i n C r e a t e ( & ( t emp->mod ) , 

ctx->fi fod) ; 

n 

D 

D 

temp->first  = 1; 

n 

n 

n 

msg->taiL  = pg p Pa r s e B i n C r e a t e (msg->tail. 

ctx->env); 
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n 

n 

n 

/* 

n 

n 

n 

* Binary  parser  may  add  modules  after  itself,  and  in 

some 

n 

n 

n 

* error  recovery  situations  they  are  still  there  when 

we  try 

n 

n 

n 

* to  close  things.  Create  a copy  module 

to  act  as  a 

stable 

□ 

n 

□ 

* predecessor  to  context->tai L . 

n 

n 

n 

*/ 

n 

n 

n 

msg->taiL  = pg p C opy Mod C r e a t e (msg->taiL); 

Q 

Q 

n 

/*  connect  the  join  module  to  the  rest  of 

the  pipe  */ 

n 

s 

n 

i f (msg->tai L ) 

a 

a 

n 

B *(msg->taiL)  = ctx->taiL; 

u 

n 

> 

n 

n 

if  ( 

! t emp->mod  ) { 

Et 

n 

□ 

pgpMemFree  (temp); 

n 

n 

n 

return  NULL; 

u 

n 

> 

n 

n 

*pa  rt  = t emp ; 

n 

n 

Last 

= temp->mod; 

n 

n 

part 

= 8temp->next; 

tt 

> 

□ 

□ 

B 

n return  temp; 

} 

/* 

* We  have  a part  of  a message  "name"  of  size  "size"  — Lets  try  to 

* find  the  message  that  this  is  a part  of,  and  either  return  that 

* message  pointer  or  create  a new  one  and  return  that.  If  name  is 

* non-NULL,  then  it  wi L L compare  the  name  passed  in  with  older  names 

* (i.e.,  a messagelD).  If  name  is  NULL,  then  it  wiLL  compare  sizes 

* for  oLd-styLe  multipart  armor.  Do  not  return  messages  that  have 

* only  one  part. 

* 

* This  means  that  you  can  only  have  one  old-style  multipart  message 

* going  of  any  particular  size  (number  of  parts).  I don't  consider 

* this  a big  problem,  since  interleaved  messages  are  rarely  a 

* problem.  Out-of-order  messages,  on  the  other  hand 

*/ 

static  struct  Message  * 

getMessage  (struct  Context  *ctx,  char  const  *name,  unsigned  size) 

{ 

a struct  Message  **msg  = &ctx->msgs; 

B char  *newname; 

B /*  Just  remove  name  if  it  is  a NULL  string  */ 

B if  (name  SS  !*name) 

B B name  = NULL; 

B if  (!name  &&  !size) 

B B return  NULL; 

B while  (*msg)  { 

B B if  (name  SS  (*msg)->name  &S  Imemcmp  (name,  ( *ms g ) ->n a me , 

B n strlen  (name)))  { 

B B B /*  Update  the  message  size  if  we  know  it  */ 

B B B if  ( ! ( *msg ) ->s i ze  &S  size) 
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n 

n 

n n (*msg)->size  = size; 

Q 

□ 

a return  *msg; 

n 

n 

} 

n 

n 

if  (!name  &8  ! (*msg)->nane  && 

size  ==  (*msg)->size 

n 

n 

size  ! = 1 ) 

n 

B 

n return  *msg; 

n 

B 

msg  = & ( ( *ms g ) ->n e X t ) ; 

n 

> 

a 

*msg  = (struct  Message  *)pgpMemALLoc  (sizeof  (**msg)); 

a 

if 

( ! *msg  ) 

n 

B 

return  NULL; 

n 

memset  (*msg,  0,  sizeof  (**msg)); 

n 

i f 

(name)  { 

n 

B 

newname  = (char  * ) pg pMem A L L o c 

(strLen  (name)  + 1); 

n 

B 

if  ( ! newname ) { 

n 

B 

n pgpMemFree  (*msg); 

n 

B 

n *msg  = NULL; 

n 

B 

n return  NULL; 

n 

B 

> 

n 

B 

memcpy  (newname,  name,  strlen 

( name ) + 1 ) ; 

Q 

> 

else 

n 

B 

newname  = NULL; 

n 

C* 

msg)->name  = newname; 

n 

(*msg)->size  = size; 

a 

( *nsg )->msg_numbe r = ++(ctx->msg_ 

count ) ; 

n 

return  *msg; 

> 

/* 

* We're  done  with  this  message  so  we  can  remove  it  from  our  queue 

* of  pending  messages.  Free  any  remaining  message  parts  in  the  process. 

* We  can  also  turn  buffering  off  now. 

*/ 

static  void 

freeMessage  (struct  Context  *ctx,  struct  Message  *msg) 

{ 

n struct  Message  **msgp  = &ctx->msgs; 

n struct  MsgPart  *part,  *temp; 


B 

while 

(*msgp)  { 

B 

B 

i f 

( *msgp  ==  msg ) < 

B 

B 

B 

*msgp  = msg->next; 

B 

B 

B 

part  = msg->parts; 

B 

B 

B 

if  (msg->tail) 

B 

B 

B 

n /*  Disconnect  join  modul 

B 

B 

B 

Q *(msg->taiL)  = NULL; 

B 

B 

B 

while  (part)  { 

B 

B 

B 

n temp  = part; 

B 

B 

B 

n part  = part->next; 

B 

B 

B 

n freePart  (temp); 

B 

B 

B 

} 

B 

B 

B 

if  (msg->name) 

B 

B 

B 

n pgpMemFree  (msg->name); 

B 

B 

B 

ctx-> buffering  = 0; 
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□ 

n 

Q 

n 

n 

n 

n 

□ 

} 


a H memset  (msg,  0,  sizeof  (*msg)); 
n n pgpMemFree  (msg); 

a Q a 

n n return; 

n } 

> 

/*  no  match  found  */ 
return; 


/* 

* Buffer  a command  at  the  current  spot  in  the  data  stream.  This  is  only 

* called  when  c t x->bu f f e r i ng  is  true.  What  it  does  is  find  the  delta 

* of  this  command  in  the  data  fifo  from  the  last  command  in  order  to  replay 

* the  commands  at  the  proper  place.  It  saves  off  c o n t ex t -> w r i t t e n as 

* the  offset  and  then  resets  the  value  to  0. 

* 

* The  return  value  is  0 on  success  or  an  error  code. 

★ 

* Command  Byte  Syntax:  <o  f f s e t ><  c mdxa  r g I e n><a  r g> 

*/ 

static  i nt 

bu f f e r C omma n d (struct  Context  *ctx,  byte  cmd,  const  byte  *arg,  unsigned  arglen) 
{ 

n /*  Hake  sure  the  command  argument  fits  the  buffer  size  */ 
n if  (arglen  > sizeof  ( ct x->cmda rg ) ) 
n n return  PG P E R R_C H D_T00B I G ; 

n if  ( pg p F i f o W r i t e (ctx->fifod,  ctx->ann,  (byte  const  * ) & c t x-> w r i 1 1 e n , 
n n n sizeof  ( c t x-> w r i 1 1 e n ) ) !=  sizeof  ( c t x->u r i 1 1 e n ) ) 

n n return  PGPERR_NOMEM; 

a if  ( pg p F i f o W r i t e (ctx->fifod,  ctx->ann,  &cmd,  sizeof  (cmd)) 
n !=  sizeof  (cmd)) 

n n return  PG P E RR_NOH EH ; 

n if  ( pgp F i f oW r i t e (ctx->fifod,  ctx->ann,  (byte  const  *)&arglen, 
n n n sizeof  (arglen))  !=  sizeof  (arglen)) 

n n return  PGPERR_NOHEH; 


n if  ( pg p F i f oW r i t e (ctx->fifod,  ctx->ann,  arg,  arglen)  !=  arglen) 
n n return  PG P E R R_NOH E H ; 


n ctx->written  = 0; 
n return  0; 

} 

/*  Buffer  up  a write  command  for  a particular  message  */ 
static  i nt 

buf f erWri teCommand  (struct  Context  *ctx,  struct  Hessage  *msg) 
{ 

n byte  argCsizeof  (msg)D; 

n memcpy  (arg,  (byte  const  *)&msg,  sizeof  (arg)); 

n return  bu f f e r C omma nd  (ctx,  CHD_WRITE,  arg,  sizeof  (arg)); 
} 
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/*  Process  a buffered  Write  command  for  a particular  message  */ 
static  i n t 

pa r s e W r i t e C omma n d (struct  Context  *ctx) 

{ 

n struct  Message  *msg,- 

n pgpAssert  (ctx->cmdLen  ==  sizeof  Cmsg)); 
n memcpy  ((byte  *)&msg,  ctx->cmdarg,  sizeof  (msg)); 
n return  writeMessage  (ctx,  msg); 

> 

/*  Buffer  up  an  annotation  */ 
static  int 

buf f e r Anno t a t i on  (struct  Context  *ctx,  struct  PgpPipeLine  *origin,  int  type, 
a a byte  const  *string,  size_t  size) 

{ 

n byte  *arg; 

n byte  *argp; 

n int  retval; 

n arg  = argp  = (byte  * ) pg pMe mA L L o c (sizeof  (origin)  + sizeof  (type)  + 
n n n n n size  + sizeof  (size)); 

n if  ( ! a rg  ) 

n n return  PGPERR_NOHEH; 

n memcpy  (argp,  (byte  const  *)Sorigin,  sizeof  (origin)); 
n argp  +=  sizeof  (origin); 

n memcpy  (argp,  (byte  const  *)&type,  sizeof  (type)); 
n argp  +=  sizeof  (type); 

n memcpy  (argp,  (byte  const  *)&size,  sizeof  (size)); 
n argp  +=  sizeof  (size); 

n memcpy  (argp,  string,  size); 
n argp  +=  size; 

n retval  = bufferCommand  (ctx,  CHD_ANNOTATE,  arg,  argp-arg); 
n pgpMemFree  (arg); 
n return  retval; 

> 

static  int 

pa r s e An  no t a t i on  (struct  Context  *ctx) 

{ 

n struct  PgpPipeline  *origin; 
n int  type; 

n size_t  size; 

n byte  *string,  *argp  = ctx->cmdarg; 
n int  retval; 

n pgpAssert  (ctx->cmdlen  >=  sizeof  (origin)  + sizeof  (type)  + 
n a sizeof  (size)); 

n memcpy  ((byte  *)&origin,  argp,  sizeof  (origin)); 
n argp  +=  sizeof  (origin); 

n memcpy  ((byte  *)&type,  argp,  sizeof  (type)); 
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n argp  +=  sizeof  (type); 

a memcpy  ((byte  *)8size,  argp,  sizeof  (size)); 
n argp  +=  sizeof  (size); 

n /*  make  sure  we  have  the  right  number  of  bytes  remaining  */ 
n pgpAssert  ( ( c t x-> cmd L e n - size)  ==  ( u n s i g n ed ) ( a r g p - c t x-> cmd a r g ) ) ; 

n string  = (byte  *)pgpALLoc(size); 
n if  (string  ==  NULL) 
n n return  PG P E R R_N OM E M ; 

n pg p C o py H emo r y (argp,  string,  size); 

a retvaL  = sendAnnotate  (ctx,  origin,  type,  string,  size); 

n pgpFree(string); 
n return  retvaL; 

> 

/* 

* Given  a buffered  command,  process  it  appropriately.  The  cmd,  args, 

* and  argLen  are  currently  held  in  the  ctx.  Set  arglen  to  0 and 

* return  0 on  success,  otherwise  return  an  error. 

*/ 

static  int 

processCommand  (struct  Context  *ctx) 

{ 

a int  error  = 0; 

n switch  ( c t x-> c omma n d ) ( 

n case  CMD_WRITE : 

n n error  = pa r s e W r i t e C omma n d (ctx); 
a n break; 

n case  C M D_ AN NOT AT E : 

n n error  = pa r s e An  no t a t i on  (ctx); 

H B break; 

B default: 

B B /*  unknown  command  type.  This  should  NEVER  happen  */ 

B B pgpAssert  (0); 

B > 

B if  (lerror) 

B B ctx->cmdlen  = 0; 

B return  error; 

} 

/* 

* Write  a buffer  of  data  which  is  a message  part.  This  will  either 

* write  or  buffer  depending  on  what  the  current  state  of  the  world 

* is. 

* 

* This  will  either  perform  a write()  or  a pg p J o i nBu f f e r ( ) depending 

* on  what  it  is  and  what  the  state  is.  We  perform  a write  if  this  is 

* the  writing  message,  otherwise  we  just  buffer  it. 

*/ 

static  size_t 

wri tePa rt Data  (struct  MsgPart  *part,  byte  const  *buf,  size_t  size,  int  *error) 
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{ 


n 

struct  Message  *msg  = 

part->msg; 

n 

/* 

Ignore  parts  that 

we've  already  finished 

*/ 

n 

i f 

(part->done) 

n 

□ 

return  size; 

n 

i f 

(part->sig) 

n 

n 

return  part->sig- 

>write  (part->sig,  buf. 

size. 

error); 

D 

i f 

(msg-> writing) 

n 

n 

return  part->mod- 

>write  (part->mod,  buf. 

size. 

error); 

n 

> 

return  pg p J o i nBu f f e r 

(part->mod,  buf,  size); 

/* 

* 

This 

will  write  'extra 

' data  out.  In  general 

this 

is  just 

•k 

non- 

Ascii  armor  data. 

However  if  we  are  within  a " 

buffering 

* 

everything"  mode,  then 

this  will  get  buffered 

into 

the  ctx->data 

★ 

f i f 0 

and  ctx->written 

will  be  increased. 

*/ 

static  si ze_t 

w r i t e Ex t ra Da t a (struct  Context  *ctx.  byte  const  *buf,  size  t size,  int  *error) 
{ 
n 

n 
□ 

□ 

□ 

□ 

□ 
n 
□ 

□ 

□ 

> 

/* 

* This  will  start  with  the  first  part  that  we  have.  For  each  part, 

* it  will  see  if  it  is  done.  If  not,  return  0.  If  it  is  done,  then 

* see  if  there  is  another  part  sitting  after  it.  If  so,  close  this 

* part,  return  an  error  if  one  exists,  or  move  on  to  the  next  part  if 

* there  was  no  error  closing  the  part.  If  there  is  not  another  part 

* after  this  one,  then  only  close  this  one  if  this  is  the  last  part 

* (msg->size  SS  part->num  ==  msg->size).  Otherwise  return  0. 

* 

* If  we  flushed  the  whole  message,  free  it. 

*/ 

static  int 

flushMessage  (struct  Context  *ctx,  struct  Message  *msg) 

{ 

n struct  HsgPart  *temp,  *part  = msg->parts; 
n int  error  = 0; 

CCCHK:80079223dd1eee00fba4b804edd1c66110ecbeebcccc99386b04199c4dbdd3a2b:: 
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D 

do 

i 

n 

n 

i f 

( !part->done) 

□ 

n 

n 

break; 

Q 

s 

if 

(part->next)  { 

□ 

Q 

Q 

error  = closePart  (part); 

a 

n 

□ 

if  (error) 

n 

a 

□ 

B break; 

n 

□ 

□ 

temp  = part->next; 

n 

□ 

n 

freePart  (part); 

n 

a 

Q 

part  = temp; 

D 

a 

> 

else  if  (part->num  ==  msg->si 

□ 

n 

□ 

pgpAssert  (!part- 

> n e X t ) ; 

□ 

n 

□ 

error  = closePart 

( p a r t ) ; 

a 

□ 

n 

if  (error) 

a 

n 

Q 

B break; 

n 

a 

n 

error  = ctx->tail 

->annotate  (ctx->tail,  ctx 

Q 

n 

n 

B B B 

PGPANN_ARMOR_END,  NULL, 

□ 

n 

n 

B B B 

0); 

□ 

n 

n 

if  (error) 

n 

□ 

□ 

B break; 

n 

n 

n 

freeMessage  (ctx. 

msg ) ; 

n 

n 

□ 

/*  freeMessage  wi 

ll  free  the  last  part  */ 

n 

n 

n 

break; 

n 

n 

> 

else 

n 

n 

B 

break; 

} while  (part); 


n return  error; 

> 


/* 

* Set  the  state  so  that  we  are  writing  out  this  message.  It  means  that 

* we  are  probably  going  to  be  buffering  everything  else  until  this  message 

* is  done.  If  we  are  already  "buffering"  everything,  then  buffer  up  this 

* command  for  later  execution. 

*/ 

static  int 

writeHessage  (struct  Context  *ctx,  struct  Message  *msg) 

{ 

n int  error; 


n msg->f oundpa rt 1 = 1; 
n if  ( c t x->bu f f e r i ng ) 

n n return  bu f f e r W r i t e C omma nd  (ctx,  msg); 


n error  = c t x-> t a i I ->a nno t a t e (ctx->tail,  ctx->myself, 
n B n n PG P ANN_ A RMO R_B E G I N , NULL,  0); 

B if  (error) 

B B return  error; 

B c t x->b u f f e r i ng  = 1; 

B msg->writing  = 1; 
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n /*  Start  flushing  the  message  now  */ 

n return  flushMessage  (ctx,  msg); 

} 


/* 

* This  is  the  main  Logic  in  flushing  out  the  buffered  data.  This 

* function  will  try  to  flush  the  data  fifo  and  command  fifo  in  order 

* to  create  the  appropriate  output  stream. 

* 

* There  are  two  streams  which  need  to  be  merged.  Since  the  command 

* stream  gives  deltas  into  the  datastream,  we  need  to  use  the  command 

* stream  as  the  control.  No  problem. 

* 

* First,  we  flush  out  any  data  in  the  data  stream  until  the  next 

* command,  until  ctx->Left  ==  0.  Next,  if  ctx->cmdLen  !=  0 we 

* process  the  command  in  the  ctx  command  buffer.  If  that  returns 

* without  error  we  read  in  the  next  c omma nd / o f f s e t into  ctx  (->Left 

* and  ->cmdLen)  and  then  repeat.  It  at  any  time  an  error  occurs, 

* stop  and  return  the  error  code. 

*/ 


static  int 

flushBuffers  (struct  Context  *ctx) 
{ 

n unsigned  datalen,  cmdlen,  Len; 


n 

byte  const  *ptr; 

□ 

int 

error  = 0; 

n 

si ze_t 

written; 

D 

pgpAssert  C!  c t x->bu f f e r i ng ) ; 

n 

datalen  = pgpFifoSize  (ctx->fifod 

, ctx 

->da  t a ) ; 

n 

cmdlen 

= pgpFifoSize  (ctx->fifod. 

ctx- 

> a n n ) ; 

n 

/* 

If 

nothing  is  buffered,  just  return 

ok  */ 

n 

i f 

(Idatalen  &&  icmdlen) 

n 

n 

return  0; 

n 

/* 

Now 

try  to  flush  the  buffers.. 

. */ 

Q 

do 

{ 

□ 

n 

/* 

n 

n 

* 

If  buffering  gets  turned  on  processing  a 

comma  n d 

n 

n 

★ 

just  exit  this  function  so 

more 

data  can 

be  read 

□ 

n 

•k 

/ 

Q 

D 

i f 

(ctx->buffering) 

Q 

Q 

□ 

return  0; 

n 

n 

/* 

First  flush  any  data  until 

the 

next  command  */ 

n 

n 

while  (ctx->Left)  -C 

D 

n 

D 

ptr  = pgpFifoPeek  (ctx->fifod. 

ctx->data,  Slen) 

n 

n 

D 

pgpAssert  (Len); 

a 

n 

n 

pgpAssert  (ptr); 

a 

n 

n 

if  (Len  > ctx->Lef t ) 

n 

Q 

n 

n L en  = c t x->  Left; 

n 

O 

n 

written  = w r i t e E x t r a D a t a 

(ctx. 

ptr,  Len 

, &e  r ro  r 

n 

Q 

s 

pgpFifoSeek  (ctx->fifod. 

c t x->da  t a , w r i 

1 1 e n ) ; 

n 

D 

Q 

ctx->Left  -=  written; 
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n 

□ 

B 

dataLen  -=  written; 

n 

n 

B 

i f 

(error) 

n 

B 

B 

B 

return  error; 

n 

B 

> 

Q 

B 

/* 

Process  the  buffered  command. 

if  any  * / 

□ 

B 

i f 

( C t X 

->cmd  L en ) { 

Q 

B 

B 

error  = p r o c e s s C omma nd  (ctx); 

n 

B 

B 

i f 

(error) 

□ 

B 

B 

a 

return  error; 

n 

B 

> 

n 

B 

/* 

u 

B 

* 

Now, 

read  in  the  data  for  the 

next  command 

a 

B 

* 

syntax  is:  <of  f setxcmdxa  rg  L enxa  rg> 

n 

B 

*/ 

□ 

B 

i f 

( cmd  L en ) { 

n 

B 

B 

i f 

(pgpFifoRead  (ctx->fifod. 

ctx->ann. 

□ 

B 

B 

B 

n (byte  *)8ctx->Lef t. 

Q 

B 

B 

B 

n sizeof  (ctx->Left)) 

1 = 

n 

B 

B 

sizeof  (ctx->Left)) 

□ 

B 

B 

B 

return  PG P E R R_ F I F 0_ R E A D ; 

The 


cmdLen  -=  sizeof  (ctx->Left); 


□ □ □ 

o n n 

Q n a 

□ □ □ 

□ no 


if  (pgpFifoRead  (ctx->fifod,  ctx->ann,  & c t x-> c omma n d , 
n n sizeof  ( c t x-> comma n d ) ) ! = 

sizeof  ( c t x-> c omma nd ) ) 
a return  PG P E R R_ F I F 0_R E A D ; 
cmdLen  -=  sizeof  (ctx->command); 


n □ Q 

□ n n 

can 
Q n n 

nan 

□ □ □ 


if  (pgpFifoRead  (ctx->fifod,  ctx->ann, 
n n (byte  * ) & c t x->c md L e n , 
n n sizeof  ( c t x-> cmd L e n ) ) ! = 

sizeof  ( c t x-> cmd L e n ) ) 
n return  PG PE R R_ F I F 0_R E A D ; 
cmdLen  -=  sizeof  ( c t x->cmd L en  ) ; 


□ n 
n D 
D n 

□ a 

B B 
B B 
B B 
B B 
B B 
B B 


n if  (pgpFifoRead  (ctx->fifod,  ctx->ann,  ctx->cmdarg, 
a a a ctx->cmdLen)  !=  ctx->cmdLen) 
n B return  PG P E R R_ F I F 0_ R E A D ; 
n cmdLen  -=  ctx->cmdLen; 

> e L s e { 

B / * 

a * If  this  can  happen  then  we  need  to  do  this 

n * and  keep  track  of  the  amount  of  data  Left  in 

n *thefifo. 

B */ 


n B B ctx->Left  = dataLen; 

n B B ctx->written  = dataLen; 

B B > 


n > whiLe  (dataLen  ||  cmdLen  ||  c t x-> cmd L e n ) ; 

n /*  If  we  get  here  then  everything  has  been  written  out.  */ 
n ctx->written  = 0; 

n return  0; 
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/* 

* TBD  for  MIME  support: 

* Add  a filter  to  remove  some  MIME  transforms.  To  wit: 

*n  First  read  headers,  looking  for  blank  line.  If  see  any  header  other 
*n  than  Con t en t -Type : t e x t / p I a i n . . . or  C on t e n t -T r a n s f e r- E n c od i ng 
*n  other  than  quoted-printable  (or  whatever  the  plain  one  is),  we  can't 
*n  handle  it,  and  we  should  just  pass  the  whole  thing  through.  Otherwise 
*n  we  delete  the  header  and  trailing  blank  line.  We  then  run  through  the 
*n  filter  which  undoes  the  c on t e n t - t r a n s f e r-e n c od i n g transformation  if 
*n  necessary,  or  else  just  passes  data  through. 

* This  filter  should  be  added  just  before  the  copymod,  below.  It  might 

* even  replace  the  copymod,  but  I don't  remember  what  it  is  for.  Something 

* to  do  with  some  error  recovery  state,  where  we  needed  to  know  we  were 

* pointing  at  the  last  thing  in  the  pipeline  before  c on t e x t -> t a i I ? 

*/ 


/* 

* This  is  a clearsigned  message.  We  need  to  setup  the  verification 

* pipeline  to  get  this  to  work.  First  we  have  a join  module.  It  is  a 

* placeholder  for  the  message.  The  clearsigned  text  goes  into  the 

* second  input  of  the  join  module.  The  output  of  the  join  module  goes 

* to  a split.  The  first  output  of  the  split  goes  to  the  annotation 

* reader.  The  second  output  of  the  split  goes  into  a textfilt  module 

* to  strip  the  spaces  and  then  into  a signature  verification  module. 

*/ 


static  int 

c r e a t e C I ea r s i g (struct  Context  *ctx,  struct  Message  *msg,  struct  HsgPart  *part) 
{ 

n struct  PgpPipeline  *join  = NULL,  *split  = NULL,  *text  = NULL; 
n struct  PgpPipeline  **tail,  **temp; 
n struct  PgpPipeline  *sighead  = NULL,  **sigtail; 

n /*  First,  build  up  a replacement  "join/split"  module  */ 
n tail  = pgpJoi nCreate  (&join,  c t x->f i f od ) ; 
n if  (!tail) 

n a return  PGPERR_NOHEH; 

n temp  = tail; 

n tail  = pgpSplitCreate  (temp); 

n if  ( ! tai  I ) { 

n a return  PG P E R R_NOM EM ; 

n > 

n split  = *temp; 

n /*  Splice  in  the  join/split  in  place  of  the  old  join/parser  */ 
n *(msg->tail)  = NULL; 
n part->mod->teardown  (part->mod); 

n part->mod  = join; 

n msg->tail  = tail; 


#if  MIMEPARSE 

n if  ( ctx->mi me_si gned)  { 

a a /*  Clean  up  MIME  body  part,  remove  quoted-printable  etc.  */ 

n n msg->tail  = pg p D eM i meMod C r ea t e (msg->tail); 

n > 
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#end  i f 
a / * 

n * Binary  parser  may  add  modules  after  itself,  and  in  some 

n * error  recovery  situations  they  are  still  there  when  we  try 

n * to  close  things.  Create  a copy  module  to  act  as  a stable 
n * predecessor  to  c o n t e x t -> t a i I . 
n * / 

n msg->tail  = pg p C opy Mod C r e a t e (msg->tail); 

n /*  And  connect  the  tail  */ 

n if  (msg->tail) 

n n *(msg->tail)  = ctx->tail; 

n /*  Create  the  text  input  */ 
n text  = pg p J o i n App e nd  (join); 
n if  (!  text)  ( 
n n return  PGPERR_NOMEM; 

n } 

n /*  add  a textfilt  module  */ 
n tail  = pgpSplitAdd  (split); 
n if  (!tail)  { 
n n t e X t -> t e a r d own  (text); 

n n return  PG P E R R_ NOM EM ; 

n > 

#if  HIMEPARSE 

n tail  = pgpTex t F i 1 1 C r ea t e (tail,  c h a r Ma p I d e n t i t y , 1, 

B n n ( ctx->mi me_s i gned  ? PG P_T EXT F I LT_C R L F : PG P_T E XT F I LT_ NO N E ) ) ; 

#e  I se 

B tail  = pg pT e X t F i 1 1 C r e a t e (tail,  c ha r Ma pi  den t i t y , 1,  PG P_T E XT F I LT_NON E ) ; 
#end  i f 

B if  (!tail)  { 

B B text->teardown  (text); 

B B return  PGPERR_NOMEM; 

B > 

B /*  Create  the  signature  parser...  */ 

B sigtail  = pg p Pa r s e B i n C r ea t e (Ssighead,  ctx->env); 

B if  (Isigtail)  { 

B B text->tea rdown  (text); 

B B return  PG P E R R_NOM EH ; 

B } 

B /*  ...and  the  signature  verifier  */ 

B if  ( ! pg p Ve r i f y R ea d e r C r e a t e (tail,  sigtail,  ctx->env,  ctx->fifod. 


Q 

Q 

n 

n 

( c t x-> h a s h l e n ? c t x->h a s h 1 i s t : 

NULL), 

Q 

H 

n 

B 

c t x-> h a s h 1 e n , ( c t x->h a s h 1 e n ? 1 

: 0), 

n 

n 

n 

B 

ctx->ui,  c t x->u i _a rg  ) ) { 

B B text->teardown  (text); 

B B s i g h e a d-> t e a r do w n (sighead); 

B B return  PGPERR_NOHEM; 

B > 

B /*  Now  put  it  all  together  in  this  message  */ 

B part->text  = text; 

B part->sig  = sighead; 

CCCHK: 9954543422701 11876ddd1482bba4b5156d433df91caa55067dc6ee2c94fe6f9d:: 


1177 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpPrsAsc.c 


n return  0; 

> 

/* 

* Build  up  the  Ascii  Parser  Table  in  order  to  dearmor  data.  For  all 

* values,  set  it  to  -1  if  it  is  not  a valid  armor  character  and  then 

* set  the  valid  characters  out  of  the  armorTable.  Inited  ==  0 implies 

* we  need  to  init;  Inited  ==  1 implies  we  are  processing  or  done. 

*/ 

static  void 
parseAscInit  (void) 

{ 

n i n t i ; 

n if  (ini ted++) 
a u return; 

n for  (i  = 0;  i < 256;  i++) 
n n dea rmo rTab I e C i D = -1; 

a for  (i  = 0;  i < ( i n t ) ( s i z eo f ( a r mo r Ta b I e ) - 1);  i++) 

n n d ea  r mo  rTa  b I e C a r mo  r Ta  b I e C i D S 0xff!]  = (char)i; 

n inited  = 1; 
a return; 

> 

/* 

* Convert  input  bytes  to  output  bytes.  Returns  the  number  of 

* input  bytes  successfully  converted.  The  number  of  output 

* bytes  available  is  one  less  than  this  number. 

*/ 

static  i nt 

d e a rmo r Mo r s e I (byte  const  inC4D,  byte  outC3D) 

{ 

n signed  char  c0,  cl; 

n c0  = dea rmorTa b I e C i n C03  S 2553; 
n if  (c0<0) 
n n return  0; 

n cl  = dea rmo rTa b I e C i n C 1 3 & 2553; 
n if(c1<0) 
n n returni; 

n outC03  = (c0  & 63u)  <<  2 I (cl  S 63u)  >>  4; 

n c0  = d ea r mo rTa b I e C i n C 2 3 & 2553; 
n if  (c0<0) 
n n return2; 

a outC13  = (cl  & 63u)  <<  4 | (c0  S 63u)  >>  2; 

n cl  = d ea r mo r Ta b I e C i n C33  & 2553; 
n if  (cl  <0) 
n n return  3; 

n outC23  = (c0  & 63u)  <<  6 | (cl  & 63u); 
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n return  4; 
} 


/* 

* Given  a Line  of  a certain  Length,  convert  to  binary  and 

* return  the  number  of  binary  bytes  that  resuLt,  or  -1  on  error. 

* 

* This  is  very  fussy  about  traiLing  junk  and  whatnot. 

* There  is  some  compLexity  due  to  accepting  "=3D"  in  pLace 

* of  a normaL  This  is  to  aLLow  M I M E-e n c a p s u L a t ed  messages 

* to  be  input  directLy,  without  having  MIME  u n e n c a p s u L a t e them 

* first. 

* 

* This  wiLL  ignore  traiLing  white  space  and  give  an  error  if  there 

* is  too  much  data  on  the  Line. 

*/ 

static  int 

dearmorLine  (struct  Context  *ctx,  unsigned  inLen) 

{ 


n byte  const  *in  = c t x->a r mo r L i n e ; 
n byte  *out  = ctx->databuf; 


n 

int 

outLen  = 0; 

□ 

i nt 

t; 

n 

w h i L 

. e 

((t  = d ea r mo r Ho r s e L 

(in,  out)) 

a 

a 

i n 

+ = 4; 

a 

a 

out  + = 3 ; 

a 

a 

i n 

L e n -=  4 ; 

a 

a 

outLen  +=  3; 

a 

a 

i f 

(inLen  < 4 ) 

a 

a 

a 

return  inLen  ? -1 

: outLen; 

a 

> 

a 

swi tch 

(t)  { 

a 

case 

2 : 

a 

a 

i f 

(inLen  ==  4)  ( 

a 

a 

a 

if  (inC2:  ==  '=' 

&&  inC3:  == 

a 

a 

a 

n return  outLen 

+ 1; 

a 

a 

> 

eLse  if  (inLen  ==  8)  { 

a 

a 

a 

if  (inC2:  ==  '=’ 

&S  in[3:  == 

a 

a 

a 

inCS]  ==  '=' 

&&  inC6:  == 

a 

a 

a 

n return  outLen 

+ 1; 

a 

a 

> 

a 

a 

break; 

a 

case 

3 : 

a 

a 

i f 

(inLen  ==  4)  { 

a 

a 

a 

if  (in[3:  ==  '=') 

a 

a 

a 

n return  outLen 

+ 2; 

a 

a 

> 

eLse  if  (inLen  ==  6)  { 

a 

a 

a 

if  (in:3]  ==  '=' 

SS  in[3:  == 

a 

a 

a 

n return  outLen 

+ 2; 

a 

a 

> 

a 

a 

break; 

&&  i nE43 
&&  in:73 


'3'  &&  inCA] 


/*  None  of  the  above 
return  -1; 


we  have  an  error  */ 


' D ' SS 
' D ' ) 


' D ' ) 


} 
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/* 

* Given  a Line  thought  to  contain  a CRC,  this  returns  the  24-bit 

* CRC,  or  -1  on  error.  Handles  possible  MIME  expansion 

* of  " = " to  " = 3 D " . 

*/ 

static  Long 

dearmorCrc  (struct  Context  *ctx) 

{ 

n byte  const  *in  = c t x->a r mo r L i n e ; 
n unsigned  inlen  = ctx->armorLen; 
n byte  bufC3D; 


n 

/* 

skip  trailing  white  space 

*/ 

n 

while  (inlen  88  isspace  (inCi 

nlen  - 13)) 

D 

n 

ini  en--; 

n 

i f 

(*in  1=  '=' ) 

n 

s 

return  -1; 

n 

1 f 

(inlen  ==  5) 

s 

n 

if  ( d ea r mo r Mo r s e L (in  + 1 

, buf)  !=  4) 

n 

a 

n return  -1; 

n 

Q 

else  if  (inlen  ==  7) 

n 

a 

n if  (inLi:  !=  '3'  | | i 

n:23  1=  'D' 

1 1 

o 

n 

n dea rmorHorse 1 (in 

+ 3,  buf)  I 

II 

n 

n 

n n return  -1; 

n 

Q 

n else 

n 

Q 

n n return  -1 ; 

n 

/* 

Q 

* 

Welcome  to  the  famous  ANSI 

C glitch. 

ANSI 

* 

* 

* 

* 

* 

* 

* 

*/ 


promotes  to  signed  values  where  possible  when  preserving 
the  value.  Thus,  bufC13<<8  is  promoted  to  signed,  then 
shifted,  then  promoted  to  Long  (on  a 16-bit  int  machine, 
this  causes  sign-extension!),  and  merged  with  the  other 
values.  Not  Good . 

I'm  beginning  to  see  why  people  preferred  the  K&R  unsigned- 
preserving  rules.  Sigh. 


return  (Long)buf[03  <<  16  | ( uns i gned ) ( buf C 1 3 <<  8 | bufC2D); 


/* 

* try  to  fill  up  c t x->a rmo r L i n e up  to  LINE_LEN-1  bytes  or  a newline, 

* whichever  comes  first. 

ic 

* This  will  set  ctx->eoL  when  an  EOL  condition  occurs.  eol  ==  1 

* means  armorline  is  ready  for  processing.  eol  ==  2 means  that 

* readLine  needs  to  be  called  with  more  data  (Looking  for  \n). 

* In  doublespace  mode,  we  use  two  more  values.  eoL==3  means  that 

* we  saw  one  Line  ending  (LF  or  CRLF)  and  now  need  more  data  to  see 

* another.  eoL==4  means  that  we  saw  CR-LF-CR  and  are  now  Looking  for 

* the  LF.  (doublespace  means  we  skip  a blank  Line  after  every  non-blank 

* Line.  A third  party  application  accidentally  munges  the  files  to  that 

* form.) 

* 

* The  return  value  is  the  number  of  bytes  used.  If  all  the  bytes  are 

* used  and  EOL  is  not  set,  then  more  data  is  required  and  readLine 

* should  be  called  with  more  data. 
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*/ 

static  size_t 

readLine  (struct  Context  *ctx,  byte  const  *buf,  size_t  size) 
{ 

n size_t  size0  = size; 
n unsigned  t,  retLen; 


□ 

byte  eol  = ctx->eoL; 

Q 

byte  *ptr  = c t x->a r mo r L i n e + ctx 

->armorLen; 

n 

i f 

( ! s i z e ) 

B 

B 

return  0; 

B 

/* 

B 

* 

This  test  is  needed  in  case  the  '\r'  and  ' 

\n  ' 

come  i n 

B 

★ 

different  write  calls. 

B 

*/ 

B 

if 

(eol  >=  2) 

B 

fl 

goto  lineend; 

B 

/* 

try  to  fill  the  input  buffer 

with  a Line  * 

/ 

B 

t = 

( un s i gned ) mi n (LINE_LEN-1  - 

ctx->armorLen 

, si 

ze); 

B 

for 

(eol  = 0,  retLen  = 0;  retLen 

< t &&  ! eo  L ; 

ret  L en  + + ) ( 

B 

B 

*ptr++  = *buf; 

B 

B 

i f (*buf  ==  ' \r ' II  *buf  == 

’ \n  ' ) 

B 

B 

n eol  = (*buf  ==  '\r'  ? 2 

: 1); 

B 

B 

buf ++; 

B 

> 

B 

size  -=  retLen; 

B 

Ctx 

->armorLen  +=  retLen; 

B 

/* 

Set  EOB  if  we  hit  the  end  of 

the  armorline 

buffer  */ 

B 

i f 

( c t x->a r mo r 1 e n >=  LINE_LEN-1) 

B 

B 

ctx->eob  = 1 ; 

B 

/* 

B 

★ 

At  this  point  we  are  either  at  EOL  or  not. 

If 

not,  then 

B 

* 

either  ran  out  of  input  data 

or  ran  out  of 

buffer  space . 

B 

* 

we  are  at  EOL  and  eoL==2  and 

we  have  more 

data 

, check  if 

B 

★ 

\n  or  something  else.  If  so. 

copy  that  in 

and 

set  eoL=1 

B 

* 

Then  do  the  doublespace  logic 

If  we  get 

here 

with  eol 

If 


n * can  only  happen  from  entry,  and  we  use  kLudgy  goto's  to  fall  into 

n * the  right  place  in  the  eol  Logic  below, 

n * / 

I i neend : 
n if  (eol)  { 
n n if  (eol  ==  3) 

a a a gotoeoL3; 

a a if  (eol  ==  4) 

n n n gotoeoL4; 

n n ctx->crLf  = (eol  ==  2 


PGP_TEXTFILT_CR  : PG P_T E XT F I LT_ L F ) ; 


n n if  (eol  ==  2 S&  size) 

□ n Q if 

n n □ a 

nano 
n n Q n 

□ D D a 

□ □ n } 


(*buf  ==  '\n')  { 

*ptr++  = *buf++; 

ctx->armorLen++; 

ctx->crLf  = PGP_TEXTFILT_CRLF; 

si ze--; 
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□ 

n 

□ 

□ 

a 

> 

n 

u 

/* 

n 

n 

★ 

n 

n 

★ 

n 

□ 

* 

n 

n 

■k 

n 

s 

* 

□ 

Q 

* 

□ 

Q 

k 

n 

n 

k 

n 

a 

k 

n 

n 

k 

n 

Q 

k 

n 

Q 

k 

n 

o 

k 

n 

D 

k 

Q 

n 

k 

n 

n 

*/ 

n 

n 

i f 

n 

n 

n 

n 

n 

n 

eo  1 3 : 

n 

n 

Q 

n 

a 

n 

n 

□ 

n 

n 

n 

n 

D 

u 

a 

n 

n 

n 

n 

n 

n 

n 

□ 

D 

n 

n 

n 

n 

Q 

n 

D 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

a 

Q 

D 

n 

n 

eo  L 4 : 

Q 

o 

n 

n 

n 

n 

n 

n 

n 

□ 

Q 

n 

n 

n 

n 

n 

n 

n 

a 

n 

n 

a 

n 

n 

n 

n 

D 

n 

n 

n 

n 

n 

n 

a 

n 

n 

u 

n 

Q 

n 

n 

Q 

n 

□ 

D 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

e o I = 1 ; 


Don't  do  the  doubLespace  transformation  to  blank  Lines! 

This  is  ad  hoc  but  that  is  how  the  failing  case  presents 
itself.  Unfortunately  it  is  hard  to  know  here  that  we  are 
Looking  at  a blank  Line.  The  calling  code  parses  lines  as  soon 
as  we  return  with  eoL  > 0.  Then  Later  it  calls  us  to  "clean  up" 
(get  to  eol==1), 

but  it  has  reset  the  armorlen  index  to  0.  It  becomes  hard  to 
distinguish  between  a CR-LF  at  the  end  of  the  Line,  where  we  got 
split  between  them,  and  a CR-LF  at  the  beginning.  In  each  case 
our  eol  > 0 call  looks  much  the  same. 

To  fix  this,  we  have  fixed  the  caller  in  the  relevant  portions 
(parsing  of  ascii  armored  me s sa g e s / key s ) to  call  us  with  an 
armorlen  index  of  1 while  cleaning  up.  This  lets  us  peek  at 
the  original  first  char  of  the  Line  and  determine  whether  we 
are  Looking  at  a blank  Line. 

( c t x->doub L e spa ce  &&  eoL==1  SK  c t x->a rmo r L i ne C 0 ] ! = ' \n ' S& 
c t x->a r mo r L i n e C 0 D ! = ' \ r ' ) { 

/*  Ignore  any  following  blank  line  */ 


if  (Isize)  { 

n /*  LF  or  CR-LF  and  no  more  data.  Remember  state  3 */ 
n e o L = 3 ; 

> else  if  (*buf  ==  '\n')  { 

n /*  Got  a blank  line,  just  ignore  it  */ 
n s i z e — ; 

n e o L = 1 ; 

> else  if  (*buf  ==  '\r')  { 
n size--; 

n buf++; 

a if  (ctx->crLf  ==  PG P_T E XT F I LT_ C R ) { 
n n /*  Got  a blank  Line,  just  ignore  it  */ 
n n eoL=1; 

n } e L se  { 

n n /*  Want  to  see  CR-LF-CR-LF,  got  the  first  three...  */ 


n 

n 

if  (Isize)  { 

D 

n 

n /*  CR-LF-CR  and  no  more  data.  Remember  state 

D 

n 

n eo  L = 4 ; 

n 

n 

} else  if  (*buf  ==  '\n')  { 

n 

n 

a /*  OK,  got  all  four,  just  ignore  the 

Line  * / 

n 

Q 

n e 0 L = 1 ; 

Q 

Q 

n size — ; 

n 

n 

> else  { 

n 

Q 

n /*  CR-LF-CR-XX,  turn  off  doubLespace 

*/ 

n 

n 

n ctx-> doubLespace  = FALSE; 

Q 

n 

n size++;n/*  Give  back  CR  we  took  */ 

n 

n 

a e 0 L = 1 ; 

n 

Q 

} 

n 

> 

> 

else 

{ 

n 

/* 

LF  or  CR-LF  then  XX  */ 

n c t x->dou b L e s pa c e = FALSE; 

n e o I = 1 ; 

> 


*/ 
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n n } 

n > 

n /*  Save  off  the  EOL  and  return  the  number  of  bytes  used  */ 
n ctx->eoL  = eoL; 
n return  size0-size; 

} 

/*  Work  Like  memcmp  but  ignore  material  in  angle  brackets  for  1st  arg  */ 

/*  On  a match  (return  of  0)  put  number  of  removed  chars  in  *removeLen  */ 
static  int 

b r a c ke t c mp ( c o n s t char  *orig,  size_t  origlen,  const  char  *test,  size_t  testlen, 
n n size_t  *removeLen) 

{ 

n char  buf CLINE_LEN:; 
a int  inbracket  = 0; 

n int  rtn; 

a unsigned  i,  j; 

n /*  Copy  orig  to  buf,  removing  bracketed  material  */ 
n pgpAssert  (origlen  <=  s i z e o f ( bu f ) ) ; 
n for  (i=0,j=0;  i<origLen  &S  j < testlen;  ++i)  { 

n n if  (inbracket  S&  o r i g C i II  ==  ' > ' ) 

n n n inbracket  =0; 

a a else  if  (Mnbracket  &&  o r i g C i ]=='<' ) 
a a a inbracket  =1; 

a a else  if  (linbracket) 

a a a bufCj++3  = origCiD; 

a } 

a rtn  = memcmp(buf,  test,  testlen); 
a if  (!rtn  SS  removelen) 
a a *removeLen  = i - j; 

a return  rtn; 

} 

/* 

* Contained  in  buf  (of  Length  size)  should  be  a Header-Line.  Parse 

* it  appropriately,  and  store  it  as  necessary. 

"k 

* A headerline  must  fit  in  the  armorline  buffer  (I.e.,  it  must  be 

* Less  that  LINE_LEN-1  bytes  Long),  it  must  start  with  an  Alpha 

* character  and  then  have  up  to  64  AlphaNumeric  characters  or  dashes, 

* followed  by  a colon  and  then  a space.  A header  that  does  not 

* conform  to  this  is  an  error. 

* 

* Returns  0 on  success,  or  a HEADER_  error  code. 

*/ 

#define  H EADER_T00L0NGn  -1 
^define  H E A D E R_ I N V A LI Dn  -2 
static  int 

parseHeader  (struct  Context  *ctx,  byte  const  *buf,  size_t  size) 

{ 

a int  i ; 

n char  const  *ptr  = (char  const  *)buf; 
n static  char  const  messageidCD  = "MessagelD:"; 
n char  c ; 

n (void)size;nn  /*  So,  why  do  I have  this  arg?  */ 
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/*  Make  sure  this  is  the  WHOLE  Line  --  if  not,  it  is  an  error  */ 


o 

i f 

(!ctx->eoL) 

n 

B 

return  HEADER_T OOLONG; 

n 

/* 

The 

first  character  must  be  an  Alpha  character 

*/ 

n 

i f 

(!isalpha  (*ptr++)) 

□ 

B 

return  HEADER_INVALID; 

n 

i = 

1; 

n 

for 

) { 

n 

B 

c = 

*pt  r + + ; 

n 

B 

/* 

header  ends  in  a colon  */ 

n 

B 

i f 

O 

II 

II 

n 

B 

□ 

break; 

n 

B 

/* 

Arbitrary  Label  length  restriction  */ 

n 

B 

i f 

+ 

+ 

V 

n 

B 

Q 

return  HEADER_T00L0NG;n  /*  Error  */ 

n 

B 

/* 

Following  chars  much  be  alphanumeric  or 

' */ 

n 

B 

i f 

(lisalnumCc)  &&  c != 

n 

B 

□ 

return  HEA0ER_INVALID;n  /*  Error  */ 

B 

> 

B 

/* 

Must 

be  a space  after  the  */ 

B 

i f 

(*ptr++  !=  ' ') 

B 

B 

return  H E A D E R_ I N V ALI D ; 

B 

/* 

B 

★ 

Now 

process  the  header 

B 

* 

B 

* 

pt  r 

points  to  the  value;  buf  points  to  the  key 

(of  Length 

B 

* 

( pt  r 

- buf  - 2),  plus  a colon) 

B 

*/ 

B 

i = 

pt  r 

- (char  const  *)buf  - 1; 

B 

/* 

Process  message  ID  header  */ 

B 

i f 

(i  = 

= sizeof  (messageid)  - 1 &S  !memcmp  (buf. 

messageid. 

B 

B 

memcpy  ( c t x->me s s a g e i d , ptr. 

B 

B 

B 

min  ((strlen  (ptr)  + 1),  sizeof  ( c t x->me s s a g e i d ) ) ) ; 

B 

/* 

XXX: 

signal  an  unknown  header?  */ 

return  0; 


/*  Write  data  to  be  dearmored. 

* 

The  main  FSH  to  control  dearmoring.  The  actual  FSH  is  kind  of 
complicated  so  I’LL  try  to  explain  it  by  comments  in  the  code. 
Suffice  it  to  say  that  there  are  two  main  parts  of  the  machine. 

The  first  part  deals  with  armor'ed  data,  and  the  second  part  deals 
with  out-of-a rmo red  text.  There  is  a Little  glue  between  them,  and 
there  you  have  it... 


* 

* 

★ 

★ 

* 

* 

* 

it 

it 

*n 

* 


Here  are  the  states,  categorized  into  general  phases  of  activity: 
0n  n n Start  state,  outside  PGP  data 
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5nn  Waiting  for  start  of  PGP  data 
Process BEGIN  PGP  Line 

Process  headers  after  BEGIN  PGP 

*n  14  - 1 6nn  Setup  to  begin  processing  armored  data 
* 

*n  17  - 20nn  Process  PGP  armored  data 
* 

*n  21  - 23nn  Process  CRC  at  end  of  armored  data 

Process END  PGP  Line,  finish  up,  back  to  0 

*n  30  - 33nn  CLearsigned  message,  process  Hash:  Lines  if  any 
★ 

*n  34  - 36nn  Setup  to  begin  processing  cLearsigned  message 
★ 

*n  39  - 43nn  Process  cLearsigned  message  body,  then  to  9 for  sig 
* 

*n  50  - 53nn  Process  binary  message,  to  26  to  finish  up  when  done 
★ 

*n  60  - 63nn  Scan  MIME  headers,  get  boundary  string 
* 

*n  65  - 68na  Look  for  initiaL  MIME  boundary  string,  to  34  when  found 
* 

*n  70  - 72nn  Check  apparent  initiaL  MIME  separator,  to  34  if  Looks  OK 
★ 

*n  75  - 77aa  Look  for  start  of  PGP  sig  in  MIME  cLearsign  sig  subpart,  to  9 
* 

*n  80  - 83nn  Look  for  finaL  MIME  cLearsign  boundary  after  PGP  sig 


Write  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *ctx; 

n struct  Message  *msg; 

a struct  MsgPart  *part; 

n byte  *ptr,  *num; 

a static  char  const  prefixICD  = " BEGIN  PGP 

n static  char  const  prefix2C3  = ",  PART 
n static  char  const  prefix3CD  = " END  PGP 

n static  char  const  suffixC3  = " ";n  /*  With  trailing  nuL  */ 

n static  char  const  signedmsgCIl  = "SIGNED  MESSAGE 

n static  char  const  sigprefixC5  = " BEGIN  PGP  SIGNATURE "; 

#if  MIMEPARSE 

n by t e *pt  r2  ; 

a static  char  p r e f i x_m i me s i g 2 C 3 = " BEGIN  PGP  MESSAGE 

a static  char  p r e f i x_m i me  1 C D = " c on t e n t - 1 y pe : mu L t i pa rt /s i gned; " ; 

n static  char  p r e f i x_m i me  2 C 3 = " p r o t o c o L = \ " a p p L i c a t i on / pg p- s i g n a t u r e \ ; 

n static  char  prefix_mime3C3  = "boundary="; 


*n 

1 

- 

5Ba 

★ 

*a 

9 

1 0aa 

* 

*n 

1 1 

1 3nn 

* 

*n 

1 4 

1 6na 

* 

1 7 

2 0 a a 

* 

*n 

21 

23na 

* 

*n 

24 

_ 

27na 

★ 

*n 

30 

33nn 

★ 

*n 

34 

_ 

36na 

★ 

*n 

39 

_ 

43na 

★ 

* n 

50 

_ 

53na 

★ 

*n 

60 

_ 

63nn 

★ 

*n 

65 

68oq 

★ 

*n 

70 

72na 

★ 

*n 

75 

77aa 

★ 

*n 

80 

_ 

83bb 

* 

*/ 

; t a t i c 

s i 

ze_t 

#if  0 

n static  char  prefix_mime4C3  = "micaLg="; 

n static  char  prefix_mime5C3  = "pgp-"; 

#endif  /*  0 */ 

#endif  /*  MIMEPARSE  */ 

a int  i,  thispart,  maxparts,  Lineused; 
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n size_t  retvaL,  written  = 0; 

n unsigned  inlen; 

n size_t  bracketLen  = 0; 

n Long  crc; 

n char  temp_c; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  D E ARMO RM AG  I C ) ; 
n pgpAssert  (error); 

n ctx  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 


n switch  (ctx->state)  { 
n case  0 : 
ca  se_0 : 


H 

B 

/* 

O 

B 

★ 

This  is  the  "start"  position.  Check  if  we  are 

□ 

B 

* 

buffering  and  flush  buffers  if  we  are  not.  Then  go 

n 

B 

* 

to  the  next  state . 

n 

B 

*/ 

n 

B 

i f 

( ! ctx->buf f eri ng)  { 

n 

B 

n 

♦error  = flushBuffers  (ctx); 

Q 

B 

n 

if  (*error) 

a 

B 

Q 

n break; 

a 

B 

} 

a 

B 

ctx 

->s  t a t e + + ; 

a 

B 

/* 

FALLTHROUGH  */ 

a 

case 

1 : 

case 

'_1  : 

n 

n 

/* 

call  readLine  until  we  have  EOB  or  EOL  */ 

n 

n 

retval  = readLine  (ctx,  buf,  size); 

n 

n 

size  -=  retval; 

□ 

D 

buf 

+=  retval; 

n 

n 

written  +=  retval; 

n 

B 

if 

(ctx->eoL  II  ctx->eob) 

D 

B 

B 

ctx->state++; 

n 

B 

else 

Q 

B 

n 

break; 

n 

B 

/* 

FALLTHROUGH  */ 

D 

case 

2: 

n 

D 

/* 

□ 

B 

* 

check  the  Line  for  BEGIN.  If  it  is  not  a begin 

a 

B 

* 

then  we  should  output  this  line.  If  it  is  a begin. 

B 

B 

* 

then  we  need  to  parse  it  as  an  armor  beginning. 

B 

B 

* 

Use  the  special  "bracketcmp"  routine  which  ignores 

B 

B 

* 

angle  brackets  "<>"  as  some  mailers  may  stick  those 

B 

B 

★ 

our  message  to  turn  off  some  rich  text  features. 

□ 

B 

*/ 

□ 

B 

i f 

( c t x->a r mo r L e n > sizeof  (prefixl)  - 1 && 

B 

B 

B 

0==b r a c ke t c mp  ( c t x->a r mo r 1 i n e , c t x->a r mo r L en , 

material 
in  front 


i n 
o f 
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n 

B 

B 

n 

B 

B 

□ 

B 

fl 

s 

B 

> 

a 

B 

/* 

a 

fl 

* 

□ 

B 

* 

n 

B 

★ 

n 

B 

* 

n 

B 

* 

a 

B 

★ 

H 

B 

*/ 

n 

B 

n 

B 

i f 

a 

B 

B 

n 

B 

fl 

a 

B 

B 

n 

B 

B 

a 

B 

fl 

a 

B 

B 

n 

B 

fl 

n 

B 

B 

□ 

B 

fl 

n 

B 

> 

#if 

MIMEPAR 

n 

B 

/* 

n 

B 

* 

a 

B 

★ 

n 

B 

*/ 

n 

B 

i f 

n 

B 

B 

a 

B 

B 

a 

B 

B 

n 

B 

B 

n 

B 

fl 

B 

B 

> 

B 

B 

/* 

B 

B 

ir 

B 

B 

* 

B 

B 

* 1 

B 

B 

•k 

B 

B 

*/ 

B 

B 

i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 

Send  i f 

B 

B 

ctx- 

B 

fl 

/* 

B 

case 

3: 

case 

_3: 

n n n prefixl,  sizeof  (prefixl) 

ctx->state  = 9; 
goto  case_9; 


- 1,  SbracketLen))  t 


check  the  Line  to  see  if  it  is  the  beginning  of  a 
PGP  binary  message.  This  check  is  only  done  the 
first  time  through  this  Loop,  using  c t x->a n n o t a t i o n 
as  the  Loop  detector.  If  this  is  a PGP  message, 
then  treat  it  as  such  and  buffer  the  data  for 
processing  through  a parser. 


(!  c t x->a n no t a t i on  ) { 

if  ( pg p F i L eTy pe PG P ( c t x->a rmo r L i n e , c t x->a rmo r L e n ) ) 
{ 

n /* 

n * ooh,  a binary  PGP  message  fed  into  the 
* ascii  armor  parser! 

*/ 

ctx->state  = 50; 
goto  case_50;n  n n n 


Look  for  either  the  MIME  content-type  message,  or  what  Looks 
Like  a MIME  message  boundary  (in  case  we  don't  have  headers). 

C c t x->a r mo r L e n > sizeof  ( p r e f i x_m i me  1 ) &8 
Istrncasecmp  ( c t x->a r mo r L i n e , p r e f i x_mi me  1 , 
nan  sizeof  ( p r e f i x_m i me  1 ) - 1))  ( 

/*  MIME  header  */ 
ctx-> state  = 60; 
goto  case_60; 


If  n o_mi me_h ea d e r s , we  have  onLy  a body,  so  assume  that  a Line 
starting  with  — is  a pgp/mime  signed  part.  This  is  not  a very 
good  assumption  in  generaL,  so  we  wiLL  assume  that  we  had  some 
reason  to  think  so. 

( c t x->no_mi me_hea de r s &&  ctx->eoL  88 
c t x->a rmo r L en  > 2 88  Imemcmp  ( c t x->a r mo r L i n e , 2)  88 

ctx->eo  L ) { 

/*  PotentiaL  MIME  initial  body  indicator  */ 
ctx->state  = 70; 
goto  case_70; 
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n 

n 

/* 

send  annotation  if  we 

need  to 

*/ 

n 

□ 

i f 

(!  ctx->annotati on)  f 

n 

n 

n 

♦error  = sendAnnotate 

( ctx. 

myself. 

n 

n 

n 

n n PGPANN 

_N0NPGP 

_BEGIN,  NULL, 

n 

□ 

Q 

if  (*error) 

Q 

Q 

Q 

n break; 

□ 

n 

n 

ctx->annotation  = PGPANN_NONPGP_END; 

n 

□ 

n 

c t x->d ep t h _a t _a nn  = c t x->s cope_d ep t h ; 

tt 

□ 

> 

n n c t x->s t a t e++ ; 
n n /*  FALLTHROUGH  */ 
n case  4 : 
case  4 : 


n 

n 

/* 

output  armorline  buffer  */ 

n 

n 

while  ( c t x->a rmo r 1 en  ) { 

n 

a 

s 

retval  = w r i t e Ex t r a D a t a (ctx,  c t x->a r mo r p t r , 

a 

□ 

n 

n n n c t x->a r mo r 1 e n , error); 

n 

□ 

n 

c t x->a rmo r p t r +=  retval; 

n 

n 

n 

c t x->a r mo r 1 en  -=  retval; 

n 

n 

n 

if  (*error) 

Q 

□ 

n 

n return  written; 

n 

n 

> 

Q 

n 

C t X 

->armorptr  = c t x->a r mo r 1 i ne ; 

n 

n 

ctx 

->s  t a t e + + ; 

n 

Q 

/* 

FALLTHROUGH  */ 

Q 

case 

5: 

n 

n 

/* 

n 

n 

★ 

if  EOL  ==  1,  clear  state  and  goto  state  1,  otherwise 

□ 

n 

★ 

read  data  and  return  to  state  4 to  output  the  line. 

n 

D 

*/ 

□ 

n 

i f 

(ctx->eol  ==  1)  { 

n 

n 

n 

ctx->eol  = 0; 

n 

n 

D 

c t x->eob  = 0; 

n 

n 

n 

ctx->state  = 1; 

n 

n 

n 

goto  case_1; 

n 

n 

> 

n 

D 

i f 

( ! s i z e ) 

n 

n 

n 

break; 

n n retvaL  = readLine  (ctx,  buf,  size); 


n 

a 

size  -=  retval; 

n 

n 

buf  +=  retval; 

n 

n 

written  +=  retval; 

□ 

n 

ctx->state  = 4; 

n 

n 

goto  case_4; 

n 

case 

9: 

case 

_9: 

Q 

n 

/* 

Q 

Q 

* parse  begin  line.  If  this  is  not  a valid 

begin 

n 

n 

* line,  assume  that  it  is  not  and  output  it 

a s 

n 

n 

* non-PGP  text  (in  state  3). 

n 

n 

* bracketlen  holds  extra  characters  to  skip 

from  our  parsing 

n 

Q 

*/ 

n 

n 

ptr  = c t x->a r mo r 1 i ne  + sizeof  (prefixl)  - 1 + 

bracket len; 

n 

Q 

lineused  = c t x->a r mo r 1 e n - (sizeof  (prefixl) 

- 1)  - bracketlen; 
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n n bracketLen  = 0; 
n n thispart  = maxparts  = 0; 


n 

B 

d 0 

n 

B 

s 

i f 

(Lineused  ==  0)  { 

n 

B 

B 

n 

/*  not  a valid  BEGIN  line  * 

/ 

□ 

B 

B 

D 

ctx->state  = 3; 

n 

n 

B 

B 

goto  case_3; 

a 

n 

B 

y 

B 

n 

y 

while 

(isspace  ( pt rC-- L i neusedD ) ) 

/ 

B 

B 

/* 

temporarily  n u L L - t e r m i n a t e this 

string  */ 

B 

B 

t emp_  c 

= p t r C++ L i n e u s e d 3 ; 

B 

B 

pt rC L i neused]  = '\0'; 

B 

B 

i f 

(Imemcmp  (ptr,  signedmsg,  sizeof 

(signedmsg))) 

B 

Et 

B 

/* 

This  is  a cLearsigned  message  */ 

B 

n 

n 

i f 

( ctx->eo  L ) { 

B 

□ 

Q 

n 

/* 

B 

n 

□ 

n 

* This  looks  Like  a cLearsigned 

B 

B 

B 

n 

* message.  jump  into  the 

cLearsigned 

B 

B 

B 

n 

* parser  and  parse  it. 

B 

B 

B 

n 

*/ 

B 

B 

B 

□ 

ctx->state  = 30; 

B 

B 

B 

n 

goto  case_30; 

B 

B 

B 

} 

B 

B 

D 

/* 

B 

B 

D 

it 

Someone  is  playing  with  us.. 

This  is  an 

B 

B 

n 

* 

error. 

B 

B 

n 

*/ 

B 

B 

B 

goto  err_case_9; 

B 

B 

y 

B 

B 

/* 

skip 

the  "whatever"  in  " BEGIN  PGP  whateve 

B 

B 

while  ( 

isalnum  (*ptr)  ||  *ptr  ==  ' 

' ) { 

B 

B 

Q 

pt  r + +; 

B 

B 

n 

1 i neused--; 

B 

B 

} 

*/ 


n n 

□ Q 

□ D 

n D 

n n 

D n 

□ n 


/*  check  for  multipart  */ 
if  (*ptr  ==  ' , ' ) { 

n /*  " BEGIN  PGP  whatever,  PART  xC/yD " */ 

n if  (memcmp  (ptr,  prefixZ,  sizeof  Cprefix2)  - 1)) 
n n goto  err_case_9; 

n ptr  +=  sizeof  (prefixZ)  - 1; 

n Lineused  -=  sizeof  (prefixZ)  - 1; 


□ a 

n n 

o □ 


n thispart  = strtouL  ((char  *)ptr,  (char  **)&num,  10); 
n if  (num  ==  NULL  | | thispart  <0  | | thispart  > 999) 
n n goto  err_case_9; 


Ban  Lineused  -=  (num  - ptr); 
n n n ptr=num; 


B B B / * 

n n n * now  check  for  "/y",  if  it  exists.  It  is 


C[CHK:1ff0cee1bb669c119775f3da7c45f03beaa1f48771dfb22cc7bdddbb4f2094064:: 


1189 


Pretty  Good  Privacy  5.0^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpPrsAsc.c 


n 

0 

0 

* Legal  for 

it  not  to  exist,  but  it  must  have 

D 

0 

0 

* either  a 

here  or  a messagelD. 

D 

0 

0 

*/ 

n 

0 

0 

if  ( *pt  r = = 

' / ' ) { 

Q 

o 

0 

a maxparts 

= strtouL  ((char  *)ptr+1. 

□ 

0 

0 

a a a 

(char  **)&num,  10); 

Q 

o 

0 

a if  ( ! num 

1 1 maxparts  < 2 | | maxparts  > 999) 

n 

0 

0 

a a goto 

err_case_9; 

o 

0 

0 

a Lineused 

-=  (num  - ptr); 

Q 

0 

0 

a ptr  = num; 

□ 

0 

0 

} 

n 

0 

} else  { 

n 

o 

0 

thispart  = maxparts  = 1; 

n 

0 

> 

Q 

0 

if 

(memcmp  (ptr. 

suffix,  sizeof  (suffix))) 

n 

0 

o 

goto  err_case_9; 

0 

0 

C t X 

->t  h i spa  rt  = 

thispart; 

0 

0 

ctx 

->maxparts  = 

maxparts; 

0 

0 

C t X 

->state  = 10; 

0 

0 

goto  case_10; 

err_case_9 : 

n n ptrCLineusedD  = temp_c; 

n a ctx->state  = 3; 

a a goto  case_3; 


0 

case 

10 

: 

case 

_10: 

0 

0 

/* 

Send  end-annotation  (if  we  sent  a begin  annotation)  */ 

0 

o 

i f 

( c t x->a nno t a t i on ) { 

0 

0 

0 

pgpAssert  (ctx->depth_at_ann  ==  ctx->scope_depth); 

0 

0 

0 

♦error  = sendAnnotate  (ctx,  myself,  c t x->a n n o t a t i o n , 

0 

0 

o 

n n NULL,  0); 

0 

0 

0 

if  (*error) 

0 

0 

0 

n break; 

0 

0 

o 

c t x->a n no t a t i on  = 0; 

0 

0 

> 

0 

0 

ctx 

->f i rstheader  = TRUE;  /*  Help  us  recognize  doubleline 

0 

0 

ctx 

->state++; 

0 

0 

/* 

FALLTHROUGH  */ 

0 

case 

1 1 

: 

ca  s e_1 1 : 

a a /*  read  until  EOL  to  get  to  end  of  the  Last  line  */ 


mode 


*/ 


a a 
a a 
a a 
a a 
a a 
a a 
a a 
a a 


ctx->a rmo rpt r = c t x->a rmo r L i n e ; 
c t x->a rmo r L en  = 0; 
while  (ctx->eoL  !=  1)  { 

a c t x->a rmo r I en  = 1;n  /*  Preserve  1st  char  for  doublespace  logic  */ 

a retval  = readLine  (ctx,  buf,  size); 
a written  +=  retval; 
a buf  +=  retval; 
a size  -=  retval; 


a a a if(!size) 

a a a a return  written; 

a a } 

a a c t x->eo  1=0; 

a a ctx->eob  = 0; 
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n u 

c t x->a rmo r 1 en  = 0; 

n n 

ctx->state++; 

□ n 

/*  FALLTHROUGH  */ 

n case  12: 

n n /*  caLL  readLine  until  ue  have  EOB  or  EOL  */ 


a n 

retval  = readLine  (ctx,  buf,  size); 

a n 

size  -=  retval; 

Q n 

buf  +=  retval; 

n n 

written  +=  retval; 

Q □ 

if  Cctx->eol  1 1 ctx->eob) 

□ n 

n ctx->state++; 

n n 

else 

□ B 

H break; 

B B 

/*  FALLTHROUGH  */ 

n case13:n  n 
n n / * 


B B 

* If  this  line  is  blank,  go  to  state  15.  If  it  is 

B B 

* not  blank,  process  it  as  a header  and  then  goto 

B B 

* state  11. 

B B 

* If  it  is  blank  and  firstheader  is  true,  go  into  doublespace  mode 

B B 

* and  keep  parsing. 

B B 

*/ 

B B 

ptr  = c t x->a r mo r 1 i n e ; 

B B 

lineused  = ctx->armorlen; 

B B 

/*  Find  trailing  white  space...  */ 

B B 

while  (lineused  &S  isspace  ( p t r C 1 i n e u s ed  - 1])) 

B B 

n Lineused — ; 

B B 

if  ( c t x-> f i r s t h e a d e r ) ( 

B B 

n c t x-> f i r s t h e a d e r = FALSE; 

n B 

n if  (Lineused  ==  0)  ( 

B B 

n n /*  First  Line  is  blank  after  BEGIN  PGP,  doublespace  mode  */ 

B B 

n n c t x->doub L e spa ce  = 1; 

B B 

n n ctx->state  = 11; 

B B 

n n goto  case_11; 

B B 

n } 

B B 

> 

B B 

if  (Lineused)  ( 

B B 

n int  err; 

B B 

n /*  temporarily  n u L L - t e r m i na t e this  string  */ 

B B 

n temp_c  = ptrCLineused3; 

B B 

n p t r C L i n e u s e d 3 = '\0'; 

B B 

n err  = parseHeader  (ctx,  ptr,  Lineused); 

B B 

n if  (err)  { 

B B 

n n *error  = sendAnnotate  (ctx,  myself. 

B B 

n n n n PG P A N N_ ARM0R_B A D H E A D E R , 

B B 

n n n n c t x->a r mo r L i n e , 

fl  B 

n n n n Li  neused) ; 

B B 

n n p t r C L i n e u s e d ] = temp_c; 

B B 

n n if  (*error) 

B B 

n n n break; 
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anna/*  XXX:  Ignore  bad  headers?  */ 
n n n > 


n n n ctx->state  = 11; 

n n n goto  case_1 1 ; 

n n > 

n n /*  this  is  an  empty  Line;  now  go  deal  with  ArmorLines  */ 


n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

a case  14: 


n 

□ 

/* 

state  14  is  obsolete  */ 

n 

n 

ctx 

->state++; 

□ 

n 

/* 

FALLTHROUGH  */ 

n 

case 

1 15 

: 

n 

n 

/* 

get  the  message  and  part  information  */ 

D 

n 

i f 

( ! ctx->pa  rt ) { 

n 

n 

n 

/*  This  is  true  for  all  normal  armor  messages  */ 

D 

□ 

a 

msg  = getHessage  (ctx,  ctx->messageid,  ctx->maxparts); 

n 

n 

a 

if  ( ! msg  ) { 

n 

n 

n 

a /*  This  is  an  error  */ 

a 

n 

a 

a *error  = PGP E R R_N OH  EH ; 

a 

□ 

□ 

a break; 

a 

a 

a 

} 

a 

a 

a 

part  = getPart  (ctx,  msg,  c t x-> t h i s pa r t ) ; 

n 

u 

n 

if  (!part)  ( 

n 

a 

a 

a /*  This  is  an  error  too  */ 

Q 

n 

a 

a *error  = PGPERR_N0HEH; 

D 

a 

n 

n break; 

D 

a 

a 

} 

n 

a 

□ 

ctx->part  = part; 

n 

a 

> 

n 

o 

ctx 

->expectcrc  = 0; 

n 

a 

ctx 

->state++; 

Q 

a 

/* 

FALLTHROUGH  */ 

a case  16: 

n n / * 

a a * Either  try  to  make  the  message  writable  or  send  an 
an  * annotation  saying  we  have  a message  part, 
a a * / 


a a msg  = c t x->pa r t ->msg ; 
a a if  ( ctx->thi spa rt  ==  1)  { 
a n n *error  = writeMessage  (ctx,  msg); 

a a a if(*error) 

a a a a break; 

a a leLsel 

a a a byte*b; 


ana 

ana 

nan 

ana 

nan 

nan 

nan 


b = (byte  * ) pg p A L L o c ( kPG PP r s As c CmdBu f S i z e ) ; 
if  (b  ==  NULL) 

{ 

a *error  = PGPERR_NOMEM; 
a break; 

> 
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□ n 

n i = 0 ; 

n n 

n memcpy  (b,  &ctx->thispart,  sizeof  (ctx->thispart)); 

u n 

n i +=  sizeof  ( c t x-> t h i s pa r t ) ; 

n n 

n memcpy  (b+i,  &ctx->maxparts,  sizeof  (ctx->maxparts)); 

n a 

n i +=  sizeof  ( c t x->ma x pa r t s ) ; 

n n 

n memcpy  (b+i,  c t x->me s s a g e i d , 

a n 

n n strlen  ( c t x->me s s a g e i d ) ) ; 

n n 

n i +=  strlen  (ctx->messageid); 

a n 

n *error  = sendAnnotate  (ctx,  myself,  PG P AN N_ ARMO R_ P A RT , 

n □ 

n n n b,  i ) ; 

a a 

n pgpFree(b); 

n a 

n if  (*error) 

n u 

n n break; 

n n 

} 

a n 

ctx->state++; 

n n 

/*  FALLTHROUGH  */ 

n case  17 


ca  se_1 7 ; 

n n 

/*  read  until  EOL  to  get  to  end  of  the  last  line  */ 

n n 

c t x->a r mo r p t r = c t x->a r mo r 1 i n e ; 

□ □ 

ctx->armorlen  = 0; 

n □ 

while  (ctx->eol  !=  1)  f 

n a 

n c t x->a r mo r 1 e n = 1;n  /*  Preserve  1st  char  for  doublespace  logic  */ 

□ n 

n retval  = readLine  (ctx,  buf,  size); 

n n 

n written  +=  retval; 

Q n 

n buf  +=  retval; 

n a 

n size  -=  retval; 

u a 

a if  (Isize) 

n n 

n n return  written; 

n n 

} 

n n 

ctx->eol  = 0; 

n s 

ctx->eob  = 0; 

n n 

c t x->a r mo r 1 en  = 0; 

o n 

ctx->state++; 

n n 

/*  FALLTHROUGH  */ 

a case  18: 

n n /*  caLL  readLine  until  we  have  EOB  or  EOL  */ 


Q n 

retval  = readLine  (ctx,  buf,  size); 

a Q 

size  -=  retval; 

B B 

buf  +=  retval; 

B B 

written  +=  retval; 

B B 

if  (ctx->eol  1 1 ctx->eob) 

B B 

n ctx -> state ++; 

B B 

else 

n n n break; 

an/*  FALLTHROUGH  */ 
n case  19: 

H n / * 


B B 

* make  sure  this  is  not  a CRC  line.  If  it  is  a CRC 

B B 

* then  goto  state  21.  if  it  is  not  a CRC  line,  then 
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n n * it  must  be  an  armorline.  So,  process  it  as  an 

n H * armor  Line  and  then  faLlthrough  to  state  20  to 

a n * output  i t . 

n n * / 


D n 

Q □ 


if  ( c t x->a r mo r L i n e C 0 D ==  '=')  { 
n /*  This  Looks  Like  a CRC  */ 
n ctx-> state  = 21; 
n goto  case_21; 

} 


a a /*  Hake  sure  we're  not  expecting  a CRC  */ 

n n if  ( c t x->expe c t c r c ) i 

n n n *error  = sendAnnotate  (ctx,  myseLf,  PG P AN N_ A RHO R_NO C R C , 

n n n n n c t x->a r mo r L i n e , c t x->a r mo r L e n ) ; 

n n n if  (*error) 

n n n n break; 

n a a /*  WeLL,  maybe  this  is  an  end?  */ 

n n n ctx->state  = 24; 

n n a goto  case_24; 

a a > 


a a /*  find  the  end  of  the  armorLine  */ 
n a inLen  = ctx->armorLen; 

a a whiLe  (inLen  &&  isspace  ( c t x->a rmo r L i n e C i n L e n - ID)) 
a a a inLen--; 


a a 
a a 
a a 
a a 
a a 
a a 
a a 


/*  check  the  Length  of  the  armorLine  */ 

if  (inLen  > 68)  { /*  68  ==  64  + 2*"=3D"  extra  space  */ 
a ‘error  = sendAnnotate  (ctx,  myseLf, 
a a a PGPANN_ARHOR_TOOLONG, 

a a a ctx->armorLine,  ctx->armorLen); 

a if  (‘error) 

a a break; 


a a a ctx->state  = 26; 

a a a goto  case_26; 

a a > 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


n i = dearmorLine  (ctx,  inLen); 


□ 

if 

(i  > 

00 

< 1 ) { 

s 

s 

/‘ 

error  in 

deamorLine 

‘/ 

n 

n 

‘error  = sendAnnotate 

(ctx. 

myseLf, 

n 

n 

a 

a 

PGPANN_ 

ARMOR 

_BADLINE, 

n 

Q 

Q 

a 

c t x->a  rmo  r L i 

ne,  ctx->armorLen); 

n 

n 

i f 

(‘error) 

n 

n 

n 

break; 

n 

Q 

Ctx 

->s  t a t e = 

26; 

n 

n 

goto  case_26 

/ 

n } 

n ctx->expectcrc  = (i  < 48); 

n ctx->crc  = crcUpdate  (ctx->crc,  c t x->d a t a bu f , i); 
a ctx->dataLen  = i; 
a ctx->dataptr  = c t x->da t a b u f ; 
n c t x->s  t a t e + +; 
a /‘  FALLTHROUGH  ‘/ 
case  20 : 
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n n /*  output  the  dearnored  data,  then  goto  state  17  */ 
H n part  = ctx->part; 


u n 

while  C c t x->d a t a L e n ) { 

S Q 

a retvaL  = w r i t e Pa r t D a t a (part,  c t x->da t a p t r , 

n Q 

B n n n c t x->d a t a L e n , error); 

n a 

B ctx->dataptr  +=  retvaL; 

n n 

B ctx->dataLen  -=  retvaL; 

□ □ 

B if  (*error) 

n Q 

B B return  written; 

B B 

} 

B B 

ctx->state  = 17; 

B B 

goto  case_17; 

n case  21 
case  21 ; 


B B 

/*  Deal  with  CRC  */ 

B B 

crc  = dearmorCrc  (ctx); 

B B 

if  (crc  < 0)  { 

B B 

n /*  error  */ 

B B 

a *error  = sendAnnotate  (ctx,  myself. 

B B 

n n n PG P AN N_ A RHO R_C R C C ANT , 

B B 

n n n c t x->a r mo r L i n e , c t x->a rmo r L en ) ; 

B B 

n if  (*error) 

B B 

n n break; 

B B 

n ctx->state  = 26; 

B B 

n goto  case_26; 

B B 

> 

B B 

if  ((word32)crc  !=  ctx->crc)  { 

B B 

n /*  mismatch  */ 

B B 

n *error  = sendAnnotate  (ctx,  myself. 

B B 

n n n PG  P A N N_  A RM  0 R_C  R C B A D , 

B B 

n n n c t x->a r mo r L i n e , c t x->a rmo r L en  ) ; 

B B 

n if  (*error) 

B B 

n n break; 

B B 

a ctx->state  = 26; 

B B 

n goto  case_26; 

fl  B 

} 

B B 

ctx->state++; 

B B 

/*  FALLTHROUGH  */ 

n case  22 : 

n n /*  read  until  EOL  to  get  to  end  of  the  Last  Line  */ 


B B 

c t x->a r mo r p t r = c t x->a r mo r 1 i n e ; 

B B 

c t x->a r mo r L en  = 0; 

B B 

while  (ctx->eoL  !=  1)  ■( 

B B 

n c t x->a r mo r L e n = 1;n  /*  Preserve  1st  char  for  doublespace  Logic  */ 

B B 

n retvaL  = readLine  (ctx,  buf,  size); 

B B 

n written  +=  retvaL; 

B B 

n buf  +=  retvaL; 

B B 

n size  -=  retvaL; 

B B 

n if  ( ! s i ze  ) 

B B 

n n return  written; 

B B 

} 

B B 

ctx->eoL  = 0; 

B B 

ctx->eob  = 0; 
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□ 

n 

c t x->a rmo r L e n = 0 

n 

n 

ctx->state++; 

Q 

n 

/*  FALLTHROUGH  */ 

n 

case 

23: 

n 

n 

/*  call  readline 

D 

n 

retvaL  = readLine 

D 

n 

size  -=  retvaL; 

n 

n 

buf  +=  retvaL; 

written  +=  retvaL; 


n if  (ctx->eoL  ||  ctx->eob) 
n n ctx->state++; 

n else 
n n break; 


a 

D 

/* 

FALLTHROUGH  */ 

n 

case 

24 

: 

case 

_24: 

n 

n 

/* 

check  for  END  */ 

n 

D 

i f 

( c t x->a r mo r L e n < sizeof 

(prefix3)  - 1 || 

n 

D 

memcmp  ( c t x->a r mo r L i n e , 

prefix3,  sizeof 

n 

n 

n 

/*  missing  end  --  do  what???  */ 

n 

n 

Q 

r 

n 

n 

} 

#if 

HIMEPARSE 

n 

n 

i f 

( c t x->m i me_s i g n ed  ) { 

n 

n 

n 

/*  SpeciaL  cLeanup  for 

MIME,  wait  for  f 

n 

Q 

n 

ctx-> state  = 80; 

n 

a 

Q 

goto  case_80; 

n 

Q 

> 

#e nd i f 

n 

n 

ctx 

->state++; 

n 

Q 

/* 

FALLTHROUGH  */ 

n 

case 

25 

: 

n 

o 

/* 

read  untiL  EOL  to  get  to 

end  of  the  Last 

n 

□ 

ctx 

->armorptr  = c t x->a rmo r L i ne ; 

n 

Q 

ctx 

->armorLen  = 0; 

n 

n 

whiLe  (ctx->eoL  !=  1)  { 

Q 

n 

n 

c t x->a rmo r L en  = 1;n  /* 

Preserve  1st  chai 

a 

D 

□ 

retvaL  = readLine  (ctx. 

buf,  size); 

a 

n 

n 

written  +=  retvaL; 

u 

Q 

Q 

buf  +=  retvaL; 

n 

n 

n 

size  -=  retvaL; 

a 

n 

n 

if  (Isize) 

n 

Q 

n 

n return  written; 

n 

n 

> 

o 

n 

ctx 

->s  t a t e + + ; 

n 

n 

/* 

FALLTHROUGH  */ 

n 

case 

26 

: 

case 

i_26: 

n 

n 

/* 

- 1 ) ) { 
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n n * finish  this  part,  send  an  end  annotation  if  we  need 

n n * to,  then  clear  the  context  and  go  to  state  0 

n n * / 


□ □ 

□ D 

B B 

B B 

B B 

B B 

B B 

B B 


if  ( c t x->a n no t a t i o n ) f 

n pgpAssert  (ctx->depth_at_ann  ==  ctx->scope_depth); 

B *error  = sendAnnotate  (ctx,  myself,  c t x->a nno t a t i o n , 
B B B NULL,  0); 

n if  (*error) 

B B break; 

n c t x->a n no t a t i on  = 0; 

} 


n B ctx->state++; 

B B /*  FALLTHROUGH  */ 


n case  27: 

n B part  = ctx->part; 

B B *error  = donePart  (ctx); 

B B if  (*error) 

B B B break; 

a B ctx -> part  = NULL; 

B B ctx->thispart  = 0; 

n B c t x->ma X pa r t s = 0; 

n B memset  ( c t x->me  s s a g e i d , 0,  sizeof  ( c t x->iiie  s s a g e i d ) ) ; 

n B ctx->dataptr  = c t x->da t a bu f ; 
n B ctx->datalen  = 0; 

n B c t x->a r mo r p t r = c t x->a rmo r I i n e ; 

n B ctx->armorlen  = 0; 

n B c t x->expe c t c r c = 0; 

n B ctx->crlf  = 0; 

n B c t x->dou b I e s pa c e = 0; 

a B c t x-> f i r s t h e a d e r = 0; 

n B ctx->saved_crlf  = 0; 

a B ctx->hashlen  = 0; 

n B ctx->eol=0; 

n B ctx->eob  = 0; 

B B ctx->state  = 0; 

n n goto  case_0; 

B B 

B B /*  BEGIN  CLEARSIGNED  MESSAGE  BELOW  HERE  */ 

Q case  30 : 
case  30 : 


rt 

n 

/* 

Send  end-annotation  (if  we 

sent  a 

begin  annotation)  */ 

Q 

n 

i f 

( c t x->a n no t a t i on  ) { 

n 

n 

B 

pgpAssert  ( c t x->d e p t h_a t _a n n 

== 

ctx->scope_depth) ; 

n 

n 

B 

♦error  = sendAnnotate  (ctx 

myself,  c t x->a n no t a t i o n , 

a 

n 

B 

n B NULL,  0); 

Q 

n 

B 

if  (*error) 

D 

n 

B 

n break; 

n 

n 

B 

c t x->a n no t a t i on  = 0; 

n 

□ 

> 

a 

n 

Ctx 

->state++; 

o 

n 

/* 

FALLTHROUGH  */ 

D 

case 

31 

: 

n 

n 

/* 

Read  until  EOL  ==  1 to  get 

t 0 

the 

end  of  the  begin  line 

n 

n 

pgpAssert  (ctx->eol); 
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a 

a 

n 

□ 

n 

□ 

n 

Q 


n ctx->arniorptr  = ctx->arinorLine; 
n c t x->a rmo r L e n = 0; 
n while  (ctx->eoL  !=  1)  { 
n n c t x->a rmo r L e n = 0; 

n n retval  = readLine  (ctx,  buf,  size); 

n n written  +=  retval; 

n n buf  +=  retval; 

n n size  -=  retval; 


a n n if(!size) 

n n n n return  written; 

n n } 

n n ctx->eol  = 0; 

n a ctx->eob  = 0; 

n n c t x->a rmo r I e n = 0; 
n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

n case  32 : 

n n /*  read  the  line  after  the  begin:  call  readline  until 

n n * we  have  EOB  or  EOL  */ 


n n retval  = readLine  (ctx,  buf,  size); 

n n size  -=  retval; 

n n buf  +=  retval; 

n n written  +=  retval; 


n 

B 

if 

(ctx->eol  II  ctx->eob) 

n 

B 

B 

ctx->state++; 

n 

B 

else 

B 

B 

□ 

break; 

n 

B 

/* 

FALLTHROUGH  */ 

B 

case 

33 

: 

B 

B 

/* 

Hake  sure  first  line  after  " 

BEGIN"  is 

empty  or 

B 

B 

lineused  = c t x->a rmo r 1 en; 

B 

B 

pt  r 

= c t x->a r mo r 1 i n e ; 

B 

B 

/* 

Find  trailing  white  space... 

*/ 

B 

B 

while  (lineused  &&  isspace  ( pt r [ 1 i neu sed 

-ID)) 

B 

B 

B 

1 i neused--; 

B 

B 

if 

(lineused  SS  ! c t x-> h a s h 1 e n ) 

B 

B 

B 

/*  The  line  HUST  be  of  the 

form: 

B 

B 

B 

*n  Hash:  <ID>C,  <ID>3* 

B 

B 

B 

*/ 

B 

B 

B 

/*  Check  for  "Hash:"  here. 

put  hashes 

into 

B 

B 

B 

* c t x->ha sh  1 i s t and  number 

of  hashes 

into 

B 

B 

B 

* ctx->hash  len 

B 

B 

B 

*/ 

B 

B 

B 

if  (memcmp  ( c t x->a r mo r 1 i ne , 

"Hash:  ", 

6)  ) C 

B 

B 

B 

a /*  Not  a Hash  --  Error 

out  */ 

B 

B 

B 

n /*  XXX:  Should  annotate 

here  * / 

B 

B 

B 

n ctx->state  = 3; 

B 

B 

B 

n goto  case_3; 

B 

B 

a 

> 

B 

B 

B 

lineused  -=  6; 

B 

B 

B 

ptr  +=  6; 

Hash:"  * / 
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n 

fl 

B 

while  (Lineused)  ( 

□ 

B 

B 

fl 

struct  PgpHash  const  *h; 

□ 

B 

B 

fl 

byte  const  *comma  = (byte  const  *) 

□ 

fl 

fl 

B 

n strchr  ((char  const  *)  ptr,  ','); 

n 

B 

fl 

B 

unsigned  Len  = comma  ? comma-ptr  : lineused; 

n 

fl 

B 

fl 

B 

fl 

fl 

B 

h = pgpHashByName  ((char  const  *)ptr,  Len); 

n 

B 

B 

fl 

if  ( ! h)  t 

B 

B 

B 

B 

n /*  unknown  hash.,  now  what?  */ 

B 

B 

B 

B 

n /*XXX:  annotate?*/; 

B 

B 

B 

B 

} else 

B 

B 

B 

B 

n c t x->ha s h L i s t C c t x->ha s h L en++3  = 

B 

B 

B 

B 

a n h->type; 

B 

B 

B 

B 

ptr  +=  Len; 

B 

B 

B 

fl 

Lineused  -=  Len; 

B 

fl 

fl 

fl 

if  (comma)  { 

B 

fl 

B 

fl 

n if  (memcmp  (comma,  ",  ",  2))  { 

B 

B 

fl 

B 

n n /*  invalid  format  */ 

B 

B 

fl 

B 

n n /*  XXX:  annotate  here  */; 

B 

B 

B 

fl 

n } 

B 

fl 

B 

B 

n ptr  +=  2; 

B 

B 

B 

B 

n Lineused  -=  2; 

B 

B 

fl 

fl 

> 

B 

B 

B 

> 

/*  while  */ 

fl 

fl 

fl 

i f 

(!ctx->eoL)  { 

B 

B 

B 

B 

/*  Too  Long  a Line 

*/ 

B 

B 

B 

B 

/*  XXX:  annotate: 

bad 

fl 

B 

B 

B 

ctx->hashLen  = 0; 

fl 

B 

B 

B 

ctx->state  = 3; 

B 

B 

B 

B 

goto  case_3; 

fl 

B 

B 

> 

n n 

a □ 

Q □ 

n Q 


n /*  Now  we  need  to  get  an  *extra*  Line,  the  separator  */ 
n ctx->state  = 30; 
n goto  case_30; 

> /*  if  (Lineused  &&  ! ctx->hash ten)  */ 


B 

fl 

if 

(!ctx->eoL  II  Lineused) 

{ 

fl 

fl 

fl 

/* 

fl 

fl 

B 

★ 

We  either  have  a Long  Line  or 

non 

B 

B 

fl 

★ 

whi te-space . I bet 

someone  ' s 

trying  to 

fl 

fl 

fl 

* 

trick  us  into  beLieveing  this 

is  a real 

B 

fl 

B 

★ 

cLearsigned  message 

, but  they 

' ve  added  some 

B 

B 

fl 

★ 

text  to  it.  I dont 

buy  it. 

Output  as 

B 

fl 

B 

★ 

non-pgp  text;  goto 

state  3 . 

fl 

B 

B 

*/ 

B 

B 

fl 

/* 

XXX:  Should  send  an 

annotation:  bad  cLearsi 

B 

B 

B 

C t X 

->hashLen  = 0; 

B 

B 

B 

ctx 

->state  = 3; 

B 

B 

B 

goto  case_3; 

B 

fl 

> 

B 

B 

C t X 

->s  t a t e + +; 

fl 

fl 

/* 

FALLTHOUGH  */ 

#if  HIMEPARSE 
c a s e_34 : 
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#end-i  f 

n case  34 : 

an/*  Read  until  EOL  ==  1 to  get  to  the  next  Line  */ 


Q n 

pgpAssert  (ctx->eoL); 

n n 

c t x->a rmo r p t r = c t x->a rmo r L i n e ; 

n D 

c t x->a r mo r L e n = 0; 

Q n 

while  Cctx->eoL  !=  1)  { 

□ s 

n ctx->armorLen  = 0; 

n a 

n retval  = readLine  (ctx,  buf,  size); 

a s 

n written  +=  retval; 

n n 

n buf  +=  retval; 

Q S 

n size  -=  retval; 

n s 

n if  (!size) 

n n 

n n return  written; 

n n 

> 

a n 

ctx->eoL  = 0; 

n n 

c t x->eob  = 0; 

n a 

ctx->armorLen  = 0; 

u n 

ctx->saved_crLf  = 0; 

a n 

ctx->crLf  = 0; 

n n 

ctx->state++; 

Q n 

/*  FALLTHROUGH  */ 

n case  35: 

n n /*  Ok,  this  is  a cLearsigned  message.  Send  a new 


n Q 

* begin  annotation 

n n 

*/ 

□ n 

♦error  = sendAnnotate  (ctx,  myself,  PG PAN N_C LEAR S I G_BEG I N , 

n □ 

n n NULL,  0); 

n n 

if  (*error) 

n D 

n break; 

n n 

c t x->a nn 0 t a t i on  = PG P A NN_ C L E ARS I G_ EN D ; 

n n 

ctx->depth_at_ann  = ctx->scope_depth; 

n n 

ctx->state++; 

D n 

/*  FALLTHROUGH  */ 

n case  36 : 

an/*  Get  a new  message  part  */ 


D D 

c t x-> t h i spa r t = 1; 

n n 

c t x->ma X pa r t s = 1; 

n n 

msg  = getHessage  (ctx,  NULL,  1); 

a n 

if  ( ! msg  } { 

n D 

a /*  This  is  an  error  */ 

n D 

n *error  = PG P E R R_N0M EH ; 

Q Q 

n break; 

n Q 

> 

n Q 

part  = getPart  (ctx,  msg,  c t x-> t h i s pa r t ) ; 

D n 

if  (ipart)  { 

n n 

a /*  This  is  an  error  too  */ 

n D 

a ‘error  = PG PE R R_N0M E M ; 

n n 

a break; 

□ n 

> 

n o 

/*  And  set  it  up  as  a cLearsigned  message  */ 

n n 

♦error  = c r e a t e C L e a r s i g (ctx,  msg,  part); 

n n 

if  (‘error) 

Q n 

a break; 
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□ 

n 

ctx 

->pa  r t = part; 

n 

n 

C t X 

->state  = 39; 

n 

n 

/* 

FALLTHROUGH  */ 

s 

□ 

/* 

Q 

n 

* 

Below  starts  the  main 

processing  loop 

for 

n 

□ 

★ 

clearsigned  messages. 

It  reads  in  a 

line.  If  it 

n 

n 

* 

is  a BEGIN  line  it  converts  to  the  signature  output 

□ 

n 

★ 

and  starts  de-armoring 

the  signature. 

Otherwise  it 

□ 

a 

★ 

will  output  any  saved 

CRLF  chars,  then  output  this 

n 

n 

★ 

new  line,  saving  (but 

not  outputting) 

the  CRLF 

n 

n 

* 

chars  at  the  end  of  the  line.  Then  the  loop 

Q 

n 

★ 

continues. 

n 

n 

*/ 

ca  s e_39 : 
n case 


39: 

/*  caLL  readline  until  we  have  EOB  or  EOL  */ 


n retval  = readLine  (ctx,  buf,  size); 
a size  -=  retval; 
n buf  +=  retval; 
n written  +=  retval; 


n 

n 

i f 

(ctx->eol  1 1 ctx->eob) 

s 

□ 

n 

ctx->state++; 

n 

Q 

else 

n 

a 

Q 

break; 

□ 

n 

/* 

FALLTHROUGH  */ 

n 

case 

! 40 

n 

n 

/* 

□ 

n 

★ 

Check  if  this  is  a begin  line.  If  so,  start 

n 

n 

* 

parsing  the  signature  by  jumping  to 

case  9 . 

o 

n 

★ 

Otherwise,  if  the  line  begins  with  ' 

- ' , move 

n 

D 

* 

beyond  that  and  fallthrough 

n 

D 

*/ 

Q 

n 

lineused  = ctx->armorlen; 

c 

n 

pt  r 

= c t x->a r mo r 1 i n e ; 

n 

□ 

Q 

n 

while  (lineused  &&  isspace  ( p t r C 1 i neu s ed  - ID)) 

n 

□ 

Q 

li neused--; 

n 

Q 

#if 

HIMEPARSE 

n 

n 

i f 

( c t x->m i me_ s i g n e d ) { 

n 

Q 

n 

if  (lineused  ==  c t x->m i me_bo u n d_  1 e n 

&& 

□ 

n 

n 

n !memcmp  (ptr,  c t x->m  i me_bounda r y , ctx->mii 

n 

□ 

n 

n /*  Done  with  MIME  body  part,  go 

look  for 

n 

□ 

n 

a ctx-> state  = 75; 

Q 

n 

n 

n goto  case_75; 

n 

n 

Q 

} 

Q 

Q 

} else  { 

#end  i f 

□ 

n 

i f 

(lineused  ==  sizeof  (sigprefix)  - 1 

SS 

n 

n 

Imemcmp  (ptr,  sigprefix,  sizeof  (si 

gprefix)  - 

0 

n 

n 

ctx -> state  = 9; 

n 

n 

n 

goto  case_9; 

a 

n 

> 

1)  ) C 
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n 

n 

if  (Imemcmp  ( c t x->a r mo r 1 i n e , ",  2)) 

f 

n 

n 

B c t x->a r mo r p t r = c t x->a r mo r 1 i n e + 2; 

n 

n 

B c t x->a rmo r 1 en  -=  2; 

D 

n 

> 

MIMEPARSE 

n 

o 

> 

# e nd i f 

n 

□ 

ctx->state++; 

n 

n 

/*  FALLTHROUGH  */ 

n 

case 

1 41  : 

□ 

n 

/*  output  CRLF  if  we  need  to  */ 

Q 

n 

while 

( c t x->sa ved_c r 1 f ) { 

n 

n 

n if 

(ctx->saved_crlf  8 PG P_T E XT F I LT_ 

CR)  { 

Q 

n 

n n 

i = w r i t e E X t r a Da t a (ctx,  (byte 

const  *) 

Q 

n 

n n 

B B 1, error); 

n 

n 

n n 

if  ( i ) 

□ 

n 

Q □ 

B ctx->saved_c r 1 f &=  ■PGP_TEXTFILT_CR 

n 

n 

n n 

if  (*error) 

n 

n 

n D 

B break; 

n 

n 

n > 

o 

n 

n i f 

(ctx->saved_crlf  & PGP_TEXTFILT_ 

LF)  { 

n 

n 

B B 

i = w r i t e Ex t r a D a t a (ctx,  (byte 

const  *) 

n 

o 

B B 

B B 1, error); 

Q 

n 

B B 

if  (i  ) 

n 

n 

B B 

B ctx->saved_crlf  &=  ~ PG P_T EXT F I LT_L F 

n 

u 

B B 

if  (*error) 

n 

n 

B B 

B break; 

n 

n 

B > 

u 

n 

> 

n 

n 

ctx->state++; 

u 

a 

/*  FALLTHROUGH  */ 

n 

case 

42: 

case 

i_42: 

n 

Q 

/* 

n 

n 

* output  armorline  buffer;  do  not  output  crlf 

a 

n 

* the 

next  line  has  been  shown  to  not 

be  the 

o 

n 

* delimiter. 

n 

n 

*/ 

n 

n 

pt  r = 

c t x->a r mo r p t r + c t x->a r mo r 1 e n - 1 

/ 

n 

n 

while 

(*pt r ==  • \r ■ II  *pt  r ==  ■ \n  ' ) { 

u 

n 

B ptr--; 

n 

n 

B c t x->a rmo r 1 en — ; 

□ 

n 

> 

n □ 
a n 

D □ 
n n 
n a 
n a 
n n 
a □ 
D n 


while  ( c t x->a rmo r I en  ) { 

n retval  = w r i t e Ex t ra Da t a (ctx,  c t x->a rmo rpt r , 
n n n n c t x->a rmo r L e n , error); 

B c t x->a rmo r p t r +=  retval; 

B ctx->a rmor  len  -=  retval; 

B if  (*error) 

B B return  written; 

> 

c t x->a r mo r p t r = c t x->a r mo r I i n e ; 
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n 

□ 

ctx 

->state++; 

□ 

n 

/* 

FALLTHROUGH  */ 

CI 

case 

1 43 

□ 

n 

/* 

Q 

n 

* 

if  EOL  == 

1,  cLear  state  and 

n 

n 

* 

read  data 

and  return  to  state 

n 

n 

*/ 

a 

n 

if 

(ctx->eoL 

= = 1 ) { 

□ 

tt 

u 

c t x->eo  L 

= 0; 

n 

u 

u 

ctx->eob 

= 0; 

n 

n 

n 

c t x-> s a ve d_ c r L f = ctx->crLf; 

n 

a 

n 

ctx->crLf 

= 0; 

□ 

Q 

n 

ctx->state  = 39; 

Q 

n 

n 

goto  case 

_39; 

□ 

n 

> 

n 

n 

i f 

( ! s i z e ) 

Q 

n 

Q 

break; 

n n retvaL  = readLine  (ctx,  buf,  size); 

n a size  -=  retvaL; 

a a buf  +=  retvaL; 

a a written  +=  retvaL; 


a a ctx->state  = 42; 
a a goto  case_42; 

an/*  BEGIN  BINARY  MESSAGE  HERE  */ 
a case  50: 
ca  s e_5  0 : 

a a /*  Send  a new  begin  annotation  */ 

a n *error  = sendAnnotate  (ctx,  myseLf,  PG P AN N_ I N PUT_B E G I N , 
a n n n NULL,0); 

a a if  (*error) 

a H H break; 

a a c t x->a nno t a t i on  = PG P AN N_ I N PUT_ E N D ; 
a a c t x->d e p t h_a t _a nn  = c t x-> s c o p e_d e p t h ; 
a a ctx->state++; 

an/*  FALLTHROUGH  */ 
a case  51: 

an/*  Get  a new  message  part  */ 


n 

fl 

pgpAssert  ( ! c t x->pa r t ) ; 

n 

B 

C t X- 

>thispart  = 1; 

D 

B 

C t X“ 

>ma  xpa  r t s = 1 ; 

Q 

B 

msg 

= getMessage  (ctx,  NULL,  1); 

□ 

B 

if  C 

! msg  ) { 

n 

B 

n 

/*  This  is  an  error  */ 

n 

B 

fl 

♦error  = PGPERR_N0MEH; 

n 

fl 

B 

break; 

u 

fl 

> 

n 

fl 

part 

= getPart  (ctx,  msg,  ctx->thispart); 

n 

B 

if  ( 

! pa  r t ) { 

a 

fl 

fl 

/*  This  is  an  error  too  */ 

□ 

fl 

fl 

♦error  = PGPERR_N0HEM; 

B 

B 

fl 

break; 

B 

fl 

> 

B 

fl 

*error  = writeMessage  (ctx,  msg); 

[i:CHK:ff0bba554eff22aa533f67887cc188782f8da8556103caf8a8dfa 9444c b3a58c3:] 
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n 

n 

n 

n 

a 

n 

n 

n 

□ 

□ 

n 

Q 

D 

Q 

n 

n 

Q 

□ 

a 

Q 

□ 

□ 

□ 

n 

□ 

□ 

□ 

a 

n 

D 

n 


n if  (*error) 

n n break; 

n ctx->part  = part; 

n c t x->s  t a t e + + ; 

n /*  FALLTHROUGH  */ 

case  52 : 

n /*  Write  out  data  cached  in  c t x->a r mo r L i n e */ 
n part  = ctx->part; 

n while  ( c t x->a rmo r L en ) f 

n n retval  = w r i t e Pa r t D a t a (part,  c t x->a r mo r p t r , 
n n n n n ctx->armorLen,  error); 

n n ctx->a rmorpt r +=  retval; 

n n c t x->a r mo r I e n -=  retval; 

n n if  (*error) 

n n n return  written; 

n > 

n c t x->a r mo r p t r = c t x->a rmo r I i ne ; 
n ctx->eol  = 0; 

n ctx->eob  = 0; 

n c t x->a rmo r I en  = 0; 

n ctx->state++; 

n /*  FALLTHROUGH  */ 

case  53 : 

n / * 

n * Check  if  this  scope  has  ended.  If  so,  then  close 

n * this  part  by  jumping  to  state  26 

n * / 

n if  ( ! ctx->annotat i on  ) { 

n n ctx->state  = 26; 

n a goto  case_26; 

a > 


n 

n 

/* 

Otherwise,  write  out  data  from 

this  write  call.  */ 

n 

n 

part  = ctx->pa  rt ; 

n 

n 

while  (size)  < 

n 

n 

o 

retval  = w r i t ePa r t Da t a 

(part. 

buf,  size,  error); 

Q 

□ 

n 

buf  +=  retval; 

a 

n 

n 

size  -=  retval; 

n 

n 

n 

written  +=  retval; 

□ 

a 

n 

if  (*error) 

a 

n 

Q 

a return  written; 

n 

n 

> 

n 

n 

/* 

Can  we  get  here  any  way 

other 

than  not  having  data? 

D 

□ 

pgpAssert  (Isize); 

tt 

n 

break; 

#if  HIHEPARSE 
case_60 : 


n 

case 

60: 

n 

n 

/* 

a 

n 

* Here  on  a MIME 

multipart/signed 

message.  Must 

check  protocol 

a 

n 

* and  boundary. 

n 

n 

*/ 

n 

n 

/*  Case  sensitive 

OK?  */ 

n 

n 

if  ((ptr  = strstr 

(ctx->armorline. 

prefix_mime2)) 

!=  NULL)  { 

n 

n 

a /*  Have  protocol,  we  know  it's 

ours  */ 

s 

n 

a ctx->mi me_s i gned  = 1; 
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n 

n 

> 

n 

n 

/* 

Case 

sensitive  OK?  */ 

n 

n 

i f 

((ptr  = strstr  ( c t x->a r mo r 1 i n e , prefix_mi 

me3))  !=  NULL)  { 

n 

□ 

B 

/* 

Get  boundary  */ 

n 

n 

B 

i n t 

need_quote; 

n 

n 

B 

ptr 

+=  strLen  (prefix_mime3); 

n 

n 

B 

need_quote  = (*ptr  == 

n 

Et 

B 

i f 

(need_quote) 

Q 

□ 

B 

B 

+ + pt  r; 

n 

□ 

B 

ptr2  = strchr  (ptr,  need_quote?' 

n 

n 

B 

i f 

(!ptr2)  { 

n 

n 

B 

B 

/*  Header  too  complex  for  us  to  parse,  rely  on  heuristic  * 

tt 

s 

B 

B 

ctx->mime_signed  = 0; 

n 

n 

B 

B 

c t x->m i me_bou nd_ 1 e n = 0; 

a 

tt 

B 

B 

ctx->state  = 3; 

n 

B 

B 

B 

goto  case_3; 

n 

B 

B 

> 

n 

B 

B 

i f 

(ptr2-ptr  + 5 > ( i n t ) s i z e o f ( c t x->m i me_bou n da r y ) ) { 

n 

B 

B 

B 

/*  Too  big  boundary,  can't  handle  it 

*1 

Q 

B 

B 

B 

ctx->state  = 3; 

D 

B 

B 

B 

goto  case_3; 

n 

B 

B 

> 

n 

B 

B 

C t X 

->mi me_bounda ryC0]  = 

n 

B 

B 

C t X 

->m i me_bo u n d a r y C 1 3 = 

D 

B 

B 

strncpy  ( c t x->m i me_bo u nda ry+2 , ptr,  ptr2 

-ptr); 

n 

B 

B 

C t X 

->mi me_bound_ 1 en  = ptr2  - ptr  + 2; 

n 

B 

B 

C t X 

->mime_boundary[!ctx->mime_bound_lenD 

= '\0'; 

s 

B 

> 

#i  f 

0 

n 

B 

/* 

Q 

B 

■k 

This 

micalg  finding  code  may  not  get  used 

if  boundary  and  proto 

□ 

B 

* 

are 

on  a line  before  the  micalg.  Also  won't  work  with  comma 

a 

B 

* 

separated  micalgs. 

n 

B 

* 

Need 

to  improve  this,  however 

n 

B 

★ 

i t i 

s just  a speed  optimization  to  have  a 

micalg  anyway. 

n 

B 

*/ 

n 

B 

ptr 

= c t x->a r mo r L i n e ; 

n 

B 

while  ((ptr  = strstr  ( c t x->a r mo r L i n e , prefix 

_mime4))  !=  NULL)  { 

n 

B 

B 

/* 

Have  mic_alg  */ 

n n n struct  PgpHash  const  *h; 

n n n ptr  +=  s t r L e n ( p re f i x_m i me4 ) ; 

n n n if  (strncmp  (ptr,  p r e f i x_mi me  5 , s t r L e n ( p r e f i x_m i me  5 ) ) 

n n n n continue;n  a /*  Not  a PGP  hash  */ 

n n n ptr  +=  s t r L e n ( p r e f i x_mi me  5 ) ; 

n n n ptr2  = strchr  (ptr, 

n n n if(!ptr2) 

n n n n break;n  n n /*  No  terminator,  ignore  it?  */ 

n n n for  (i=0;  i<ptr2-ptr;  ++i)  { 

n n n a ptrCi3  = toupper(ptrCi]); 

a a a > 

a a a h = pg p H a s h By Na me  ((char  const  *)ptr,  ptr2-ptr); 

a a a if(h){ 

n a a a ctx->hashListCctx->hashLen++D  = h->type; 

a a a } 

a a a ptr=ptr2; 

a a } 


0) 
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#end i f 


D 

a 

n 


n 

□ 


□ 

n 

n 


n 

□ 


if  ( c t x->mi  nie_s  i gned  SS  c t x->m  i me_b  ou  nd_  L en  ) -C 

n /*  Got  the  info  we  need,  now  go  Look  for  first  boundary  */ 
n ctx->state  = 65; 
n goto  case_65; 

> 


□ 

n 

n 

o 

n 

a 

n 

a 

n 

□ 

n 

Q 


n c t x->  s t a t e + + ; 

a /*  FALLTHROUGH  */ 
case  61: 

a /*  Read  until  EOL  ==  1 to  get  to  the  end  of  the  header  Line  */ 
n ctx->armorptr  = ctx->armorLine; 
n c t x->a r mo r L e n = 0; 

n while  (ctx->eoL  !=  1)  { 
n n ctx->armorLen  = 0; 

D n retvaL  = readLine  (ctx,  buf,  size); 
n n written  +=  retvaL; 

n n buf  +=  retvaL; 

n n size  -=  retvaL; 


n n n ifCIsize) 

H n n n return  written; 

n n > 

a n ctx->eoL=0; 

n n ctx->eob  = 0; 

n n c t x->a r mo r L e n = 0; 

n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

n case  62  : 

n n /*  read  the  Line  after  the  begin:  caLL  readLine  until 

n n * we  have  EOB  or  EOL  */ 


n 

n 

retvaL  = readLine  (ctx,  buf 

n 

n 

size  -=  retvaL; 

n 

n 

buf  +=  retvaL; 

D 

□ 

written  +=  retvaL; 

n 

D 

if  (ctx->eoL  1 1 ctx->eob) 

n 

n 

n c t x->s t a t e++; 

n 

n 

else 

n 

n 

n break; 

□ 

n 

/* 

FALLTHROUGH  */ 

n 

case 

63 

: 

D 

a 

/* 

n 

n 

* 

See  if  a 

continuation  of  previous  header  Line.  Must 

D 

□ 

* 

whitespace  followed  by  non-whitespace. 

n 

n 

*/ 

n 

n 

if 

( c t x->a r mo r L e n > 1 &&  isspace  ( c t x->a r mo r L i ne C 0 D ) ) { 

□ 

n 

B 

for  ( i = 

1;  i<  ( i n t ) c t x->a r mo r L en ; ++i ) ( 

Q 

Q 

B 

n if 

(Msspace  ( c t x->a  rmor  L i ne  C i ] ) ) ( 

n 

n 

B 

B B 

ctx-> state  = 60; 

n 

n 

B 

B B 

goto  case_60; 

n 

n 

B 

n > 

n 

Et 

B 

> 

a 

a 

> 

n 

a 

/* 
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Q 

n 

* Here  we  had  a mime-signed  header,  but  not 

our  protocol 

or  boundary 

a 

a 

* Maybe  another  flavor  of  mime.  We  will  go 

back  to  our  i 

n i t i a 1 

n 

n 

* state.  This  means  that  we  will  have  eaten 

one  or  more 

header 

n 

n 

* lines. 

n 

□ 

*/ 

n 

n 

c t x->m i me_ s i g ne d = 0; 

n 

n 

ctx->mime_bound_len  = 0; 

□ 

□ 

goto  case_3; 

ca  se_65  : 
n case  65: 


n 

n 

/* 

Q 

Q 

* Here  when  we  have  a good  PGP/MIME 

signed 

header,  with  boundary 

n 

n 

* Look  for  that  boundary. 

n 

Q 

* Read  until  EOL  ==  1 to  get  to 

the 

end  of 

the  header  line. 

n 

n 

*/ 

n 

n 

c t x->a r mo r p t r = c t x->a r mo r 1 i n e ; 

n 

n 

ctx->armorlen  = 0; 

a 

Q 

while  Cctx->eol  !=  1)  { 

n 

n 

n c t x->a r mo r 1 e n = 0; 

n 

n 

n retval  = readLine  (ctx,  buf. 

size); 

n 

u 

n written  +=  retval; 

n 

n 

n buf  +=  retval; 

Q 

n 

n si ze  -=  retva  1 ; 

□ 

n 

n if  (Isize) 

Q 

n 

n n return  written; 

n 

n 

> 

D 

n 

ctx->eol  = 0; 

n 

a 

ctx->eob  = 0; 

o 

□ 

ctx->armor len  = 0; 

□ 

n 

ctx->state++; 

a 

n 

/*  FALLTHROUGH  */ 

n 

case 

66: 

□ 

D 

/*  read  the  line  after  the  begin: 

ca 

ll  readline  until 

n 

B 

* we  have  EOB  or  EOL  */ 

B 

B 

retval 

= readLine  (ctx,  buf,  size); 

B 

B 

size  -= 

retval; 

B 

B 

buf  + = 

retval; 

B 

B 

written 

+=  retval; 

n n if  (ctx->eoL  ||  ctx->eob) 
n n n ctx->state++; 

n n else 

a n a break; 


n 

n 

n 

D 

n 

n 

n 

n 

n 

D 

n 


a /*  FALLTHROUGH  */ 
case  67: 

n if  ( c t x->a  rmo  r L e n < ( un  s i g ne  d ) c t x->ni  i me_bo  u ncl_  L e n || 

a a ! ctx->eo  L | | 

a memcmp  ( c t x->a rmo r L i ne , c t x->m i me_bou n da r y , c t x->m i me_bou n d_ L e n ) ) { 

n n /*  Not  yet  at  boundary  for  first  part  */ 
n n ctx->state  = 65; 

n n goto  case_65; 

n } 

n c t x->s t a t e++; 

n /*  FALLTHROUGH  */ 
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ca  se_68 : 
n case 
n □ 

□ □ 
n a 
□ □ 
n a 
n a 
n n 
n n 
n □ 

□ n 

□ D 

□ n 


68: 

/*  Send  end-annotation  (if  we  sent  a begin  annotation)  */ 
if  ( c t x->a nno t a t i on ) { 

n pgpAssert  ( c t x->d e p t h_a t _a n n ==  c t x-> s c ope_d e p t h ) ; 
n *error  = sendAnnotate  (ctx,  myself,  c t x->a n no t a t i o n , 
n n n NULL,  0); 

n if  (*error) 

n n break; 

n c t x->a nn o t a t i on  = 0; 

> 

/*  Here  at  first  boundary,  fall  into  common  cLearsign  code 
ctx->state  = 34; 
goto  case_34; 


above 


*/ 


ca  s e_70 : 
a case  70 : 

a a /*  Here  if  we  see  a " — " line  while  parsing,  may  be  mime  boundary  */ 
n n pgpAssert  (ctx->eol); 

n n strcpy  ( c t x->mi me_bou n da r y , c t x->a r mo r I i n e ) ; 


a 

B 

ctx->mime_bound_len  = strlen  (ctx->mime_boundary); 

a 

B 

c t x->s  t a t e + + ; 

n 

B 

/*  FALLTHROUGH  */ 

a 

case 

71  : 

n 

B 

/*  read  the  line  after  the  boundary: 

call  readline 

until 

B 

B 

* we  have  BOB  or  EOL  */ 

B 

B 

retval  = readLine  (ctx,  buf,  size); 

B 

B 

size  -=  retval; 

B 

B 

buf  +=  retval; 

B 

B 

written  +=  retval; 

B 

B 

if  (ctx->eol  II  ctx->eob) 

B 

B 

a c t x->s  t a t e++; 

B 

B 

else 

B 

B 

n break; 

B 

case 

72  : 

B 

B 

/*  MUST  be  a MIME  header,  or  we  are 

lost  */ 

B 

B 

if  (!ctx->eol  II  c t x->a rmo r 1 en  < 4 ||  isspaceCctx- 

>armorlineC03)  | | 

B 

B 

n !(ptr  = strchr  ( c t x->a rmo r 1 i ne , 

':'))  II  lisspaceCptrCID))  { 

B 

B 

n /* 

B 

B 

n * If  no  good,  we  go  back  to  our 

initial  state 

. This  means  we 

B 

B 

n * will  have  eaten  the  boundary 

line. 

B 

B 

n * / 

B 

B 

n ctx->state  = 3; 

B 

B 

n goto  case_3; 

B 

B 

> 

B 

B 

/*  Valid  mime  header,  go  on  and  begi 

n processing  message  */ 

B 

B 

c t x->mi me_ s i g ned  = 1; 

B 

B 

/* 

B 

B 

* Fall  into  common  clearsigned  code 

above . Flags 

we  have  set  will 

B 

B 

* change  its  s t a t e- 1 ea v i ng  behavior 

■ 

B 

B 

*/ 

B 

B 

ctx->state  = 68; 

B 

B 

goto  case_68; 
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case  75 ; 


□ 

case 

1 75 

: 

Q 

n 

/* 

n 

n 

* 

Here  when  we  have  seen  the 

boundary  at 

Q 

n 

* 

Must  wait  for  signed  part. 

□ 

n 

★ 

Read  until  EOL  ==  1 to  get 

t 0 

the  end 

n 

n 

*/ 

a 

Q 

C t X 

->armorptr  = c t x->a rmo r 1 i n e 

r 

n 

n 

C t X 

->armorlen  = 0; 

a 

u 

while  (ctx->eol  !=  1)  t 

a 

n 

n 

c t x->a rmo r 1 e n = 0; 

□ 

u 

□ 

retval  = readLine  (ctx,  but. 

size); 

Q 

a 

a 

written  +=  retval; 

n 

n 

n 

buf  +=  retval; 

n 

n 

n 

size  -=  retval; 

n 

□ 

n 

if  (Isize) 

u 

n 

n 

n return  written; 

n 

n 

> 

n 

B 

ctx->eol  = 0; 

s 

B 

ctx->eob  = 0; 

a 

B 

c t x->a r mo r 1 e n = 0; 

n 

fl 

ctx->state++; 

n 

B 

/*  FALLTHROUGH  */ 

n 

case 

I 76: 

n 

fl 

/*  read  the  next  line:  call  readline  until 

B 

fl 

* we  have  EOB  or  EOL  */ 

B 

B 

retval  = readLine  (ctx,  buf,  size); 

B 

B 

size  -=  retval; 

B 

B 

buf  +=  retval; 

B 

fl 

written  +=  retval; 

B 

fl 

if  (ctx->eol  1 1 ctx->eob) 

B 

B 

n ctx -> state ++; 

B 

B 

else 

B 

B 

n break; 

B 

B 

/*  FALLTHROUGH  */ 

B 

case 

77: 

B 

B 

/*  See  if  have  BEGIN  PGP  SIGNATURE  line. 

if  so 

fl 

B 

if  ( ( c t x->a rmo r 1 e n > sizeof  (sigprefix) 

- 1 && 

fl 

B 

Imemcmp  ( ctx->a rmor 1 i ne,  sigprefix. 

sizeof 

B 

B 

n ( c t x->a r mo r 1 e n > sizeof  ( p r e f i x_m i me s i g 2 ) - 

B 

B 

Imemcmp  C c t x->a r mo r 1 i n e , p r e f i x_m i me s i g 2 , 

B 

B 

n n n sizeof  ( p r e f i x_m i me s i g 2 ) - 

1 ) ) ) { 

B 

B 

n /*  Have  BEGIN  line  for  signature  */ 

B 

B 

n ctx -> state  = 9; 

B 

B 

n goto  case_9; 

B 

B 

> 

B 

B 

/*  Else  loop  back  */ 

B 

B 

ctx -> state  = 75; 

B 

B 

goto  case_75; 

case 

_80: 

B 

case 

00 

B 

B 

/* 
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□ 

n 

* Here  after  

-END  PGP  MESSAGE — 

in  a mime  signed  message 

n 

n 

* Look  for  terminal  boundary 

Line. 

n 

n 

★ 

n 

□ 

* Read  until  EOL 

==  1 to  get 

to  the 

end  of  the 

header 

Line. 

n 

n 

* Append  two 

chars  to  boundary 

to  look  Like 

final 

bounda  ry 

n 

n 

*/ 

Q 

B 

ctx->mime_boundary 

Cctx->mime_ 

bound_ 

Len++3  = 

s 

B 

ctx->mime_ boundary 

C c t x->mi me_ 

bound_ 

Len++]  = 

r 

n 

B 

ctx->mime_boundary 

Cctx->mime_ 

bound_ 

L e n : = ' \ 0 ' ; 

Q 

B 

c t x->  s t a t e + + ; 

n 

B 

/*  FALLTHROUGH  */ 

ca  se_81 : 
n case  81  : 


B 

B 

/* 

Read  till  end  of  previous 

Line  * / 

B 

B 

C t X 

->armorptr  = ctx->armorLi 

ne; 

B 

B 

C t X 

->armorLen  = 0; 

B 

B 

while  (ctx->eoL  !=  1)  { 

B 

B 

B 

c t x->a rmo r L en  = 0; 

B 

B 

B 

retvaL  = readLine  (ctx. 

buf,  size); 

B 

B 

B 

written  +=  retvaL; 

B 

B 

B 

buf  +=  retvaL; 

B 

B 

B 

size  -=  retvaL; 

a n n ifCIsize) 

n n n n return  written; 

n n > 

n n c t x->eo  L = 0; 

a n ctx->eob  = 0; 

n n c t x->a r mo r L e n = 0; 

n a ctx->state++; 

n n /*  FALLTHROUGH  */ 

a case  82 : 

a a /*  read  the  Line  after  the  begin:  caLL  readLine  until 

n n * we  have  EOB  or  EOL  */ 


n n retvaL  = readLine  (ctx,  buf,  size); 
n n size  -=  retvaL; 

a n buf  +=  retva  L ; 
n n written  +=  retvaL; 

n n if  (ctx->eoL  | | ctx->eob) 
n n n c t x-> s t a t e++ ; 

n n else 

n n n break; 


n 

□ 

n 

n 

n 

n 

n 

n 

Q 

□ 

n 

n 

n 


B 

/* 

FALLTHROUGH  */ 

case 

83 

: 

B 

/* 

Check  for  final  boundary  */ 

B 

i f 

(ctx->eoL  &&  c t x->a r mo r L en  >=  ( un s i g n e d ) c t x 

->mime_bound_Len 

B 

1 

memcmp  ( c t x->a rmo r L i ne , c t x->m i me_bo u n da ry , 

ctx->mime_bound 

B 

D 

/*  Clean  up  mime  flags,  go  to  cLean-up  state  */ 

B 

n 

ctx->mime_signed  = 0; 

B 

n 

c t x->m i me_bound_ L e n = 0; 

B 

n 

goto  ca  se_26 ; 

B 

B 

} 

B 

/* 

Keep  Looping  until  we  see  it  */ 

B 

C t X 

->state  = 81; 
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n n goto  case_81; 

#end  i f 

n default: 

B n /*  Every  state  should  be  enumerated  above  */ 
B B pgpAssert  (0); 

B > 

B return  written; 

} 

static  i n t 

Flush  (struct  PgpPipeline  *myself) 

{ 

B Struct  Context  *context; 

B int  error  = 0; 

B pgpAssert  (myself); 

B pgpAssert  ( my s e I f ->ma g i c ==  0 E ARMO RH AG  I C ) ; 

B context  = (struct  Context  * ) my s e I f ->p r i v ; 

B pgpAssert  (context); 

B pgpAssert  ( c o n t ex t -> t a i I ) ; 

B (void)  Write  (myself,  NULL,  0,  Serror); 

B if  (error) 

B B return  error; 

B return  c o n t e x t -> t a i I ->f I u s h ( c on t e x t -> t a i I ) ; 

} 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 

{ 

B Struct  Context  *context; 

B int  error  =0; 

B pgpAssert  (myself); 

B pgpAssert  (myself->magic  ==  DEARHORMAGIC); 

B context  = (struct  Context  * ) my s e I f ->p r i v ; 

B pgpAssert  (context); 

B pgpAssert  ( c on t e x t -> t a i I ) ; 

B if  (bytes) 

B B return  0; 

B /*  There  are  no  more  bytes.  Therefore  this  is  the  EOL.  */ 

B context->eol  = 1; 

B /*  Call  write  to  purge  out  anything  we  might  have  buffered.  */ 

B (void)  Write  (myself,  NULL,  0,  Serror); 

B if  (error) 

B B return  error; 

B if  ( c on t ex t ->p a r t ) { 

B B / * 

C[CHK:11cc61277f55a098aa2663011c5776ff4460bb67775660221bb0fbee8d845febe:: 
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n n * If  we  have  a part,  end  it,  flush  the  current 

n n * message,  and  reset  the  context  state, 

n n * / 


n n / * 

n n * Check  if  this  is  a cLearsigned  message  that  is 

n n * incomplete.  If  it  is,  kill  it  now! 

n n */ 

n n if  ( con t ex t ->pa r t ->s i g &&  I con t e x t ->pa r t ->msg->f ou n d pa r 1 1 ) 
a n n (void)0; 

□ n 

n n context -> state  = 26; 

n n (void)  Write  (myself,  NULL,  0,  &error); 

n n if  (error) 

n n n return  error; 

n } 

n / * 

n * If  we  have  data  buffered  at  this  point,  we  return  an  error 

n * code  to  let  the  caller  know  that.  If  we  miss  a part  of  a 

a * multipart  message,  this  will  be  the  case.  The  user  will 
n * receive  the  error  message  and  can  then  send  annotations  to 
n * figure  out  what  is  missing  and  possible  send  it  or  at  least 

n * inform  the  user, 

n * 

n * This  keeps  the  data  consisent  and  doesn't  propagate  a 

n * sizeAdvise()  in  the  wrong  scope, 

n * / 


n if  ( c on t ex t ->s c ope_de p t h ) 
n n return  0; 

n if  ( context->msgs ) 

n n return  PGPERR_PARSEASC_INCOMPLETE; 

n /*  Bytes  is  zero  */ 

n return  c on t ex t -> t a i I -> s i z e Ad v i s e ( con t ex t -> t a i I , bytes); 
} 


static  struct  Message  * 

getHessageNumber  (struct  Context  *ctx,  int  num) 
{ 

n struct  Message  *msg; 

n msg  = ctx->msgs; 

n while  (msg)  ( 

n n if  ( msg->ms g _numbe r ==  num) 
n n n returnmsg; 

n a msg  = msg->next; 

n } 

n return  NULL; 

> 


static  int 

sendStatus  (struct  PgpPipeline  *myself,  int  type,  byte  const  *string, 
n size_t  size) 

{ 

n struct  Context  *ctx  = (struct  Context  *)myself->priv; 


CCCHK:e8aa79cd344f7676607dcbca87533a88dff07aab28775320dc6556a3e69205a1b:] 


Pretty  Good  Privacy  5.0^^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1212 


pgpPrsAsc.c 


n struct  Message  *msg; 

n struct  HsgPart  *part; 

n int  count; 


n (void)size;nn  /*  Avoid  warning  */ 
n switch  (type)  { 

a case  PG P A N N_P A R S E A S C _HS G_C 0 U NT : 
n n return  ctx->msg_count; 

n case  PG P ANN_ P A R S E A S C_M S G_ LE F T : 
n n msg  = ctx->msgs; 

n n count  =0; 

n n while  (msg)  ( 

n n n count++; 

n n n msg=msg->next; 

n n > 

n n return  count; 

a case  PG P AN N_ P A R S E A S C _M S G_C U R R E NT : 

n a /*  Return  the  pointer  to  the  currently  writing  message  */ 
n n msg  = ctx->msgs; 

n n while  (msg)  { 

a n n if  ( ms g -> w r i t i ng ) 

n n n n break; 

n a a msg  = msg->next; 

n n > 

n n if  (msg) 

n n n return  msg->msg_numbe r ; 

n n return  0; 

a case  PG P AN N_ P A R S E A S C _H S G_P ART S : 

n n /*  Return  the  number  of  parts  in  the  message  */ 
n n pgpAssert  (size  ==  sizeof  (int)); 

n n msg  = getMessageNumber  (ctx,  ((int  *)  string)C03); 
n n if(!msg) 

a n n return0; 

n n return  msg->size; 

n case  PGPANN  PARSEASC  MSG  PARTINFO: 


n 

n 

/*  Return  information  about  part  H of  message  N */ 

n 

n 

pgpAssert  (size  ==  (2  * sizeof  (int))); 

n 

□ 

msg 

= getMessageNumber  (ctx,  ((int  *)  string)C03); 

n 

□ 

if  ( 

! msg  ) 

□ 

Q 

n 

return  0; 

□ 

n 

count  = ((int  *)  string )C1D; 

□ 

n 

part 

= msg->parts; 

n 

D 

wh  i L 

e (part)  { 

n 

o 

a 

if  (part->num  ==  ( u n s i g n e d ) c ou n t ) 

n 

Q 

u 

B return  (part->done  ? 1 : 2); 

D 

n 

n 

if  (part->num  > ( uns i gned ) count ) 

□ 

n 

n 

n return  1; 

□ 

a 

a 

part  = part -> next; 

Q 

n 

> 

n 

□ 

pgpAssert  (Ipart); 

n 

n 

return  2; 

□ 

> 

return  0; 


/*  Send  an  annotation  */ 
static  int 

sendAnnotate  (struct  Context  *ctx,  struct  PgpPipeline  *origin,  int  type, 
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□ 

{ 

D 

n 

□ 

n 

> 


byte  const  *string,  size_t  size) 
pgpAssert  (ctx->taiL); 
if  ( c t x->b u f f e r i ng ) 

n return  b u f f e r An  no t a t i o n (ctx,  origin,  type,  string,  size); 
return  c t x-> t a i L ->a n no t a t e (ctx->taiL,  origin,  type,  string,  size); 


static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 
n int  error; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  D E A RMORM AG  I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n pgpAssert  (context -> tail); 


n switch  (type)  ( 

n case  PG P AN N_P AR S E AS C_H SG_C OU NT : 
n case  PG P AN N_P A R S E AS C_H SG_ LE FT : 
n case  PG PANN_P A R S E AS C_M SG_C U R R E NT : 
n case  PGPANN_PARSEASC_HSG_PARTS : 
n case  PG PAN N_P A R S E A S C_H SG_P ART  I N F 0 : 

a n return  sendStatus  (myself,  type,  string,  size); 

n > 


n if  ( PGP_I S_EN D_S COPE  (type)  &&  c on t ex t ->a n no t a t i on  SS 
a context->scope_depth  ==  c on t ex t ->d e p t h _a t _a n n ) C 

n n error  = sendAnnotate  (context,  myself,  c on t ex t ->a n n o t a t i on , 
Q a □ □ NULL,0); 

n a if  (error) 

n n n return  error; 

n n context->annotation  = 0; 

n } 


n error  = sendAnnotate  (context,  origin,  type,  string,  size); 
n if  (lerror) 

n n PGP_SCOPE_DEPTH_UPDATE  ( c on t e x t -> s c ope_de p t h , type); 
n pgpAs se r t ( con t ex t->s cope_dep t h !=  -1); 

n return  error; 

} 


static  void 

Teardoun  (struct  PgpPipeline  *myself) 
{ 

n struct  Context  *context; 

n struct  Message  *msg,  *temp; 


pgpAssert  (myself); 
pgpAssert  ( my s e I f ->ma g i c 


DEARMORMAGIC); 


CCCHK:47dd888555a18f077a669744103f687442c5911c77c2c2200b2b3003cc3ccfecf:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1214 


pgpPrsAsc.c 


n context  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (context); 


o 

for 

(msg  = context->msgs; 

msg;  msg  = temp)  { 

n 

□ 

temp  = msg->next; 

a 

a 

freeMessage  (context. 

msg  ) ; 

n } 

n if  ( c o n t e X t -> t a i L ) 

B B c o n t ex t -> t a i L -> t e a rd o wn  ( c on t e x t -> t a i L ) ; 

B pg p F i f o D e s t r oy  ( c o n t e x t ->f i f od , c on t e x t ->d a t a ) ; 

B pgpFifoDestroy  (context ->fifod,  context ->ann); 

B memset  (context,  0,  sizeof  (*context)); 

B pgpMemFree  (context); 

B memset  (myself,  0,  sizeof  (*myseLf)); 

B pgpMemFree  (myself); 

} 

struct  PgpPipeline  ** 

pg pPa r s e As c C r ea t e (struct  PgpPipeline  **head,  struct  PgpEnv  const  *env, 

B B struct  PgpFifoDesc  const  *fd, 

B B struct  PgpUICb  const  *ui,  void  *ui_arg) 

{ 

B Struct  PgpPipeline  *mod; 

B Struct  Context  *context; 

B struct  PgpFifoContext  *data,  *ann; 

B if  (!head  ||  !env) 

B B return  NULL; 

B parseAscInit  (); 

B context  = (struct  Context  *)pgpMemAlloc  (sizeof  (*context)); 

B i f ( ! context ) 

B B return  NULL; 

B mod  = (struct  PgpPipeline  * ) pg pHemA I I o c (sizeof  (*mod)); 

B if  (!mod)  { 

B B pgpMemFree  (context); 

B B return  NULL; 

B > 

B data  = pg p F i f o C r e a t e (fd); 

B if  (!data)  { 

B B pgpMemFree  (context); 

B B pgpMemFree  (mod); 

B B return  NULL; 

B > 

B ann  = pg p F i f o C r ea t e (fd); 

B if  (!ann)  { 

B B pgpFifoDestroy  (fd,  data); 

B B pgpMemFree  (context); 

B B pgpMemFree  (mod); 

B B return  NULL; 

B } 

B mod->magic  = DEARMORHAGI C; 

B mod -> write  = Write; 
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n mod->fLush  = Flush; 

n mod-> s i z e Ad V i s e = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod-> t e a r do wn  = Teardown; 

n mod->name  = "Ascii  Armor  Parser  Module"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 

n context->fifod  = fd; 

n c on t ex t ->da t a = data; 

n context ->ann  = ann; 

a context->datapt r = co n t ex t ->da t a bu f ; 

n context->a rmorpt r = c on t ex t ->a rmo r I i n e ; 

n context->myself  = mod; 

n context ->env  = env; 

n context->ui  = ui; 

n context->ui _a rg  = ui_arg; 

#if  MIHEPARSE 

n c o n t ex t ->no_m i me_h ea de r s = pgpenvGetInt  (env,  PG PE N V_ PG PH  I M E P AR S EBO  D Y , 

n B B NULL,  NULL) ; 

#endi f 


n c on t e X t -> t a i I = *head; 

B *head  = mod; 

B return  &cont ext->ta i I ; 
} 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpPrsAsc.h  --  An  Ascii  Armor  Parser  for  PGP. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r dan  I T . E D U> 

★ 

* $Id:  pg p P r s As c . h , V 1.4. 2.1  1997/06/07  09:50:57  mhw  Exp  $ 

*/ 

#ifndef  PGPPRSASC_H 
#define  PGPPRSASC.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 

struct  PipeLine; 

#ifndef  T YPE_ P I P E L I N E 

#define  TYPE.PIPELINE  1 

typedef  struct  PipeLine  PipeLine; 

#end  i f 

struct  PgpEnv; 

#ifndef  TYPE.PGPENV 

^define  TYPE.PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

Send  i f 

struct  PgpFifoDesc; 

Sifndef  T Y P E_PG P F I F 0 D E S C 

Sdefine  T Y PE_PG P F I FO D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

Sendi  f 

struct  PgpUICb; 

Sifndef  TYPE.PGPUICB 

Sdefine  TYPE.PGPUICB  1 

typedef  struct  PgpUICb  PgpUICb; 

# e nd i f 

struct  PgpPipeLine  PGPExport  **pg p Pa r s e A s c C r ea t e (struct  PgpPipeLine  **head. 


n 

o 

Q 

n 

n 

struct 

PgpEnv  const  *env. 

o 

n 

n 

n 

n 

struct 

PgpFifoDesc  const  *fd 

Q 

n 

n 

a 

n 

struct 

PgpUICb  const  *ui. 

n 

Q 

Q 

a 

□ 

void  * 

ui.arg); 

Sifdef  __cpLuspLus 
} 

# e n d i f 

Sendif  /*  PGPPRSASC  H */ 
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/* 

* 

* 

* 

* 

* 

★ 

*/ 


pgpRadix64.c  --  Define  the  armor  Table  for  6-bit  integer  to  character 
conversion. 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
$Id:  pg p R a d i x64 . c , V 1.1. 2.1  1997/06/07  09:50:58  mhw  Exp  $ 


#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

#end i f 

#incLude  "pgpRadix64.h" 

/*  This  is  are  table  of  6-bit  value  ->  character  */ 
char  const  a r mo r Ta b I e C 6 5 D = 

"ABCDE FGHIJKLHNOPQRSTUVWXYZabcdefghijkLmnopqrstuvwxyz01 23456789+/"; 
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/* 

* pgpRad i x64 . h --  The  header  for  Radix64  encoding, 

* which  is  used  by  ASCII  Armor. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpRadi x64 . h,v  1.3. 2.1  1997/06/07  09:50:58  mhw  Exp  $ 

*/ 

#ifndef  PGPRADIX64_H 
#define  PGPRADIX64_H 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 

extern  char  const  a r mo r Ta b L e C 6 5 D ; 

#ifdef  __cpLuspLus 
} 

#endi  f 

#endif  /*  PGPRADIX64_H  */ 


i;[CHK:601  493e1d822333eadd224a337c1eeadf]: 
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Makefile.in 

# 

tf  Lib/pgp/pipe/parser/Hakefi  Le.in 
It 

ft  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

U $Id:  Makef i Le . i n,v  1.15.2.4  1997/06/07  09:50:59  mhw  Exp  $ 
tf 

LOCALINCLUDES=  - I ../../ i n c L ud e 

0BJS  = n pgpPrsBin.o  pgpReadAnn.o  pg p V e r i f y Ra . o pg pV r f y S i g . o 
SHAREDHDRS=  pgpPrsBin.h  pgpReadAnn.h  pgpVe r i f yRa  . h 

a L L : : DONE 
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U 

# Lib/pgp/pipe/parser/makefi Le.msc 

# 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

It 

It  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:50:59  mhw  Exp  $ 

It 

CFLAGS=  -I . . \ \ \ . \i nc lude  -I . . \ \ \ i n c L ud e \ 
n -I . . \ \ \ . -DHAVE_C0N FIG_H  $(DEBUG) 

PGPLIB=..\..\..\pgpLib.Lib 

a L L : : Q Lib 

headers:n  incL 

lincLude  " ma ke f i L e . i n " 

i n c L : 

a if  not  "$(SHAREDHDRS)"==""  \ 

n n for  %f  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ \ i n c L u d e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( $(PRIVHDRS)  ) do  copy  %f  . . \ \ \ i n c L u d e 

D0S0BJS=  $(OBJ S : . 0= . ob j ) 

Lib:n  $(DOSOBJS) 

. c . ob  j : 

n $(CC)  $(CFLAGS)  -17  -c  $< 

c L ea  n : 

n de  L * . ob j 

DONE  : 

n if  exist  SCPGPLIB)  L i b / ou t : $ ( PG PL  I B ) $(PGPLIB)  SCOOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpPrsBin.c  — Binary  Parser 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  CoLin  PLumb  and  Derek  Atkins  <warLordaMIT.EDLI> 

* 

* $Id:  pgpPrsBi n . c, V 1.9. 2. 3 1 997/06/07  09:51  : 00  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#incLude  <stdio.h> 


# i n c L ud e 

"pgpDebug . h" 

#i nc  Lude 

"pgpPktByte . h" 

#i nc  L ude 

"pgpPrsBin.h" 

#i nc  Lude 

"pgpAnnotate  . h 

#incLude 

"pgpC  FB . h" 

# i n c L ude 

"pgpCipher.h" 

#incLude 

"pgpCiphrMod.h 

#i nc  Lude 

"pgpCompress  . h 

SincLude 

" pgpCompMod . h " 

#i nc  Lude 

"pgpFIFO.h" 

#incLude 

"pgpHash.h" 

# i n c L ud e 

"pgpHashMod.h" 

# i n c L ude 

"pgpHeader.h" 

#incLude 

"pgpHem. h" 

#i nc  Lude 

"pgpEnv. h" 

#incLude 

"pgpErr.h" 

#incLude 

"pgpPipeLine.h 

#i nc  Lude 

"pgpSi g . h" 

# i n c L ud e 

"pgpTextFi Lt.h 

#i nc  Lude 

"pgpUsuaLs.h" 

^define  P AR S E RM AG  I C n0x f e ed f 00d 

/*  OnLy  accept  this  much  data  per  caLL  to  parsePacket  */ 

#define  P A RS E R_S I Z E_ LI H I Tb  512 

/* 

* There  are  two  formats  for  PGP  packets.  Both  are  equivalent  as  far  as 

* the  rest  of  the  code  is  concerned. 

* The  original  PGP  packet  format: 

* - Packet  byte:  10ttttLL,  where  tttt  = packet  type,  and  LL  = Length  of  Length 

* - Length  fieLd,  1/2/4/0  bytes,  big-endian,  based  on  LL  bits 

* - Body 

* This  format  is  simpLe  and  smaLL,  but  requires  knowing  the  size  of  the 

* encLosed  data  before  you  can  emit  the  Length  fieLd. 

* 

* The  one-pass  PGP  3 format: 

* - Packet  byte  litttttt,  where  tttttt  = packet  type 

* - Zero  or  more  non-finaL  subpackets,  starting  with  a byte  of  the  form 

* lllsssss,  foLLowed  by  2^s  bytes  of  data 

* - A finaL  subpacket,  which  starts  with  either  0sssssss,  10sssssss, 

* or  110SSSSS  ssssssss,  hoLding  up  to  2^7  + 2''6  + 2''13  - 1 bytes. 

* (The  formats  encode  Lengths  of  0-127,  128-191,  and  192-8383  bytes.) 
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Generally,  a PGP  implementation  will  emit  non-final  subpackets  in  the 
IK  to  8K  range,  followed  by  one  final  subpacket.  However,  any  size 
may  be  used,  down  to  one  byte.  This  flexibility  allows  data  to  be 
flushed  out  and  a stream  to  be  brought  up  to  date  at  any  byte  boundary 
by  emitting  a combination  of  non-final  subpackets  which  sum  to  the 
desired  boundary. 

To  keep  track  of  both  of  these  formats,  there  is  a struct  Header, 
which  describes  the  parsing  state  of  the  current  subpacket  header  on 
an  arbitrary  byte  boundary.  It  has  three  members: 
lenbytes  - the  count  of  the  number  of  bytes  remaining  in  the 

current  big-endian  subpacket  size.  This  may  be  as  large 
as  4.  As  additional  bytes  are  read,  lenbytes  is  decremented 
and  "pktlen"  is  increased  with  the  appropriately  shifted 
byte. 

more  - a flag  which  is  true  if  the  current  subpacket  is  non-terminal, 
so  another  subpacket  is  expected. 

pktlen  - the  length  of  the  current  subpacket.  If  lenbytes  is  non-zero, 
the  value  here  is  an  underestimate.  When  this  is  0,  a new 
packet  or  subpacket  (depending  on  the  more  flag)  is  expected. 

To  keep  track  of  the  state  of  the  input  stream,  a Header  structure  is 
used,  but  data  that  has  already  been  read  from  the  Header  structure 
is  kept  around  as  well.  There  are  two  data  structures  for  this: 

- The  FIFO  contains  a copy  of  the  raw  input  data  up  to  the  point 
marked  by  "passptr". 

- The  buffer,  which  also  holds  a prefix  of  the  input  data,  but  a 
parsed  version.  A portion  of  the  two  overlap,  and  what  can  be 
kept  in  the  buffer,  is.  This  always  includes  the  tail  of  the  last 
subpacket  that  has  been  read.  If  this  is  also  the  first  subpacket, 
nothing  actually  needs  to  get  copied  to  the  FIFO  at  all. 

The  buffer  ends  up  looking  like  this: 


/ passptr  - First  byte  not  passed  through  to  FIFO. 

I 

V 

+ + 

I I 

+ + 

A A 


I \ bufend  - End  of  packet  header/start  of  read-ahead 

\ bufptr  - Beginning  of  intra-packet  header 

It  works  like  this:  The  data  from  the  FIFO,  plus  passptr  through  bufend, 
is  the  raw  data  that's  been  processed.  Passptr  is  usually  before 
bufptr,  with  the  gap  filled  by  the  packet's  external  header 
(packet  header  byte  plus  length  or  first  subpacket  header),  and 
then  bufptr  through  bufend  is  shared  between  the  two. 

If  the  amount  of  header  data  needed  exceeds  the  size  of  the  first 
subpacket,  then  the  data  up  to  and  including  the  second  subpacket 
header  is  copied  to  the  FIFO,  and  as  much  of  the  second  subpacket  as 
is  needed  is  read  into  the  buffer  immediately  following  the  first 
subpacket,  with  no  intervening  subpacket  header,  and  "passptr"  is 
set  to  point  to  the  beginning  of  the  second  subpacket  data. 
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* 

* The  data  between  bufend  and  readptr  is,  however,  raw  input  data 

* including  subpacket  headers  that  have  not  yet  been  parsed. 

*/ 

/*  Size  of  buffer  - must  hold  a whole  ESK  or  SIG  packet  */ 

/*  4096  bit  ElGamal  ESK's  will  be  a bit  over  1024  */ 

#define  MAXPKTSIZEn  n 1100 


s t a t i c 

Q n 
s t a t i c 
a n 
stat  i c 
Q n 
s t a t i c 
□ a 


size_t  nextScope  (struct  PgpPipeline  *myself,  byte  const  *buf, 
n size_t  size,  int  *error); 
size_t  nextESK  (struct  PgpPipeline  *myself,  byte  const  *buf, 
size_t  size,  int  *error); 

size_t  parsePacket  (struct  PgpPipeline  *myself,  byte  const  *buf, 
n size_t  size,  int  *error); 

size_t  parseKey  (struct  PgpPipeline  *myself,  byte  const  *buf, 
n size_t  size,  int  *error); 


/*  Information  needed  to  parse  a subpacket  header  */ 
struct  Header  { 

n word32  pktlen;n  n /*  Length  of  current  subpacket  */ 

n unsigned  lenbytes;n  /*  Number  of  length  bytes  to  come  */ 

n byte  more;n  n /*  More  subpackets  to  come  */ 

>; 

/*  Information  needed  to  parse  a data  stream  */ 
struct  Input  { 

n byte  bu  f f e r C H AX  PKT  S I Z E II  ; n /*  Buffer  of  parsed  data  */ 

n struct  PgpFifoContext  *fifo;n  /*  FIFO  of  raw  data  */ 

n byte  const  *passptr;n  /*  Pointer  into  buffer  */ 

n byte  const  *bufptr;n/*  Pointer  into  buffer  */ 

n byte  *bufend;n  n /*  Pointer  into  buffer  */ 

n struct  Header  head;n/*  Current  subpacket  status  */ 

n byte  s i I e n t _ t r u n c ; n /*  Complain  if  out  of  input?  */ 

>; 

struct  Context  { 
n struct  Input  input; 

n struct  PgpPipeline  *tail; 

n struct  PgpPipeline  *nextparser; 

n struct  PgpPipeline  **end; 

n struct  Pg p Ha s h C on t e X t *hashes; 

n struct  PgpEnv  const  *env; 


n 

a 

int  numhashes; 
int  state ;n  n 

/* 

Used 

my  bumerous  parse  functions  */ 

tt 

int  end_scope;B 

s 

/* 

Annotation  at  end  of  this  scope. 

or  0 * / 

n 

byte  subtype;n 

n 

/* 

Type  of  literal  packet  (t  vs.  b) 

*/ 

□ 

int  sig1pass;n 

n 

/* 

Within  1-pass  signature  scope  */ 

H 

int  sig1nest;n 

□ 

/* 

Number  of  unpaired  Ipass  headers 

nested  */ 

n 

u 

/*  Flags  */ 
byte  sepsig;n 

D 

/* 

1-pass  separate  signature  */ 

u 

byte  findpkt,-n 

□ 

/* 

Searching  for  a new  packet  */ 

u 

by t e eof ; n n 

/* 

No  more  input  available,  ever  */ 

u 

byte  needcallba 

c k ; 

>; 


/*  Return  true  if  the  end  of  the  current  packet  has  been  reached  */ 
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static  int 

i npu t F i n i shed ( s t r u c t Header  const  *head) 

{ 

n return  !head->pktLen  S&  !head->lenbytes  &&  !head->more; 

> 


/* 

* Return  a pointer  to,  and  then  Length  of,  the  subpacket  header  at  the 

* current  position  in  the  input  buffer,  using  the  context  of  "head". 

*/ 


static  byte  const  * 

i n pu t H ea d Pe e k ( s t r u c t Header  const  *head,  byte  const  *buf,  size_t  size. 


si z e_  t 

*Len) 

□ 

pgpAssertCbuf  | | 

! s i z e ) ; 

n 

i f 

( head->  L enby t 

e s ) { 

n 

n 

*Len  = (size 

< head-> L enby t es  ) 

a 

n 

return  buf; 

o 

> 

a 

if 

(head->pkt  Len 

) { 

o 

n 

* 1 en  = 0 ; 

n 

Q 

return  buf; 

D 

> 

a 

i f 

( ! head->more) 

{ 

a 

n 

* L en  = 0 ; 

a 

Q 

return  (byte 

const  *)0; 

a 

> 

o 

if 

( ! s i z e ) { 

a 

n 

* L e n = 0 ; 

o 

n 

return  buf; 

n 

> 

a 

if 

((bufC0II  S 0xe0)  ==  0XC0  &&  size 

a 

n 

* L e n = 2 ; 

a 

else 

a 

n 

*Len  = 1; 

a 

return  buf; 

} 

/* 

★ 

Skip 

the  upcoming 

header,  adjusting 

•k 

Return  the  number 

of  bytes  consumed 

*/ 

stat  i c 

s i ze_t 

i nputHeadSeekCst ruct  Header  *head,  byte  const  *buf,  size_t  size) 
{ 

n unsigned  i; 

n unsigned  char  b; 


n /*  No  data,  don't  care  */ 
n if  (!size) 

a n return  0; 

n pg p As s e r t ( b u f ) ; 

n /*  If  we're  in  the  middle  of  a header,  read  the  tail  of  it  */ 
a if  ( head-> L enby t es  ) f 
n n if  (size  > h ea d-> L enby t e s ) 

n n n size  = ( s i z e_ t ) h ea d-> L enby t e s ; 
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n 


□ 


o 


n 


Q 


□ 


n 


Q 


n 


n 


i = ( uns i gned ) s i ze; 
do  { 

a h e a d->p k t L e n +=  ( wo rd32  ) *buf + + <<  (8*  — h e a d-> L e nby t e s ) ; 
> while  (--i); 
return  size; 


n 


> 


n /*  Are  we  not  at  the  end  of  a packet?  */ 

n if  ( h ea  d->p  k t L en  | | ! h ea  d->nio  r e ) 

n n return  0; 


n /*  Otherwise,  we're  starting  a new  subpacket  header  */ 
n b = bufC0]; 
n if(b<0xc0){ 
n n head->pktLen  = (word32)b; 
n n head->more  = 0; 

a > else  if  (b  < 0xe0)  f 

a n head->pktLen  = ((word32)b  <<  8)  - (0xc000  - 0xc0); 
n n head->more  = 0; 

0 n if(size==1){ 

n n n head-> L enby t es  = 1; 
a B } e L se  { 

n B B head->pktLen  +=  (word32)buf[I13; 

B B B return2; 

B B > 

n } else  if  (b  >=  0xe0)  { 

B B head->pktLen  = (word32)1  <<  (b  S 31); 

n > 

n return  1; 

> 

static  void 

1 n p u t R e s e t ( s t r u c t Input  *input) 

{ 

n i npu t ->pa s s p t r = i n pu t ->b u f p t r = i n pu t ->bu f e nd  = i n pu t ->bu f f e r ; 
B i nput->head . pkt Len  = 0; 
n i n pu t ->h ea d . I e n by t e s = 0; 

B input->head.more  = 0; 


> 


/* 

* Start  parsing  a packet  with  the  given  header  byte. 

* Returns  0 if  it's  a normal,  good  header  byte,  and  -1 

* if  it's  a bogus  header  byte,  in  which  case  the  rest  of  the 

* input  is  taken  as  the  body. 

*/ 

static  i n t 

i npu t S t a r t ( s t r u c t Input  *input,  byte  b) 

{ 

n /*  Store  first  byte  in  buffer  */ 

B input ->passptr  = input -> buffer; 

n input ->bufferC0]  = b; 

n i npu t ->bu f e nd  = i n pu t ->bu f f e r+ 1 ; 
n i n pu t ->h ea d . p k t I en  = 0; 

n if  (IS_NEW_PKTBYTECb)  ) { 

B B /*  New  style  */ 
n B input -> head. lenbytes  = 0; 

[;i:CHK:171e711ebff464a4036c29d559ec577fd0905399b27cf5fe18f7a00decaef4142]: 
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n n i n pu  t ->h e a d . tno  r e = 1; 

n n i n pu t ->s i L e n t _ t r u n c = 0; 

n } else  if  ( I S _0 LD_ PKTB YT E ( b ) ) { 
n n /*  Old  style*/ 

n n i nput->head . Lenbytes  = LL E N_T0_B YT E S ( PKTB YT E_ LLE N ( b ) ) ; 
n n i nput->head . more  = 0; 

n n input ->siLent_trunc  = 0; 

n n if  (PKTBYTE_LLEN(b)  ==  3)  i 

n n n i n p u t -> s i L e n t _ t r u n c = 1; 

n n n i np u t ->h ea d . p k t L en  = (word32)-1; 

n n } 

a } e L s e { 

n n /*  Erroneous!  */ 

n n i n pu t ->bu f p t r = i np u t ->b u f f e r ; 

n n i nput->head . pkt Len  = (word32)-1; 
n a input -> head. Lenbytes  = 0; 

n B i npu t -> h e a d . mo r e = 0; 

B B i npu t -> s i L e n t _ t r un c = 1; 

B B return  -1; 

B > 

B /*  Usual  case  wrapup  */ 

B i n pu t ->bu f p t r = i n pu t ->bu f e n d ; 

B return  0; 

> 


/* 

* Return  a pointer  to,  and  the  Length  of,  the  next  available  packet  payload 

* bytes.  These  bytes  will  come  from  either  the  read-ahead  buffer  or  the 

* input  buffer  (buf,  size),  as  appropriate.  Returns  a NULL  pointer  when 

* there  is  no  more  data  available  in  the  packet.  If  "size"  is  0 and 

* this  is  not  the  end  of  the  packet,  this  returns  the  "buf"  pointer, 

* which  may  or  may  not  be  NULL,  at  the  caller's  discretion. 

■k 

* This  may,  in  some  situations  (Like  when  "size"  is  1 and  sitting 

* on  a subpacket  header),  return  the  "buf"  pointer  but  a zero  Length 

* even  when  size  is  non-zero. 

* In  that  case,  the  current  packet  is  not  finished,  but  no  data  is  available 

* in  the  current  input  buffer.  You  need  to  call  inputSeek(0)  to  give 

* it  a chance  to  consume  the  current  input  buffer. 

*/ 

static  byte  const  * 

inputPeekCstruct  Input  const  *input,  byte  const  *buf,  size_t  size,  size_t  *Len) 
{ 

B /*  If  we  have  no  buffer,  then  size  must  be  0 */ 

B pgpAssert (buf  ||  Isize); 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  If  we  have  data  buffered,  use  that.  */ 
if  ( i npu t -> b u f e nd  !=  i npu t ->b u f p t r ) ( 

B *Len  = (size_t)(input->bufend  - input->bufptr); 

B return  i n pu t ->bu f p t r ; 

I 

I* 

* If  we  are  in  the  middle  of  a subpacket  header,  no  data  available, 

* but  more  to  come. 

*/ 

if  ( i npu t -> h e a d . L enby t e s ) ( 

B *Len  = 0; 

B return  buf; 
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□ 

} 

n 

/* 

n 

* 

If  we're  at  the  end  of  a subpacket,  no  data  available. 

a 

★ 

there  may  or  may  not  be  more  to  come. 

□ 

*/ 

n 

i f 

( ! input 

->head. pktLen)  ( 

n 

a 

* L e n = 

0; 

n 

a 

return 

i nput->head . more  ? buf  : 0; 

u 

> 

n 

/* 

Return 

the  appropriate  data  from  the  input  buffer  */ 

Q 

i f 

(size  > 

input->head. pktLen) 

n 

a 

size  = 

(size_t)input->head. pktLen; 

n *Len  = size; 

n return  buf; 

> 

/* 

* Skip  over  "Len"  bytes  (where  Len  <=  the  amount  returned  from  the  Latest 

* call  to  inputPeek!)  of  input  from  the  input  stream  (either  the  context 

* buffer  or  the  supplied  external  buffer). 

*/ 

static  size_t 

i n p u t S e e k ( s t r u c t Input  *input,  byte  const  *buf,  size_t  size,  size_t  Len) 

{ 

n pgpAssert(buf  ||  !size); 

n /*  If  we  have  data  in  the  input  buffer,  skip  that  */ 
n if  ( i n pu t ->bu f e n d !=  i n pu t ->bu f p t r ) ( 

a n pgpAssert ( Len  <=  ( s i z e_ t ) ( i np u t ->bu f end  - i npu t ->bu f p t r ) ) ; 

n n i nput->buf pt r +=  Len; 

n n return  0; 

n } 

n /*  Hake  sure  the  skip  is  Legal  */ 
n pgpAssert(!Len  ||  !input->head.Lenbytes); 

n pgpAssert(Len  <=  input -> head. pktLen); 
n pg p A s s e r t ( L e n <=  size); 

n /*  Skip  the  data  */ 
n i nput->head . pkt Len  -=  Len; 

n /*  Skip  any  additional  header  that  follows  */ 
n return  Len  + inputHeadSeek(&input->head,  buf+Len,  size-Len); 

> 

/* 

* Copy  the  input  buffer  to  the  FIFO. 

*/ 

static  int 

i npu t To F i f o ( s t r u c t Input  *input) 

{ 

n size_t  Len,  written; 

a Len  = ( s i z e_ t ) ( i n p u t ->bu f e nd  - i n pu t ->pa s s p t r ) ; 
n if  (Len)  ( 

n n written  = pgpFifoWrite  ( &pg pBy t e F i f o D e s c , input->fifo, 

n n n a a input->passptr,  Len); 
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Q 

B 

input->passptr 

+ = 

written; 

Q 

B 

i f 

(written  != 

1 en  ) 

n 

B 

B 

return  PGPERR 

_ N 0 n E M ; 

n 

> 

B 

return 

0; 

} 


/* 

* Try  to  ensure  that  the  next  "desired"  bytes  of  input  are  contiguous 

* and  thus  inputPeek  will  return  them  in  one  call.  This  will  copy 

* bytes  from  the  external  buffer  to  the  input  buffer.  If  it  does, 

* the  number  of  bytes  copied  is  returned. 

* 

* If  this  needs  to  squeeze  subpacket  header  bytes  out  of  the  read-ahead 

* buffer  to  make  the  buffer  contiguous,  it  copies  the  bytes  to  the  FIFO 

* so  they'll  be  available  for  raw  reading. 

*/ 

static  size_t 

i n pu t He r g e ( s t r u c t Input  *input,  byte  const  *buf,  size_t  size,  unsigned  desired, 
int  *error) 

{ 

n size_t  size0; 

n size_t  s,  t; 

n unsigned  avail; 

n pgpAssertCbuf  ||  !size); 


*error  = 0;n/*  No  error  */ 

s = ( s i ze_t ) ( i npu t->buf end 
if  ( s >=  des i red ) 


- i npu t ->bu f p t r ) ; 


B 

B 

return 

0; 

B 

desi red 

- = 

(unsigned)s; 

B 

s i ze0  = 

s i 

ze; 

B 

B 

u h i L 

e (desired  &&  size)  ( 

B 

B 

/* 

Suck  in  the  following  header,  if  any  */ 

B 

B 

i f 

( ! i 

npu t H ea d Pee k ( & i n pu t ->h ea d , buf,  size,  &s)) 

B 

B 

fl 

break;n  /*  End  of  packet  */ 

B 

B 

/* 

If 

we  have  a header,  deal  with  it.  */ 

fl 

B 

if 

(s) 

( 

B 

B 

fl 

/* 

B 

B 

fl 

* 

Do  something  with  the  header  - put  it  in 

B 

B 

B 

★ 

before  bufptr  if  possible,  or  in  the  FIFO 

B 

fl 

B 

*/ 

B 

fl 

B 

if 

( i nput->buf pt r ==  i nput->buf end)  ( 

B 

fl 

B 

fl 

memc py ( i npu t ->bu f end , buf,  s); 

B 

fl 

B 

fl 

( VO i d ) i n pu t H e a d S e e k ( & i n pu t -> h ea d,  buf,  s 

B 

B 

B 

B 

i n pu t ->bu f p t r = i nput->buf end  +=  s; 

B 

B 

fl 

B 

buf  + = s ; 

B 

fl 

fl 

fl 

size  -=  s; 

B 

B 

fl 

> 

else  { 

B 

fl 

B 

fl 

/*  Write  what's  already  in  the  buffer  */ 

B 

B 

B 

fl 

*error  = inputToFifo(input); 

B 

fl 

fl 

B 

if  (*error) 

B 

fl 

fl 

B 

n break; 

B 

B 

B 

fl 

/*  Write  the  current  header  to  the  FIFO 
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Q 

n 

n 

n t = pgpFifoWrite  ( &pg pBy t e F i f o D e s c , 

□ 

n 

o 

n n a input->fifo,  buf,  s); 

n 

a 

n 

n C voi d) i nputHeadSeek(&i nput->head,  buf 

n 

n 

□ 

B bu  f +=  t ; 

n 

n 

n 

B s i ze  -=  t ; 

□ 

n 

n 

B if  (t  !=  s)  { 

H 

u 

□ 

B B *error  = PG P E R R_N OH  EM ; 

n 

Q 

n 

B B break; 

n 

n 

B 

B > 

D 

o 

B 

} 

n 

n 

> 

u 

n 

/* 

Normal  data  to  be  copied  */ 

n 

n 

avail  = desired; 

n 

n 

i f 

(avail  > size) 

s 

n 

B 

avail  = ( un s i g n ed ) s i z e ; 

D 

n 

1 f 

(avail  > i npu t ->hea d . p k t 1 e n ) 

n 

n 

B 

avail  = ( u n s i g n e d ) i n pu t -> h e a d . p k t 1 e n ; 

Q 

n 

5 

= input->buffer+sizeof(input->buffer)-input 

Q 

n 

if 

(avail  > s)  { 

□ 

n 

B 

if  ( ! s) 

n 

n 

B 

B break; 

n 

□ 

B 

avail  = (unsigned)s; 

□ 

n 

> 

n 

a 

mem c py C i npu t -> bu f e nd , buf,  avail); 

n 

a 

i n p u t ->bu f end  +=  avail; 

n 

n 

i nput->head . pkt 1 en  -=  avail; 

n 

□ 

s i 

ze  -=  avail; 

H 

n 

desired  -=  avail; 

a 

> 

n 

return 

si ze0-si ze; 

/*  Return  true  if  there's  more  packet  in  here  than  uiLL  fit  */ 
static  int 

i npu t 0 ve r f u L L ( s t r uc t Input  const  *input) 

{ 

n return  i nput->buf end  ==  i n p u t ->b u f f e r + s i z e o f ( i n pu t ->bu f f e r ) && 
n n !inputFinished(&input->head); 

> 


/*  How  many  merged  bytes  are  available?  */ 
static  size_t 

i n p u t He r g ed ( s t r u c t Input  const  *input) 

{ 

n return  ( s i z e_ t ) ( i n pu t ->bu f e nd  - i n pu t ->bu f p t r ) ; 

> 

/*  Pointer  to  the  merged  bytes  */ 
static  unsigned  char  const  * 
i n p u t H e r g e d P t r ( s t r u c t Input  const  *input) 

{ 

n return  i nput->buf pt r; 

> 


/* 

* Return  a buffer  and  length  corresponding  to  the  next  batch  of 
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* raw  (unparsed)  characters  in  the  current  packet. 

* The  bytes  might  come  from  one  of  three  places: 

* - The  FIFO  where  they  have  been  copied  by  i n pu t He r g e ( ) 

* - The  input  buffer 

* - the  passed-in  external  buffer 

* In  the  latter  case,  this  parses  ahead  in  the  input  buffer  as  many 

* subpackets  as  possible  to  give  the  largest  block  of  data  possible. 

* 

* Returns  NULL  with  a length  of  0 if  there  are  no  more  bytes  in  the  current 

* packet.  Returns  "buf"  with  a length  of  0 if  size  is  0. 

* That  may  or  may  not  be  NULL,  depending  on  the  caller. 

*/ 


static  byte  const  * 

i npu t Ra wPee k( s t r u c t Input  const  *input,  byte  const  *buf,  size_t 
s i ze_t  * I en ) 

{ 

n byte  const  *p; 
n size_t  s; 

n size_t  size0; 

n unsigned  ulen; 
n struct  Header  head; 

n pgpAssert (buf  ||  !size); 

□ 

n /*  Try  the  byte  FIFO  */ 

n p = pgpFifoPeek  ( &pg pBy t e F i f o De s c , input->fifo,  &ulen); 
n if  ( p ) { 

n n *len  = ( s i ze_t ) u I en; 
n n return  p; 

n > 

n /*  Then  the  buffered  data  */ 
n if  ( i npu t->pa s sp t r !=  i n pu t ->b u f e nd  ) { 

n n *len  = i nput->buf end  - i n pu t ->pa s s p t r ; 
n n return  i np u t ->pa s s p t r ; 
n } 

n /*  Finally,  the  external  buffer  */ 

n size0  = size; 

n p = buf ; 

n head  = input->head; 

n while  (size  &&  ! i n pu t F i n i s h e d ( &h e a d ) ) ( 
n n s = inputHeadSeek(&head,  p,  size); 
n n size-=s; 

n n if  (!size) 

n n n break; 

n n p +=  s; 

n n if  (size  <=  head.pktlen)  { 
n n n size=0; 

n n n break; 

n n } 

n n size  -=  head.pktlen; 

n n p +=  head.pktlen; 

n n head.pktlen  = 0; 

n } 

n *len  = size0  - size; 
n return  buf; 


size. 
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/* 


Skip  forward  over  a given  number  of  bytes  of  raw  input  data. 
The  number  of  bytes  must  be  <=  the  number  returned  from 
i nputRawPeekC ) . 


* 

★ 

* 

* 

* 

★ 

*/ 

static  size_t 

i npu t Ra wS ee k ( s t ru c t Input  *input,  byte  const  *buf,  size_t  size,  unsigned  Len) 
{ 


The  FIFO  and  buffered  data  are  simple.  If  those  are  empty, 
parse  forward  in  the  external  buffer  until  the  desired  number  of 
bytes  have  been  skipped,  then  store  the  parsing  state. 


n 

s i 

z e _ t s ; 

Q 

p g p A s s e r t ( bu f ||  !size); 

□ 

/* 

If  there's  data  in  the  FIFO,  skip  that.. 

. */ 

n 

i f 

(pgpFifoSize  ( &pg pBy t e F i f o D e s c , i npu t -> f i f o ) ) 

{ 

n 

B 

pgpFifoSeek  ( &pg pBy t e F i f o D e s c , input->f 

i f 0 , 

len) 

Q 

B 

return  0; 

n 

> 

n 

/* 

Otherwise  the  buffered  data  */ 

n 

i f 

( i npu  t->pa  s s p t r !=  i nput->buf  end  ) ■( 

o 

B 

pgpAssertClen  <=  ( s i z e_ t ) ( i n p u t ->bu f e nd 

- input- 

n 

B 

i n pu t ->pa s s p t r +=  len; 

□ 

B 

if  ( i nput->buf pt r < i n p u t ->pa s s p t r ) 

n 

B 

n input->bufptr  = input->passptr; 

n 

B 

return  0; 

n 

> 

n 

/* 

Finally,  the  external  buffer  */ 

n 

pgpAssertClen  <=  size); 

n 

s i 

z e = len; 

a 

while  (size)  { 

n 

B 

s = i nputHeadSeek(8i nput->head,  buf,  si 

ze); 

B 

B 

size  -=  s ; 

n 

B 

if  (lien) 

B 

B 

n break; 

B 

B 

buf  + = s ; 

B 

B 

if  (size  <=  i nput->head  . pkt  len)  { 

B 

B 

a i n pu t ->h e a d . p k t 1 e n -=  size; 

B 

B 

a break; 

B 

B 

} 

B 

B 

size  -=  i n pu t -> h e a d . p k t 1 e n ; 

B 

B 

buf  +=  i n pu t -> h e a d . p k t 1 e n ; 

B 

B 

i npu t -> h ea d . p k t 1 e n = 0; 

B 

> 

B 

> 

return  len; 

/* 

Get 

rid  of  the  header  we've  processed  from  the  system 

static  void 

i npu t Pu rge ( s t r u c t Input  *input) 

{ 

n pgpFifoFlush  (&pgpByteFifoDesc,  input->fifo); 
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n input->passptr  = input->bufptr  = input->bufend  = input->buffer; 
} 

/* 

* Write  all  the  already-buffered  bytes  from  the  current  packet. 

* Return  an  error,  if  any  is  encountered. 

*/ 

static  int 

DoRawFLush  (struct  Context  *ctx,  struct  PgpPipeline  *tail) 

{ 


□ 

int  error  = 0; 

Q 

s i ze_t 

len; 

Q 

byte  const  *p; 

a 

do  ( 

n 

n p = 

i n pu t Ra w Pe e k ( 8 c t x-> i n p u t , NULL,  0,  8len); 

o 

n if 

( !p) 

n 

n D 

break; 

n 

n len 

= tail->write  (tail,  p,  len,  8error); 

n 

n ( VO i d ) i n pu t Ra w S e e k ( 8 c t x-> i n pu t , NULL,  0,  len); 

n 

} while 

( lerror); 

D 

return 

error; 

> 

static  size_t 

DoSkip  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *ctx; 

n size_t  size0  = size; 

n byte  const  *p; 

n size_t  len; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S E RH AG  I C ) ; 


n 

C t X 

= 

(struct  Context  * ) my s e 1 f ->p r i v ; 

a 

pgpAssert  (ctx); 

a 

pgpAssert  (error); 

a 

pgpAssert  (Isize  ||  !ctx->eof); 

a 

♦error 

= 0; 

a 

inputPurge  (8ctx->input); 

a 

for 

(; 

;)  < 

a 

a 

p 

= inputPeek(8ctx-> input,  buf,  size,  8len); 

a 

a 

i f 

( ! p)  { 

a 

a 

a 

if  (inputFinished(8ctx->input.head)) 

{ 

a 

a 

a 

n /*  End  of  input  */ 

a 

a 

a 

n my s e 1 f ->w r i t e = nextScope; 

a 

a 

a 

n size  -=  nextScope  (myself,  buf. 

size. 

a 

a 

a 

> 

a 

a 

a 

break; 

a 

a 

> 

a 

a 

1 f 

(!len  88  tsize) 

a 

a 

a 

break; 

a 

a 

len  = i npu t S ee k ( 8c t x-> i npu t , buf,  size. 

len); 
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n n size-=len; 

B B buf  +=  Len; 

B } 

B return  size0-size; 

> 

/* 

* Write  out  the  a s -y e t -u n r ea d body  of  this  packet  to  the  tail  of  this  module. 

* At  the  end  of  the  packet  ( i npu t F i n i s h e d ) , set  the  state  back  to 

* nextScope . 

*/ 

static  size_t 

DoWrite  (struct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 

{ 

B Struct  Context  *ctx; 

B size_t  Len; 

B size_t  size0  = size; 

B byte  const  *p; 

B pgpAssert  (myself); 

B pgpAssert  ( my s e L f ->ma g i c ==  P A R S E RM AG  I C ) ; 

B ctx  = (struct  Context  * ) my s e I f ->p r i v ; 

B pgpAssert  (ctx); 

B pgpAssert  (ctx->taiL); 

B pgpAssert  (error); 

B pgpAssert  (!size  ||  !ctx->eof); 


B *error  = 0; 


n 

do 

n 

B 

P = 

i nputPeek(&ctx->i nput,  buf,  size,  &Len); 

n 

B 

i f 

( ! p)  { 

n 

B 

fl 

if  ( i n pu t F i n i s h ed ( & c t x->  i n pu t . h ea d ) ) ( 

□ 

fl 

B 

B /*  End  of  i nput  */ 

n 

B 

B 

B my s e 1 f -> w r i t e = nextScope; 

Q 

fl 

fl 

B size  -=  nextScope  (myself,  buf,  size,  error); 

□ 

B 

B 

} 

n 

B 

B 

break; 

a 

B 

> 

Q 

B 

i f 

( ! 1 en  S&  ! s i ze ) 

B 

B 

B 

break; 

B 

B 

Len 

= c t x-> t a i L ->w r i t e (ctx->taiL,  p,  Len,  error); 

B 

fl 

Len 

= i n pu t S ee k ( & c t x-> i n p u t , buf,  size,  Len); 

fl 

B 

size  -=  Len; 

B 

B 

buf 

+ = L e n ; 

fl 

> 

while 

(!*error); 

B 

return 

si ze0-si ze; 

} 

/* 

* Write  out  a series  of  packets  to  the  tail  of  this  module,  keeping 

* track  of  packet  boundaries,  and  counting  pairs  of  signature  headers 

* and  footers.  When  come  to  an  unpaired  footer,  exit  to  process  it. 

*/ 
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static  size_t 

DoW r 1 t eS i gnedPa c ke t s ( s t ru c t PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size, 
a int*error) 

{ 

n struct  Context  *ctx; 

n size_t  ten; 

a size_t  size0  = size; 

n byte  const  *p; 

n byte  b ; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S E RM AG  I C ) ; 

n ctx  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

n pgpAssert  (error); 

n pgpAssert  (!size  ||  !ctx->eof); 


n *error  = 0; 


n switch  (ctx->state)  { 
a case  0 : 

n n /*  Here  at  the  start  of  a packet  */ 


a a inputReset(&ctx->input); 


a a if  (!size) 

a a n return  0;a  /*  I need  a packet  header!  */ 


a a 

Q □ 

n □ 

a a 

a a 

a a 

n D 

a □ 

□ n 

a a 

□ □ 

n n 

a a 

a a 

a a 

n □ 

D a 

n □ 

a a 


/* 

* Track  signature  nesting. 

* siginest  holds  the  excess  Ipass  sig  hdrs  we've  seen 

* Ue  distinguish  old-style  sig  packets  from  new  style  by 

* whether  the  packet  type  byte  is  old  or  new  style. 

*/ 

if  ( IS_NEW_PKTBYTE( buf C0:  ) ) { 
a byte  bt  = PKTBYTE_TYPE ( buf [03 ) ; 
a if  (bt==PKTBYTE_SIG  &&  c t x->s i g 1 n e s t ==0 ) i 
a a /*  This  footer  is  what  we  are  looking  for  */ 
a a myself->write  = nextScope; 

a n size  -=  nextScope  (myself,  buf,  size,  error); 

a a break; 

a } else  if  ( b t ==PKTB YT E_ 1 P AS S S I G ) { /*  sig  header  */ 
a a ++ ctx -> siginest; 

a } else  if  ( b t ==PKTB YT E_S I G ) C /*  sig  footer  */ 
a a --ctx->si g1 nest  ; 

a > 

} 


a a /*  Else  read  and  pass  on  this  packet  */ 
a n b = *(buf++); 

a a size--; 

a a if  ( i npu t S t a r t ( &c t x-> i npu t , b)  < 0)  { 

a a a pgpAssert  (0);b  /*  what  to  do  here?  */ 

n n > 
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□ 

n 

ctx 

->state++; 

n 

n 

/* 

FALLTHROUGH  */ 

n 

case 

: 1 : 

n 

Q 

while  ( ! i n p u t F i n i s h ed ( & c t x-> i n p u t . h ea d ) ) { 

Q 

n 

n 

p = i n p u t Ra w Pe e k ( & c t x-> i n pu t , buf,  size,  &len); 

n 

n 

n 

if  (lien) 

n 

n 

n 

H return  size0-size; 

a 

n 

□ 

len  = c t x-> t a i 1 -> w r i t e ( c t x-> t a i 1 , p,  len,  error); 

n 

□ 

n 

len  = i n pu t Ra w S e e k ( & c t x-> i n p u t , buf,  size,  len); 

n 

□ 

Q 

size  -=  len; 

n 

n 

n 

buf  +=  len; 

n 

n 

□ 

if  (*error) 

Q 

□ 

□ 

n return  size0-size; 

n 

n 

> 

n 

□ 

/* 

Here  at  end  of  packet  */ 

□ 

n 

ctx 

->state  = 0; 

n 

u 

break; 

n 

> 

n 

H 

n 

return 

size0-size; 

} 

/* 

* This  function  flushes  the  raw  header  bytes  from  the  beginning  of 

* the  parser's  buffer  "over"  the  following  module  on  to  the  following 

* parser,  then  falls  through  to  writing  the  payload  bytes  to  the  following 

* module  and  the  header  bytes  "over"  it. 

*/ 

static  size_t 

DoWriteNext  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n int*error) 

{ 

n struct  Context  *ctx; 

n byte  const  *p; 

n size_t  size0  = size; 

n size_t  len; 

n struct  PgpPipeline  *tail,  *next; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S E RH AG  I C ) ; 

n ctx  = (struct  Context  *)myself->priv; 
a pgpAssert  (ctx); 

a pgpAssert  (ctx->tail); 

n pgpAssert  ( c t x->n e x t pa r s e r ) ; 
n pgpAssert  (error); 

n pgpAssert  (!size  ||  !ctx->eof); 


n 

next 

= 

ctx->nextparser; 

a 

*e  r r 0 r 

= 0; 

n 

for 

) { 

n 

Q 

p = 

inputRawPeek(&ctx->input,  NULL,  0,  &len); 

n 

n 

i f 

( ! len) 

Q 

a 

□ 

break; 

n 

a 

len 

= next->write  (next,  p,  len,  error); 
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n 

B 

( VO i d ) i n p u t Ra w S e e k ( & c t x-> i n pu t , NULL,  0, 

Len); 

n 

B 

1 f 

(♦error) 

Q 

B 

B 

return  0; 

n 

} 

Q 

tail  = 

ctx->tai L; 

Q 

do 

□ 

B 

P 

= inputHeadPeek(8ctx->input.head, 

buf  , 

size. 

8Len); 

□ 

B 

if 

(len)  { 

n 

B 

B 

Len  = nex t ->w r i t e ( next , p,  Len, 

error); 

a 

B 

B 

(void)inputHeadSeek(&ctx->input 

.head 

, buf. 

len); 

D 

B 

B 

buf  +=  Len; 

Q 

B 

B 

size  -=  Len; 

D 

B 

> 

else  { 

n 

B 

B 

p = i nputPeek(8ctx->i nput,  buf. 

size 

, 8 1 en  ) 

B 

B 

B 

if  (len)  { 

n 

B 

B 

n Len  = t a i L ->w r i t e ( t a i L , p. 

Len, 

error); 

B 

B 

fl 

n /*  Note  double  "Len"  to  prevent 

header 

skip  ♦ / 

B 

B 

B 

n Len  = i n pu  t S e e k ( 8 c t x->  i np  u t 

, buf 

, len. 

Len); 

B 

B 

B 

n buf  +=  Len; 

B 

B 

B 

n si ze  -=  Len; 

B 

B 

B 

} else 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

if 

(♦error) 

fl 

B 

B 

return  size0-size; 

B 

> 

while  (size); 

B 

/* 

If 

that's  the  end  of  this  packet,  continue  with 

the  next 

B 

1 f 

(inputFinished(&ctx->input.head))  ( 

B 

B 

/* 

End  of  input  ♦/ 

B 

B 

my self -> write  = nextScope; 

B 

B 

s i 

ze  -=  nextScope  (myself,  buf,  size,  error); 

n } 

n return  size0-size; 

} 

/* 

* This  function  is  called  when  we  are  checking  the  signature  on  a literal 

* packet.  The  reason  it  is  needed  is  that  signatures  are  only  on  the  BODY 

* of  the  literal  packet,  not  the  headers.  OOPS.  So  find  the  size  of 

* the  literal  packet  header  and  pass  it  (external  header  and  internal 

* header)  "over"  the  hash  module  to  the  ctx->nextpa rser  using 

* DoWriteNext. 

* 

* This  does  NOT  report  errors  on  a short  or  truncated  Literal  packet,  since 

* we're  pretending  not  to  be  parsing  it  - the  downstream  parser  will 

* notice  it  and  do  any  necessary  complaining.  It  DOES,  however,  try 

* to  write  out  such  packets  to  the  downstream  parser  so  it  can  do  the 

* reporting. 

*/ 

static  si ze_t 

pa r seS i gnedLi t e ra L Mag i c (struct  PgpPipeline  *myseLf, 

byte  const  *buf,  size_t  size,  int  *error) 

{ 

n struct  Context  *ctx; 

n size_t  ten; 
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n byte  const  *p; 

n size_t  size0  = size; 

n pgpAssert  (myself); 

n pgpAssert  (myse L f->mag i c ==  PA R S E RH AG  I C ) ; 

n ctx  = (struct  Context  *)myseLf->priv; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

n pgpAssert  (error); 

« pgpAssert  (!size  ||  !ctx->eof); 

n /*  Make  sure  nothing  confusing  can  happen  here!  */ 

« pgpAssert(!ctx->needcaLLback); 

n /*  Do  NOT  complain  on  truncation.  */ 
n ctx -> input. silent_trunc  = 1; 

n /*  No  error  until  told  otherwise  */ 
n *error  = 0; 


n switch  (ctx->state)  C 

n case  0:n  /*  Get  packet  header  byte  */ 

n n if  (Isize) 

n n n returnO; 


n 

Q 

□ 

n 

n 

n 

n 

n 

Q 

Q 

n 

□ 

Q 

B 

n 

D 

n 

a 

n 

a 

n 

n 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  We  know  it*s  a Literal  packet,  so  no  worries.  */ 
(void)inputStart(&ctx->input,  *buf); 
b u f + + ; 
s i ze--; 
ctx->state++; 

/*  FALLTHROUGH  */ 

case  1:n  /*  Get  internal  header  */ 

len  = i npu t Me r ge ( & c t x->i npu t , buf,  size,  2,  error); 
buf  +=  Len; 
size  -=  Len; 
if  (*error) 
n break; 

p = inputPeek(&ctx-> input,  NULL,  0,  &Len); 


if 

(Len 

< 2)  { 

B 

if  ( 

!inputFinished(&ctx->input.head)) 

a 

a 

break; 

> 

else  { 

B 

Len 

= i npu t He rg e ( &c t x->i npu t , buf,  size,  6 + pC1D, 

B 

□ 

n error); 

B 

buf 

+=  Len; 

B 

size 

-=  Len; 

B 

if  ( 

*e  r ro  r ) 

B 

a 

break; 

B 

i f ( 

i npu t He r g ed ( &c t x-> i npu t ) < ( s i z e_t ) 6 + p C 1 ] ) { 

B 

D 

if  ( ! inputFinished(&ctx->input.head) ) 

B 

n 

n break; 

B 

> 

n > 

a /*  We*ve  got  as  much  as  we  need  */ 
a ctx->state++; 

a my se L f ->w r i t e = DoWriteNext; 

a size  -=  DoWriteNext  (myself,  buf,  size,  error); 
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a o break; 

□ default: 

n n pgpAssert(0); 

n > 

n return  size0-size; 

> 


/* 

* 

This  function  just 

does 

a 

1 i tt 

L e 

bit  of  tri 

vial 

initialization. 

* 

including  setting 

the  state  to 

0, 

and  then 

falls  through 

t 0 

* 

pa  rseSi gnedLi tera  IMagi c 

. 

The 

D 0 

functions 

can 

be  called 

from  a 

* 

variety  of  states. 

due 

t 0 

the 

way 

they  are 

set 

up  from  callbacks 

★ 

that  may  be  called 

from 

a 

va  r i 

e t y 

of  states 

, so 

they  can 

' t depend 

★ 

*/ 

the  ctx->state.  Thus, 

the 

need  for  this  Li 

1 1 L e 

wrapper 

function. 

static  size_t 

DoSi gnedLi tera LHagi c (struct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size, 
n n int*error) 

{ 

n struct  Context  *ctx; 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  PARSERMAGIC); 

n ctx  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert  (ctx); 

n pgpAssert  (ctx->tail); 
n pgpAssert  (error); 

n pgpAssert  (!size  ||  !ctx->eof); 

n /*  Hake  sure  nothing  confusing  can  happen  here!  */ 
a pgpAssert( !ctx->needcallback); 

n /*  Do  NOT  complain  on  truncation.  */ 
n ctx->input.siLent_trunc  = 1; 

n /*  Reset  state  for  pa r seS i g ned Li t e ra I Mag i c */ 
n ctx->state  = 0; 

n myself->write  = parseSignedLiteralMagic; 

n return  parseSignedLiteralHagic(myself,  buf,  size,  error); 

> 

/* 

* Pass  through  the  full  ciphertext  of  the  current  packet,  headers  and 

* all,  to  the  tail  module 
*/ 

static  size_t 

DoPassthrough  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n int*error) 

{ 

n struct  Context  *ctx; 

n size_t  size0  = size; 

n byte  const  *p; 
n si ze_t  len; 

n struct  PgpPipeline  *tail; 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  PARSERMAGIC); 
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n ctx  = (struct  Context  *)myseLf->priv; 
n pgpAssert  (ctx); 

n tail  = ctx->taiL; 

n pgpAssert  (tail); 

n pgpAssert  (error); 

n pgpAssert  (!size  {|  !ctx->eof); 


n *error  = 0; 

n /*  empty  out  the  buffered  data  and  then  the  packet  */ 
n for  (;;)  ( 

n n p = inputRawPeek(&ctx-> input,  buf,  size,  &Len); 

n n if  (!Len) 

n a n break; 

n n Len  = tail->write  (tail,  p,  Len,  error); 

n n Len  = inputRawSeek  ( & c t x-> i n pu t , buf,  size,  Len); 

n n buf  +=  Len; 

n n size  -=  Len; 

n n if  (*error) 

a n n return  size0-size; 

a } 


n 

□ 

n 

□ 

n 

n 


/*  If  that's  the  end  of  this  packet,  continue  with  the  next.  */ 
if  ( i nput Fi ni shed  ( &c t x-> i npu t . h e a d ) ) { 
a /*  End  of  input  */ 
a my s e L f -> w r i t e = nextScope; 

a size  -=  nextScope  (myseLf,  buf,  size,  error); 

} 


a return  size0-size; 

> 


/* 

* Tear  down  the  pipeLine  connected  to  our  taiL  for  the  processing  of  the 

* current  packet.  This  is  the  pipeLine  starting  with  ctx->taiL  and 

* ending  at  *ctx->end.  Note  that  myseLf  may  be  zero  Length,  i.e. 

* ctx->end  ==  &ctx->taiL! 

*/ 

static  void 

pa rsePi pe L i neTea rdown  (struct  Context  *ctx) 

{ 

a struct  PgpPipeLine  *temp; 


a pgpAssert  (ctx -> end); 


n / * 

a * End  the  pipeLine  I created,  tear  it  down,  and  re-attach  the 
a * original  pipeLine 

n * / 

a temp  = *(ctx->end); 
a *(ctx->end)  = NULL; 

n / * 

a * Make  sure  this  isn't  a zero-Length  pipeLine,  since  ctx->end 

a * can  point  to  the  address  of  ctx->taiL! 

n * / n 

a i f ( ctx->ta i L ) 

a a c t x-> t a i L -> t ea r do wn  (ctx->taiL); 
a ctx->taiL  = temp; 
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n ctx->end  = NULL; 
} 


/* 

* Given  a candidate  encryption  key,  verify  it  against  the  IV  that  we  have 

* stored  in  the  buffer.  If  it  checks,  return  the  Pg p C f b C o n t ex t set  up 

* to  decrypt  the  rest  of  the  packet.  Otherwise,  return  NULL. 

*/ 

static  struct  Pg p C f b C on t e x t * 

CheckKey  (struct  Context  *ctx,  byte  const  *string,  size_t  size,  int  *error) 
{ 

a byte  bufCIVLEN]; 
n struct  PgpCfbContext  *cfb; 

n struct  PgpCipher  const  *cipher; 

n unsigned  char  const  *p; 


I guess?  */ 


n 

s i ze_t  ten; 

n 

1 f 

( ! s i z e ) { 

n 

n 

‘error  = PGPERR 

_BAD_KEYLEN;n/‘ 

Urn  , 

n 

n 

return  (struct 

PgpCfbContext 

★ 

)0; 

n 

> 

n 

cipher  = pgpC i phe rByNumbe r (stringC03) 

n 

if 

(!cipher)  { 

Q 

n 

‘error  = PGPERR 

_BAD_CIPHERNUH 

/ 

n 

n 

return  (struct 

PgpCfbContext 

★ 

)0; 

n 

> 

a 

i f 

(size  !=  cipher- 

>keysize+1)  t 

n 

n 

‘error  = PGPERR 

_BAD_KEYLEN; 

n 

n 

return  (struct 

PgpCfbContext 

★ 

)0; 

n 

> 

□ 

cfb 

= pgpCf bC  reate 

(cipher); 

n 

i f 

( ! cf b)  { 

n 

n 

‘error  = PGPERR 

_N0MEf1; 

D 

n 

return  (struct 

PgpCfbContext 

* 

)0; 

p = i n pu t Pee k C & c t x-> i npu t , NULL,  0,  8Len); 
pg p A s se r t ( L en  >=  IVLEN); 
pgpCfblnit  (cfb,  string+1,  NULL); 
pgpCf bDecrypt  (cfb,  p,  buf,  IVLEN); 


if  (buf CIVLEN-2:  !=  bufClVLEN-4: 
n pg pC f b D e s t r oy  (cfb); 
n ‘error  = PG P E R R_C AN N 0T_ D E C R Y PT ; 
n return  (struct  PgpCfbContext  *)0; 


bufCiVLEN-i:  !=  buf CIVLEN-33)  { 


pgpCfbSync  (cfb); 
‘error  = 0; 
return  cfb; 


/‘ 

★ 

★ 

★ 

★ 


Process  one  of  the  incoming  annotations  that's  expected  in  response  to 
one  of  our  own  annotations.  These  can  happen  either  during  the 
c t x-> t a i L->a nno t a t e ( ) call,  or  after  that  call  has  returned  an  error 
to  the  top  Level,  which  makes  the  call  in  turn.  Either  way,  we  have 


CCCHK: 5001 1d13c9dfef0ff2c8f450ddee5ddecf6bb32d66261daa8fe447376c4d 8226833 


Pretty  Oood  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1242 


pgpPrsBin.c 


* to  change  state  approprai te Ly . 

* 

* Currently,  there  are  4 things  that  can  be  done  with  any  given  packet: 

* - Eat  it  silently.  No  data  will  be  emitted  before  the  end  scope 

* annotation. 

* - Pass  it  through  as  ciphertext. 

* - Decode  it,  and  pass  the  body  through  as  plaintext.  The  body  is  *not* 

* parsed  further. 

* - Decode  it  and  parse  it  recursively. 

* 

* The  latter  two  options  depend  on  the  type  of  packet  we're  inside,  as 

* recorded  in  the  c t x->e nd_s c o p e variable.  They  do  some  special 

* processing  setting  up  a pipeline  to  do  the  decoding,  then  everyone 

* appends  another  parser  to  the  chain  and  sets  things  up  to  write  the 

* packet  body  to  the  decoding  pipe. 

*/ 

static  i n t 

ProcessCa I Iback  (struct  PgpPipeline  *myself,  int  type, 
byte  const  *string,  size_t  size) 

{ 

n struct  Context  *ctx  = (struct  Context  * ) my s e I f -> p r i v ; 
n struct  PgpPipeline  *oldhead; 

n struct  PgpCfbContext  *cfb; 

n int  error  = 0; 

n pgpAssert ( ctx->needca I Iback) ;n  /*  Maybe  a less  nasty  failure?  */ 

n pg p A s s e r t ( ! c t x->e nd ) ; n /*  This  will  change  in  future,  but  for  now  */ 

n i f ( ! c t x->end  ) 

n n ctx->end  = &ctx->tail; 

H oldhead  = *ctx->end; 

n *ctx->end  = NULL; 

n /*  The  other  option  is  to  make  this  illegal...  */ 
a if  ( ctx->end_scope  ==  PG P AN N_NON P A C KET_ EN D 8& 

(type  ==  PGPANN_PARSER_PROCESS  ||  type  ==  PG P ANN_P AR S E R_R E C U R S E ) ) 
n n type  = PG P A N N_P A RS E R_P A S S T H ROU G H ; 

n /*  Type  will  ONLY  be  one  of  these!  */ 
n switch  (type)  { 

a case  PG P AN N_P AR S E R_ E AT  I T : 
n n my s e I f -> w r i t e = DoSkip; 

n n break; 

n case  PG P AN N_P A R S E R_P AS  ST H ROU G H ; 


s 

n 

i f 

(ctx->end_scope 

==  PGPANN_PGPKEY_END ) { 

□ 

n 

B 

/*  Passthrough 

is  unreasonable  on  keys 

n 

n 

B 

type  = PGPANN_ 

PARSER_PROCESS; 

n 

n 

B 

break; 

n 

n 

> 

n 

n 

C t X 

->end  = pg p H ea d e r C r e a t e (ctx->end); 

a 

n 

i f 

(lctx->end)  { 

a 

n 

B 

error  = PGPERR 

_N0HEH; 

Q 

B 

B 

break; 

Q 

B 

> 

Q 

B 

my se  l f ->w r i t e = DoPa s s t h r oug h ; 

Q 

B 

break; 

a case  PG P ANN_ P AR S E R_ P RO C E S S : 
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n 

case 

PGPANN 

_PARSER_RECURSE : 

a 

n 

s w i 

t c h 

( c t x-> e n d_ s c 0 pe ) { 

u 

n 

case  PGPANN_LITERAL_END : 

n 

a 

a 

if 

(type  ==  PGPANN_PARSER_RECURSE  SS 

a 

a 

a 

ctx->subtype  ==  't')  { 

□ 

a 

a 

n 

byte  const 

*chartiiap; 

a 

n 

D 

a 

cha  map  = 

(byte  const  *) 

□ 

a 

□ 

□ 

n pg pen vG e t Po i n t e r 

a 

Q 

a 

n 

n (ctx->env,  PG P E N V_ C H A RM A PTO LO C A L, 

a 

n 

D 

a 

n NULL, 

N U L L ) ; 

n 

a 

n 

n 

/*  Recurse 

means  filter  the  text  */ 

a 

n 

a 

Q 

ctx->end  = 

pgpTex t F i 1 t C rea t e (ctx->end 

a 

n 

n 

a 

□ an 

charmap. 

Q 

a 

a 

□ 

□ n n 

0, 

#i  f 

d e f i 

ned(MSDOS) 

n 

a 

n 

n 

a a a 

PGP_TEXTFILT_CRLF 

#eLif  def ined(MACINTOSH) 
n Q n n n □ I 

#eLse  /*  UNIX  */ 
n Q n n □ □ } 


PGP  TEXTFILT  CR 


PGP  TEXTFILT  LF 


# e n d i f 
Q a 


n 

o 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

D 

n 

n 

Q 

n 

n 

D 

n 

n 


n 

Q 

n 

Q 

□ 

n 

o 

n 

D 

n 

n 

Q 

n 

n 

n 

□ 

□ 

n 

D 

n 

n 

Q 

n 

□ 

a 

n 

n 

n 

n 

n 

n 

D 

n 

n 

n 

Q 


□ 
i f 

Q 

□ 

> 


n n ) ; 

(!ctx->end)  -C 
error  = PGPERR_NOMEM; 
break; 


> 

type  = 
break; 


PGPANN. PARSER. PROCESS; 


n 
n 
n 
n 

Q 
Q 
n 
n 

case  PGPANN.CIPHER.END: 

n cfb  = CheckKey  Cctx,  string,  size,  &error); 
n if  (!cfb) 

n n brea  k; 

n ctx->end  = pg p C i p h e r Hod D e c ry p t C r ea t e (ctx->end,  cfb,  ctx->env); 
n if  ( ! c t x->end  ) 

n n error  = PGPERR.NOMEH; 

n break; 

case  PGPANN.COHPRESSED.END: 

n ctx->end  = pg p D e comp r e s s Hod C r e a t e (ctX“>end, 
n n n * i n pu t H e r g edP t r ( & c t x-> i npu t ) ) ; 

n if  C ! c t x->end  ) 

n n error  = PGPERR.NOHEH; 

n break; 

case  PGPANN_COHHENT_END: 
case  PGPANN.UN KNOWN. END: 
a type  = PGPANN. PARSER. PROCESS; 

a break; 

case  PGPANN.SIGNED.END : 
a if  ( c t x->ne X t pa r s e r ) 

a a type  = PGPANN.PARSER. PROCESS; 

a /*  Set  up  aLL  requested  hashes  */ 

a pg p A s s e r t ( ! c t x->ha s h e s ) ; 

a if  (!size) 

a a return  0; 

a /*  Get  all  the  Pg pHa s h C o n t ex t s */ 

a error  = pg pH a s h L i s t C r ea t e (string,  &ctx->hashes,  size); 
a if  (error  < 0) 

a a break; 
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n n 

a n 

n n 

□ n 

n n 

Et  □ 

n n 

□ a 

□ □ 

□ □ 

Q □ 

n D 

n n 

a n 

n □ 


n ctx->numhashes  = error; 
n /*  Hake  a pipeline  out  of  them  */ 
n ctx->end  = pgpHa s hHod Li s t C r ea t e (ctx->end, 
n n ctx->hashes, error); 

n if  (!ctx->end)  { 

n n pg p Ha s h L i s t D e s t r oy  ( c t x->h a s h e s , error); 
n n ctx-> hashes  = 0; 

n n error  = PG P E R R_N OH  EM ; 
a n break; 

n } 

n pgpAssert(inputFinished(&ctx->input.head)); 
o c t x-> i n p u t . h ea d . p k t L en  = -luL;  /*  Write  through  rest  */ 

n c t x-> i n pu t . s i I e n t _ t r un c = 1; 

n error  = 0; 
n break; 


n n case  PG P AN N_PG PKE Y_ E N D : 
a a o type  = PGPANN_PARSER_PROCESS; 

n n n break; 

n n default: 

ana  error  = PG P E R R_C B_ I N V A LI D ; 
n n > 


a a / * 

a a * Processing  for  all  packet  types...  set  up  parser  if 

n n * desired,  then  skip  any  header  prifix  in  the  buffer, 

n n * then  arrange  to  write  out  what  we  have, 

n n * / 

n n /*  If  we  want  to  create  a parser,  do  that  */ 

n n if  (lerror  &&  type  ==  PG P AN N_P A R S E R_R E C U R S E ) { 

a a a struct  PgpPipeline  **temp  = ctx->end; 

n n n byte  const  *charmap; 


n n 

Q □ 

n n 

n D 


n charmap  = (byte  const  *) 
n n pgpenvGetPoi nter  (ctx->env, 
n n n n PG PEN V_C H A RH APTO LO C A L, 

n n n n NULL,  NULL); 


n n 
Q a 
a a 
a a 
a □ 

D D 

n n 
n n 
n a 
□ □ 

□ n 
Q Q 
n Q 

□ a 
a a 
a a 
a a 
a a 
a a 
a a 


n ctx->end  = pgpParseBinCreate  (ctx->end,  ctx->env); 
n i f ( ! ctx->end) 
a a error  = PGPERR_NOHEH; 
n c t x->n ex t pa r s e r = *temp; 

> 

if  (lerror  &S  type  ==  PGPANN_PARSER_PROCESS ) ( 
n /*  Add  a header  if  appropriate  */ 
n switch  C c t x->end_  s c ope  ) ■( 
n case  PG P AN N_C I PH E R_ E N D : 
a case  PG P AN N_C OH  PR E S S E D_ E N D : 
n case  PG P ANN_ S I GN E D_ EN D : 

n B ctx->end  = pgpHeade rC rea t e (ctx->end); 

B B if  (!ctx->end) 

n B B error  = PGPERR_NOHEH; 

B > 

> 

/*  Success!  Flush  data  and  write  through  the  rest  */ 
if  (lerror)  { 

B if  ( ctx->end_scope  ==  PG P AN N_S I G N E D_ E N D ) { 

B B if  (ctx->state  >=  10) 
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n 

n 

B 

B 

n my  s e 1 f ->u  r i t e = D o S i g n ed  L i t e r a 1 Ma g i c ; 

□ 

B 

B 

B 

else  if  ( c t x-> s i g 1 pa s s ) 

n 

n 

B 

B 

n my  s e 1 f ->u  r i t e = Do  W r i t e S i g n ed  Pa  c ke  t s ; 

n 

B 

B 

B 

else  { 

□ 

B 

B 

B 

a inputPurge(8ctx->input); 

n 

B 

B 

B 

n my s e 1 f ->w r i t e = DoWrite; 

□ 

B 

B 

B 

} 

n 

B 

B 

> 

else  { 

n 

B 

B 

B 

if  ( c t x-> e nd_ s c 0 p e ==  PG P AN N _ PG PKE Y_ E N D ) 

□ 

B 

B 

B 

n my se 1 f->w r i t e = parseKey; 

n 

B 

B 

B 

else  { 

n 

B 

B 

B 

n inputPurge(&ctx->input); 

□ 

B 

B 

B 

n my se 1 f->w r i t e = DoWrite; 

□ 

B 

B 

B 

} 

n 

fl 

B 

> 

n 

B 

B 

break; 

a 

B 

> 

n 

B 

break; 

n 

default 

: 

n 

B 

error 

= PGPERR_CB_INVALI D; 

a 

> 

n 

i f 

(error) 

{ 

n 

B 

/* 

Get 

rid  of  partial  pipelines  (if  any)  */ 

□ 

B 

i f 

( ! 

*(ctx->end)  ) 

n 

B 

a 

ctx->end  = Soldhead; 

□ 

B 

pa rsePi pe 1 i neTea rdown  (ctx); 

□ 

> 

else 

{ 

n 

B 

/* 

Spl 

ice  the  new  into  the  old  */ 

n 

B 

*( ctx- 

>end)  = oldhead; 

n 

B 

ctx 

->needcallback--; 

n 

> 

Q 

return 

error; 

static  size_t 

parseLiteral  (struct  PgpPipeline  *tiiyseLf,  byte  const  *buf,  size_t  size, 
n n int  *error) 

{ 

n struct  Context  *ctx; 
n size_t  Len; 

n size_t  size0  = size; 
n byte  const  *p; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->mag i c ==  P AR S E RH AG  I C ) ; 
n pgpAssert  (error); 

n ctx  = (struct  Context  *)myseLf->priv; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

n pgpAssert  (!size  ||  !ctx->eof); 

n *error  = 0; 

n switch  (ctx->state)  ( 

o case  0 : 
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n 

a 

□ 

a 

n 

a 

Q 

□ 

□ 

a 

Q 


case  10:n  /*  flags  oldliteraL,  where  Length  doesn't  include  prefix  */ 

a o n /*  may  also  be  pgpHeader.c  packet,  type  'P'  */ 

/*  Parse  header;  needed  before  callbacks  are  allowed  */ 

Len  = inputHerge(&ctx->input,  buf,  size,  2,  error); 
buf  +=  Len; 
size  -=  Len; 
if  (*error  ||  !size) 
n break; 

/*  Size  is  non-zero  but  we  haven't  got  desired?  EOP  */ 
if  ( i nputMerged(8ctx->i nput ) < 2)  { 
n pgpAssert(inputFinished(&ctx->input.head)); 

□ 


terror  = c t x-> t a i L ->a n n o t a t e ( c t x -> t a i L , myself. 


Q 

□ 

B 

PGPANN_PACKET_SHORT, 

n 

n 

B 

B 

n a 0,0); 

a 

n 

B 

i f 

(*error) 

n 

n 

B 

B 

break; 

D 

n 

B 

my s e L f -> w r i t e = nextScope; 

n 

□ 

B 

size  -=  nextScope  (myself,  buf,  size,  error); 

H 

a 

B 

break; 

□ 

n 

> 

□ 

o 

P = 

: inputHergedPtr(8ctx-> input); 

□ 

n 

/* 

Deal 

with  "oldliteral"  packets  specially  */ 

n 

n 

if 

C c t X 

->state  ==  10)  { 

a 

□ 

B 

i f 

(p:03  ==  'P')  { 

n 

n 

B 

B 

/*  Special  PGP  3 header  */ 

u 

n 

B 

B 

my s e L f -> w r i t e = DoSkip; 

n 

n 

B 

B 

size  -=  DoSkip  (myself,  buf,  size,  error); 

n 

a 

B 

B 

break; 

□ 

a 

B 

> 

Q 

u 

B 

/* 

Else  old-style  packets;  some  PG P c ompa t i b L e program 

n 

u 

B 

/* 

□ 

n 

B 

it 

That  program  uses  "Literal"  Length  conventions,  not 

n 

Q 

B 

it 

"oldliteral",  so  don't  do  this: 

n 

□ 

B 

it 

a 

n 

fl 

★ 

if  ( c t x-> i npu t . h ea d . p k t L e n !=  ~0UL)  { 

□ 

Q 

B 

★ 

ctx->input.head.pktLen  +=  6 + pCID; 

n 

a 

B 

* 

> 

n 

a 

B 

*/ 

Q 

Q 

B 

C t X 

->state  = 0; 

□ 

Q 

} 

n 

a 

/* 

Get 

the  name  and  timestamp  fields  */ 

n 

□ 

L en 

= i 

nputHerge(8ctx->input,  buf,  size,  6+pC1D,  error); 

n 

n 

buf 

+ = 

Len; 

n 

n 

size  -= 

Len; 

n 

n 

i f 

(*error  ||  !size) 

u 

a 

B 

break; 

n 

Q 

/* 

Size 

is  non-zero  but  we  haven't  got  desired?  EOP  */ 

n 

n 

i f 

( i n pu t He r g e d ( 8 c t x-> i n pu t ) < ( u n s i g n e d ) 6 + p C 1 3 ) { 

n 

a 

B 

pgpAssert(inputFinished(8ctx->input.head)); 

n 

o 

B 

*error  = c t x-> t a i L ->a n n o t a t e ( c t x-> t a i 1 , myself. 

Q 

n 

B 

PGPANN_PACKET_SHORT, 

n 

n 

B 

B 

a a 0,0); 

n 

B 

B 

i f 

( *e  r ro  r ) 

a 

B 

B 

B 

break; 

Q 

B 

B 

my se L f->w r i t e = nextScope; 

n 

B 

B 

size  -=  nextScope  (myself,  buf,  size,  error); 

n 

B 

B 

break; 
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ctx->subtype  = pC0!l; 
n n ctx->needcaLLback  = 1; 

n n c t x->end_ s c o pe  = PG P AN N_ L I T E R A L_EN D ; 

n n *error  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  myself, 
n n PGPANN_LITERAL_BEGIN,  0,  0); 

n n if  (*error) 

n n n break; 


n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

n case  1 : 

n n p = i n p u t M e rg e d P t r ( & c t x-> i n p u t ) ; 

n n *error  = c t x-> t a i L ->a n n o t a t e (ctx->taiL,  myself, 
n n PGPANN_LITERAL_TYPE,  p,  1); 

n n if  (*error) 

n n n break; 

n n 

a n ctx->state++; 

a a /*  FALLTHROUGH  */ 

n case  2: 

n n p = i npu t Me r gedPt r ( &c t x-> i npu t ) ; 

n n *error  = c t x-> t a i I ->a n n o t a t e (ctx->tail,  myself, 
n n PGPANN_LITERAL_NAME, 

n n p + 2,(size_t)pC1!]); 

n n if  (*error) 

n □ n break; 


n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

n ca  se  3 : 

a a /*  Parse  4-byte  timestamp  */ 

n n p = inputMergedPtr(&ctx-> input); 

n n *error  = c t x-> t a i I ->a n no t a t e (ctx->tail,  myself, 
n n PGPANN_LITERAL_TIMESTAMP, 

n n p+2+pC1D,  4); 

n n if  {*error) 

n n n break; 


n 

□ 

n 

n 

□ 

□ 

D 

D 

□ 

a 

□ 

n 

n 

□ 

n 

n 

D 

D 

□ 


n ctx->state++; 
n /*  FALLTHROUGH  */ 
case  4 : 

n if  ( c t x->need ca I I ba c k ) { 

n n *error  = c t x-> t a i I ->a n no t a t e (ctx->tail,  myself, 
n n PGPANN_COHMIT,  0,  0); 

n n if  (*error) 

n n n break; 

n } 

n ctx->state++; 
n /*  FALLTHROUGH  */ 
case  5 : 

n if  ( c t x->need c a I I ba c k ) f 
n n *error  = P r o c e s s C a I I ba c k (myself, 
n n n n n PG P ANN_ P A R S E R_PR0 C E S S , 

n n n n n 0,0); 

n n if  (*error) 

n n n break; 

n } 
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n n ctx -> state ++; 

n n size  -=  my s e L f -> w r i t e C my s e L f , but,  size,  error); 
n n break; 

B default: 

B n pgpAssert  (0);b  /*  I should  never  get  here  */ 

B > 

B return  size0-size; 

} 

static  size_t 

parseCipher  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
B int*error) 

{ 

B Struct  Context  *ctx; 

B size_t  written  = 0; 

B pgpAssert  (myself); 

B pgpAssert  (myself->magic  ==  PARSERMAGIC); 

B pgpAssert  (error); 

B ctx  = (struct  Context  *)myself->priv; 

B pgpAssert  (ctx); 

B pgpAssert  (ctx -> tail); 

B pgpAssert  (!size  ||  !ctx->eof); 


B *error  = 0; 


□ 

s w i 

t c h 

(ctx->state)  { 

n 

case  0 : 

n 

n 

/* 

Parse  header;  needed  before  callbacks  are  allowed 

♦/ 

n 

n 

written  = i np u t Me r g e ( & c t x-> i n pu t , buf,  size,  IVLEN, 

error)  ; 

n 

n 

buf 

+=  written; 

n 

□ 

size  -=  written; 

n 

Q 

i f 

(♦error  ||  !size) 

a 

u 

a 

break; 

n 

n 

/* 

Size  is  non-zero  but  we  haven't  got  desired?  EOP 

♦/ 

n 

n 

i f 

( i np u t Me r g ed ( & c t x-> i npu t ) < IVLEN)  { 

n 

□ 

□ 

pgpAssert(inputFinished(&ctx-> input. head)); 

n 

n 

n 

♦error  = c t x-> t a i 1 ->a n no t a t e ( c t x-> t a i 1 , myself. 

Q 

n 

□ 

PGPANN_PACKET_SHORT 

r 

n 

n 

n 

B B n 0,0); 

n 

D 

B 

if  (♦error) 

n 

n 

B 

B break; 

a 

a 

B 

my s e 1 f->w r i t e = nextScope; 

n 

a 

B 

size  -=  nextScope  (myself,  buf,  size,  error); 

□ 

u 

B 

break; 

Q 

n 

> 

n 

n 

Ctx 

->n e e d c a 1 1 ba c k = 1; 

n 

□ 

/* 

n 

□ 

* 

If  we're  already  in  an  encrypted  scope  (we've  already 

n 

n 

•k 

sent  some  ESKs  to  the  user),  don't  bother  sending 

a n 0 1 h e 

n 

Q 

•k 

one  . 

s 

Q 

*/ 

n 

n 

i f 

( ctx->end_scope)  (b  /♦  Scope  alreay  open?  ♦/ 

n 

n 

B 

ctx->state  = 2; 
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n n n goto  got_esk; 

n n } 

n n /*  No  ESKs  seen  yet  - open  the  scope  */ 

n n c t x->e nd_ s c op e = PG P A N N_ C I PH E R_ EN D ; 

n n *error  = c t x-> t a i L ->a nno t a t e (ctx->taiL,  myself, 

n n PGPANN_CIPHER_BEGIN,  0,  0); 

n n if  (*error) 

n n n break; 

n n ctx->state++; 

n n /*  FALLTHROUGH  */ 

n case  1 : 

n n /*  No  ESKs  seen  yet  - dummy  one  up  */ 
n n *error  = c t x-> t a i I ->a nn o t a t e Cctx->taiL,  myself, 
n H PGPANN_SKCIPHER_ESK,  0,  0); 

n n if  (*error) 

n n n break; 


□ 

n 

n 

D 

n 

□ 

n 

□ 

n 

n 

□ 

□ 

n 

□ 

n 

a 

n 

n 

a 

n 

n 

□ 

□ 

n 

n 

n 

n 


n ctx->state++; 
n /*  FALLTHROUGH  */ 
case  2 : 
g o t _e  s k : 

n /*  Okay,  do  a commit  */ 
n if  ( c t x->n ee d c a I I ba c k ) { 

n n *error  = c t x-> t a i I ->a nn o t a t e (ctx->tail,  myself, 
n n PGPANN_COHHIT,  0,  0); 

n n if  (*error) 

a n n break; 

n > 

n c t x->s  t a t e + +; 

n /*  FALLTHROUGH  */ 
case  3 : 

n if  ( c t x->ne ed ca I I ba c k ) { 

n n *error  = P r o c e s s C a I I ba c k (myself, 

n n n H n PG PAN N_P AR S E R_ P A S S T H ROUG H , 

a a n n n 0,0); 

n n if  (*error) 

n n n break; 

n } 

a ctx->state++; 

n written  +=  my s e I f -> w r i t e ( my s e I f , buf,  size,  error); 

a break; 

default: 

n pgpAssert  (0); 

} 


n return  written; 

> 


static  si ze_t 

pa r s e C omp r e s s ed  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n n int  *error) 

{ 

n struct  Context  *ctx; 

n size_t  written  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A RS E RH AG  I C ) ; 
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n pgpAssert  (error); 

n ctx  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

a pgpAssert  (!size  ||  !ctx->eof); 

n *error  = 0; 


□ 

s w i 

t c h 

( ctx->state)  { 

□ 

case  0 : 

n 

B 

/* 

Make  sure  we  have  the  compression  type  */ 

n 

B 

written  = i n p u t M e r g e ( & c t x-> i n p u t , buf,  size,  1,  error); 

n 

B 

buf 

+=  written; 

n 

B 

size  -=  written; 

□ 

B 

i f 

(♦error  ||  !size) 

□ 

B 

B 

break; 

Q 

B 

/* 

Size  is  non-zero  but  we  haven't  got  desired?  EOP  ♦/ 

n 

B 

i f 

( i npu t He rged ( 8c t x->i npu t ) < 1)  { 

n 

B 

B 

pgpAssert(inputFinished(8ctx->input.head)); 

□ 

B 

B 

♦error  = c t x-> t a i L ->a n n o t a t e ( c t x-> t a i L , myself. 

Q 

B 

B 

PGPANN_PACKET_SHORT, 

Q 

B 

B 

n n n 0,0); 

n 

B 

B 

if  (♦error) 

□ 

B 

fl 

n break; 

□ 

B 

B 

my se 1 f ->w r i t e = nextScope; 

□ 

B 

B 

size  -=  nextScope  (myself,  buf,  size,  error); 

n 

B 

B 

break; 

n 

B 

> 

n 

B 

Ctx 

->need ca 1 1 ba c k = 1; 

n 

B 

Ctx 

->end_scope  = PGPANN_COHPRESSED_END; 

n 

B 

♦error  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  myself. 

Q 

B 

PGPANN_COHPRESSED_BEGIN, 

n 

B 

inputMergedPtr(8ctx-> input) 

□ 

B 

i f 

(♦error) 

□ 

B 

n 

break; 

n 

B 

ctx 

->state++; 

n 

B 

/* 

FALLTHROUGH  ♦/ 

n 

case  1 : 

□ 

B 

i f 

( c t x->n e e d c a 1 1 ba c k ) { 

n 

B 

B 

♦error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself. 

Q 

B 

B 

PGPANN_C0HHIT,  0,  0); 

n 

B 

B 

if  (♦error) 

n 

B 

B 

n break; 

D 

B 

> 

D 

B 

Ctx 

->state++; 

n 

B 

/* 

FALLTHROUGH  ♦/ 

Q 

case  2 : 

a 

B 

i f 

( c t x->n e ed c a 1 1 ba c k ) { 

n 

B 

B 

♦error  = P r o c e s s C a 1 1 ba c k (myself. 

□ 

B 

B 

n n n PG  P A N N_  P A R S E R_  R E C U R S E , 

n 

B 

B 

n n n 0,0); 

u 

B 

B 

if  (♦error) 

u 

B 

Q 

n break; 

□ 

B 

> 

B 

B 

Ctx 

->state++; 
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n n written  +=  my s e I f ->w r i t e ( my s e L f , buf,  size,  error); 
n n break; 

n default: 
n n pgpAssert  (0); 

n > 

n return  written; 

} 


/* 

* Parse  a general  headerless  packet.  Unknown  packets,  comment  packets 

* and,  in  fact,  things  that  aren't  packets  at  all! 

*/ 

static  size_t 

parseUnknown  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n int  *error) 

{ 

n struct  Context  *ctx; 

n size_t  written  = 0; 

n byte  b ; 

n int  begintype; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S E RM AG  I C ) ; 
n pgpAssert  (error); 

n ctx  = (struct  Context  *)myself->priv; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->tail); 

n pgpAssert  (!size  ||  !ctx->eof); 


n *error  = 0; 


□ 

n 

□ 

□ 

n 

n 

D 

n 

n 

s 

a 

n 

a 

□ 

n 

n 

n 


switch  (ctx->state)  C 
case  0 : 
n / * 

n * As  a convenience,  we  merge  a leading  prefix  of  the  packet 
n * for  identification  purposes, 

n * / 

n written  = inputHerge(&ctx-> input,  buf,  size,  256,  error); 
n buf  +=  written; 
n size  -=  written; 
n if  (*error) 

n n return  written; 

a if  ( i n p u t H e r g ed ( & c t x-> i n pu t ) < 256  SS 
n !inputFinished(&ctx->input.head)) 

n { 

n n pg  p A s s e r t ( ! s i z e ) ; 

n n return  written; 

n > 


n n / * 

n n * We  use  this  one  function  to  provide  different 

n n * annotations  for  non-packets,  comment  packets,  and 

n n * unknown  packets.  Figure  out  the  right  one  to  use. 

n n * / 

n n b = c t x->  i npu  t . b u f f e r C 0 D ; 

n n if  (!IS  OLD_PKTBYTE(b)  &&  ! I S_NEW_PKTBYTE ( b ) ) C 
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n 

n 

B 

begintype  = PGPANN_NONPACKET_BEGIN; 

□ 

□ 

B 

ctx->end_scope  = PG P AN N_N0 N P A C KET_ E N D ; 

n 

n 

> e 

Ise  if  ( PKTBYTE_TYPE  (b)  ==  PKTB YT E_C OMH E NT ) { 

n 

a 

B 

begintype  = PG P AN N_ C OHM E NT_B EG  I N ; 

Q 

n 

B 

ctx->end_scope  = PG P A N N_ C OHM E NT_ EN D ; 

n 

n 

> else  f 

n 

Q 

B 

begintype  = PG P AN N_ U N KN 0 W N_B E G I N ; 

n 

n 

B 

ctx->end_scope  = PG P A N N_U N KNO WN_ E N D ; 

u 

□ 

> 

a 

Q 

u 

n 

C t X 

->need ca  1 1 ba c k = 1; 

n 

n 

♦error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself,  begintype 

n 

n 

i nputHergedPtr(&ctx->i  nput ), 

n 

n 

inputMerged(&ctx->input)); 

n 

n 

i f 

(♦error) 

n 

n 

B 

break; 

□ 

s 

C t X 

->state++; 

□ 

□ 

/* 

FALLTHROUGH  ♦/ 

c 

case 

1 1 : 

□ 

B 

i f 

( ctx->needca  1 Iback)  { 

n 

B 

B 

♦error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself. 

n 

B 

B 

PGPANN_C0MMIT,  0,  0); 

n 

B 

B 

if  (♦error) 

n 

B 

B 

a break; 

□ 

B 

> 

n 

B 

C t X 

->state++; 

n 

B 

/* 

FALLTHROUGH  ♦/ 

n 

case 

2 : 

D 

B 

i f 

( c t x->n e ed c a 1 1 ba c k ) { 

□ 

B 

B 

♦error  = P r o c e s s C a 1 1 ba c k (myself,  PG P AN N_P AR S E R_ E AT  I T , 

n 

B 

B 

n n n 0,0); 

n 

B 

B 

if  (♦error) 

n 

B 

B 

n break; 

n 

B 

> 

n 

B 

C t X 

->s  t a t e + + ; 

n 

B 

return  written  + myself->write(myself,  buf,  size,  error); 

n 

B 

/* 

NOTREACHED  ♦/ 

n 

default 

: 

n 

B 

pgpAssert  (0); 

n 

> 

n return  written; 

> 

/* 

* This  is  called  for  most  all  key-type  packets.  Keys  are  just  output 

* within  a key  annotation  scope.  There  is  no  callback,  since  no 

* processing  is  done. 

*/ 

static  size_t 

parseKey  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *ctx; 

n struct  PgpPipeline  *tail; 

n size_t  size0  = size; 

n byte  const  *p; 

n size_t  len; 
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n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e L f ->ma g i c ==  P A R S E RH AG  I C ) ; 

B 

pgpAssert 

(error); 

B 

ctx  = (struct  Context  * ) my s e L f ->p r i v; 

B 

pgpAssert 

(ctx); 

B 

tail  = ctx 

->t  a i L ; 

B 

pgpAssert 

( t a i L ) ; 

B 

pgpAssert 

(!size  II  !ctx->eof); 

B 

*error  = 0 

/ 

B 

if  ( c t x->end_s c 0 p e &&  c t x-> e nd_s c op e !-  PGPANN 

B 

B 

/* 

Umm..  Key  block  within  another  scope??? 

Why???  ♦/ 

B 

B 

*error  = PG P E R R_W R 0NG_S C 0 P E ; 

B 

B 

return  0; 

B 

> 

B 

/* 

If  we  haven't  output  the  begin  annotation. 

do  so  now.  ♦/ 

B 

i f 

( ! ctx->end_scope  ) { 

B 

B 

*error  = t a i L ->a n no t a t e (tail,  myself,  PG P ANN_PG PKE Y_B EG  I N 

B 

B 

n 

n n NULL,  0); 

B 

B 

i f 

(♦error) 

B 

B 

n 

return  0; 

B 

B 

ctx 

->end_scope  = PG P AN N _PG PKE Y_ E N D ; 

B 

B 

/* 

Set  the  flag  to  add  a header  module  */ 

B 

B 

ctx 

->needcallback++; 

B 

> 

B 

/* 

Make 

sure  we  only  send  the  annotations  once 

! ♦/ 

B 

s w i 

t c h 

( c t x->s  t ate)  { 

B 

case  0 : 

B 

B 

/* 

B 

B 

★ 

Ask  the  user  what  to  do  with  these  keys 

. . . Really, 

B 

B 

* 

the  only  real  answers  are  "Eatit"  or  "Process".. 

B 

B 

★ 

"Recurse"  gets  mapped  to  "Process",  and 

B 

B 

* 

"PassThrough"  has  the  same  effect.  But 

let  the 

B 

B 

•k 

user  decide,  anyways.  They  may  wish  to 

eatit. 

B 

B 

*/ 

B 

B 

if 

( c t x->ne ed ca 1 1 ba c k)  { 

B 

B 

B 

♦error  = t a i 1 ->a nno t a t e (tail,  myself. 

PGPANN_COMHIT, 

B 

B 

B 

n n n 0,0); 

B 

B 

B 

if  (♦error) 

B 

B 

B 

n return  0; 

B 

B 

> 

B 

B 

Ctx 

->state++; 

B 

B 

/* 

FALLTHROUGH  ♦/ 

B 

case  1 : 

B 

B 

i f 

( c t x->need c a 1 1 ba c k ) { 

B 

B 

B 

♦error  = P r o c e s s C a 1 1 ba c k (myself. 

B 

B 

B 

n B n PGPANN_PARSER_PROCESS, 

B 

B 

B 

B B B NULL,0); 

B 

B 

B 

if  (♦error) 

B 

B 

B 

n return  0; 

B 

B 

> 
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n 

> 

n 

/* 

output  this  packet  */ 

n 

/* 

empty  out  the  buffered  data  and  then  the  packet  */ 

n 

for 

) { 

n 

□ 

p = 

i n p u t Ra w Pe e k ( 8 c t x-> i npu t , buf,  size,  8Len); 

Q 

n 

i f 

( ! Len) 

n 

a 

n 

break; 

n 

n 

L e n 

= tail->write  (tail,  p,  Len,  error); 

n 

n 

L e n 

= inputRawSeek  (8ctx->input,  buf,  size,  Len); 

n 

n 

b u f 

+=  Len; 

□ 

a 

size  -=  Len; 

o 

a 

i f 

(*error) 

n 

a 

n 

return  size0-size; 

n 

> 

n 

/* 

Q 

★ 

If  we've  hit  the  end  of  the  packet,  check  if  we  have 

n 

* 

another  one.  If  so,  check  if  it  is  a key  certificate 

n 

* 

packet.  If  so,  go  parse  the  new  packet.  Otherwise,  end 

Q 

* 

this 

scope. 

n 

*/ 

n 

i f 

( i npu t F i n i s h ed  ( 8 c t x-> i n pu t . h e a d ) 88  (size  ||  ctx->eof)) 

n 

n 

/* 

End  of  input  */ 

n 

□ 

i f 

(size) 

n 

n 

n 

switch  ( PKTBYTE_TYPE  (*buf))  { 

n 

n 

n 

case  PKTBYTE_SECKEY : 

n 

n 

n 

case  PKTBYTE_PUBKEY : 

n 

n 

n 

case  PKTBYTE_SECSUBKEY : 

n 

n 

a 

case  PKTBYTE_PUBSUBKEY : 

n 

n 

a 

case  PKTBYTE_TRUST : 

n 

D 

a 

case  PKTBYTE_NAHE : 

n 

□ 

B 

case  PKTBYTE_SIG: 

n 

n 

B 

case  PKTBYTE_COMHENT : 

n 

□ 

B 

n ctx->f i ndpkt  = 1 ; 

□ 

n 

B 

a myseLf->write  = parsePacket; 

n 

Q 

B 

n size  -=  parsePacket  (myseLf,  buf,  size,  error); 

n 

n 

B 

n break; 

n 

n 

B 

def  a u L t : 

n 

n 

B 

n myseLf->write  = nextScope; 

n 

□ 

n 

n size  -=  nextScope  (myseLf,  buf,  size,  error); 

n 

n 

o 

n break; 

n 

n 

Q 

} 

Q 

□ 

else  { 

n 

n 

B 

myse L f->wri te  = nextScope; 

n 

a 

B 

size  -=  nextScope  (myseLf,  buf,  size,  error); 

Q 

a 

} 

n 

y 

n return  size0-size; 

> 

/*  Shared  entry  point  for  1-pass  and  oLd-styLe  sig  header  parsing  */ 
static  size_t 

pa r s e S i gna t u re  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size, 
a n int  *error) 

{ 

a struct  Context  *ctx; 

n size_t  written  = 0; 
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n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P AR S E RH AG  I C ) ; 

n pgpAssert  (error); 

n ctx  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

n pgpAssert  (!size  ||  !ctx->eof); 


n switch  (ctx->state)  ( 

Q case  0 : 

n n /*  Suck  in  the  whole  packet  */ 

a a written  = i n pu t He r g e ( 8 c t x-> i npu t , buf,  size,  ~1u,  error); 
n n buf  +=  written; 

n n size  -=  written; 


n □ 

D □ 

□ □ 

□ a 

□ a 

a a 

n □ 

□ D 


/*  Handle  a packet  larger  than  the  buffer  somehow  */ 
if  ( i n pu 1 0 ve r f u I I ( 8c t x-> i n pu t ) ) ( 

n *error  = c t x-> t a i I ->a n n o t a t e (ctx->tail,  myself, 

n n n n PG P ANN_S I G N ATU R E_T00_BI G , 

n n D n i npu t M e r g ed P t r ( 8 c t x-> i npu t ) , 

n n H n i n pu t He r g ed ( 8 c t x-> i n pu t ) ) ; 

n if  (*error) 

n n return  written; 


n D 

D □ 

□ □ 

a a 


n /*  Skip  the  body  of  the  packet  */ 
n my s e I f -> w r i t e = DoSkip; 

n return  written  + Do S k i p ( my s e I f , buf,  size,  error); 

> 


n n /*  Have  we  sucked  in  the  whole  packet?  */ 
n n if  ( ! i n pu t F i n i s he d ( 8 c t x-> i n pu t . h e a d ) ) 
n n n return  written; 

n n /*  We  also  want  one  byte  of  look-ahead  */ 

n n if  (!size  88  !ctx->eof) 

n n n return  written; 


n n /*  Check  if  this  is  a key  signature  */ 
n n { 

n n n inttype; 


n □ 
n □ 
n □ 
□ n 
n n 
n n 


n type  = pg pS i g S i g Ty pe  ( i npu t He r g ed P t r ( 8c t x-> i n pu t ) , 
n n n i n pu t He r g ed ( 8 c t x-> i npu t ) ) ; 

n i f ( type  < 0 ) ( 

n n *error  = type; 

a a return  written; 

n } 


a a 
a a 
a a 
a a 
a a 
a a 
a a 


n if  (type  8 0xF0)  ( 

a a /*  This  is  a key  signature  */ 
n a my s e I f ->w r i t e = parseKey; 

a a return  written  + parseKey  (myself,  buf,  size, 

a a a a a error); 

n } 

} 
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n 

B 

/* 

n 

B 

* 

n 

B 

* 

a 

B 

* 

□ 

B 

*/ 

Q 

B 

i f 

s 

B 

□ 

□ 

n 

B 

n 

n 

B 

a 

n 

□ 

n 

□ 

B 

□ 

n 

B 

n 

B 

} 

n 

B 

i f 

□ 

B 

a 

B 

{ 

a 

B 

B 

n 

B 

B 

Q 

B 

B 

n 

B 

} 

Q 

B 

i f 

Q 

B 

B 

n 

B 

B 

□ 

B 

B 

D 

Q 

B 

□ 

n 

> 

n 

Q 

C t X 

c 

B 

/* 

Q 

case  1 : 

a 

B 

/* 

□ 

B 

C t X 

n 

B 

/* 

B 

B 

i f 

B 

B 

n 

B 

B 

n 

B 

B 

D 

B 

B 

□ 

B 

B 

n 

B 

B 

} 

B 

B 

ctx- 

B 

B 

/* 

B 

case 

2: 

B 

B 

/*  I 

B 

n 

*e  r I 

B 

n 

B 

B 

B 

B 

B 

B 

i f I 

B 

B 

D 

B 

B 

C t X- 

B 

B 

/*  I 

B 

case 

3: 

B 

n 

if  ( 

We  can  get  here  if  there  is  a normal  signed  message 
just  after  a key  packet.  In  this  case  we  need  to 
end  the  PGPKEY  scope  and  then  start  a new  one. 

( ctx->end_scope  ==  PG P AN N_PG PKE Y_ E N D ) < 

/*  we  need  to  end  the  PGPKEY  scope.  Yikes!  */ 
*error  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  myself, 

° n n ctx->end_scope,  NULL,  0); 

if  (*error) 
n return  0; 


ctx->end_scope 


0; 


( ! IS_OLD_PKTBYTE(*buf ) SS  ! I S_N E W_ PKTB YT E C *bu f ) ) ) 

/*  Do  separate  signature  thing  */ 
ctx-> state  = 20; 
goto  sepsig; 


CPKTBYTE_TYPE(*buf ) ==  PKTB YT E_ L I T E R A L || 
PKTBYTE_TYPE(*buf ) ==  PKTB YT E_0 LD L I T E R A L ) { 
/*  Do  signature  on  literal  */ 
ctx->state  = 10; 
goto  sigliteral; 


literal)  */ 


: ctx->end_scope  !=  PGPANN_SIGNED_END ) { 
ctx->end_scope  = PGPANN_SIGNED_END; 

*error  = c t x-> t a i I ->a n n o t a t e (ctx->tail,  myself, 
n n a PGPANN_SIGNED_BEGIN,0,0); 

if  (*error) 
n break; 


/*  Dump  the  signature  as  an  annotation  */ 

= c t x-> t a i I ->a nno t a t e Cctx->tail,  myself, 

PGPANN_SIGNED_SIG, 


inputMergedPtr(&ctx->input), 
inputHergedC&ctx -> input)); 


break; 
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□ 

□ 

n 

i f 

(!pgpSigNestFLag(inputMergedPtr(&ctx->input), 

Q 

Q 

□ 

n 

□ 

i nputHerged (&ctx->i nput ) ) ) { 

n 

n 

D 

D 

/* 

No  nest  flag  means  another  sighdr  follows 

□ 

n 

n 

n 

nyse Lf->wri te  = nextScope; 

o 

n 

o 

o 

break;n  /*  Call  nextScope  next  time  */ 

Q 

n 

a 

> 

else 

if  (IS_NEW_PKTBYTE(*buf ) && 

n 

n 

n 

n 

PKTBYTE_TYPE(*buf)==PKTBYTE_SIG)  { 

s 

n 

Q 

n 

/* 

a 

a 

a 

n 

* 

A 1-pass  header  immediately  followed  by 

□ 

n 

n 

n 

* 

a 1-pass  footer  can  only  mean  one  thing: 

□ 

n 

n 

n 

it 

a separate  signature.  With  these,  the 

n 

n 

n 

n 

★ 

reader  will  try  to  check  sigs  as  soon  as 

n 

n 

n 

n 

* 

we  ask  it  to  commit.  So  we  can't  do  that 

n 

n 

n 

n 

* 

until  we  have  read  our  footer  signatures. 

n 

n 

n 

□ 

*/ 

n 

n 

n 

n 

C t X 

->sepsig  = 1; 

n 

n 

□ 

n 

*error  = c t x-> t a i L ->a n no t a t e (ctx->taiL, 

n 

n 

n 

n 

n 

n my  s elf. 

n 

n 

n 

Q 

n 

n PGPANN_SIGNED_SEP,  0,  0); 

n 

a 

n 

n 

/* 

Process  end  of  message  sigs  */ 

n 

n 

n 

n 

my s e L f ->w r i t e = nextScope; 

Q 

n 

n 

n 

break;  /*  Call  nextScope  next  time  */ 

n 

n 

u 

> 

n 

Q 

> 

n 

B 

i f 

( c t x->n e ed c a 1 1 ba c k ) { 

B 

B 

B 

*error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself. 

B 

B 

B 

PGPANN_C0MMIT,  0, 

B 

B 

B 

if  (*error) 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

C t X 

->state++; 

B 

B 

/* 

FALLTHROUGH  */ 

B 

case  4 : 

B 

B 

1 f 

( c t x->need c a 1 1 ba c k ) { 

B 

B 

B 

♦error  = P r o c e s s C a 1 L ba c k (myself. 

B 

B 

B 

n n n PG P AN N_P AR S E R_R E C U R S E , 

B 

B 

B 

n n n 0,0); 

B 

B 

B 

if  (*error) 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

C t X 

-> state  = 0; 

B 

B 

written  +=  my s e 1 f -> w r i t e ( my s e 1 f , buf,  size,  error); 

B 

B 

break; 

B 

/* 

Signature  on  literal  case  */ 

B 

case  10 

: 

S 

igliteral: 

B 

B 

ctx 

->n e ed c a 1 1 ba c k = 1; 

B 

B 

/* 

Send  only  one  BEGIN  annotation  */ 

B 

B 

i f 

( ctx->end_scope  !=  PG P AN N_ S I G N E D_E N D ) ( 

B 

B 

B 

ctx->end_scope  = PG P AN N_S I G N E D_ E N D ; 

B 

B 

B 

♦error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself. 

B 

B 

B 

n n n PGPANN_SIGNED_BEGIN,0,0); 

B 

B 

B 

if  (♦error) 

B 

B 

B 

n break; 
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□ 

□ 

> 

n 

□ 

ctx->state++; 

a 

n 

/*  FALLTHROUGH 

*/ 

a 

case 

1 1 : 

n 

n 

/*  Dump  the  signature  as 

an  annotation  * / 

n 

□ 

*error  = c t x-> t a i L -> a n no t a t e (ctx->taiL,  myself. 

n 

n 

n n D 

PGPANN_ 

SIGNED_SIG, 

n 

n 

inputMergedPtrCSctx 

n 

B 

inputMerged(&ctx->i 

n 

B 

if  (*error) 

□ 

B 

a break; 

n 

B 

ctx->state++; 

n 

B 

/*  FALLTHROUGH 

*/ 

n 

case 

1 2 : 

n if  ( ctx->needca L Lback)  { 

n n *error  = c t x-> t a i L ->a n n o t a t e (ctx->taiL,  myself. 


B 

B 

B 

PGPANN_ 

COMMIT,  0, 

0); 

B 

B 

B 

if  (*error) 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

C t X 

->s  t a t e + + ; 

B 

B 

/* 

FALLTHROUGH  */ 

B 

case  13 

B 

B 

i f 

( c t x->n e e d c a 1 1 ba c k ) { 

B 

B 

B 

★error  = P r o c e s s C a 1 1 ba c k (myself. 

B 

B 

B 

D n n 

PGPANN_PARSER_RECURSE, 

B 

B 

B 

□ □ n 

0,  0); 

B 

B 

B 

if  (★error) 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

C t X 

-> state  = 0; 

B 

B 

written  +=  myself- 

> w r i t e ( my s e 1 f , buf,  size,  error); 

B 

B 

b r ea  k; 

B 

/* 

Separate  signature 

case  ★ / 

B 

case  20 

: 

seps  i g : 

B 

B 

C t X 

->needca  L Lback 

= 1; 

B 

fl 

/* 

Send  only  one  BEGIN  annotation  ★/ 

B 

B 

1 f 

(ctx->end_scope 

!=  PGPANN_SIGNED_END) 

{ 

B 

B 

B 

ctx->end_scope 

= PGPANN_SIGNED_END; 

B 

B 

B 

★error  = c t x-> t a i 1 ->a n no t a t e (ctx->tail,  myself 

B 

B 

B 

n n n 

PGPANN_SIGNED_BEGIN 

,0,0); 

B 

B 

B 

if  (★error) 

B 

B 

B 

n break; 

B 

B 

> 

B 

B 

C t X 

->state++; 

B 

B 

/* 

FALLTHROUGH  ★/ 

B 

case  21 

: 

B 

B 

/* 

B 

B 

ic 

Say  that  this  will  be  a separate  signature. 

B 

B 

* 

Note  that  we  don't  set  the  sepsig  flag 

here,  as 

we  don 

B 

B 

★ 

need  to  know. 

That  flag  is  just  for  1 

-pass  signatures 

B 

B 

*/ 

B 

B 

★error  = ctx->tail 

->annotate  (ctx->tail. 

myse  If, 

B 

B 

PGPANN_SIGNED_SEP,  0, 

0); 

B 

B 

1 f 

(★error) 

B 

B 

B 

break; 
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n a ctx -> state ++; 

n n /*  FALLTHROUGH  */ 

n case  22: 

a n *error  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  myself, 
n a 

n n 

n a 

n n if  (*error) 

n n n break; 

n n ctx->state++; 

n n /*  FALLTHROUGH  */ 


PGPANN_SIGNED_SIG, 
inputMergedPtr(8ctx->input), 
inputMerged(&ctx-> input)); 


n 

case 

23: 

n 

n 

if  ( c t x->need ca 1 1 ba c k ) { 

n 

n 

n *error  = c t x-> t a i 1 ->a nno t a t e 

n 

n 

n 

□ 

n 

n if  (*error) 

Q 

Q 

n n break; 

n 

n 

} 

Q 

n 

ctx->state++,- 

n 

D 

/*  FALLTHROUGH  */ 

n 

case 

24: 

n 

n 

if  ( c t x->need ca 1 1 ba c k ) { 

n 

s 

n *error  = P r o c e s s Ca 1 1 ba c k (my 

n 

n 

n n n Q 0,0); 

u 

n 

n if  (*error) 

n 

n 

n n break; 

tt 

Q 

} 

n 

u 

ctx-> state  = 0; 

n 

n 

written  +=  my se 1 f ->w r i t e ( my s e 1 f , 

n 

n 

break; 

n 

default: 

u 

n 

pgpAssert  (0); 

n 

> 

PGPANN_COnniT,  0,  0); 


return  written; 


/* 

* Parse  2nd  signature  packet  after  the  signed  packet  after  a 

* 1-pass  signature  packet.  These  are  the  "sig  footer"  packets 

* which  are  full-sized  signature  packets,  paired  with  the  1-pass 

* sig  header  packets. 

*/ 

static  size_t 

pa r s e S i g na t u r e 1 Pa s s 2 (struct  PgpPipeline  *myself,  byte  const  *buf, 
n n size_t  size,  int  *error) 

{ 

n struct  Context  *ctx; 

n size_t  written  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P ARS E RH AG  I C ) ; 
n pgpAssert  (error); 

n ctx  = (struct  Context  * ) my s e I f ->p r i v ; 
n pgpAssert  (ctx); 
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n pgpAssert  (ctx->taiL); 

n pgpAssert  (!size  ||  !ctx->eof); 


n switch  (ctx->state)  { 

□ case  0 ; 

n n /*  Suck  in  the  whole  signature  packet  */ 

n n written  = inputHerge(&ctx->input,  buf,  size,  -1u,  error); 
n n buf  +=  written; 

n n size  -=  written; 


a a 
n □ 
n □ 

D □ 

□ n 

□ n 
n □ 
n n 


/*  Handle  a packet  larger  than  the  buffer  somehow  */ 
if  ( i n p u 1 0 V e r f u I I ( & c t x-> i np u t ) ) { 

n *error  = c t x-> t a i I ->a n no t a t e Cctx->tail,  myself, 
n n n n PG P ANN_S I G N ATU R E_TOO_B I G , 

n n n n i n pu t He r g e d P t r C & c t x-> i n p u t ) , 

n n n n inputHerged<&ctx-> input)); 

n if  (*error) 

n a return  written; 


nan/*  Skip  the  body  of  the  packet  */ 
n n n my s e I f -> w r i t e = DoSkip; 

n n n return  written  + D o S k i p ( my s e I f , buf,  size,  error); 

n n > 


n n /*  Have  we  sucked  in  the  whole  packet?  */ 
n n if  ( ! i npu t F i n i s hed ( &c t x->i npu t . h ead ) ) 
n n n return  written; 

n n /*  FALLTHROUGH  */ 

n case  1 : 

an/*  Dump  the  signature  data  as  an  annotation  */ 
a a ctx->needcallback  = 1; 

n n *error  = c t x-> t a i I ->a n no t a t e (ctx->tail,  myself, 
n n PGPANN_SIGNED_SIG2, 

n n n n n i n pu t M e r g ed P t r ( &c t x-> i n pu t ) , 

n n n n n i n pu t M e r g ed ( & c t x-> i n pu t ) ) ; 

a n if  (*error) 

n n n break; 


an/*  Decrement  count  of  sig  footers  needing  to  be  seen  */ 
n n --ctx->sig1pass; 


if  ( ! ctx->sepsi g ||  ctx->si g1 pass  !=  0)  f 


n 

n 

B 

/* 

n 

n 

B 

* In  normal  case,  we  are 

done  now 

. 

D 

n 

B 

* nextScope  will  end  sig 

scope  if 

sigipass  is  0 

Et 

u 

B 

*/ 

n 

n 

B 

my s e 1 f -> w r i t e = nextScope; 

a 

o 

B 

written  +=  n ex t S c ope ( my s e 1 f , buf. 

size,  error); 

n 

s 

B 

break; 

□ 

n 

> 

□ 

n 

/* 

Here  on  last  sig  footer  of 

separate 

signature  */ 

n 

n 

C t X 

->state++; 

n 

D 

ctx 

->needca 1 Iback  = 1; 

n 

B 

/* 

FALLTHROUGH  */ 

n 

case 

2: 

□ 

B 

1 f 

( c t x->n e e d c a 1 1 ba c k ) t 
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□ 

n 

n 

□ 

a 

Q 

n 

n 

n 

□ 

n 

Q 

n 

Q 

n 

n 

a 

n 


n n *error  = c t x-> t a i L ->a n n o t a t e (ctx->taiL,  myself, 
n n PGPANN_COMHIT,0,0); 

n n if  (*error) 

n n n break; 

n > 

n ctx->state++; 
n /*  FALLTHROUGH  */ 
case  3 : 

B if  ( c t x->n e ed c a L L ba c k ) { 

B B *error  = ProcessCa L Lback  (myself,  PG P A NN_P AR S E R_ E AT  I T , 
n n n n n 0,0); 

B B if  (*error) 

B B n break; 

B > 

B c t x->s  t ate  = 0 ; 

B written  +=  my s e I f ->w r i t e ( my s e I f , buf,  size,  error); 

B break; 

} 


B return  written; 
} 


static  si ze_t 

parseESK  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

B Struct  Context  *ctx; 

B size_t  written  = 0; 

a byte  b ; 


n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e 1 f ->ma g i c ==  PARSERHAGIC) 

n 

pgpAssert 

(error); 

n 

ctx  = (struct  Context  *)myself->priv; 

□ 

pgpAssert 

(ctx); 

n 

pgpAssert 

(ctx->tai  1); 

Q 

pgpAssert 

(Isize  II  !ctx->eof); 

n 

b = PKTBYTE_TYPE  ( c t x-> i npu t . bu f f e r C 0 ] ) ; 

n 

♦error  = 0 

r 

n 

switch 

(ctx->state)  { 

n 

case 

0: 

n 

n 

/* 

It's  a pu b 1 i c- key-en c r y p t e d PGP  file  */ 

Q 

n 

i f 

( ! ctx->end_scope ) ( 

Q 

n 

a 

c t x->e nd_ s c ope  = PGP ANN_C I PH E R_EN D ; 

n 

n 

a 

♦error  = c t x-> t a i 1 ->a n n o t a t e (ctx->tail,  myself. 

n 

□ 

a 

PGPANN_CIPHER_BEGIN, 

n 

n 

a 

0,  0); 

Q 

a 

a 

if  (♦error) 

n 

a 

a 

B break; 

a 

a 

> 

□ 

a 

ctx 

->state++; 

n 

a 

/* 

FALLTHROUGH  ♦/ 

n 

case 

1 : 

n 

a 

written  = i n p u t He r g e ( 8 c t x-> i n pu t , buf,  size,  -1u,  error 

□ 

a 

buf 

+=  written; 
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n n size  -=  written; 

n n /*  Handle  a packet  Larger  than  the  buffer  somehow  */ 

n n if  { i n p u t 0 V e r f u L L C & c t x-> i n p u t ) ) { 

n n n *error  = c t x -> t a i L ->a n no t a t e (ctx->taiL,  myself, 
n n n n n n PG P AN N_ E S K_T 00_B I G , 

n n n n n n i n pu t M e r g e d P t r ( & c t x -> i n p u t ) , 

n n n n n n i n pu t M e r g e d ( & c t x-> i n pu t ) ) ; 

n n n if  (*error) 

n n n n return  written; 


/*  Skip  the  body  of  the  packet  */ 
my s e L f ->w r i t e = DoSkip; 

return  written  + Do S k i p ( my s e L f , buf,  size,  error); 


an/*  Have  we  sucked  in  the  whole  packet?  */ 
n n if  ( ! i npu t F i n i s hed ( & c t x-> i npu t . head  ) ) 
n n n return  written; 


ctx->state++; 


□ 

n 

/* 

FALLTHROUGH  * 

/ 

□ 

case 

2 : 

n 

n 

/* 

Dump 

the  ESK 

as  an  annotation  */ 

□ 

Q 

*e  r ro  r 

= ctx->tai  l->annotate  (ctx->tail,  myself. 

□ 

n 

n 

n 

□ 

(b  ==  PKTBYTE_ESK  ? 

□ 

u 

n 

n 

Q 

PGPANN_PKCIPHER_ESK  : 

□ 

a 

Q 

□ 

n 

(b  ==  PKTBYTE_CONVESK  ? 

n 

n 

n 

u 

a n 

PGPANN_SKCIPHER_ESK  : 

n 

a 

n 

u 

□ B 

-1)),  /*  XXX  */ 

n 

n 

inputMergedPtr(8ctx->input) 

n 

D 

inputMerged(&ctx->input)); 

u 

n 

i f 

(*error) 

n 

n 

n 

break; 

n 

B 

C t X 

->state++;n 

/*  This  really  isn't  needed  */ 

n 

n 

myself- 

>w  r i t e = 

nextESK; 

n 

□ 

return 

written  + 

nex t ESK( my s e 1 f , buf,  size,  error); 

□ 

n 

/* 

NOTREACHED  */ 

n 

default 

pgpAssert  (0); 


n return  written; 

> 

/* 

* This  just  sends  appropriate  messages  about  the  Lack  of  text  downstream. 

*/ 

static  size_t 

pa r se C i phe r NoTex t (struct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size, 

int  *error) 

{ 

n struct  Context  *ctx; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  P A R S E RM AG  I C ) ; 
n pgpAssert  (error); 
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n ctx  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (ctx); 

n pgpAssert  (ctx->taiL); 

n pgpAssert  (!size  ||  !ctx->eof); 


0; 


switch  (ctx->state)  { 


n 

case  0 : 

u 

□ 

c t x->n e e d c a 1 1 ba c k = 1; 

n 

n 

/*  Send  an  annotation  */ 

n 

n 

*error  = c t x -> t a i 1 ->a n no t a t e 

(ctx->tail,  myself. 

n 

□ 

PGPANN_CIPHER_NOTEXT, 

n 

n 

if  (*error) 

□ 

Q 

n break; 

n 

n 

c t x->s  t a t e + + ; 

n 

n 

/*FALLTHR0UGH*/ 

n 

case  1 : 

D 

n 

/*  Send  a commit  */ 

n 

n 

if  ( c t x->n e ed c a 1 1 ba c k ) { 

□ 

Q 

n *error  = c t x-> t a i 1 ->a n no t a t e (ctx->tail,  myself 

n 

n 

n 

PGPANN_C0HMIT,  0, 

n 

a 

n if  (*error) 

n 

n 

n n break; 

n 

D 

> 

n 

n 

ctx->state++; 

Q 

n 

/*  FALLTHROUGH  */ 

n 

case  2 : 

n 

n 

if  ( c t x->need ca  1 1 ba c k ) { 

n 

n 

n *error  = P r o c e s s C a 1 1 ba c k 

(myself,  PG P ANN_P AR S E R 

n 

n 

n n n n 0,0); 

n 

n 

n if  (*error) 

n 

Q 

n n break; 

n 

n 

> 

n 

n 

ctx->state++; 

n 

n 

return  my se 1 f ->w r i t e ( my se 1 f , 

buf,  size,  error); 

n 

default: 

n 

n 

pgpAssert  (0); 

n 

> 

n 

> 

return  0;n  /*  Never  executed;  makes  compilers  happy.  * 

/* 

* 

The 

default  state  when  starting  to 

parse  a packet.  Once 

0,  0); 


size  of  the  packet  has  been  determined,  we  don't  come  back  until 
the  end  of  the  packet.  This  function  *is*  called  after  each  packet 
(by  the  s i ze Ad vi s e ( 0 ) handler  if  necessary),  because  post-packet 
cleanup  code  also  resides  here. 

Because  the  functions  in  this  module  rely  heavily  on  tail  recursion, 
if  we  get  called  with  a large  packet  (say  16K),  it  could  have  literally 
hundreds  of  objects  on  it,  and  we  go  hundreds  of  levels  deep  on  recursion, 
This  exhausts  stack  space.  Therefore  we  will  limit  the  amount  of  data  we 
will  accept  on  one  call  to  P A R S E R_S I Z E_ LI M I T . 
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n int*error) 

{ 

n struct  Context  *ctx; 

n size_t  written  = 0; 

n unsigned  b; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  P A R S E RM AG  I C ) ; 
n pgpAssert  (error); 

a ctx  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx -> tail); 

n pgpAssert  (!size  ||  !ctx->eof); 

n *error  = 0; 

n /*  Prevent  excessive  recursion  within  this  module  */ 

n size  = min(size,  P A R S E R_ S I Z E _ LI H I T ) ; 


n / * 

n * findpkt  is  set  to  1 by  create  and  every  time  we  change  to 

n * the  parsePacket  state,  and  indicates  that  the  first  packet 

n * byte  has  not  been  found, 

n */ 

n if  ( c t x-> f i nd p k t ) ( 
n n i nputReset (8ctx->i nput ) ; 


Q n 

Q D 

n □ 

□ □ 

n n 

D n 

n D 

□ n 

□ □ 

□ n 

n □ 

n n 

n n 

□ a 

n > 


if  (!size) 

n return  0;n  /*  I need  a packet  header!  */ 

ctx->findpkt  = 0; 
b = *(buf++); 
s i ze  — ; 

if  ( i n p u t S t a r t ( & c t x-> i n p u t , b)  < 0)  { 
n ctx->state  = 0;n/*  Need  to  set  this  */ 
n a a /*  before  jumping  ahead  */ 
n myself->write  = parseUnknown; 

n return  1 +pa r s e U n known  (myself,  buf,  size,  error); 

> 

written  = 1; 


n 

□ 

n 

D 

D 

□ 

□ 

a 


/* 

* Okay,  now  we  have  a packet,  with  the  parser  state  set  up 

* and  the  header  byte  in  c t x-> i npu t . bu f f e r C 0 ] . 

* 


* The  packet-specific  parsers  use  a state  variable,  and 

* expect  it  to  be  set  to  0 when  they  begin. 

*/ 

ctx->state  = 0; 


n b = PKTBYTE_TYPE  ( c t x-> i n p u t . bu f f e r C 0 D ) ; 


n if  ( c t x->end_s cope  ==  PGPANN_C I PH ER_EN D ) { 
n a switch  (b)  { 
n n case  PKTB YT E_ C ON V E NT  I ON A L : 
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a 

B 

B 

my s e l f -> w r i t e = parseCipher; 

n 

B 

B 

break; 

a 

B 

case 

PKTBYTE_CONVESK: 

Q 

B 

case 

PKTBYTE_ESK: 

n 

B 

n 

my s e L f -> w r i t e = parseESK; 

n 

B 

n 

break; 

n 

B 

default: 

Q 

B 

o 

my s e L f -> w r i t e = pa r s e C i ph e r N oTe x t ; 

n 

B 

n 

break; 

n 

B 

> 

a 

} 

else  -C 

B 

B 

switch  (b)  { 

B 

B 

case 

PKTBYTE_C0NVENTI0NAL: 

B 

B 

n 

my s e L f -> w r i t e = parseCipher; 

B 

B 

□ 

break; 

B 

B 

case 

PKTBYTE_OLDLITERAL: 

B 

B 

D 

/* 

B 

B 

n 

* This  may  be  a dummy  header  we  created 

, or  it 

B 

B 

n 

* mistaken  value  from  a PGP  compatible 

program 

B 

B 

n 

* conceivably  be  an  obsolete  old-style 

literal 

B 

B 

n 

* pre-release  version  of  PGP  2.0! 

B 

B 

n 

* Flag  special  treatment,  and  distingui 

sh  the 

B 

B 

n 

* parseLi tera 1 . 

B 

B 

Q 

*/ 

B 

B 

n 

ctx->state  = 10; 

B 

B 

Q 

/*  FALLTHROUGH  */ 

B 

B 

case 

PKTBYTE_LITERAL: 

B 

B 

o 

my s e 1 f ->w r i t e = pa r s e L i t e r a 1 ; 

B 

B 

n 

break; 

B 

B 

case 

PKTBYTE_COMPRESSED  : 

B 

B 

n 

myself->write  = parseCompressed; 

B 

B 

□ 

break; 

B 

B 

case 

PKTBYTE_SIG : 

B 

B 

a 

if  ( c t x-> s i g 1 pa s s ) 

B 

B 

n 

n my se 1 f ->w r i t e = pa r s e S i g na t u r e 1 Pa s s 2 

r 

B 

B 

Q 

else 

B 

B 

o 

n myself->write  = parseSignature; 

B 

B 

B 

brea  k; 

B 

B 

case 

PKTBYTE_1 PASSSIG : 

B 

B 

n 

++ctx->sig1pass; 

B 

B 

B 

ctx->si ginest  = 0; 

B 

B 

B 

c t x->seps i g = 0; 

B 

B 

Q 

my self -> write  = parseSignature; 

B 

B 

n 

break; 

B 

B 

case 

PKTBYTE_CONVESK: 

B 

B 

case 

PKTBYTE_ESK: 

B 

B 

n 

myself->write  = parseESK; 

B 

B 

n 

break; 

B 

B 

case 

PKTBYTE_SECKEY : 

B 

B 

case 

PKTBYTE_PUBKEY : 

B 

B 

case 

PKTBYTE_SECSUBKEY : 

B 

B 

case 

PKTBYTE_PUBSUBKEY : 

B 

B 

case 

PKTBYTE_TRUST : 

B 

B 

case 

PKTBYTE_NAHE : 

B 

B 

case 

PKTBYTE_COHMENT : 

B 

B 

B 

my s e 1 f -> w r i t e = parseKey; 

B 

B 

B 

break; 

n n def au  L t : 


may  be 
, or  it 
packet 

cases  in 


a 

may 

from 


a 
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n n H myseLf->write  = parseUnknown; 

n n n break; 

n n > 

n > 

n /*  continue  processing,  if  we  can  */ 

n return  written  + myseLf->write  (myself,  buf,  size,  error); 
} 


/* 

* Start  a new  packet.  This  mostly  cleans  up  after  old  ones,  then 

* falls  through  to  parsePacket. 

*/ 

static  size_t 

nextScope  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n 33  int  *error) 

{ 

n struct  Context  *ctx; 

n size_t  written  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P AR S E RH AG  I C ) ; 
n pgpAssert  (error); 

13  ctx  = (struct  Context  * ) my  s e I f ->p  r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->tail); 

n pgpAssert  (!size  ||  !ctx->eof); 


n *error  = 0; 

33  /*  Get  rid  of  any  buffered  data  */ 

n i n pu t Pu r g e ( & c t x-> i n p u t ) ; 


□ 

33 

n 

D 

33 


/*  Clean  up  any  pipeline  set  up  to  process  the  packet.  */ 
i f ( ctx->end  ) { 

33  *error  = c t x->  t a i I ->  s i z e Ad  v i s e (ctx->tail,  0); 

33  if  (*error) 

33  n return  written; 


n 33  pa  r s e P i pe  I i n e T ea  r do  w n (ctx); 

n n c t x->n e X t pa r s e r = NULL; 

33  > 


33  / * 

n * Special  handling  at  end  of  1 pass  sig  signed  packet. 

33  * Retain  hashes  and  end_scope;  parsePacket  will  then  handle 

33  * the  following  signature  packet. 

33  * XXX 

n * Need  to  recognize  error  of  having  another  packet  type  there, 
n * / 

33  if  ( ! c t x->s  i g 1 pa  s s ) ( 


33  33 

33  33 

33  33 

n 33 

□ 33 

a □ 


/*  Send  the  end-scope  annotation  for  the  last  scope,  if  any.  */ 
if  ( c t x->end_s cope ) ( 

33  *error  = c t x->  t a i I ->a  n n o t a t e (ctx->tail,  myself, 
n n 33  n c t x->e  n d _ s c o p e , 0,  0); 

33  if  (*error) 

33  n return  written; 
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n ctx->end_scope  = 0; 
n c t x->  i n pu  t . s i L e n t _ t r u n c = 0; 


n n /*  Clean  up  any  pending  hashes  */ 
n n if  ( c t x->ha s h e s ) { 

n n n pgpHashListDestroy  (ctx->hashes,  ctx->numhashes); 

n n n ctx->hashes=0; 

n n > 


a ctx->findpkt  = 1; 
n myseLf->write  = parsePacket; 

n return  parsePacket  (myself,  buf,  size,  error); 

> 


/* 

* After  an  ESK,  call  this  function,  which  copies  the  current  packet  to 

* the  byte  FIFO,  and  sets  things  up  for  parsePacket  again. 

* It  doesn't  flush  the  FIFO  or  end  the  current  scope. 

*/ 

static  size_t 

nextESK  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *ctx; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S E RH AG  I C ) ; 

n pgpAssert  (error); 

n ctx  = (struct  Context  * ) my s e I f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx->tail); 

n pgpAssert  (!size  ||  !ctx->eof); 

n *error  = i n p u t To F i f o ( & c t x-> i n pu t ) ; 
n if  (*error) 

n n return  0; 


a ctx->findpkt  = 1; 
n myself->write  = parsePacket; 

n return  parsePacket  (myself,  buf,  size,  error); 

> 


static  int 

Flush  (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *ctx; 
n int  error  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  P A R S ERH AG  I C ) ; 

n ctx  = (struct  Context  * ) my s e I f ->p r i v ; 
n pgpAssert  (ctx); 
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n pgpAssert  (ctx->taiL); 


n 


□ 

□ 

> 


/*  Do  a write  to  force 
my s e L f ->w r i t e (myself, 
return  error  ? error  : 


out  any  hanging  data  */ 

(byte  const  *)0,  (size_t)0,  Serror); 
c t x-> t a i L ->f L u s h ( c t x-> t a i I ) ; 


static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *ctx; 
n int  error; 

n byte  const  *oLdbufptr; 

a size_t  (*oldwrite)(struct  PgpPipeLine  *,  byte  const  *,  size_t,  int  *); 
n pgpAssert  (myself); 

n pgpAssert  (myseLf->magic  ==  PARSERHAGIC); 

n ctx  = (struct  Context  * ) my s e L f ->p r i v ; 
n pgpAssert  (ctx); 

n pgpAssert  (ctx -> tail); 


n 

n 

Q 

□ 

n 

a 

Q 

n 

Q 

n 


/*  Do  any  expected  callbacks  */ 
if  ( c t x->n e ed c a L I ba c k ) f 
n switch  (type)  { 
n case  PGPANN_PARSER_EATIT : 
n case  PG P A N N_ P A R S E R_P A S S T H RO UG H : 
n case  PG P AN N_ P A R S E R_PR0 C E S S : 
a case  PG P AN N_P A RS E R_R E C U R S E : 

n n return  P r o c e s s C a L L ba c k (myself,  type,  string,  size); 
n > 

> 


n / * 

n * If  this  is  a hash  request  callback,  and  we  have  the 

n * requested  hash  being  computed,  copy  it,  hash  in  the 

n * extra  bytes,  and  pass  back  the  resultant  hash, 
n */ 

n if  (type  ==  PG P AN N_H AS H _R EQU E ST  ) { 
n n struct  Pg p H a s h Con t ex t const  *hc; 

n n struct  Pg p H a s h Con t ex t *temp_hc; 


n n 

D n 

D a 

□ n 

a □ 

n n 

□ D 

□ D 

n □ 

□ a 

□ D 

□ n 

n n 

n a 

D □ 


if  (!size) 

a return  PGPERR_BAD_HASHNUH; 

he  = pgpHa s h Li s t F i nd ( c t x->ha s he s , c t x->n umh a s h e s , 
n n pg pH  a s h By N umbe r ( s t r i n g C 0 D ) ) ; 

if  ( 1 h c ) 

n return  PG P E R R_B A D_H AS H N UM ; 
temp_hc  = pgpHashCLone  (he); 
if  (!temp_hc) 
n return  PG P E R R_N0H EH ; 

pg p H a s h U pd a t e (temp_hc,  string+1,  size-1); 
error  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  origin, 
n n n PG  P A N N_  H A S H _ V A LU  E , 


pgpHashFi na  L (temp_hc ), 
hc->hash->hashsize); 


pg p H a s h D e s t r oy  (temp_hc); 
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n 

n 

return  error; 

Q 

y 

n 

/* 

n 

★ 

Now,  ensure  that  we  have  written  out  everything  buffered 

that 

n 

■k 

we  plan  on  writing  out. 

Run  the  state  machine  forward  until 

n 

★ 

it  stops  changing. 

Et 

*/ 

n 

do 

{ 

□ 

n 

oldbufptr  = ctx->input 

. bu  f p t r ; 

n 

n 

oldwrite  = my s e 1 f ->w r i t e ; 

n 

Q 

(void)oldwri te(myself. 

0,  0,  Serror); 

n 

D 

if  (error) 

n 

n 

n return  error; 

n 

> while  ( c t x-> i n pu t . bu f p t r 

!=  oldbufptr  | | my s e 1 f -> w r i t e != 

oldwrite); 

n 

> 

return  c t x-> t a i 1 ->a n no t a t e 

(ctx->tail,  origin,  type,  string. 

size); 

static 

i nt 

SizeAdvise  (struct  PgpPipeLine 
/ 

*myself,  unsigned  long  bytes) 

□ 

struct  Context  *ctx; 

n 

i nt 

error; 

n 

byte  const  *oldbufptr; 

n 

size_t  ( *0  1 dw r i t e ) ( s t r u c t 

PgpPipeline  *,  byte  const  *,  size_ 

t,  int  *); 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  PARSERHAGIC); 
n ctx  = (struct  Context  *)myseLf->priv; 


Et 

pgpAssert  (ctx); 

□ 

pgpAssert  (ctx -> tail); 

Q 

/* 

D 

★ 

If  we're  in  the  middle  of  a 

packet  that  can  be  truncated 

Q 

★ 

without  error,  deal  with 

i t . 

n 

*/ 

Et 

i f 

(ctx->input.si  lent_trunc 

&& 

ctx- 

> i npu t . head . p k t 1 en  > bytes) 

n 

n 

ctx->input.head.pktlen 

= bytes; 

o 

/* 

n 

ilr 

Set  eof  flag,  which  a few  of 

the 

parsing  functions  need 

n 

★ 

to  do  special  things  at 

EOF 

when 

the  default  processing 

here 

n 

* 

is  not  desired. 

Q 

*/ 

n 

i f 

( ! by t e s ) 

n 

n 

ctx->eof  = 1; 

n 

/* 

D 

★ 

Now,  ensure  that  we  have 

w r i 1 1 en 

out  everything  buffered 

that 

D 

* 

we  plan  on  writing  out. 

Run 

the 

state  machine  forward  until 

Et 

* 

it  stops  changing. 

Et 

*/ 

D 

do 

{ 

n 

n 

oldbufptr  = ctx->input. 

b u f p t r ; 

n 

n 

oldwrite  = my s e 1 f -> w r i t e ; 

n 

n 

(void)oldwrite(myself. 

0,  0 

, Serror); 

n 

□ 

if  (error) 
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D n n return  error; 

n > while  ( c t x-> i n p u t . bu f p t r !=  oldbufptr  ||  my s e L f -> w r i t e !=  oLdwrite); 


a 

□ 

n 

o 

n 

□ 

n 

□ 

a 

□ 

n 

□ 

Q 

a 


/* 

* Are  we  shutting  down,  yet  not  in  a clean-shutdown  state? 

* (No  pending  packets,  no  bytes  waiting  to  be  parsed.) 

*/ 

if  (!bytes  &&  ! i n p u t F i n i s h e d ( & c t x-> i n p u t . h e a d ) ) { 


n 

i f 

( ! ctx->i nput 

.silent_trunc)  { 

n 

a 

error  = ctx 

->end_scope  ? PGPANN_S C0PE_ 

TRUNCATED  : 

n 

n 

□ no 

PGPANN_PACKET_ 

TRUNCATED; 

n 

B 

error  = ctx 

->ta i l->annotate 

( c t x->t  a i 1 

, myself. 

n 

B 

error,  0, 

0); 

Q 

B 

if  (error) 

□ 

B 

n return 

error; 

n 

B 

ctx-> input. 

silent_trunc  = 1 

;b  /*  Don 

't  repeat  */ 

□ 

} 

n n /*  Let  nextScope  do  the  cleanup.  */ 

B n my s e I f -> w r i t e = nextScope; 
n n ( VO i d ) n e X t S c o p e ( my s e I f , 0,  0,  Serror); 

n n if  (error) 

n n n return  error; 

n > 


n / * 

D * Send  down  a final  annotation... 

n * / 

n if  (Ibytes  &&  c t x->en d_s c ope  ==  0) 

B n return  c t x-> t a i I -> s i z e Ad v i s e (ctx->tail,  0); 
n return  0; 

} 


static  void 

Teardown  (struct  PgpPipeline  *myself) 

{ 

n struct  Context  *ctx; 
n pgpAssert  (myself); 

B pgpAssert  ( my s e I f ->ma g i c ==  P AR S E RM AG  I C ) ; 

n ctx  = (struct  Context  *)myself->priv; 
n pgpAssert  (ctx); 

n if  (ctx->tail) 

n n c t x-> t a i I -> t e a r do wn  (ctx->tail); 

n pgp F i f o Des t roy  ( &pg pBy t e F i f o D e s c , c t x-> i n pu t . f i f o ) ; 
n memset  (ctx,  0,  sizeof  (*ctx)); 
n pgpHemFree  (ctx); 

n memset  (myself,  0,  sizeof  (*myself)); 
n pgpMemFree  (myself); 

} 

struct  PgpPipeline  ** 

pgpPa rseBi nC reate  (struct  PgpPipeline  **head,  struct  PgpEnv  const  *env) 

{ 

n struct  PgpPipeline  *mod; 
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n struct  Context  *ctx; 

n if  (!head  ||  !env) 

n n return  NULL; 

n ctx  = (struct  Context  * ) pg pM em A L L o c (sizeof  (*ctx)); 

n if  (!ctx) 

n n return  NULL; 

n mod  = (struct  PgpPipeLine  *)pgpMemAlLoc  (sizeof  (*mod)); 
n if  (!mod){ 

B B pgpMemFree  (ctx); 

B n return  NULL; 

B } 

B memset  (ctx,  0,  sizeof  (*ctx)); 

B c t x->i npu t . f i f o = pg p F i f o C r ea t e ( fipg pBy t e F i f o D e s c ) ; 

B if  ( ! c t x-> i n p u t . f i f o ) < 

B B pgpHemFree(mod); 

B B pg pHem F r e e ( c t X ) ; 

B B return  NULL; 

B > 

B i npu t Reset ( 8c t x-> i npu t ) ; 

B ctx->findpkt  = 1; 

B ctx->env  = env; 

B mod->magic  = PARSERMAGIC; 

B mod->write  = parsePacket; 

B nod->fLush  = Flush; 

B mod->s i z e Ad V i s e = SizeAdvise; 

B mod->annotate  = Annotate; 

B mod->t ea rdown  = Teardown; 

B mod->naine  = "PGP  Message  Parser"; 

B mod->priv  = ctx; 

B ctx->tail  = *head; 

B *head  = mod ; 

B return  8ctx->taiL; 

} 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpPrsBin.h  --  The  PGP  Binary  Message  parser 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < w a r L o r d SM I T . E D L)> 

* 

* $Id:  pg p P r sB i n . h , V 1.4. 2.1  1997/06/07  09:51:01  mhw  Exp  $ 

*/ 

#ifndef  PGPPRSBIN_H 
#define  PGPPRSBIN.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 

struct  PgpPipeLine; 

#ifndef  T Y P E_PG P P I P E L I N E 

#de-fine  T Y P E_PG  PP I P E L I N E 1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

#end  i f 

struct  PgpEnv; 

#ifndef  TYPE.PGPENV 

#define  TYPE.PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#endi  f 

/* 

* Create  a binary  parser  moduLe.  This  moduLe  wiLL  read  in  data, 

* figure  out  what  kind  of  PGP  message  it  is,  and  create  the 

* appropriate  sub-moduLes  to  actuaLLy  decode  the  message,  depending 

* on  the  user's  wishes. 

* 

* It  communicated  with  the  Annotation  Reader,  which  is  a part  of  the 

* User  Interface,  to  explain  exactly  what  is  going  on  with  the 

* decoding  process.  This  moduLe,  once  the  pipeLine  is  put  into 

* action,  wiLL  add  and  deLete  moduLes  downstream. 

*/ 

struct  PgpPipeLine  PGPExport  **pg p Pa r s e B i n C r e a t e (struct  PgpPipeLine  **head, 
n n n n n struct  PgpEnv  const  *env); 

#ifdef  __cpLuspLus 
} 

#endi f 

#endif  /*  PGPPRSBIN.H  */ 
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/* 

* pgpReadAnn.c  --  Annotation  Reader 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  CoLin  PLumb  and  Derek  Atkins  < wa  r L o r dSlM  I T . E D U> 

* 

* $Id:  pgpReadAnn . c, V 1.5. 2.1  1 997/06/07  09:51:01  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e nd i f 


#incLude  <stdio.h> 
#incLude  <errno.h> 


#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 


n c L ud  e 
n c L ud e 
nc  L ude 
n c L u d e 
nc  Lude 
n c L u d e 
nc  L ude 
n c L u d e 
nc  Lude 
n c L u d e 
n c L u d e 
nc  Lude 
n c L u d e 
n c L ude 


" pgpDebug . h " 

" pgpReadAnn. h" 

" pgpV  r f y S i g . h " 

"pgpAnnotate.h 

"pgpESK.h" 

"pgpHash.h" 

"pgpHem. h" 

"pgpErr.h" 

"pgpHsg . h" 

"pgpUI . h" 

"pgpPipeLine.h 

"pgpSig.h" 

"pgpTextFiLt.h 

"pgpUsuaLs.h" 


#define  R E A D AN N OT AT  I ONM AG  I Cn  0xf00b0b 


/*  shouLd  never  have  more  than  this  many  nested  scopes!  */ 
#define  HAX_RECURSE  50 


struct 

a 

n 

n 

n 

n 

□ 

□ 

a 

a 

n 

n 

n 

□ 

n 

a 

□ 

>; 


Context  { 

int  stackCHAX.RECURSE:; 

i n t s p ; 

int  f i L e_sp ; 

int  type ; 

char  *name; 

struct  PgpPipeLine  *taiL; 

struct  PgpUICb  const  *ui; 

struct  PgpEnv  const  *env; 

void  *ui_arg; 

struct  PgpESK  *eskList; 

struct  PgpSig  *s i g L i s t C M AX_R E C U R S E ] ; 

byte  sepsi  gi:MAX_RECURSE:; 

/*  For  the  sigverify  ca L L ba c k-ca L L ba c k to  check  the  signature  */ 
struct  PgpSig  const  *cursig; 

/*  fLag  --  do  we  need  a new  output?  */ 
byte  newoutput ; 


struct  TryCB  { 

n struct  PgpPipeLine  *myseLf,  *origin; 

n int  repLy; 
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>; 

static  size_t 

Write  (struct  PgpPipeLine  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

a struct  Context  *context; 

a pgpAssert  (myself); 

a pgpAssert  ( my s e I f ->ma g i c ==  R E A D AN N OT AT  1 0 N M AG  I C ) ; 

a context  = (struct  Context  *)myseLf->priv; 

a pgpAssert  (context); 

a pgpAssert  (error); 


□ 

i f 

(context 

->newoutput)  ( 

□ 

u 

*error  = context- 

>ui ->newOutput 

(context->ui_arg 

n 

n 

n 

n n 

a 

&context->tai L, 

n 

n 

n 

tt  n 

a 

context->type. 

n 

n 

n 

n n 

u 

context->name) ; 

n 

Q 

i f 

( *e  r ro  r ) 

n 

n 

n 

return  0; 

□ 

n 

/* 

Remembe  r s cope 

to  close  output  */ 

n 

□ 

context->fi Le_sp 

= context->sp; 

a a c on t e X t ->n e wo u t pu t = 0; 

a > 

a pgpAssert  ( c o n t e x t -> t a i L ) ; 

a return  c o n t e x t -> t a i L -> w r i t e ( c on t ex t -> t a i L , buf,  size,  error);a 

} 

static  int 

s i g ha s h ( s t ru c t PgpPipeLine  *myself,  struct  PgpPipeLine  *origin,  int  reply) 
{ 

a struct  Context  *context; 

a byte*buf; 

a interr; 

a unsigned  Len; 

a pgpAssert  (myself); 

a pgpAssert  ( my s e L f ->ma g i c ==  R E A D AN N OT AT  I ON M AG  I C ) ; 

a context  = (struct  Context  * ) my s e L f ->p r i v ; 

a pgpAssert  (context); 

a /*  Build  list  of  hashes  we  need  */ 

a Len  = pg p S i g D i s t i n c t H a s h C ou n t ( c on t e x t -> s i g L i s t C c o n t e x t -> s p- 1 3 ) ; 

a buf  = (byte  * ) pg pH em A L L o c ( L e n ) ; 

a if  (!buf) 

a a return  PG P E R R_N OH E M ; 

a pgpS  i g D i s t i n c t Ha s h e s ( con t ex t->s i g L i s t C con t ex t->s p-1 3 , buf); 

a /*  Tell  the  parser  to  do  the  hashes  */ 

a err  = o r i g i n->a n no t a t e (origin,  myself,  reply,  buf,  Len); 

a pg pMem F r e e ( bu f ) ; 

a return  err; 

} 
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/*  Try  out  all  the  hashes  */ 

/*  (Note  that  this  is  called  with  context->sp  already  decremented)  */ 
static  i nt 

sigtry  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin) 

{ 

n struct  Context  *context; 

n byte  buf[1003; 

n byte  const  *extra; 

n unsigned  extralen; 

n struct  PgpSig  const  *sig; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  READANNOTATIONHAGIC); 


n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert  (context); 


n 

n 

n 

□ 

n 

n 

D 

n 

□ 

a 

D 

D 

D 

n 

□ 

D 

□ 

D 

n 

} 


for  (sig  = c o n t ex t ->s i g I i s t C c on t e x t -> s p D ; sig; 
n n n n sig  = pgpSigNext  (sig))  { 

n bufC03  = pgpS  i g Ha  s h ( s i g ) ->  t y pe  ; 

n extra  = pg p S i g E x t r a ( s i g , &extralen); 

n memcpy(buf+1,  extra,  extralen); 

n con t ex t ->c u r s i g = sig; 

n /*  This  ends  up  invoking  sigverify,  below  */ 

n error  = o r i g i n->a n n o t a t e (origin,  myself, 

n n n n PG P AN N_H A S H _ R EQU E S T , 

n n n n buf,extralen+1); 

n if  (error)  { 

n n context->ui ->message  ( c on t ex t ->u i _a r g , error, 

n n n n PG PH S G_S I G_E R RO R , 0); 

n > 

} 

con t ex t -> c u r s i g = 0; 

pgpSigFreeList  (context->siglistCcontext->spD); 
con t ext->s i g I i s t C con t ex t->spD  = 0; 
return  0; 


/*  Get  the  callback  from  the  callback...  */ 

/*  (Note  that  this  is  called  with  context->sp  already  decremented)  */ 
static  i nt 

si gveri f y(struct  PgpPipeline  *myself,  byte  const  *string,  size_t  size) 
{ 

n struct  Context  *context; 

n struct  PgpHash  const  *hash; 

n (void)size;n  n /*  Avoid  warning  */ 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  READANNOTATIONHAGIC); 


n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( context->cu rs i g ) ; 

n hash  = pgpSigHash  (context ->cursig); 

n pgpAssert  (hash); 

a pgpAssert  (size  ==  h a s h -> h a s h s i z e ) ; 
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n return  c on t e x t -> u i -> s i g V e r i f y ( c on t e x t ->u i _a r g , c on t e x t -> c u r s i g , 

n a n n string); 

} 


static  i nt 

sepsighash  (struct  Context  *context) 

{ 

n i n t e r r ; 

n err  = pg p S e p s i g V e r i f y ( c on t ex t -> s i g I i s t C c o n t e x t -> s p- 1 D , c o n t e x t ->e n v , 

n n n context->ui,  c on t e x t ->u i _a r g ) ; 

n pgpS i g F r ee Li s t ( c o n t e x t -> s i g L i s t C c on t e x t -> s p- 1 D ) ; 

n context->sigList[!context->sp-13  = 0; 

n return  err; 

> 


/* 

* Try  a single  key  to  see  if  it  works. 

*/ 

static  int 

eskTryKey  (void  *arg,  byte  const  *key,  size_t  keylen) 

{ 

n struct  TryCB  const  *cb  = (struct  TryCB  *)arg; 

n pgpAssert  (cb); 

n pgpAssert  ( c b->my s e L f ) ; 

n pgpAssert  ( c b->my s e L f ->ma g i c ==  R E A D AN N OT AT  I ON M AG  I C ) ; 

n pgpAssert  ( c b->o r i g i n ) ; 

n return  c b->o r i g i n->a n n o t a t e (cb->origin,  cb->myseLf,  cb->repLy, 

n n n n key, keylen); 

} 


/* 

* Decrypt  an  PgpESK  from  an  esklist  --  this  calls  the  UI  function  to 

* decrypt  an  esklist.  Uses  the  eskTryKey  function  to  try  the  keys, 

* and  p r e-a  I I o c a t e s a buffer  which  is  the  largest  possible  PgpESK  from 

* all  the  PgpESKs  in  the  list.  Returns  0 or  an  error. 

*/ 

static  int 

eskdecrypt  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  reply) 
{ 

n struct  TryCB  cb; 

n struct  Context  *context; 

n struct  PgpESK  const  *esk; 

n byte  *buf  = 0; 

n inti,  buflen=0; 

n size_t  keylen  = 0; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  R E A D AN  NOT AT  I ONH AG  I C ) ; 


n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 


□ 


cb. myself  = myself; 
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Q 

cb. origin  = origin; 

□ 

cb. reply  = reply; 

n 

/*  Figure  out  the  size  of  the  largest  PgpESK  */ 

n 

for  (esk  = context ->esklist;  esk;  esk  = pgpEskNext(esk))  ( 

n 

n i = pgpEskMaxKeySi ze  (esk); 

n 

n if(buflen<i) 

n 

n n buflen=i; 

n 

> 

n 

if  (buflen)  ( 

n 

n buf  = (byte  * ) pg pMem A 1 1 o c ( b u f 1 en ) ; 

□ 

n if  (!buf) 

Q 

n n return  PGPERR_N0MEM; 

n 

} else 

Q 

a return  PGPERR_ESK_ NODECRYPT; 

n 

keylen  = ( s i z e_ t ) bu f 1 e n ; 

n 

i = con t ex t->u i ->es kDe c ry p t ( con t e x t ->u i _a r g , con t e x t ->e s k 1 i s t , buf. 

Q 

n n n Skeylen,  eskTryKey,  &cb); 

n 

memset ( buf  , 0,  buflen); 

□ 

pgpHemFree(buf); 

n 

pgpEskFreeList  (context->esklist); 

a 

context->esklist  = 0; 

n 

if  (i  ) { 

n 

n /*  Cannot  decrypt...  Either  eatit  or  passthrough  */ 

n 

n if  (i  !=  PGPANN_PARSER_EATIT  S8  i !=  PG P AN N_P A R S E R_P A S ST H RO UG H ) 

n 

n n return  PGPERR_CB_INVALID; 

n 

n cb. reply  = i;n  /*  What  to  do?  */ 

n 

n i = eskTryKey  (&cb,  NULL,  0); 

n 

> 

□ 

return  i ; 

static  int 

Annotate  (struct  PgpPipeline  *myseLf,  struct  PgpPipeLine  *origin,  int  type. 


D 

byte  const  *string,  size_t  size) 

□ 

struct  Context  *context; 

n 

int  error  = 0; 

n 

int  i ; 

D 

struct  PgpUICbArg  msgargi; 

n 

pgpAssert  (myself); 

n 

pgpAssert  ( my s e 1 f ->raa g i c ==  R E A D ANNOT AT  I 0 NH AG  I C ) ; 

n 

context  = (struct  Context  * ) my s e 1 f ->p r i v ; 

n 

pgpAssert  (context); 

n 

if  (PGP_IS_SCOPE_MARKER  (type))  { 

n 

n if  (PGP_IS_BEGIN_SCOPE  (type))  ( 

Q 

n n c on t ex t ->s t a c k C con t e X t -> s P++ ] = type; 

n 

n > e 1 s e { 
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n 

a 

B 

pgpAssert(PGP_IS_END_SCOPE  (type)); 

n 

n 

B 

i f 

( con t ex t->s t a c k C con t ex t ->sp  - 1]  !=  type  - 1) 

n 

n 

B 

B 

context->ui->niessage  (context->ui_arg. 

n 

n 

B 

B 

n n PGPERR_UNBALANCED_SCOPE, 

a 

u 

B 

B 

n n PGPMSG_UNBALANCED_SCOPE, 

n 

□ 

B 

B 

n n 0 ) ; 

a 

n 

B 

else 

{ 

n 

n 

B 

B 

context->stackC  — context->sp3  = 0; 

n 

n 

B 

fl 

context->sepsigCcontext->sp3  = 0; 

u 

Q 

B 

> 

n 

n 

> 

Q 

n 

/* 

n 

n 

* 

For 

clears 

igned  messages,  preserve  type.  See  comments 

n 

n 

* 

re 

PGPANN_ 

C LE AR S I G_B E G I N / E N D below.  Otherwise  go  back 

n 

n 

* 

t 0 

type 

0 f 

next  annotation  on  the  stack. 

n 

□ 

*/ 

n 

n 

i f 

( ! 

( type= 

=PGPANN_ARMOR_BEGIN  && 

H 

n 

B 

B 

n context->type==PGP_LITERAL_TEXT)) 

a 

n 

B 

1 f 

(context ->sp) 

n 

Q 

B 

B 

context->type  = c on t ex t -> s t a c k C c o n t e x t -> s p- 1 3 ; 

n 

> 

a 

i f 

( context 

->ui 

->annotate)  ( 

n 

n 

error 

= 

c 0 n t ex t ->u i ->a n no t a t e ( c o n t e x t ->u i _a r g , origin. 

n 

Q 

B 

B 

n type,  string,  size); 

a 

n 

i f 

(error) 

u 

n 

B 

return  error; 

□ 

> 

Q 

switch  (type) 

{ 

n 

case  PGPANN 

_C0MHIT : 

u 

n 

do 

{ 

n 

n 

B 

i = 

context->ui->doCommi t 

Q 

n 

B 

B 

(context->ui_arg. 

n 

n 

B 

B 

context ->stackCcontext->sp  - 1]); 

n 

n 

B 

i f 

( 1 

!=  PGPANN_PARSER_PASSTHROUGH  &S 

n 

n 

B 

i 

!=  PGPANN_PARSER_EATIT  S8 

n 

a 

B 

i 

!=  PGPANN_PARSER_PROCESS  &8 

s 

n 

B 

i 

!=  PGPANN_PARSER_RECURSE ) { 

n 

B 

B 

B 

msgargl.type  = PG P_U I _ A RG_ I NT ; 

n 

B 

B 

B 

msgargl.val.i  = i; 

a 

B 

B 

B 

context->ui->message  (context->ui_arg. 

n 

B 

B 

B 

n n PGPERR_COMMIT_INVALID, 

n 

B 

B 

fl 

n n PGPMSG_COMMIT_INVALID, 

n 

B 

B 

B 

n n 1 , 

□ 

B 

B 

B 

n n fimsgargl); 

n 

B 

B 

B 

continue; 

n 

B 

B 

} 

n 

B 

B 

1 f 

(i 

< PGPANN_PARSER_PROCESS ) ( 

n 

B 

B 

B 

error  = o r i g i n->a n n o t a t e (origin,  myself,  i. 

n 

B 

B 

fl 

0,  0); 

s 

B 

B 

B 

if  (error) 

u 

B 

B 

B 

n c on t e X t -> u i ->me s s a g e 

n 

B 

B 

B 

n n ( c 0 n t e X t ->u i _a r g , error. 
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s 

n 

n 

□ 

B 

n PGPMSG_ANN0TATE_ERR0R,  0); 

Q 

□ 

n 

> else 

if  ( context->stackCcontext->sp-1 3 == 

n 

n 

n 

PGPANN_CIPHER_BEG1N)  { 

n 

□ 

n 

n 

error  = e s kde c ry p t ( my se L f , origin,  i); 

n 

a 

a 

n 

i f 

(error)  ( 

□ 

n 

n 

n 

n 

context->ui->message 

n 

n 

B 

n 

B 

n ( context->ui _a rg,  error. 

n 

Q 

B 

□ 

B 

n PGPI*1SG_ESK_N0DECRYPT,  0); 

n 

n 

B 

□ 

B 

break; 

a 

n 

B 

n 

} 

□ 

D 

B 

> else 

if  ( context->stackCcontext->sp-1 3 == 

□ 

n 

B 

PGPANN_SIGNED_BEGIN)  { 

n 

n 

B 

n 

i f 

(context->sepsig[!context->sp-13)  < 

Q 

n 

B 

n 

n 

error  = s e p s i g ha s h ( c on t e x t ) ; 

n 

D 

B 

n 

n 

if  (error)  ( 

n 

n 

B 

n 

n 

n c on t ex t -> u i ->me s sa g e 

n 

n 

n 

n 

n 

n ( context->ui _a rg,  error. 

a 

n 

n 

D 

n 

n PGPHSG_SEPSIG_N0VER1FY, 

n 

n 

B 

n 

B 

n break; 

n 

n 

B 

D 

B 

} 

n 

n 

B 

D 

> e 

1 s e ( 

n 

u 

B 

Q 

n 

error  = s i g ha s h ( my s e 1 f , origin,  i); 

□ 

n 

B 

n 

B 

if  (error)  ( 

n 

u 

B 

D 

B 

a c on t e X t -> u i ->me s s a g e 

n 

a 

B 

n 

B 

n ( c on t ex t ->u i _a r g , error. 

Q 

a 

B 

n 

B 

n PGPHSG_SIG_NOVERI FY,  0) 

n 

n 

B 

n 

B 

n break; 

Q 

n 

B 

n 

B 

} 

n 

n 

B 

D 

y 

□ 

n 

B 

> else 

i 

o 

n 

B 

n 

error  = ori gi n->annotate  (origin,  myself,  i 

n 

n 

B 

n 

0,  0); 

n 

n 

B 

n 

i f 

(error) 

n 

s 

B 

n 

n 

context->ui->message 

n 

n 

B 

n 

B 

n ( con t ext->u i _a rg , error. 

n 

n 

B 

n 

B 

n PGPMSG_ANNOTATE_ERROR,  0); 

a 

u 

n 

> 

n 

n 

> while 

(error) 

r 

a 

n 

break; 

tt 

case 

PGPANN 

_PKCIPHER_ESK: 

n 

case 

PGPANN 

_SKCIPHER_ESK: 

Q 

a 

i = 

pgpEskAdd(&context->esklist,  type,  string,  size); 

n 

n 

i f 

(i  ! 

= 0)  { 

n 

n 

n 

context 

->ui 

->message  ( context->ui _a rg,  i. 

n 

□ 

n 

n 

n 

PGPHSG_ESK_ADD_ERROR,  0); 

n 

□ 

} 

□ 

□ 

break; 

n 

case 

PGPANN 

_SIGNED_SIG : 

n 

case 

PGPANN 

_SIGNED_SIG2 

: 

n 

Q 

/* 

Add 

signature  for  */ 

D 

n 

i = 

pgpSigAdd  ( & c on t e x t -> s i g L i s t C c on t ex t -> s p- 1 3 , type. 

n 

o 

c 

string,  size); 

s 

n 

i f 

( i ! 

II 

n 

n 

n 

context 

->ui 

->message  ( c on t e x t ->u i _a r g , i. 

n 

n 

n 

n 

B 

PGPMSG_SIG_ADD_ERROR,  0); 

n 

n 

> 

n 

n 

break; 
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case  PGPANN  SIGNED  SEP: 


/*  This  signature  context  is  for 
c on  t e X t -> s e p s i g C c on  t e X t -> s p- 1 !]  = 
break; 

PGPANN_SIGNED_END : 

error  = s i g t r y ( my s e L f , origin); 
break; 

PGPANN_HASH_VALUE  : 

error  = s i g v e r i f y ( my s e L f , string,  size); 
break; 


a separate  signature  */ 
1; 


if  (size) 

n c on  t e X t ->  t y p e = stringC0II; 

break; 


B 
B 
B 

case  PGPANN  LITERAL  NAME: 


n 

B 

if  (si 

z e ) { 

□ 

B 

B 

if  ( c 0 n t e X t ->na me ) 

□ 

B 

B 

B 

pgpHemFree  ( con t ex t->name ) ; 

n 

B 

B 

context 

->name  = (char  *)pgpHemAlloc  (size+1); 

□ 

B 

B 

if  ( con t ex t ->name ) ( 

a 

B 

B 

B 

memcpy  ( c o n t e x t -> n a me , string,  size); 

B 

B 

B 

B 

context->nameCsize!]  = 0; 

B 

B 

B 

> else 

B 

B 

B 

B 

error  = PG P E R R_NOM EM ; 

B 

B 

> 

B 

B 

break; 

B 

/* 

B 

★ 

The  actual 

sequence 

is:  PGPANN_CLEARSIG_BEGIN,  PG P AN N_C LE A R S I G_ E N D , 

B 

★ 

PGPANN_ARMOR_BEGIN, 

and  then  we  do  a Write  when  we  want  our 

type 

B 

★ 

to  be  PG P_ LI T E R A L_T EXT . So  it  takes  some  careful  work  here 

and 

B 

* 

a bove  . 

B 

*/ 

case  PGPANN_CLEARSIG_BEGIN : 
case  PGPANN_CLEARSIG_END : 

B /*  CLearsigned  messages  are  always  text!  */ 

B context->type  = PG P_ L I T E R A L_T E XT ; 

B break; 

default: 

B ;/*Donothing*/ 


B 

/* 

At  end 

of  scope. 

shut  down  output  */ 

B 

if 

( (error 

&S  context->ta i 1 S&  PGP_IS_END_SCOPE  (type) 

B 

context ->  sp  < 

context->fi le_sp) 

B 

{ 

B 

B 

error  = c on t e x t -> t a i 1 -> s i z e Ad v i s e ( c on t ex t -> t a i 

B 

B 

i f 

( ! e r ro  r ) 

{ 

B 

B 

B 

i f 

( c on t e X t ->n a me  ) ( 

B 

B 

B 

□ 

pgpHemFree  (context->name); 

B 

B 

B 

D 

c o n t ex t -> n a me  = NULL; 

B 

B 

B 

} 

B 

B 

B 

context->type  = -1; 

B 

B 

B 

c 0 n t e X t -> n e wo u t pu t = 1; 

B 

B 

> 

B return  error; 
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> 


static  int 

Flush  (struct  PgpPipeline  *myseLf) 

{ 

n struct  Context  *context; 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  READANNOTATIONMAGIC); 

n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert  (context); 

n if  ( ! context->tai  I ) 

n a return0; 

n return  c o n t e x t -> t a i I ->f I u s h ( c on t e x t -> t a i I ) ; 

> 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 
{ 


n 

struct 

Context  *context; 

n 

int  error 

= 0; 

a 

pgpAssert 

( myse  If); 

n 

pgpAssert 

(myself->magi c ==  READANNOTATIONMAGIC); 

a 

context 

= 

(struct  Context  *)myself->priv; 

B 

pgpAssert 

(context); 

B 

if  (tbytes 

S&  context->ta i 1 ) { 

B 

B 

error  = con t ex t -> t a i 1 -> s i z e Ad v i s e (context 

B 

n 

i f 

(terror)  { 

B 

B 

B 

if  ( c on t e X t ->na me ) { 

B 

B 

B 

n pgpMemFree  ( c on t ex t ->na me ) 

B 

B 

B 

n c on t ex t ->name  = NULL; 

B 

B 

B 

> 

B 

B 

B 

context->type  = -1; 

B 

B 

B 

con t ex t ->n e wou t pu t = 1; 

B 

B 

> 

B 

} 

B 

> 

return 

error; 

Static 

void 

Teardown  (struct  PgpPipeline  *myself) 
r 

n 

struct 

Context  *context; 

n 

pgpAssert 

( myse  If); 

n 

pgpAssert 

(myself->magi c ==  READANNOTATIONMAGIC); 

n 

context 

= 

(struct  Context  * ) my s e 1 f -> p r i v ; 

B 

pgpAssert 

(context); 

pgpEskFreeList  (context->esklist); 
con t ex t ->e s k I i s t = 0; 
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if  ( context->name) 

n pgpMemFree  ( c on t ex t ->na me ) ; 

context->name  = 0; 
if  ( c o n t ex t -> t a i L ) 

n con t ex t -> t a i L -> t ea rdown  ( c on t ex t -> t a i L ) ; 


n 

memset 

(context,  0, 

si z eo  f 

(*context)); 

Q 

pgpMemFree  (context); 

n 

memset 

(myself,  0, 

si z eo  f 

( *myse If)); 

n 

> 

pgpMemFree  (myself) 

r 

struct 

PgpPipel 

i n e * * 

pgpAnnotationReaderCreate  (struct 

PgpPipeline  **head 

□ 

B 

B 

struct 

PgpEnv  const  *env. 

n 

f 

B 

B 

struct 

PgpUICb  const  *ui  , 

\ 

n 

Struct 

PgpPipeLine 

*mod  ; 

B 

struct 

Context  *context; 

B 

if  (Ihead  ||  !env) 

B 

B 

return  NULL 

/ 

void  *arg) 


*head  = 0; 


context  = (struct  Context  * ) pg pM emA L L o c Csizeof  (*context)); 
if  (!context) 
n return  NULL; 

mod  = (struct  PgpPipeLine  * ) pg pMemA L L o c (sizeof  (*mod)); 
if  ( ! mod  ) { 

n pgpMemFree  (context); 

n return  NULL; 

> 


mod->magic  = R E A D AN  NOT AT  I ONM AG  I C ; 

mod->urite  = Write; 

mod->fLush  = Flush; 

mod-> s i z e Ad V i s e = SizeAdvise; 

mod->a n no t a t e = Annotate; 

mod-> t e a r do wn  = Teardoun; 

mod->name  = "Simple  Annotation  Reader"; 

mod->priv  = context; 


memset  (context,  0,  sizeof  (*context)); 

context ->ui  = ui; 

c o n t e X t ->u i _a r g = arg; 

context ->env  = env; 

c on t e X t ->n e wou t p u t = 1; 

c o n t e X t -> t y p e = -1; 


*head  = mod; 

return  &context->tail; 
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/* 

* pgpReadAnn.h  --  A debugging  Annotation  Reader. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r daW I T . E D U> 

•k 

* $Id:  pg pRea d Ann . h , V 1.4. 2.1  1997/06/07  09:51:01  mhw  Exp  $ 

*/ 

#ifndef  PGPREADANN_H 
//define  PGPREADANN.H 

#incLude  "pgpUsuaLs.h" 

//ifdef cpLuspLus 

extern  "C"  { 

//  e n d i f 

struct  PgpPipeLine; 

//ifndef  T YP  E_PG  PP 1 P E LI  N E 

//define  TYPE.PGPPIPELINE  1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

// end i f 


struct  PgpEnv; 

//ifndef  TYPE.PGPENV 
//define  TYPE.PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 
#endi f 


struct  PgpUICb; 

//ifndef  TYPE.PGPUICB 
//define  TYPE.PGPUICB  1 
typedef  struct  PgpUICb  PgpUICb; 
// e nd i f 


/* 

* Create  an  annotation  reader.  This  wiLL  create  output  fiLes  as 

* appropriate.  If  filename  is  non-NULL,  it  wiLL  use  that  filename 


* as  the  output  fiLe.  Otherwise 

* out  of  the  message. 

*/ 

struct  PgpPipeLine  PGPExport  ** 
pgpAnnotationReaderCreate  (struct 
n n n struct 

n n n struct 

//ifdef cpLuspLus 

> 

// e nd i f 

//endif  /*  PGPREADANN.H  */ 


it  wiLL  ask  the  user  or  use  the  name 


PgpPipeLine  **head, 

PgpEnv  const  *env, 

PgpUICb  const  *ui,  void  *arg); 
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/* 

* pgpVerifyRa.c  --  An  Annotation  Reader  to  do  Signature  Verification 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r L o r d aM  I T . E D Ll> 

★ 

* $Id:  pg p V e r i f y Ra . c , V 1.6. 2.1  1 997/06/07  09:51:01  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i f 

#incLude  <stdio.h> 


SincLude 

" pgpDebug . h " 

#i nc  Lude 

"pgpVeri fyRa  . h 

#incLude 

"pgpVrfySig.h" 

#i nc  Lude 

"pgpAnnotate.h 

#i ncLude 

"pgpDevNuL  L . h" 

#i nc  Lude 

"pgpHash.h" 

#incLude 

"pgpJoin.h" 

#incLude 

"pgpMem. h" 

#incLude 

"pgpEnv.h" 

#incLude 

"pgpErr.h" 

#incLude 

"pgpMsg.h" 

#incLude 

" pg  pU I . h " 

#incLude 

"pgpPipeLine.h 

# i n c L ud e 

"pgpSi g . h" 

^define  V E R I F YR AHAG I C Sn  0x519c43c7 
#define  V E R I F Y R AMAG I CTn  0x519c43c8 


struct 

s 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

a 

u 

n 

>; 


Context 

{ 

struct 

PgpPipeLine  *joinhead. 

struct 

Pg pHa s h C on t e X t *hashes 

struct 

PgpSig  *sigList; 

struct 

PgpEnv  const  *env; 

struct 

PgpUICb  const  *ui; 

void  * 

u i _a  rg ; 

int  numhashes; 
i n t s cope_dep t h ; 
int  i g n o r e_d e p t h ; 
byte  i gnore_text ; 
byte  textcLosed; 
byte  si gc  Losed; 
byte  textdone; 
byte  sigdone; 


*joi ntext. 


**jointai 


static  int 

ve r i f y S i z e Ad V i s e (struct  Context  *ctx) 

{ 

n interror=0; 

n /*  when  both  text  and  sig  are  done,  verify  the  signature  */ 

a if  ( c t x-> t e X t c L o s ed  &&  c t x-> s i g c L o s e d SS  c t x-> s i g L i s t ) ( 

n n error  = pgpSigVerify  ( c t x-> s i g L i s t , ctx->hashes. 
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n 

Q 

a 

a 

c t x->n umh a s h e s , ctx->ui,  ctx- 

n 

n 

if  (lerror) 

{ 

n 

n 

a 

i f 

(ctx->sigList)  { 

n 

n 

a 

a 

pgpSigFreeList  ( c t x-> s i g L i s t ) ; 

n 

n 

a 

a 

ctx->si g L i St  = 0; 

n 

n 

a 

> 

n 

n 

a 

i f 

(ctx->hashes)  { 

n 

a 

a 

a 

pgpHashLi stDest roy  ( c t x-> h a s h e s , 

n 

a 

a 

a 

n n c t x-> n umh a s h e s ) 

n 

a 

a 

a 

ctx->hashes  = NULL; 

Q 

a 

a 

a 

c t x->n umh a s h e s = 0; 

n 

a 

a 

> 

n 

a 

> 

n 

> 

n 

> 

return 

error; 

static 

void 

veri fyTeardown 

T 

(struct 

PgpPipeLine  *myseLf) 

n 

struct 

Context 

*ctx 

= (struct  Context  * ) my s e L f -> p r i v ; 

n pgpAssert  ( c t x-> j o i n h e a d ) ; 

a pgpAssert  ( c t x-> j o i n t e x t ) ; 


n if  ( ! ctx->textdone  ||  ! c t x-> s i gdon e ) 

n n return; 


a c t x-> j o i nhead->t ea rdown  ( c t x-> j o i n h ea d ) ; 

n c tx->j o i nt ex t->t ea rdown  ( c t x-> j o i n t e x t ) ; 


i f ( c t x->ha  s he  s ) { 

n pgpHa sh Li s t De s t roy  ( c t x->ha s h e s , c t x->n umh a s h e s ) ; 

n ctx->hashes  = NULL; 

}n  n 


i f ( c t x->s i g I i s t ) { 

n pgpSigFreeList  (ctx->sigList); 

n ctx->sigList  = 0; 

> 


n memset  (ctx,  0,  sizeof  (*ctx)); 

n pgpMemFree  (ctx); 

> 


static  int 

tFLush  (struct  PgpPipeLine  *myseLf) 
{ 


a 

struct  Context  *context; 

a 

pgpAssert 

(myself); 

a 

pgpAssert 

(myseLf->magi c ==  V E R I F YR AM AG  I C T ) 

a 

context  = 

(struct  Context  * ) my s e L f ->p r i v ; 

a 

pgpAssert 

(context); 

a 

pgpAssert 

(context->jointext); 

Ci:CHK:aa208759011b62119774ffddf666ddf110d7003321124bbf12dd65560c167c42a]: 


Pretty  C5ood  Privacy  5.0’^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1286 


pgpVerifyRa.c 


Q 

return  c on t e x t -> j o i n t e x t -> f L u s h ( c o n t e x t -> j o i n t e x t ) ; 

> 

Static 

s i ze_t 

t W r i t e 

(struct  PgpPipeLine  *nnyseLf,  byte  const  *buf,  size_t  size,  int  *error) 

□ 

struct  Context  *context; 

□ 

pgpAssert  (myseLf); 

B 

pgpAssert  ( my s e L f ->ma g i c ==  V E R I F Y R AM AG  I CT ) ; 

B 

pgpAssert  (error); 

B 

context  = (struct  Context  * ) my s e L f ->p r i v ; 

B 

pgpAssert  (context); 

B 

pgpAssert  (context->jointext); 

B 

return  c o n t e x t -> j o i n t e x t -> w r i t e ( c o n t e x t -> j o i n t e x t , buf,  size,  error); 

} 

Static 

i nt 

tAnnotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type. 


B 

byte  const  *string,  size_t  size) 

{ 

B 

struct  Context  *context; 

B 

pgpAssert  (myseLf); 

B 

pgpAssert  ( my s e L f ->ma g i c ==  V E R I F Y R AH AG  I C T ) ; 

B 

context  = (struct  Context  * ) my s e L f ->p r i v ; 

B 

pgpAssert  (context); 

B 

pgpAssert  ( c on t e x t -> j o i n t e x t ) ; 

B 

return  con t ex t-> j o i n t ex t->a nno t a t e ( con t ex t-> j o i n t ex t , origin,  type. 

B 

n n n n string, size); 

> 

Static 

int 

tSizeAdvise  (struct  PgpPipeLine  *myseLf,  unsigned  Long  bytes) 


B 

struct  Context  *context; 

B 

int  error; 

B 

pgpAssert  (myseLf); 

B 

pgpAssert  ( my s e L f ->ma g i c ==  V E R I F Y R AM AG  I C T ) ; 

B 

context  = (struct  Context  *) myseLf ->priv; 

B 

pgpAssert  (context); 

B 

if  (bytes) 

B 

n return0; 

B 

error  = c o n t e x t -> j o i n t ex t -> s i z e Ad v i s e ( c o n t e x t -> j o i n t ex t , 0); 

B 

if  (error) 

B 

n return  error; 

B 

B 

c 0 n t e X t -> t e X t c L 0 s e d = 1; 
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n return  v e r i f y S i z e Ad v i s e (context); 

} 

static  void 

tTeardown  (struct  PgpPipeLine  *myseLf) 

{ 


□ 

struct  Context  ‘context; 

Q 

pgpAssert 

( myse  If); 

Q 

pgpAssert 

(myse  Lf->magi c 

==  VERIFYRAMAGICT); 

n 

context  = 

(struct  Context 

‘)myseLf->priv; 

n 

pgpAssert 

(context); 

□ 

c on t e X t -> t e X t d on e = 1; 

n 

V e r i f y Te a r d 0 w n (myself); 

n 

memset  (myself,  0,  sizeof 

( ‘myse  If)); 

n 

> 

pgpMemFree 

(myself); 

static 

i nt 

sFLush  (struct  PgpPipeLine  *myseLf) 

{ 

n struct  Context  ‘context; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  V E R I F Y R AM AG  I C S ) ; 

n context  = (struct  Context  *)myself->priv; 

n pgpAssert  (context); 

n return0; 

} 

static  size_t 

sWrite  (struct  PgpPipeLine  ‘myself,  byte  const  ‘buf,  size_t  size,  int  ‘error) 
{ 

n struct  Context  ‘context; 

n pgpAssert  (myself); 

n pgpAssert  ( myse L f->mag i c ==  V E R I F Y R AH AG  I C S ) ; 

n pgpAssert  (error); 

n context  = (struct  Context  ‘)myseLf->priv; 

n pgpAssert  (context); 

n (void)buf; 

n if(size){ 

n n if  ( c on t ex t -> i g n o r e_ t ex t ) 

n n n returnsize; 

n n ‘error  = PG P E R R_ VR F YS I G_W R I T E ; 

n n return0; 

n > 

n return0; 

} 
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static  int 

sAnnotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type. 


n 

byte  const  *string,  size_t  size) 

i 

n 

struct  Context  *context; 

u 

int  error  = 0; 

n 

pgpAssert  (myself); 

u 

pgpAssert  ( my s e L f ->ma g i c ==  V E R I F YR AM AG  I C S ) ; 

n 

context  = (struct  Context  *)myseLf->priv; 

Q 

pgpAssert  (context); 

n 

(void)origin; 

n 

/* 

n 

* We  only  accept  a few  annotations  here.  Things  we  dont  know 

n 

* are  considered  an  error.  Only  a known  set  of  annotations  are 

n 

* accepted,  and  most  of  these  are  ignored.  We  are  allowed  to  be 

D 

* in  armor,  and  only  a sepsig  is  allowed. 

Q 

★ 

D 

* Text  is  only  ignored  if  it  is  within  a NONPGP  scope.  Otherwise 

n 

* it  is  not  ignored  and  an  error  will  be  returned. 

□ 

★ 

□ 

* Commit  requests  are  ignored,  too. 

Q 

*/ 

□ 

switch  (type)  { 

n 

case  PGPANN_ARMOR_BEGIN : 

B 

case  PGPANN_ARMOR_END : 

B 

case  PGPANN_FILE_BEGIN: 

B 

case  PGPANN_FILE_END : 

B 

case  PGPANN_INPUT_BEGIN : 

B 

case  PGPANN_INPUT_END : 

B 

case  PGPANN_C0MMIT : 

B 

case  PGPANN_SIGNED_BEGIN: 

B 

case  PGPANN_SIGNED_END : 

B 

case  PGPANN_SIGNED_SEP : 

B 

n break; 

B 

case  PGPANN_NONPGP_BEGIN : 

B 

n if  ( c on t e X t -> i g no r e_ t ex t ) 

B 

n n break; 

B 

n c on t e X t -> i g no r e_ t e X t = 1; 

B 

n con t ex t-> i g no r e_dep t h = c on t e x t -> s c ope_dep t h + 1; 

B 

n break; 

B 

case  PGPANN_NOMPGP_END : 

B 

n pgpAssert  ( c on t e x t -> i g no r e_ t e x t ) ; 

B 

n if  ( con t ex t->i gno r e_dep t h ==  c o n t e x t -> s c ope_d e p t h ) 

B 

n n c on t e X t -> i g no r e_ t ex t = 0; 

B 

n break; 

B 

case  PGPANN_SIGNED_SIG  : 

B 

n error  = pgpSigAdd  (&context->siglist,  type,  string,  size); 
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□ 

D 

□ 

□ 

n 


n if  (error)  { 

n n c on t e X t ->u i ->me s sa g e C c on t ex t ->u i _a r g , error, 

n n n n PG PM S G_ S I G_ A D D_ E R R OR , 0); 

n } 

n break; 


n default: 

n n error  = PG P E R R_V R F Y S I G_B A D A N N ; 

n > 


a PGP_SCOPE_DEPTH_UPDATE  C c o n t e x t -> s c op e_d e p t h , type); 

n pgpAssert  (context->scope_depth  !=  -1); 

n return  error; 

> 


static  int 

sSizeAdvise  (struct  PgpPipeline  *myseLf,  unsigned  Long  bytes) 
{ 

n struct  Context  *context; 

n interror=0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  V E R I F YR AM AG  I C S ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 

n if( bytes) 

n n return0; 


n 

n 

n 

n 

n 

□ 

n 

□ 

n 

a 

n 

D 

n 

a 

n 

n 

□ 

□ 


/*  setup  the  hashes,  then  close  the  join  module  */ 
if  ( ! context->si g L i St ) 

n return  0;n  /*  No  signatures???  */ 

if  ( ! context->numhashes ) 
n error  = pgpS i g S e t u pH  a s h e s 

n n ( con t ex t -> j o i n t a i I , cont ext->env, 

n n & con t e X t ->h a s h e s , Scon t e x t ->n umha s h e s , 

n n context->sigList,  context->ui,  context->ui_arg); 

if  (error) 

n return  error; 

/*  now  turn  on  the  pipe  to  verify  the  text  */ 

error  = con t ex t-> j o i n h ea d->s i z e Ad v i s e ( c on t ex t-> j o i n h e a d , 0); 
if  (error) 

n return  error; 

c on t ex t -> s i g c I o s ed  = 1; 


n return  ve r i f y S i z e Ad v i s e (context); 

> 


static  void 

sTeardown  (struct  PgpPipeline  *myseLf) 
{ 

n struct  Context  *context; 
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n pgpAssert 

n pgpAssert 

n context= 

n pgpAssert 


(myself); 

(myseLf->magic 

(struct  Context 
(context); 


= VERIFYRAHAGICS); 
*)myseLf->priv; 


n context->si gdone  = 1; 

n ve r i f y Tea r do wn  (myself); 


□ 

mems  e t 

(myself,  0,  si 

zeof  (*myself)); 

n 

> 

pgpHemFree  (myself); 

struct 

PgpPipeline  * 

pg pVe r i f y R e a de r C r e a t e (struct 

PgpPipeline  **texthead. 

n 

n 

struct 

PgpPipeline  **sighead. 

n 

n 

struct 

PgpEnv  const  *env,  struct  PgpFifoDesc 

n 

n 

byte  const  *hashlist,  unsigned 

hashlen,  int 

n 

f 

n 

struct 

PgpUICb  const  *ui,  void 

*ui_arg) 

n 

struct 

PgpPipeline  *smod,  *tmod; 

n 

struct 

PgpPipeline  *joinhead  = NULL,  *jointext 

, **jointail; 

struct 

Context  *context; 

□ 

struct 

PgpHashContext 

*hashes  = NULL; 

n 

int  numhashes  = 0,  err; 

const  *fd, 
text  mode. 


n if  (Itexthead  ||  !sighead  {|  !env) 

n n return  NULL; 

n context  = (struct  Context  * ) pg pHem A I I o c (sizeof  (*context)); 

a if  (Icontext) 

n n returnNULL; 

n smod  = (struct  PgpPipeline  *)pgpf1emAlloc  (sizeof  (*smod)); 

a i f ( ! smod  ) { 

n n pgpHemFree  (context); 

n n returnNULL; 

n > 

n tmod  = (struct  PgpPipeline  * ) pg pHem A I I o c (sizeof  (*tmod)); 

a i f ( ! tmod ) { 

n n pgpMemFree  (context); 

n n pgpHemFree  (smod); 

n B return  NULL; 

B } 

n jointail  = pgpJoinCreate  (Sjoinhead,  fd); 

B if  (Ijointail)  { 

B B pgpHemFree  (context); 

B B pgpHemFree  (smod); 

B B pgpHemFree  (tmod); 

B B returnNULL; 

B > 

B jointext  = pg p J o i n App end  (joinhead); 

B if  (!jointext)  { 

B B j o i n h ea d-> t e a r do wn  (joinhead); 

B B pgpHemFree  (context); 

B B pgpHemFree  (smod); 

B B pgpHemFree  (tmod); 

B B returnNULL; 

B } 

B if  (hashlist  &&  hashlen)  { 
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Q 

n 

byte 

const  *charmap; 

□ 

a 

if  C 

! pgpDe vNu L L C r ea t e (jointail))  { 

S 

□ 

n 

joinhead->teardown 

(joinhead) 

n 

s 

n 

3ointext->teardown 

(jointext) 

n 

Q 

□ 

pgpHemFree  (context); 

n 

n 

n 

pgpHemFree  (smod); 

n 

n 

n 

pgpHemFree  (tmod); 

n 

n 

n 

return  NULL; 

n 

n 

> 

n 

n 

charmap  = (byte  const  *) 

n 

n 

n 

pg pe n vG e t Po i n t e r (env,  PGPENV 

n 

Q 

n 

n n NULL, NULL); 

n 

n 

err 

= pgpSi gSetupPi pe  1 i ne 

(jointail,  1 

D 

n 

□ 

n n 

hashlist. 

n 

n 

Q 

a □ 

(text  mode 

a 

n 

if  C 

err  | | numhashes  <=  0) 

{ 

n 

a 

n 

joinhead->teardown 

(joinhead) 

n 

n 

n 

jointext->teardown 

(jointext) 

s 

n 

n 

pgpHemFree  (context); 

n 

n 

Q 

pgpHemFree  (smod); 

n 

n 

n 

pgpHemFree  (tmod); 

n 

Q 

n 

return  NULL; 

n 

n 

> 

n 

a 

err 

= j 0 i n h ea d-> s i z e Ad V i s e 

(joinhead. 

n 

n 

if  ( 

err)  { 

u 

n 

n 

joi nhead->teardown 

(joinhead) 

n 

Q 

□ 

jointext->teardown 

(jointext) 

n 

n 

n 

pgpHashLi stDestroy 

(hashes,  ni 

D 

o 

Q 

pgpHemFree  (context); 

n 

n 

n 

pgpHemFree  (smod); 

D 

Q 

n 

pgpHemFree  (tmod); 

n 

□ 

n 

return  NULL; 

NULL) ) ; 


smod->magic  = VERI FYRAHAGICS; 
smod->write  = sWrite; 
smod->fLush  = sFLush; 
smod-> s i z e Ad V i s e = sSizeAdvise; 
smod->a n n o t a t e = sAnnotate; 
snod->tea rdown  = sTeardown; 

smod->name  = "Signature  Verification  Annotation  Reader  (sighead)"; 
smod->priv  = context; 


tniod->magic  = VERI  FYRAMAGI  CT; 
tmod->write  = tUrite; 
tmod-> flush  = tFLush; 
tniod->sizeAdvise  = tSizeAdvise; 
t tnod->a  n n o t a t e = tAnnotate; 
t mod-> t e a r do wn  = tTeardown; 

tmod->name  = "Signature  Verification  Annotation  Reader  (texthead)"; 
tmod->priv  = context; 


n memset  (context,  0,  sizeof  (*context)); 

n context ->joinhead  = joinhead; 

n c on t e X t -> j o i n t e X t = jointext; 

n c on t e X t -> j o i n t a i L = jointail; 
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□ 

context->env  = env 

r 

n 

context->ui  = ui; 

□ 

c on t e X t -> u i _a rg  = 

u i _ a r g ; 

n 

c on t ex t -> h a s h e s = 

hashes; 

a 

context->numhashes 

= numhashes; 

a 

*sighead  = smod; 

□ 

*texthead  = tmod; 

n 

return  smod; 

> 
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/* 

* pgpVerifyRa.h  --  Signature  Verification  Annotation  Reader 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa  r L o r dSM  I T . E D L)> 

* 

* $Id:  pg p Ve r i f y R a . h , V 1.4. 2.1  1997/06/07  09:51:02  mhw  Exp  $ 

*/ 

#ifndef  PGPVERIFYRA.H 
^define  PGPVERIFYRA.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

# e nd i f 

struct  PgpPipeLine; 

#ifndef  TYPE. PGPPIPELINE 

#define  TYPE.PGPPI PELI NE  1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

#e  nd  i f 

struct  PgpEnv; 

#ifndef  TYPE. PGPENV 
^define  TYPE. PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 

#endi f 

struct  PgpUICb; 

#ifndef  TYPE. PGPUICB 

^define  TYPE. PGPUICB  1 

typedef  struct  PgpUICb  PgpUICb; 

#endi f 

struct  PgpFifoDesc; 

#ifndef  T Y P E.PG P F I F 0 D E S C 

^define  TYPE.PGPFI FODESC  1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#endi f 

struct  PgpPipeLine  PGPExport  * 

pgpVeri f yReaderCreate  (struct  PgpPipeLine  **texthead. 


n 

n 

Q 

Q 

n 

struct  PgpPipeLine  **sighead 

n 

n 

n 

n 

Q 

struct  PgpEnv  const  *env. 

n 

D 

n 

n 

□ 

struct  PgpFifoDesc  const  *fd 

n 

D 

□ 

n 

n 

byte  const  *hashList, 

n 

n 

n 

□ 

n 

unsigned  hashLen, 

n 

D 

n 

n 

n 

int  text  mode. 

n 

D 

n 

n 

n 

struct  PgpUICb  const  *ui. 

D 

n 

□ 

n 

Q 

void  *ui.arg); 

#ifdef  cpLuspLus 

} 

# e n d i f 

#endif  /*  PGPVERIFYRA.H  */ 
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/* 

* pgpVrfySig.c  --  Code  shared  between  readann  and  verifyra  to  deal  with 

* checking  and  verifying  signatures. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa  r L o rdSM  I T . E D Ll> 

* 

* $Id:  pgpVrf ySi g . c,v  1.5. 2.1  1 997/06/07  09:51:02  mhw  Exp  $ 

*/ 

#ifdef  HAVE  CONFIG  H 


ttincLude 

#end  i f 

" conf i g . h " 

SincLude 

<stdio.h> 

#i nc  Lude 

"pgpVrfySig. 

# i n c L ud e 

"pgpDevNuL  L . 

#i nc  Lude 

"pgpHash . h" 

# i n c L ud e 

"pgpHashHod. 

#incLude 

"pgpMem. h" 

#incLude 

"pgpPipeLine 

SincLude 

"pgpEnv. h" 

#incLude 

"pgpErr.h" 

#incLude 

"pgpMsg.h" 

# i nc  L ude 

" pg  pU I . h " 

# i n c L ude 

"pgpSi g . h " 

#i nc  Lude 

"pgpTextFi Lt 

#i nc  Lude 

"pgpUsuaLs.h 

1 nt 


pg pS i g S e t u p P i pe L i n e (struct  PgpPipeLine  **head,  int  *n umh a s h e s , 


B 

B 

struct  PgpHashContext  **hashes. 

B 

B 

byte  const 

*hashList,  unsigned  hashLen, 

B 

r 

B 

byte  const 

♦charmap) 

\ 

B 

1 nt 

num; 

B 

struct  PgpPi 

pe  L i ne  *mod 

= NULL,  **taiL  = &mod; 

B 

if 

( ! head  | | 

! hashes  | | 

IhashList  ||  IhashLen  ||  inumhashes) 

B 

B 

return  0; 

B 

num 

= *numhashes  = pg pH  a s h Li s t C r e a t e (hashList,  hashes. 

hashLen) 

B 

i f 

(num  <=  0 ) 

B 

B 

return  0; 

B 

if 

(charmap) 

{ 

B 

B 

t a i L 

= pg pTe X t F i L t C r ea t e (taiL,  charmap,  0,  PGP 

_TEXTFILT 

B 

B 

i f ( 

! tai L ) { 

B 

B 

□ 

pgpHashListDestroy  (*hashes,  num); 

B 

B 

n 

return 

PGPERR_N0HEH; 

B 

B 

> 

B 

> 

B 

t a i 

L = pg p H a s h Hod L i s t C r e a t e (taiL,  *hashes,  num); 

B 

if 

( ! tai L)  { 

n n pgpHashListDestroy  (*hashes,  num); 

n D mod->teardown  (mod); 
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n n return  PG P E R R_N OM E H ; 

n > 

n /*  splice  in  the  modules  */ 

n *tail=*head; 

n *head  = mod ; 

a return0; 

> 


/* 

* Given  a bunch  of  signatures,  setup  a string  of  hash  modules  and 

* hashes  in  order  to  process  the  signatures. 

*/ 


i n t 

pgpSigSetupHashes 
□ n 

n □ 

{ 


(struct  PgpPipeline  **tail,  struct  PgpEnv  const  *env, 
struct  PgpHashContext  **hashlist,  int  *hashnum, 
struct  PgpSig  const  *siglist, 
struct  PgpUICb  const  *ui,  void  *ui_arg) 


n unsigned  len; 

n int  numhashes,  err; 

a byte  *buf; 

n struct  PgpHashContext  *hashes; 

n byte  const  *charmap; 

n byte  const  *extra; 

n unsigned  extralen; 


n if  (!tail  ||  Isiglist  ||  ihashlist  ||  lhashnum  ||  !ui) 

n n return  PGPERR_BADPARAM; 


n *hashlist  = NULL; 

n *hashnum=0; 

a len  = pgpSigDistinctHashCount  (siglist); 

n buf  = (byte  * ) pg pHemA I I o c (len); 

n i f ( ! buf  ) 

n n return  PGPERR_NOMEH; 

n pgpS i g D i s t i n c t Ha s hes  (siglist,  buf); 


□ 

n 

n 

n 

D 


if  ( ! pg p D e vN u I I C r e a t e (tail))  { 

n ui->message  (ui_arg,  PGPERR_NOHEM,  PGPMSG_DEVNULL_ CREATE,  0); 

n pgpMemFree  (buf); 

n return  PGPERR_NOHEH; 

} 


D 

n 

Q 

n 

D 

□ 

□ 

n 

D 

n 

□ 

n 

n 


extra  = pgpSigExtra  (siglist,  Sextralen); 

charmap  = (byte  const  * ) pg p en vGe t Po i n t e r (env,  PGPENV_CHARHAPT0LATIN1  , 

n n n n n NULL, NULL); 

err  = pg p S i g S e t upP i pe I i n e (tail,  Snumhashes,  Khashes,  buf,  len, 

n n n ((extra  &&  extraC03)  ? charmap  : NULL)); 

pgpMemFree  (buf); 

if  (err)  { 

n (*tail)->teardown  (*tail); 

> 


if  (numhashes  < 0)  { 

n (*tail)->teardown  (*tail); 

n return  numhashes; 

} 
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if  (numhashes  ==  0)  f 
n (*taiL)->teardown  (*taiL); 

n ui->message  (ui_arg,  PGPERR_VERBOSE_0,  PGPMSG_SIG_NO_CHECK,  0); 

n return  PG P E R R_ C A N N OT_H A S H ; 

> 


*hashList  = hashes; 
*hashnum  = numhashes; 
return  0; 


/* 


List  of  hashes 


* Verify  a Signature  with 
*/ 
i n t 

pgpSigVerify  (struct  PgpSig  const  *sigList,  struct  Pg p H a s h C on t e x t *hashes, 
int  numhashes,  struct  PgpUICb  const  *ui,  void  *ui_arg) 


i n t i ; 

unsigned  Len,  extraLen; 

byte  const  *buf; 

byte  const  *extra; 

struct  PgpHashContext  const  *hc; 

struct  PgpHashContext  *temp_hc; 

struct  PgpSig  const  *sig; 


Q 

i n t 

err 

= 0 

/ 

n 

i f 

C ! s i 

gList  II  thashes  ||  !ui) 

a 

n 

return  0; 

□ 

/* 

Now, 

verify  the  signatures  */ 

□ 

Len 

= 0 

/ 

n 

for 

(i 

= 0; 

i < numhashes;  i++)  { 

□ 

Q 

i f 

(Len  < ha s hes C i 5 . ha sh->ha s h s i ze ) 

n 

u 

n 

Len  = h a s h e s C i 3 . h a s h->h a s h s i z e ; 

n 

y 

a 

for 

( s i g = 

sigList;  sig;  sig  = pgpSigNext  (sig)) 

{ 

n 

n 

h c 

= pg pHa s h L i s t F i nd  (hashes,  numhashes. 

pgpSigHash 

□ 

□ 

1 f 

( ! he)  { 

n 

n 

B 

ui->message  (ui_arg,  PGPERR_BAD_ 

HASHNUH, 

Q 

Q 

B 

n PGPHSG_SIG_BADHASH, 

0); 

S 

n 

B 

conti nue; 

n 

n 

> 

n 

n 

n 

n 

temp_hc  = pgpHashCLone  (he); 

n 

a 

i f 

(!temp_hc)  f 

n 

n 

B 

ui->message  (ui_arg,  PG P E RR_N OM EH , 

a 

n 

B 

n PGPHSG_ALLOC_HASH_CLONE,  0); 

n 

n 

B 

continue; 

n 

B 

> 

n 

B 

extra  = pgpSigExtra  (sig,  SextraLen); 

Q 

B 

pgpHashUpdate  (temp_hc,  extra,  extraLen) 

r 

n 

B 

buf 

= pgpHashFinaL  (temp_hc); 

Q 

B 

err 

= u i -> s i g Ve r i f y (ui_arg,  sig,  buf); 

n 

B 

pgpHashDestroy  (temp_hc); 

return  0; 
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> 

i nt 

pgpSepsigVerify  (struct  PgpSig  const  *sigList,  struct  PgpEnv  const  *env, 
n n struct  PgpUICb  const  *ui,  void  *ui_arg) 

{ 

n struct  PgpPipeLine  *head  = 0,  **taiL  = &head; 

n struct  PgpHashContext  *hashes  = NULL; 

n int  err  = 0,  numhashes  = 0; 

a if  (IsigList)  { 

a n ui->message  (ui_arg,  PGPERR_SIG_ERROR,  PGPHSG_SIG_NOSIGS,  0); 

n n return0; 

n > 

n ui->message  (ui_arg,  PGPERR_VERBOSE_0,  PGPMSG_SEPSIG,  0); 

n err  = pg p S i g S e t up H a s h e s (tail,  env,  Shashes^  Snumhashes,  sigList, 

n n n n ui,ui_arg); 

n if(err) 

n D goto  cLeanup2; 

n □ 

n /*  Ask  the  UI  to  input  the  message  to  verify  the  signature  */ 

n err  = ui->needlnput  (ui_arg,  head); 

a if(err) 

n n gotocLeanup2; 

n err  = pgpSigVerify  (sigList,  hashes,  numhashes,  ui,  ui_arg); 

c Leanup2 : 
n if(head) 

n n head->teardown  (head); 

n pg pHa s h L i s t D e s t r oy  (hashes,  numhashes); 

n returnerr; 

> 

/*n  requires  pg p S i g L i s t D e s t r oy  ();  */ 
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/* 

* pgpVrfySig.h  --  Signature  Verification  Code 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r L o r d SM I T . E D LJ> 

* 

* $Id:  pg p V r f y S i g . h , V 1.3. 2.1  1 997/06/07  09:51:02  mhw  Exp  $ 

*/ 

#ifndef  PGPVRFYSIG.H 
#define  PGPVRFYSIG.H 


//include  "pgpUsuaLs.h" 

//ifdef  ..cpLuspLus 
extern  "C"  C 
# e n d i f 

struct  Pg p H a s h C o n t e X t ; 
struct  PgpPipeLine; 
struct  PgpEnv; 
struct  PgpUICb; 
struct  PgpSig; 

int  pg p S i g S e t u p P i p e L i n e (struct  PgpPipeLine  **head,  int  *numhashes. 


□ 

n □ 

struct  Pg p H a s h C on t e X t **hashes. 

a 

n n 

byte 

const  *hashList,  unsigned 

hash  Len, 

□ 

n n 

byte 

const  *charmap); 

i nt 

pgpSigSetupHashes 

(struct 

PgpPipeLine  **taiL,  struct 

PgpEnv  const  *env. 

□ 

Q 

struct 

PgpHashContext  **hashList, 

int  *hashnum. 

n 

n 

struct 

PgpSig  const  *sigList, 

□ 

n 

struct 

PgpUICb  const  *ui,  void  *u 

i .a  rg  ) ; 

int  pgpSigVerify  (struct  PgpSig  const  *sigList,  struct  Pg p H a s h C o n t e x t *hashes, 
n n int  numhashes,  struct  PgpUICb  const  *ui,  void  *arg); 

int  pgpSepsi gVeri  f y (struct  PgpSig  const  *sigList,  struct  PgpEnv  const  *env, 
n n struct  PgpUICb  const  *ui,  void  *ui.arg); 

#ifdef  ..cpLuspLus 
} 

//endi  f 


//endif  /*  PGPVRFYSIG  H */ 
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Makefile.in 


U 

It  L i b / pg  p / p i pe  / s i g / Ma  ke  f i L e . i n 
It 

It  Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

U $Id:  Hakefi Le.in,v  1.10.2.4  1997/06/07  09:51:03  mhw  Exp  $ 

# 

LOCALINCLUDES=  -I ../../ i n c L ude 

0BJS  = n pgpSigMod.o  pg p H a s h Mod  . o 
SHAREDHDRS=  pgpHashMod.h  pgpSigMod.h 

a U : : DONE 
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ft  L 1 b / pg p / p i pe  / s i g /ma  ke  f i L e . ms  c 
It 

It  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL 
U 

U $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1997/06/07  09:51:03  mhw  Exp 
U 

CFLAGS=  -I..\..\..\..\incLude  -I..\..\..\incLude  \ 
n -I . . \ \ \ . -DHAVE_C0NF1G_H  SCDEBUG) 

PGPLIB=..\..\..\pgpLib.Lib 


a L L : : n Lib 

headers : n i nc  L 

lincLude  "makefiLe.in" 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

n n for  Xf  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . 

n if  not  "$(PRIVHDRS)"==""  \ 

n a for  Z f in  ( SCPRIVHDRS)  ) do  copy  %f  ..\ 


D0S0BJS=  SCOBJS : . o=. ob j ) 
Lib:n  $(D0S0BJS) 


rights  reserved . 
$ 


\.  .\.  .\. .\incLude 
.\..\incLude 


. c . o b j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 


c Lean  : 

n de  L * . ob j 


DONE  : 

n if  exist  SCPGPLIB)  L i b / o u t : $ ( PG P L I B ) SCPGPLIB)  $(D0S0BJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpHashMod.c  --  module  to  hash  data 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r L o r dSM  I T . E D L)>  and  CoLin  PLumb 

* 

* $Id:  pgpHashMod . c,v  1.3. 2.1  1997/06/07  09:51:04  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#i nc  Lude  <stdi o . h> 


# i n c L u d e 
#incLude 
//include 
//include 
//include 


pgpDebug . h" 
pgpHashMod.  h" 
pgpHash.h" 
pgpMem. h" 
pgpPipeline.h 


#define  H A S H MO DM AG  I C n 0x8a5430d1 


struct  Context  { 

n struct  PgpHashContext  *hash; 

o struct  PgpPipeline  *taiL; 

>; 

static  i n t 

FLushCstruct  PgpPipeline  *myseLf) 

{ 

n struct  Context  *context; 

n pg p A s s e r t ( my s e L f ) ; 

a pg p A s s e r t ( my s e L f ->ma g i c ==  H AS HMO D M AG  I C ) ; 

a context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert(context); 

n pgpAssert(context->taiL); 

n return  c on t ex t -> t a i L -> f L u s h ( c o n t e x t -> t a i L ) ; 

> 


static  size_t 

WriteCstruct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n size_t  written; 

n pg p A s s e r t ( my s e L f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  H A S H MO  DM AG  I C ) ; 

n pg p A s s e r t ( e r r o r ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pg p A s s e r t ( c on t e X t ) ; 

n pgpAssert(context->tail); 

n written  = c o n t e x t -> t a i L -> w r i t e ( c on t ex t -> t a i L , buf,  size,  error); 
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n if  (written) 

n n pgpHashUpdate(context->hash,  buf,  written); 

n return  written;n 

} 

static  int 

An  no t a t e ( s t r u c t PgpPipeline  *myseLf,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n pg p As s e r t ( my s e L f ) ; 

n pg  p As  s e r t ( my  s e L f ->ma  g i c ==  H AS  HMO  DM  AG  I C ) ; 

n context  = (struct  Context  *)myself->priv; 

n pg p As s e r t ( c on t e X t ) ; 

n pgpAssert(context->taiL); 

n return  c o n t ex t -> t a i L ->a nno t a t e ( con t ex t -> t a i L , origin,  type, 

n n n n n string, size); 

> 

static  int 

SizeAdvise(struct  PgpPipeline  *myseLf,  unsigned  Long  bytes) 

{ 

n struct  Context  *context; 

n pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  H A S HMO DM AG  I C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert(context); 

n pgpAs se r t ( con t ext->t a i L ) ; 

n return  c on t ex t-> t a i L ->s i z e Ad v i se ( con t ex t -> t a i I , bytes); 

} 

static  void 

T ea r do wn ( s t r u c t PgpPipeline  *myseLf) 

{ 

n struct  Context  *context; 

n pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  HASHMODMAGI C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v; 

n pgpAssert(context); 

n if  ( con t ex t -> t a i L ) 

n n c on t e X t -> t a i I -> t ea r down ( con t e X t -> t a i L ) ; 

n memset(context,  0,  sizeof(*context)); 

n pg pM em F r e e ( c on t e X t ) ; 

n mems e t ( my s e L f , 0,  s i z eo f ( *my s e L f ) ) ; 

n pg pMem F r e e ( my s e I f ) ; 

> 
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struct  PgpPipeline  ** 

pg p H a s hMod C r ea t e ( s t r u c t PgpPipeline  **head,  struct  Pg p H a s h C on t ex t *hash) 
{ 

n struct  Context  *context; 

n struct  PgpPipeline  *mod; 

n pg p A s s e r t ( h a s h ) ; 

n if(!head) 

n n returnNULL; 

n context  = (struct  Context  *)pgpMemAlloc(sizeof(*context)); 

n if  ([context) 

n n returnNULL; 

n mod  = (struct  PgpPipeline  *)pgpMemAlloc(sizeof(*mod)); 

n i f ( I mod  ) ( 

n a pgpMem F r ee ( con t ex t ) ; 

a a returnNULL; 

a } 

a mod->magic  = H AS H HO  DM AG  I C ; 

a mod->write  = Write; 

a mod->flush  = Flush; 

a mod->si zeAdvi se  = SizeAdvise; 

a mod->annotate  = Annotate; 

a mod->teardown  = Teardown; 

a mod->name  = "Hash  Module"; 

a mod->priv  = context; 

a memse t ( con t ex t , 0,  s i z e o f ( * c on t e x t ) ) ; 

a context->hash  = hash; 


a context->tai I = *head; 

n *head=mod; 

a return  &context->tail; 

> 


struct  PgpPipeline  ** 

pgpHa shMod Li s t C r ea t e ( s t ru c t PgpPipeline  **head,  struct  Pg p Ha s h C on t e x t *hashes. 


n 

unsigned  num) 

i 

n 

Struct 

PgpPipeline  *th  = 0,  **tt 

= 8th; 

n 

while 

( num-- ) 

{ 

D 

n 

tt  = 

pgpHashHodCreate(tt, 

hashes++) 

n 

n 

if  (1 

tt)  { 

□ 

n 

a 

if  (th) 

n 

n 

a 

a th->teardown(th); 

a 

n 

a 

return  0; 

u 

n 

> 

n 

> 

n 

*tt  = 

* h e a d ; 

n 

*head 

= th; 

El 

return 

tt; 

} 
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/* 

* pgpHashMod.h  — A Generic  Hash  Module. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa  r L o r dSM  I T . E D Ll> 

★ 

* $Id:  pgpHashMod . h, V 1.4. 2.1  1997/06/07  09:51:04  mhw  Exp  $ 

*/ 

#ifndef  PGPHASHMOD_H 
#define  PGPHASHMOD_H 

#ifdef  cpLuspLus 

extern  "C"  { 

#end i f 

struct  PgpPipeLine; 

#ifndef  T YP E_ PG PP I P E L I N E 

^define  TYPE_PGPPIPELINE  1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

Send  i f 

struct  PgpHashContext; 

Sifndef  T Y PE_PG PH  A S H C ONT E XT 
Sdefine  TYPE_PGPHASHCONTEXT  1 

typedef  struct  PgpHashContext  PgpHashContext; 

Sendi f 

/* 

* Create  a module  that  will  hash  its  input  and  copy  it  to  the  output, 

* using  the  passed-in  PgpHashContext.  The  caLLer  assumes  control  of  the 

* PgpHashContext,  and  when  this  module  returns  success  from  a 

* s i z e Ad V i s e ( 0 ) , the  PgpHashContext  is  valid  for  use. 

* Note:  the  calling  function  must  destroy  the  PgpHashContext. 

*/ 

struct  PgpPipeLine  PGPExport  ** 

pgpHashModCreate  (struct  PgpPipeLine  **head,  struct  PgpHashContext  *hash); 
struct  PgpPipeLine  PGPExport  ** 

pgpHashModLi stCreate  (struct  PgpPipeLine  **head,  struct  PgpHashContext  *hashes, 
H unsigned  num); 

#ifdef  cpLuspLus 

} 

#endi f 

#end  i f 
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/* 

* pgpS i gMod . c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* $Id:  pg p S i g Mod . c , V 1 . 5 . 2.1  1 997/06/07  09:  51:04  mhw  Exp  $ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i f 


#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 

#i 


nc  Lude 

"pgpDebug . h" 

n c L u d e 

"pgpCopyHod.h" 

nc  Lude 

"pgpMakeSig.h" 

n c L ude 

"pgpPktByte . h" 

n c L ude 

"pgpSigHod.h" 

nc  Lude 

"pgpAnnotate.h 

n c L ud e 

"pgpHash . h" 

n c L ud e 

"pgpHashHod.h" 

n c L u d e 

"pgpJoin.h” 

n c L u d e 

"pgpHem. h" 

n c L ud e 

" PgpPipeLine. h 

n c L ude 

"pgpErr.h" 

nc  L ude 

"pgpSigSpec.h" 

nc  L ude 

"pgpUsuaLs.h" 

#define  SIGHODHAGIC  0x519a10fe 


#define  MAX  EXTRA  5 


struct  PerSignature  { 


n 

□ 

Q 

>; 


struct  PerSignature  *next; 
struct  PgpSigSpec  const  *spec, 
struct  PgpHashContext  *hc; 


struct  Context 

Q 


□ 

n 

□ 

□ 

□ 

a 

D 

n 

□ 

n 

n 

n 

n 

>; 


struct  PgpPipeLine  *taiL; 

struct  PgpPipeLine  *join,  *joinLast,  *newjoin; 

struct  PgpPipeLine  **jointaiL; 

struct  PgpPipeLine  **texttaiL; 

struct  PerSignature  *sigList; 

struct  PerSignature  *sigptr; 

struct  Pg p Ra n dome  on t e X t const  *rc; 

PgpVersion  version; 
byte  *buf; 
unsigned  bufLen; 
byte  const  *sig; 
int  sigLen; 
int  scope_depth; 
byte  onepass; 


/* 

* 

★ 

★ 


For  each  signature  on  the  signature  List,  get  rid  of  it. 

The  fact  that  dupLicate  Pg p H a s h C on t ex t s are  aLLoued  compLicates 
this  a LittLe  bit. 
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*/ 


static  void 

T ea r do w n S i g L i s t ( s t r u c t PerSignature  *sigList) 
{ 

n struct  PerSignature  *ps; 

n struct  PgpHashContext  *hc; 


Q 

while 

( s i g L i s t ) 

{ 

n 

a 

he  = si 

gList->hc,- 

n 

n 

if  (he) 

{ 

n 

Q 

□ 

/*  Walk  to  end  of  List  deleting 

a 

n 

□ 

for  (ps  = sigList->next;  ps;  ps 

a 

n 

n 

n if(ps->hc==hc) 

n 

n 

n 

a n ps->hc=0; 

□ 

n 

□ 

pgpHashDestroy(hc); 

n 

□ 

> 

n 

n 

p s = si 

gli st->next; 

□ 

D 

memset  ( 

siglist,  0,  s i zeof ( *s i g L i s t ) ) ; 

n 

□ 

pg  pHem  F 

ree(sigList); 

n 

n 

s i g L i s t 

= ps; 

n > 

> 

static  si ze_t 

WriteCstruct  PgpPipeLine  *myseLf,  byte  const  *buf,  size 
{ 


duplicates  */ 
= ps->next) 


t size,  int  *error) 


n struct  Context  *context; 


n pgpAssert (myse L f ) ; 

n pgp A s s e r t ( my s e L f ->ma g i c ==  SIGMODMAGIC); 

n pgp A s s e r t ( e r r o r ) ; 


n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert(context); 

n pgp A s s e r t ( con t e X t -> t a i L ) ; 


n /* 

n * If  we're  doing  1-pass  signatures  we  might  need  to  open  a 

n * new  input  (for  the  real  signature  data)  which  is  appended 

n * to  the  current  data  using  pg pS i gTex t I n s e r t , just  Like  the 

n * data  did.  Then  we  need  to  close  the  current  input,  tear  it 

n * down,  and  replace  it  with  the  new  one.  Finally,  we  need  to 

n * set  a flag  that  says  that  we  did  this,  so  we  don't  do  it 

n *again.  */ 


n 

n 

n 

n 

n 

n 

n 


if  ( c o n t ex t -> ve r s i on  > PG P V E RS I 0N_2 _6  8& 
c o n t ex t -> j o i n L a s t !=  con t ex t -> j o i n ) { 

n / * 

n * Do  the  switch  if  we  have  new  version  packets  and 

n * pg p S i gT ex t I n s e r t ( ) was  called 

n */ 

a struct  PgpPipeLine  *head  = NULL,  **taiL; 


switch  ( con t ex t ->on epa s s ) { 
case  0 : 

n /*  Create  the  new  module...  */ 

a tail  = pg p S i gT ex t 1 n s e r t (myself,  Shead); 
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□ 

n 

n 

n 

n 

□ 

□ 

□ 

n 

n 

□ 

n 

D 

n 

□ 

□ 

n 


n 

B 

if 

( ! tai  1 ) { 

n 

B 

n 

*error  = PGPERR 

_ N 0 M E M ; 

a 

B 

n 

return  0; 

a 

B 

> 

a 

B 

c 0 n t e X t -> n e w j 0 i n = head 

r 

□ 

B 

context->onepass++; 

n 

B 

/* 

FALLTHROUGH  */ 

n 

case  1 : 

B 

n 

/* 

close  the  old  one... 

*/ 

B 

n 

*error  = c o n t e x t -> j o i n- 

>sizeAdvise  (context 

B 

n 

i f 

(*error) 

B 

B 

B 

return  0; 

B 

B 

context->onepass++; 

B 

B 

/* 

FALLTHROUGH  */ 

B 

case  2 : 

B 

B 

/* 

...and  shut  it  down. 

. . */ 

B 

B 

context->joi n->teardown 

(context -> join); 

n 

Q 

□ 

D 

□ 

□ 

n 


a 

n 

□ 

n 

Q 

n 

> 


□ 

□ 

n 

default 

n 

> 


/*  inserting  the  new  one  in  its  place  */ 
c on t e X t -> j o i n = c o n t e x t ->n e w j o i n ; 
context->onepass++; 

break; 


n return  c on t ex t -> t a i I ->w r i t e ( c o n t ex t -> t a i I , buf,  size,  error); 

> 


static  int 

Annot a t e ( s t rue t PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 

n pgp Asse r t ( my s e I f ) ; 

n pg p As s e r t ( my s e I f ->ma g i c ==  S I G MO  DM AG  I C ) ; 

n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pg p A s s e r t ( c on t e X t ) ; 

n pg p As s e r t ( c on t ex t -> t a i I ) ; 

n error  = c on t e x t -> t a i I ->a n n o t a t e C c on t e x t -> t a i I , origin,  type, 

a string, size); 

n if(!error) 

n n PGP_S COPE_DEPTH_UPD ATE ( con t ex t->s cope_dep t h , type); 

n pgpAssertCcontext->scope_depth  !=  -1); 

n return  error; 

} 


static  int 

S i z e Ad V i s e ( s t r u c t PgpPipeline  *myself,  unsigned  long  bytes) 

{ 

n struct  Context  *context; 

n struct  PerSignature  *ps; 

n int  i,  len,  error; 
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n size_t  size; 

n pgpAssertCmyseLf); 

n pg p As s e r t ( my s e L f ->ma g i c ==  S IGHODMAG  I C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert(context); 

n pg p As s e r t ( c on t ex t -> t a i L ) ; 


Q 

i = 

: cont  ext 

->tai L->sizeAdvise(context->tai L,  bytes); 

□ 

if 

(i 

1 1 

bytes  II  c on t ex t -> s cope_d e p t h ) 

Q 

B 

return  i; 

n 

/* 

B 

★ 

Not 

i 

nside  any  scope  and  got  a s i z e Ad v i s e ( 0 ) : EOF! 

B 

* 

So 

write 

out  aLL  the  signatures.  */ 

B 

/* 

Find 

out 

how  big  a buffer  we  need  and  allocate  it  */ 

B 

if 

(context 

->sigptr  &S  I c on t ex t ->bu f ) { 

B 

B 

L e n 

= 0; 

B 

B 

for 

(ps  = context ->sigptr;  ps;  ps  = ps->next)  ( 

B 

B 

B 

i = pgpnakeSigf1axSize(ps->spec); 

B 

B 

B 

if  (len  < i) 

B 

B 

B 

a 1 en  = i ; 

B 

fl 

> 

B 

fl 

context->buf  = (byte  *)pgpMemALLoc((unsigned)Len+3); 

B 

B 

i f 

(! context ->buf) 

B 

fl 

fl 

return  PG P E R R_N0M EH ; 

B 

B 

context->buf ten  = ( u n s i g n ed ) L e n+3 ; 

B 

> 

B 

/* 

Walk 

the 

list  of  signatures  writing  them  out.  */ 

B 

ps 

= context ->sigptr; 

B 

wh  i 

L e 

(ps  1 

1 context->si g len)  { 

B 

B 

/* 

Write  any  partial  signature  */ 

B 

B 

i f 

( c on t ex t -> s i g 1 e n ) { 

B 

B 

B 

pgpAssert(context->sig); 

B 

fl 

B 

pgpAssert(context->join); 

B 

B 

B 

/*  Dump  it  down  the  join  module  */ 

B 

fl 

B 

size  = con t ex t-> j 0 i n->w r i t e ( con t ex t-> j 0 i n. 

fl 

B 

fl 

ana  c on t ex t -> s i g , 

B 

fl 

B 

a a a c o n t e x t ->  s i g 1 e n , 

B 

B 

fl 

a a a &error); 

B 

fl 

fl 

context->sig  +=  size; 

B 

fl 

B 

con t e X t ->s i g 1 e n -=  size; 

B 

fl 

B 

if  (error) 

B 

fl 

B 

a return  error; 

B 

fl 

B 

continue; 

B 

fl 

> 

B 

B 

/* 

Okay,  now,  make  a new  signature.  */ 

B 

fl 

pg p A s s e r t ( c on t e X t ->bu f L e n >=  3 u+pg pMa ke S i g Ma x S i z e ( p s 

B 

fl 

i = 

pg pHa ke S i g ( c 0 n t ex t ->b u f +3 , ps->spec,  context->rc 

B 

B 

i f 

( i < 0 ) 

B 

B 

fl 

return  i; 

B 

fl 

i f 

( c o n t e X t -> V e r s i 0 n > PG PV E R S 1 0 N_ 2_6 ) ( 
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u 

□ 

n 

if  ( PKTLEN_ONE_BYTE ( i ) ) 

n 

tt 

n 

□ 

context->bufC1 ] 

= 

n 

tt 

□ 

a 

a PKTBYTE 

_BUILD_NEW(PKTBYTE_SIG); 

Q 

tt 

n 

tt 

context->bufC23 

= PKTLEN_1 BYTE( i ); 

n 

tt 

n 

tt 

context->sig  = 

context ->buf+1 ; 

n 

tt 

n 

a 

context ->sigLen 

= (unsigned)i+2; 

n 

a 

□ 

> else 

C 

n 

tt 

n 

n 

context->buf C03 

= 

n 

n 

Q 

n 

n PKTBYTE 

_BUILD_NEW(PKTBYTE_SIG); 

u 

tt 

n 

n 

context ->bufC1 ] 

= PKTLEN_BYTE0(i ); 

n 

tt 

n 

n 

context->bufC2D 

= PKTLEN_BYTE1 ( i ) ; 

n 

tt 

tt 

n 

context->si g = 

context->buf; 

n 

tt 

tt 

n 

context ->sigLen 

= (unsigned)i+3; 

n 

tt 

a 

> 

n 

tt 

> else  { 

#i  f 

0 

/* 

PGP 

2.6. 

2 sc  news 

up  on  this 

*/ 

□ 

tt 

n 

i f ( i < 

256)  ( 

n 

tt 

tt 

n 

context->bufC1 D 

= 

□ 

tt 

tt 

n 

n PKTBYTE 

_BUILD(PKTBYTE_SIG,  0); 

n 

tt 

tt 

□ 

context->bufC2D 

= (byte)i; 

n 

tt 

tt 

□ 

context->sig  = 

context->buf+1 ; 

n 

tt 

tt 

n 

context->sigLen 

= (unsigned)i+2; 

Q 

tt 

tt 

> else 

{} 

#end  i f 

n 

tt 

tt 

context 

->bufC0:  = PKTBYTE_BUILD(PKTBYTE_SIG,  1) 

n 

tt 

n 

context 

->buf:i:  = (byte)(i>>8); 

n 

tt 

n 

context 

->bufC2D  = (byte)i; 

n 

tt 

n 

context 

->sig  = context- 

>buf  ; 

tt 

tt 

n 

context 

->sigLen  = ( u n s i g n ed  ) i +3 ; 

n 

tt 

> 

a 

tt 

/* 

Okay,  signature  made  */ 

n 

tt 

context->sigptr 

= ps  = ps->next 

f 

n 

y 

a 

TeardownSigLi stCcontext 

->sigList); 

n 

con t ex t->s i g L i s t = 0; 

tt 

1 f 

(context 

->buf  ) { 

tt 

n 

memsetCcontext- 

>buf,  0,  context 

->bufLen); 

tt 

n 

pgpMeniFree(context->buf); 

tt 

□ 

context->buf  = 

0; 

tt 

> 

tt 

i f 

(context 

->  j 0 i n ) { 

tt 

n 

error  = context 

->join->si2eAdvise(context->join,  0); 

tt 

n 

1 f 

(error) 

tt 

n 

tt 

return 

error; 

#if 

0 

/* 

Take 

t h i 

s out;  simple  pgp  Lib  Later  queries 

downstream  memmod  */ 

n 

n 

context->join->teardown(context 

->  j 0 i n ) ; 

n 

Q 

context -> join  = 

0; 

#e nd i f 

n > 

n return0; 

} 


CCCHK:1a65654d302834f0b83cf2b1e30dae807dda88c92daa79fa3f454339aadd8c16f:: 
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static  int 

FLushCstruct  PgpPipeLine  *nyseLf) 

{ 

n struct  Context  *context; 

n interror; 

n pgpAssert(myseLf); 

n pgpAssert(myseLf->magic  ==  SIGMODMAGIC); 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert(context); 


D 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

} 


/*  XXX  Do  nothing  */ 
if  ( context->tai L ) { 

n error  = c on t e x t -> t a i I -> f L u s h ( c on t e x t -> t a i L ) ; 

n if  (error) 

n n returnerror; 

> 

if  ( c on t e X t -> j o i n ) { 

n error  = context->join->fLush(context->join); 

n if  (error) 

n n returnerror; 

> 

return  0; 


static  void 

T ea r do wn ( s t r u c t PgpPipeLine  *myseLf) 
{ 

n struct  Context  *context; 


n pgpAs se r t ( my s e L f ) ; 

a pgp As s e r t ( my s e L f ->ma g i c ==  SIGMODMAGIC); 


Q 

□ 

n 

n 

□ 

□ 

□ 

D 

Q 

n 

n 


context  = (struct  Context  *)myseLf->priv; 
pgpAssert( context); 
if  ( con t e X t -> t a i L ) 

n context->taiL->teardown(context->taiL); 

if  ( con t e X t -> j o i n ) 

n context->join->teardown(context->join); 

TeardownSigList(context->sigList); 

if  ( cont ext->buf ) ( 

n memset(context->buf,  0,  context->bufLen); 

n pg pMem F r ee ( con t ex t->buf ) ; 

} 


n mems e t ( c on t ex t , 0,  s i z eo f ( * c on t ex t ) ) ; 

n pgpMemFree(context); 

a mems e t ( my s e L f , 0,  s i z e o f ( *my s e L f ) ) ; 

n pg pMem F r e e ( my s e L f ) ; 

> 


struct  PgpPipeLine  ** 

pgpS i g C r ea t e ( s t r u c t PgpPipeLine  **head,  PgpVersion  version, 

n struct  PgpFifoDesc  const  *fd,  struct  Pg p Ra n d omC on t e x t const  *rc) 

{ 

n struct  PgpPipeLine  *mod; 
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n struct  PgpPipeLine  **taiL; 

n struct  Context  *context; 


n i f C ! head ) 

n a returnNULL; 


n 

a 

□ 

n 

a 

n 

a 

□ 


context  = (struct  Context  * ) pg pH em A L L o c ( s i z e o f ( * c o n t e x t ) ) ; 
if  (!context) 
n return  NULL; 

mod  = (struct  PgpPipeLine  *)pgpHemALLoc(sizeof(*mod)); 
if  ( ! mod  ) { 

n pgpHemFree(context); 

n return  NULL; 

> 


n /*  Create  the  join  module  for  stuffing  the  signatures  into.  */ 

n memset(context,  0,  sizeof(*context)); 

n c o n t e X t -> j o i n t a i L = pg p J o i n C r ea t e ( & c on t e x t -> j o i n , fd); 

n if  ( ! con t ex t-> j o i n t a i I ) { 

n n pg pH em F r e e ( mod  ) ; 

n n pg pH em F r ee ( c on t ex t ) ; 

B B return  NULL; 

B } 

B context ->joinLast  = context -> join; 

B context ->rc  = rc; 

B context->version  = version; 


B /*  Tack  a copy  mod  onto  the  output  to  provide  a stable  tail  pointer.  */ 

B c on t e X t -> t a i L = *head; 

B tail  = pgpCopyHodCreate(&context->tai L ); 

B if(!taiL){ 

B B c on t e X t -> j o i n-> t ea r down ( c on t ex t -> j o i n ) ; 

B B pg pHem F r e e ( mod  ) ; 

B B pgpHemFree(context); 

B > 


B /*  Finally,  fill  in  all  the  values  */ 

B mod->magic  = SIGHODHAGIC; 

B mod->write  = Write; 

B mod->fLush  = Flush; 

B mod-> s i z e Ad V i s e = SizeAdvise; 

B mod->a n no t a t e = Annotate; 

B mod->t ea rdoun  = Teardown; 

B mod->name  = "Signature"; 

B mod->priv  = context; 

B *head=mod; 

B return  tail; 

> 


/* 


* This  adds  one  signature  to  the 

* which  the  signatures  will  come 

* tail  pointer  - this  joins  them 
*/ 


signing  module.  It  returns  a tail  pointer 
out  of.  Each  call  returns  the  same 
together  internally. 


static  struct  PgpPipeLine  ** 

addSignature  (struct  PgpPipeLine  *myseLf,  struct  PgpSigSpec  *spec, 
B byte  cLearsig,  byte  nest) 


[[CHK:644111f4b261d77913f30f7944452fbfc5888a6f926b887d3327ffbb8a31b2a7bD: 
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{ 


n 

struct  Context  *context  = (struct  Context  *)myself- 

>p  r i v; 

n 

struct  PerSignature  *ps,  *ps2; 

n 

struct  PgpHash  const  *hash  = pgpS i g Spe c Ha s h ( s pe c ) ; 

n 

struct  PgpHashContext  *hc; 

n 

pgpAssert(myself); 

n 

pgpAs se r t ( my s e 1 f ->mag i c ==  S I GMO DM AG I C ) ; 

n 

context  = (struct  Context  *)myseLf->priv; 

n 

pgpAssert(context); 

n 

jj 

ps 

= (struct  PerSignature  * ) pg pH emA L L o c ( s i z e o f ( *p s ) ) ; 

n 

/* 

If  we  already  have  a request  for  this  hash,  use 

it  * / 

n 

h c 

= 0; 

n 

for 

( p s 2 = 

context->sigList;  ps2;  ps2  = ps2->next) 

{ 

Q 

fl 

i f 

( p s 2->h c->h a s h ==  hash)  ( 

n 

B 

D 

he  = ps2->hc; 

n 

fl 

O 

break; 

o 

B 

} 

Q 

> 

a 

/* 

If  not , 

generate  a new  one,  and  a module  to  make 

it.  * / 

n 

i f 

( ! he)  { 

n 

fl 

h c 

= pg p H a s h C r e a t e ( ha s h ) ; 

n 

B 

i f 

( ! he)  { 

a 

B 

□ 

pgpHemFree(ps)  ; 

□ 

fl 

□ 

return  0; 

n 

B 

} 

n 

fl 

i f 

( !pgpHashHodCreate(8context->tai  1,  he)) 

{ 

n 

B 

□ 

pgpHashDestroy(hc) ; 

□ 

B 

D 

pgpMemFree(ps)  ; 

Q 

B 

n 

return  0; 

n 

B 

> 

n 

> 

n 

/* 

Fill  in 

the  PerSignature  structure  */ 

n 

ps- 

>spec  = 

spec; 

n 

ps- 

>h  c = he 

f 

n 

i f 

(IcLearsig  &S  con t ex t->ve r s i on  > PG P V E RS 1 0N_2 _6  ) 

n 

fl 

/* 

n 

B 

•k 

Add  the  1-pass  signature  header  here.  It  gets 

n 

B 

•k 

buffered  in  the  order  the  signatures  come  in,  in  a 

Q 

fl 

k 

LIFO  stack.  For  clearsigs  we  don't  do  this,  there  is 

n 

B 

k 

just  the  sig  at  the  end.  The  hash  info 

goes  in  the 

n 

B 

k 

clear. 

n 

fl 

*/ 

a 

fl 

byte  *buf; 

n 

fl 

i n t 

len; 

B 

fl 

B 

B 

L en 

= pg pMa ke S i g H ea d e r Ha  X S i z e (spec); 

B 

fl 

pgpAssert  (PKTLEN_ONE_BYTE(Len)); 

B 

fl 

buf 

= (byte  *)pgpMemAl loc  (len+2); 

B 

fl 

i f 

( !buf  ) 

B 

fl 

n 

return  NULL; 

B 

fl 

L e n 

= pgpMakeSigHeader  (buf+2,  spec,  nest); 

CECHK: 
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n 

n 

buf [0] 

= PKTBYTE_BUI LD_NEW  ( PKTB YT E_1 P A S S S I G ) ; 

n 

□ 

buf  [1  3 

= PKTLEN_1BYTE  (len); 

n 

n 

n 

u 

1 e n - = 

pgpJoi nBuf f er  ( c o n t ex t -> j o i n , buf,  len+2); 

n 

a 

mems  e t 

(buf,  0,  sizeof  (buf)); 

o 

a 

pgpMemFree  (buf); 

n 

□ 

if  (len  !=  -2) 

□ 

n 

n 

return  NULL; 

n 

> 

n 

/*  Add 

to  the 

beginning  of  the  list,  reversing  the  stack  */ 

ps->next  = context->si g L i St; 
context ->siglist  = ps; 
c on t e X t -> s i g p t r = c on t e x t -> s i g L i s t ; 


/*  And  we're  done...  */ 
return  c on t e x t -> j o i n t a i L ; 


/* 

* Set  up  to  create  a(nother)  signature.  CLearsig  tells  us  not  to  try  to 

* use  the  1-pass  sigs. 

*/ 

struct  PgpPipeline  ** 

pg p S i g S i g na t u r e ( s t r u c t PgpPipeline  *myself,  struct  PgpSigSpec  *spec, 

□ 

□ 
n 
□ 


n byte  clearsig) 

struct  Context  *context; 
struct  PgpSigSpec  *ss; 
struct  PgpPipeline  **tail; 


a pgpAssert(myself); 

n pg p As s e r t ( my s e I f ->ma g i c ==  S I G MO  DM AG  I C ) ; 

n /*  Just  checking  ! */ 

n context  = (struct  Context  *)myself->priv; 

n pg p A s s e r t ( c on t e X t ) ; 


/*  Only  one  signature  on  a PG P V E R S I 0N_2_6  packet  */ 
if  C c on t e X t -> ve r s i on  <=  PG P V E RS I 0N_2_6 ) 

n return  addSignature  (myself,  spec,  clearsig,  0); 


/*  PGP\/ERSI0N_3  packets  can  have  multiple  signatures  */ 
tail  = NULL; 

nfor  (ss  = spec;  ss;  ss  = pg p S i g S pe c N e x t (ss))  { 
n tail  = addSignature  (myself,  ss,  clearsig, 

n n n ((pgpSigSpecNext(ss))?0:1)); 

n i f ( ! t a i I ) 

n n returntail; 

> 

return  tail; 


/* 

* This  inserts  some  text  into  the  signature  output  in  the  appropriate  place 

* to  make  a signed  message,  as  opposed  to  separate  signatures. 

* It  is  possible  that  you  might  take  the  output  of  the  signature  from 

* pg p S i g C r e a t e , apply  some  processing  (such  as  compression,  or  encapsulation 


CCCHK: caad38bebb1  fa22a4ffa9cca26d0cddf33fb008a330b4e9057633d44fe4e83dc1 3] 
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* in  a Literal  which  PGP  does  right  now)  and  feed  it  back  into 

* (Should  we  hide  *that*  processing,  too?) 

*/ 

struct  PgpPipeline  ** 

pgpS i gTex 1 1 ns e r t ( s t r u c t PgpPipeline  *myseLf,  struct  PgpPipeline 
{ 

n struct  Context  *context; 

n struct  PgpPipeline  *newjoin; 

n pgp As se r t C my s e L f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  S I GHO DM AG  I C ) ; 

n context  = (struct  Context  * ) my s e L f->p r i v; 

n pg p A s s e r t ( c on t ex t ) ; 

n pgpAssert(context->join); 

n pg p A s s e r t ( c on t ex t -> j o i n I a s t ) ; 


n if(!head) 

n n returnNULL; 


□ 

n 

□ 

a 

□ 

□ 

o 

} 


newjoin  = pg p J o i n A pp e n d ( c o n t ex t -> j o i n L a s t ) ; 
if  (newjoin)  ( 

n *head  = c on t e x t -> j o i n L a s t = newjoin; 

n return  con t ex t -> j o i n t a i L ; 

> else  { 


n return  0; 

} 


[CCHK:a98e2e2dd700cd0229ccbde3e1a881496ad:] 
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/* 

* pgpSigMod.h  — A module  that  is  used  to  make  a signed  message. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a Public  API  Function  Header. 

★ 

* $Id:  pg p S i g Mod . h , V 1.3. 2.1  1997/06/07  09:51:05  mhw  Exp  $ 

*/ 

#ifndef  PGPSIGMOD_H 
#define  PGPSIGMOD.H 

^include  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 

struct  PgpPipeline; 

#ifndef  T Y P E_ PG P P I P E L I N E 

#define  T Y P E_ PG P P I PE L I N E 1 

typedef  struct  PgpPipeLine  PgpPipeline; 

# e nd i f 

struct  PgpFifoDesc; 

#ifndef  T Y P E_PG P F I F 0 D E S C 

^define  T Y P E_ PG P F I FO D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#e n d i f 

struct  PgpSigSpec; 

#ifndef  TYPE.PGPSIGSPEC 

^define  T Y P E_ PG P S I G S P E C 1 

typedef  struct  PgpSigSpec  PgpSigSpec; 

# e nd i f 

struct  Pg p Ra ndomC on t ex t ; 

#ifndef  TYPE.PGPRANDOHCONTEXT 
#define  T YP E_PG PR AN  DOM C 0 NT E XT  1 

typedef  struct  PgpRandomContext  Pg pRa n d omC o n t ex t ; 

#end  i f 

/* 

* This  creates  a signing  module.  Initially,  it  just  passes  through  its 

* input  data  unmodified. 

*/ 

struct  PgpPipeline  PGPExport  ** pg p S i g C r ea t e (struct  PgpPipeline  **head. 


n 

Q 

n 

n 

PgpVersion  version. 

Q 

n 

a 

n 

struct 

PgpFifoDesc  const  *fd. 

n 

n 

n 

n 

struct 

PgpRandomContext  const  *rc); 

/* 

* This  adds  a signature  to  the  signing  module.  It  returns  a tail  pointer 

* which  the  signatures  will  come  out  of.  Each  call  returns  the  same 

* tail  pointer  - this  joins  them  together  internally.  If  cLearsig  is 

* true  it  won't  try  to  output  the  special  one-pass  signature. 

*/ 

struct  PgpPipeline  PGPExport  **pg p S i g S i g n a t u r e (struct  PgpPipeline  *pipe, 
CCCHK:6a76a1c7ffb66668f33bd0899f279aa4b2466bded99da36b027033327c5f5751a35 
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n n B n struct  PgpSigSpec  *spec,  byte  cLearsig); 

/* 

* This  inserts  some  text  into  the  signature  output  in  the  appropriate  place 

* to  make  a signed  message,  as  opposed  to  separate  signatures. 

* It  is  possible  that  you  might  take  the  output  of  the  signature  from 

* pg p S i g C r ea t e , apply  some  processing  (such  as  compression,  or  encapsulation 

* in  a literal  which  PGP  does  right  now)  and  feed  it  back  into  here. 

* (Should  we  hide  *that*  processing,  too?) 

*/ 

struct  PgpPipeline  PGPExport  ** pg p S i gTex t I n s e r t (struct  PgpPipeline  *pipe, 

B B n B struct  PgpPipeline  **head); 

#ifdef  cplusplus 

> 

# e nd i f 

#endif  /*  PGPSIGMOD.H  */ 


i;:CHK:954f8872afbb7977c95f6c15:: 
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# 

It  L i b / pg p / p i pe  / 1 e X t / Ma  ke  f i L e . i n 
# 

M Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

It  $Id:  Makef  i Le . i n,v  1.1  2.2.4  1 997/06/07  09:51:05  mhw  Exp  $ 

It 

LOCALINCLUDES=  -I ../../ i n c L ud e 

0BJS=n  pgpCompMod.o  pgpDefHod.o  pgpInfHod.o  pgpLiteraL.o  pg pTex t F i L t . o \ 
n pgpZBits.o  pg p Z D e f L a t e . o pgpZTrees.o 

SHAREDHDRS=  p g p C otnpM  o d . h pgpLiteraL.h  pg  pT  e x t F i L t . h 

a L L : : DONE 
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It 

tt  L i b / pg p / p i pe  / t e X t / ma  ke f i L e . ms  c 
H 

tt  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
tf 

tt  $Id:  makef  i Le  . msc,v  1.4. 2. 2 1 997/06/07  09:51:06  mhw  Exp  $ 
tt 

CFLAGS=  -I..\..\..\..\incLude  -I..\..V..\incLude  \ 
n -I . . \ \ \ . -0HAVE_C0NFIG_H  $(DEBUG) 

PGPLIB=. .\. .\. .\pgpLib. Lib 

a L L : : n Lib 

headers:^  incL 

lincLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$ ( SHAREDHDRS ) "==" " \ 

n n for  %f  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ \ i n c L ud e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  . . \ \ \ i n c L ud e 

D0S0BJS=  $(0BJS: .o=.obj ) 

Lib:n  SCDOSOBJS) 

. c . o b j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 

c L e a n : 

n de  L * . ob j 

DONE  : 

n if  exist  $(PGPLIB)  L i b / o u t : $ ( PG P LI B ) $(PGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / o u t : $ < PG P LI B ) SCDOSOBJS) 


C[CHK:35d8aa22e322113355056b997cc4ddfdd0f21e2e6ba]: 


1321 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpCompMod.c 


/* 

* pgpCompMod.c  — General  Compression  and  Decompression  Module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa  r I o r da)M  I T . E D ll> 

★ 

* $Id:  pg p C ompMod . c , V 1.3. 2.1  1997/06/07  09:51:06  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

#end  i f 


#include 
^include 
^include 
^include 
# i n c I ude 
# i n c I ud  e 
^include 


"pgpAddHdr.h" 

"pgpCompMod.h" 

"pgpDefMod  . h" 

"pgpInfMod.h" 

"pgpPktByte.h" 

"pgpCompress  . h 

"pgpPipeline.h 


struct  PgpPipeline  ** 

pg p C omp r e s sMod C r ea t e (struct  PgpPipeline  **head,  PgpVersion  version, 
n n struct  PgpFifoDesc  const  *fd,  byte  type,  int  quality) 

{ 

n struct  PgpPipeline  *newhead  = NULL,  **tail  = Snewhead; 

a i f ( ! head  ) 

n n return  NULL; 


n switch  (type)  { 

n case  PG P_ C OM PRE S S A LG_Z I P : 

n n tail  = defModCreate  (tail,  quality); 

n n break; 

a default: 

n n tail=NULL; 

n } 


n 


n 

□ 


if  (tail)  { 
n tail 

n □ 


pg p Ad d H e a d e r C r ea t e (tail,  version,  fd, 
n n PKTBYTE_COMPRESSED,  3,  Stype,  1); 


n 


D 

□ 

□ 


if  ( ! tai  I ) { 

n newhead->t ea rdown  (newhead); 

a return  NULL; 

> 


n 

Q 

□ 

a 

} 


n 

*tail  = *head; 

n 

*head  = newhead; 

> 

return 

tail; 

struct  PgpPipeline  ** 

pg p D e c omp r e s sMod C r e a t e (struct  PgpPipeline  **head,  byte  type) 
{ 

n if(!head) 

n n returnNULL; 
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n switch  (type)  { 

n case  PG P_C OM PR E S S A LG_Z I P : 

n n return  infHodCreate 

n default: 

n n returnNULL; 

n } 

} 


CCCHK: 027e4f 6a78b21 c2:: 
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/* 

* pgpCompMod.h  --  this  defines  the  compression  and  decompression 

* functions  for  PGP..  It  provides  a generalized  interface  to  the 

* compression  modules,  and  keeps  applications  from  requiring 

* knowledge  of  all  the  different  types  of  compression  that  may  be 

* supported. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  <wa r I o r dSM I T . E D U> 

* 

* $Id:  pg pC ompMod . h , V 1.4. 2.1  1997/06/07  09:51:07  mhw  Exp  $ 

*/ 

#ifndef  PGPC0MPM0D_H 
/^define  PGPCOMPMOD.H 

^include  "pgpUsuals.h" 

#ifdef  __cplusplus 
extern  "C"  f 
#end i f 

struct  PgpPipeline; 

#ifndef  T YPE.PG PP I P E LI N E 

^define  TYPE.PGPPIPELINE  1 

typedef  struct  PgpPipeline  PgpPipeline; 

#endi f 

struct  PgpFifoDesc; 

#ifndef  TYPE.PGPFI FODESC 

^define  T Y P E_PG P F I F 0 D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#end i f 


/* 

* Create  a compression  module  of  the  appropriate  type  (must  be  one  of 

* the  COMPRESSALG.*  types)  with  the  appropriate  compression  quality. 

* 

* Note:  There  can  only  be  one  ZIP  compression  module  in  existence 

* at  a time,  since  the  underlying  ZIP  code  is  not  re-entrant. 

*/ 

struct  PgpPipeline  PGPExport  **pg pC omp r e s s Mod C r ea t e ( 
n struct  PgpPipeline  **head,  PgpVersion  version, 

n struct  PgpFifoDesc  const  *fd,  byte  type,  int  quality); 

/* 

* Create  a decompression  module  of  the  appropriate  type. 

*/ 

struct  PgpPipeline  PGPExport  **pg p D e c omp r e s s Mod C r ea t e ( 
n struct  PgpPipeline  **head,  byte  type); 

#ifdef  cplusplus 

} 

#endi f 

#endif  /*  PGPCOMPMOD.H  */ 
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/* 

* pgpDefMod.c  --  Deflate  (compression)  module 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r I o r d SM I T . E D U> 

* 

* $Id:  pgpDef Mod . c, V 1.3. 2.1  1997/06/07  09:51:07  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG  H 


^include 

ttendi  f 

" c 0 n f i g . h " 

# i n c 1 ud e 

<stdio.h> 

#include 

"pgpDebug.h" 

# i n c 1 ude 

"pgpByteFIFO.h 

# i n c 1 ud  e 

"pgpDefHod.h" 

#i nc 1 ude 

"pgpZ i p . h" 

//include 

"pgpAnnotate.h 

#include 

"pgpMem.  h" 

//include 

" PgpPipeline. h 

//define 

DEFMODMAGICn 

0x0def1a1e 

static  int  defModLock  = 

0; 

struct  Context  { 

o struct  PgpFifoContext  *fifo; 

a struct  PgpPipeline  *tail; 

n int  finished; 

o int  scope_depth; 

>; 

static  int 

DoFlush  (struct  Context  *context) 

{ 

n inter ror=0; 

n byte  const  *ptr; 

n unsigned  len; 

n size_t  retlen; 

n /*  Try  to  flush  anything  that  we  have  buffered  */ 

n bi_flush(); 

n ptr  = byteFifoPeek  ( c o n t ex t -> f i f o , Slen); 

n while  (len)  { 

° n retlen  = c on t ex t -> t a i I -> w r i t e ( c o n t e x t -> t a i I , ptr,  len, 

n n n n n Serror); 

n n byteFifoSeek  ( c o n t ex t -> f i f o,  retlen); 

n n if(error) 

n n n returnerror; 

a n ptr  = byteFifoPeek  (context->fifo,  &len); 

n > 

n return  error; 

} 

static  int 

Flush  (struct  PgpPipeline  *myself) 
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{ 

n struct  Context  *context; 

n interror; 

n pgpAssert  (myself); 

n pgpAssert  (myseLf->magic  ==  DEFMODMAGIC); 

n context  = (struct  Context  *)myseLf->priv; 

a pgpAssert  (context); 

n pgpAssert  ( c o n t e x t -> t a i L ) ; 

n error  = DoFLush  (context); 

n if  (error) 

n n returnerror; 

n return  c o n t ex t -> t a i L -> f L u s h ( c on t e x t -> t a i L ) ; 

> 


static  si ze_t 

Write  (struct  PgpPipeLine  *myself,  byte  const  *buf,  size_t  size,  int  *error) 

{ 


n 

struct  Context  *context; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e L f ->ma g i c ==  DEFMODMAGIC); 

n 

pgpAssert 

(error); 

Q 

context  = 

(struct  Context  * ) my s e L f ->p r i v ; 

n 

pgpAssert 

(context); 

Q 

pgpAssert 

(context->tai L); 

n 

zi p_i nput 

((char  const  *)buf,  size); 

n 

♦error  = 

DoFLush  (context); 

n 

return  si 

ze; 

} 

static  int 

Annotate  (struct  PgpPipeLine  *myself,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

< 

n struct  Context  *context; 

n interror; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  DEFMODMAGIC); 

n context  = (struct  Context  * ) my s e L f -> p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c on t e x t -> t a i L ) ; 

n error  = DoFLush  (context); 

n if  (error) 

n n returnerror; 

n error  = c on t ex t -> t a i L ->a n n o t a t e ( c on t ex t -> t a i L , origin,  type, 

n n n n n string, size); 

n if  (lerror) 
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n a PG P_SC 0PE_D E PTH_UP D AT E ( con t ex t->s c ope_de p t h , type); 

a pg p A s s e r t ( c o n t e X t -> s c ope_d e p t h !=  -1); 

a return  error; 

> 


static  int 

SizeAdvise  (struct  PgpPipeLine  *tnyseLf,  unsigned  Long  bytes) 
{ 

a struct  Context  *context; 

a interror; 


n 

pgpAssert 

n 

pgpAssert 

n 

context  = 

n 

pgpAssert 

Q 

pgpAssert 

(myself); 
(myself ->magic 

(struct  Context 
(context); 
(context ->tai 1) 


==  DEFMODMAGIC); 
*)myself->priv; 


a if  (bytes  ||  c o n t e x t ->s c op e_d e p t h ) 

a a returnO; 


a 

a 

a 

a 

a 

a 

a 

a 


if  ( ! c o n t e X t -> f i n i s h ed ) { 

a /*  It  is  a Bad  Thing  to  call  zip_finish  multiple  times.  */ 

a zip_finish  (); 

a c o n t e X t -> f i n i s h e d = 1; 

} 

error  = DoFlush  (context); 
if  (error) 

a return  error; 


a return  c o n t e x t -> t a i L -> s i z e Ad v i s e ( c on t ex t -> t a i L , 0); 

} 


static  void 

Teardown  (struct  PgpPipeLine  *nyseLf) 
{ 


Q 

struct  Context  *context; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e L f ->ma g i c ==  DEFMODMAGIC); 

n 

context  = 

(struct  Context  *)myseLf->priv; 

n 

pgpAssert 

(context); 

a if  ( c on t ex t -> t a i L ) 

a a c o n t ex t -> t a i L -> t e a r d o wn  ( c on t e x t -> t a i L ) ; 

a ct_free  ();a  a /*  Free  code  tree  buffers  */ 

a Lm_free  ();a  a /*  Free  Longest  match  buffers  */ 

a by t e F i f o D e s t r oy  ( c o n t ex t ->f i f o ) ; 

a memset  (context,  0,  sizeof  (*context)); 

a pgpMemFree  (context); 

a memset  (myself,  0,  sizeof  (*myseLf)); 

a pgpMemFree  (myself); 

a defHodLock--; 

} 

struct  PgpPipeLine  ** 
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de  f Hod  C r ea  t e (struct  PgpPipeMne  **head,  int  quality) 


n 

struct  PgpPipeLine  *mod; 

n 

struct  Context  *context; 

n 

struct  Pg p F i f 0 C on t ex t *fifo; 

n 

if  ( ! head  ) 

n 

n return  NULL; 

o 

if  (defModLock) 

n 

n return  NULL; 

n 

defHodLoc  k + + ; 

n 

if  (Lm_init  (quality)) 

n 

n return  NULL; 

n 

if  (ct_init  ())  { 

n 

n lm_free(); 

n 

n return  NULL; 

n 

> 

n 

context  = (struct  Context  * ) pg pHem A 1 1 o c (sizeof  (*context)); 

n 

if  (Icontext)  { 

n 

n ct_free(); 

Q 

n lm_free(); 

n 

n return  NULL; 

a 

> 

n 

mod  = (struct  PgpPipeline  *)pgpHemAlloc  (sizeof  (*mod)); 

□ 

if  ( ! mod ) { 

Q 

n ct_free(); 

n 

n lm_free(); 

□ 

n pgpHemFree  (context); 

Q 

n return  NULL; 

n 

} 

n 

fifo  = byteFi f oCreate  (); 

□ 

if  ( ! f i f 0 ) { 

a 

n ct_free  (); 

n 

n lm_free(); 

n 

a pgpHemFree  (context); 

u 

n pgpHemFree  (mod); 

n 

n return  NULL; 

n 

} 

□ 

Q 

mod->magic  = DEFHODHAGIC; 

n 

mod->write  = Write; 

n 

mod->flush  = Flush; 

D 

mod->si zeAdvi se  = SizeAdvise; 

n 

mod->a n no t a t e = Annotate; 

Q 

mod->teardown  = Teardoun; 

n 

mod->name  = "Deflation  Hodule"; 

a 

mod->priv  = context; 

n 

memset  (context,  0,  sizeof  (*context)); 

n 

context -> fifo  = fifo; 

n 

bi_init  (fifo); 

n 

context->tai  1 = *head; 

n 

*head  = mod ; 

n 

return  & c o n t e x t -> t a i 1 ; 

CCCHK: 
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/* 

* pgpDefMod.h  --  Header  for  ZIP  Compression  (deflation) 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  <Ha  r L o r d S)H  I T . E D U> 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpDef Hod . h, V 1.3. 2.1  1997/06/07  09:51:07  mhw  Exp  $ 

*/ 

#ifdef  __cpLuspLus 
extern  "C"  { 

#endi f 

struct  PgpPipeline; 

struct  PgpPipeline  **defHodCreate  (struct  PgpPipeline  **head,  int  quality); 

#ifdef  cpLuspLus 

> 

#end i f 
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/* 

* pgpInfMod.c  — Inflation  (decompression)  module 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r I o r d SH I T . E D U> 

* 

* $Id:  pg p I n f H od . c , V 1.3. 2.1  1997/06/07  09:51:08  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 


#include 


<stdio.h> 


#include 
# i n c I ude 
#include 
#i nc lude 
#include 
#i nc lude 


pgpDebug.h" 

pgpInfHod.h" 

pgpZInflate.h" 

pgpAnnotate.h" 

pgpMem. h" 

pgpPipeline.h" 


Sdefine  INFHODMAGICn  0x01258aef 


struct 

□ 

n 

n 

>; 


Context  { 

struct  InflateContext  *inf; 
struct  PgpPipeline  *tail; 
int  scope_depth; 


static 

i nt 

DoFLush  (struct  Context  *context) 

□ 

int  error  = 0; 

n 

unsigned  len; 

n 

byte  const  *ptr; 

n 

s i z e_t 

r e t 1 e n ; 

D 

/*  Try 

to  flush  anything  that 

we  have 

buffered 

n 

p t r = 

infGetBytes  ( c on t e x t -> i n f , &len) 

r 

Q 

while 

(len)  ( 

□ 

n 

retlen  = c o n t ex t -> t a i 1 

->w  r i t e 

( cont  ext- 

n 

Q 

o n n 

pt  r,  len 

s 

n 

n □ D 

Serror)  ; 

n 

n 

infSkipBytes  (context- 

>inf,  retlen); 

n 

n 

Q 

n 

if  (error) 

n 

□ 

n return  error; 

n 

Q 

ptr  = infGetBytes  (context->inf,  &len); 

n 

> 

u 

} 

return 

error; 

static 

int 

Flush 

(struct 

PgpPipeline  *myself) 

n 

struct 

Context  *context; 
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□ 

int  error; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

(myself->magic  = 

Q 

context  = 

(struct  Context 

n 

pgpAssert 

(context); 

n 

pgpAssert 

(context ->tai 1); 

n 

error  = DoFlush  (context); 

n 

if  (error) 

n 

n return  error; 

INFHODMAGIC)  ; 
)myseLf->priv; 


n return  c on t e x t -> t a i I ->f L u s h ( c on t e x t -> t a i L ) ; 

> 


static  size_t 

Write  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n size_t  written,  retlen  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  INFHODMAGIC); 

n pgpAssert  (error); 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i L ) ; 


/*  Flush  what  is  buffered  */ 
*error  = DoFlush  (context); 


□ 

i f 

(*error) 

a 

n 

return 

ret len; 

n 

d 0 

{ 

n 

n 

/*  Process  data  */ 

n 

n 

written 

= infWrite  (context->i 

n 

n 

ret  1 e n 

+=  written; 

n 

n 

buf  + = 

written; 

n 

n 

size  -= 

written; 

n 

n 

if  (*error) 

n 

n 

o 

return  retlen; 

n 

n 

/ * And 

flush  it!  */ 

n 

n 

♦error 

= DoFlush  (context); 

n 

n 

if  (*error) 

Q 

n 

n 

return  retlen; 

Q 

> 

while 

(size); 

D 

/* 

Continue  until  we  have  left  to  read 

n 

return 

retlen; 

> 

static 

int 

Annotate  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 
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{ 

a struct  Context  *context; 

a interror; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  I N F MO D M AG  I C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c o n t e x t -> t a i I ) ; 

n error  = DoFLush  (context); 

n if  (error) 

n n returnerror; 


n error  = c on t e x t -> t a i L ->a n no t a t e ( c o n t e x t -> t a i L , origin,  type, 

n n n n n string, size); 

a if  (!error) 

a a PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 

a pgpAssert  ( c o n t e x t -> s c ope_d e p t h !=  -1); 

a return  error; 

} 


static  int 

SizeAdvise  (struct  PgpPipeLine  *myseLf,  unsigned  Long  bytes) 
{ 

a struct  Context  *context; 

a int  eoferr; 

a interror; 


n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my s e L f ->ma g i c ==  I N F MO  DM AG  I C ) ; 

Q 

context 

= 

(struct  Context  * ) my s e L f->p r i v; 

n 

pgpAssert 

(context); 

Q 

pgpAssert 

(context ->tai L); 

n 

if  ( ! bytes 

&S 

! c 0 n t ex t ->s c 0 p e_d e p t h ) { 

Q 

n 

do 

{ 

Q 

o 

n 

eoferr  = infEOF  (context- 

n 

n 

Q 

i f (eoferr  < 0) 

□ 

n 

n 

a return  eoferr; 

n 

n 

n 

error  = DoFLush  (context) 

n 

n 

D 

if  (error) 

n 

n 

D 

a return  error; 

n 

n 

> 

w h i 1 

e (eoferr); 

n 

> 

s 

return 

context 

-> t a i L ->s i z e Ad V i s e (context 

static  void 

Teardown  (struct  PgpPipeLine  *myseLf) 
{ 

a struct  Context  *context; 


a pgpAssert  (myself); 
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n pgpAssert  ( my s e L f ->ma g i c ==  I N F MO D H AG  I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

a if  ( c o n t e X t -> t a i L ) 

n n con t ex t->t a i L ->t ea rdown  ( c o n t e x t -> t a i L ) ; 

n infFree  ( c on t ex t -> i n f ) ; 

n memset  (context,  0,  sizeof  (*context)); 

n pgpHemFree  (context); 

n memset  (myself,  0,  sizeof  (*myseLf)); 

n pgpHemFree  (myself); 

> 

struct  PgpPipeline  ** 

i n f Mod C r ea t e (struct  PgpPipeline  **head) 

{ 

n struct  PgpPipeline  *mod; 

n struct  Context  *context; 

a i f ( ! head ) 

n n returnNULL; 

n context  = (struct  Context  * ) pgpHemA  I I oc  (sizeof  (*context)); 

n if  ([context) 

n n returnNULL; 

n mod  = (struct  PgpPipeline  * ) pg pHem A I I o c (sizeof  (*mod)); 

n if(!mod){ 

n n pgpHemFree  (context); 

n n return  NULL; 

n } 

n mod->magic  = INFHODHAGIC; 

n mod->write  = Write; 

n mod->flush  = Flush; 

n mod->s i zeAdvi se  = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardoun; 

n mod->name  = "Inflation  Module"; 

n mod->priv  = context; 

a memset  (context,  0,  sizeof  (*context)); 

n context -> inf  = infAlloc  (); 

n c on t ex t -> t a i I = *head; 

n *head=mod; 

n return  S c on t ex t -> t a i I ; 

> 
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/* 

* pgpInfMod.h  --  inflation  module 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <uarlordaMIT.EDU> 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpinf Mod . h,v  1.3. 2.1  1997/06/07  09:51:08  mhw  Exp  $ 

*/ 

#ifdef  __cplusplus 
extern  "C"  { 

#endi f 

struct  PgpPipeline; 

struct  PgpPipeline  **  i n f Mod C r ea t e (struct  PgpPipeline  **head); 

#ifdef  cplusplus 

> 

#e nd i f 
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/* 

* pgpLiteral.c  --  create  a Literal  packet 

4r 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa  r L o r dSH  I T . E D Ll> 

* 

* $Id:  pg p L i t e r a L . c , V 1.2. 2.1  1 997/06/07  09:51:08  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#endi f 

^include  <stdio.h> 


#i nc  Lude 
/^include 
#i nc  Lude 
^include 
#i nc  Lude 


pgpAddHdr. h" 
pgpLiteral.h" 
pgpPktBy t e . h " 
pgpPi pe  L i ne . h 
pgpUsuals.h” 


struct  PgpPipeline  ** 

pg p L i t e r a L C r ea t e (struct  PgpPipeline  **head,  PgpVersion  version, 
n n struct  PgpFifoDesc  const  *fd,  byte  type,  byte  *nanie, 

n n byte  Len,  word32  timestamp) 


byte  headerC261 D;n 


/*  Maximum  size  of  a Literal  header  */ 


n 

1 n t 

i ; 

n 

struct 

PgpPipeline  **mod 

r 

Q 

i -f 

( ! head ) 

n 

n 

return  NULL; 

n 

headerCOU  = type; 

D 

headerCI ] = Len; 

n 

memcpy 

(header+2,  name. 

L e n ) ; 

n 

Len 

+ = 

2; 

n 

for 

( i 

= 3;  i > 0;  i — ) { 

Q 

n 

headerCLen+iD  = 

(byte)  (timestamp 

□ 

n 

timestamp  >>=  8; 

n 

> 

D 

mod 

pgpAddHeaderCreate 

(head,  version. 

n 

□ 

□ □ 

header,  Len+4); 

n 

memset 

(header,  0,  sizeof  (header)); 

n 

i f 

( mod ) 

n 

n 

(*head)->name  = 

"Literal  Module"; 

n 

return 

mod  ; 

C[CHK:64366d5382f11116ec0ee638177cbbc441f1f109cc899f7dd761faedbe:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1336 


pgpLiteral.h 


/* 

* pgpLiteral.h  --  Create  a Literal  Packet  Module 

* 

* Copyright  CC)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r I o r d SM I T . E D U> 

★ 

* $Id:  pgpLi tera I . h,v  1.4. 2.1  1997/06/07  09:51:09  mhw  Exp  $ 

*/ 

#ifndef  PGPLITERAL.H 
#define  PGPLITERAL.H 

#include  "pgpUsuals.h" 

#ifdef  ..cplusplus 
extern  "C"  { 

#e  nd i f 

struct  PgpPipeline; 

#ifndef  T Y P E. PG P P I PE  LI N E 

#define  T Y PE.PG P P I P E L I N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

# e n d i f 

struct  PgpFifoDesc; 

#ifndef  TYPE.PGPFI FODESC 

#define  T Y PE.PG P F I F 0 D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

# e n d i f 

/* 

* This  creates  a module  for  a literal  packet.  The  type  should  be 

* either  'b'  or  't'  for  binary  or  text.  The  name  is  len  bytes  which 

* specifies  the  name  of  the  file.  The  timestamp  is  the  timestamp  of 

* the  file. 

*/ 

struct  PgpPipeline  PGPExport  ** 

pg p Li t e r a I C r ea t e (struct  PgpPipeline  **head,  PgpVersion  version, 
n n struct  PgpFifoDesc  const  *fd,  byte  type,  byte  *name, 

n n byte  len,  word32  timestamp); 

#ifdef  cplusplus 

} 

# e nd i f 

#endif  /*  PGPLITERAL  H */ 
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/* 

* pgpTextFilt.c  --  filter  text 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r dSM I T ■ E D U>  and  Colin  Plumb 

•k 

* $Id:  pgpText Fi  It . c,v  1.4. 2.1  1 997/06/07  09:51:09  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

# e n d i f 

^include  <stdio.h> 


^include 
# i n c I ude 
#include 
# i n c I ude 
//include 
//include 


"pgpDebug . h" 
"pgpTextFi  It.h 
" pg  pMem . h " 
"pgpPipeline.h 
"pgpErr.h" 
"pgpUsuals.h" 


#if  (BUFSIZ  < 16384)  &&  (MACINTOSH  ||  WIN32) 
//define  kPG  P F i 1 1 Bu  f S i z enn  1 6384 

#e  I se 

//define  kPG  P F i 1 1 Bu  f S i z enn  BUFSIZ 

//end  i f 


#define  TEXTFILTHAGICn  0x1e81f111 


struct  Context  { 

n byte  bufferCkPGPFiltBufSize3; 

n byte  *bufptr; 

n si ze_t  buf len; 

n struct  PgpPipeline  *tail; 

n byte  const  *map;n  /*  256-entry  mapping  table  */ 

n intcrlf;n  n /*0=nothing,  1=LF,  2=CRLF,  3=CR 

n int  stripspace; 

n size_t  spaces; 

n int  ignorelf; 

>; 

static  int 

DoFlush  (struct  Context  *context) 


*/ 


{ 


n 

int  error  = 0; 

n 

si ze_t 

ret l en; 

n 

/*  Try 

to  flush  anything 

that  we  have 

buffered  */ 

a 

while 

(context->buflen) 

{ 

n 

B 

ret  len  = context 

->tai  l->write 

( context->tai 1, 

n 

B 

n n 

n 

context->bufptr. 

B 

B 

n n 

n 

context->buflen. 

B 

B 

a n 

n 

&e  r ro  r ) ; 

B 

B 

context->buf len 

-=  retlen; 

B 

B 

memset  (context- 

>bufptr,  0,  retlen); 

B 

B 

context->bufptr 

+=  ret len; 

B 

B 

if  (error) 
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c 

n 

B 

B 

return  error; 

□ 

} 

Q 

return 

error; 

> 

/* 

* 

Note: 

it  is 

assumed  that  \r. 

\n  and  ' ' use  the  identity  mapping. 

* 

This 

will  need 

fixing  for  EBCDIC. 

*/ 

static  si ze_t 

textFiLt  (struct  Context  *context,  byte  const  *in,  size 

_t  inlen) 

{ 

n 

si z e_t 

spaces  = context- 

■>spaces; 

n 

int  ignore 

If  = con t ex t-> i gno re  1 f ; 

n 

by t e *out 

= context->bufptr+context->buflen; 

n 

si ze_t 

out  Len  = context- 

■>buffer+sizeof(context- 

>buffer)- 

out; 

n 

s i ze_t 

inLen0  = inlen; 

n 

byte  c 

/ 

n 

pgpAssert 

(outlen); 

n 

while 

(inlen  &&  outlen) 

{ 

□ 

B 

c 

= * i n ; 

n 

B 

i f 

(ignorelf)  { 

n 

B 

B 

ignorelf 

= 0; 

□ 

B 

B 

if  ( c == 

' \n  ' ) { 

□ 

B 

B 

B 

i n + + ; 

n 

B 

B 

B 

ini  en--; 

n 

B 

B 

B 

continue; 

n 

B 

B 

> 

n 

B 

> 

D 

B 

i f 

(c  ==  ' \n  ' II 

O 

II 

II 

D 

B 

B 

if  ( con t ex t ->c r 1 f ) { 

n 

B 

B 

fl 

if  (context->crlf  ==  PG P_T E XT F I LT_C R L F ) 

n 

B 

B 

B 

n if(outlen<2) 

n 

B 

B 

B 

n n break; 

n 

B 

B 

B 

n outlen--; 

B 

B 

B 

B 

> 

B 

B 

B 

B 

if  ( con t ex t ->c r 1 f & PGP 

_TEXTFILT 

_CR) 

B 

B 

B 

B 

n *out++  = ' \ r ' ; 

B 

B 

B 

B 

if  ( c on t ex t -> c r 1 f & PGP 

_TEXTFILT 

_LF) 

B 

B 

B 

B 

n *out++  = ' \n  ' ; 

B 

B 

B 

fl 

out len--; 

B 

B 

B 

B 

i n + + ; 

B 

B 

B 

fl 

ini  en--; 

B 

B 

B 

B 

ignorelf  = (c  ==  '\r'); 

B 

B 

B 

B 

spaces  = 0; 

B 

B 

B 

B 

continue; 

B 

B 

B 

> 

B 

B 

B 

spaces  = 

0; 

B 

B 

> 

B 

B 

i f 

( con t ex t->s t r i ps pa ce  8&  c ==  ' ')  { 

B 

B 

B 

s pa  c e S + + 

/ 

B 

B 

B 

i n + + ; 

B 

B 

B 

i n 1 en--; 

B 

B 

B 

continue 

r 

B 

B 

} 
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n 

B 

if  (spaces)  { 

n 

B 

□ 

int  i = min  (spaces,  outli 

n 

B 

□ 

memset  (out,  ' ',  i); 

n 

B 

a 

outlen  -=  i; 

n 

B 

a 

spaces  -=  i; 

n 

B 

n 

out  + = i ; 

D 

B 

a 

continue; 

n 

B 

y 

D 

fl 

*out++ 

= c on t e X t ->ma p C cU ; 

B 

B 

i n + + ; 

B 

B 

out  1 e n- 

“ f 

B 

B 

i n L en-- 

r 

B 

> 

B 

context 

->spaces 

= spaces; 

B 

context 

->ignore 

If  = ignorelf; 

B 

context 

->buf  L en 

= out  - c on t e X t ->bu f p t r ; 

B 

return 

i n 1 en0  - 

i n L e n ; 

> 

static  int 

Flush  (struct  PgpPipeLine  *myseLf) 
{ 


B 

struct  Context  *context; 

B 

int  error; 

B 

pgpAsse  rt 

(myself); 

B 

pgpAssert 

( my s e L f ->ma g i c == 

TEXTFILTMAGIC); 

B 

context  = 

(struct  Context  * 

) my se  L f->p  r i v; 

B 

pgpAssert 

(context); 

B 

pgpAssert 

(context ->tai L); 

B 

error  = DoFLush  (context); 

B 

if  (error) 

B 

n return  error; 

B 

return  c on t e x t -> t a i L ->f L u s h 

( context->tai L ); 

> 


static  size_t 

Write  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n size_t  written,  retlen  = 0; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  T E XT F I LTM AG  I C ) ; 

n pgpAssert  (error); 

n context  = (struct  Context  *)myseLf->priv; 

n pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i L ) ; 

n do  { 

n n *error  = DoFLush  (context); 

n n if(*error) 


:CCHK:c99162a6d5113995523224f3add8ee3f1106889334666887a11f9997fc218b313): 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1340 


pgpTextFilt.c 


Q 

Q 

n 

return  retlen; 

C 

a 

/* 

□ 

□ 

* 

Now  that  we  dont  have  anything  buffered,  bring  in  more 

Q 

n 

★ 

data  from  the  passed-in  buffer,  process  it,  and  buffer 

a 

a 

★ 

that  to  write  out. 

a 

n 

*/ 

□ 

n 

c on t e x t ->bu f p t r = c o n t ex t ->bu f f e r ; 

J3 

Q 

written  = textFilt  (context,  buf,  size); 

n 

n 

/* 

context->buf len  is  set  by  textFilt()  */ 

D 

a 

buf 

+=  written; 

n 

n 

size  -=  written; 

n 

n 

retlen  +=  written; 

a } while  ( cont ext->buf L en  > 0); 

n /*  Continue  until  we  have  nothing  buffered  */ 

n return  retlen; 

> 


static  int 

Annotate  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  ( my se I f->mag i c ==  T E XT F I LTM AG  I C ) ; 


context  = (struct  Context  * ) my s e I f->p r i v; 
pgpAssert  (context); 
pgpAssert  ( cont ext->ta i I ) ; 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 


n return  c on t e x t -> t a i I ->a n n o t a t e ( con t ex t -> t a i I , origin,  type, 

n n o n n string,  size); 

} 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 
{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  TEXT  FI LTHAGI C ) ; 


a 

a 


n 


context  = 
pgpAssert 
pgpAssert 


(struct  Context  *)myself->priv; 
( context ) ; 

(context ->tai 1); 


n error  = DoFlush  (context); 

n if  (error  ||  (bytes  &&  ( c on t e x t -> s t r i p s pa c e ||  cont ext->c r I f ) ) ) 

a a returnerror; 
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n return  c o n t ex t -> t a i L -> s i z e Ad v i s e ( cent ext->ta i L , bytes); 

> 


static  void 

Teardoun  (struct  PgpPipeLine  *iiiyseLf) 
{ 

n struct  Context  *context; 


n pgpAssert  (myself); 

a pgpAssert  ( my s e L f ->ma g i c ==  TEXT  FI LTMAGI C ) ; 


n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert  (context); 


n if  ( context->ta i L ) 

n n con t ex t-> t a i L ->t ea rdown  ( con t e x t -> t a i L ) ; 


n memset  (context,  0,  sizeof  (*context)); 

a pgpHemFree  (context); 

n memset  (myself,  0,  sizeof  (*myself)); 

n pgpMemFree  (myself); 

> 


struct  PgpPipeline  ** 

pg pTex t F i 1 1 C rea t e (struct  PgpPipeline  **head,  byte  const  *map,  int  stripspace. 


n 

n 

int  c r 1 f ) 

{ 

n 

struct 

PgpPipeline  *mod; 

D 

struct 

Context  ‘context; 

n 

pgpAssert  (map); 

n 

if  (Ihead) 

n 

n 

return  NULL; 

n context  = (struct  Context  * ) pg pMemA I I o c (sizeof  (*context)); 

n if  ([context) 

n n returnNULL; 

n mod  = (struct  PgpPipeline  * ) pg pHemA I I o c (sizeof  (*mod)); 

n i f ( ! mod  ) { 

a a pgpMemFree  (context); 

n n returnNULL; 

n } 

n mod->magic  = T E XT F I LTH AG  I C ; 

n mod->write  = Write; 

n mod->flush  = Flush; 

n mod->s i z e Ad V i s e = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardown; 

n mod->name  = "Text  Filter  Module"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 

n con t ex t -> bu f p t r = c on t ex t -> bu f f e r ; 

n context->map  = map; 

n c on t ex t -> s t r i ps pa c e = stripspace; 
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n context ->crLf  = crLf; 

n c on t ex t -> t a i L = *head; 

n *head=mod; 

n return  & c o n t ex t -> t a i L ; 

} 
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/* 

* pgpTextFilt.h  --  Text  Filter  Module 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <Ha r I o r dSM I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpTextFilt.h, V 1.4. 2.1  1997/06/07  09:51:09  mhw  Exp  $ 

*/ 

#ifndef  PGPTEXTFILT.H 
//define  PGPTEXTFILT.H 

//include  "pgpUsuals.h" 

//ifdef cplusplus 

extern  "C"  { 

// e nd i f 

struct  PgpPipeline; 

//ifndef  T Y PE.PG  PP I P E LI  N E 

^define  T YPE. PG PP I P E L I N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

Send i f 


/* 

* Create  a text  filtering  module.  It  will  use  the  appropriate 

* character  map  to  map  input  to  output  characters.  It  will  optionally 

* strip  ending  spaces  off  the  end  of  lines,  if  stripspace  is  non-zero. 

* It  will  also  convert  line-endings  to  the  appropriate  type  if 

* crlf  is  non-zero.  Use  TEXTFILT.*  to  designate  the  line-ending 

* required. 

*/ 

struct  PgpPipeline  PGPExport  ** 

pgpTextFi ItCreate  (struct  PgpPipeline  **head,  byte  const  *map,  int  stripspace, 
n n intcrlf); 


Sdefine  PGP.TEXTFILT.NONEn  0 
Sdefine  PG P.T EXT F I LT. L Fnn  1 
Sdefine  PGP.TEXTFILT.CRnn  2 
Sdefine  PGP  TEXT F I LT. C R L Fn  3 


Sifdef  cplusplus 

} 

Sendi f 


Sendif  /*  PGPTEXTFILT.H  */ 
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/* 

* pgpZBits.c 

★ 

* Copyright  (C)  1990,1991  Mark  Adler,  Richard  B.  Wales,  and  Jean-loup 

* Gailly.  Permission  is  granted  to  any  individual  or  institution  to  use, 

* copy,  or  redistribute  this  software  so  long  as  all  of  the  original 

* files  are  included  unmodified,  that  it  is  not  sold  for  profit,  and 

* that  this  copyright  notice  is  retained. 

* 

* Hacked  up  for  PGP  by  Colin  Plumb 

* 

* $Id:  pgpZBits.c, V 1.1. 2.1  1997/06/07  09:51:10  mhw  Exp  $ 

*/ 


/* 

* 

* 

* 

* 

★ 

★ 

* 

* 

•k 

* 

★ 

* 

★ 

* 

* 

* 

★ 

* 

★ 

* 

* 

* 

★ 

* 

* 

* 

* 

★ 

★ 

* 

* 

* 

* 

* 

* 

★ 

* 

"k 

* 

k 

* 

* 

★ 


bits.c  by  Jean-loup  Gailly. 

This  is  a new  version  of  im_bits.c  originally  written  by  Richard  B.  Wales 

PURPOSE 

Output  va r i a b I e - I e ng t h bit  strings. 

DISCUSSION 

The  PKZIP  "deflate"  file  format  interprets  compressed  file  data 
as  a sequence  of  bits.  Multi-bit  strings  in  the  file  may  cross 
byte  boundaries  without  restriction. 

The  first  bit  of  each  byte  is  the  low-order  bit. 

The  routines  in  this  file  allow  a va r i a b I e- I e ng t h bit  value  to 

be  output  r i g h t - 1 o- I e f t (useful  for  literal  values).  For 

lef t-to-ri ght  output  (useful  for  code  strings  from  the  tree  routines), 

the  bits  must  have  been  reversed  first  with  b i _ r e ve r s e ( ) . 

INTERFACE 

void  bi_init  (struct  Pg p F i f o C on t ex t *zipfifo) 

Initialize  the  bit  string  routines.  If  zipfifo  is 
non-NULL,  does  a hard  reset.  If  it  is  NULL,  just 
sets  variables  to  re-fetch  the  FIFO  write  pointer, 
because  it  has  been  invalidated  by  FIFO  reads. 

void  send_bits  (int  value,  int  length) 

Write  out  a bit  string,  taking  the  source  bits  right  to 

left. 

int  bi_reverse  (int  value,  int  length) 

Reverse  the  bits  of  a bit  string,  taking  the  source  bits  left  to 
right  and  emitting  them  right  to  left. 

void  bi_windup  (void) 

Write  out  any  remaining  bits  in  an  incomplete  byte. 

void  copy _b I o c k ( c ha r const  far  *buf,  unsigned  len,  int  header) 

Copy  a stored  block  to  the  zip  file,  storing  first  the  length  and 
its  one's  complement  if  requested. 
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* 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

/^include  "pgpByteFIFO.h" 

^include  "pgpZip.h" 

* Local  data  used  by  the  "bit  string"  routines. 

*/ 

static  unsigned  bi_buf; 

/*  Output  buffer,  bits  are  inserted  starting  at  the  bottom  (Least  significant 

* bits).  High-order  unused  bits  are  always  zero. 

*/ 

#define  Buf_size  16 

/*  Number  of  bits  used  within  bi_buf.  (bi_buf  might  be  implemented  on 

* more  than  16  bits  on  some  systems.) 

*/ 

static  int  bi_vaLid;  /*  number  of  valid  bits  in  bi_buf  */ 

/*  All  bits  above  the  Last  valid  bit  are  always  zero. 

*/ 

#ifdef  ZIPDEBUG 

word32  bits_sent;  /*  bit  Length  of  the  compressed  data  */ 

#end  i f 

/*  The  current  output  buffer  */ 
static  unsigned  char  *outptr; 
static  unsigned  outtotal; 
static  unsigned  outleft; 

/*  How  to  do  output.  */ 
struct  Pg p F i f o C on t ex t *zfifo; 

#define  bi_getspace(Len)  byteFifoGetSpaceCzfifo,  (Len)) 

^define  b i _s ki pspa c e ( L en  ) by t e F i f oS k i pSpa ce ( z f i f o,  (Len)) 

^define  PUTBYTE(c)  (outleft  = (outleft  ? outleft  : \ 

( b i _s ki pspa ce ( ou t t ot a L ) , \ 
outptr  = b i _ge t spa c e ( &ou t t o t a L ) , \ 
outtotaL))-1,  \ 

*outptr++  = (unsigned  char)(c)) 

#define  PUTSHORT(w)  (PUTBYTE(w),  PUTB YT E ( ( w ) >>8 ) ) 


void 

bi _i ni t ( St ruct  Pg p F i f oC on t e x t *zipfifo) 
{ 

n outleft  = outtotal  = 0; 

n zfifo  = zipfifo; 
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n bi_buf=0; 

n bi_vaLid=0; 

#ifdef  ZIPDEBUG 
n bi ts_sent  = 0L; 

#e  nd 1 f 

> 

/* 

* Make  sure  that  aLL  data  written  out  is  recorded,  and  invalidate 

* the  cached  pointers  because  reading  the  output  buffer  might 

* move  things  around.  PUTBYTE  will  re-fetch  the  appropriate  data. 
*/ 

void 

bi_fLush(void) 

n bi_skipspaceCouttotaL-outLeft); 

n outleft  = outtotaL  = 0; 

> 


void 

bi_windup(void) 

{ 

n if(bi_vaLid>8){ 

n n PUTSHORTCbi _buf ) ; 

n > else  if  (bi_vaLid  > 0)  { 

a n PUTBYTEC  bi _buf ) ; 

n > 

n bi_buf=0; 

n bi_vaLid=0; 

#ifdef  ZIPDEBUG 

a bits_sent  = (bits_sent+7)  S “7; 

#e nd i f 

n bi_skipspace(outtotaL-outLeft); 

n outptr  = bi_getspace(&outtotaL); 

n outleft  = outtotal; 

} 


void 

copy_b I oc k ( c ha r const  far  *buf,  unsigned  len, 
{ 

n bi_windup();  /*  align  on 

#ifdef  ZIPDEBUG 

o bits_sent  +=  ( wo rd32 ) I en<<3; 

# end i f 


int  header) 
byte  boundary  */ 


if  (header)  { 


n 

n 

PUTSH0RTC(word16)len); 

n 

n 

PUTSHORK (word16)"len); 

# i f d e f 

ZIPDEBUG 

Q 

n 

bits_sent  +=  2*16; 

#end i f 

□ 

> 

n 

while 

(len  >=  outleft)  { 

n 

n 

memcpy(outptr,  buf,  outleft); 

n 

n 

len  -=  outleft; 

n 

n 

buf  +=  outleft; 
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n n b i _ s k i p s pa c e ( ou t t o t a L ) ; 

n B outptr  = b i _g e t s p a c e ( &OU 1 1 o t a L ) ; 

B B outLeft=outtotaL; 

B > 

B if(Len)t 

B B memc py ( ou t p t r , buf,  Len); 

B B outptr+=len; 

B B out  Left  -=  len; 

B } 

} 


* Send  a value  made  up  of  a given  number  of  bits. 

* IN  assertion:  Length  <=  15  and  value  < (1  <<  Length). 
*/ 


vo  i d 

send_b i t s ( i n t value,  int  Length) 
{ 

#ifdef  ZIPDEBUG 


B 

B 

B 

B 

# e nd i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


T r a c e vv ( ( s t d e r r , " L %2d  v %4x  ",  Length,  value)); 

Zi pAssert ( Length  > 0 &&  Length  <=  15,  "invalid  Length"); 
ZipAssertCvalue  < (1  <<  Length),  "invalid  value"); 
bits_sent  +=  C wo r d32 ) L en g t h ; 

/* 

* Add  extra  bits  to  bi_buf  and  add  Length  to  bi_vaLid.  If  this 

* fills  bi_buf,  copy  Buf_size  bits  to  the  output,  decrementing 

* bi_vaLid  appropriately  and  set  bi_buf  to  the  remaining  bi_vaLid 

* high  bits  of  value.  (value  >>  (Length  - bi_vaLid)). 

*/ 

bi_buf  1=  (value  <<  bi_vaLid); 

bi_vaLid  +=  Length; 

if  (bi_vaLid  >=  ( i n t ) Bu f _ s i z e ) { 

B PUTSHORK  bi  _buf  ) ; 

B bi_vaLid  -=  (int)Buf_size; 

B bi_buf  = ( un s i g n e d ) va L u e >>  (Length  - bi_vaLid); 

} 


} 
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pgpZDeflate.c 

Copyright  (C)  1990-1993  Mark  Adler,  Richard  B.  Wales,  Jean-loup  Gailly, 
Ka i Uwe  Rommel  and  Igor  Ma nd r i c h e n ko . 

Permission  is  granted  to  any  individual  or  institution  to  use,  copy, 
or  redistribute  this  software  so  long  as  all  of  the  original  files 
are  included,  that  it  is  not  sold  for  profit,  and  that  this  copyright 
notice  is  retained. 

Hacked  up  for  PGP  by  Colin  Plumb 

$Id:  pg p Z D e f I a t e . c , V 1.1. 2.1  1 997/06/07  09:51:1  0 mhw  Exp  $ 


deflate. c by  Jean-loup  Gailly. 

PURPOSE 

Identify  new  text  as  repetitions  of  old  text  within  a fixed- 
length  sliding  window  trailing  behind  the  new  text. 

DISCUSSION 

The  "deflation"  process  depends  on  being  able  to  identify  portions 
of  the  input  text  which  are  identical  to  earlier  input  (within  a 
sliding  window  trailing  behind  the  input  currently  being  processed). 

The  most  straightforward  technique  turns  out  to  be  the  fastest  for 
most  input  files:  try  all  possible  matches  and  select  the  longest. 

The  key  feature  of  this  algorithm  is  that  insertions  into  the  string 
dictionary  are  very  simple  and  thus  fast,  and  deletions  are  avoided 
completely.  Insertions  are  performed  at  each  input  character, 
whereas  string  matches  are  performed  only  when  the  previous  match 
ends.  So  it  is  preferable  to  spend  more  time  in  matches  to  allow  very 
fast  string  insertions  and  avoid  deletions.  The  matching  algorithm 
for  small  strings  is  inspired  from  that  of  Rabin  & Karp.  A brute 
force  approach  is  used  to  find  longer  strings  when  a small  match  has 
been  found.  A similar  algorithm  is  used  in  comic  (by  Jan-Hark  Warns) 
and  freeze  (by  Leonid  Broukhis). 

A previous  version  of  this  file  used  a more  sophisticated  algorithm 
(by  Fiala  and  Greene)  which  is  guaranteed  to  run  in  linear  amortized 
time,  but  has  a larger  average  cost,  uses  more  memory  and  is  patented. 
However  the  F&G  algorithm  may  be  faster  for  some  highly  redundant 
files  if  the  parameter  ma x_ c ha i n_  I e ng t h (described  below)  is  too  large. 

ACKNOWLEDGEMENTS 

The  idea  of  lazy  evaluation  of  matches  is  due  to  Jan-Mark  Warns,  and 
I found  it  in  'freeze'  written  by  Leonid  Broukhis. 

Thanks  to  many  info-zippers  for  bug  reports  and  testing. 
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APPNOTE.TXT  documentation  file  in  PKZIP  1.93a  distribution. 
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*/ 


A description  of  the  Rabin  and  Karp  algorithm  is  given  in  the  book 
"Algorithms"  by  R.  Sedgewick,  Addison-Wesley,  p252. 

Fiala,E.R.,  and  Greene, D.H. 

Data  Compression  with  Finite  Windows,  Comm. ACM,  32,4  (1989)  490-595 
INTERFACE 


int  lm_init  (int  pack_level) 

Initialize  the  "longest  match"  routines  for  a new  file 


word32  deflate  (void) 

Processes  a new  input  file  and  return  its  compressed  length.  Sets 
the  compressed  length,  crc,  deflate  flags  and  internal  file 
attributes. 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

Send  i f 

Sinclude  "pgpZip.h" 

/*  ======================== 

* Configuration  parameters 
*/ 


/* 

* Compile  with  MEDIl)M_HEM  to  reduce  the  memory  requirements  or 

* with  SHALL_HEM  to  use  as  little  memory  as  possible.  Use  BIG_MEM  if  the 

* entire  input  file  can  be  held  in  memory  (not  possible  on  16  bit  systems). 

* Warning:  defining  these  symbols  affects  HASH_BITS  (see  below)  and  thus 

* affects  the  compression  ratio.  The  compressed  output 

* is  still  correct,  and  might  even  be  smaller  in  some  cases. 

*/ 


#ifdef  SHALL_HEM 

# define  HASH_BITS  13  /*  Number  of  bits  used  to  hash  strings  */ 

# e nd i f 

#ifdef  MEDIUH_MEH 
U define  HASH_BITS  14 
#end i f 


#ifndef  HASH_BITS 
It  define  HASH_BITS  15 

/*  For  portability  to  16  bit  machines,  do  not  use  values  above  15.  */ 
#endi  f 


^define  HASH_SIZE  ( u n s i g n ed  ) ( 1 << H AS H _B I T S ) 
#define  HASH_HASK  ( H AS H_S I Z E-1 ) 

^define  WMASK  (WSIZE-1) 

/*  HASH_SIZE  and  WSIZE  must  be  powers  of  two  */ 


#def i ne  NIL  0 

/*  Tail  of  hash  chains  */ 


#ifndef  TOO_FAR 
# define  TOO.FAR  4096 
# e nd i f 
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/*  Hatches  of  Length  3 are  discarded  if  their  distance  exceeds  T00_FAR  */ 
#ifdef  ATARI_ST 

U undef  HSDOS  /*  avoid  the  processor  specific  parts  */ 

/*  (but  the  Atari  should  never  define  HSDOS  anyway  ...)  */ 

#end  i f 

#if  d e f i ne d ( H S D 0 S ) &&  ! d e f i n ed ( N0_ A S H ) SB  ! d e f i n ed ( A S H V ) 

# define  ASHV 

# e n d i f 

#if  def i ned ( A SH V ) BS  ! def i ned ( HS DOS  ) BB  d e f i ne d ( D Y N_ A L LO C ) 
error:  DYN_ALL0C  not  yet  supported  in  match. s 
#endi f 

/*  =========================================================================== 

* Local  data  used  by  the  "longest  match"  routines. 

*/ 

#if  def ined(BIG_HEH)  ||  d e f i n e d ( HH A P ) 

typedef  size_t  Pos;  /*  must  be  at  least  32  bits  */ 

Seise 

typedef  word16  Pos; 

Send  i f 

typedef  unsigned  IPos; 

/*  A Pos  is  an  index  in  the  character  window.  We  use  short  instead  of  int  to 

* save  space  in  the  various  tables.  IPos  is  used  only  for  parameter  passing. 
*/ 

Sifndef  DYN_ALL0C 

byte  w i n d o w C 2 L* W S I Z E 3 ; 

/*  Sliding  window.  Input  bytes  are  read  into  the  second  half  of  the  window, 

* and  move  to  the  first  half  Later  to  keep  a dictionary  of  at  least  WSIZE 

* bytes.  With  this  organization,  matches  are  Limited  to  a distance  of 

* W S I Z E-H AX_H AT C H bytes,  but  this  ensures  that  10  is  always 

* performed  with  a Length  multiple  of  the  block  size.  Also,  it  limits 

* the  window  size  to  64K,  which  is  quite  useful  on  HSDOS. 

* To  do:  Limit  the  window  size  to  WSIZE+BSZ  if  SHALL_HEH  (the  code  would 

* be  Less  efficient  since  the  data  would  have  to  be  copied  WSIZE/BSZ  times) 
*/ 

Pos  prevCWSIZE3; 

/*  Link  to  older  string  with  same  hash  index.  To  Limit  the  size  of  this 

* array  to  64K,  this  Link  is  maintained  only  for  the  Last  32K  strings. 

* An  index  in  this  array  is  thus  a window  index  modulo  32K. 

*/ 

Pos  headCHASH.SIZE:; 

/*  Heads  of  the  hash  chains  or  NIL.  If  your  compiler  thinks  that 

* HASH_SIZE  is  a dynamic  value,  recompile  with  -DDYN_ALLOC. 

*/ 

# e L s e 
/* 

* HS-DOS  adjusts  the  pointers  for  zero  offset,  so  we  store  the 


* 0 r i g i 

nal  pointers 

i 

n these 

variables  for  Later  free()ing 

*/ 

static 

byte 

* near 

o 

_w i ndow 

= NULL; 

static 

Pos 

* near 

o 

_p  rev  = 

NULL; 

s t a t i c 

Pos 

* near 

0 

_head; 

byte  * 

near 

window 

= 

NULL; 

Pos  * 

near 

p r e V 

= 

NULL; 

Pos  * 

near 

head; 
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#end i f 

word32  window_size; 

/*  window  size,  2*WSIZE  except  for  HMAP  or  BIG_MEM,  where  it  is  the 

* input  file  Length  plus  H I N_ LOO KAH E A D . 

*/ 

Long  bLock_start; 

/*  window  position  at  the  beginning  of  the  current  output  block.  Gets 

* negative  when  the  window  is  moved  backwards. 

*/ 

static  unsigned  ins_h;  /*  hash  index  of  string  to  be  inserted  */ 

^define  H_SHIFT  ( ( H A S H_B I T S+M I N_M AT C H-1 ) / M I N_M AT C H ) 

/*  Number  of  bits  by  which  ins_h  and  deL_h  must  be  shifted  at  each 

* input  step.  It  must  be  such  that  after  MIN_MATCH  steps,  the  oldest 

* byte  no  Longer  takes  part  in  the  hash  key,  that  is: 

* H_SHIFT  * MIN_MATCH  >=  HASH_BITS 
*/ 


unsigned  int  near  prev_Length; 

/*  Length  of  the  best  match  at  previous  step. 


Matches  not  greater  than  this 


* are 

*/ 

di sea  rded 

. This  is  used  in 

the 

Lazy  match 

evaluation. 

unsigned 

near  strstart; 

/* 

start  of 

string 

to  i nsert 

*/ 

unsigned 

near  match_start; 

/* 

start  of 

matching  string 

*/ 

s t a t i c 

int 

eof i 1 e; 

/* 

flag  set 

at  end 

of  input 

file 

*/ 

static 

unsigned 

Lookahead; 

/* 

numbe  r of 

valid 

bytes  ahead  in 

window 

/*  Saved  copies 

of  Lazy  match  vari 

a b L es  */ 

static  int  s_ma t c h_a va i I a b L e ; 
static  int  s _ma t c h_ L e ng t h ; 

unsigned  near  max_chain_length; 

/*  To  speed  up  deflation,  hash  chains  are  never  searched  beyond  this  Length. 

* A higher  limit  improves  compression  ratio  but  degrades  the  speed. 

*/ 

static  unsigned  int  ma x_ L a zy_ma t c h ; 

/*  Attempt  to  find  a better  match  only  when  the  current  match  is  strictly 

* smaller  than  this  value.  This  mechanism  is  used  only  for  compression 

* Levels  >=  4. 

*/ 

#define  ma x_ i n s e r t _ L eng t h ma x_ L a zy _ma t c h 

/*  Insert  new  strings  in  the  hash  table  only  if  the  match  Length 

* is  not  greater  than  this  Length.  This  saves  time  but  degrades  compression, 

* max_i nsert_Length  is  used  only  for  compression  Levels  <=  3. 

*/ 

unsigned  near  good_match; 

/*  Use  a faster  search  when  the  previous  match  is  longer  than  this  */ 

#ifdef  FULL_SEARCH 

# define  nice_match  HAX_MATCH 

# e I s e 

int  near  nice_match;  /*  Stop  searching  when  current  match  exceeds  this  */ 
#e nd i f 
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/*  Values  for  ma x_ L a zy _ma t c h , good_match  and  ma x_ c h a i n_ L e n g t h , depending  on 

* the  desired  pack  Level  (0..9).  The  values  given  below  have  been  tuned  to 

* exclude  worst  case  performance  for  pathological  files.  Better  values  may  be 

* found  for  specific  files. 

*/ 

static  const  struct  { 

word16  good_Length;  /*  reduce  Lazy  search  above  this  match  Length  */ 
word16  max_Lazy;  /*  do  not  perform  Lazy  search  above  this  match  Length  */ 
word16  nice_Length;  /*  quit  search  above  this  match  Length  */ 
word16  max_chain; 


} 

configurat 

ion_tabLe[I10Il  = { 

/* 

good 

Lazy 

nice 

chain  * / 

/* 

0 */ 

0, 

0, 

0>,n 

/* 

store  only  */ 

/* 

1 */ 

<4, 

4, 

8, 

4>,n 

/* 

maximum  speed,  no 

Lazy 

/* 

2 */ 

5, 

16, 

8}, 

/* 

3 */ 

<4, 

6, 

32, 

32>, 

/* 

4 */ 

{4, 

4, 

16, 

1 6},n 

/* 

Lazy  matches  */ 

#i  f 0 

/* 

5 */ 

<8, 

16, 

32, 

32>,h 

/* 

Change  to  new?  */ 

# e L s e 

□ 

{8, 

64, 

258, 

1 28>,n 

/* 

Hatch  old  PGP  params  */ 

#end  i f 

/* 

6 */ 

<8, 

16, 

128, 

128}, 

/* 

7 */ 

(8, 

32, 

128, 

256}, 

/* 

8 */ 

{32, 

128, 

258, 

1024}, 

/* 

9 */ 

{32, 

258, 

258, 

4096}};n 

/* 

maximum  compression  */ 

/* 

Note: 

the 

def  LateC ) 

code  requires  max_Lazy  >=  HIN_ 

HATCH 

* For  d e f L a t e_f a s t ( ) (levels  <=  3)  good  is  ignored  and  lazy  has  a different 

* meaning. 

*/ 


/* 


* Prototypes  for  Local  functions. 
*/ 


static  void  slide_window(void); 
static  int  defLate_sub(void); 

int  Longest_match(IPos  cur_match); 

#ifdef  ASMV 

void  ma t c h_ i n i t ( VO i d ) ; /*  asm  code  initialization  */ 

#en d i f 

#ifdef  ZIPDEBUG 

static  void  c h e c k_ma t c h ( I Po s start,  IPos  match,  int  Length); 

#end  i f 

/*  ======================================================================== 

* Update  a hash  value  with  the  given  input  byte 

* IN  assertion:  all  calls  to  to  UPDATE_HASH  are  made  with  consecutive 

* input  characters,  so  that  a running  hash  key  can  be  computed  from  the 

* previous  key  instead  of  complete  recalculation  each  time. 

*/ 
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#define  U PD AT E_H A S H ( h , c ) (h  = ( ( ( h ) << H _ S H I FT ) * (c))  S HASH_HASK) 


* Insert  string  s in  the  dictionary  and  set  match_head  to  the  previous  head 

* of  the  hash  chain  (the  most  recent  string  with  same  hash  key).  Return 

* the  previous  Length  of  the  hash  chain. 

* IN  assertion:  aLL  calls  to  to  I N S E RT_S T R I NG  are  made  with  consecutive 

* input  characters  and  the  first  HIN_MATCH  bytes  of  s are  valid 

* (except  for  the  Last  MIN_MATCH-1  bytes  of  the  input  file). 

*/ 

#define  I N S E RT_ST R I NG ( s , match_head)  \ 

(UPDATE_HASH(ins_h,  windowC(s)  + M I N_M AT C H-1 3 ) , \ 

prevC(s)  S WHASK]  = ( Po s ) ( ( ma t c h _h ea d ) = h e a d C i n s_h 3 ) , \ 
headCins_h3  = (Pos)(s)) 


* Initialize  the  "Longest  match"  routines  for  a new  file 

★ 

* IN  assertion:  window_size  is  > 0 if  the  input  file  is  already  read  or 

* mmap'ed  in  the  windowC3  array,  0 otherwise.  In  the  first  case, 

* window_size  is  sufficient  to  contain  the  whole  input  file  plus 

* MIN_LOOKAHEAD  bytes  (to  avoid  referencing  memory  beyond  the  end 

* of  window[3  when  Looking  for  matches  towards  the  end). 

*/ 

i n t 

Lm_init(int  pa c k_ L e ve L ) n / * 0:  store,  1:  best  speed,  9:  best  compression  */ 
{ 

if  (pack_LeveL  <1  ||  pack_LeveL  > 9) 

n return-1; 

n /*  error("bad  pack  Level");  */ 


/*  Do  not  slide  the  window  if  the  whole  input  is  already  in  memory 
* (window_size  > 0) 

*/ 

if  (window_size  ==  0) 
n window_size  = ( wo r d32 ) 2 * W S I Z E ; 

/*  Use  dynamic  allocation  if  compiler  does  not  Like  big  static  arrays:  */ 
/*  The  +8  is  for  MS-DOS,  so  the  pointers  can  be  s e gme n t -a L i g ned  */ 

#ifdef  DYN_ALL0C 

if  (o_window  ==  NULL)  { 

n window  = o_window  = (byte  * ) f c a L I o c ( W S I Z E + 8 , 2 * s i z eo f ( by t e ) ) ; 

n if  (o_window  ==  NULL) 

n return-1; 

n /*  err(ZE_HEH,  "window  allocation");  */ 


n 

if  (o_prev  ==  NULL)  { 

prev  = o_prev  = (Pos*)  f c a L L o c ( U S I Z E+8 , 

sizeof(Pos)); 

n 

head  = o_head  = (Pos*)  f c a L L o c ( H AS H _ S I Z E+8 , 

sizeof(Pos)); 

B 

if  (o_prev  ==  NULL  | | o_head  ==  NULL)  { 

B 

if  (o_prev) 

B 

n f c f r e e ( o_p r e V ) ; 

B 

fcfree(o_window); 

B 

o_wi ndow  = 0; 

B 

return  -1; 

B 

/*  err(ZE_MEH,  "hash  table  allocation") 

; */ 

B 

} 
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#endi-f  /*  DYN_ALLOC  */ 

/*  Initialize  the  hash  table  (avoiding  64K  overflow  for  16  bit  systems). 
* prevC]  will  be  initialized  on  the  fly. 

*/ 

headCHASH_SIZE-1 : = NIL; 

memset((char*)head,  NIL,  Cunsigned)(HASH_SIZE-1)*sizeof(*head)); 

/*  Set  the  default  configuration  parameters: 

*/ 

ma x_ I a zy_ma t c h = c on f i g u r a t i o n_ t a b I e [ pa c k_  I e v e I ] . ma x_ I a z y ; 
good_match  = c o n f i g u r a t i on_ t a b I e C pa c k_  I e v e I D . good_ I e ng t h ; 

#ifndef  FULL_SEARCH 

nice_match  = configuration_tableCpack_level!].nice_length; 

#end  i f 

max_chain_length  = configuration_tableCpack_levelIl.max_chain; 

/*  ???  reduce  ma x_ c h a i n_ I e ng t h for  binary  files  */ 

strstart  = 0; 
block_start  = 0L; 

#ifdef  ASMV 

match_init();  /*  initialize  the  asm  code  */ 

Send i f 

lookahead  = 0; 
e o f i I e = 0; 

s_ma t c h_a va i I a b I e = 0;  /*  set  if  previous  match  exists  */ 

s_ma t c h_ I e ng t h = HIN_MATCH-1;  /*  length  of  best  match  */ 

return  0; 

} 

/*  ========================================================================= 

* Free  the  window  and  hash  table 
*/ 

void 

lm_free(void) 

{ 

Si  f d e f 
□ 

□ 
n 

D 
□ 
n 

D 
□ 
n 

S e nd i f 

S i f d e f 
i f 

Si f d e f 
n 
D 

S e n d i f 
□ 

[[CHK: 


PGP 

/*  Security  wipe  of  static  variables  */ 

bloc k_ start  = 0; 

i n s_h  = 0; 

prev_length  = 0; 

strstart  = 0; 

match_start  = 0; 

s_ma t ch_a va i I a b I e = 0; 

s_ma t c h_ I e ng t h = 0; 

/*  eofile  is  1 and  lookahead  is  0 - no  need  to  wipe  */ 


DYN_ALL0C 

(o_window  !=  NULL)  { 

PGP 

memset(o_window,  0,  WSIZE); 
memset(o_window+WSIZE,  0,  WSIZE+16); 


fcfree(o_wi ndow)  ; 
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n o_window  = window  = NULL; 

> 

if  (o_prev  !=  NULL)  { 


#ifdef  PGP 


□ 


n 


n 


n 


memset(o_prev,  0,  WSIZE/2*sizeof(Pos)); 

mems e t ( o_p r e v+WS I Z E / 2 , 0,  W S I Z E / 2 *s i z eo f ( Pos ) +1 6 ) ; 

memset(o_head,  0,  HASH_SlZE/2*sizeof(Pos)); 

niemset(o_head+HASH_SIZE/2,  0,  HASH_SIZE/2*sizeof(Pos)+16); 


#e nd i f 


n 


Q 


□ 


fcfree(o_prev) ; 
fcfreeCo_head); 

o_prev  = prev  = o_head  = head  = NULL; 


> 

#endif  /*  DYN_ALLOC  */ 

} 

/*  ========================================================================== 

* Set  ma t c h_ s t a r t to  the  longest  match  starting  at  the  given  string  and 

* return  its  Length.  Matches  shorter  or  equal  to  prev_Length  are  discarded, 

* in  which  case  the  result  is  equal  to  prev_Length  and  match_start  is 

* garbage. 

* IN  assertions:  cur_match  is  the  head  of  the  hash  chain  for  the  current 

* string  (strstart)  and  its  distance  is  <=  MAX_DIST,  and  prev_Length  >=  1 
*/ 

#ifndef  ASHV 

/*  For  MSDOS,  OS/2  and  386  Unix,  an  optimized  version  is  in  match. asm  or 

* match. s.  The  code  is  functionally  equivalent,  so  you  can  use  the  C version 

* if  desired.  A 68000  version  is  in  ami ga /ma t ch_68 . a — this  could  be  used 

* with  other  68000  based  systems  such  as  Macintosh  with  a Little  effort. 


*/ 
i nt 

I ong e s t _ma t c h ( I Po s cur_match) 
{ 


/*  max  hash  chain  Length  */ 

/*  current  string  */ 

/*  matched  string  */ 

/*  length  of  current  match  */ 
/*  best  match  Length  so  far  */ 


unsigned  chain_Length  = max_chain_length; 

register  byte  *scan  = window  + strstart; 

register  byte  *match; 

register  int  Len; 

int  best_Len  = prev_Length; 


IPos  Limit  = strstart  > ( I Pos ) M AX_ D I ST  ? strstart  - ( I Po s ) M AX_ D I ST  : NIL; 
/*  Stop  when  cur_match  becomes  <=  limit.  To  simplify  the  code, 

* we  prevent  matches  with  the  string  of  window  index  0. 

*/ 

/*  The  code  is  optimized  for  HASH_BITS  >=  8 and  HAX_MATCH-2  multiple  of  16. 

* It  is  easy  to  get  rid  of  this  optimization  if  necessary. 

*/ 

#if  HASH_BITS  < 8 M MAX_MATCH  !=  258 
ft  error  Code  too  clever 
# e n d i f 

#if  UNALIGNED_OK 

/*  Compare  two  bytes  at  a time.  Note:  this  is  not  always  beneficial. 

* Try  with  and  without  - DUN A LI G N E D_OK  to  check. 

*/ 

register  byte  *strend  = window  + strstart  + MAX_MATCH  - 1; 

register  word16  scan_start  = *(word16  *)scan; 

register  word16  scan_end  = *(word16  * ) ( s c a n + be s t _ L e n-1  ) ; 


#e  L s e 


CCCHK: da93daf 5a479b3cc0252770bf 6d9b5267d43f 661 833d33da99e8c30c567329f 3d]: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1356 


pgpZDeflate.c 


register  byte  *strend  = window  + strstart  + HAX_HATCH; 
register  byte  scan_end1  = scan[!best_Len-1]; 
register  byte  scan_end  = s c a n C be s t _ L e n D ; 

# e n d i f 


/*  Do  not  waste  too  much  time  if  we  already  have  a good  match:  */ 
if  (prev_Length  >=  good_match) 
chain_Length  >>=  2; 

Z i p A s s e r t ( s t r s t a r t <=  w i ndo w_ s i z e-M I N_ LOOK AH E A D , "insufficient  Lookahead"); 


do  { 

n Z i p As se r t ( cu r_ma t c h < strstart,  "no  future"); 

n match  = window  + cur_match; 


/*  Skip  to  next  match  if  the  match  Length  cannot  increase 

* or  if  the  match  Length  is  Less  than  2: 

n * / 

#if  UNALIGNED_OK  S&  MAX_HATCH  ==  258 

n /*  This  code  assumes  s i z eo f ( u n s i g n ed  short)  ==  2.  Do  not  use 

* UNALIGNED_OK  if  your  compiler  uses  a different  size. 

*/ 

n if  (*(word16  * ) ( ma t c h + be s t _ L en- 1 ) !=  scan_end  || 

*(word16  *)match  !=  scan_start)  continue; 


n 


n 


/*  It  is  not  necessary  to  compare  scanC2D  and  matchC2D  since  they  are 

* always  equal  when  the  other  bytes  match,  given  that  the  hash  keys 

* are  equal  and  that  HASH_BITS  >=  8.  Compare  2 bytes  at  a time  at 

* strstart  + 3,  +5,  ...  up  to  s t r s t a r t + 2 5 7 . We  check  for  insufficient 

* lookahead  only  every  4th  comparison;  the  128th  check  will  be  made 

* at  strstart+257.  If  HAX_HATCH-2  is  not  a multiple  of  8,  it  is 

* necessary  to  put  more  guard  bytes  at  the  end  of  the  window,  or 

* to  check  more  often  for  insufficient  Lookahead. 

*/ 


scan++,  match++; 
do  { 


} while  (*(word16  *)(scan+=2)  ==  *(word16  *)(match+=2)  SS 
n *(word16  *)(scan+=2)  ==  *(word16  *)(match+=2)  S& 

*(word16  *)(scan+=2)  ==  *(word16  *)Cmatch+=2)  S& 
*(word16  *)(scan+=2)  ==  *(word16  *)(match+=2)  SS 
scan  < strend); 

/*  The  funny  "do  fl"  generates  better  code  on  most  compilers  */ 


/*  Here,  scan  <=  wi ndow+st rsta rt+257  */ 

Z i p Ass e r t C s ca n <=  w i ndo w+ ( u n s i g n ed ) ( w i nd o w_s i z e-1 ) , "wild  scan"); 
if  (*scan  ==  *match) 
n n scan++; 


n 

Len  = (MAX_MATCH  - 1) 

- 

(int)(strend-scan); 

n 

scan  = strend  - (MAX_ 

MATCH-1 ) ; 

#e  L se 

/*  UNALIGNED_0K  */ 

if  ( ma t c h C b e s t _ L e n ] 

! = 

scan_end 

1 1 

B 

matchCbest_Len-1 D 

! = 

scan_end1 

1 1 

*ma  t c h 

! = 

* s c a n 

1 1 

* + + ma  t c h 

! = 

scanCID) 

continue; 

/*  The  check  at  best_Len-1  can  be  removed  because  it  will  be  made 
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* again  Later.  (This  heuristic  is  not  always  a win.) 

* It  is  not  necessary  to  compare  scanCZU  and  matchC23  since  they 

n * are  always  equal  when  the  other  bytes  match,  given  that 

* the  hash  keys  are  equal  and  that  HASH_BITS  >=  8. 

*/ 

scan  +=  Z,  match++; 

/*  We  check  for  insufficient  Lookahead  only  every  8th  comparison; 

* the  256th  check  will  be  made  at  s t r s t a r t +2 5 8 . 

*/ 

do  { 


> w h i 

Le  (*++scan 

==  *++match 

&& 

*++scan 

==  *++match 

SS 

* + + s ca  n 

==  *++match 

&& 

* + + s c a n 

==  *++match 

&& 

n 

*++scan 

==  *++match 

&& 

*++scan 

==  *++match 

&S 

*++scan 

==  *++match 

&& 

* + + s c a n 

==  *++match 

&& 

scan  < 

strend); 

Len  = 

MAX_MATCH 

- (int)(strend  - 

■ scan); 

scan  = strend  - MAX_MATCH; 

#endif  /*  UNALIGNED_OK  */ 

n if  (Len  > best_Len)  { 

n match_start  = cur_match; 

best_len  = Len; 
if  (Len  >=  nice_match) 
n n break; 

//if  UNALIGNED_OK 

scan_end  = *(word16  * ) ( s c a n+be s t _ L e n- 1 ) ; 

//else 

n scan_end1  = scanCbest_Len-1]; 

scan_end  = s ca n C be s t _ L e n 3 ; 

//endi  f 
n } 

> while  ((cur_match  = p r e v C c u r _ma t c h & WHASK])  > Limit 

&&  — chain_Length  !=  0); 

return  best_Len; 

> 

//endif  /*  ASMV  */ 

//ifdef  ZIPDEBUG 

/*  ====================================================================== 

* Check  that  the  match  at  match_start  is  indeed  a match. 

*/ 

static  void 

check_match(IPos  start,  IPos  match,  int  Length) 

{ 

/*  check  that  the  match  is  indeed  a match  */ 

if  ( memcmp ( w i n do w + match,  window  + start.  Length)  !=  0)  ( 
f p r i n t f ( s t d e r r , " start  %d,  match  %d.  Length  %d\n", 
start,  match.  Length); 
e r r o r ( " i n va I i d match"); 

> 

if  (verbose  > 1)  ( 

n f p r i n t f ( s t d e r r , " \ \ C %d , Z d 3 " , start-match.  Length); 

n do  { pu t c ( w i ndo w C s t a r t + + 3 , stderr);  } while  ( — Length  !=  0); 

} 
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} 

#e  L s e 

# define  c h e c k_ma t c h ( s t a r t , match.  Length) 

# e nd i f 

static  void 
slide_window(void) 

register  unsigned  n,  m; 

memcpyCwindow,  window+WSIZE,  (size_t)WSIZE); 
match_start  -=  WSIZE; 

strstart  -=  WSIZE;  /*  we  now  have  strstart  >=  MAX_DIST:  */ 
bLock_start  -=  (Long)  WSIZE; 


for 

(n  = 0;  n < HASH_ 

SIZE;  n++) 

{ 

n 

m = headCnD; 

n 

"L 

headCn]  = (Pos)(m 

>=  WSIZE 

? m-WSIZE  ; 

; N I L ) ; 

J 

for 

(n  = 0;  n < WSIZE 

; n++ ) { 

□ 

m = prevCn]; 

n 

prevCnD  = (Pos)(m 

>=  WSIZE 

? m-WSIZE  : 

; NIL); 

n 

/*  If  n is  not  on 

any  hash 

chain,  prevCnD  is 

n 

* its  vaLue  wiLL 

never  be 

used. 

Q 

*/ 

} 

/*  ========================================================================== 

* FLush  the  current  bLock,  with  given  end-of-fiLe  fLag. 

* IN  assertion:  strstart  is  set  to  the  end  of  the  current  match. 

*/ 

#define  F LU S H_B LO C K ( e o f ) \ 

f L u s h_b L oc k ( b L oc k_s t a r t >=  0L  ? ( c ha r * ) & w i nd o w C ( u n s i g n e d ) b L o c k_ s t a r t D : \ 
n n ( c ha  r * ) NL)  L L,  ( wo  r d32  ) s t r s t a r t - bLock_start,  (eof)) 


/*  ========================================================================== 

* Same  as  above,  but  achieves  better  compression.  We  use  a Lazy 

* evaLuation  for  matches:  a match  is  finaLLy  adopted  onLy  if  there  is 

* no  better  match  at  the  next  window  position. 

*/ 

static  int 
defLate_sub(void) 

IPos  hash_head;  /*  head  of  hash  chain  */ 

IPos  prev_match;  /*  previous  match  */ 

int  fLush;  /*  set  if  current  bLock  must  be  fLushed  */ 

int  ma t c h_a va i L a b L e = 0;  /*  set  if  previous  match  exists  */ 

register  unsigned  match_Length  = HIN_MATCH-1;  /*  Length  of  best  match  */ 

#if  0 

if  CLeveL  <=  3)  return  de f L a t e_f a s t ( ) ; /*  optimized  for  speed  */ 

#endi  f 

match_avaiLabLe  = s_match_avaiLabLe; 
match_Length  = s _ma t c h_ L e ng t h ; 
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/*  Process  the  input  block.  */ 
while  (lookahead  !=  0)  ( 

/*  Insert  the  string  w i n do w C s t r s t a r t ..  strstart+2]  in  the 
* dictionary,  and  set  hash_head  to  the  head  of  the  hash  chain: 
*/ 

INSERT_STRING(strstart,  hash_head); 


□ 


D 


Q 


n 


□ 

n 


a 


D 


/*  Find  the  longest  match,  discarding  those  <=  prev_length. 

*/ 

prev_length  = ma t c h_  I e n g t h , prev_match  = match_start; 
match_length  = HIN_HATCH-1; 

if  (hash_head  !=  NIL  &&  prev_length  < ma x_ I a zy _ma t c h SS 
strstart  - hash_head  <=  HAX_DIST)  { 

/*  To  simplify  the  code,  we  prevent  matches  with  the  string 

* of  window  index  0 (in  particular  we  have  to  avoid  a match 

* of  the  string  with  itself  at  the  start  of  the  input  file). 

*/ 

match_length  = I o n g e s t _ma t c h (hash_head); 

/*  I on g e s t _ma t c h ( ) sets  match_start  */ 

if  (match_length  > lookahead)  match_length  = lookahead, - 

/*  Ignore  a length  3 match  if  it  is  too  distant:  */ 
if  ( ma t c h_  I eng t h ==  MIN_HATCH  SS  s t r s t a r t -ma t c h_ s t a r t > T00_FAR){ 
/*  If  prev_match  is  also  MIN_MATCH,  match_start  is  garbage 
* but  we  will  ignore  the  current  match  anyway, 
n * / 

n match_length — ; 

} 

> 

/*  If  there  was  a match  at  the  previous  step  and  the  current 
* match  is  not  better,  output  the  previous  match: 

*/ 

if  (prev_length  >=  MIN_HATCH  SS  match_length  <=  prev_length)  ( 


check_match(strstart-1,  prev_match,  prev_length); 


flush  = ct_tally(strstart-1-prev_match,  prev_length  - MIN_HATCH); 

/*  Insert  in  hash  table  all  strings  up  to  the  end  of  the  match. 

* strstart-1  and  strstart  are  already  inserted, 
n * / 

lookahead  -=  prev_length-1 ; 
n prev_length  -=  2; 

do  { 

strata  r t + + ; 

INS ERT_STRING( strstart,  hash_head); 

n n /*  strstart  never  exceeds  W S I Z E-H AX_M ATC H , so  there  are 

* always  HIN_HATCH  bytes  ahead.  If  lookahead  < MIN_f1ATCH 

* these  bytes  are  garbage,  but  it  does  not  matter  since  the 

n n * next  lookahead  bytes  will  always  be  emitted  as  literals. 

*/ 

> while  ( — prev_length  !=  0); 
match_available  = 0; 
match_length  = HIN_HATCH-1; 
s t r s t a r t ++ ; 

if  (flush)  FLUSH_BLOCK(0),  block_start  = strstart; 
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D 


Q 


> else  if  ( ma t c h_a va i L a b L e ) { 

/*  If  there  was  no  match  at  the  previous  position,  output  a 

* single  Literal.  If  there  was  a match  but  the  current  match 

* is  Longer,  truncate  the  previous  match  to  a single  Literal. 
*/ 

Tracevv((stderr,"%c",windowCstrstart-1!])); 
if  (ct_taLLy  (0,  w i n d o w C s t r s t a r t -1 D ) ) { 

FLLISH_BLOCK(0),  bLock_start  = strstart; 

> 

strstart++; 

Lookahead--; 

> else  { 

/*  There  is  no  previous  match  to  compare  with,  wait  for 

* the  next  step  to  decide. 

*/ 

ma t c h_a va i L a b L e = 1; 
strstart++; 

Lookahead--; 

> 


□ 

□ 

n 

□ 

Q 

n 

a 

□ 

n 

n 

a 


/*  Make  sure  that  we  always  have  enough  Lookahead,  except 

* at  the  end  of  the  input  file.  We  need  MAX_MATCH  bytes 

* for  the  next  match,  plus  MIN_MATCH  bytes  to  insert  the 

* string  following  the  next  match. 

*/ 

if  (Lookahead  < M I N_ LOOKAH E A D S&  !eofile)  { 
n s _ma t c h_a va i L a b L e = ma t c h _a va i L a b L e ; 

n s _ma t c h _ I e ng t h = ma t c h_ I e ng t h ; 

n return0; 

n /*  f i L L _ w i n do w ( ) ; * / 

> 

> 

if  (match_avaiLabLe)  ct_taLLy  (0,  windowCstrstart-ID); 


return  F LU S H_B LO C K ( 1 ) ; /*  eof  */ 

> 


/*  Zip  a buffer  of  input  */ 
void 

2 i p_ i n p u t ( c h a r const  *buf,  unsigned  Len) 
{ 

unsigned  more; 


while  (Len)  { 

n more  = ( un s i g n ed  ) ( ( wo r d32 ) 2 *W S I Z E - Lookahead  - strstart); 


n 

D 

□ 

a 

n 

Q 

n 

n 


if  (more  <=  1)  { 

s L i de_wi ndow ( ) ; 
more  +=  WSIZE; 

> 

if  (more  > Len) 
more  = Len; 

memc py ( w i nd o w+ s t r s t a r t + L oo ka h ea d , buf,  more); 
Lookahead  +=  more; 


n if  (Lookahead  >=  M I N_ LOO K AH E A D ) C 

n if  (Istrstart)  (n  /*  First  time  */ 


:CCHK:22fa6df48d6d04433099203ca2cdb27544a2223233aa811b4b89b4eefd5b74423:: 
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n register  int  j; 

n ins_h=0; 

n for  (j=0;  j <H I N_H AT C H-1 ; j++) 

U PD AT E_H A S H ( i n s_h , windowCjD); 

} 

defLate_sub(); 

> 

buf  +=  more; 

Len  -=  more; 

} 

return; 

/*  Zip  EOF  */ 
void 

zip_finish(void) 
eof i L e = 1 ; 

if  (!strstart)  fn  /*  First  time  */ 
register  int  j; 
i n s _ h = 0 ; 

for  (j=0;  j<MIN_HATCH-1 ; j++) 

U P D AT  E_  H A S H ( i n s_h  , windowCj!]); 

> 

defLate_sub(); 
return; 


c 
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; pgpZMatch.asm 


Copyright  (C)  1990-1992  Hark  Adler,  Richard  B.  Wales,  and 
Permission  is  granted  to  any  individual  or  institution  to 
redistribute  this  software  so  long  as  all  of  the  original 
unmodified,  that  it  is  not  sold  for  profit,  and  that  this 
is  retained. 


Jean-loup  Gailly. 
use,  copy,  or 
files  are  included 
copyright  notice 


; match. asm  by  Jean-loup  Gailly. 

/ 

; $Id:  pgpZMatch.asm,v  1.1. 2.1  1997/06/07  09:51:10  mhw  Exp  $ 


; match. asm,  optimized  version  of  longest_match()  in  deflate. c 
; Must  be  assembled  with  masm  -ml.  To  be  used  only  with  C large  model. 

; (For  compact  model,  follow  the  instructions  given  below.) 

; This  file  is  only  optional.  If  you  don't  have  masm  or  tasm,  use  the 
; C version  (add  -DNO_ASM  to  CFLAGS  in  makefile. msc  and  remove  match. obj 
; from  OBJI).  If  you  have  reduced  USIZE  in  pgpZip.h,  then  change  its  value 
; below. 


; Turbo  C 2.0  does  not  support  static  allocation  of  more  than  64K  bytes  per 
; file,  and  does  not  have  SS  ==  DS.  So  TC  and  BC++  users  must  use: 

; tasm  -ml  -DDYN_ALLOC  -DSS_NEQ_DS  match; 

/ 

; To  simplify  the  code,  the  option  -DDYN_ALLOC  is  supported  for  OS/2 
; only  if  the  arrays  are  guaranteed  to  have  zero  offset  (allocated  by 
; halloc).  We  also  require  SS==DS.  This  is  satisfied  for  MSC  but  not  Turbo  C. 


name  match 


; define  LCODE  as  follows: 

; model:  compact  large  (small  and  medium  not  supported  here) 

; LCODE  0 1 


LCODE  equ  1 

; Better  define  them  on  the  command  line 

DYN_ALL0C  equ  1 

;SS_NEQ_DS  equ  1 

; For  Turbo  C,  define  SS_NEa_DS  as  1,  but  for  MSC  you  can  leave  it  undefined. 

; The  code  is  a little  better  when  SS_NEQ_DS  is  not  defined. 

ifndef  DYN_ALLOC 

extrn  _prev 
extrn  _window 
prev  equ  _prev 
window  equ  _window 

end  i f 


_DATA  segment  word  public  'DATA' 
extrn  _match_start  : word 

extrn  _prev_length  : word 

extrn  _good_match  : word 

extrn  _strstart  : word 

extrn  _ma x_ c h a i n_ I eng t h : word 
ifdef  DYN_ALL0C 

extrn  _prev  : word 

extrn  _window  : word 


C[:CHK:b2d567a8fb333e2703ba9ea66f76bf4148fe68a21270ceff7202becf 51 144767433 
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: byte 
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prev 

equ  0 

; 0 f f s e 1 

window 

equ  0 

w i ndow_ 

seg  equ 

_windowC2] 

a 

w i ndow_ 

off  equ 

0 

else 

□ 

wseg 

dw  seg 

_w i ndow 

wi ndow_ 

seg  equ 

wseg 

a 

wi ndow_ 

off  equ 

offset  _window 

e nd i f 

_DATA 

ends 

DGROUP 

group  _ 

DATA 

if  LCODE 

a 

ext  rn 

_ex i t : 

far 

else 

n 

ext  rn 

exit 

near 

offset  forced  to  zero 


end  i f 


_TEXT  segment  word  public  'CODE' 

assume  cs:  _TEXT,  ds:  DGROUP 

a public  _match_init 

public  _ I o ng e s t _ma t c h 


a 


a 

a 

a 


a 


MIN_MATCH  equ 
MAX_MATCH  equ 
USIZE  equ 
WMASK  equ 
riIN_L00KAHEAD  equ 
MAX_DIST  equ 


3 

258 

8192an  ; keep  in 

(USIZE-1) 

(HAX_HATCH+HIN_MATCH+1) 

(WSIZE-niN_LOOKAHEAD) 


sync 


with  pgpZip.h 


I 


prev_ptr  du  seg  _preva  a ; pointer  to  the  prev  array 

ifdef  SS_NEQ_DS 

match_start  dw  0a  a n ; copy  of  _match_start  if  SS  !=  DS 

e nd i f 

; initialize  or  check  the  variables  used  in  match. asm. 
if  LCODE 

_match_init  proc  far 
else 

_match_init  proc  near 
end i f 

ifdef  SS  NES  DS 


ma_start 

equ  c s : ma t c h_s t a r t a 

; does  not  work  on  OS/2 

else 

n 

assume  ss:  DGROUP 

ma^sta  r t 

equ  s s : _ma t c h_ s t a r t 

mov 

ax,ds 

mov 

bx^ss 

cmp 

a X ^ bx 

; SS  ==  DS? 

j ne 

error 

endi  f 

ifdef 

DYN_ALL0C 

n 

movn 

a X , _ w i ndo w C 0 3 a n 

; force  zero  offset 

a 

add 

a X , 1 5 

a 

mov 

c X , 4 

CCCHK: 
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Q 

s h r 

a X , c L 

n 

add 

_wi ndowC23,ax 

n 

mov 

_wi ndowC0D,0 

a 

mo  vn 

ax,_prevC0Dn 

n 

; force  zero  offset 

u 

add 

a X , 1 5 

n 

mov 

cx,4 

n 

s h r 

a X , c L 

n 

add 

_prevC23,ax 

n 

mov 

_prevC03,0 

ifdef  SS,NEQ_ 

DS 

Q 

mo  vn 

ax,_prevC23n 

n 

; segment  va  L ue 

n 

mov 

cs  : prev_pt  r,axn 

□ 

; ugLy  write  to  code,  crash  on  OS/2 

prev_seg  equ  cs:prev_ptr 

else 

prev_seg  equ  ss:_prevC2Dn  ; works  on  OS/2  if  SS  ==  DS 

e n d i f 
else 

prev_seg  equ  cs:prev_ptr 

e nd i f 

n ret 

error:  call  _ex i t 

_match_init  endp 


; Set  match_start  to  the  Longest  match  starting  at  the  given  string  and 
; return  its  Length.  Matches  shorter  or  equaL  to  prev_Length  are  discarded, 
; in  which  case  the  resuLt  is  equaL  to  prev_Length  and  match_start  is 
; garbage. 

; IN  assertions:  cur_match  is  the  head  of  the  hash  chain  for  the  current 
; string  (strstart)  and  its  distance  is  <=  HAX_DIST,  and  prev_Length  >=  1 


; int  L on g e s t _ma t c h ( c u r _ma t c h ) 
if  LCODE 


_Longest 

e L se 

_ma  t c h 

proc  far 

_Longest 

_ma  t c h 

proc  nea 

end  i f 

push 

bp 

mov 

bp,  sp 

push 

d i 

n 

pushn 

S 1 

D 

pushn 

d s 

if  LCODE 

c u r_ma  t c h 

e L s e 


e n d i f 


cur  match 


equ  word  ptr  Cbp+6] 
equ  word  ptr  Cbp+43 


w i ndowa 

equ 

es:window  (es:0  for  DYN_ALLOC) 

p r e vn 

equ 

d s : p r e V 

match 

equ 

e s : s i 

scan 

equ 

e s : d i 

chain_Length 

equ 

bp 

bes  t _ L en 

equ 

bx 

Limit 

equ 

d X 

[:CHK:e6502e74fca1ef7cb70258bafd09894691af6e9b49d016a276186009a9bba6329:] 
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Q 

movn 

s i , c u r_ma  t c h 

r 

use  bp  before  it  is  destroyed 

mov 

bp,_max_chai n_Length 

/ 

chain_length  = ma x_ c h a i n_ L e ng t h 

n 

movn 

di,_strstart 

n 

movn 

dx,di 

n 

s ubn 

dx,HAX_DIST 

r 

Limit  = s t r s t a r t -M AX_ D I ST 

a 

j aen 

Limit_ok 

□ 

subn 

dx,dxn  n 

n 

r 

Limit  = NIL 

Limit 

_ok  : 

add 

di ,2+wi ndow_of f 

r 

di  = of f s e t ( w i ndou  + strstart  + 2) 

mov 

bx^_Pf'ev_length 

r 

best_Len  = prev_Length 

n 

mov 

es,wi ndoH_seg 

mov 

ax,es : Cbx+di-33 

r 

ax  = s ca n C bes t _ L en-1 . . be s t _ L en 3 

mov 

cx,es:Cdi-2D 

r 

cx  = scanC0..1] 

n 

c mpn 

bx,_good_matchn 

n 

/ 

do  we  have  a good  match  aLready? 

mov 

ds,prev_seg 

□ n 

/ 

(does  not  destroy  the  fLags) 

assume 

ds:  nothing 

jb 

do_s  ca  nnn 

n 

r 

good  match? 

□ 

s h rn 

bp, 1 B B 

n 

r 

chain_Length  >>=  2 

n 

s h rn 

bp,1 

jmp 

short  do_scan 

even 

r 

aLign  destination  of  branch 

L ong_ 

Loop: 

; at 

this  point. 

ds:di  ==  scan+2. 

d s : s i 

= 

= cur_match 

mov 

ax,[Ibx  + di-33 

e 

ax  = s c a n C be s t _ L e n-1 . . be s t _ L e n 3 

mov 

cx,Cdi-2Il 

r 

cx  = scanC0..13 

mov 

ds,prev_seg 

□ Q 

r 

reset  ds  to  address  the  prev  array 

short 

_ L oop : 

dec 

bp 

f 

--chain_Length 

j z 

t h e_e n d 

; at 

this  point. 

di  ==  scan+2. 

s i 

= cur_ 

ma  t c h , 

; ax 

= scanCbest 

_Len-1 . .best_LenD 

and  c X 

= scanC0..1D 

if  (WSIZE-32768) 

and 

si ,WHASK 

end i f 

sh  L 

s i , 1 

f 

cur_match  as  word  index 

mov 

si ,prevCsi D 

r 

cur_match  = p r e v C c u r_ma t c h 3 

cmp 

s i , dxB  B 

D 

r 

cur_match  <=  Limit  ? 

j be 

the_end 

do_scan : 

cmp 

ax, word  ptr  es: 

w i 

ndow Cbx+s i -1 D ; check  match  at  best_Len-1 

j ne 

short_Loop 

cmp 

cx,word  ptr  es: 

w i 

ndouCsi  3 

; check  min_match_Length  match 

j ne 

short_Loop 

Lea 

si ,wi ndowCsi+2D 

r 

si  = match 

mov 

a X , d i 

ax  = scan+2 

mov 

cx,es 

mov 

ds, CXB  B 

n 

r 

ds  = es  = wi ndow 

mov 

cx, CnAX_HATCH-2  ) /2 

r 

scan  for  at  most  MAX_HATCH  bytes 

repe 

cmpsw 

r 

Loop  untiL  mismatch 

je 

maxmatch 

match  of  Length  MAX_MATCH? 

mi  sma  t ch  : 

mov 

cL,Cdi-2D 

r 

mismatch  on  first  or  second  byte? 

sub 

cL,Csi-2D 

f 

cL  = 0 if  first  bytes  equaL 

X c hg 

a X , d i 

r 

di  = scan+2,  ax  = end  of  scan 

sub 

a X , d i 

f 

ax  = L e n 

n:CHK:a771439fefdedefc6e36dcfae1445e110e76674063b40f68ede275ad59b14a978:: 
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n 

s ubn 

si ,axH  n n 

/ 

si  = cur_match  + 2 + of f s e t ( w i ndo w ) 

n 

subn 

si  ,2  + window_off 

/ 

si  = cur_match 

sub 

cL,1 

/ 

set  carry  if  cL  ==  0 (can't  use  DEC) 

a d c 

ax,0 

r 

ax  = carry  ? Len+1  : Len 

cmp 

a X , b X 

/ 

Len  > best_Len  ? 

j Le 

Long_Loop 

mo  V 

ma_start,si 

/ 

match_start  = cur_match 

mo  V 

bx , a X 

/ 

bx  = best_Len  = Len 

cmp 

ax,MAX_MATCH 

r 

Len  >=  HAX_MATCH  ? 

jL 

Long_loop 

t he_end  : 

n 

popn 

d s 

assume 

ds:  DGROUP 

i f d e f S S 

_NEQ_DS 

n 

mo  vn 

ax,ma_startn  n 

/ 

garbage  if  no  match  found 

Q 

mo  vn 

ds:_match_start,ax 

endi  f 

pop 

s i 

pop 

d i 

pop 

bp 

mo  V 

a X , bx 

/ 

resuLt  = ax  = best_Len 

ret 

ma  xma  t c h 

: 

r 

come  here  if  maximum  match 

cmpsb 

r 

increment  si  and  di 

jmp 

mi smatch 

r 

force  match_Length  = MAX_LENGTH 

_ L o ng e s t _nia  t c h endp 

_TEXT  ends 
end 


C[CHK:09270b851a9de1e11961232f44556ec7f29a3:: 
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/*  pgpZTaiLor.h  --  Not  copyrighted  1991  Hark  AdLer  */ 

/* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpZTai lor . h,v  1.1. 2.1  1997/06/07  09:51:11  mhw  Exp  $ 

*/ 

#ifndef  MSDOS 

# ifdef  HSDOS 

# define  HSDOS  1 

# end i f 
#e nd i f 

/*  A couple  of  other 
#ifndef  TURBOC 

# ifdef  POUERC 

ff  define TURBOC 

ft  end  i f 

ft  ifdef BORLANDC_ 

ft  define TURBOC 

ft  e n d i f 

#e nd i f 

I* 

* We  use  HSDOS  to  signal  a need  for  16-bit  kludges  and  all  the  near/far  crap, 

* so  DJGPP  basically  isn't  HSDOS. 

*/ 

#ifdef  GNUC 

ft  undef  HSDOS 

#end i f 

/* 

* Allow  far  and  huge  allocation  for  small  model  (Hicrosoft  C or  Turbo  C) 

* unless  NOFAR  defined  (needed  for  ANSI  mode  compilations) 

* But  if  we're  using  DJGPP,  and  want  to  use  the  optimized  386  assembler 

* zmatch  routines,  we  can't  use  DYN_ALLOC.  But  gcc  has  virtual  memory... 

*/ 

#ifdef  HSDOS 

ft  ifndef  DYN_ALL0C 
ft  define  DYN_ALL0C  1 

ft  e n d i f 

ft  ifdef TURBOC 

ft  include  <alloc.h> 

ft  ifdef STDC 

/*  Damn  Borland  C won't  declare  these  ifdef  STDC . */ 

void  __far  * _Cdecl  f a r c a I I o c ( un s i g n e d long  __nunits,  unsigned  long unitsz); 

void  _Cdecl  farfreeCvoid  __far  * block); 

ft  e nd i f 

ft  define  fcalloc  farcalloc  /*  Assumes  that  all  arrays  are  < 64K  for  HSDOS*/ 
ft  define  fcfree  farfree 

# else  /*  ! TURBOC */ 

ft  include  <malloc.h> 

ft  define  f c a I I o c ( n i t ems  , i t ems  i z e ) ha  I I o c ( ( I o ng  ) ( n i t ems  ) , ( i t ems  i z e ) ) 
ft  define  fcfree  hfree 

ft  endif  /*  ? TURBOC */ 

ft  define  far  __far 

CCCHK:181c74ee843a5559b8f4ae88294aa2dd3a9bd744f49167bd30591f621591a75d3:: 
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# define  near nea  r 

#eLse  /*  IMSDOS  */ 

U ifndef  DYN_ALL0C 

# define  DYN_ALL0C  0 

# e n d i f 

ft  define  far 

# define  near 

# define  f c a L L o c ( n i t ems , i t ems i z e ) n pg pHen A L L o c ( ( L o ng ) C n i t ems ) * ( i t ems i z e ) ) 

# define  fcfree  n n n n pgpMetnFree 

#endif  /*  IMSDOS  */ 

#incLude  <stdLib.h> 

/*  Define  this  symbol  if  your  target  allows  access  to  unaligned  data. 

* This  is  not  mandatory,  just  a speed  optimization.  The  compressed 

* output  is  strictly  identical. 

*/ 

#ifndef  UNALIGNED_OK 

#if  def i ned ( H S DOS ) ||  d e f i ne d ( M_X E N I X ) ||  d e f i ne d ( i 386 ) ||  defined( i386 ) 

# define  UNALIGNED_OK  1 

#elif  def i ned ( mc68020 ) |{  de f i n e d ( __mc 6 802 0 ) 

# define  UNALIGNED_OK  1 

#elif  defined(vax)  | | definedC vax__) 

n define  UNALIGNED_OK  1 
Seise 

# define  UNALIGNED_OK  0 

# e n d i f 
Sendi  f 

/*  end  of  tailor. h */ 


[[;CHK:ddbba3808f33ee222378f815bfdeba1  1 29342072:: 
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/* 

* pgpZTrees.c 

* 

* Copyright  (C)  1990-1993  Mark  Adler,  Richard  B.  Wales,  Jean-loup  Gailly, 

* Kai  Uwe  Rommel  and  Igor  Ma nd r i c h en ko . 

* Permission  is  granted  to  any  individual  or  institution  to  use,  copy, 

* or  redistribute  this  software  so  long  as  all  of  the  original  files 

* are  included,  that  it  is  not  sold  for  profit,  and  that  this  copyright 

* notice  is  retained. 

* 

* $Id:  pgpZTrees . c,v  1.1. 2.1  1997/06/07  09:51:11  mhw  Exp  $ 

*/ 


/* 
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trees. c by  Jean-Loup  GaiLLy 

This  is  a new  version  of  im^ctree.c  originally  written  by  Richard  B.  Wales 
for  the  defunct  implosion  method. 

PURPOSE 

Encode  various  sets  of  source  values  using  va r i a b I e- I eng t h 
binary  code  trees. 

DISCUSSION 

The  PKZIP  "deflation"  process  uses  several  Huffman  trees.  The  more 
common  source  values  are  represented  by  shorter  bit  sequences. 

Each  code  tree  is  stored  in  the  ZIP  file  in  a compressed  form 

which  is  itself  a Huffman  encoding  of  the  lengths  of 

all  the  code  strings  (in  ascending  order  by  source  values). 

The  actual  code  strings  are  reconstructed  from  the  lengths  in 
the  UNZIP  process,  as  described  in  the  "application  note" 

(APPNOTE.TXT)  distributed  as  part  of  PKWARE's  PKZIP  program. 
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INTERFACE 

void  ct.init  (void)) 

Allocate  the  match  buffer  and  initialize  the  various  tables. 

void  ct_tally  (unsigned  dist,  unsigned  Ic); 

Save  the  match  info  and  tally  the  frequency  counts. 
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* Long  fLush_bLock  (char  const  *buf,  word32  stored_Len,  int  eof) 

* Determine  the  best  encoding  for  the  current  block:  dynamic  trees, 

* static  trees  or  store,  and  output  the  encoded  block  to  the  zip 

* file.  Returns  the  total  compressed  Length  for  the  file  so  far. 

* 

*/ 

#ifdef  HAVE_C0N FIG_H 
//include  "config.h" 

//end  i f 

^include  <ctype.h> 

SincLude  "pgpZip.h" 

/*  ========================================================================== 

* Constants 
*/ 

^define  MAX_BITS  15 

/*  ALL  codes  must  not  exceed  HAX_BITS  bits  */ 

#define  MAX_BL_BITS  7 

/*  Bit  Length  codes  must  not  exceed  HAX_BL_BITS  bits  */ 

#define  LENGTH_CODES  29 

/*  number  of  Length  codes,  not  counting  the  special  END_BL0CK  code  */ 

//define  LITERALS  256 

/*  number  of  literal  bytes  0..255  */ 

//define  END_BL0CK  256 

/*  end  of  block  Literal  code  */ 

//define  L_C0DES  ( LI  T E R A LS  + 1 + L E N GT  H_  C 0 D E S ) 

/*  number  of  Literal  or  Length  codes,  including  the  END_BLOCK  code  */ 

#define  D_C0DES  30 
/*  number  of  distance  codes  */ 

//define  BL_C0DES  19 

/*  number  of  codes  used  to  transfer  the  bit  Lengths  */ 


/*  extra  bits  for  each  Length  code  */ 

static  int  const  near  e x t r a_ L b i t s C LE NGT H_C 0 D E S 3 


= {0, 0,0, 0,0, 0,0, 0,1, 1,1, 1,2, 2, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 5, 5,5,5, 0>; 


/*  extra  bits  for  each  distance  code  */ 
static  int  const  near  e x t r a _d b i t s C D CODES] 


= {0, 0,0, 0,1, 1,2, 2, 3, 3, 4, 4, 5, 5, 6, 6, 7, 7, 8, 8, 9, 9, 10, 10, 1 1,1 1,1 2, 12,1 3, 13>; 


/*  extra  bits  for  each  bit  Length  code  */ 
static  int  const  near  ex t r a _b L b i t s C BL_ C 0 D E S 3 
= {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,73; 


//define  STORED_BLOCK  0 
#define  STATIC_TREES  1 
^define  DYN_TREES  2 
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/*  The  three  kinds  of  block  type  */ 


#ifndef  LIT_BUFSIZE 
# ifdef  SHALL_MEH 
It  define  LIT_BUFSIZE  0x2000 
else 

ifdef  «EDIUM_MEM 

define  LIT_BUFSIZE  0x4000 
else 

define  LIT_BUFSIZE  0x8000 
end  i f 
e n d i f 
#end i f 

#define  DIST_BUFSIZE  LIT_BUFSIZE 

/*  Sizes  of  match  buffers  for  I i t e r a I s / I e n g t h s and  distances.  There  are 
4 reasons  for  limiting  LIT_BUFSIZE  to  < 64K: 

- frequencies  can  be  kept  in  16  bit  counters 

- if  compression  is  not  successful  for  the  first  block,  all  input  data  is 
still  in  the  window  so  we  can  still  emit  a stored  block  even  when  input 
comes  from  standard  input.  (This  can  also  be  done  for  all  blocks  if 
LIT_BUFSIZE  is  not  greater  than  32K.) 

- if  compression  is  not  successful  for  a file  smaller  than  64K,  we  can 
even  emit  a stored  file  instead  of  a stored  block  (saving  5 bytes). 

- creating  new  Huffman  trees  less  frequently  may  not  provide  fast 
adaptation  to  changes  in  the  input  data  statistics.  (Take  for 
example  a binary  file  with  poorly  compressible  code  followed  by 
a highly  compressible  string  table.)  Smaller  buffer  sizes  give 
fast  adaptation  but  have  of  course  the  overhead  of  transmitting  trees 
more  frequently. 

- I can't  count  above  4 

The  current  code  is  general  and  allows  DIST_BUFSIZE  < LIT_BUFSIZE  (to  save 
memory  at  the  expense  of  compression).  Some  optimizations  would  be  possible 
* if  we  rely  on  DIST_BUFSIZE  ==  LIT_BUFSIZE. 

*/ 


^define  REP_3_6  16 

/*  repeat  previous  bit  length  3-6  times  (2  bits  of  repeat  count)  */ 
#define  REPZ_3_10  17 

/*  repeat  a zero  length  3-10  times  (3  bits  of  repeat  count)  */ 
^define  REPZ_11_138  18 

/*  repeat  a zero  length  11-138  times  (7  bits  of  repeat  count)  */ 

/*  ================================================================ 

* Local  data 
*/ 


/*  Data  structure  describi 
struct  ct_data  { 
union  { 

word16  freq; 
a word16  code; 

> f c ; 
union  { 

wordi 6 dad; 
wordi 6 I en; 


ng  a single  value  and  its  code  string. 

/*  frequency  count  */ 

/*  bit  string  */ 

/*  father  node  in  Huffman  tree  */ 

/*  length  of  bit  string  */ 


} dl; 


*/ 
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>; 

#define  Freq  fc.freq 
^define  Code  fc.code 
^define  Dad  dl.dad 
#define  Len  dl.Len 

//define  HEAP_SIZE  ( 2 * L_  C 0 D E S + 1 ) 

/*  maximum  heap  size  */ 

static  struct  ct_data  near  dy n_ L t ree C H E AP_S I Z E D ; /*  Literal  and  Length  tree*/ 

static  struct  ct_data  near  dy n_d t r e e C 2 * D_ C 0 D E S + 1 D ; /*  distance  tree  */ 

static  struct  ct_data  near  static_LtreeCL_C0DES+2D; 

/*  The  static  Literal  tree.  Since  the  bit  Lengths  are  imposed,  there  is  no 

* need  for  the  L_C0DES  extra  codes  used  during  heap  construction.  However 

* The  codes  286  and  287  are  needed  to  build  a canonical  tree  (see  ct_init 

* below). 

*/ 

static  struct  ct_data  near  s t a t i c _d t r e e C D_ C 0 D E S D ; 

/*  The  static  distance  tree.  (Actually  a trivial  tree  since  all  codes  use 

* 5 bits.) 

*/ 


static  struct  ct_data  near  b L _ t r e e C 2 *B L_ C 0 D E S+ 1 D ; 


/*  Huffman 

tree  for 

the 

bit  Lengths 

*/ 

struct  t ree 

_d  e s c { 

St  ruct 

c t _d  a t a 

near 

*dyn_tree; 

/* 

the  dynamic  tree  */ 

struct 

ct_data 

near 

*stati c_t  ree 

; /* 

corresponding  static  tree 

0 r 

NULL  */ 

i n t 

const 

near 

*extra_bi ts; 

/* 

extra  bits  for  each  code 

or  NULL  */ 

i nt 

extra_base; 

/* 

base  index  for  extra_bits 

*/ 

i n t 

e L ems ; 

/* 

max  number  of  elements  in 

the 

tree  */ 

int 

max_Length; 

/* 

max  bit  Length  for  the  codes 

*/ 

i nt 

max_code; 

/* 

Largest  code  with  non  zero  frequency*/ 

static  struct  tree_desc  near  L_desc  = 

{dyn_Ltree,  s t a t i c _ L t r e e , extra_Lbits,  LITERALS+1,  L_C0DES,  HAX_BITS,  0>; 


static  struct  tree_desc  near  d_desc  = 
{dyn_dtree,  s t a t i c_d t r e e , extra_dbits,  0, 


D_C0DES,  HAX_BITS,  0>; 


static  struct  tree_desc  near  bL_desc  = 
{bL_tree,  NULL,  e x t r a _b L b i t s , 0, 


BL_C0DES,  HAX_BL_BITS,  0>; 


static  word16  near  b L _ c ou n t C H AX_B I T S+1 D ; 

/*  number  of  codes  at  each  bit  Length  for  an  optimal  tree  */ 

static  byte  const  near  b I _o r d e r C B L_C 0 D E S 3 

= {16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15}; 

/*  The  Lengths  of  the  bit  Length  codes  are  sent  in  order  of  decreasing 
* probability,  to  avoid  transmitting  the  Lengths  for  unused  bit  Length  codes. 
*/ 

static  int  near  h e a p C 2 * L_ C 0 D E S + 1 H ; /*  heap  used  to  build  the  Huffman  trees  */ 
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static  int  heap_Len;  /*  number  of  elements  in  the  heap  */ 

static  int  heap_max;  /*  element  of  largest  frequency  */ 

/*  The  sons  of  heapCn]  are  heapC2*nI]  and  heapC2*n  + 1].  heapCOU  is  not  used. 

* The  same  heap  array  is  used  to  build  all  trees. 

*/ 

static  byte  near  d e p t h C 2 * L_C 0 D E S + 1 D ; 

/*  Depth  of  each  subtree  used  as  tie  breaker  for  trees  of  equal  frequency  */ 
static  byte  I e n g t h_ c od e C M AX_M AT C H -M I N_H AT C H + 1 3 ; 

/*  length  code  for  each  normalized  match  length  (0  ==  MIN_HATCH)  */ 
static  byte  dist_codeC512D; 

/*  distance  codes.  The  first  256  values  correspond  to  the  distances 

* 3 ..  258,  the  last  256  values  correspond  to  the  top  8 bits  of 

* the  15  bit  distances. 

*/ 

static  int  near  ba s e_ I e n g t h C LE N GT H_C 0 D E S 3 ; 

/*  First  normalized  length  for  each  code  (0  = HIN_HATCH)  */ 
static  int  near  ba s e_d i s t C D_ C 0 D E S 3 ; 

/*  First  normalized  distance  for  each  code  (0  = distance  of  1)  */ 


#ifndef  DYN_ALL0C 

static  byte  far  I _bu f C LI T_BU F S I Z E 3 ; /*  buffer  for  I i t e r a I s / I e ng t h s */ 

static  word16  far  d_bu f C D I ST_B U F S I Z E 3 ; /*  buffer  for  distances  */ 

# e I s e 

static  byte  far  *l_buf; 
static  word16  far  *d_buf; 

# e nd i f 

static  byte  near  f I ag_buf C ( LI T_BU F S I Z E/8  ) 3 ; 

/*  flag_buf  is  a bit  array  distinguishing  literals  from  lengths  in 
* l_buf,  and  thus  indicating  the  presence  or  absence  of  a distance. 

*/ 


static 

static 


/*  running  index  in  l_buf  */ 

/*  running  index  in  d_buf  */ 

/*  running  index  in  flag_buf  */ 

/*  current  flags  not  yet  saved  in  flag_buf  */ 
/*  current  bit  used  in  flags  */ 

/*  bits  are  filled  in  flags  starting  at  bit  0 (least  significant). 

* Note:  these  flags  are  overkill  in  the  current  code  since  we  don't 

* take  advantage  of  DIST_BUFSIZE  ==  LIT_BUFSIZE. 

*/ 


static  unsigned  last_lit; 
static  unsigned  last_dist; 

unsigned  last_flags; 
byte  flags; 
static  byte  flag_bit; 


static  word32  opt_len;  /*  bit  length  of  current  block  with  optimal  trees*/ 

static  word32  static_len;  /*  bit  length  of  current  block  with  static  trees  */ 

static  word32  compressed_len;  /*  total  bit  length  of  compressed  file  */ 

static  word32  input_len;  /*  total  byte  length  of  input  file  */ 

/*  input_len  is  for  debugging  only  since  we  can  get  it  by  other  means.  */ 

#ifdef  ZIPDEBUG 

extern  word32  bits_sent;  /*  bit  length  of  the  compressed  data  */ 
extern  word32  isize;  /*  byte  length  of  input  file  */ 

CCCHK: el e366ef f cbbal eb22a1 1 d7774d1 82007b455ee1 ea651 f f aeedd255d6261 f 74d433 


Pretty  Good  Privacy  5.0’^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1374 


pgpZTrees.c 


# e nd i f 

extern  Long  bLock_start;  /*  window  offset  of  current  block  */ 

extern  unsigned  near  strstart;  /*  window  offset  of  current  string  */ 

/*  ================================================================= 

* Local  (static)  routines  in  this  file. 

*/ 


s t a t i c 

void 

init_bLock(void); 

s t a t i c 

void 

pqd 0 wn h e a p ( s t r u c t ct_data  near 

*t  ree 

, int 

k); 

static 

VO  i d 

gen_bitLen(struct  tree_desc  near  *desc); 

static 

void 

g e n_ c od e s ( s t r u c t ct_data  near 

*t  ree. 

int 

max_ 

c 0 d e ) ; 

static 

void 

buiLd_tree(struct  tree_desc  near  *desc); 

s t a t i c 

void 

s c a n_ t r e e ( s t r u c t ct_data  near 

* t r e e , 

i nt 

ma  x_ 

code  ) ; 

s t a t i c 

void 

send_ t r ee ( s t r u c t ct_data  near 

* t r e e , 

int 

ma  x_ 

code ) ; 

stat  i c 

i n t 

bui Ld_bL_tree(void); 

static 

void 

s e n d_a L L _ t r e e s ( i n t Lcodes,  int 

dcodes,  int  blcodes); 

static 

void 

c omp r es s_b L 0 c k ( s t r u c t ct_data 

near  * 

L t ree 

r 

struct  ct_data  near  *dtree); 


Sifndef  ZIPDEBUG 

# define  send_code(c,  tree)  s e n d_b i t s ( t r e e C c ] . Cod e , treeCc^.Len) 

/*  Send  a code  of  the  given  tree,  c and  tree  must  not  have  side  effects  */ 

#eLse  /*  ZIPDEBUG  */ 

# define  send_code(c,  tree)  \ 

{ if  (verbose  > 1)  fprintf(stderr,"\ncd  %3d  ",(c));  \ 
send_bits(tree[cD.Code,  treeCcD.Len);  } 

# end i f 

#define  d_code(dist)  \ 

((dist)  < 256  ? d i s t _ c ode  C d i s t II  : d i s t _ c od  e C 2 56+ ( ( d i s t ) >>7  ) 3 ) 

/*  Mapping  from  a distance  to  a distance  code,  dist  is  the  distance  - 1 and 

* must  not  have  side  effects,  di st_code[256]  and  di st_codeC257D  are  never 

* used. 

*/ 

#define  HAX(a,b)  (a  >=  b ? a : b) 

/*  the  arguments  must  not  have  side  effects  */ 

/*  ========================================================================== 

* Reverse  k Low-order  bits  in  a word.  Not  s pe ed- c r i t i c a L . 

*/ 

static  unsigned 

b i t _ r e ve r s e ( u n s i g n e d value,  int  Len) 

{ 

n unsigned  result  = 0; 

n do  { 

n n resuLt<<=1; 

n n result  |=vaLue&1; 

n n vaLue>>=1; 

n > while  (--Len); 

n return  result; 

} 
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/*  ============================================================ 

* Allocate  the  match  buffer  and  initialize  the  various  tables. 
*/ 


i n t 

ct_init(void) 

C 


i n t 

n; 

/* 

i n t 

bits; 

/* 

i nt 

length; 

/* 

i n t 

code; 

/* 

i n t 

dist; 

/* 

compressed_ 

1 e n = 

iterates  over  tree  elements 
bit  counter  */ 
length  value  */ 
code  value  */ 
distance  index  */ 

input_len  = 0L; 


*/ 


#ifdef  DYN_ALL0C 

/*  Allocate  the  buffers  */ 

d_buf  = (word16  far  * ) f c a I I o c C D I ST_BU F S I Z E , s i z eof ( wo r d 1 6 ) ) ; 
if  (d_buf  ==  NULL) 
n return-1; 

l_buf  = (byte  far  * ) f c a I I o c ( LI T_BU F S I Z E / 2 , 2); 

/*  Avoid  using  the  value  64K  on  16  bit  machines  */ 
if  (l_buf  ==  NULL)  { 
n fcfree(d_buf); 

n return-1; 

> 

/*  if  (l_buf  ==  NULL  II  d_buf  ==  NULL)  e r r o r ( " c t _ i n i t : out  of  memory");  */ 
#end i f 

/*  Initialize  the  counts  for  the  first  block  */ 
init_block(); 


/*  The  following  initializes  constant  data  - it  may  be  skipped  */ 
if  ( s t a t i c _d t r e e C 0 D . Le n !=  0)  return  0;  /*  ct_init  already  called  */ 


/*  Initialize  the  mapping  length  (0..255)  ->  length  code  (0..28)  */ 
length  = 0; 

for  (code  = 0;  code  < LENGTH_C0DES-1 ; code++)  { 
n ba s e_  I eng t h C c od e D = length; 

n for  (n  = 0;  n < ( 1 <<ex t r a_ I b i t s C c od e 3 ) ; n++)  t 

n I eng t h _ c od e C I eng t h + + ] = (byte)code; 

n } 

} 

ZipAssert  (length  ==  256,  "ct_init:  length  !=  256"); 

/*  Note  that  the  length  255  (match  length  258)  can  be  represented 

* in  two  different  ways:  code  284  + 5 bits  or  code  285,  so  we 

* overwrite  I e ng t h_ code C 2 5 5 3 to  use  the  best  encoding: 

*/ 

length_codeClength-13  = (byte)code; 


/*  Initialize  the  mapping  dist  (0..32K)  ->  dist  code  (0..29)  */ 
d i s t = 0 ; 

for  (code  = 0 ; code  < 16;  code++)  { 
n ba s e_d i s t C c od e 3 = dist; 

n for  (n  = 0;  n < (1<<extra_dbitsCcode3);  n++)  { 

n d i s t _ c od e C d i s t ++ 3 = (byte)code; 

n } 

} 

ZipAssert  (dist  ==  256,  "ct_init:  dist  !=  256"); 

dist  >>=  7;  /*  from  now  on,  all  distances  are  divided  by  128  */ 
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for  ( ; code  < D_C0DES;  code++)  { 
n ba se_d i s t C code D = dist  <<  7; 

n for  (n  = 0;  n < (1<<(extra_dbitsCcode]-7));  n++)  { 

n di st_codeC256  + dist++D  = (byte)code; 

n > 

> 

ZipAssert  (dist  ==  256,  "ct_init:  256+dist  !=  512"); 

/*  Construct  the  codes  of  the  static  Literal  tree  */ 
for  (bits  = 0;  bits  <=  MAX_BITS;  bits++) 
n b L _ c o u n t C b i t s ] = 0; 

n = 0; 

while  (n  <=  143)  s t a t i c_ L t r e e C n++ ] . Le n = 8,  b L _ c o u n t C 8 D ++ ; 

while  (n  <=  255)  s t a t i c _ L t r e e C n++ D . Le n = 9,  b L _ c ou n t C 9 3 ++; 

while  (n  <=  279)  s t a t i c _ L t r e e C n++ 3 . Le n = 7,  b I _ c ou n t C 7 3 ++ ; 

while  (n  <=  287)  static_ltreeCn++3.Len  = 8,  bL_countC83++; 

/*  Codes  286  and  287  do  not  exist,  but  we  must  include  them  in  the 

* tree  construction  to  get  a canonical  Huffman  tree  (Longest  code 

* all  ones) 

*/ 

gen_codes ( ( St ruct  ct_data  near  * ) s t a t i c _ L t r e e , L_C0DES+1); 

/*  The  static  distance  tree  is  trivial:  */ 
for  (n  = 0;  n < D_C0DES;  n++)  { 
n s t a t i c_d t r e e C n 3 . Le n = 5; 

n s t a t i c_d t r e e C n 3 . C od e = b i t _ r e ve r s e ( n , 5); 

} 

return  0; 

} 

void  ct_free() 

{ 

#ifdef  PGP 

/*  Wipe  static  arrays  */ 

mems e t ( dy n_ L t r e e , 0,  s i z e o f ( dy n_  1 1 r ee  ) ) ; 
memset(dyn_dtree,  0,  sizeof(dyn_dtree)); 
mems e t ( b I _ t re e , 0,  s i z e o f C b L _ t r e e ) ) ; 
memset(bL_count,  0,  sizeof(bL_count)); 
memsetCheap,  0,  s i z eof ( h e a p ) ) ; 
memset (depth,  0,  s i z eo f ( d e p t h ) ) ; 
mems e t ( f I a g_bu f , 0,  s i zeof ( f I a g_buf  ) ) ; 

/*  Wipe  static  variables  */ 
heap_Len  = 0; 
heap_max  = 0; 

Last_Lit  = 0; 

Last_dist  = 0; 

Last_fLags  = 0; 
flags  = 0; 
fLag_bit  = 0; 
opt_Len  = 0; 
static_Len  = 0; 
c omp r e s s ed_ L e n = 0; 
input_Len  = 0; 

/*  Wipe  buffers  - d_buf  in  two  halves  to  avoid  64K  Limits  */ 
memset (d_buf,  0,  D I ST_BU F S I Z E / 2 * sizeof(word16)); 
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memset (d_buf + DIST_BUFSIZE/2,  0,  ( D I ST_BU F S I Z E + 1 ) / 2 * sizeofCwordId)); 
memset ( L_buf , 0,  LIT_BU F S I Z E ) ; 

#endi  f 

#ifdef  DYN_ALL0C 

f cf  ree ( d_buf  ) ; 
fcfreeC  L_buf)  ; 
d_buf  = NULL; 

L_buf  = NULL; 

#endi  f 

> 

/*  ========================================================================= 

* Initialize  a new  block. 

*/ 

static  void 
init_block(void) 

{ 

int  n;  /*  iterates  over  tree  elements  */ 

/*  Initialize  the  trees.  */ 

for  (n  = 0;  n < L_C0DES;  n++)  dy n_ I t r e e C n D . F r e q = 0; 

for  (n  = 0;  n < D_C0DES;  n + +)  dy  n_d  t r e e C n II  . F r eq  = 0; 

for  (n  = 0;  n < BL_CODES;  n++)  b I _ t r e e C n D . F r eq  = 0; 

dyn_ltreeCEND_BLOCK: . Freq  = 1; 
opt_len  = static_len  = 0L; 
last_lit  = last_dist  = last_flags  = 0; 
flags  = 0;  flag_bit  = 1; 

} 

#define  SMALLEST  1 

/*  Index  within  the  heap  array  of  least  frequent  node  in  the  Huffman  tree  */ 


* Remove  the  smallest  element  from  the  heap  and  recreate  the  heap  with 

* one  less  element.  Updates  heap  and  heap_len. 

*/ 

^define  pqremove ( t ree,  top)  \ 

{\ 

top  = heapCSHALLESTD;  \ 
heapCSHALLEST]  = heapCheap_len--3;  \ 
pqdownheapCtree,  SMALLEST);  \ 

> 

/*  ========================================================================== 

* Compares  to  subtrees,  using  the  tree  depth  as  tie  breaker  when 

* the  subtrees  have  equal  frequency.  This  minimizes  the  worst  case  length. 

*/ 

//define  sma  I I e r ( t r e e , n,  m)  \ 

( t r ee C n 3 . F r eq  < treeCmJ.Freq  ||  \ 

( t ree C n3 . F r eq  ==  treeCmJ.Freq  &&  depthCn]  <=  depthCm])) 

/*  ========================================================================== 

* Restore  the  heap  property  by  moving  down  the  tree  starting  at  node  k, 

* exchanging  a node  with  the  smallest  of  its  two  sons  if  necessary,  stopping 

* when  the  heap  property  is  re-established  (each  father  smaller  than  its 

* two  sons). 
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*/ 

static  void 

pqdown h ea p ( s t r u c t ct_data  near  *tree,  int  k) 
int  V = heapCkD; 

int  j = k <<  1 ; /*  Left  son  of  k */ 

int  htemp;  /*  required  because  of  bug  in  SASC  compiler  */ 

while  (j  <=  heap_Len)  { 

/*  Set  j to  the  smallest  of  the  two  sons:  */ 

if  (j  < heap_Len  SS  s ma L L e r C t r e e , heapCj+1],  heapCj]))  j++; 

/*  Exit  if  V is  smaller  than  both  sons  */ 
htemp  = heapCjD; 

if  (smallerCtree,  v,  htemp))  break; 

/*  Exchange  v with  the  smallest  son  */ 
n heapCkD  = htemp; 

k = j ; 

/*  And  continue  down  the  tree,  setting  j to  the  left  son  of  k */ 
j <<=  1 ; 

} 

heapCk]  = v; 

> 


/*  ========================================================================== 

* Compute  the  optimal  bit  Lengths  for  a tree  and  update  the  total  bit  Length 

* for  the  current  block. 

* IN  assertion:  the  fields  freq  and  dad  are  set,  h e a p C h ea p_ma x D and 

* above  are  the  tree  nodes  sorted  by  increasing  frequency. 

* OUT  assertions:  the  field  Len  is  set  to  the  optimal  bit  Length,  the 

* array  bL_count  contains  the  frequencies  for  each  bit  Length. 

* The  Length  opt_Len  is  updated;  static_Len  is  also  updated  if  stree  is 

* not  nu  L L . 

*/ 


static  void 
gen_ 

{ 


bitlenCstruct 

tree_desc 

near  *des  c ) 

struct  ct_data 

near  *tree  = desc->dyn_t ree; 

int 

const  near 

*ex  t r a 

= desc->ext ra_bi ts; 

int 

base 

= de s c->ex t ra_ba s e; 

int 

max_code 

= d e s c ->ma x_ c od e ; 

int 

max_length 

= d e s c ->ma x_ L eng t h ; 

struct  ct_data 

near  *stree  = d e s c -> s t a t i c_ t r ee ; 

int 

h; 

/* 

heap  index  */ 

int 

n , m ; 

/* 

iterate  over  the  tree  elements  */ 

int 

bits; 

/* 

bit  Length  */ 

int 

X b i t s ; 

/* 

extra  bits  */ 

word16  f; 

/* 

frequency  */ 

int 

overflow  = 

0;  /* 

number  of  elements  with  bit  Length 

for 

(bits  = 0; 

bits  <= 

HAX_BITS;  bits++) 

bL_countCb 

i t s 3 = 0 ; 

/*  In  a first  pass,  compute  the  optimal  bit  Lengths  (which  may 
* overflow  in  the  case  of  the  bit  Length  tree). 

*/ 
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t r e e C h ea p C h e a p_ma X ] 3 . Le n = 0;  /*  root  of  the  heap  */ 

for  (h  = heap_max+1;  h < HEAP_SIZE;  h++)  { 
n = heapCh]; 

bits  = t r e e C t r e e C n 3 . Da d 3 . Le n + 1; 
if  (bits  > max_Length)  { 
bits  = max_Length; 
ove  r f L ow  + + ; 

n > 

treeCn3.Len  = (word16)bits; 

/*  We  overwrite  treeCn3.Dad  which  is  no  Longer  needed  */ 

if  ( n > max_code ) 

continue;  /*  not  a Leaf  node  */ 

bL_countCbi ts3++; 
xbi t s = 0; 
if  (n  >=  base) 

xbits  = extraCn-base3; 
f = treeCn3.Freq; 

opt_Len  +=  (word32)f  * (bits  + xbits); 
if  (stree) 

static_Len  +=  (word32)f  * (streeCn3.Len  + xbits); 

} 

if  (overfLow  ==  0)  return; 

T r a c e ( ( s t d e r r , " \ nb i t Length  o ve r f L o w \ n " ) ) ; 

/*  This  happens  for  exampLe  on  obj2  and  pic  of  the  CaLgary  corpus  */ 

/*  Find  the  first  bit  Length  which  couLd  increase:  */ 
do  < 

bits  = max_Length-1 ; 
whiLe  ( b L _ c ou n t C b i t s 3 ==  0) 
b i t s — ; 

b L _ coun t C b i t s 3 ; /*  move  one  Leaf  down  the  tree  */ 

b L _coun t C b i t s+1 3 +=  2;  /*  move  one  overfLow  item  as  its  brother  */ 
bL_countCmax_Length3  — ; 

/*  The  brother  of  the  overfLow  item  aLso  moves  one  step  up, 

* but  this  does  not  affect  b L _coun t Cma x_ L eng t h 3 
*/ 

overfLow  -=  2; 

} whiLe  (overfLow  > 0); 

/*  Now  recompute  aLL  bit  Lengths,  scanning  in  increasing  frequency. 

* h is  stiLL  equaL  to  HEAP_SIZE.  (It  is  simpLer  to  reconstruct  aLL 

* Lengths  instead  of  fixing  onLy  the  wrong  ones.  This  idea  is  taken 

* from  'ar'  written  by  Haruhiko  Okumura.) 

*/ 

for  (bits  = max_Length;  bits  !=  0;  bits--)  { 
n = bL_countCbits3; 
whiLe  (n  !=  0)  < 

m = heapC--h3; 
if  ( m > max_code ) 
continue; 

if  (treeCm3.Len  !=  (unsigned)  bits)  { 

T r a c e ( ( s t de r r , " cod e %d  bits  %d->%d\n",  m,  treeCm3.Len,  bits)); 
opt_Len  +=  ((Long)bits  - treeCm3.Len)  * t r e e C m 3 . F r e q ; 
treeCm3.Len  = ( wo r d 1 6 ) b i t s ; 
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} 

n — ; 

> 

> 

} 

/*  ======================================================================= 

* Generate  the  codes  for  a given  tree  and  bit  counts  (which  need  not  be 

* optimal). 

* IN  assertion:  the  array  bL_count  contains  the  bit  Length  statistics  for 

* the  given  tree  and  the  field  Len  is  set  for  all  tree  elements. 

* OUT  assertion:  the  field  code  is  set  for  all  tree  elements  of  non 

* zero  code  Length. 

*/ 

static  void 

g e n_ c od e s ( s t r u c t ct_data  near  *tree,  int  max_code) 

{ 


wo  r d 1 6 

next_code[;MAX_BITS  + i:; 

/* 

next  code  value  for  each 

b 1 t 

Length 

wordi 6 

code  = 0; 

/* 

running  code  value  */ 

int  bits; 

/* 

bit  index  */ 

int  n ; 

/* 

code  index  */ 

/*  The 

distribution  counts  are 

f i 

rst  used  to  generate  the 

code 

values 

* without  bit  reversal. 

*/ 

for  (bits  = 1;  bits  <=  MAX_BITS;  bits++) 

next_codeCbitsD  = code  = (code  + bL_countCbits-1Il)  <<  1; 

/*  Check  that  the  bit  counts  in  bL_count  are  consistent.  The  Last  code 

* must  be  all  ones . 

*/ 

ZipAssert  (code  + b L_coun t CM AX_BITS 3 -1  ==  ( 1 <<M AX_B I T S ) - 1 , 

"inconsistent  bit  counts"); 

Tracev((stderr,"\ngen_codes:  max_code  %d  ",  max_code)); 

for  (n  = 0;  n <=  max_code;  n++)  { 
int  Len  = t r ee C n ] . Le n ; 
if  (len  ==  0) 
continue; 

/*  Now  reverse  the  bits  */ 

t r e e C n ] . C ode  = b i t _ r e ve  r s e ( ne  x t _ c od  e C L e n ] + + , Len); 

n Tracec(tree  !=  static_Ltree,  (stderr,"\nn  %3d  %c  I %2d  c %4x  (%x)  ", 

n,  (isgraph(n)  ? n : ' '),  Len,  treeCnU.Code,  next_codeCLenD-1)); 

> 

} 

/*  =========================================================================== 

* Construct  one  Huffman  tree  and  assigns  the  code  bit  strings  and  Lengths. 

* Update  the  total  bit  Length  for  the  current  block. 

* IN  assertion:  the  field  freq  is  set  for  all  tree  elements. 

* OUT  assertions:  the  fields  len  and  code  are  set  to  the  optimal  bit  Length 

* and  corresponding  code.  The  Length  opt_Len  is  updated;  static_Len  is 

* also  updated  if  stree  is  not  null.  The  field  max_code  is  set. 

*/ 

static  void 

bui Ld_t ree ( St ruct  tree_desc  near  *desc) 

{ 

struct  ct_data  near  *tree  = d e s c ->d y n_ t r e e ; 
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struct  ct_data  near  *stree  = de s c -> s t a t i c _ t r e e ; 
intelems  =desc->elems; 

int  n,  m;  /*  iterate  over  heap  elements  */ 

int  max_code  = -1;  /*  Largest  code  with  non  zero  frequency  */ 

int  node  = elems;  /*  next  internal  node  of  the  tree  */ 

/*  Construct  the  initial  heap,  with  least  frequent  element  in 

* h e a p C SH A LL E ST D . The  sons  of  heapCn]  are  heapC2*nT  and  heapC2*n+1]. 

* heapC03  is  not  used. 

*/ 

heap_Len  = 0,  heap_max  = HEAP_SIZE; 

for  (n  = 0;  n < elems;  n++)  { 
if  ( t r e e C n D . F r eq  !=  0)  f 

h ea p C++ h ea p_ L en D = max_code  = n; 
depthCnD  = 0; 
n } e L se  { 

treeCnD.Len  = 0; 

n > 

> 

/*  The  pkzip  format  requires  that  at  least  one  distance  code  exists, 

* and  that  at  Least  one  bit  should  be  sent  even  if  there  is  only  one 

* possible  code.  So  to  avoid  special  checks  Later  on  we  force  at  Least 

* two  codes  of  non  zero  frequency. 

*/ 

while  (heap_Len  < 2)  { 

n = h e a p C++h ea p_ L en ] = (max_code  < 2 ? ++max_code  : 0); 

treeCnD.Freq  = 1; 

depthCn]  = 0; 

opt_len  — ; 

if  ( St  ree  ) 

static_Len  -=  s t r e e C n ] . Le n ; 

/*  n is  0 or  1 so  it  does  not  have  extra  bits  */ 

} 

des c->max_code  = max_code; 

/*  The  elements  h ea p C h ea p_  I e n / 2 + 1 ..  heap_LenD  are  Leaves  of  the  tree, 

* establish  sub-heaps  of  increasing  Lengths: 

*/ 

for  (n  = heap_Len/2;  n >=  1;  n--) 
pqdown h e a p ( t r e e , n); 

/*  Construct  the  Huffman  tree  by  repeatedly  combining  the  Least  two 

* frequent  nodes . 

*/ 

do  { 

pq r emo ve C t r ee , n);  /*  n = node  of  Least  frequency  */ 

m = h ea p C SM A LLE ST 3 ; /*  m = node  of  next  Least  frequency  */ 

heapC--heap_max3  = n;  /*  keep  the  nodes  sorted  by  frequency  */ 
h ea p C --h ea p_ma X 3 = m; 

/*  Create  a new  node  father  of  n and  m */ 
n treeCnode3.Freq  = treeCn3.Freq  + treeCm3.Freq; 

depthCnode3  = ( by t e ) ( M AX ( d ep t h C n 3 , depthCm3)  + 1); 
treeCn3.Dad  = treeCm3.Dad  = ( wo r d 1 6 ) nod e ; 

#ifdef  DUMP_BL_TREE 
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# end i f 


if  (tree  ==  bL_tree) 

fprintf(stderr,"\nnode  %dC%d),  sons  %dC%d)  %d(%d)", 

node,  t r ee  Cnode  ] . F req  , n,  t r e e C n D . F r eq , m,  t ree  Cm!]  . F req  ) ; 

/*  and  insert  the  new  node  in  the  heap  */ 
h e a p C S H A LLE S T ] = node++; 
pqdownheapCtree,  SMALLEST); 


} while  (heap_Len  >=  2); 


h ea p C --h e a p_ma X ] = h e a p C S M A LLE S T ] ; 


/*  At  this  point,  the  fields  freq  and  dad  are  set.  We  can  now 
* generate  the  bit  lengths. 

*/ 

gen_bi t len(desc)  ; 


/*  The  field  len  is  now  set,  we  can  generate  the  bit  codes  */ 
gen_codes  (tree,  max_code); 


/*  ========================================================================= 

* Scan  a literal  or  distance  tree  to  determine  the  frequencies  of  the  codes 

* in  the  bit  length  tree.  Updates  opt_len  to  take  into  account  the  repeat 

* counts.  (The  contribution  of  the  bit  length  codes  will  be  added  later 

* during  the  construction  of  bl_tree.) 

*/ 

static  void 

s c a n_ t r ee ( s t r u c t ct_data  near  *tree,  int  max_code) 

{ 


i nt 

n; 

/* 

iterates  over  all  tree 

elements  */ 

int 

prevlen  = 

-1; 

/* 

last  emitted  length 

*/ 

int 

curlen; 

/* 

length  of  current  code 

*/ 

i nt 

nextlen  = 

treeC0!].Len; 

/* 

length  of  next  code 

*/ 

i nt 

count  = 0; 

/* 

repeat  count  of  the 

current  code  */ 

int 

max_count 

= 7; 

/* 

max  repeat  count  */ 

i n t 

mi n_count 

= 4; 

/* 

min  repeat  count  */ 

if  (nextlen  ==  0) 

max_count  = 138,  min_count  = 3; 
treeCmax_code+1].Len  = (word16)-1;  /*  guard  */ 

for  (n  = 0;  n <=  max_code;  n++)  { 

curlen  = nextlen;  nextlen  = t r e e C n+1 D . Len ; 
if  (++count  < max_count  &&  curlen  ==  nextlen)  { 
continue; 

> else  if  (count  < min_count)  f 

b I _ t r e e C c u r I en D . F r e q +=  count; 

> else  if  (curlen  !=  0)  { 

if  (curlen  !=  prevlen) 

bl_treeCcurlenD. Freq++; 
bl_treeCREP_3_6!].  Freq  + +; 

> else  if  (count  <=  10)  { 

bl_treeCREPZ_3_10]. Freq++; 

> else  { 

bl_treeCREPZ_11_138II.  Freq++; 

> 

count  = 0;  prevlen  = curlen; 
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if  ( next  I en  ==  0 ) { 

niax_count  = 138,  niin_count  = 3; 


n 

} 

else  if  (curlen 

==  nextlen) 

{ 

max_count 

= 6, 

mi n_count 

= 3; 

n 

> 

else  { 

max_count 

= 7, 

mi n_count 

= 4; 

> 

> 

} 


* Send  a literal  or  distance  tree  in  compressed  form,  using  the  codes  in 

* b l_t  ree . 

*/ 

static  void 

send_t r ee ( s t r uc t ct_data  near  *tree,  int  max_code) 


i nt 

n; 

/* 

iterates  over  all  tree 

e 1 ement  s */ 

int 

prevlen  = 

-1; 

/* 

last  emitted  length  */ 

i nt 

curlen; 

/* 

length  of  current  code 

*/ 

i nt 

nextlen  = 

treeC0D.Len; 

/* 

length  of  next  code  */ 

i n t 

count  = 0; 

/* 

repeat  count  of  the  current  code  */ 

int 

max_count 

= 7; 

/* 

max  repeat  count  */ 

i n t 

min_count 

= 4; 

/* 

min  repeat  count  */ 

/*  t reeCmax_code+1 ] . Len  = -1;  */  /*  guard  already  set  */ 

if  (nextlen  ==  0) 

max_count  = 138,  min_count  = 3; 


for  (n  = 0;  n <=  max_code;  n++)  { 
curlen  = nextlen; 
nextlen  = t r ee C n+1 3 . Le n ; 

if  (++count  < max_count  &&  curlen  ==  nextlen)  { 
cont i nue; 

} else  if  (count  < min_count)  f 
do  { 

s end_ c od e ( c u r I e n , bl_tree); 

> while  (--count  !=  0); 

> else  if  (curlen  !=  0)  { 

n if  (curlen  !=  prevlen)  { 

s e nd_ c od e ( c u r I en , bl_tree); 
count  — ; 

> 

ZipAssert(count  >=  3 &&  count  <=  6,  " 3_6?"); 
send_code ( REP_3_6,  bl_tree); 
send_bi t s ( count-3,  2); 

> else  if  (count  <=  10)  f 

send_code ( REPZ_3_1 0,  bl_tree); 
send_bits(count-3,  3); 

} else  { 

send_code ( REPZ_1 1 _1 38,  bl_tree); 
s end_b i t s ( c oun t -1 1 , 7); 

} 

count  = 0;  prevlen  = curlen; 
if  ( next  I en  ==  0 ) f 

max_count  = 138,  min_count  = 3; 

} else  if  (curlen  ==  nextlen)  { 

max_count  = 6,  min_count  = 3; 
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> else  { 

max_count  = 7,  niin_count  = 4; 

> 

> 

> 

/*  =========================================================================== 

* Construct  the  Huffman  tree  for  the  bit  Lengths  and  return  the  index  in 

* bl_order  of  the  Last  bit  Length  code  to  send. 

*/ 

static  i nt 

bui Ld_bL_tree(void) 

{ 

int  max_bLindex;  /*  index  of  Last  bit  Length  code  of  non  zero  freq  */ 

/*  Determine  the  bit  Length  frequencies  for  LiteraL  and  distance  trees  */ 
scan_tree(dyn_Ltree,  L_desc.max_code); 
scan_tree(dyn_dtree,  d_desc.max_code); 

/*  BuiLd  the  bit  Length  tree;  */ 
bui Ld_tree(&bL_desc); 

/*  opt_Len  now  incLudes  the  Length  of  the  tree  representations,  except 

* the  Lengths  of  the  bit  Lengths  codes  and  the  5+5+4  bits  for  the  counts. 
*/ 

/*  Determine  the  number  of  bit  Length  codes  to  send.  The  pkzip  format 

* requires  that  at  Least  4 bit  Length  codes  be  sent,  (appnote.txt  says 

* 3 but  the  actuaL  vaLue  used  is  4.) 

*/ 

for  (max_bLindex  = BL_C0DES-1;  max_bLindex  >=  3;  max_bLindex  — ) f 
if  ( b L _ t r e e C b L _o r d e r C ma x_b L i n d e X D D . Le n !=  0) 
break; 

> 

/*  Update  opt_Len  to  incLude  the  bit  Length  tree  and  counts  */ 
opt_Len  +=  3* ( max_b L i ndex+1 ) + 5+5+4; 

TracevCLstderr,  "\ndyn  trees:  dyn  %Ld,  stat  %Ld",  opt_Len,  static_Len)); 
return  max_bLindex; 

> 

/*  =========================================================================== 

* Send  the  header  for  a bLock  using  dynamic  Huffman  trees:  the  counts,  the 

* Lengths  of  the  bit  Length  codes,  the  LiteraL  tree  and  the  distance  tree. 

* IN  assertion:  Lcodes  >=  257,  dcodes  >=  1,  bLcodes  >=  4. 

*/ 

static  void 

send_a L L_t rees ( i nt  Lcodes,  int  dcodes,  int  bLcodes) 

int  rank;  /*  index  in  bL_order  */ 

ZipAssert  (Lcodes  >=  257  S&  dcodes  >=  1 88  bLcodes  >=  4, 

"not  enough  codes"); 

ZipAssert  (Lcodes  <=  L_CODES  88  dcodes  <=  D_C0DES  88  bLcodes  <=  BL_CODES, 
"too  many  codes"); 

Tracev((stderr,  "\nbL  counts:  ")); 
send_bits(Lcodes-257,  5); 

/*  not  +255  as  stated  in  appnote.txt  1.93a  or  -256  in  2.04c  */ 
send_bits(dcodes-1,  5); 
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send_bi t s ( b L codes-4 , 4);  /*  not  -3  as  stated  in  appnote.txt  */ 

for  (rank  = 0;  rank  < bLcodes;  rank++)  { 

TracevCCstderr,  "\nbL  code  %2d  " , bL_order[rank3)); 
send_bits(bL_tree[Ibl_orderCrank!]3.Len,  3); 

> 

Tracev((stderr,  "\nbL  tree:  sent  %Ld",  bits_sent)); 

/*  send  the  Literal  tree  */ 

s e nd_ t r e e ( ( s t r u c t ct_data  near  *)dyn_Ltree,  lcodes-1); 

Tracev((stderr,  "\nlit  tree:  sent  %Ld",  bits_sent)); 

/*  send  the  distance  tree  */ 

s e n d_ t r e e ( ( s t r u c t ct_data  near  *)dyn_dtree,  dcodes-1); 

TracevCCstderr,  "\ndist  tree:  sent  %ld",  bits_sent)); 

> 

/*  =========================================================================== 

* Determine  the  best  encoding  for  the  current  block:  dynamic  trees,  static 

* trees  or  store,  and  output  the  encoded  block  to  the  zip  file.  This  function 

* returns  the  total  compressed  Length  for  the  file  so  far. 

* 

* buf:  the  input  block,  or  NULL  if  too  old 

* stored_Len:  the  length  of  the  input  block 

* eof:  true  if  this  is  the  Last  block  for  the  file 
*/ 

wo  rd32 

f L us h_b L oc k ( c ha r const  *buf,  word32  stored_Len,  int  eof) 

word32  opt_Lenb,  static_Lenb;  /*  opt_len  and  static_Len  in  bytes  */ 
int  max_bLindex;  /*  index  of  Last  bit  Length  code  of  non  zero  freq  */ 

f Lag_buf C Last_f Lags]  = flags;  /*  Save  the  flags  for  the  Last  8 items  */ 

/*  Construct  the  Literal  and  distance  trees  */ 
buiLd_tree((struct  tree_desc  near  *)(&L_desc)); 

Tracev((stderr,  "\nLit  data:  dyn  %Ld,  stat  %Ld",  opt_Len,  static_Len)); 
bu i L d_ t r ee ( C s t r u c t tree_desc  near  * ) ( &d_de s c ) ) ; 

Tracev((stderr,  "\ndist  data:  dyn  ZLd,  stat  %ld",  opt_Len,  static_len)); 

/*  At  this  point,  opt_Len  and  static_Len  are  the  total  bit  Lengths  of 

* the  compressed  block  data,  excluding  the  tree  representations. 

*/ 

/*  Build  the  bit  Length  tree  for  the  above  two  trees,  and  get  the  index 

* in  bL_order  of  the  Last  bit  Length  code  to  send. 

*/ 

max_bLindex  = bu i L d_b L _t r e e ( ) ; 

/*  Determine  the  best  encoding.  Compute  first  the  block  Length  in  bytes  */ 
opt_Lenb  = ( opt_ L en+3+7)>>3; 
static_lenb  = (static_Len+3+7)>>3; 

input_Len  +=  stored_Len;  /*  for  debugging  only  */ 

Trace((stderr,  ''\nopt  ZLuCZLu)  stat  ZLuCZLu)  stored  ZLu  lit  %u  dist  %u  ", 
opt_Lenb,  opt_Len,  static_Lenb,  static_Len,  stored_Len, 

Last_lit,  last_dist)); 

if  (static_Lenb  <=  opt_Lenb)  opt_Lenb  = static_Lenb; 
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#ifndef  PGP  /*  PGP  can't  handle  stored  files  - disable  this  test  */ 

/* 

* If  compression  failed  and  this  is  the  first  and  last  block, 

* and  if  the  zip  file  can  be  seeked  (to  rewrite  the  local  header), 

* the  whole  file  is  transformed  into  a stored  file: 

*/ 

#ifdef  F0RCE_METH0D 


i f 

(level  ==  1 88  eof  88  c omp r e s s e d_  1 e n ==  0L)  ( /*  force  stored  file  */ 

#e  1 s e 

i f 

(stored_len  <=  opt_lenb  88  eof  88  c omp  r e s s e d_  1 e n ==  0L  88  seekable())  ■( 

#end  i f 

/*  Since  LIT_BUFSIZE  <=  2*WSIZE,  the  input  data  must  be  there:  */ 
if  (buf  ==  NULL)  error  ("block  vanished"); 

copy_block(buf,  (unsigned)stored_len,  0);  /*  without  header  */ 
compressed_len  = stored_len  <<  3; 

} else 

#endif  /*  PGP  */ 


# i f d e f 

F0RCE_HETH0D 

i f 

(level  ==  2 88  buf  !=  (char*)NULL)  { /*  force  stored  block  */ 

#e  1 se 

i f 

( s 1 0 r ed_ 1 e n + 4 <=  opt_lenb  88  buf  !=  (char*)NULL)  { 

/*  4:  two  words  for  the  lengths  */ 

#end  i f 

/*  The  test  buf  !=  NULL  is  only  necessary  if  LIT_BUFSIZE  > WSIZE. 

* Otherwise  we  can't  have  processed  more  than  WSIZE  input  bytes  since 

* the  last  block  flush,  because  compression  would  have  been 

* successful.  If  LIT_BUFSIZE  <=  WSIZE,  it  is  never  too  late  to 

* transform  a block  into  a stored  block. 

*/ 

n 

send_b i t s (( STORE D_BL0C K<<1 ) +eof , 3);  /*  send  block  type  */ 

compressed_len  = (compressed_len  + 3 + 7)  8 ■7L; 
c omp r e s s e d_ 1 en  +=  (stored_len  + 4)  <<  3; 

n 

copy _b 1 0 c k ( bu f , ( un s i g n e d ) s t o r ed_  1 e n , 1);  /*  with  header  */ 

#i  f def 

FORCE  METHOD 

} else  if  (level  ==  3)  { /*  force  static  trees  */ 
# e I s e 

} else  if  (static_lenb  ==  opt_lenb)  { 


#endi f 

Q 

send_bits((STATIC_TREES«1)  + eof,  3); 

c omp r e s s_b 1 0 c k ( ( s t r u c t ct_data  near  * ) s t a t i c_  1 1 r e e , 

(struct  ct_data  near  *)static_dtree); 

c omp r e s s e d_ I en  +=  3 + static_len; 
> else  { 

send_bits((DYN_TREES<<1)+eof,  3); 


n 

send_all_trees(l_desc.max_code+1,  d_desc.max_code+1,  max_blindex+1); 
c omp r e s s_b 1 0 c k ( ( s t r u c t ct_data  near  *)dyn_ltree, 

(struct  ct_data  near  * ) dyn_dt ree  ) ; 
c omp r e s s e d_ 1 en  +=  3 + opt_len; 

> 

ZipAssert  ( comp ressed_ I en  ==  bits_sent,  "bad  compressed  size"); 
init_block(); 

if  (eof)  { 
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#if  defined(PGP)  &&  ! d e f i n e d ( MM A P ) 

/*  Wipe  out  sensitive  data  for  pgp  */ 
ft  ifdef  DYN_ALL0C 

extern  byte  *windou; 

# else 

extern  byte  windowCD; 

# endi f 

memsetCuindow,  0,  (unsigned)(2*WSIZE-1));  /*  -1  needed  if  WSIZE=32K  */ 
#eLse  /*  !PGP  */ 

ZipAssert  (input_Len  ==  isize,  "bad  input  size"); 

#endi f 

n bi_windup(); 

c omp r e s s ed_ I e n +=  7;  /*  align  on  byte  boundary  */ 

} 

T r a c ev ( ( s t de r r , " \ n comp r I en  %Lu(%Lu)  ",  c omp r e s s e d_ L e n>>3 , 
compressed_Len-7*eof)); 

return  comp r e s s e d_ L e n >>  3; 

> 

/*  =========================================================================== 

* Save  the  match  info  and  tally  the  frequency  counts.  Return  true  if 

* the  current  block  must  be  flushed. 

* 

* dist  is  the  distance  to  the  matched  string,  or  0 if  none. 

* Ic  is  the  length  of  the  match,  or  the  character  if  dist  ==  0. 

*/ 

i n t 

c t _ t a I I y ( un s i gned  dist,  unsigned  Ic) 

{ 

I _bu f C I a s t _ I i t ++ 3 = (byte)lc; 
if  (dist  ==  0)  { 

/*  Ic  is  the  unmatched  char  */ 
dyn_ltree[lcD. Freq++; 

> else  { 

/*  Here,  Ic  is  the  match  length  - MIN_HATCH  */ 
dist--;  /*  dist  = match  distance  - 1 */ 

Z i p As s e r t ( ( wo r d 1 6 ) d i s t < ( wo r d 1 6 ) M AX_ D I ST  && 

(word16)Lc  <=  ( wo r d 1 6 ) ( M AX_M AT C H-M I N_M AT C H ) &S 

{word16)d_code(dist)  < (word16)D_C0DES,  "ct_tally:  bad  match"); 

dyn_ltreeClength_codeClcD+LITERALS+1D.Freq++; 
dyn_dtreeCd_code(dist)D. Freq++; 

d_buf C last_di st++3  = (wordi 6)di st; 
flags  1=  flag_bit; 

} 

flag_bit  <<=  1; 

/*  Output  the  flags  if  they  fill  a byte:  */ 
if  ((last_lit  S 7)  ==  0)  { 

f I a g_buf C I a s t _ f I a g S++ D = flags; 
flags  = 0,  flag_bit  = 1; 

} 

/*  Try  to  guess  if  it  is  profitable  to  stop  the  current  block  here  */ 
if  (/*  level  > 2 &&  */  (last_lit  & 0xfff)  ==  0)  { 

/*  Compute  an  upper  bound  for  the  compressed  length  */ 
word32  out_length  = (word32)last_lit*8L; 
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word32  in_Length  = (word32)strstart-bLock_start; 
int  dcode; 

for  (dcode  = 0;  dcode  < D_C0DES;  dcode++) 
out_Length  +=  (word32) 

dyn_dtreeCdcode].Freq*(5L+extra_dbitsCdcode]); 

out_Length  >>=  3; 

Trace((stderr,"\nLast_lit  %u,  Last_dist  %u,  in  %Ld,  out  ■%Ld(%ld%%)  ", 
Last_Lit,  Last_dist,  in_Length,  out_Length, 

100L  - o u t _ L e n g t h * 1 00 L / i n_ L e n g t h ) ) ; 
if  (Last_dist  < Last_Lit/2  &&  out_Length  < in_length/2)  return  1; 

> 

return  (Last_Lit  ==  L I T_BU F S I Z E- 1 ||  Last.dist  ==  D I ST_BU F S I Z E ) ; 

/*  We  avoid  equality  with  LIT_BUFSIZE  because  of  wraparound  at  64K 

* on  16  bit  machines  and  because  stored  blocks  are  restricted  to 

* 64K-1  bytes . 

*/ 

} 


/*  ============================================================ 

* Send  the  block  data  compressed  using  the  given  Huffman  trees 
*/ 


static  void 

comp r es s_b I oc k ( s t r u c t ct_data  near  *ltree,  struct  ct_data  near  *dtree) 
{ 


unsigned 

dist; 

/* 

distance  of  matched  string  */ 

int  1 c ; 

/* 

match  length  or  unmatched  char  (if 

unsigned 

Lx 

= 0; 

/* 

running  index  in  l_buf  */ 

unsigned 

d X 

= 0; 

/* 

running  index  in  d_buf  */ 

unsigned 

f X 

= 0; 

/* 

running  index  in  flag_buf  */ 

byte  flag 

= 

0; 

/* 

current  flags  */ 

unsigned 

code; 

/* 

the  code  to  send  */ 

int  extra 

r 

/* 

number  of  extra  bits  to  send  */ 

if  (last_lit  !=  0)  do  { 
if  ((lx  & 7)  ==  0) 
n flag  = f I a g_ bu f C f x + + D ; 

Ic  = l_bufClx++D; 
if  ((flag  & 1)  ==  0)  { 

s en d_ c od e ( I c , Itree);  /*  send  a literal  byte  */ 
Tracecv(isgraph(lc),  (stderr,"  '%c'  ",  Ic)); 

> else  { 

/*  Here,  Ic  is  the  match  length  - MIN_MATCH  */ 
code  = I e n g t h _ c od e C I c 3 ; 

s e nd_ c od e ( c od e+ LI T E R A LS+ 1 , Itree);  /*  send  the  length  code  */ 
extra  = e x t r a _ I b i t s C c od e 3 ; 
if  (extra  !=  0)  ( 

Ic  -=  base_lengthCcode3; 

s e n d_b i t s ( I c , extra);  /*  send  the  extra  length  bits  */ 

> 

dist  = d_bufCdx++3; 

/*  Here,  dist  is  the  match  distance  - 1 */ 

code  = d_code ( di St ) ; 

ZipAssert  (code  < D_C0DES,  "bad  d_code"); 


send_code ( code,  dtree);  /*  send  the  distance  code  */ 

extra  = e x t r a _d b i t s C c od e 3 ; 
if  (extra  !=  0)  ( 
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n n dist  -=  ba s e_d i s t C c od e D ; 

n n s e n d_ b i t s ( d 1 s t , extra);  /*  send  the  extra  distance  bits  */ 

n > 

n > /*  Literal  or  match  pair  ? */ 

n fLag>>=1; 

> while  (Lx  < Last_lit); 


s e nd_ c ode ( E N D_B LO C K,  Ltree); 

} 
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/* 

* pgpZip.h 

★ 

* Copyright  (C)  1990,1991  Mark  Adler,  Richard  B.  Wales,  and  Jean-loup 

* Gailly.  Permission  is  granted  to  any  individual  or  institution  to  use, 

* copy,  or  redistribute  this  software  so  long  as  all  of  the  original  files 

* are  included  unmodified,  that  it  is  not  sold  for  profit,  and  that  this 

* copyright  notice  is  retained. 

* 

* $Id:  pgpZip.h, V 1 . 2. 2 . 1 1 997/06/07  09:  51:1  2 mhw  Exp  $ 

*/ 

/* 

* pgpZip.h  by  Hark  Adler. 

*/ 


/* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

*/ 


/*  Set  up 
^include 
#i nc  lude 
#include 


portability  */ 
pgpUsuals.h" 
pgpHem.  h" 
pgpZTai  lor.h" 


/*  PGP  defines  */ 

#def i ne  PGPn  1 

#ifdef  MSDOS 
//define  SMALL_MEM  1 
//e nd i f 

/*  DYN_ALL0C  is  defined  in  pgpZTailor.h  */ 


//define  MIN_MATCH  3 
//define  HAX_MATCH  258 

/*  The  minimum  and  maximum  match  lengths  */ 


//define  WSIZEn  8192 

/*  The  Window  size  must  be  8k  to  be  compatible  with  PGP  2.6.2  */ 

^define  H I N_ LOOK AH E A D C M AX_M ATC H+M I N_H ATC H+1 ) 

/*  Minimum  amount  of  lookahead,  except  at  the  end  of  the  input  file. 

* See  deflate. c for  comments  about  the  HIN_HATCH+1. 

*/ 

//define  MAX_D1ST  ( W S I Z E-M I N_  LOOKA  H E A D ) 

/*  In  order  to  simplify  the  code,  particularly  on  16  bit  machines,  match 

* distances  are  limited  to  MAX_DIST  instead  of  WSIZE. 

*/ 


//include  <string.h> 

//ifdef  __cplusplus 
extern  "C"  { 

//endi  f 

/*  Diagnostic  functions  */ 
#if  ZIPDEBUG 
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extern 

int  verbose;n  /*  Verbose  reporting 

f L 

a g * / 

# 

i f def 

MSDOS 

n 

u nd  e f 

stderr 

n 

define  stderr  stdout 

u 

endi  f 

u 

define 

Z i pAs s e r t ( cond,msg  ) fifCllcond))  error 

( msg ) ; > 

n 

define 

Trace(x)  fprintf  x 

n 

define 

Tracev(x)  tif  (verbose)  fprintf  x ;> 

# 

define 

Tracevv(x)  {if  (verbose>1)  fprintf  x 

f 

> 

# 

define 

Tracec(c,x)  {if  (verbose  &&  (c))  fpr 

i n 

t f X ; > 

n 

define 

Tracecv(c,x)  {if  (verbose>1  SS  (c)) 

■f  p 

r i n t f X 

#e  l s e 

# 

define 

ZipAssert(cond,msg) 

n 

define 

Tra  ce ( X ) 

n 

define 

Tracev(x) 

tt 

define 

Tracevv(x) 

ft 

define 

Tracec(c,x) 

ft 

define 

Tracecv(c,x) 

#endi f 

/* 

Publi 

c function  prototypes  */ 

/*  in  pg p Z De f L a t e . c */ 
int  L iii_  i n i t ( i n t pack_LeveL); 
void  L ni_f  re  e ( VO  i d ) ; 

n /*  in  pgpZTrees.c  */ 

int  ct_init(void); 

int  c t _ t a L I y ( u n s i g ned  dist,  unsigned  Ic); 
void  c t _f re e ( VO i d ) ; 

word32  fLush_bLock(char  const  *buf,  word32  stored_Len,  int  eof); 

n /*  in  pgpZBits.c  */ 

struct  Pgp Fi f oCont ext ; 

void  b i _ i n i t ( s t r u c t Pg p F i f oC on t e x t *zipfifo); 
void  s e nd_b i t s ( i n t value,  int  Length); 
void  bi_fLush(void); 
void  b i _u i ndup ( VO i d ) ; 

void  copy_b L o c k ( c ha r const  far  *buf,  unsigned  Len,  int  header); 
n /*  in  pg p Z De f L a t e . c */ 

void  zip_input(char  const  *buf,  unsigned  Len); 
void  zip_finish(void); 

#ifdef  __cpLuspLus 
} 

# e nd i f 

/*  end  of  pgpZip.h  */ 
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M L i b / pg p /p i pe /u t i L s / Ma kef i L e . i n 

n 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

U 

U $Id:  Makef i le. in,v  1.12.2.4  1997/06/07  09:51:13  mhw  Exp  $ 
tt 

LOCALINCLUDES=  - 1 . . / . . / i n c I ude 

0BJS=n  pgpAddHdr.o  pgpBufMod.o  pgpCopyHod.o  pgpDevNull.o  pgpMemHod.o  \ 
a pgpJoin.o  pgpSplit.o 

SHAREDHDRS=  pgpBufHod.h  pgpDevNull.h  pgpJoin.h  pgpMetnMod.h  pgpPi pe I i ne . h \ 
a pgpSplit.h 

PRI\/HDRS=  pgpAddHdr.h  pgpCopyMod.h 
all::  DONE 
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n 

# Lib/pgp/pipe/uti Ls/makefi Le.msc 

n 

M Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

U 

U $Id:  ma ke f i L e . ms c , V 1.4. 2. 2 1 997/06/07  09:51:1  3 mhw  Exp  $ 
ft 

CFLAGS=  -I . . \ \ \ . \i nc Lude  - 1 . . \ \ \ i n c L ud e \ 
a -I . . \ \ \ . -DHAVE_CONFIG_H  $(DEBUG) 

PGPLIB=.  .\.  .\.  .\pgpLib.  Lib 

a L L : : n Lib 

headers:n  incL 

lincLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

n n for  %f  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ \ i n c L u d e 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( $(PRIVH0RS)  ) do  copy  %f  . . \ \ \ i n c L ude 

D0S0BJS=  $(0BJ S : . 0= . ob j ) 

Lib:n  $(DOSOBJS) 

. c . ob  j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 

c L ea  n : 

n de  L * . ob j 

DONE  : 

n if  exist  $(PGPLIB)  L i b / ou t : $ ( PG P L I B ) $(PGPLIB)  SCDOSOBJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P LI B ) SCDOSOBJS) 
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/* 

* pgpAddHdr.c  --  Add  a PGP  Packet  Header  to  a data  stream. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa  r L o r dSM  I T . E D Ll> 

* 

* $Id:  pgpAddHdr. c,v  1.5. 2.1  1997/06/07  09:51:13  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end i f 


#incLude  <stdio.h> 


#incLude 
i n c L ude 
#incLude 
#incLude 
#incLude 
#incLude 
#incLude 
#incLude 


pgpDebug.h" 
pgpAddHdr. h" 
pgpPktByte.h" 
pgpAnnotate  . h 
pgpFIFO.h" 
pgpHem . h " 
pgpPi pe  L i ne  . h 
pgpErr.h" 


//define  A D DH  E A D E RM  AG  I C Q 0xadd0b11e 
//define  BLOCK_SIZE  12 

//define  BUFFER_SIZE  (1  « BLOCK_SIZE)n  /*  2*10  ==  4k  */ 


struct 
n 
n 
□ 
n 
n 
n 
□ 
n 

D 

n 
n 
n 
n 
n 
n 
□ 

>; 

/* 

* Return  the  Largest  x such  that  2*x  <=  n,  n>0 

* Return  -1  if  n==0 
*/ 

static  i nt 

N umToB i t s ( un s i g ned  int  n) 

{ 

n i n t i ; 

a i f ( ! n ) 

n n return-1; 

CCCHK: 6d88317df 8daa22d5ab430f f 79ee8c0c0d255098138f caa3972a621  1 41  9b9c4f  3:: 


Context  { 

struct  PgpFifoDesc  const  *fifod; 
struct  Pg p F i f oC on t ex t *fifo; 
struct  PgpPipeLine  *taiL; 

byte  headerC5D;nn  n 

byte  *ptr; 

inthdrLen;n  a n 

int  dowrite; 

int  sizeknown;n  n n 

unsigned  Long  bytes;n  n 

PgpVersion  version; 
byte  *buffer; 
byte  *bufwrite; 
byte  *bufptr; 
int  bufLen; 
int  midfLush; 
int  scope_depth; 


/*  pktbyte  + 4byte  Length  */ 

/*  actual  header  Length  */ 

/*  bytes  is  va  L i d */ 

/*  sizeAdviseC)  promise  */ 
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n 

for  ( i 

=0;  n > 1;  i++) 

n 

B 

n >>=  1; 

n 

return 

i ; 

> 

static 

i n t 

F L u s h H eade r ( s t ru c t Context  *context) 

n 

int  error; 

n 

s i z e_  t 

ret  ten; 

n 

while 

( c 0 n t e X t -> h d r L e n ) { 

□ 

B 

retlen  = con t e x t -> t a i L -> w r i t e ( c on t e x t -> t a i L , 

tt 

B 

a n n 

context ->ptr. 

□ 

B 

□ n n 

context->hdrlen. 

n 

B 

D n a 

Serror); 

□ 

B 

context->ptr  +=  retlen; 

□ 

B 

cont ext->hd r 1 en  -=  retlen; 

n 

B 

if  (error) 

o 

B 

n return  error; 

n 

> 

n 

return 

0; 

> 

static 

i nt 

F L u s hBuf f e r ( s t r u c t Context  *context) 

H 

int  error; 

a 

s i z e_t 

retlen; 

n 

while 

( con t ex t ->buf 1 en ) { 

□ 

B 

retlen  = context->tai l->wri te( context->tai  1, 

u 

fl 

ana 

context->bufptr. 

n 

B 

n n n 

context->buf len. 

n 

B 

n n n 

Serror); 

n 

B 

c on t ex t ->bu f p t r +=  retlen; 

n 

B 

context->buf len  -=  retlen; 

Q 

B 

if  (error) 

n 

B 

n return  error; 

n 

> 

□ 

return 

0; 

> 

static 

int 

F 0 r c e F L u s h ( s t r u c t Context  *context) 

Q 

int  error; 

a 

int  bufL,  flushed; 

n 

while 

( cont ext->buf  l en  ) { 

B 

B 

/*  First,  flush  out  any  mid- 

flush  we  might  have 

B 

B 

bufl  = c 0 n t ex t ->b u f 1 e n ; 

B 

B 

flushed  = con t ex t ->mi df 1 u s h ; 

B 

B 

c 0 n t e X t -> bu f 1 e n = c on  t e x t ->ni i d f 1 u s h ; 
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n 

n error  = F L u s h Bu f f e r ( c on t e x t ) ; 

Q 

n flushed  -=  co n t e x t ->bu f L e n ; 

n 

n context->mi df Lush  = c on t ex t ->bu f L e n ; 

n 

n c on t e X t ->bu f L e n = bufl  - flushed; 

n 

n if  (error) 

n 

n n returnerror; 

n 

n / * 

n 

n * Now,  figure  out  how  much  should  be  sent  in  the 

n 

n * next  sub-packet 

u 

n * / 

□ 

a bufl  = N umToB i t s C c 0 n t ex t ->bu f L e n ) ; 

n 

B i f (bufl  < 0) 

n 

B n break; 

n 

B context ->bufpti ; 

n 

B c on t e X t ->bu f L e n++ ; 

n 

B * ( c on t e X t ->bu f p t r ) = 0xE0  + bufl; 

n 

B context->mi df Lush  = C2*bufL)  + 1; 

n 

> 

n 

return  0; 

static 

i nt 

Do F I ush ( s t rue t Context  *context) 
{ 


Q 

int  error  = 0; 

n 

size_t  retlen; 

n 

byte  const  *p; 

a 

uns i gned  L en; 

n 

error  = FLushHeader(context); 

n 

if  (error) 

n 

B return  error; 

n 

/*  Next,  try  to  flush  anything  that  we  have  buffered  in  the  fifo  */ 

n 

p = pgpFifoPeek  (context->fifod,  context->fifo,  8Len); 

n 

while  (Len)  { 

n 

B retlen  = con t ex t -> t a i 1 ->w r i t e ( con t ex t-> t a i L , 

n 

B B B B p,  Len,  &error); 

n 

B pgpFifoSeek  (context ->fifod,  context -> fifo,  retlen); 

n 

B if  (error) 

Q 

B B returnerror; 

n 

B 

Q 

B p = pgpFifoPeek  ( c on t ex t ->f i f od , c o n t ex t -> f i f o , &Len); 

n 

} 

n 

return  error; 

> 

static 

int 

FlushCstruct  PgpPipeLine  *inyseLf) 


n 

struct  Context  *context; 

D 

int  error; 
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n pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  A D D H E A D E RM AG  I C ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pg  p A s s e r t ( c o n t e X t ) ; 

n pg  p A s s e r t ( c o n t e X t ->  t a i L ) ; 


n if  ( c on t e X t ->b u f f e r ) { 

n n error  = F L u s h H e a d e r ( c o n t e x t ) ; 

n n ifCerror) 

n n n returnerror; 


a 

n 

a 

□ 

a 

n 

Q 

□ 

□ 

n 


□ 

□ 

a 

□ 

n 

n 

n 

n 

□ 

n 


/*  Using  the  new  packets  — force  a flush  of  the  buffer  */ 
if  ( c on t ex t ->d o w r i t e ) { 

n error  = FLushBuffer(context); 

n if(error) 

n n returnerror; 

> else  { 

n error  = F o r c e F I u s h ( c on t e x t ) ; 

n ifCerror) 

n n returnerror; 

> 


n > e L s e { 

a a /*  Using  the  fifo  */ 


Q 

n 


n if  ( ! con t ex t ->dow r i t e ) 

n n return  PGPERR_ADDHDR_FLUSH; 


n error  = Do F L u s h C c o n t ex t ) ; 

n if  (error) 

n n returnerror; 

> 


n return  c on t e x t -> t a i L -> f L u s h ( c o n t e x t -> t a i L ) ; 

> 


/*  Only  called  after  args  are  checked,  so  I don't  have  to  check  them  */ 
static  size_t 

Buf f e rW r i t e ( s t r u c t PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n int*error) 

{ 

n struct  Context  *context; 

n size_t  size0  = size; 

n i nt  t ; 

n pgpAssert(myself); 

n pg p A s s e r t ( my s e I f ->ma g i c ==  A D D H E A D E RM AG  I C ) ; 

n pg  p A s s e r t ( e r r o r ) ; 

n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pgpAssert(context); 

n pg p A s s e r t ( c o n t ex t -> t a i I ) ; 

n pg p A s s e r t C c o n t ex t ->bu f f e r ) ; 

n *error  = F I u s h H ea d e r ( c o n t e x t ) ; 

n if  (*error) 

n n returnO; 
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Q 

do  { 

n 

n 

/* 

If 

we  are  in  the  middle  of  a block,  flush  it  out 

n 

n 

i f 

( c on t ex t->dow r i t e ) ( 

n 

n 

n 

*error  = FlushBuffer(context); 

H 

n 

n 

if  (*error) 

Q 

n 

n 

n break; 

a 

a 

n 

c on t e X t ->do w r i t e = 0; 

n 

n 

n 

context->bufptr  = context->buffer  + 2; 

n 

n 

n 

c on t e X t ->b u f w r i t e = c 0 n t e x t ->bu f p t r ; 

D 

□ 

> 

n 

u 

/* 

T ry 

to  fill  up  the  buffer  */ 

D 

Q 

t = 

m i 

n ( ( ( s i ze_ t ) ( BU F F ER_S I Z E - c 0 n t ex t -> b u f 1 e n ) ) , 

n 

n 

i f 

(t) 

{ 

□ 

s 

n 

memc py ( c 0 n t e X t ->bu f w r i t e , buf,  t); 

n 

n 

n 

b u f + = t ; 

n 

n 

n 

size  -=  t; 

n 

n 

n 

context->bufwrite  +=  t; 

D 

n 

n 

context->buflen  +=  t; 

n 

n 

> 

Q 

n 

/* 

n 

a 

★ 

If 

we  have  a full  block,  write  out  the  length 

n 

a 

★ 

and 

then  write  out  the  block 

D 

□ 

*/ 

n 

n 

i f 

( c on t e X t ->bu f L e n ==  BUFFER_SIZE)  ( 

n 

n 

n 

context->dowri te  = 1; 

a 

n 

n 

context->bufptr  — ; 

n 

□ 

n 

context->buflen++; 

n 

n 

n 

*(context->bufptr)  = 0xE0  + BL0CK_SIZE; 

n 

Q 

a 

continue; 

n 

0 

> 

a 

> while 

( s i 

ze ) 

r 

return  size0  - size; 


static  size_t 

UriteCstruct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  Context  *context; 

n pgpAssert(myseLf); 

n pg p As s e r t ( my s e L f ->ma g i c ==  A D D H E A D E RM AG  I C ) ; 

n pgpAssertCerror); 

a context  = (struct  Context  * ) my s e L f ->p r i v; 

n pgp A s s e r t ( c o n t ex t ) ; 

n pgp A s s e r t ( c o n t e X t -> t a i L ) ; 

n pgpAssert(context->fifo); 


if  ( ! c o n t e X t ->dow r i t e ) ( 

n /*  Buffer  into  the  fifo  until  we  get  a sizeadvise  */ 
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n 

□ 

return  pgpFifoWrite  ( c on t e x t ->f i f od , c on t ex t -> f i f o , buf. 

n 

} 

a 

/* 

a 

* Ok, 

we've  been  given  our  size.  Flush  the  fifo  and  then  be 

n 

* a write-through 

n 

*/ 

a 

*e  r r 0 r 

= D 0 F L u s h ( c on t e X t ) ; 

o 

if  ( *e 

r ro  r ) 

a 

□ 

return  0; 

n 

if  ( c on t e X t -> s i z e known  &&  size  > c on t e x t -> by t e s ) { 

n 

a 

pgpAssert(0); 

n 

n 

*error  = PG P E R R_S I Z E A D V I S E ; 

n 

n 

return  0; 

Q 

> 

n 

size  = 

con t ex t -> t a i L ->w r i t e ( con t ex t -> t a i L , buf,  size,  error); 

n 

c on t e X t ->by t e s -=  size; 

n 

return 

size; 

> 


static  int 

An n 0 t a t e ( s t r u c t PgpPipeline  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 

n pgp As s e r t ( my se L f ) ; 

n pg  p A s s e r t ( my  s e L f ->ma  g i c ==  A D D H E A D E RH  AG  I C ) ; 

n context  = (struct  Context  * ) my s e L f -> p r i v ; 

n pgpAssert(context); 

n pg p As  s e r t ( c on  t e X t ->  t a i L ) ; 


n error  = c o n t e x t -> t a i L ->a n no t a t e ( c on t e x t -> t a i L , origin,  type, 

n n n n n string, size); 

n if  (lerror) 

n n PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 

n pg p As s e r t ( con t ex t ->s cope_dep t h !=  -1); 

n return  error; 

> 


static  int 

Bu f f e r S i z e Ad V i s e ( s t r u c t PgpPipeline  *myseLf,  unsigned  Long  size) 
{ 


n struct  Context  *context; 

n interror; 

a inti; 


n pg p A s s e r t C my s e L f ) ; 

n pg  p A s s e r t ( my  s e L f ->ma  g i c ==  A D D H E A D E RH  AG  I C ) ; 


a context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pgpAssert(context); 

n pgpAssert(context->taiL); 

n pgpAssert(context->buffer); 
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n 

/* 

Do 

not  pass 

non-zero 

sizeAdvise  --  I can't  do  that!  */ 

□ 

i f 

( s i 

ze  II  con t ex t ->s cope_dept h ) 

□ 

n 

return 

0; 

□ 

/* 

okay,  we're 

at  end  of 

input.  * / 

n 

1 f 

( c on t ex t ->b u f L en  ) { 

n 

n 

if  ( con t ex t ->dow r i t e ) { 

Q 

n 

n 

error  = 

FLushBuffer(context); 

n 

a 

> e L s e 

if  ( c on t e x t ->m i d f L u s h ) ( 

□ 

n 

n 

error  = 

ForceFLush(context); 

n 

n 

> else 

i 

n 

n 

Q 

i = context ->bufLen; 

n 

s 

n 

if  (PKTLEN_ONE_BYTE( i ) ) { 

Q 

n 

o 

D 

context ->bufpti ; 

n 

n 

n 

n 

context->bufLen++; 

n 

n 

n 

n 

con t ex t ->buf pt r C 03  = PKTLEN_ 

lBYTE(i ); 

n 

a 

n 

> else  { 

n 

n 

n 

n 

context->bufptr  -=  2; 

n 

a 

n 

n 

c on t e X t ->bu f L e n +=  2; 

n 

n 

n 

n 

context->buf pt rC0D  = PKTLEN_ 

BYTE0(i ); 

n 

n 

n 

n 

c on t e X t ->b u f p t r C 1 3 = PKTLEN_ 

BYTE1 ( i ) ; 

a 

n 

n 

> 

n 

n 

n 

context- 

>midfLush  = c on t ex t ->bu f L e n ; 

Q 

n 

Q 

error  = 

ForceFLush(context); 

n 

n 

> 

n 

n 

if  (error) 

n 

a 

Q 

return  error; 

n 

n 

> 

n 

return 

context- 

•>tai L->sizeAdvise(context->tai L,  0); 

> 

static  int 

S i z e Adv i se ( s t ru c t PgpPipeLine  *myseLf,  unsigned  Long  Len) 

{ 

n struct  Context  *context; 

Q unsigned  Long  size; 

n interror; 

n i n t i ; 

n pgpAsse r t ( my se L f ) ; 

n pg p As s e r t ( my s e L f ->ma g i c ==  A D DH E A D E RM AG  I C ) ; 

n context  = (struct  Context  *)myseLf->priv; 

n pgp As s e r t ( c on t e X t ) ; 

n pg p As s e r t ( con t e X t -> t a i L ) ; 

n pg p As s e r t ( con t e X t ->f i f o ) ; 

n if  ( c on t ex t->s cope_de p t h ) 

n n return  0;n  /*  Can't  pass  it  through  */ 

n / * 

n * The  actuaL  size  myseLf  moduLe  wiLL  output  is  the  byte  size 

n * passed  in  (size),  pLus  the  size  of  the  buffered  header, 

n * pLus  the  size  of  the  data  in  the  fifo.  However  the  packet 

n * size  does  not  incLude  the  header  size,  so  add  in  the  header 

n * size  after  we  compute  the  header, 

n * / 
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/* 

* Set  the  header  packet  up  properly,  if  we  haven't  already 

* done  so.  We  know  how  long  the  I e ng t h-o f - I e ng t h should  be, 

* so  fill  that  many  bytes  of  the  header  in  MSB-first  order. 


□ 

*/ 

Q 

if  ( ! 

I c on t e X t ->d 0 w r i t e ) { 

n 

a 

size  = len  + pgpFifoSize 

(context ->fifod 

n 

a 

a 

i = PKTBYTE_LLEN(context- 

>headern0]); 

a 

a 

if  (size  >=  0x10000  S&  i 

<=  2) 

a 

a 

n i = 2; 

a 

a 

else  if  (size  >=  0x100  &S 

A 

II 

a 

a 

n i = 1 ; 

a 

a 

context->headerC0D  = ( c o n t e x t -> h e a d e r C 0 D 

i = LLEN_TO_BYTES(i); 
con t ex t->hd r I en  = i+1; 
while  (i--)  { 

n context->headerCi+1II  = (byte)(size  & 0xff); 

n size>>=8; 

> 


if  (! con t ex t ->s i z e known  ) { 

n c on t e X t ->by t e s = len; 


a 

a 

context ->sizeknown  = 1; 

a 

> 

else 

if  ( c on t ex t ->by t e s 1=  len)  { 

a 

a 

return  PG P E R R_ S I Z E A D V I S E ; 

a 

> 

a 

/* 

a 

* 

Now 

add  in  the  header  size,  sizeAdvise 

the  next  modu 1 e. 

a 

* 

i f 

everything  is  ok,  set  the  state  to 

dow  r i t e 

and  flush 

a 

*/n 

a 

size  = 

len  + pgpFifoSize  ( c o n t e x t -> f i f od , 

context 

->  f i f 0 ) 

a 

a 

+ context ->hdrlen; 

a 

error 

= context->tai l->sizeAdvise(context 

-> t a i 1 , 

size); 

a 

if 

(error) 

a 

a 

return  error; 

a 

context->dowri te  = 1; 

a 

error 

= Do F 1 us h ( con t ex t ) ; 

a 

/* 

* Just  in  case  we  got  a s i z e Ad v i s e ( 0 ) without  anything  else. 

* calling  s i z e Ad v i s e ( 0 ) twice  is  ok! 

*/ 

if  (lerror  &S  lien) 

n error  = c on t e x t -> t a i I -> s i z e Ad v i s e ( c on t e x t -> t a i I , 0); 


n return  error; 

> 


static  void 

Tea r down ( s t ru c t PgpPipeline  *myself) 
{ 

n struct  Context  *context; 
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n pg p As s e r t ( my s e I f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  A D D H E A D E R M AG  I C ) ; 

a context  = (struct  Context  *)myseLf->priv; 

n pg p A s s e r t C c o n t e X t ) ; 


n if  ( con t ex t->t a i L ) 

n n c o n t e X t -> t a i L -> t ea r do wn ( c o n t e X t -> t a i L ) ; 


n if  ( con t e X t -> f i f o ) 

n n pg p F i f o D e s t roy  ( c o n t e x t ->f i f od , c on t e x t ->f i f o ) ; 


n if  ( con t ex t ->buf f e r ) ( 

n n mems e t ( c on t e X t ->b u f f e r , 0,  BU F F E R_S I Z E+2 ) ; 

n n pgpnemFree(context->buffer); 

n > 

n 

n memsetCcontext,  0,  sizeof(*context)); 

n pgpMemFree(context); 

n memsetCmyseLf,  0,  sizeof(*myseLf)); 

n pgpMemFree Cmyse L f ) ; 

> 


struct  PgpPipeLine  ** 

pg p Add H e a de r C r ea t e C s t r u c t PgpPipeLine  **head,  PgpVersion  vers, 
n n struct  PgpFifoDesc  const  *fd,  byte  pkttype,  byte  LLen, 

n n byte  *hdr,  size_t  headerLen) 

{ 

n struct  PgpPipeLine  *mod; 

n struct  PgpFifoContext  *fifop  = NULL; 

n struct  Context  *context; 

n byte  *buf  = NULL; 

n byte  pktbite; 

n if(!head) 

n n return  NULL; 


n pgpAssertCfd); 

n /*  XXX  If  we  have  versions  > 2.6,  ignore  LLen  */ 

n if  (vers  > PG PV E R S I 0N_2 _6 ) 

n n pktbite  = PKTB YT E_BU I LD_N E W ( p k t t y pe ) ; 

□ e L se 

n n pktbite  = PKTB YT E_BU 1 LD ( p k t t y p e , LLen); 


D 

D 

D 

□ 

n 

n 

D 

n 

n 

D 

n 

n 


context  = (struct  Context  *)pgpMemALLoc(sizeof(*context)); 
if  (Icontext) 
n return  NULL; 

mod  = (struct  PgpPipeLine  * ) pg pHemA L L o c ( s i z eof ( *mod ) ) ; 
if  ( ! mod ) { 

n pg pMem F r e e ( c on t ex t ) ; 

n return  NULL; 

> 

if  (vers  > PG P V E R S 1 0 N_2_6 ) ( 

n buf  = (byte  * ) pg pMemA L L o c ( BU F F E R_ S I Z E + 2); 

n if(!buf){ 

n n pg pHem F r e e ( c on t e X t ) ; 
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n pg pH em F r ee ( mod ) ; 

n return  NULL; 

> 

memcpyCbuf+2,  hdr,  headerlen); 


a 

n 

□ 

□ 

□ 

D 

n 


> else  { 


□ 

f i 

fop  = pgpFifoCreate  (fd); 

n 

i f 

( ! f i f op)  { 

n 

n 

pgpHemFree(context); 

n 

n 

pgpHemFree(mod); 

□ 

□ 

return  NULL; 

n 

> 

n 

□ 

n 

n 

□ 

n 

n 


a 

□ 

□ 

□ 

D 

□ 

} 


if  ( pg p F i f oW r i t e (fd,  fifop,  hdr,  headerlen)  !=  headerlen)  { 
n pgpMemFree(context); 

n pg pHem F r e e ( mod ) ; 

n pgpFifoDestroy  (fd,  fifop); 

a return  NULL; 

> 


n mod->magic  = A D D H E A D E RM AG  I C ; 

n mod->flush  = Flush; 

a mod->write  = Write; 

n mod->s i ze Adv i se  = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardown; 

n mod->name  = "Add  Header  Hodule"; 

n mod->priv  = context; 


n i f ( buf  ) { 

n n mod->write  = BufferWrite; 

n n mod->s i ze Advi se  = Bu f f e r S i z e Ad v i s e ; 

n } 


n memse t C c on t ex t , 0,  s i z eo f ( * c on t ex t ) ) ; 

n CO n t ex t -> f i f od  = fd; 

n context->f i f o = fifop; 

n context->ptr  = con t ex t -> h ea d e r ; 

n context->headerC0]  = pktbite; 

n c on t ex t ->hd r I e n = 1; 

n c on t e X t -> V e r s i on  = vers; 

n c on t e X t -> b u f f e r = buf; 

n c on t e X t ->b u f p t r = buf  + 2; 

n c on t e X t ->b u f u r i t e = c on t ex t ->bu f p t r + headerlen; 

n if  (vers  > PG P V E R S 1 0N_2 _6 ) 

n n c on t ex t ->bu f I e n = headerlen; 

n else  if  (llen==3) 

n n c on t ex t ->do w r i t e = 1; 

a 

n cont ext->ta i I = *head; 

a *head  = mod ; 

n return  & c o n t e x t -> t a i I ; 

> 
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/* 

* pgpAddHdr.h  --  header  file  for  a module  to  add  a packet  header. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r L o r d0M I T . E D U> 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpAddHdr . h,v  1.3. 2.1  1997/06/07  09:51:14  mhw  Exp  $ 

*/ 


//include  "pgpUsuals.h 

#ifdef cpLuspLus 

extern  "C"  { 

//  e n d i f 


struct  PgpPipeline; 
struct  PgpFifoDesc; 


struct  PgpPipeline  ** 

pgpAddHeaderCreate  (struct  PgpPipeline  **head,  PgpVers 
n n struct  PgpFifoDesc  const  *fd,  byte 
n n byte  *header,  size_t  hdrlen); 


on  version, 
pkttype,  byte 


Lien, 


//ifdef cpLusplus 

> 

//endi  f 
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/* 

* pgpBufMod.c  --  A Buffering  Module;  buffer  until  the  first  sizeAdvise 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r I o r dSM I T . E D U> 

* 

* $Id:  pgpBuf Mod . c,v  1.4. 2.1  1997/06/07  09:51:14  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 

//i  nc  lude 

#e nd i f 

"config.h" 

#i nc lude 

<stdio.h> 

//include 

"pgpDebug . h" 

//include 

"pgpAnnotate  . h 

#include 

"pgpFIFO.h" 

# i n c 1 ud  e 

"pgpMem. h" 

#i nc lude 

"pgpErr.h" 

//include 

"pgpPipeline.h 

//include 

"pgpUsuals.h" 

//include 

"pgpBufMod. h" 

#define  kPG PBu f Mod C md A r g S i z en  4096 

/* 

* This  is  a magic  number  for  use  within  this  module.  It  is  used  to 

* make  sure  the  passed-in  module  is  a member  of  this  type.  Just  a 

* little  extra  s a n i t y- c h e c k i n g . 

* 

* You  should  set  this  value  to  some  "random"  32-bit  number. 

*/ 


//define  BUFMODMAGICn  0xb3ffe43d 


struct 

Q 

Q 

n 

□ 

a 

□ 

n 

n 

>; 


Context  { 

struct  PgpFifoDesc  const  *fd; 
struct  Pg p F i f o C o n t e X t *fifo; 

struct  Pg p F i f o C o n t e X t *ann;  /*  Fifo  to  hold  the  saved  annotations  */ 

struct  PgpPipeline  *tail; 

byte  cmdargCkPGPBufModCmdArgSi  zell; 

unsigned  cmdlen; 

int  scope_depth; 

byte  writing; 


/* 

* Buffer  a command  at  the  current  spot  in  the  data  stream.  This  is  only 

* called  when  c t x->b u f f e r i ng  is  true.  What  it  does  is  find  the  delta 

* of  this  command  in  the  data  fifo  from  the  last  command  in  order  to  replay 

* the  commands  at  the  proper  place.  It  saves  off  c o n t e x t ->w r i t t e n as 

* the  offset  and  then  resets  the  value  to  0. 

* 

* The  return  value  is  0 on  success  or  an  error  code. 

* 

* Command  Byte  Syntax:  <a rg  I en><a rg> 

*/ 
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static  i n t 

b u f f e r C omtna nd  (struct  Context  *ctx,  const  byte  *arg,  unsigned  arglen) 


{ 


Q 

/* 

Make 

n 

i i 

( a rg  1 

n 

n 

n 

i f 

(pgpF 

□ 

n 

n 

n 

Q 

i f 

(pgpF 

n 

n 

n 

return  0 

> 

/* 

Buffer 

up  an 

static  int 

bufferAnnotation 

□ D 


sure  the  command  argument  fits  the  buffer  size  */ 
en  > sizeof  ( c t x->cmda rg ) ) 
return  PG PE R R_ C M D_T00B I G ; 

ifoWrite  (ctx->fd,  ctx->ann,  (byte  *)&argLen, 
n sizeof  CargLen))  !=  sizeof  (arglen)) 

return  PG P E R R_ N OH E M ; 

ifoWrite  (ctx->fd,  ctx->ann,  arg,  arglen)  !=  arglen) 
return  PGPERR_NOMEH; 


annotation  */ 

(struct  Context  *ctx,  struct  PgpPipeline  *origin,  int 
byte  const  *string,  size_t  size) 


{ 


type. 


n byte  *arg,  *argp; 

n int  retval; 


n arg  = argp  = (byte  * ) p g pHem A I I o c (sizeof  (origin)  + sizeof  (type)  + 

n n n n n size+sizeof(size)); 

n i f ( ! a rg  ) 

n n return  PG P E RR_NOM EM ; 

n memcpy  (argp,  (byte  *)&origin,  sizeof  (origin)); 

n argp  +=  sizeof  (origin); 

n memcpy  (argp,  (byte  *)&type,  sizeof  (type)); 

n argp  +=  sizeof  (type); 

n memcpy  (argp,  (byte  *)&size,  sizeof  (size)); 

n argp  +=  sizeof  (size); 

n memcpy  (argp,  string,  size); 

n argp+=size; 

n retval  = bu f f e r Comma n d (ctx,  arg,  argp-arg); 

n pgpHemFree  (arg); 

n return  retval; 

} 


static  int 

pa r s e An  no t a t i on  (struct  Context  *ctx) 

{ 

n struct  PgpPipeline  *origin; 

n inttype; 

n size_t  size; 

n byte  *string,  *argp  = ctx->cmdarg; 

n int  retval; 

n pgpAssert  (ctx->cmdlen  >=  sizeof  (origin)  + sizeof  (type)  + 

n n sizeof(size)); 
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n memcpy  ((byte  *)&origin,  argp,  sizeof  (origin)); 

n argp  +=  sizeof  (origin); 

n memcpy  ((byte  *)&type,  argp,  sizeof  (type)); 

n argp  +=  sizeof  (type); 

n memcpy  ((byte  *)&size,  argp,  sizeof  (size)); 

n argp  +=  sizeof  (size); 

n /*  make  sure  we  have  the  right  number  of  bytes  remaining  */ 

n pgpAssert  (ctx->cmdLen  - size  ==  argp  - ctx“>cmdarg); 

n string  = (byte  * ) pg p A L L o c ( s i z e ) ; 

n if  (string  ==  NULL) 

n n return  PGPERR_NOMEH; 

n pgpCopyMemory  (argp,  string,  size); 

n retvaL  = c t x-> t a i L ->a n no t a t e (ctx->taiL,  origin,  type,  string,  size); 

n pgpFree(string); 

n return  retvaL; 

> 


/ * < L en><cmd>  * / 
stati c i nt 

f L u s h C omma nd s (struct  Context  *ctx) 

C 

n interror; 

n unsigned  cmdLen  = pgpFifoSize  (ctx->fd,  ctx->ann); 


n 

Q 

n 

n 

□ 

n 

n 

n 


do  { 

n 

n 

□ 

n 

n 

Q 

a 


if  ( c t x-> cmd L e n ) { 

n error  = parseAnnotation  (ctx); 

n if  (error) 

n n returnerror; 

D 

a ctx->cmdLen  = 0; 

> 


□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

a 

a 

a 

o 


a 

a 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

n 

Q 


i f 

(cmdLen) 

{ n n 

a 

n 

if 

(pgpFi foRead 

(ctx->fd,  ctx->ann. 

B 

B 

n 

(byte  * ) Sc t x->cmd L en , 

B 

B 

n 

sizeof  ( c t x-> c md L en  ) ) 

B 

sizeof  (ctx- 

>cmd  L en ) ) 

B 

B 

return  PG P E R R_ F I F 0_ R E A D ; 

B 

cmdLen  -=  sizeof 

(ctx-> cmdLen); 

I = 


n if  (pgpFifoRead  (ctx->fd,  ctx->ann,  ctx->cmdarg, 

n n n ctX“>cmdLen)  !=  ctx->cmdLen) 

n n return  PGPERR_FIFO_READ; 

n cmdLen  -=  ctx->cmdLen; 


> 


> whiLe  (ctx->cmdLen); 


n returnO; 
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> 

static  int 

DoFLush  (struct  Context  *context) 
{ 


n 

int  error  = 0; 

□ 

byte  const  *ptr; 

n 

size_t  retlen; 

n 

unsi gned  Len; 

Q 

/*  first,  flush  out  any  commands  */ 

n 

error  = f 1 u s h C omma nd s (context); 

B 

if  (error) 

B 

n return  error; 

B 

ptr  = pgpFifoPeek  ( con t ex t ->f d , c on t e x t -> f i f o , &len); 

B 

while  (len)  ( 

B 

n retlen  = c on t e x t -> t a i 1 -> w r i t e ( c on t e x t -> t a i 1 , 

fl 

n n n n ptr,  len,  Serror); 

B 

n pgpFifoSeek  (context ->fd,  context ->fifo,  retlen); 

B 

n if  (error) 

B 

n n return  error; 

fl 

Q 

B 

n ptr  = pgpFifoPeek  (context->fd,  context->fifo,  Slen); 

B 

} 

B 

return  error; 

> 

static  int 

Flush  (struct  PgpPipeLine  *myseLf) 


B 

struct  Context  *context; 

fl 

int  error; 

B 

pgpAssert  (myself); 

B 

pgpAssert  ( my se 1 f ->mag i c ==  BU F MO  DM AG  I C ) ; 

B 

context  = (struct  Context  * )my se 1 f ->p r i v; 

B 

pgpAssert  (context); 

B 

pgpAssert  ( con t ext->t a i 1 ) ; 

B 

if  ( ! c on t e X t -> w r i t i ng ) 

B 

n return-1 ;n  /*XXX*/ 

B 

error  = DoFlush  (context); 

B 

if  (error) 

fl 

n return  error; 

B 

return  c on t ex t -> t a i 1 -> f 1 u s h ( con t e x t -> t a i 1 ) ; 

> 

static  si2e_t 

Write  (struct  PgpPipeline  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 


fl 

struct  Context  *context; 

fl 

pgpAssert  (myself); 
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□ 

pgpAssert  ( my se L f->ma g i c ==  BU FHO DM AG  I C ) ; 

n 

pgpAssert  (error); 

n 

context  = (struct  Context  *)myseLf->priv; 

n 

pgpAssert  (context); 

n 

pgpAssert  ( c o n t e x t -> t a i 1 ) ; 

□ 

if  ( ! c on t e X t ->H r i t i ng ) { 

u 

n *error=0; 

n 

n return  pgpFifoWrite  ( c o n t e x t -> f d , c o n t e x t -> f i f o , buf,  size); 

Q 

> 

n 

♦error  = DoFLush  (context); 

□ 

if  (*error) 

n 

n return0; 

a 

return  c on t e x t -> t a i L -> w r i t e ( c o n t e x t -> t a i L , buf,  size,  error); 

> 

static  int 

Annotate  (struct  PgpPipeline  *myseLf,  struct  PgpPipeLine  *origin,  int  type. 


B 

byte  const  *string,  size_t  size) 

{ 

B 

struct  Context  *context; 

B 

int  error; 

B 

pgpAssert  (myself); 

B 

pgpAssert  ( my s e L f ->mag i c ==  BU FMO D M AG  I C ) ; 

B 

context  = (struct  Context  * ) my s e L f ->p r i v ; 

B 

pgpAssert  (context); 

B 

pgpAssert  ( con t ex t -> t a i L ) ; 

B 

if  ( ! c on t ex t -> w r i t i n g ) { 

B 

n /*  Make  sure  there  isn't  any  data  buffered!  */ 

B 

n pgpAssert  ( I pg p F i f o S i z e ( c o n t e x t -> f d , c on t e x t -> f i f o ) ) ; 

B 

n error  = b u f f e r Anno t a t i on  (context,  origin,  type,  string,  size); 

B 

} else 

fl 

n error  = c on t ex t -> t a i L ->a nno t a t e ( c on t ex t -> t a i L , origin,  type. 

B 

n n n n n string, size); 

B 

if  ((error) 

B 

n PGP_SCOPE_DEPTH_UPDATE( context ->scope_depth,  type); 

fl 

pgp As se r t ( con t ex t->s cope_dep t h !=  -1); 

B 

return  error; 

> 

Static 

int 

SizeAdvise  (struct  PgpPipeline  *myseLf,  unsigned  Long  bytes) 


B 

struct  Context  *context; 

B 

int  error; 

fl 

pgpAssert  (myself); 

B 

pgpAssert  ( my s e L f ->ma g i c ==  BU F MO D H AG  I C ) ; 

E 

context  = (struct  Context  * ) my s e L f ->p r i v; 

B 

pgpAssert  (context); 

B 

pgpAssert  ( c on t e x t -> t a i L ) ; 
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n context->writing  = 1; 

n error  = DoFLush  (context); 

n if  (error) 

n n returnerror; 

n return  context->tail->sizeAdvise  (context->taiL,  bytes); 

} 


static  void 

Teardown  (struct  PgpPipeLine  *myseLf) 
{ 

n struct  Context  *context; 


n 

pgpAssert 

n 

pgpAssert 

s 

context  = 

n 

pgpAssert 

(myself); 

( my s e L f->mag i c 

(struct  Context 
(context); 


= BUFMODHAGIC); 
*)myself->priv; 


n if  ( context->tai L ) 

n n c o n t e X t -> t a i L -> t e a r d o wn  ( c on t ex t -> t a i L ) ; 


n pgp F i f oDe s t r oy  ( c on t e x t -> f d , c on t e x t ->a nn  ) ; 

n pg p F i f o D e s t r oy  ( c on t e x t -> f d , c on t ex t -> f i f o ) ; 

n memset  (context,  0,  sizeof  (*context)); 

n pgpMemFree  (context); 

n memset  (myself,  0,  sizeof  (*myself)); 

n pgpMemFree  (myself); 

} 


struct  PgpPipeline  ** 

pg pBu f f e r Mod C r ea t e (struct  PgpPipeline  **head,  struct  PgpFifoDesc  const  *fd) 
{ 

n struct  PgpPipeline  *mod; 

n struct  Context  *context; 

n struct  Pgp F i f oContext  *fifo,  *ann; 

n i f ( ! head  | | ! f d) 

n n return  NULL; 

n context  = (struct  Context  *)pgpHemAlloc  (sizeof  (*context)); 

n i f ( ! context ) 

n n returnNULL; 

n mod  = (struct  PgpPipeline  *)pgpMemAlloc  (sizeof  (*mod)); 

n if(!mod){ 

n n pgpMemFree  (context); 

n n returnNULL; 

n > 

n fifo  = pg p F i f o C r e a t e (fd); 

n if(!fifo){ 

n n pgpMemFree  (context); 

n n pgpMemFree  (mod); 

a n returnNULL; 

n } 

n ann  = pgpFifoCreate  (fd); 

B if(!ann){ 

B B pgpFifoDestroy  (fd,  fifo); 
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n a pgpMemFree  (context); 

n n pgpMemFree  (mod); 

o a returnNULL; 

n > 

n mod->magic  = BUFHODMAGIC; 

n mod->write  = Write; 

n mod->fLush  = Flush; 

n mod->sizeAdvise  = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardown; 

n mod->name  = "Buffer  Module"; 

n mod->priv  = context; 

n memset  (context,  0,  sizeof  (*context)); 

n context->fd  = fd; 

n CO n t e X t -> f i f o = fifo; 

n context->ann  = ann; 

n context->tail  = *head; 

n *head=mod; 

a return  & c on t ex t -> t a i I ; 

} 
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/* 

* pgpBufHod.h  --  A Buffering  Module;  buffer  until  the  first  sizeAdvise 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  < wa r I o r dBH I T . E D U> 

* 

* $Id:  pgpBuf Mod . h,v  1.4. 2.1  1997/06/07  09:51:14  mhw  Exp  $ 

*/ 

#ifndef  PGPBUFMOD.H 
#define  PGPBUFMOD.H 

#ifdef  cplusplus 

extern  "C"  { 

#endi f 

struct  PgpPipeline; 
struct  PgpFifoDesc; 

struct  PgpPipeline  PGPExport  ** 

pg pBu f f e r Mod C r ea t e (struct  PgpPipeline  **head,  struct  PgpFifoDesc  const  *fd); 

#ifdef  cplusplus 

} 

#endi f 

#endif  /*  PGPBUFMOD.H  */ 
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/* 

* pgpCopyMod.c  --  Module  to  copy  input  to  output 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r L o r d SM I T . E DU> 

★ 

* $Id:  pg p C opy Mod . c , V 1.3. 2.1  1997/06/07  09:51:15  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#incLude  <stdio.h> 


#i nc  Lude 
#incLude 
#incLude 
#i  nc  Lude 


"pgpDebug . h" 
"pgpCopyMod. h" 
"pgpMem. h" 
"pgpPipeLine.h 


#define  COPYHODMAGICn  0xc09430d 


static  size_t 

WriteCstruct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  PgpPipeLine  *taiL; 

a pgpAssert(myself); 

n p g p A s s e r t C my s e L f ->ma g i c ==  C 0 P YMO DM AG  I C ) ; 

n pg p A s s e r t ( e r r o r ) ; 

n tail  = *(struct  PgpPipeLine  ** ) 8my s e L f ->p r i v ; 

n pgpAssert(taiL); 

n return  t a i L ->w r i t e C t a i L , buf,  size,  error); 

> 

static  int 

FlushCstruct  PgpPipeLine  *myseLf) 

{ 

n struct  PgpPipeLine  *taiL; 

n pg p A s s e r t ( my s e L f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  COPYMODMAGI C ) ; 

n tail  = *(struct  PgpPipeLine  ** ) &my s e L f ->p r i v ; 

n pgpAssertCtaiL); 

n return  t a i L -> f L u s h ( t a i L ) ; 

} 


static  int 

Anno t a t e ( s t r u c t PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  PgpPipeLine  *taiL; 

n pg p A s s e r t ( my s e L f ) ; 
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n pg p As s e r t ( my s e L f ->ma g i c ==  C 0 P YHO DM AG  I C ) ; 

a tail  = *(struct  PgpPipeLine  ** ) &my s e L f ->p r i v ; 

n pgpAssert(taiL); 

n return  t a i L ->a nno t a t e ( t a i L , origin,  type,  string,  size); 

} 

static  int 

S i z e Ad V i s e ( s t r u c t PgpPipeLine  *myseLf,  unsigned  Long  bytes) 

{ 

n struct  PgpPipeLine  *taiL; 

n pgpAssert(myseLf); 

n pg p As s e r t C my s e L f ->ma g i c ==  C 0 P YHO DM AG  I C ) ; 

n tail  = *(struct  PgpPipeLine  ** ) &my s e L f ->p r i v ; 

n pgpAssert(taiL); 

n return  t a i L -> s i z e Ad v i s e ( t a i L , bytes); 

} 

static  void 

Tea r do wn ( s t r u c t PgpPipeLine  *myseLf) 

{ 

n struct  PgpPipeLine  *taiL; 

D pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  C OP YHO DH AG  I C ) ; 

n tail  = *(struct  PgpPipeLine  ** ) 8my s e L f ->p r i v ; 

n if(taiL) 

n n taiL->teardown(taiL); 

n memsetCmyseLf,  0,  sizeof(*myseLf)); 

n pg pHem F r ee C my s e L f ) ; 

> 

struct  PgpPipeLine  ** 

pg p C opy HodC r ea t e ( s t r u c t PgpPipeLine  **head) 

{ 

n struct  PgpPipeLine  *mod; 

n ifClhead) 

n n return  NULL; 

n mod  = (struct  PgpPipeLine  *)pgpHemALLoc(sizeof(*mod)); 

a i f ( ! mod ) 

n n returnNULL; 

n mod->magic  = CO P YHO DH AG  I C ; 

n mod->write  = Write; 

n mod->fLush  = Flush; 

n mod-> s i z e Ad V i s e = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod-> t ea r d own  = Teardown; 

n mod->name  = "Copy  HoduLe"; 

n mod->priv  = *head; 
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n *head  = mod; 

n return  (struct  PgpPipeLine  ** ) &mod->p r i v ; 

> 
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/* 

* pgpCopyMod.h  --  Copy  the  input  directly  to  the  output. 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* Written  by:n  Derek  Atkins  <wa  r L o r dSH  I T . E D Ll> 

* 

* $Id:  pgpCopyHod . h,v  1.3. 2.1  1997/06/07  09:51:15  mhw  Exp  $ 

*/ 

#ifndef  PGPCOPYMOD.H 
#define  PGPCOPYMOD.H 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi  f 

struct  PgpPipeLine; 

struct  PgpPipeLine  **pgpCopyModCreate  (struct  PgpPipeLine  **head); 

#ifdef  ..cpLuspLus 
} 

#end i f 

#endif  /*  PGPCOPYMOD.H  */ 
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* pgpDevNuLL.c  --  sink  module  to  eat  all  input. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa  r L o r d olH  I T . E D Ll> 

★ 

* $Id:  pg p D e V N u L L . c , V 1.3. 2.1  1 997/06/07  09:51:1  5 mhw  Exp  $ 

*/ 

#ifdef  HAVE_CON FIG_H 
#incLude  "config.h" 

Sendi f 

#i nc  Lude  <stdi o . h> 

^include  "pgpDebug.h" 

#include  "pgpDevNuLL.h" 

#incLude  "pgpHem.h" 
tfincLude  "pgpPipeLine.h" 


#define  D E VN U L LH AG  I C n 0xde55771  1 


static  size_t 

Write  (struct  PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  size,  int  *error) 
{ 

n pg p A s s e r t ( my s e L f ) ; 

n pgpAssert(myseLf->magic  ==  DEVNULLHAGIC); 

n /*  To  shut  up  compiler  warnings  */ 

n (void) my  s elf; 

n (void)buf; 

n pg p A s s e r t ( e r r o r ) ; 

n *error=0; 

n return  size; 

} 


static  int 

Flush  (struct  PgpPipeLine  *myseLf) 

{ 

n pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  D EV N U LLM AG  I C ) ; 

n /*  To  shut  up  compiler  warnings  */ 

n (void) my self; 

n return0; 

> 


static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n pgpAssert(myseLf),- 

n pg p A s s e r t ( my s e L f ->ma g i c ==  D E V N U LLM AG  I C ) ; 

n /*  To  shut  up  compiler  warnings  */ 
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n 

n 

n 

n 

n 


(void) my self; 

(void)origin; 

(void)type; 

(void)string; 

(void)size; 


a returnO; 

> 


static  i nt 

SizeAdvise  (struct  PgpPipeline  *myseLf,  unsigned  long  bytes) 
{ 

n pgpAssert(myseLf); 

n pg p A s s e r t ( my s e L f ->ma g i c ==  D E VNU LLM AG  I C ) ; 

n /*  To  shut  up  compiler  warnings  */ 

n (void) my self; 

n (void)bytes; 

n returnO; 

> 


static  void 

Teardown  (struct  PgpPipeline  *myself) 

{ 

n pg p As s e r t ( my s e I f ) ; 

n pg p As s e r t ( my s e I f ->ma g i c ==  D E VNU LLM AG  I C ) ; 

n memsetlmyself,  0,  sizeof  (*myself)); 

n pg pH em F r e e ( my s e I f ) ; 

} 


struct  PgpPipeline  * 

pg p D e vN u I I C r ea t e (struct  PgpPipeline  **head) 
( 


n 

struct  PgpPipeline  *mod; 

n 

if 

( ! head ) 

n 

Q 

return  NULL; 

n 

mod 

= (struct  PgpPipeline  * ) pg pMemA 1 1 o c ( s 

a 

if 

( mod ) ( 

n 

D 

mod->magic  = DEVNULLHAGIC; 

n 

n 

mod->write  = Write; 

Q 

n 

mod->flush  = Flush; 

n 

n 

mod->s i zeAdvi se  = SizeAdvise; 

n 

a 

mod->a n no t a t e = Annotate; 

n 

o 

mod->t ea rdown  = Teardown; 

n 

a 

mod->name  = "Dev  Null"; 

n 

n 

*head  = mod; 

Q 

Q 

return  *head; 

n 

> 

D 

return  NULL; 
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/* 

* pgpDevNuLL.h  --  A pipeline  going  nowhere 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r L o r d SM I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pg p D e vN u L L . h , V 1.4. 2.1  1997/06/07  09:51:16  mhw  Exp  $ 

*/ 

#ifndef  PGPDEVNULL.H 
#define  PGPDEVNULL.H 

#ifdef  ..cpLuspLus 
extern  "C"  { 

# e nd i f 

struct  PgpPipeLine; 

#ifndef  T YP E. PG PP I P E L I N E 

^define  T Y P E. PGPPI P E L I N E 1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

#end  i f 

/* 

* Create  a module  that  will  eat  alL  of  its  input. 

*/ 

struct  PgpPipeLine  PGPExport  *pgpDevNuLLCreate  (struct  PgpPipeLine  **head); 

#ifdef  ..cpLuspLus 
} 

# end i f 

#endif  /*  PGPDEVNULL.H  */ 
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/* 

* pgpJoin.c  --  join  multiple  modules  into  a single  stream 

* 


* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by;n  Derek  Atkins  <wa r I o r d 0H I T . E D U> 


* $ld:  pgpJoin.c, V 1.3. 2.1  1997/06/07  09:51:16  mhw  Exp  $ 
*/ 

#i-fdef  HAVE  CONFIG  H 


^include 

#e  nd i f 

"config.h" 

^include 

<std i 0 . h> 

#i nc  lude 

"pgpDebug.h" 

//include 

"pgpJoin.h" 

# i n c 1 ude 

"pgpAnnotate.h" 

//include 

"pgpFIFO.h" 

//include 

"pgpMem. h" 

#include 

"pgpErr.h" 

//i  nc  lude 

"pgpPipeline.h" 

//def  i ne 

JOINHAGICn  0x00112233 

struct  Context  ( 

□ 

struct  PgpFifoDesc  const  *fd 

n 

struct  Pg p F i f o Con t e X t *fifo; 

Q 

struct  PgpPipeline  *tail; 

n 

struct  PgpPipeline  *next; 

n 

struct  PgpPipeline  *top; 

n 

unsigned  long  size; 

a 

int  sizevalid; 

n 

int  canwrite; 

a 

int  e 0 f ; 

n 

int  teardown; 

>; 


static  int 

Do F I us h ( s t rue t Context  *context) 

{ 

n interror=0; 

n byte  const  *ptr; 

n unsigned  len; 

n size_t  retlen; 

n struct  Context  *topp  = (struct  Context  * ) co n t ex t -> t op->p r i v ; 

n struct  PgpPipeline  *tailp  = topp->tail; 

n pgpAssert(tailp); 


n 

n 

n 

a 

n 

Q 

□ 

n 


/* 

i f 

n 

n 

a 

n 

a 

n 


Try  to  flush  anything  that  we  have  buffered  */ 

( c on t e X t -> f i f o ) { 

ptr  = pgpFifoPeek  ( c on t e x t -> f d , c on t ex t -> f i f o , 8len); 
while  (len)  { 

n retlen  = t a i I p->w r i t e ( t a i I p , ptr,  len,  &error); 

n pgpFifoSeek  ( c on t e x t -> f d , c on t ex t -> f i f o , retlen); 

n if  ( con t ex t->s i z e va I i d ) 

n a c on t e X t -> s i z e -=  retlen; 
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n if(error) 

n n returnerror; 

D 

n ptr  = pgpFifoPeek  (context->fd,  context->fifo,  SLen); 

> 


□ 

/*  If  we  get  here,  we  have  nothing  left  buffered 

in  the 

f i f 0 * / 

n 

/* 

n 

* Now, 

check  if  we  are  in  an  EOF  condition. 

If 

so,  then  we 

n 

* can 

tell  the  next  input  that  it  is  allowed 

t 0 

write. 

and 

n 

* then 

we  can  try  to  flush  out  that  buffer  as 

we 

1 1 . 

u 

*/ 

n 

if  ( cont ext->eof  SS  c o n t e x t ->nex t ) { 

Q 

o 

struct  Context  *ctx  = (struct  Context 

*) context 

->next->priv; 

Q 

n 

ctx->canwrite  = 1; 

□ 

□ 

error  = DoFlush  (ctx); 

n 

> 

n return  error; 

> 


static  int 

FLush(struct  PgpPipeline  *myseLf) 

{ 

n struct  Context  *context,  *topp; 

a struct  PgpPipeline  *taiLp; 

a interror; 

a pgpAssert (myse If ); 

a pg p As s e r t ( my s e L f ->ma g i c ==  JOINMAGIC); 

a context  = (struct  Context  * ) my s e L f ->p r i v ; 

a pg p A s s e r t ( c on t ex t ) ; 

a topp  = (struct  Context  * ) c on t e x t -> t op->p r i v ; 

a pgpAssertCtopp); 


a 

t a i 

Ip  = topp->tail; 

Q 

if 

( c on t e X t -> c a n w r i t e ) { 

Q 

n 

pgpAssert(tai  Ip); 

□ 

n 

error  = DoFlush  (context); 

n 

Q 

if  (error) 

n 

D 

a return  error; 

n 

> 

n 

i f 

( ta i Ip) 

n 

n 

return  t a i 1 p-> f 1 u s h ( t a i 1 p ) 

a return0; 

} 

static  size_t 

Write(struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  len,  int  *error) 
{ 

a struct  Context  *context,  *topp; 

a struct  PgpPipeline  *tailp; 
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size_t  written; 
pgpAssert(myseLf); 

pgpAssert(myseLf->magic  ==  JOINHAGIC); 
pgpAssert(error); 

context  = (struct  Context  * ) my s e L f ->p r i v ; 
pgpAssert(context); 

topp  = (struct  Context  *)context->top->priv; 
pgpAssert(topp); 


/*  If  we're  not  allowed  to  write,  then  buffer  things  up  until  we  can  */ 
♦error  = 0; 

if  ( ! con t ex t->ca nw r i t e ) 

n return  pgpFifoWrite  ( c on t e x t ->f d , c on t ex t -> f i f o , buf,  len); 


n /*  At  this  point  we  are  writing  --  make  sure  we  have  a tail!  */ 

n tailp  = topp->tail; 

n pgpAssert(tailp); 


♦error  = DoFlush  (context); 
if  (♦error) 
n return0; 


written  = t a i I p-> w r i t e ( t a i I p , buf,  len,  error); 
if  (context ->sizeval  id) 
n c on t ex t -> s i z e -=  written; 


return  written; 


static  int 

Anno t a t e ( s t ru c t PgpPipeline  ♦myself,  struct  PgpPipeline  ♦origin,  int  type, 
n byte  const  ♦string,  size_t  len) 

( 

n struct  Context  ♦context; 


n pg p A s s e r t ( my s e I f ) ; 

n pgpAs s e r t ( my s e I f ->ma g i c ==  JOINMAGIC); 

n context  = (struct  Context  ♦ ) my s e I f ->p r i v ; 

n pg p A s s e r t ( c o n t ex t ) ; 

n /♦  XXX  --  Don't  allow  annotations  ♦/ 

n (void)origin; 

n (void)string; 

n (void)len; 

n switch  (type)  { 

n case  PGPANN_FILE_BEGIN : 

a case  PGPANN_FILE_END : 

n case  PG P AN N_ I N PUT_BE G I N : 

n case  PGPANN_I NPUT_END : 

n n return0; 

n n /♦NOTREACHED^/ 

Q default: 

n n return  PGPERR_JOIN_BADANN; 
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n } 

n /*NOTREACHED*/ 

} 


/* 

* c on t e X t -> s i z e is  the  number  of  bytes  in  the  fifo  plus  the  number  of 

* bytes  we  still  should  expect  to  receive.  Once  this  is  set,  we 

* expect  it  to  be  held  by  the  caller.  Each  input  gets  one  of  these. 

* We  decrement  it,  if  it  is  valid,  whenever  we  write  data  out  to  the 

* tail. 

* 

* c on t e X t -> s i z e va I i d is  if  the  number  in  c on t e x t -> s i z e is  valid 

* 

* This  function  will  first  check  to  make  sure  that  the  size  is  valid, 

* and  that  the  passed-in  size  matches  the  expected  size. 

* 

* We  also  keep  track  of  EOF  --  if  we  get  a sizeAdvise  of  0 bytes, 

* then  we  set  context->eof  to  1,  to  signify  that  we  have  an  EOF 

* condition  and  we  do  not  expect  any  more  bytes  to  be  written  from 

* that  input.  This  means  that  c on t e x t -> s i z e is  the  number  of  bytes 

* buffered  in  that  context. 

* 

* Then  it  will  see  if  all  inputs  have  a valid  size.  If  they  do,  then 

* it  will  add  up  all  the  sizes  and  send  that  as  a sizeAdvise  to  the 

* tail. 

* 

* Next,  we  will  flush  out  the  buffered  data,  and  if  that  returns 

* without  an  error  we  know  that  everything  is  flushed  from  all  the 

* modules  from  this  one  to  the  end. 

* 

* Finally  we  check  if  everything  is  EOF.  We  know  that  if  everything 

* is  at  EOF,  and  we  got  this  far,  that  there  must  not  be  anything  in 

* any  buffers,  and  we  are  not  expecting  anymore  data  to  be  written. 

* Therefore,  we  pass  a sizeAdvise  C0)  to  the  tail. 

*/ 

static  int 

Si zeAdvi se ( St ruct  PgpPipeline  *myself,  unsigned  long  bytes) 

{ 

a struct  Context  *ctx,  *context,  *topp; 

a struct  PgpPipeline  *current,  *tailp; 

a unsigned  long  fifolen; 

a unsigned  long  total; 

a i nt  f lag  = 0; 

a interror; 

a pgpAssert(myself); 

a pg p A s s e r t ( my s e I f ->ma g i c ==  JOINMAGIC); 

a context  = (struct  Context  * ) my s e I f ->p r i v ; 

a pg p As s e r t ( c on t e X t ) ; 

a topp  = (struct  Context  *)context->top->priv; 

a pg p As s e r t ( t o p p ) ; 

a tailp  = topp->tail; 


n / * 

a * XXX  If  annotations  get  added,  make  sure  we  only  consider  calls 
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n * outside  them.  I.e.  "if  {context->scope_depth)  return  0;" 

n * / 


□ 

a 


/*  save  off  the  size  of  the  buffered  data  */ 
fifoLen  = pgpFifoSize  (context ->fd,  context ->fifo); 


n 

Q 

n 

D 

n 

D 

n 

a 

n 

a 

□ 

□ 

n 


/*  Check/set  the  size  */ 
if  ( cont ext->s i zeva L i d ) ( 

n if  (bytes  !=  c on t e x t ->s i z e - fifoLen) 

n n /*  It  doesn't  jibe  — this  is  an  error  */ 

n n return  PG P E R R_ S I Z E A D V I S E ; 

} else  { 

n c o n t ex t -> s i z e va L i d = 1; 

n context -> size  = bytes  + fifoLen; 

> 

/*  Set  EOF,  if  needed  */ 
if  (! bytes) 

n context->eof  = 1; 


/*  Check  if  aLL  moduLes  have  vaLid  size;  add  up  the  sizes  */ 
totaL  = 0; 

for  (current  = c on t e x t -> t op ; current;  current  = ctx->next)  ( 
n ctx  = (struct  Context  *)current->priv; 

n pg p A s s e r t ( c t X ) ; 


□ 

□ 

n 

n 

n 

n 

Q 

n 

□ 


n if  ( ! ctx->si zeva L i d)  ( 

H n fLag=1; 

n n break; 

n } 

n totaL  +=  ctx->size; 

> 

if  ( ! f Lag)  { 

n /*  ALL  the  inputs  have  a vaLid  sizes...  Send  a sizeAdvise  */ 

n pgpAssert(taiLp); 


□ 

n 

□ 

} 


error  = t a i L p-> s i z e Ad v i s e ( t a i L p , totaL); 
if  (error) 

n return  error; 


D 

/* 

n 

* 

If 

we  cannot  write,  then 

n 

* 

the  sizeAdvise  worked  to 

n 

*/ 

□ 

if 

( ! 

context->canwrite) 

n 

n 

return  0; 

we  cannot  fLush!  Just  accept  that 
this  point  and  return  success. 


n 

D 

n 

n 

n 

n 

□ 

n 


pgpAssert(tai Lp); 

/* 

* FLush  the  data.  This  wiLL  return  an  error,  or  everything 

* wiLL  be  fLushed  out  of  the  fifo. 

*/ 

error  = DoFLush  (context); 
if  (error) 

n return  error; 
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□ 

n 

Q 

n 

□ 

n 

n 

H 

n 


/*  At  this  point,  check  if  everything  is  EOF.  */ 
for  (current  = context->top;  current;  current  = ctx->next)  { 
n ctx  = (struct  Context  *)current->priv; 

n pg p A s s e r t ( c t X ) ; 

□ 

n i f ( ! ctx->eof  ) 

n n /*  Something  isn't  done  — just  return  success  */ 

n a returnO; 

> 


n /*  Send  a sizeAdvise  (0)  — aLL  the  inputs  are  done  writing.  */ 

n return  taiLp->sizeAdvise(taiLp,  0); 

} 


static  void 

Tea rdown ( s t r u c t PgpPipeLine  *myseLf) 

{ 

n struct  PgpPipeLine  *current,  *taiLp; 

n struct  Context  *ctx,  *context,  *topp; 

n pgpAs se r t ( my s e L f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  JOINHAGIC); 

n context  = (struct  Context  * ) my s e L f -> p r i v ; 

n pg p A s s e r t ( CO n t ex t ) ; 

n topp  = (struct  Context  * ) c on t e x t -> t op->p r i v ; 

n pgpAssert(topp); 


n taiLp  = topp->taiL; 

n con t ex t->t ea rdown  = 1 ; 


n 

for 

(current  = context->top;  current;  current 

o 

B 

ctx  = (struct  Context  * ) c u r r en t->p r i v 

a 

B 

pgpAssert(ctx); 

a 

fl 

if  ( ! c t x-> t e a r do wn  ) 

o 

B 

n return; 

n 

> 

n 

/* 

Everything  can  be  torn  down,  now.  */ 

a 

i f 

( t a i L p ) 

n 

B 

tai Lp->teardown(tai Lp); 

a 

for 

(current  = c on t e x t -> t op ; current;  current 

u 

B 

ctx  = (struct  Context  * ) c u r r en t ->p r i v 

n 

B 

pgpAssert(ctx); 

n 

B 

a 

B 

myself  = ctx->next; 

u 

B 

pg p F i f 0 De s t r oy  (ctx->fd,  ctx->fifo); 

B 

B 

memset(ctx,  0,  s i z e o f ( * c t x ) ) ; 

B 

B 

pgpMemFree(ctx)  ; 

B 

B 

mems e t ( c u r r e n t , 0,  s i z eo f ( * c u r r e n t ) ) ; 

B 

B 

pgpHemFree(current); 

B 

> 

> 


ctx->next)  { 


myself)  { 
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static  struct  PgpPipeLine  * 

j o i n D o C r e a t e ( i n t dowrite,  struct  PgpFifoDesc  const  *fifod) 


n 

struct  PgpPipeLine  *mod; 

n 

struct  PgpFifoContext  *fifop  = NULL; 

n 

struct  Context  *context; 

n 

context  = (struct  Context  *)pgpMeniALLoc(sizeof(*context)); 

n 

if  ([context) 

a 

n return  NULL; 

n 

mod  = (struct  PgpPipeLine  * ) pg pMem A L L o c ( s i z eof ( *mod ) ) ; 

Q 

if  ( ! mod ) { 

n 

n pgpMemFree(context); 

n 

n return  NULL; 

n 

> 

n 

fifop  = pg p F i f o C r e a t e (fifod); 

n 

if  (Ififop)  { 

n 

n pgpHemF ree ( cont ext  ) ; 

n 

n pgpMemFree(mod); 

n 

n return  NULL; 

n 

> 

n 

mod->magic  = JOINMAGIC; 

n 

mod->write  = Write; 

n 

mod->fLush  = FLush; 

n 

mod->si zeAdvi se  = SizeAdvise; 

n 

mod->a nn o t a t e = Annotate; 

n 

mod-> t e a r d own  = Teardown; 

a 

mod->name  = "Join  ModuLe"; 

n 

mod->priv  = context; 

n 

memset(context,  0,  sizeof(*context)); 

n 

context->fd  = fifod; 

n 

context ->fifo  = fifop; 

n 

context->canwri te  = dowrite; 

n 

return  mod; 

> 

struct 

PgpPi pe  L i ne  ** 

pgp J oi nC r ea t e ( s t ru c t PgpPipeLine  **head,  struct  PgpFifoDesc  const  *fifod) 
{ 


n 

struct  PgpPipeLine  *mod; 

n 

struct  Context  *context; 

n 

if  (!head) 

□ 

n return  NULL; 

n 

pgpAssert(fifod); 

n 

mod  = joinDoCreate  (1,  fifod); 

n 

if  ( ! mod  ) 

Q 

n return  NULL; 

Q 

context  = (struct  Context  *)mod->priv; 

n 

context->top  = mod; 
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n context -> tail  = *head; 

a *head  = mod ; 

n return  &context->taiL; 

> 


struct  PgpPipeLine  * 

pg pj o i n Append ( s t ru c t PgpPipeLine  *head) 

{ 

n struct  PgpPipeLine  *mod; 

n struct  Context  *context,  *ctx; 

n ifCIhead) 

n n returnNULL; 

n pgpAssert(head->magic  ==  JOINMAGIC); 

n context  = (struct  Context  *)head->priv; 

n pgpAssert(context); 


n mod  = j o i n DoC rea t e ( 0,  cont ext->f d ) ; 

a if(!mod) 

n n return  NULL; 

n mod->name  = "Join  ModuLe  Appendage"; 

n ctx  = (struct  Context  *)mod->priv; 

n /*  SpLice  in  myseLf  moduLe  */ 

a ctx->next  = context->next; 

n context->next  = mod; 

n ctx->top  = c on t e X t -> t op ; 

n return  mod; 

} 


s i ze_t 

pgp J o i nBuf f e r ( s t r u c t PgpPipeLine  *myseLf,  byte  const  *buf,  size_t  Len) 
{ 

n struct  Context  *context; 


a pgpAssert( myseLf) ; 

n pgpAssert(myseLf->magic  ==  JOINMAGIC); 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pg  p A s s e r t ( c on  t e X t ) ; 


n return  pgpFifoWrite  ( c on t e x t ->f d , c on t e x t ->f i f o , buf,  Len); 

} 
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/* 

* pgpJo-in.h  --  Append  multiple  streams  together  into  a single  output,  and 

* buffer  as  needed 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r I o r d0M I T . E D U> 

★ 

* $Id:  pgpJoin.h, V 1.4. 2.1  1 997/06/07  09:51:1  6 mhw  Exp  $ 

*/ 

/* 

* A join  module  will  combine  multiple  inputs  into  a single  output. 

* It  will  first  take  all  the  data  from  the  first  input  (the  input 

* from  the  creation  function)  until  it  gets  a S i zeAdvi se ( 0 ) . Then  it 

* will  start  reading  from  the  next  input  in  line,  until  it  is  done, 

* and  so  on  down  the  list  of  inputs. 

* 

* If  an  input  pipeline  that  is  not  the  current  writer  tries  to  write 

* data,  it  will  be  buffered  in  that  input's  fifo. 

* 

* Data  that  is  buffered  will  be  flushed  out  when  that  input  is 

* allowed  to  write,  which  is  when  all  previous  writers  have  sent 

* a sizeAdvise(0). 

*/ 

#ifndef  PGPJOIN.H 
^define  PGPJOIN.H 

^include  "pgpUsuals.h" 

#ifdef  cplusplus 

extern  "C"  { 

#end i f 

struct  PgpPipeline; 

#ifndef  TYPE. PGPPIPELINE 

//define  T YP  E.PG  P P I P E LI  N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

// e nd i f 

struct  PgpFifoDesc; 

//ifndef  TYPE.PGPFI  FODESC 

//define  T YPE.  PG  P F I F 0 D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

//endi  f 

/* 

* Create  a join  module.  The  caller  needs  to  save  the  head  pointer 

* for  later  use.  */ 

struct  PgpPipeline  PGPExport  ** pg p J o i n C r ea t e (struct  PgpPipeline  **head, 
n n n n structPgpFifoDescconst*fd); 

/* 

* Append  a new  input  to  the  join  module.  This  will  insert  the 

* new  pipeline  just  after  the  pointer  to  the  head  passed  in.  This 

* function  returns  a pointer  to  the  join  module  associated  with 

* myself  input. 
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*/ 

struct  PgpPipeLine  PGPExport  *pg p J o i n Appe n d (struct  PgpPipeLine  *head); 

/* 

* Add  data  to  the  buffer  in  the  pipeline  module  passed  in.  This 

* data  will  be  flushed  out  later. 

*/ 

size_t  PGPExport  pg p J o i nBu f f e r (struct  PgpPipeline  *myself,  byte  const  *buf, 
n size_t  len); 

#ifdef  __cplusplus 

> 

#e nd i f 

#endif  /*  PGPJ0IN_H  */ 
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/* 

* pgpMemMod.c  --  Module  to  output  to  a fixed-size  memory  buffer 

* 

* If  we  overflow  the  buffer,  we  discard  the  rest.  That  is  not  an  error. 

* However  we  provide  an  annotation  to  allow  reading  how  much  we  would 

* have  written. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpMemMod . c , V 1.4. 2. 3 1997/06/07  09:51:17  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#include  "config.h" 
#endi f 

^include  <stdio.h> 


#include 
#include 
^include 
^include 
#include 
#i nc lude 
^include 


pgpDebug.h" 
pgpMemMod . h" 
pgpAnnotate.h 
pgpMem. h" 
pgpErr. h" 
pgpPipeline.h 
pgpUsua I s . h " 


^define  M EHHO DM AG  I C n0x f e e dba be 


/* 

* Note  that  byte_count  may  come  to  exceed  buf_size,  in  which  case  we 

* discard  the  overflow.  We  provide  an  annotation  to  read  the  total  number 

* of  bytes  written. 

*/ 

struct  memHod Con t ex t { 


D 

int 

scope_depth; 

n 

i nt 

enable;nn  n 

n 

D 

/* 

True  i 

f accepting  data,  false  to  discard 

□ 

size 

_t  buf_si ze;n 

n 

n 

/* 

Total 

size  of  memory  buffer  */ 

n 

size 

_t  byte_count;n 

n 

n 

/* 

Numbe  r 

of  bytes 

we  have  been  given  */ 

n 

>; 

byte 

*buf;n  n n 

n 

n 

/* 

Start 

of  memo  ry 

buffer  */ 

static  int 

memFlush  (struct  PgpPipeline  *myself) 

{ 

n struct  memModContext  *context; 
n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  MEMMODHAGI C ) ; 

a context  = (struct  memModContext  *)myself->priv,- 

n pgpAssert  (context); 

n return  0; 

} 


/*  Write  what  is  given,  but  disard  any  overflows.  */ 
static  size_t 
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memWrite  (struct  PgpPipeLine  *myseLf,  byte  const  *buffer,  size_t  size, 
n int  *error) 

{ 

n struct  memHodContext  *context; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  M E MHO  DM AG  I C ) ; 


n context  = (struct  memHodContext  *)myseLf->priv; 

n pgpAssert  (context); 


n 

/* 

If  disabled,  discard 

data  * / 

n 

T f 

( ! context->enable) 

Q 

B 

return  size; 

Q 

i f 

( context->buf _si ze  > 

context->byte_count) 

n 

B 

size_t  avail  = context->buf_size  - context->byte_count; 

n 

B 

size_t  to_write  = mi 

n (avail,  size); 

Q 

B 

if  (to_write) 

u 

B 

H memcpy  (context- 

>buf  + context->by te_ 

count,  buffer. 

Q 

> 

n if  (error) 
n n *error=0; 
n context->byte_count  +=  size; 
n return  size; 

} 


/* 

* We  accept  an  annotation  to  return  the  number  of  bytes  we  were  asked 

* to  write.  We  also  provide  an  annotation  to  return  the  size  of  the 

* buffer. 

* We  return  our  results  in  the  passed-in  string  pointer,  which  must  be 

* of  size  s i z e o f ( s i z e_ t ) . 

* The  ENABLE  annotation  causes  us  to  turn  on  and  off  whether  we  accept  data. 
*/ 

static  int 

memAnnotate  (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
a byte  const  *string,  size_t  size) 

{ 

n struct  memHodContext  *context; 


n ( VO i d ) o r i g i n; n /*  Avoid  warning  */ 
n (void)size; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  M E MHO DH AG  I C ) ; 


a context  = (struct  memHodContext  * ) my s e I f ->p r i v ; 
n pgpAssert  (context); 


n switch  (type)  ( 

n case  PGPANN  HEM  BYTECOUNT: 


B 

B 

pgpAssert 

(string); 

B 

B 

pgpAssert 

(size  ==  s i zeof ( s i ze_t ) ) ; 

B 

B 

*(size_t 

*)string  = c o n t e x t -> by t e_ c ou n t ; 

B 

B 

return  0; 
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n case  PG  P AN  N_ri  EH_BU  F S I Z E : 
n n pgpAssert  (string); 

n n pgpAssert  (size  ==  s i z eo f ( s i z e_ t ) ) ; 
n n *(size_t  *)string  = c on t e x t ->bu f _s i z e ; 
n n return  0; 

n case  PGPANN_HEM_ENABLE : 
n n pgpAssert  (string); 

a n pgpAssert  (size  ==  1); 

n n c on t ex t ->e n a b L e = *(byte  *)string; 

n n return  0; 

n default: 

n n ;n  n /*do  nothing*/ 

n > 

n PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 
n pgpAssert (context->scope_depth  !=  -1); 

n return  0; 

} 

static  int 

memSi zeAdvi se  (struct  PgpPipeLine  *myseLf,  unsigned  Long  bytes) 
( 

n struct  memHodContext  *context; 


n (void)bytes; 


n 

pgpAssert 

(myself); 

Q 

pgpAssert 

(myseLf->magi c ==  HEHMODHAGI C ) ; 

n 

context  = 

(struct  memHodContext  * ) my s e L f ->p r i v ; 

n 

pgpAssert 

(context); 

n 

> 

return  0; 

static  void 

memTeardown  (struct  PgpPipeLine  *niyseLf) 

f 

□ 

struct  memHodContext  *context; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

(myse Lf->magi c ==  H E HHO DH AG  I C ) ; 

□ 

context  = 

(struct  memHodContext  * ) my s e L f ->p r i v ; 

D 

pgpAssert 

(context ) ; 

n 

memset  (context,  0,  sizeof  (*context)); 

n 

pgpMemF  ree 

(context); 

fi 

memset  (myself,  0,  sizeof  (*myseLf)); 

n 

pgpHemFree 

(myself); 

> 

struct  PgpPipeLine  * 

pgpMemnodCreate  (struct  PgpPipeLine  **head,  char  *buf,  size_t  buf_size) 

{ 

n struct  PgpPipeLine  *mod; 

a struct  memMod C on t e X t *context; 
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n if  ( ! head ) 

n n return  NULL; 

n *head  = 0; 

n context  = (struct  memMod C on t e x t * ) pg pM em A L L o c ( s i z eo f ( * c on t e x t ) ) ; 
a if  (!context) 
n n return  NULL; 

n mod  = (struct  PgpPipeline  * ) pg pM em A L L o c ( s i z eo f ( *mod  ) ) ; 
n if  ( ! mod ) { 
n a pg pH em F r e e ( c on t ex t ) ; 

a a return  NULL; 

a > 

a mod->magic  = MEHHODMAGIC; 

a mod->urite  = memWrite; 

a mod->fLush  = memFLush; 

a mod-> s i z e Ad V i s e = memS i z e Adv i s e; 

a mod->a n no t a t e = memAnnotate; 

a mod-> t ea r d o wn  = memTeardoun; 

a mod->name  = "Write  memory"; 

a mod->priv  = context; 

a memset  (context,  0,  sizeof  (*context)); 
a context->buf  = (unsigned  char  *)  buf; 
a c o n t e X t ->bu f _ s i z e = buf_size; 

a context->enabLe  = 1; 

a *head  = mod; 

a return  mod; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpMemMod.h  --  Module  to  output  to  a fixed-size  memory  buffer 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg pMemMod . h , V 1.2. 2.1  1997/06/07  09:51:17  mhw  Exp  $ 

*/ 

#ifndef  PGPMEMMOD.H 
#define  PGPMEMMOD.H 

#ifdef  ..cpLuspLus 
extern  "C"  { 

# e nd i f 

struct  PgpPipeLine; 

struct  PgpPipeLine  PGPExport  * 

pgpHemModCreate  (struct  PgpPipeLine  **head,  char  *buf,  size.t  buf.size); 

#ifdef  ..cpLuspLus 

> 

#endi f 

#endif  /*  PGPMEMMOD.H  */ 
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/* 

* pgpPipeline.h  --  This  is  the  code  that  is  the  public  part  of  a pipeline 

* module,  and  defines  everything  that  all  the  pipelines 

* shouldexport. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa r I o r dSM I T . E D U> 

* 

* This  is  a Public  API  F u n c t i o n / S t r u c t u r e Header. 

* 

* $Id:  pgpPi pe I i ne . h, V 1.3. 2.1  1997/06/07  09:51:17  mhw  Exp  $ 

*/ 

#ifndef  PGPPIPELINE.H 
#define  PGPPIPELINE.H 

^include  "pgpUsuals.h" 

#ifdef  cplusplus 

extern  "C"  { 

# e nd i f 


struct 

n 

□ 

n 

Q 

Q 


PgpPi pe line  { 

/*  A means  to  check  if  this  is  a valid  module 

* number  in  the  structure  for  each  different 

* and  compare  it.  Simple,  eh? 

*/ 

wo  rd32Q  magic; 


--  put  a magic 
pipeline  module 


n 

□ 

□ 

n 

□ 

n 

Q 

□ 

□ 

□ 


/*  Exported  Pipeline  Functions  that  all  Pipelines  support  */ 
size.tn  (*write)  (struct  PgpPipeline  *myself,  byte  const  *buffer, 
n n size.t  size,  int  *error); 

intn  (*flush)  (struct  PgpPipeline  *myself); 

intn  (*annotate)  (struct  PgpPipeline  *myself, 

n n struct  PgpPipeline  *origin,  int  type, 

n n byte  const  *string,  size.t  size); 

intn  ( * s i z e Ad V i s e ) (struct  PgpPipeline  *myself, 

n n n unsigned  long  bytes); 

voidn  (*teardown)  (struct  PgpPipeline  *myself); 


/*  Some  exported  information  about  this  particular  module  */ 
char  const  *n  name; 


n /*  A pointer  to  mod u I e-s p e c f i c data  */ 

n voidn  *priv; 

>; 

#ifndef  T Y P E. PG PP I P E LI N E 

#define  T Y P E.PG PP I PE  LI N E 1 

typedef  struct  PgpPipeline  PgpPipeline; 

#endi  f 


#ifdef  ..cplusplus 
} 

#end i f 


#endif  /*  PGPPIPELINE  H */ 
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/* 

* pgpProtoHod . c --  a prototype  module  for  PGP 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  <wa  r L o r dSH  I T . E D IJ> 

* 

* $Id:  pg pP r o t oMod . c , V 1.3. 2.1  1 997/06/07  09:51:18  mhu  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#end i f 

//include  <stdio.h> 


//i  nc  Lude 
//i  nc  L ude 
#incLude 
//include 


pgpDebug . h” 
pgpAnnotate.h 
pgpMem . h " 
pgpPi pe I i ne  . h 


/* 

* This  is  a magic  number  for  use  within  this  module.  It  is  used  to 

* make  sure  the  passed-in  module  is  a member  of  this  type.  Just  a 

* little  extra  s a n i t y- c h e c k i ng . 

* 

* You  should  set  this  value  to  some  "random"  32-bit  number. 

*/ 


//define  HAGICn  0x0 

struct  Context  { 
n byte  bu f f e r C BU F S I Z D ; 

n byte  *bufptr; 

n si ze_t  buf  Len; 

n struct  PgpPipeline  *taiL; 

n int  scope_depth; 

>; 

static  int 

DoFLush  (struct  Context  *context) 
{ 


Q 

int  error  = 0; 

Q 

SI ze_t 

r e t L e n ; 

n 

/*  Try 

to  flush 

anything  that  we  have 

buffered  */ 

□ 

while 

(context- 

>buf  Len)  ( 

□ 

Q 

ret  Len 

= context->ta i L->wri te 

(context ->tai L, 

a 

D 

□ 

n n 

context->bufptr. 

D 

n 

□ 

n □ 

context->bufLen, 

n 

D 

□ 

n n 

Serror); 

□ 

n 

context 

->bufLen  -=  retlen; 

n 

n 

mems  e t 

(context ->bufptr,  0,  retlen); 

n 

n 

context 

->bufptr  +=  retlen; 

n 

n 

if  (error) 

□ 

n 

n 

return  error; 

n 

> 

□ 

return 

error; 

> 
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static  int 

Flush  (struct  PgpPipeline  *myseLf) 
{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  MAGIC); 


a 

context  = 

n 

pgpAssert 

u 

pgpAssert 

myself->priv; 
(context); 
(context->tai 1); 


n error  = DoFlush  (context); 

n if(error) 

n n returnerror; 

n return  c o n t e x t -> t a i I ->f  I u s h ( c on t ex t -> t a i I ) ; 

} 

static  si ze_t 

Write  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 


n 

struct  Context  *context; 

n 

size_t  wri 

tten  = 0; 

Q 

pgpAssert 

(myself); 

n 

pgpAssert 

(myse 1 f->magi c ==  MAGIC); 

n 

pgpAssert 

(error); 

a 

context  = 

myself ->priv; 

n 

pgpAssert 

(context); 

n 

pgpAssert 

(context->tai 1 ) ; 

n 

do  { 

n 

B 

*error  = DoFlush  (context) 

/ 

n 

B 

i f 

( *e  r ro  r ) 

Q 

B 

B 

return  written; 

□ 

B 

/* 

□ 

B 

* 

Now  that  we  don't  have 

any t h i ng 

buffered,  bri 

ng  in  more 

n 

B 

* 

data  from  the  passed-in 

buffer. 

process  it,  and  buffer 

n 

B 

* 

that  to  write  out . 

Q 

B 

*/ 

n 

B 

c 0 n t ex t ->bu f p t r = context- 

>buffer; 

D 

B 

/* 

XXX  Set  con t e X t ->b u f 1 e n 

to  length  of  read-in 

material  */ 

n 

B 

/* 

XXX  Read/processed  data 

into  c on t e X t ->bu f f e r 

*/ 

u 

B 

bu  f 

+ = c on t ex t->b u f 1 e n ; 

n 

B 

size  -=  context->buf len; 

n 

B 

written  +=  c on t e x t ->bu f 1 e n 

r 

n 

> 

while  ( c on t ex t ->bu f 1 e n > 0); 

n 

/* 

Conti nue 

until  we  have  nothing 

buffered 

*/ 

n return  written;n 

} 
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static  int 

Annotate  (struct  PgpPipeLine  *myseL-f,  struct  PgpPipeLine  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e L f ->ma g i c ==  MAGIC); 


context  = 
pgpAssert 
pgpAssert 


myself->priv; 
(context); 
(context -> tail); 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 

n error  = c on t e x t -> t a i I ->a nno t a t e ( c on t e x t -> t a i I , origin,  type, 

n n n n n string,  size); 

n if  (lerror) 

n n PGP_S COPE_DEPTH_U PD  ATE ( con t ex t->s cope_dep t h , type); 

n pg p A s s e r t ( c on t ex t ->s cope_d e p t h !=  -1); 

n return  error; 

} 


static  int 

SizeAdvise  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 

{ 

n struct  Context  *context; 

n interror; 

n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  MAGIC); 

n context  = my s e I f ->p r i v; 

n pgpAssert  (context); 

n pgpAssert  ( context->ta i I ) ; 

n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 

n return  c on t ex t -> t a i I -> s i z e Ad v i s e ( c on t e x t -> t a i I , bytes) 

} 


static 

void 

Teardown  (struct 

T 

PgpPipeline  *myself) 

Q 

struct  Context  *context; 

n 

pgpAssert 

(myself); 

n 

pgpAssert 

( my se 1 f ->ma g i c ==  MAGIC); 

□ 

context  = 

myself->priv; 

□ 

pgpAssert 

(context)  ; 

□ 

if  ( cont ext->ta i 1 ) 

n 

n c on t ex t -> t a i 1 -> t ea r down  (context- 
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n 

memset  (context,  0,  sizeof  (*context)); 

Q 

pgpMemFree  (context); 

□ 

memset  (myself,  0,  sizeof  (*myseLf)); 

u 

pgpMemFree  (myself); 

y 

struct 

PgpPipeline  ** 

Create  (struct  PgpPipeLine  **head) 


n 

struct  PgpPipeline  *mod; 

tt 

struct  Context  *context; 

Q 

if  ( ! h ea  d ) 

n 

a return  NULL; 

□ 

context  = pgpMemAlloc  (sizeof  (*context)); 

n 

if  (Icontext) 

d 

n return  NULL; 

□ 

mod  = pgpMemAlloc  (sizeof  (*mod)); 

B 

if  ( ! mod  ) { 

B 

n pgpMemFree  (context); 

B 

n return  NULL; 

B 

> 

B 

mod->magic  = MAGIC; 

B 

mod->write  = Write; 

B 

mod->flush  = Flush; 

B 

mod->s i z e Ad V i s e = SizeAdvise; 

B 

mod->a n n 0 t a t e = Annotate; 

B 

mod->t ea rdown  = Teardown; 

B 

mod->name  = "Prototype";  /*  XXX  Set  myself  to  the  module  name!  */ 

B 

mod->priv  = context; 

B 

memset  (context,  0,  sizeof  (*context)); 

B 

context->bufptr  = context->buffer; 

B 

context->tai  1 = *head; 

B 

♦head  = mod; 

B 

return  & c on t ex t -> t a i 1 ; 

} 
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/* 

* pgpRot13Hod.c  --  A pipeline  module  to  rotate  by  13  characters.  A stupid 

* e n c r y p t i o n / d e c r y p t i on  link  for  PGP! 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpRotl 3Mod . c,v  1.2. 2.1  1997/06/07  09:51:18  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#end i f 

^include  <stdio.h> 


#include 
#i nc lude 
^include 


pgpDebug . h" 
pgpPi pe  I i ne  . h 
pgpRot 1 3Mod . h 


^define  R0T13MAGICn  0x13263952 


struct  Rot13Context  f 


o 

byte 

bufferCBUFSIZD; 

n 

byte 

*bufptr; 

n 

size 

_t  buf 1 en; 

n 

struct  PgpPipeline  *tail; 

>; 

static  size_t 


r 0 1 1 3 

(byte  const  *input,  size_t 

inlen. 

byte 

•k 

output,  size_t  outlen) 

□ 

si ze_t 

1 e n = 0 ; 

D 

char  c 

n 

while 

(inlen  SS  outlen) 

{ 

n 

n 

c = inputClen]; 

n 

n 

outputCl en++D  = 

( ( (c 

> = 

■ a ' 

&& 

O 

A 

II 

3 

'ww' 

Q 

n 

□ n 

( c 

> = 

' A ' 

&& 

o 

A 

II 

3 

•o 

o 

+ 

□ 

n 

□ D 

((c 

> = 

' n ' 

&& 

o 

A 

II 

N 

n 

n 

□ n 

( c 

> = 

■ N ' 

&s 

c <=  'Z'  ))  ? c - 13  : 

n 

□ 

□ n 

c); 

n 

n 

inlen--; 

n 

n 

out  1 en  — ; 

Q 

> 

n 

return 

1 en; 

> 


static  int 

DoFlush  (struct  Rot13Context  *context) 

{ 

n size_t  retlen; 

n interror=0; 

buffered  */ 

Ccontext->tai I, 
context->bufptr, 
context->buflen. 


/*  Try  to  flush  anything  that  we  have 
while  ( con t ex t ->buf I en  ) { 
n retlen  = c on t e x t -> t a i I ->w r i t e 

n n n n 

n D n n 
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Q 

n 

n n 

H 

Serror); 

Q 

D 

context->buf len 

-=  retlen; 

n 

□ 

memset  (context 

->bufptr,  0, 

retlen); 

n 

a 

context->buf pt  r 

+=  retlen; 

n 

n 

if  (error) 

n 

□ 

n return 

error; 

n 

> 

n 

return 

error; 

> 

static  int 

Flush  (struct  PgpPipeline  *myseLf) 

{ 

n struct  Rot13Context  *context; 

n interror; 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  R0T13MAGIC); 

n context  = my s e I f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  (context->tail); 

n error  = DoFLush  (context); 

n if  (error) 

n n returnerror; 

n return  c o n t e x t -> t a i I -> f I u s h ( c o n t ex t -> t a i I ) ; 

} 


static  size_t 

rot13Write  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size, 
n int*error) 

{ 

n struct  Rot13Context  *context; 

n intmyerror=0; 

n size_t  retlen,  written  = 0; 

n pgpAssert  (myself); 

n pgpAssert  (myself->magic  ==  R0T13MAGIC); 


context  = my s e I f ->p r i V ; 
pgpAssert  (context); 
pgpAssert  ( c on t e x t -> t a i I ) ; 


H 

Q. 

O 

n 

n 

my e r r o r 

= DoFlush  (context); 

Q 

n 

i f 

(my error)  { 

n 

Q 

n 

if  (error) 

c 

a 

u 

n *error  = myerror; 

Q 

n 

n 

return  written; 

n 

□ 

> 

Q 

n 

/* 

s 

□ 

* 

Now 

that  we  dont  have  anything  buffered,  bring  in  more 

n 

n 

* 

data 

from  the  passed-in  buffer,  rotl3  it,  and  buffer 

□ 

n 

* 

that 

to  write  out. 

□ 

n 

*/ 
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n n c on t ex t ->bu f p t r = c on t e x t -> b u f f e r ; 

n n context->bufLen  = rot13  (buf,  size,  context->buffer,  BUFSIZ); 

n n buf  +=  context->buf Len; 

n n size  -=  c on t ex t ->bu f L e n ; 

n n written  +=  con t e x t ->bu f I e n ; 

n > while  ( c on t ex t ->bu f I en  > 0); 

n /*  Continue  until  we  have  nothing  buffered  */ 

n return  written; 

> 


static  i nt 

r o t 1 3 Anno t a t e (struct  PgpPipeline  *myself,  struct  PgpPipeline  *origin, 
n int  type,  byte  const  *string,  size_t  size) 

{ 

n struct  Rot13Context  *context; 

n i nt  error  = 0; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  R0T13MAGIC); 


n context  = my s e I f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c o n t ex t -> t a i I ) ; 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 


n return  co n t ex t -> t a i I ->a n no t a t e ( c on t e x t -> t a i I , origin,  type, 

n n n n n string,  size); 

> 


static  int 

rotl 3Si zeAdvi se  (struct  PgpPipeline  *myself,  unsigned  long  bytes) 
{ 

n struct  Rot13Context  *context; 

n interror=0; 


n pgpAssert  (myself); 

n pgpAssert  ( my s e I f ->ma g i c ==  R0T13MAGIC); 


n context  = my s e I f ->p r i v ; 

n pgpAssert  (context); 

n pgpAssert  ( c on t ex t -> t a i I ) ; 


n error  = DoFlush  (context); 

n if  (error) 

n n returnerror; 

a return  c on t ex t -> t a i I -> s i z e Ad v i s e ( c o n t e x t -> t a i I , bytes); 

> 


static  void 

ro t 1 3Tea rdown  (struct  PgpPipeline  *myself) 

{ 

n struct  Rot13Context  *context; 
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n 

pgpAssert  (myself); 

n 

pgpAssert  (myself->magic  ==  R0T13MAGIC); 

n 

context  = my s e 1 f ->p r i V ; 

n 

pgpAssert  (context); 

n 

if  (context->tail) 

n 

n con t ex t-> t a i 1 -> t ea rdown  ( c on t e x t -> t a i 1 ) ; 

fi 

memset  (context,  0,  sizeof  (*context)); 

n 

memFree  (context); 

n 

memset  (myself,  0,  sizeof  (*myself)); 

n 

memFree  (myself); 

> 

struct  PgpPipeline  ** 

rot13Create  (struct  PgpPipeline  **head) 


n 

struct  PgpPipeline  *mod; 

a 

struct  Rot13Context  *context; 

a 

if  ( ! head ) 

n 

a return  NULL; 

□ 

context  = memAlloc  (sizeof  (*context)); 

□ 

if  (Icontext) 

n 

n return  NULL; 

n 

mod  = memAlloc  (sizeof  (*mod)); 

n 

if  ( ! mod  ) -C 

n 

n memFree  (context); 

Q 

n return  NULL; 

n 

> 

n 

mod->magic  = R0T13HAGIC; 

a 

mod->write  = rot13Write; 

n 

mod->write  = Flush; 

n 

mod-> s i z e Ad V i s e = r o t 1 3 S i z e Ad v i s e ; 

o 

mod->annotate  = rot13Annotate; 

n 

mod->tea rdown  = rot  1 3Tea rdown; 

n 

mod->name  = "Rot  13  Module"; 

n 

mod->priv  = context; 

n 

memset  (context,  0,  sizeof  (*context)); 

n 

cont ext->buf pt r = c on t ex t ->b u f f e r ; 

Q 

c on t e X t -> t a i 1 = *head; 

o 

*head  = mod ; 

n 

return  &context->tail; 
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/* 

* pgpRotl 3Hod . h --  definitions  for  a stupid  encryption  pipeline:  rot13 

•k 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpRot13Mod.h,v  1.2. 2.1  1 997/06/07  09:51:1  8 mhw  Exp  $ 

*/ 

Sifdef  __cpLuspLus 
extern  "C"  { 

#e  nd i f 

struct  PgpPipeLine; 

struct  PgpPipeLine  ** r o t 1 3 C r ea t e (struct  PgpPipeLine  **head); 

#ifdef  __cpLuspLus 

> 

# e n d i f 
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/* 

* pgpSplit.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpSplit.c, V 1.3. 2.1  1997/06/07  09:51:18  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h" 

# e nd i f 

#incLude  <stdio.h> 


#i nc  Lude 
#incLude 
#i nc  L ude 
//include 
//include 


pgpDebug . h" 
pgpSpLit.h" 
pgpAnnotate . h 
pgpMem. h" 
pgpPipeline.h 


#if  (BUFSIZ  < 16384)  &S  (MACINTOSH  ||  WIN32) 
#define  kPG PS p L i t Bu f S i z en  16384 

//else 

Sdefine  kPG PSp L i t Buf S i z en  BUFSIZ 

//end  i f 


//define  SPLITHAGICn 


0x1 1223344 


//define  MAXTAILSn  2 


struct 

□ 

a 

□ 

a 

n 

>; 


Context  { 

byte  bu  f f e r C kPG  PS  p L i t Bu  f S i z e D ; 
byte  const  *bufptr,  *bufend; 
int  curtail,  numtails; 
struct  PgpPipeline  * t a i L C M A XT A I LS D ; 
int  scope_depth; 


/* 

* If  we  got  an  error  while  writing,  the  pending  write  data  gets  copied  to 

* the  context's  buffer  for  r e- t r a n sm i s s i o n Later.  (Yes,  this  is  needed  to 

* preserve  the  semantics  of  write().) 

*/ 


static  int 

Do F L us h ( s t r u c t Context  *context) 
{ 


n 

struct 

PgpPi pe 

n 

int  error; 

Q 

si z e_t 

Len; 

n 

/ * Try 

to  f L u s 

a 

Len  = 

context-: 

□ 

while 

(context 

Et 

s 

t a i 1 p 

n 

□ 

while 

n 

n 

n 

Q 

n 

n 

Q 

n 

n 

►curtail  !=  c o n t e x t ->n urn t a i L s ) { 
context->tai LCcontext->curtai  ID; 

. e n ! = 0 ) { 

Len  = t a i L p->w r i t e ( t a i I p,  con t ex t->buf p t r , 
n n Len,8error); 

c o n t e X t ->bu f p t r +=  len; 
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Q 

□ 

n 

a 

a 

D 

n 

n 

n 


n n if(error) 

n n n returnerror; 

n } 

n c o n t e X t ->bu f p t r = c on t e x t ->bu f f e r ; 

n Len  = context->bufend  - context->bufptr; 

a c o n t e X t -> c u r t a i L ++ ; 

> 

memset(context->buffer,  0,  Len); 

c on t e X t ->b u f p t r = c on t e x t ->bu f end  = c o n t ex t ->bu f f e r ; 


n return0; 

} 


static  i n t 

FLushCstruct  PgpPipeLine  *myseLf) 

{ 


s 

struct 

PgpPipeLine  *taiLp; 

u 

struct 

Context  *context; 

n 

int  error,  i; 

u 

pgpAssert(myseLf); 

a 

pg p A s s e r t ( my s e L f ->ma g i c ==  SPLITMAGIC); 

n 

context 

= (struct  Context  *)myseLf->priv; 

Q 

pgpAssert(context); 

n 

pgpAssert(context->tai L); 

n 

error  = 

DoFLush(context); 

□ 

if  (error) 

n 

□ 

return  error; 

n 

for  ( i 

= 0;  i < context->numtai Ls;  i++)  { 

Q 

Q 

taiLp  = c on t e X t -> t a i L C i 3 ; 

n 

Q 

error  = t a i L p->f L u sh ( t a i L p ) ; 

n 

n 

if  (error) 

n 

n 

n return  error; 

n 

> 

n 

> 

return 

0; 

static 

s i ze_t 

WriteCstruct  PgpPipeLine  *niyseLf,  byte  const  *buf,  size_t  size, 
{ 


□ 

struct 

PgpPipeLine  *taiLp; 

n 

struct 

Context  *context; 

n 

si ze_t 

bLock,  pending,  myseLfwrite; 

n 

byte  const  *tmpbuf; 

n 

s i ze_t 

written  = 0; 

□ 

int  i ; 

int  *error) 


n pgpAs se r t ( my se L f ) ; 

n pg p A s s e r t ( my s e L f ->ma g i c ==  SPLITMAGIC); 

n pg p A s s e r t ( e r r o r ) ; 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pg  p A s s e r t ( c o n t e X t ) ; 

n pg p A s s e r t ( c on t ex t -> t a i L ) ; 
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/*  Write  out  anything  stiLL  hanging  around  from  Last  time  */ 
*error  = Do F L u s h ( c on t e x t ) ; 


o 

i f 

( *e  r ro  r ) 

n 

D 

return 

written; 

n 

/* 

Okay,  now  write 

out 

the  new  stuff.  */ 

s 

while  (size 

) { 

□ 

Q 

/* 

Never  write 

more  in  one  block  than  we  can  buffer  */ 

□ 

Q 

block 

= mi 

nCsize,  sizeof(context-> buffer)); 

□ 

n 

/* 

Now 

write  out  the  current  block  to  each  of  the  tails.  */ 

n 

n 

for 

( i 

= 0 

; -i  < 

con t ex t->numt a i L s ; i++)  { 

n 

n 

B 

t a i L p = 

context->tailCi];n  /*  Current  tail  */ 

□ 

n 

B 

t mpbu  f 

= buf;n  n /*  Current  write  pointer  */ 

Q 

Q 

B 

pe  nd i ng 

= bLock;n  /*  Current  size  */ 

n 

n 

B 

do 

{ 

n 

la 

B 

B 

myselfwrite  = t a i L p-> w r i t e ( t a i L p , tmpbuf. 

n 

n 

B 

B 

° n n pending,  error); 

n 

n 

B 

B 

tmpbuf  +=  myselfwrite; 

a 

n 

B 

B 

pending  -=  myselfwrite; 

n 

n 

B 

B 

if  (!*error) 

n 

n 

B 

B 

n continue; 

n 

□ 

B 

B 

/*  — Error  handling  --  */ 

□ 

n 

B 

B 

/*  Remember  how  far  we've  gotten  */ 

n 

□ 

B 

B 

c on t ex t -> c u r t a i L = i; 

n 

D 

B 

B 

/* 

n 

B 

B 

B 

* If  we  get  an  error  while  writing  to  the 

n 

B 

B 

B 

* first  tail,  we  don't  need  to  buffer  the 

Q 

B 

B 

B 

* bytes  after  the  current  write  pointer. 

n 

B 

B 

B 

* since  we've  never  done  anything  with  them 

n 

B 

B 

B 

* so  we  aren't  responsible  for  them. 

n 

B 

B 

B 

*/ 

Q 

B 

B 

B 

if  (i  ==0) 

n 

B 

B 

B 

n block  -=  pending; 

n 

B 

B 

B 

/* 

n 

B 

B 

B 

* If  we  get  an  error  while  writing  to  the 

n 

B 

B 

B 

* Last  tail,  we  don't  need  to  remember  the 

n 

B 

B 

B 

* bytes  we've  managed  to  write  to  every 

n 

B 

B 

B 

* tail;  only  the  following  bytes,  which 

n 

B 

B 

B 

* we've  accepted  responsibility  for  by 

□ 

B 

B 

B 

* writing  out  somewhere  else. 

Q 

B 

B 

B 

*/ 

n 

B 

B 

B 

if  (i  ==  con t ex t->numt a i L s-1 ) { 

□ 

B 

B 

B 

n buf=tmpbuf; 

n 

B 

B 

B 

n written  +=  block-pending; 

n 

B 

B 

B 

n block  = pending; 

n 

B 

B 

B 

> 

n 

B 

B 

B 

/*  Copy  data  to  buffer  for  later  DoFLushC)  *, 

n 

B 

B 

B 

memcpy(context->buffer,  buf,  block); 

n 

B 

B 

B 

context->bufend  = context->buffer+bLock; 

n 

B 

B 

B 

context ->bufptr  = context ->bufend-pending; 

n 

B 

B 

B 

/*  And  return  the  amount  written  plus  buffer 

n 

B 

B 

B 

return  written  + block; 

n 

B 

B 

> while 

(pending); 

n 

B 

> 

Q 

B 

/*  Advance 

pointers  and  go  on...  */ 

n 

B 

buf 

+ = 

block; 
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n n 

□ □ 

n > 

n return  written ;n 

> 

/* 

* Annotate  is  a bit  magic.  The  problem  is  that  annotations  are 

* defined,  as  a class,  to  atomically  succeed  or  fail.  One  particular 

* annotation  might  play  fast  & loose  with  this,  but  we  aren't  allowed 

* to  break  it  for  *all*  annotations. 

* 

* But  if  we  pass  an  annotation  down  the  first  tail,  and  it  succeeds 

* (no  error  returned),  then  pass  it  down  the  second,  and  get  an  error, 

* things  are  a bit  screwed  up,  because  lots  of  modules  saw  the  annotation 

* succeed  and  altered  their  state  accordingly. 

* 

* The  solution  seems  to  be  to  pass  annotations  down  *one  tail  only*, 

* which  we  use  the  first  tail  for.  Other  tails  see  data,  but  no 

* annotations. 

*/ 

static  int 

An  no t a t e ( s t r u c t PgpPipeline  *myself,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n struct  Context  *context; 

n interror; 

n pg p A s s e r t ( my se I f ) ; 

n pg p A s s e r t ( my s e I f ->ma g i c ==  SPLITHAGIC); 

n context  = (struct  Context  * ) my s e I f ->p r i v ; 

n pg p A s s e r t ( c on t e X t ) ; 

n pg p As s e r t ( c on t ex t -> t a i I ) ; 

n error  = Do F I us h ( con t ex t ) ; 

n if  (error) 

n n returnerror; 

n error  = c on  t ex  t ->  t a i I C 0 ] ->a  nno  t a t e ( c on  t ex  t ->  t a i I C 0 II  , origin,  type, 

n n n n n string,  size); 

n if  (Jerror) 

n n PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 

n pgpAssert(context->scope_depth  !=  -1); 

n return  error; 

> 

/* 

* Note  that  because  of  the  way  we  do  annotations,  if  a SizeAdvise 

* arrives  while  we're  inside  a scope,  we  can't  pass  it  down  to  any  but 

* the  first  tail;  it  is  meaningless  to  the  others.  So  we  bail  out 

* of  the  loop  early  in  that  case. 

*/ 

static  int 

Si zeAdvi se ( St ruct  PgpPipeline  *myself,  unsigned  long  bytes) 

{ 

n struct  Context  *context; 

nnCHK:35cc6ff58612c7c3e3b4d2c31a777c332e33c388a5298f558da6540b6a24fb99e:: 
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int  error; 
i n t i ; 


n 

Q 

n 

a 

□ 

□ 

□ 

a 

a 

□ 

□ 

a 

n 

□ 

n 

□ 

} 


pgpAssert(myseLf); 

pgp As se r t ( my s e L f ->mag i c ==  SPLITMAGIC); 

context  = (struct  Context  * ) my s e L f ->p r i v ; 
pgpAssert(context); 
pgpAssertCcontext->tai L); 


error  = Do F L u s h ( c on t e x t ) ; 
if  (error) 

n return  error; 


for  ( i 
□ 
n 
□ 

} 


= 0;  i < context->numtaiLs;  i++)  { 

error  = c on t e x t -> t a i L C i ] -> s i z e Ad v i s e ( c on t ex t -> t a i L C i 3 , bytes); 
if  (error  ||  c on t e x t -> s c o pe_d e p t h ) 
n return  error; 


return  0; 


static  void 

Tea rdown ( s t r uc t PgpPipeLine  *myself) 

{ 

n Struct  Context  *context; 

n inti; 

n pgpAssert(myseLf); 

n pgpAssert(myseLf->magic  ==  SPLITMAGIC); 

n context  = (struct  Context  * ) my s e L f ->p r i v ; 

n pg p A s s e r t ( c on t e X t ) ; 

n for  (i  = 0;  i < c on t e x t ->n urn t a i L s ; i++)  { 

n n if  ( con t ex t-> t a i L C i 3 ) 

n n n c on  t ex  t ->  t a i L C i D ->  t ea  r d o wn  ( c on  t e x t ->  t a i L C i 3 ) ; 

n } 

n memse t ( con t ex t , 0,  s i z e o f ( * c on t e x t ) ) ; 

n pgpMemFree(context); 

n memset (myse L f , 0,  s i z e o f ( *my s e L f ) ) ; 

n pg pH em F r e e ( my s e L f ) ; 

} 

struct  PgpPipeLine  ** 

pgpS p L i t C r ea t e ( s t r u c t PgpPipeLine  **head) 

{ 

n struct  PgpPipeLine  *mod; 

n struct  Context  *context; 

n if(!head) 

n n returnNULL; 

n context  = (struct  Context  * ) pg pMem A L L o c ( s i z e o f ( * c on t ex t ) ) ; 

n if  ([context) 

n n returnNULL; 

n mod  = (struct  PgpPipeLine  * ) pg pM emA L L o c ( s i z e o f ( *mod  ) ) ; 
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n 

n 

n 

n 

□ 

n 

n 

□ 

n 

n 

□ 

□ 


if  ( ! mod ) { 

n pgpHemFree(context); 

n return  NULL; 

> 

mod->magic  = SPLITHAGIC; 
niod->write  = Write; 
mod->fLush  = Flush; 
mod->s i z e Ad V i s e = SizeAdvise; 
mod->a nno t a t e = Annotate; 
mod-> t ea r down  = Teardown; 
mod->name  = "Split  module"; 
mod->priv  = context; 


n memsetCcontext,  0,  sizeofC*context)); 

n con t ex t->buf p t r = c o n t e x t ->b u f f e r ; 

n context->curtail  = context->numtails  = 1; 

n context->bufptr  = context->bufend  = context->buffer; 


a context ->tailC0D  = *head; 

a *head=mod; 

a return  &context->tailC0D; 

> 


struct  PgpPipeline  ** 

pgpSp I i t Add ( s t ru c t PgpPipeline  *myself) 

{ 

a struct  Context  *context; 

a struct  PgpPipeline  **tailp; 

a pgpAs se r t ( my se  I f ) ; 

a pg p As s e r t ( my s e I f ->ma g i c ==  SPLITHAGIC); 


a context  = (struct  Context  *)myself->priv; 

a pgpAssert(context); 

a pgp A s s e r t ( c o n t ex  t ->  t a i I ) ; 


a if  ( c on t e X t ->n umt a i I s ==  HAXTAILS) 

a a return0; 

a if  ( c on t e X t -> c u r t a i I !=  c o n t e x t ->n urn t a i I s ) 

a a return  0; a /*  We're  in  the  middle  of  things! 


a tailp  = & c on t e X t -> t a i I C c on t ex t ->n urn t a i I S++3 ; 

a con t e X t -> c u r t a i I = c on t e x t ->num t a i I s ; 

a return  tai  Ip; 

} 
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/* 

* pgpSp  L i t . h 

* 

* 


Split  module  --  one  input,  multiple  outputs. 

All  outputs  get  data,  but  ONLY  THE  ORIGINAL  OUTPUT 
GETS  ANNOTATIONS.  (Error-handling  is  impossible 


otherwise.  ) 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 


* $Id: 

pgpSplit.h, V 1.3. 2.1 

1 997/06/07  09:51:19  mhw 

Exp  $ 

*/ 

#i f def 

__cplusplus 

ext  e rn 

"C"  { 

# e nd i f 

struct 

PgpPipeline; 

# i f n d e f 

TYPE_PGPPIPELINE 

#de  f i n e 

TYPE_PGPPI PELINE  1 

t y p ed  e f 

struct  PgpPipeline  PgpPipeline; 

#endi f 

struct 

PgpPipeline  PGPExport 

**pg pS p 1 i t C r ea t e (struct 

PgpPi pe  1 

struct 

PgpPipeline  PGPExport 

**pgpSp  1 i t Add  (struct  PgpPipeline 

#i f def 

T. 

cplusplus 

/ 

#e n d i f 
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# 

ft  L i b/ pgp/pub  key /Ha  kef  i L e . i n 

n 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

# $Id:  Hakef i Le. i n,v  1.18.2.6  1997/06/09  23:46:25  quark  Exp  $ 

n 

#Removed  pgpRSAKey.o,  t empo r a r i L y . 

0BJS=  pgpPubKey.o  pg p F i xe d Key . o pgpESK.o  pgpSig.o  \ 

n pgpPktList.o  pgpHakeSig.o  pgpKeySpec.o  pgpELGKey.o  pgpDSAKey.o  \ 

a pgpKeyHisc.o  SRSAGLUES  SRSAKEYa  aRSAKEYGENS 

SHAREDHDRS=  pgpESK.h  pg p F i x e d Key . h pgpPubKey.h  pgpSig.h  pgpKeySpec.h 
PRIVHDRS=  pgpRSAKey.h  pgpHakeSig.h  pgpELGKey.h  pgpDSAKey.h  pgpKeyHisc.h 

a L L : : DONE 
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n 

tt  L i b / pg  p / pub  key  / ma  ke  f i l e . ms  c 
ft 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
M 

tt  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:51:20  mhw  Exp  $ 
tt 

PGPLIB=n ..\..\pgpLib.Lib 

C F LAGS=-I . . \ \ \ i n c L ude  -I . . \ . . \ i n c L ude  \ 
n -I..\..\..  -DHAVE_C0NFIG_H=1  SCDEBUG) 

a L L : : n n Lib 

headers:n  incL 

lincLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$(SHAREDHDRS)"==""  \ 

n n for  %f  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ i n c L ude 

n if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L ud e 

D0S0BJSX  = n $ ( OB J S : . 0= . o b j ) 

DOSOBJS  = n $( DOSOBJ SX : Uni x = Wi n32  ) 

Lib:n  $(OOSOBJS) 

. c . ob  j : 

n $(CC)  $(CFLAGS)  -Z7  -c  $< 

c L ea n : 

n de  L * . ob  j 

DONE  : 

n if  exist  $(PGPLIB)  L i b / ou t : $ ( PG PLI B ) $(PGPLIB)  SCDOSOBJS) 

n if  not  exist  $(PGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpA L t RSAG I u . c — Interface  to  RSAREF  Cryptographic  toolkit  from 

* RSA  Data  Security,  Inc. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  an  alternative  to  pg p R S AG  I u e . c , and  should  be  used  if  the 

* use  of  the  RSAREF  library  is  required  for  legal  reasons. 

* 

* This  file  uses  RSAREF  to  perform  the  actual  encryption  and  decryption. 

* It  must  be  linked  with  the  RSAREF  library  (rsaref.a,  rsaref.lib, 

* or  whatever  it's  called  on  your  system)  to  function. 

* 

* This  code  only  accepts  PKCS-style  padding.  Very  old  versions  of  PGP 

* used  a different  padding  style,  which  will  not  be  compatible  with 

* this  modu I e . 

•k 

* $Id:  pgpAltRSAGlu.c, V 1.3. 2. 5 1 997/06/09  23:46:26  quark  Exp  $ 

*/ 

/* 

* An  alternative  version  of  this  module  is  used  if  RSAREF  is  NOT  needed. 

* This  entire  source  file  is  under  the  control  of  the  following  conditional: 
*/ 


#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

# e n d i f 


#if  (USE_RSAREF  FULL) 


#i nc lude 
# i n c I ude 
#include 
#i nc  lude 
#include 
#i nc lude 
#i nc lude 


pgpDebug.h" 

pgpRSAGlue.h 

pgpKeyMisc.h 

bn  . h " 

pgpErr.h" 

pgpRndom. h" 

pgpUsuals.h" 


/* 

* If  you're  using  a legally  encumbered  library  this  will  be 

* printed  in  the  program  banner. 

*/ 

char  const  banner_legaleseCD  = "\ 

Uses  the  RSAREF(tm)  Toolkit,  which  is  copyright  RSA  Data  Security,  Inc.\n\ 
Distributed  by  the  Massachusetts  Institute  of  Technology. \n"; 

/*  Include  files  from  RSAREF  */ 

#include  <global.h> 

#include  <rsaref.h> 

#i  nc  lude  <rsa . h> 

/* 

* The  functions  we  call  in  rsa.h  are: 

* RS APub I i c En c r y p t 

* R S AP r i va t eEn c ry p t 

* RS APub I i c De c r y p t 
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* RS AP r i va t e De c ry p t 
*/ 


/* 

* This  returns  TRUE  if  the  key  is  too  big,  returning  the 

* maximum  number  of  bits  that  the  Library  can  accept. 

*/ 

i n t 

r s a Key TooB i g ( s t r u c t RSApub  const  *pub,  struct  RSAsec  const  *sec) 
{ 


Q 

unsigned  maxsize  = HAX_ 

RSA 

_M0DULUS_BITS; 

Q 

i f 

( pub ) { 

□ 

n 

i f 

(bnBi tsC8pub->n) 

> 

maxsi ze) 

n 

n 

n 

return  maxsize; 

n 

□ 

i f 

(bnBi ts(8pub->e) 

> 

maxsize) 

n 

n 

□ 

return  maxsize; 

Q 

> 

n 

i f 

(sec)  { 

n 

a 

i f 

(bnBi ts(8sec->d) 

> 

maxsize) 

n 

□ 

n 

return  maxsize; 

□ 

□ 

i f 

(bnBi ts(8sec->p) 

> 

MAX_RSA_PRIME_ 

BITS) 

Q 

n 

n 

return  maxsize; 

n 

□ 

i f 

(bnBi ts(8sec->q) 

> 

MAX_RSA_PRIHE_ 

BITS  ) 

D 

n 

n 

return  maxsize; 

n 

Q 

i f 

(bnBi ts(8sec->u) 

> 

HAX_RSA_PRIHE_ 

BITS  ) 

n 

Q 

n 

return  maxsize; 

Q 

> 

D 

/* 

Else 

OK  */ 

n 

return 

0; 

} 

/*  Initialize  RSAREF  pubkey  structure  from  a struct  RSApub.  */ 
static  void 

rpub k_  i n i t ( R_RS A_PUBLI C_KE Y *rpubk,  struct  RSApub  const  *pub) 

{ 

n memsetCrpubk,  0,  sizeof  (*rpubk)); 
n rpubk->bits  = bnB i t s ( &pu b->n ) ; 

n b n E X t r a c t B i g By t e s ( &p u b-> n , r pu b k->modu L u s , 0,  HAX_RS A_MODULUS_LEN  ) ; 

n b n E X t r a c t B i g By t e s ( &p u b— > e , r pu b k->ex pon e n t , 0,  H AX_R S A_H0 DU LU S_LE N ) ; 

} 

/*  Initialize  RSAREF  privkey  structure  from  a struct  RSAsec.  */ 
static  void 

rpri  vk_i ni t (R_RSA_PRIVATE_KEY  *rprivk,  struct  RSAsec  const  *sec) 

{ 

Q Struct  BigNum  dmodp,  dmodq,  tmp; 

n memsetCrprivk,  0,  sizeof  (*rprivk)); 

n /*  Calculate  d mod  p-1  and  d mod  q-1  */ 

n bnBeg i n ( Sdmodp ) ; 

n bnBegin(Sdmodq); 

n bnBegin(&tmp); 

n bnCopyC&tmp,  &sec->p); 

n bnSub&C&tmp,  1); 

n bnModC&dmodp,  8sec->d,  8tmp); 

n bnCopy(8tmp,  8sec->q); 
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n bnSubQC&tmp,  1); 
n bnHodC&dmodq,  &sec->d,  Strnp); 

n /*  Fill  in  structure  */ 
n rprivk->bits  = bnB i t s ( &s e c->n ) ; 

n bnExtractBigBytes(&sec->n,  rprivk->moduLus,  0,  MAX_RSA_MODULUS_LEN); 
n bn  E X t r a c t B i g By  t e s ( &s  e c ->e , r p r i v k-> p u b L i c E xpo n e n t , 0, 

n n n M AX_R S A_H0 0 U LU S_ LE N ) ; 

n bnExtractBigBytes(8sec->d,  rprivk->exponent,  0,  MAX_RSA_HODULUS_LEN); 
n /*  RSAREF  uses  convention  p > q,  the  opposite  of  ours  */ 
a bnExtractBigBytes(8sec->q,  rprivk->primeC0Il,  0,  MAX_RSA_PRIME_LEN); 

n bnExtractBigBytesC&sec->p,  rprivk->primeC1D,  0,  HAX_RSA_PRIME_LEN); 

n bn  Ex t ra c t B i gBy t e s ( Sdmodq,  r p r i v k->p r i me E x pon e n t C 0 D , 0, 

a n n H AX_  R S A_  P R I H E_  LE  N ) ; 

n bn  Ex t ra c t Bi gBy t es C Sdmodp,  r p r i v k->p r i me  Ex po n e n t C 1 D , 0, 

n n n HAX_RSA_PRIME_LEN); 

n bnExtractBigBytes(Ssec->u,  rprivk->coefficient,  0,  MAX_RSA_PRIME_LEN); 

a bnEndC&dmodp); 

Q bnEndC&dmodq); 
n bnEnd(&tmp); 

} 

/* 

* Encrypt  a buffer  holding  a session  key  with  an  RSA  public  key 
*/ 
i n t 

r sa Pub  I i c Enc ry p t ( s t r uc t BigNum  *bn,  byte  const  *in,  unsigned  len, 
n struct  RSApub  const  *pub,  struct  Pg p Ra ndomC on t ex t const  *rc) 

{ 

n R_RSA_PUBLIC_KEY  rpubk; 
a R_RANDOM_STRUCT  rrs; 
n byte  bu f C M AX_R S A_M0 D U LU S_LE N : ; 

H unsigned  int  bufsize; 
n int  err; 

n /*  Set  the  return  number  to  0 to  start  */ 
n ( VO i d ) b n S e t Q C bn , 0); 

n /*  Initialize  RSAREF  public  key  structure  */ 

H r pub k_ i n i t ( & r pub k,  pub); 

n /*  Initialize  RSAREF  random  numbers  */ 
a R_Ra ndomi  n i t ( & r r s ) ; 

n do  { 

n n R_GetRandomBytesNeeded(&buf si ze,  &rrs); 
n n if  (bufsize  > sizeof(buf)) 

n n n bufsize  = sizeof(buf); 

n n if  (bufsize)  f 

n n n pg p Ra ndomG e t By t e s ( r c , buf,  bufsize); 

a a n R_Ra ndomU pda t e ( 8 r r s , buf,  bufsize); 

n n > 

n > while  (bufsize); 

n /*  Pad  and  encrypt  */ 

n err  = RSAPublicEncrypt(buf,  8bufsize,  (byte  *)in,  len,  8rpubk,  8rrs); 
a R_ Ra n dom F i na I ( 8 r r s ) ; 
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Q 

if 

(err)  ( 

n 

□ 

memset (buf,  0,  si 

zeof(buf)); 

n 

n 

memset (Srpubk,  0, 

sizeof(rpubk)); 

n 

n 

if  (err==RE_LEN) 

n 

□ 

B return  PGPERR 

_PUBKEY_T00SHALL 

c 

n 

return  PG P E R R_G E N E R I C ; 

n } 

n /*  Return  to  bn  format  */ 
n bn  I n s e r t B i gBy t e s ( bn , buf,  0,  bufsize); 

n memset(buf,  0,  s i z e o f ( bu f ) ) ; 
n mems e t ( & r pu b k,  0,  s i z eo f ( r p u b k ) ) ; 

D 

n return  0; 

> 


/* 

* Do  an  RSA  signing  operation  using  the  secret  key 
*/ 
i n t 

r sa P r i va t e En c ry p t ( s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  Len, 
B struct  RSAsec  const  *sec) 

{ 

n R_RSA_PRIVATE_KEY  rprivk; 

B byte  buf CHAX_RSA_M0DULUS_LEN:; 

B unsigned  int  bufsize; 

B int  err; 


B 

B 


/*  SET  the  return  number  to  0 to  start  */ 
( voi d ) bnSe t Q ( bn , 0); 


B /*  Initialize  RSAREF  private  key  structure  */ 

B rpri vk_i ni t (&rpri vk,  sec); 

B err  = RSAPrivateEncryptCbuf,  Sbufsize,  (byte  *)in,  Len,  Srprivk); 


B if  (err)  { 

B B memset(buf,  0,  sizeof(buf)); 

B B memset (&rpri vk,  0,  s i z eof ( r p r i v k ) ) ; 

B B if  (err==RE_LEN) 

B B B return  PGPERR_PUBKEY_TOOSHALL; 

B B return  PG P E R R_G EN E R I C ; 

B } 

B /*  Return  to  bn  format  */ 

B bnInsertBigBytes(bn,  buf,  0,  bufsize); 

B memset(buf,  0,  sizeof(buf)); 

B memse t ( & r p r i V k,  0,  s i z eo f ( r p r i v k ) ) ; 

B 

B return  0; 

} 


/* 

* These  destroy  (actually,  replace  with  a decrypted  version)  the 

* i nput  bi gnum  bn . 

* 

* Performs  an  RSA  signature  check.  Returns  a prefix  of  the  unwrapped 
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* data  in  the  given  buf.  Returns  the  length  of  the  untruncated 

* data,  which  may  exceed  "Len”.  Returns  <0  on  error. 

*/ 

i n t 

r sa Pub L i c De c ry p t ( by t e *outbuf,  unsigned  Len,  struct  BigNum  *bn, 
n struct  RSApub  const  *pub) 

{ 

a R_RSA_PUBLIC_KEY  rpubk; 
n byte  bu f C M AX_R S A_M0 D U LU S_ LE N 3 ; 
a unsigned  int  bufsize; 
a int  err; 

n /*  Initialize  RSAREF  public  key  structure  */ 
a rpubk_i ni t (&rpubk,  pub); 

n bufsize  = (bnBits(bn)  + 7)  / 8; 
n if  (bufsize  > sizeof(buf)) 

n n bufsize  = sizeof(buf); 

n bnExtractBigBytesCbn,  buf,  0,  bufsize); 

n err  = RSAPublicDecryptCbuf,  Sbufsize,  buf,  bufsize,  Srpubk); 
n if  (err)  { 

n n memset(buf,  0,  s i z e o f ( b u f ) ) ; 

a a memset(&rpubk,  0,  sizeof(rpubk)); 

n n if  (err==RE_LEN) 

n n n return  PG P E R R_ PUBKE Y_T 00 SM A L L; 
n n return  PGPERR_GENERIC; 

n } 

n /*  Copy  result  to  buffer  */ 
n if  (len  > bufsize) 

n n Len  = buf si ze; 

n memcpy(outbuf , buf,  Len); 

n memset(buf,  0,  s i zeof ( buf  ) ) ; 
n memset(&rpubk,  0,  sizeof(rpubk)); 

□ 

n return  bufsize; 

} 

/* 

* Performs  an  RSA  decryption.  Returns  a prefix  of  the  unwrapped 

* data  in  the  given  buf.  Returns  the  Length  of  the  untruncated 

* data,  which  may  exceed  "Len".  Returns  <0  on  error. 

*/ 

int 

r sa P r i va t e De c ryp t ( by t e *outbuf,  unsigned  Len,  struct  BigNum  *bn, 
n struct  RSAsec  const  *sec) 

{ 

a R_RSA_PRIVATE_KEY  rprivk; 

n byte  bufCMAX_RSA_HODULUS_LEND; 
n unsigned  int  bufsize; 

a int  err; 

n /*  Initialize  RSAREF  private  key  structure  */ 
a rprivk_init(&rprivk,  sec); 

a bufsize  = (bnBits(bn)  + 7)  / 8; 
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n if  (bufsize  > sizeofCbuf)) 

n n bufsize  = sizeof(buf); 

n bnExtractBigBytesfbn,  buf,  0,  bufsize); 

n err  = RSAPrivateDecrypt(buf,  Sbufsize,  buf,  bufsize,  Srprivk); 
n if  (err)  { 

a n memsetCbuf,  0,  s i zeof ( buf  ) ) ; 
n n memset(&rprivk,  0,  sizeof(rprivk)); 

n n if  ( e r r==RE_LEN ) 

n n n return  PG PE R R_PUBKE Y_T00 S H A LL; 
n n return  PG P E R R_G EN E R I C ; 
n } 

n /*  Copy  result  to  buffer  */ 

n if  (Len  > bufsize) 

n n len  = buf si ze; 

n memcpyCoutbuf , buf,  len); 

n memsetCbuf,  0,  sizeof(buf)); 

n memset(8rprivk,  0,  sizeof(rprivk)); 

□ 

n return  buf si ze; 

} 


/* 

* Optional  code  to  replace  RSAREF's  NN_ModExp  with  code  from  the 

* BigNum  library,  which  is  much  faster. 

* Note  that  we  are  still  using  RSAREF,  but  we  are  just  using  a faster 

* modulo  exponentiation  routine. 

* If  you  comment  out  the  following  block  of  code,  you  get  a (much  slower) 

* pure  RSAREF  version. 

*/ 

#if  USE_MPI_LIB 
typedef  word32  NN_DIGIT; 

/* 

* Within  the  RSAREF  NN  module,  values  are  stored  in  32  bit  units, 

* in  little-endian  order.  Unfortunately  this  does  not  map  well  onto 

* our  bignum  format  and  we  have  to  do  some  shuffling. 

*/ 

/*  Convert  an  RSAREF  NN  number  to  a struct  BigNum  */ 
static  void 

nn t obn ( s t r uc t BigNum  *bn,  NN_DIGIT  *nn,  unsigned  nnlen) 

{ 

n byte  b u f C H AX_ R S A_HO D U LU S_LEN 3 ; 
n byte  *bp  = buf; 

n unsigned  i; 

n pgpAssert  (nnlen*4  <=  H AX_RS A_MO DU LU S_ LE N ) ; 


n 

for 

( i =0; 

i <nn  1 en; 

+ +i  ) 

{ 

n 

n 

wo  rd32 

V = 

n n C 

i]; 

n 

n 

* b P + + 

= V 

& 

0 X f f ; 

n 

n 

* b p + + 

> 

II 

>> 

00 

& 

0xf  f ; 

n 

o 

* b p + + 

II 

< 

>> 

16) 

8 

0xf  f ; 

n 

n 

* b p + + 

> 

11 

>> 

24) 

8 

0xf  f ; 
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a > 

n bnInsertLittLeBytesCbn,  buf,  0,  nnLen*4); 

> 

/*  Convert  a struct  BigNum  to  an  RSAREF  NN  number  */ 
static  void 

b n t on n C s t r u c t BigNum  *bn,  NN_DIGIT  *nn,  unsigned  nnlen) 
{ 

n byte  bufi:MAX_RSA_MODULUS_LEN:; 
n byte  *bp  = buf; 

n unsigned  i; 

n pgpAssert  (nnLen*4  <=  M AX_ R S A_M0 D U LU S_ L E N ) ; 
a bnExtractLittLeBytesCbn,  buf,  0,  nnLen*4); 
n for  (i=0;  i<nnLen;  ++i)  { 


o 

n 

word32  V = *bp++ 

n 

n 

V 1 = ( *bp++ ) 

<< 

8; 

n 

n 

V 1 = ( *bp  + + ) 

<< 

16; 

□ 

n 

V 1 = ( *bp++ ) 

<< 

24; 

n 

n 

nnCiD  = v; 

n > 

} 

void 

NN_ModExp  (NN_DIGIT  *a,  NN_DIGIT  *b,  NN_DIGIT  *c,  unsigned  cDigits, 
n NN_DIGIT  *d,  unsigned  dDigits); 

/* 

* Calculate  b to  the  c mod  d,  result  in  a. 

*/ 

void 

NN_ModExp  (NN_DIGIT  *a,  NN_DIGIT  *b,  NN_DIGIT  *c,  unsigned  cDigits, 
n NN_DIGIT  *d,  unsigned  dDigits) 

{ 

n struct  BigNum  bnres,  bnbase,  bnexp,  bnmod; 

n bn  Be g i n ( &b n r e s ) ; 

n bnBeginC&bnbase); 
n bnBeg i n ( Sbnexp  ) ; 

n bnBeg i n ( Sbnmod ) ; 

n nntobnC&bnbase,  b,  dDigits); 
n nn t o b n ( &b n exp , c,  cDigits); 

B nntobnC&bnmod,  d,  dDigits); 
n 

B bn E X pMod ( S bn r e s , Sbnbase,  Sbnexp,  Sbnmod); 

B bn t o n n ( 8b n r e s , a,  dDigits); 

B bnEndCSbnres); 

B bnEndCSbnbase); 

B bnEndCSbnexp); 

B bnEndCSbnmod); 

} 

#endif  /*  USEMPILIB  */ 
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#endif  /*  USERSAREF  */ 


/* 

* Local  Variables: 

* t a b-wi dt  h : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpDSAKey.c  — Signatures  using  the  Digital  Signature  Algorithm 

* 

* Copyright  CC)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpDSAKey . c,v  1.10.2.3  1997/06/07  09:51:22  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#include  "config.h" 
#end  i f 


# i n c I ud  e 
#i nc lude 
#include 
#i nc  lude 
# i n c I ude 
#i nc lude 
#include 
//include 
#i nc lude 
//include 
Mi nc lude 
# i n c I ude 
//include 
//include 
#include 


pgpDebug.h" 
pgpDSAKey. h" 
pgpKeyMisc.h" 
bn  . h " 

pgpCi pher . h" 
pgpCFB.h" 
pgpHash  . h" 
pgpMem. h" 
pgpErr.h" 
pgpFixedKey.h 
bnprime.h" 
pg  pPubKey . h " 
pgpRndom . h " 
pgpSt  r2Key . h " 
pgpUsuals.h" 


//ifndef  NULL 
//def  i ne  NULL  0 
//en d i f 


//define  AS  S E RIDS  A ( a I g ) pg  p A s s e r t C ( A LGM  AS  K ( a I g ) ) = = PG  P_PKA  LG_  D S A ) 


#def 

ine  MAX_DSA_PRIHE_ 

BITSn 

□ 

1 024 

struct  DSApub  { 

Q 

struct 

B i g N urn 

p;n 

a 

/* 

Public 

prime  * / 

n 

struct 

B i g Num 

q;n 

Q 

/* 

Public 

order  of  generator  */ 

Q 

struct 

Bi gNum 

9;n 

n 

/* 

Public 

generator  */ 

n 

>; 

struct 

B i g N urn 

y;n 

n 

/* 

Public 

key,  g**x  mod 

p * / 

struct  DSAsec  { 

Q 

struct 

Bi gNum 

p;n 

n 

/* 

Copy  of 

public  parameters  */ 

□ 

struct 

B i g N urn 

q; 

O 

struct 

B i g N urn 

g; 

n 

struct 

Bi gNum 

y; 

Q 

\ . 

struct 

B i g N urn 

x;n 

n 

/* 

Secret 

key,  discrete 

log  of 

/*  A PgpSecKey's  priv  points  to  this,  an  DSAsec  plus  the  encrypted  form... 
struct  DSAsecPlus  { 
n struct  DSAsec  s; 
n byte  *cryptkey; 

n size_t  ckalloc,  cklen; 

a int  locked; 
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>; 

/**  Public  key  functions  **/ 
static  void 

dsa PubDe s t roy { s t ru c t PgpPubKey  *pubkey) 

{ 

n struct  DSApub  *pub  = (struct  DSApub  *)pubkey->priv; 

n ASSERTDSA(pubkey->pkALg); 

□ 

n bnEnd(&pub->p) ; 
n bn  End C &pub->q  ) ; 
n bn  End ( &pub->g ) ; 
n bnEnd(&pub->y) ; 
n memsetCpub,  0,  s i z eof ( pu b ) ) ; 
n pgpMemF ree ( pub ) ; 

n mems e t ( pu b key  , 0,  s i z eo f ( pu b key  ) ) ; 
n pgpHemFreeCpubkey); 

} 

/* 

* This  returns  TRUE  if  the  key  is  too  big,  returning  the 

* maximum  number  of  bits  that  the  Library  can  accept. 

*/ 

static  i nt 

dsa KeyTooBi g ( s t r u c t DSApub  const  *pub,  struct  DSAsec  const  *sec) 

{ 

n unsigned  maxsize  = H AX_D S A_P R I M E_B I T S ; 
n i f (pub)  { 

n n if  ( bnBi t s ( &pub->p ) > maxsize) 

B n n return  maxsize; 

B > 

B if  (sec)  { 

B B if  ( bnB i t s ( &s e c->p  ) > maxsize) 

B B B return  maxsize; 

B } 

B /*  Else  OK  */ 

B return  0; 

> 

#if  0 

static  void 

dsaPubId8(struct  PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

B pgpAssert(0); 

B struct  DSApub  const  *pub  = (struct  DSApub  *)pubkey->priv; 

B byte  *keybuf; 

B size_t  keybuflen; 

B struct  PgpHash  const  *h; 

B struct  Pg p Ha s h C o n t ex t *hc; 

B ASSERTDSA(pubkey->pkALg); 

B /*  Unfortunately  we  have  no  way  of  indicating  failure  */ 

B h = pg pHa s h By N umbe r ( PG P_H A S H _S H A ) ; 

B pgpAssert(h); 

B he  = pg  pH  a s h C r e a t e ( h ) ; 

CECHK: 551 1 d4d66 778 8 f 9 1 d b6335 b8 7a 38 7433a 4 f a 8dd 8 8 1 7a 34 1 5a60011ef7b9d1ddd8:: 


Pretty  Oood  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1466 


pgpDSAKey.c 


n pgpAssert(hc); 

n keybufLen  = d s a PubBu  f f e r Leng  t h ( p u b key  ) ; 
n keybuf  = pgpHemALLocCkeybufLen); 

B pgp As se r t ( key buf  ) ; 

B d s a Pu bToBu f f e r ( pub  key , keybuf); 

B pgpHashUpdateChc,  keybuf,  keybufLen); 

B memcpy  (buf,  pgpHashFinaL(hc),  8); 

B pg pHa s h De s t roy ( h c ) ; 

} 

# e n d i f 

/*  Return  the  Largest  possibLe  PgpESK  size  for  a given  key  */ 
static  size_t 

d saHa xe s k ( s t r uc t PgpPubKey  const  *pubkey,  PgpVersion  version) 

{ 

B (void)pubkey; 

B (void)version; 

B return  PG P E R R_PU BKE Y_ U N I M P ; 

} 

/* 

* Given  a buffer  of  at  Least  "maxesk"  bytes,  make  an  PgpESK 

* into  it  and  return  the  size  of  the  PgpESK,  or  <0. 

*/ 

static  int 

d s a E n c r y p t ( s t r u c t PgpPubKey  const  *pubkey,  byte  const  *key, 
size_t  keyLen,  byte  *esk,  size_t  *eskLen, 
struct  PgpRandomContext  const  *rc,  PgpVersion  version) 

{ 

B Cvoid)pubkey; 

B (void)key; 

B (void) keyLen; 

B (void)esk; 

B (void)eskLen; 

B (void)rc; 

B (void)version; 

B return  PGPERR_PUBKEY_UNIHP; 

> 

/* 

* Return  1 if  (sig,sigLen)  is  a vaLid  MPI  which  signs 

* hash,  of  type  h.  Verify  that  the  type  is  SHA.1  and 

* the  hash  itseLf  matches. 

*/ 

static  int 

dsa Ve r i f y ( s t r u c t PgpPubKey  const  *pubkey,  int  sigtype,  byte  const  *sig, 

B size_t  sigLen,  struct  PgpHash  const  *h,  byte  const  *hash) 

{ 

B Struct  DSApub  const  *pub  = (struct  DSApub  *)pubkey->priv; 

B struct  BigNum  r,  s,  w,  u2; 

B int  i ; 

B size_t  off; 

B (void)sigtype; 

B A S S E RT D S A ( pu b key->p k A L g ) ; 
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n if  (h->type  !=  PGP_HASH_SHA) 
n n return  0;n  /*  No  match  for  sure!  */ 

n bnBegin(&r); 
n bnBegin(&s); 
n bnBeginC&w); 
n bnBeg i n ( &u2 ) ; 

n /*  sig  holds  two  values.  Get  first,  r,  from  sig.  */ 
n o f f = 0 ; 

n i = pgpBnGe t P I a i n ( 8 r , sig  + off,  siglen-off); 
n if  (i  <=0) 
n n goto  fail; 

n /*  Get  2nd  value,  s,  from  SIG  */ 
n off  + = i ; 

n i = pgpBnGetPlai n(8s,  sig+off,  siglen-off); 
n if  (i  <=0) 
n n goto  fail; 

n off  +=  i; 

n if  (off  !=  siglen)  { 
n n i = PGPERR_SIG_T00L0NG; 

n n goto  done; 

n > 

n /* 

n * Sanity-check  r and  s against  the  subprime  q.  Both  should 

n * be  less  than  q.  If  not,  the  signature  is  clearly  bad. 

n * / 

n if  (bnCmp(8r,  8pub->q)  >=  0 | | bnCmp(8s,  8pub->q)  >=  0)  { 

n n i = 0;n  /*  FAIL  */ 

n n goto  done ; 

n > 

□ 

n /*  Reconstruct  hash  as  u2  */ 

n /*  aaS:  complicated  issues  re  packing,  160  bits  is  tight...  */ 
n if  ( bn  I n s e r t B i g By t e s ( 8u 2 , hash,  0,  h->hashsize)  < 0) 
a n goto  nomem; 


D 

/* 

n 

* 

Calculate  DSS  check  function.. 

. ■ 

n 

* 

Given  signature  (r,s)  and  hash 

H (in  bn ) , compute : 

n 

* 

w = 

sA-1 

mod  q 

n 

it 

Ul 

= H * 

w mod  q 

n 

it 

u2 

= r * 

w mod  q 

n 

it 

V = 

g-'ul 

* y*u2  mod  p 

n 

it 

i f 

V = = 

r mod  q,  the  signature 

checks . 

n 

it 

D 

it 

To 

save 

space,  we  put  u1  into 

s,  H into  u2,  and  v into 

n 

*/ 

n if  (bnInvC&w,  8s,  8pub->q)  < 0) 
a □ goto  nomem; 

n if  (bnHul(8s,  8u2,  8w)  < 0 ||  bnHod(8s,  8s,  8pub->q)  < 0) 

n a goto  nomem; 

n if  (bnMul(8u2,  8r,  8u)  < 0 ||  bnMod(8u2,  8u2,  8pub->q)  < 0) 

n n goto  nomem; 

/*  Now  for  the  expensive  part...  */ 
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if  ( bn Doub I eExpHod ( 8w,  &pub->g,  &s,  8pub->y,  8u2,  8pub->p)  < 0) 
goto  nomem; 

if  (bnMod(8w,  8m,  8pub->q)  < 0) 
goto  nomem; 

n /*  Compare  result  with  r,  should  be  equal  */ 
n i = bnCmp(8w,  8r)  ==  0; 

n goto  done ; 

fail: 

n if  C ! i ) 

a a i = PGPERR_SIG_T00SH0RT; 

n goto  done; 
nomem : 

n i = PGPERR_NOMEM; 

n goto  done; 
done  : 

n bnEnd(8u2); 
n bnEnd(8w) ; 
n bnEnd(8s); 
n bnEnd(8r); 

n return  i; 

> 

/* 

* Turn  a PgpPubKey  into  the  algorithm-specific  parts  of  a public  key. 

* A public  key's  DSA-specific  part  is: 

* 

* 0 2+i  MPI  for  prime 

* 2+i  2+t  MPI  for  order 

* 4+i+t  2+un  MPI  for  generator 

* 6+i+t+u  2+vn  MPI  for  public  key 

* 8+i+t+u+v 
*/ 

static  size_t 

d sa PubBu f f e r Leng t h ( s t r u c t PgpPubKey  const  *pubkey) 

{ 

n struct  DSApub  const  *pub  = (struct  DSApub  *)pubkey->priv; 

n return  8 + ( bn B i t s ( 8pub->p ) + 7 ) / 8 + ( bnB i t s ( 8pub->q ) +7  ) / 8 + 
n n (bnBits(8pub->g)+7)/8  + (bnBits(8pub->y)+7)/8; 

} 


static  void 

d s a Pu bT oBu f f e r ( s t r u c t PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

H Struct  DSApub  const  *pub  = (struct  DSApub  *)pubkey->priv; 
n unsigned  off; 


Q 

a 

n 

a 

n 

> 


off  = 0 ; 

off  +=  pg pBn Pu t P I a i n ( 8pu b->p, 
off  +=  pg pBnPu t P I a i n ( 8pub->q, 
off  +=  pg pBn Pu t P I a i n ( 8pub->g , 
off  +=  pgpBn Pu t P I a i n ( 8pub->y , 


buf+off); 
buf + of  f ) ; 
buf + of f ) ; 
buf + of  f ) ; 
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/*  A little  helper  function  that's  used  twice  */ 
static  void 

d s a F i I I Pu b key ( s t r u c t PgpPubKey  *pubkey,  struct  DSApub  *pub) 
{ 


n p ub key->nex t n 

n p ub key->p k A I gn 

n pubkey->pri vn 

n pubkey->dest roy  = d sa Pu b D e s t r oy ; 
#if  0 

n pubkey->i d8 
#e nd i f 
n 


= NULL; 

= PGP_PKALG_DSA; 
= pub; 


= dsaPubldS; 


pubkey->niaxesk  = dsaHaxesk; 
pubkey-> encrypt  = dsaEncrypt; 
pubkey->veri f y = dsaVerify; 

pubkey->bufferLength  = dsaPubBufferLength; 
pubkey->toBuf f er  = d s a Pu bToBu f f e r ; 


/* 

* Turn  the  a I g o r i t h m- s pe c i f i c parts  of  a public  key  into  a PgpPubKey 


* 

-k 

structure. 

A public 

key 's  DSA-speci 

■k 

0 

2 + i 

MPI 

for 

prime 

k 

2 + i 

2 + t 

HPI 

for 

order 

k 

4 + i +t 

2 + un 

MPI 

for 

generator 

k 

6+i +t+u 

2 + vn 

MPI 

for 

public  key 

k 

8+i +t+u+v 

*/ 

struct  PgpPubKey  * 

d s a Pu b F r omBuf ( by t e const  *buf,  size_t  size,  int  *error) 
{ 


Q 

struct  PgpPubKey  *pubkey; 

n 

struct  DSApub  *pub; 

n 

i nt 

err  = PGPERR_N0MEM; 

n 

unsigned  i,  t,  u,  v; 

n 

i nt 

w; 

n 

bnInitC); 

□ 

w = 

pgpBnParseCbuf,  size,  4,  8i,  &t,  &u,  Sv); 

n 

i f 

(w  < 0)  { 

D 

a 

♦error  = u; 

n 

a 

return  NULL; 

n 

> 

n 

if 

(t  <=  i+2  II  (bufCt-i:  8 1)  ==  0)  {n  /*  Too  small 

0 r even 

prime 

n 

a 

♦error  = PGPERR_KEY_MPI ; 

n 

a 

return  NULL; 

n 

> 

n 

if 

(u  <=  t+2  II  (bufCu-i:  8 1)  ==  0)  {n  /♦  Too  small 

or  even 

order 

n 

a 

♦error  = PGPERR_KEY_MPI ; 

D 

a 

return  NULL; 

n 

> 

n 

pub 

= (struct  DSApub  ♦ ) pg pMem A 1 1 o c ( s i z eo f C ♦pu b ) ) ; 

o 

i f 

( pub ) { 

n 

a 

pubkey  = (struct  PgpPubKey  ♦ ) pg pMemA 1 1 o c ( s i z e o f ( 

*pubkey) ) 

/ 
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Q 

n 

Q 

□ 

n 

a 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 


(pubkey ) -C 
bnBegin(&pub->p); 
bnBegi n(&pub->q) ; 
bnBegin(&pub->g) ; 
bnBegin(&pub->y); 
if  (bnInsertBigBytesC&pub->p, 
&&  b n I n s e r t B i g By t e s ( & pu b->q , 
&&  bnInsertBigBytes(&pub->g, 
&&  bn  I n s e r t B i g By t e s C &p u b->y , 


buf +i +2, 
buf +t+2, 
buf+u+2, 
buf +V+2, 


0, 

0, 

0, 

0, 


t-i-2) 

u-t-2) 

v-u-2) 

w-v-2) 


>=  0 
>=  0 
>=  0 
>=  0) 


n if  ( d s a Key TooB i g (pub,  NULL))  { 
n n err  = PG P E R R_ KE Y_U N S U P P ; 
a > e L s e -C 

n B d s a F i 1 1 Pu b key ( pu b key , pub); 
B B *error=0; 

n B return  pubkey; 

n > 


n > 

n /*  Failed  = clean  up  and  return  NULL  */ 
n bnEnd(&pub->p); 
n bn E n d ( &pu b->q ) ; 
a bnEndC&pub->g); 
n bn E nd ( &p u b->y ) ; 

n pg pM em F r e e ( pu b key  ) ; 

> 


pgpMemFree(pub); 


*error  = err; 
return  NULL; 


/* 

* Return  the  size  of  the  public  portion  of  a key  buffer. 
*/ 


i n t 

dsaPubKeyPrefixSize(byte  const  *buf,  size_t  size) 

< 


n return  pgpBnParseCbuf,  size,  4,  NULL,  NULL,  NULL,  NULL); 
} 


/**  Secret  key  functions  **/ 
static  void 

dsaSecDestroyCstruct  PgpSecKey  *seckey) 

n struct  DSAsecPlus  *sec  = (struct  DSAsecPlus  * ) s e c key->p r i v ; 

« A S S E RT D S A ( s e c key->p kA I g ) ; 
a bn E n d ( &s e c ->s . p ) ; 
n bnEndC&sec->s.q); 
n bn E n d C & s e c-> s . g ) ; 
n bn E n d ( & s e c-> s . y ) ; 
n bnEnd (&sec->s . X ) ; 

n mems e t ( s e C“> c r y p t key , 0,  s e c -> c ka  I I o c ) ; 
n pgpHemFreeCsec->cryptkey); 
n memset C sec,  0,  s i z e o f < s e c ) ) ; 
n pgpMemFreeCsec); 
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n memset ( sec  key , 0,  s i z eo f ( s e c key ) ) ; 

n pgpHemFree(seckey); 

> 

#if  0 

static  void 

d sa Se c I d8 ( s t ru c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

n struct  DSAsecPLus  const  *sec  = (struct  DSAsecPLus  * ) s e c key->p r i v ; 
n ASSERTDSA(seckey->pkALg); 

n bnExt ractBi gBytes (&sec->s . p,  buf,  0,  8); 

} 

# en  d i f 


/* 

* Generate  a PgpPubKey  from  a PgpSecKey 
*/ 

static  struct  PgpPubKey  * 

dsa Pub  key ( s t r u c t PgpSecKey  const  *seckey) 

{ 

n struct  DSAsecPLus  const  *sec  = (struct  DSAsecPLus  * ) s e c key->p r i v ; 
n struct  PgpPubKey  *pubkey; 

n struct  DSApub  *pub; 


n 

n 

n 

□ 

□ 

□ 

□ 

n 

□ 

□ 

n 

Q 

n 

D 

n 

n 

n 

Q 

n 

n 

□ 

n 

n 

n 

n 

n 

□ 

n 

n 

a 

> 

/* 


ASSERTDSA(seckey->pkALg); 

pub  = (struct  DSApub  * ) pg pH emA L L o c ( s i z eof ( *pub ) ) ; 
if  (pub)  { 

n pubkey  = (struct  PgpPubKey  * ) pg pHemA L L o c ( s i z eo f ( *pu b key ) ) ; 
if  (pubkey)  ( 


> = 
. q) 
■ 9 ) 


0 

> = 
> = 
> = 


0 

0 

0) 


n bnBe g i n ( &pub->p ) ; 

n bnBeg i n ( &pub->q ) ; 

n bnBe g i n ( &pub->g ) ; 

n bnBeg i n ( &pub->y ) ; 
n if  (bnCopy (&pub->p,  &sec->s.p) 
n &&  bnCopy (8pub->q,  &sec->s 

n S&  bnCopy (&pub->g,  &sec->s 

n &&  bnCopy (8pub->y,  8sec->s.y) 

n { 
o n 
n D 
n n 

D D 

a n 

n > 

n /*  FaiLed  = cLean  up  and  return  NULL  */ 
n bn En d ( 8pu b->p ) ; 

a bnEnd(8pub->q); 
n bn En d ( 8pu b->g ) ; 

a bnEnd(8pub->y); 
n pg pH em F r e e ( pub  key ) ; 

> 

pgpHemFree(pub); 


d s a F i L L Pu b key ( pu b key , pub); 
pubkey->pkALg  = seckey->pkALg; 
memcpy(pubkey->keyID,  seckey->keyID, 
s i zeof ( pubkey->  key  I D ) ) ; 
return  pubkey; 


return  NULL; 
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* Yes,  there  *is*  a reason  that  this  is  a function  and  not  a variable. 

* On  a hardware  device  with  an  automatic  timeout, 

* it  actually  might  need  to  do  some  work  to  find  out. 

*/ 

static  i n t 

d sa I s I oc ked C s t r u c t PgpSecKey  const  *seckey) 

{ 

n struct  DSAsecPlus  const  *sec  = (struct  DSAsecPlus  *)seckey->priv; 

n ASSERTDSA(seckey->pkAlg); 
a return  sec->locked; 

> 


/* 

* 

* 

★ 

* 

* 

* 

★ 

* 

★ 

* 

* 

★ 

★ 

★ 

* 

★ 

★ 

★ 

* 

* 

★ 

*/ 


Try  to  decrypt  the  secret  key  wih  the  given  passphrase.  Returns  >0 
if  it  was  the  correct  passphrase.  =0  if  it  was  not,  and  <0  on  error. 
Does  not  alter  the  key  even  if  it's  the  wrong  passphrase  and  already 
unlocked.  A NULL  passphrae  will  work  if  the  key  is  unencrypted. 

A (secret)  key's  DSA-specific  part  is: 


2 + u 
4 + u + V 
6+u+v+wn 
8+u+v+w+x 
9+u+v+w+x 
9+t+u+v+w+x 
1 1 +t+u+v+w+x+y 
1 3+t+u+v+w+x+y 


2+u  MPI  for  prime  p 
2+v  MPI  for  order  q 
2+w  MPI  for  generator  g 
2+x  MPI  for  public  key  y 

1 Encryption  algorithm  (0  for  none,  1 for  IDEA) 

t Encryption  IV:  0 or  8 bytes 

2+y  MPI  for  x (discrete  log  of  public  key) 

2 Checksum 


Actually,  that's  the  old-style,  if  pg pS 2 Ko I d Ve r s is  true. 

If  it's  false,  the  algoruthm  is  255,  and  is  followed  by  the 
algorithm,  then  the  ( va r a i b I e- I e ng t h , self-delimiting) 
s t r i ng - t o- ke y descriptor. 


static  int 

d sa U n I o c k ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n char  const  *phrase,  size_t  plen) 

{ 

H Struct  DSAsecPlus  *sec  = (struct  DSAsecPlus  *)seckey->priv; 
n struct  BigNum  x; 

n struct  Pg p C f b C on t e X t *cfb  = NULL; 

n unsigned  v; 

n unsigned  alg; 

n unsigned  checksum; 

n int  i ; 

n bnBeg i n (&x  ) ; 

n A S S E RT D S A ( s e c k ey->p k A I g ) ; 

a /*  Check  packet  for  basic  consistency  */ 

n i = pg pBn Pa r s e ( s e c-> c r y p t key , sec->cklen,  4,  8v,  NULL,  NULL,  NULL); 
n if  ( i <=  0 ) 

a n goto  fail; 
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n /*  OK,  read  the  public  data  */ 

n i = pgpBnGe t P L a i n ( &se c->s . p,  s e c -> c ry p t key  + v , s e c -> c k L e n- v ) ; 
n i f ( i <=  0 ) 

n sa  goto  fail; 

n V +=  i ; 

n i = pgpBnGetPLain<&sec->s.q,  sec->cryptkey+v,  sec->ckLen-v); 

a if  (i  <=0) 
a n goto  fail; 

a V +=  i ; 

n i = pg pBnGe t P L a i n ( & s e c->s . g , s e c-> c ry p t key + v , s e c -> c k L e n-v ) ; 

n i f ( i <=  0 ) 

n n goto  fail; 

n V +=  i ; 

n i = pgpBnGetPLain(8sec->s.y,  sec->cryptkey+v,  sec->ckLen-v); 

n if  (i  <=0) 
n n goto  fail; 

n V +=  i ; 

n /*  Get  the  encryption  algorithm  (cipher  number).  0 ==  no  encryption  */ 
n alg  = sec->c rypt key Cv] ; 

n /*  If  the  phrase  is  empty,  set  it  to  NULL  */ 
n if(plen==0) 
n n phrase  = NULL; 

n / * 

n * We  need  a pass  if  it  is  encrypted,  and  we  cannot  have  a 

n * password  if  it  is  NOT  encrypted.  I.e.,  this  is  a logical 

n *xor  (''*) 

n * / 

n if  (Iphrase  !=  ! s e c-> c ry p t key C v D ) 
a n goto  badpass; 

n i = pgpC i phe r S e t up { sec->c ry p t key  + v,  sec->cklen  - v,  phrase,  plen, 
n env,&cfb); 

a if(i<0) 
n n goto  done; 

n V +=  i ; 

n checksum  = 0; 

a i = pgpBnGetNew(&x,  sec->cryptkey  + v,  sec->cklen  - v,  cfb,  &checksum); 
a i f ( i <=  0 ) 
a a goto  badpass ; 

a V +=  i ; 

a if  (bnCmpC&x,  &sec->s.q)  >=  0) 

a a goto  badpass;a  /*  Wrong  passphrase:  x must  be  < q */ 

a /*  Check  that  we  ended  in  the  right  place  */ 
a if  (sec->cklen  - v ! = 2 ) ■( 
a a i = PGPERR_KEY_LONG; 

a a gotofail; 

a > 

a checksum  &=  0xffff; 

a if  (checksum  !=  pg pC h e c ks umG e t N e w ( s e c -> c r y p t key+v , cfb)) 
a a goto  badpass ; 

a / * 

a * Note  that  the  "nomem"  case  calls  bnEnd() 

a * more  than  once,  but  this  is  guaranteed  harmless. 

CCCHK: 0f 1 3f 5626833a86e7769932a1  e2f 69cc9e41 cc5a1 2ac55f e3a20755b4cf bcf cl  2:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1474 


pgpDSAKey.c 


n * / 

n if  ( b n C o py ( & s e c-> s . X , &x)  < 0) 
n n goto  nomem; 

n i = 1;n  /*  Decrypted!  */ 

n sec -> Locked  = 0; 

n goto  done; 

nomem : 

n i = PGPERR_NOMEM; 

B goto  done; 
fail: 

B if  ( ! i ) 

B n i = PGPERR_KEY_SHORT; 

B goto  done; 
badpass : 

B i = 0;b  /*  Incorrect  passphrase  */ 

B goto  done; 

done  : 

B bnEnd(&x); 

B if  ( cf b) 

B B pgpCf bDest roy  (cfb); 

B return  i; 

> 

/* 

* ReLock  the  key. 

*/ 

static  void 

dsaLock(st ruct  PgpSecKey  *seckey) 

{ 

B struct  DSAsecPLus  *sec  = (struct  DSAsecPLus  *)seckey->priv; 

B ASSERTDSA(seckey->pkALg); 

B sec->Locked  = 1; 

B /*  bnEnd  is  documented  as  also  doing  a bnBegin  */ 

B bn E nd ( & s e c-> s . X ) ; 

} 

/* 

* Return  the  size  of  the  buffer  needed,  worst-case,  for  the  decrypted 

* output. 

*/ 

static  si ze_t 

d sa Ma xd e c r y p t e d ( s t r u c t PgpSecKey  const  *seckey) 

B (void)seckey; 

B return  PG P E R R_PUBKE Y_U N I H P; 

} 

/* 

* Try  to  decrypt  the  given  esk.  If  the  key  is  Locked,  try  the  given 

* passphrase.  It  may  or  may  not  Leave  the  key  unLocked  in  such  a case. 

* (Some  hardware  i mp L erne n t a t i on s may  insist  on  a password  per  usage.) 

*/ 

static  i nt 

d s a D e c r y p t ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 

B int  esktype,  byte  const  *esk,  size_t  eskLen, 
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n byte  *key,  size_t  *keyLen,  char  const  *phrase, 

B size_t  pLen) 

{ 

B (void)seckey; 

B (void)env; 

B Cvoid)esktype; 

B (void)esk; 

B (void)eskLen; 

B (void)key; 

B (void)keyLen; 

B (void)phrase; 

B (void)pLen; 

B return  PGPERR_PUBKEY_UNIHP; 

> 


static  si ze_t 

d saMax s i g ( s t r u c t PgpSecKey  const  *seckey,  PgpVersion  version) 

{ 

B Struct  DSAsecPLus  const  *sec  = (struct  DSAsecPLus  * ) s e c key->p r i v ; 

B (void)version; 

B A S S E RT D S A ( s e c key->p k A L g ) ; 

B return  2 * ( ( bnB i t s ( & s e c-> s . q ) + 7 ) / 8 + 2); 

> 


/* 

* Helper  function:  seed  a Ra n domC on t e x t from  a BigNum. 

* Be  very  sure  to  Leave  nothing  in  memory! 

*/ 


static  void 

pgpRandomBnSeed ( s t r uc t PgpRandomContext  const  *rc,  struct  BigNum  const  *bn) 
{ 

B byte  bufC323;B  /*  Big  enough  for  99.9%  of  all  keys  */ 

B unsigned  bytes  = (bnBits(bn)  + 7)/8; 

B unsi gned  off  = 0; 


B while  (bytes  > sizeof(buf))  ( 

B B bnEx t ra c t Li 1 1 L eBy t e s ( bn,  buf,  off,  s i z e o f ( bu f ) ) ; 

B B pgpRandomAddBytes(rc,  buf,  sizeof(buf)); 

B B bytes  -=  sizeof(buf); 

B n off  +=  sizeof(buf); 

B > 

B bn  Ex t ra c t Li 1 1 L eBy t e s ( bn,  buf,  off,  bytes); 

B pgpRandomAddBytes(rc,  buf,  bytes); 


B memset(buf,  0,  sizeof(buf)); 

> 


static  int 

d sa S i g n ( s t r u c t PgpSecKey  *seckey,  struct  PgpHash  const 
B byte  *sig,  size_t  *sigLen,  struct  PgpRandomContext 
B PgpVersion  version) 

{ 


*h,  byte  const 
const  *rc. 


*h  a s h , 


B /*  Calculate  a DSA  signature  */ 


□ 

n 


□ 


struct  DSAsecPLus  *sec  = (struct  DSAsecPLus  *)seckey->priv; 
struct  BigNum  r,  s,  bn,  k; 
unsigned  t; 
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n unsigned  qbits; 
a i n t i ; 

n struct  PgpCipher  const  *ciph; 
a struct  Pg p Ra nd omC on t ex t *rc2; 

a /*  We  don't  need  this  argument,  although  other  algorithms  may...  */ 
a (void)version; 

a AS S E RTD S A ( s e c key->p kA I g ) ; 
a /*  We  *only*  sign  SHA  hashes  */ 
a pg p A s s e r t ( h -> t y p e ==  PG P_ H A S H _ S H A ) ; 

a if  C s e c -> I o c ke d ) 

a a return  PGPERR_KEY_I SLOCKED, ■ 
a / * 

a * DSA  requires  a secret  k.  This  k is  *very*  important 

a * to  keep  secret.  Consider,  the  DSA  signing  equations  are: 

a * r = (g*k  mod  p)  mod  q,  and 

a * s = k^-1  * (H(m)  + x*r)  mod  q, 

a * so  if  you  know  k (and,  the  signature  r,  s and  H),  then 

a * X = r^-1  * (k*s  - H(m)) 

a * If  we  ever  pick  two  k values  the  same,  then 

a * r = (g'^k  mod  p)  mod  q is  the  same  for  both  signatures,  and 

a * si  = k^-l  * (HI  + X * r) 

a * s2  = k''-1  * (H2  + x * r) 

a * k = (H1-H2)  / (s1-s2) 

a * and  proceed  from  there, 

a * 

a * So  we  need  to  make  *very*  sure  there's  no  problem.  To  make 
a * sure,  we  add  a layer  on  top  of  the  passed-in  RNG.  We  assume 

a * the  passed-in  RNG  is  good  enough  to  never  repeat  (not  a 

a * difficult  task),  and  apply  an  additional  X9.17  generator  on 
a * top  of  that,  seeded  with  the  secret  x,  which  is  destroyed 

a * before  leaving  this  function, 

a * / 

a ciph  = pg p C i p h e r By N umbe r ( PG P_ C I PH E R_ C AST5 ) ; 
a if  (!ciph) 

a a return  PGPERR_BAD_CIPHERNUH; 

a rc2  = pgpRandomCreateX9_17(ciph,  rc); 

a if  ( ! r c 2 ) 

a a return  PGPERR_NOHEM; 

a pg p Ra n d omBn S e e d ( r c 2 , &sec->s.x); 

a bnBegin(&r); 
a bnBegin(&s); 
a bnBegin(8bn); 
a bnBegin(&k); 

a / * 

a * Choose  the  random  k value  to  be  used  for  this  signature, 

a * Make  it  a bit  bigger  than  q so  it  is  fairly  uniform  mod  q. 

a * / 

a qbits  = bnBits(&sec->s.q); 

a if  ( pgpBnGen Ra nd ( Sk,  rc2,  qbits  + 8,  0,  1,  qbits)  < 0 | | 

a bnMod(&k,  &k,  &sec->s.q)  < 0) 

a a goto  nomem; 

a 
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□ 


D 


/*  Raise  g to  k power  mod  p then  mod  q to  get  r */ 
if  (bnExpHodC&r,  &sec->s.g,  &k,  8sec->s.p)  < 0 || 


□ 


□ 


bnMod(&r,  &r,  &sec->s.q)  < 0) 
H goto  nomem; 


n 


□ 


□ 


/*  r*x  mod  q into  s */ 
if  (bnMuL(&s,  &r,  &sec->s.x)  < 0 || 


□ 


n 


bnMod(&s,  8s,  8sec->s.q)  < 0) 
n goto  nomem; 


n /*  Pack  message  hash  H into  buffer  bn  */ 

a /*  TODO:  complicated  issues  re  packing,  160  bits  is  tight...  */ 

n if  ( bn  I n s e r t B i g By t e s ( 8bn , hash,  0,  h->hashsize)  < 0) 
n a goto  nomem; 

n if  (bnHodC8bn,  8bn,  8sec->s.q)  < 0) 
n a goto  nomem; 

n /*  Add  into  s */ 
n if  (bnAdd(8s,  8bn)  < 0 | | 
n bnMod(8s,  8s,  8sec->s.q)  < 0) 

n D goto  nomem; 

n /*  Divide  by  k,  mod  q (k  inverse  held  in  bn)  */ 
n if  (bnlnv(8bn,  8k,  8sec->s.q)  < 0 || 

□ bnMuL(8s,  8s,  8bn}  < 0 | | 

n bnnod(8s,  8s,  8sec->s.q)  < 0) 

a n goto  nomem; 

n /*  That's  it,  now  to  pack  r and  then  s into  the  buffer  */ 
n t = pg pBn Pu t P L a i n ( 8 r , sig); 
n t +=  pgpBnPutPLain(8s,  sig+t); 
n if  (siglen) 
n n *sigLen  = (size_t)t; 

n i = 0 ; 

n goto  done; 

nomem : 

n i = PGPERR_NOMEM; 
n /*  f a L L through  */ 
done  : 

n pgpRandomDestroy(rc2); 
n bnEnd(8k) ; 
n bnEnd(8bn); 
n bnEnd(8s); 
n bnEnd(8r); 
n return  i; 

> 

/* 

* Re-encrypt  a PgpSecKey  with  a new  urn  a PgpSecKey  into  a secret  key. 

* A secret  key  is,  after  a non-specific  prefix: 

* 0 1 Version  (=  2 or  3) 

* 1 4 Timestamp 

* 5 2 Validity  (=0  at  present) 

* 7 1 Algorithm  ( =PG P_PK A LG_ D S A for  DSA) 

* The  following: 

* 0 2+u  MPI  for  prime  p 
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* 

2 + u 

2 + v 

MPI  for  order  q 

★ 

4 + u + v 

2 + w 

MPI  for  generator  g 

★ 

6+u+v+wb  2+x 

MPI 

for  pub  lie  key  y 

* 

8+u+v+w+x 

1 

Encryption  algorithm 

(0 

for  none,  1 for  IDEA) 

★ 

9+u+v+w+x 

t 

Enc  rypt ion  IV : 0 or 

8 bytes 

★ 

9+t+u+v+w+x 

2 + y 

MPI  for  X (discrete 

log 

of  public  key) 

★ 

1 1 +t+u+v+w+x+y 

2 

Checksum 

* 

1 3+t+u+v+w+x+y 

* 


* The  Encryption  algorithm  is  the  cipher  algorithm  for  the  old-style 

* St ri ng-to-key  conversion.  For  the  new  type,  it's  255,  then  a cipher 

* algorithm,  then  a s t r i ng- 1 o- key  algorithm  ( va r i a b I e- I e n g t h ) , 

* then  the  encryption  IV.  That's  16  bytes  plus  the  s t r i n g- t o- key 

* conversion  length. 

* 

* On  initial  key  generation  we  rely  on  calling  this  with  env=NULL  being 

* OK  if  phrase=NULL. 

*/ 

static  int 

d sa C ha ng e Loc k ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n struct  Pg p Ra nd omC on t e X t const  *rc,  char  const  *phrase,  si2e_t  plen) 

{ 

n struct  DSAsecPlus  *sec  = (struct  DSAsecPlus  * ) s e c key->p r i v ; 
n struct  PgpSt r i ngToKey  *s2k  = NULL;n  /*  Shut  up  warnings  */ 
n struct  PgpCipher  const  *cipher  = NULL;n  /*  Shut  up  warnings  */ 

n struct  Pg p C f b C on t e X t *cfb  = NULL;n  /*  This  is  realy  needed  */ 

n byte  *p; 

n int  oldf  = 0;n  n n n /*  Shut  up  warnings  */ 
n unsigned  len; 

n unsigned  checksum; 

n A S S E RT D S A ( s e c key->p k A I g ) ; 

a if  (sec-> locked) 

n a return  PG P E R R_KE Y_ I S LOC KE D ; 

n len  = bnBy t e s ( & s e c-> s . p ) + bnBy t e s ( &s e c-> s . q ) + bnBy t e s ( & s e c-> s . g ) + 

n bnBy t e s ( &s e c -> s . y ) + bnBy t e s ( &s e c->s . x ) + 13; 

n if  (phrase)  ■( 

n n s2k  = pg p S 2 Kd e f a u I t ( en v,  rc); 
n n i f ( ! s2k) 

n n n return  PGPERR_NOHEM; 

n n cipher  = pg p C i p h e r D e f a u I t Key ( e n v ) ; 

n a pg  p A s s e r t ( c i p h e r ) ; 

n n if  (Icipher)  { 

ana  pg p S 2 Kde s t r oy ( s 2 k ) ; 

n n n return  PGPERR_NOMEH; 

n n } 

n n len  +=  cipher->blocksize; 

n n cfb  = pgpCfbCreate(cipher); 

n n if  (!cfb)  { 

a a a pg  p S 2 Kd e s t r oy  ( s 2 k ) ; 

n B n return  PG P E R R_N OH  EM ; 

B B } 

B B oldf  = pg p S 2 Ki s 0 I d Ve r s ( s 2 k ) ; 

B B if  (!oldf) 

B B B len  +=  1 + s2k->encodelen; 

B > 
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n p = sec->cryptkey; 
n if  (Len  > s e c-> c ka L L o c ) { 
n n p = (byte  *)pgpHemReaLLoc(p,  Len); 
n n i f ( ! p)  { 

n n n pg pC f b D e s t roy ( c f b ) ; 

n n n pg pS 2 Kd e s t roy ( s 2 k ) ; 

n n n return  PG P E R R_N0M E M ; 

n n } 

n n sec->cryptkey  = p; 

n n sec->ckaLloc  = (size_t)Len; 

n } 

n sec->ckLen  = Len; 


n /*  Okay,  no  more  errors  possibLe! 
n p +=  pgpBnPutPLain(8sec->s.p,  p); 
n p +=  pgpBnPu t P L a i n ( 8sec->s . q , p); 
n p +=  pgpBnPutPLain(8sec->s.g,  p); 
n p +=  pgpBnPutPLain(8sec->s.y,  p); 


Start  instaLLing  data  */ 


/*  Encryption  parameters  */ 
if  (Iphrase)  { 

n *p++  = 0;n  /*  Unencrypted  */ 

e L se  { 

if  (oLdf)  { 

n *p++  = ci pher->type; 

} e L se  { 
n *p++  = 255; 

*p  + + = c i ph e r-> t y p e ; 

memcpyCp,  s2k->encodi ng,  s 2 k->en c od e L en  ) ; 
p +=  s 2 k->e n c ode L e n ; 


n 
□ 
n 
} 

/*  Create  IV  */ 

pgpRandomGetBytesCrc,  p,  cipher->bLocksize); 

/*  Use  data  buffer  as  temp  hoLding  space  for  key  */ 
pgp As se r t ( se c->c ka L L oc-c i ph e r->b L o c ks i ze  >=  c i p h e r-> key s i z e ) ; 
pg p S t r i ng ToKey ( s 2 k,  phrase,  pLen,  p+ c i p h e r->b L o c k s i z e , 
n c i ph e r-> key s i z e ) ; 

pgpCfblnitCcfb,  p+cipher->bLocksize,  p); 
pgpS2Kdestroy(s2k); 
p +=  cipher->bLocksize; 

/*  Wipe  key  * i mmed i a t e L y * */ 
memsetCp,  0,  c i p h e r-> key s i z e ) ; 


n /*  Now  instaLL  x,  encrypted  */ 
n checksum  = 0; 

n p +=  pg pBn Pu t N e w ( 8 s e c->s . X , p,  cfb,  8checksum); 
n pgpChecksumPutNewCchecksum,  p,  cfb); 
n p +=  2; 

n pgpAssert((ptrdiff_t)Len  ==  p - sec->cryptkey); 
n if  (cfb) 

a a pgpCfbDestroy(cfb); 

n return  0;n  /*  Success  */ 

> 


static  size_t 

d sa Se cBuf f e r Leng t h ( s t r u c t PgpSecKey  const  *seckey) 
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{ 

n struct  DSAsecPLus  const  *sec  = (struct  DSAsecPLus  * ) s e c key-> p r i v ; 

n return  sec->ckLen; 

> 

static  void 

dsa Se cToBuf f e r ( s t r u c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

n struct  DSAsecPLus  const  *sec  = (struct  DSAsecPLus  *)seckey->priv; 

n memcpy(buf,  s e c -> c r y p t key , sec->ckLen); 

n /*  Return  onLy  a L g o r i t h m-d e pe n d e n t portion  */ 

> 


/*  FiLL  in  secret  key  structure  */ 
static  void 

dsa F i L L Se cKey ( s t ru c t PgpSecKey  *seckey,  struct  DSAsecPLus  *sec) 
{ 


n sec key->p kA L gn 
n seckey->privn 
n se c key->de s t roy 
#if  0 

n seckey->id8 
#endi f 

n s e c key->pu b key 
n seckey->i s Locked 
n s e c key->u n L o c k 
n seckey->Lock 
n s e c key->ma xde c r y p t ed 
n seckey->decrypt 
n s e c key->ma X s i g 
n s e c key->s i g n 
a seckey->changeLock 
n s e c key->bu f f e r Le ng t h 
n seckey->toBuf f er 
> 


PGP_PKALG_DSA; 

sec; 

dsaSecDestroy; 

dsaSecldS; 

dsaPubkey; 

dsalsLocked; 

dsaLInLock; 

dsaLock; 

dsaMaxdecrypted; 
dsaDecrypt ; 
dsaMaxsi g; 
d s a S i g n ; 
dsaChangeLock; 
dsaSecBufferLength; 
dsaSecToBuffer; 


struct  PgpSecKey  * 

dsa Se c F romBuf ( by t e const  *buf,  size_t  size,  int  *error) 
{ 


n 

struct 

PgpSecKey  *seckey; 

n 

struct 

DSAsecPLus  *sec; 

n 

i nt 

err 

= PGPERR_N0MEH; 

n 

byte 

*cryptk; 

n 

bnlnit(); 

n 

c rypt  k 

= (byte  * ) pg pMem A L L 0 c ( s i z e ) ; 

n 

if  ( 

c rypt  k)  { 

u 

Et 

sec 

= (struct  DSAsecPLus  *)pgpHemALLi 

n 

n 

i f 

(sec)  { 

n 

n 

n 

seckey  = (struct  PgpSecKey  *) 

n 

n 

n 

n pg pM emA L L 0 c ( s i z e 0 f ( * s e c key  ) ) 

n 

□ 

n 

if  (seckey)  ( 

n 

n 

Q 

n mem c py ( c r y p t k , buf,  size); 
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Q 

a 

n 

B 

bnBegi n(&sec->s . p); 

n 

n 

n 

B 

bnBegin(&sec->s.q); 

n 

n 

a 

B 

bnBegi n(&sec->s . g) ; 

n 

n 

n 

B 

bnBegi n(&sec->s . y) ; 

a 

n 

B 

B 

bnBegi n(&sec->s  . x)  ; 

n 

n 

B 

B 

sec->cryptkey  = cryptk; 

□ 

n 

B 

B 

sec->cklen  = sec->ckalloc  = size; 

n 

n 

B 

B 

sec -> locked  = 1; 

n 

Q 

B 

B 

/*  We  only  need  this  to  try  unlocking...  */ 

Q 

□ 

B 

B 

seckey->pkAlg  = PG P_PK A LG_ D S A ; 

n 

n 

B 

B 

seckey->priv  = sec; 

D 

D 

B 

B 

o 

n 

B 

B 

if  ( d s a Un 1 o c k ( s e c key , NULL,  NULL,  0)  >=  0)  { 

n 

n 

B 

B 

n if  ( d s a Key TooB i g (NULL,  &sec->s))  ( 

Q 

a 

B 

B 

n n err  = PG P E R R_KE Y_U N S U P P ; 

S 

n 

B 

B 

n } e 1 se  { 

n 

n 

B 

B 

n n dsaFillSecKey(seckey,  sec); 

n 

n 

B 

B 

n n *error=0; 

n 

□ 

B 

B 

n u return  seckey;n  /*  Success!  */ 

n 

n 

B 

B 

Q } 

n 

n 

B 

B 

} 

n 

□ 

n 

□ 

n 

n 

n 

□ 

Q 

D 

n 

y 


n 

n 

n 

n 

n 

□ 

n 

□ 

> 


n n /*  Ka-boom.  Delete  and  free  everything.  */ 
n n memsetCcryptk,  0,  size); 
n n memsetCsec,  0,  s i z e o f ( * s e c ) ) ; 
n n pg pMem F r e e ( s e c key ) ; 

n > 

n pgpHemFreeCsec); 

> 

pgpMemFreeCcryptk); 


*error  = err; 
return  NULL; 


#if  0n  /*  Disabled  to  avoid  use  of  libm  */ 

/* 

* Heuristic  algorithm  to  estimate  the  size  of  the  prime  order  for  the 

* generator  for  DSA  signatures. 

* 

* sLowfactor  is  L n ( L n ( n ) ) ** ( 2 / 3 ) . 

* Formula  for  work  factor  is  expC2.08*(Ln  n ) ** ( 1 / 3 ) *s I o w f a c t o r ) , where 

* that  2.08  is  sensitive  to  the  algorithm.  This  assumes  some  pretty  good 

* version  of  NFS. 

* Change  to  use  base  2 and  we  get: 

* 2**(2 . 656*( log2  n ) ** ( 1 / 3 ) * s I o w f a c t o r ) . 

* We  assume  a DH  exponent  of  160  is  about  right  for  n of  about  2**1000. 

* When  we  change  the  DH  exponent  by  n bits  we  get  2**(n/2)  increase  in 

* work  factor,  so  to  find  out  how  much  we  should  change  it,  take  the 

* power  of  2 in  the  formula  above,  double  it,  and  subtract  the  value 

* for  n=1000,  then  add  160. 

* This  leads  to  5.3  * slowfactor  * (log2  n)**(1/3)  all  minus  25  (-185.5+160). 

* 

* A simpler  approximation  holds  slowfactor  constant.  Varies  from  3.5  at 

* bitsize  of  1000  to  4.0  at  4000  bits,  so  I found  that  4.5  made  a good 

* conservative  approximation  for  values  in  this  range.  Then  heuristic 

* formula  becomes  cube  root  of  size  of  prime  in  bits,  times  24,  minus  80. 

* This  can  be  calculated  pretty  well  in  int  arithmetic  if  we  want  to. 
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*/ 

static  unsigned 

dsaOrderBits  (unsigned  primebits) 

{ 

a unsigned  size; 

□ double  sLowfactor; 

n double  logbits; 

□ 

n logbits  = log((double)primebits); 
n slowfactor  = exp((2./3.)*log(-.366  + logbits)); 
n size  = 5.3  * slowfactor  * e x p ( I og b i t s / 3 . ) - 25; 

n return  size  >=  160  ? size  : 160; 

} 

Send  i f 


/* 

* Generate  an  DSA  secret  key  with  prime  of  the  specified  number  of  bits. 

* Make  callbacks  to  progress  function  periodically. 

* Secret  key  is  returned  in  the  unlocked  form,  with  no  passphrase  set. 

* fastgen  tells  us  to  use  canned  primes  if  available. 

* 

* PGP  attempts  to  acquire  enough  true  random  entropy  in  the  randpool  to 

* make  the  keys  it  generates  fully  random  and  unpredictable,  even  if  the 

* RNG  used  to  generate  them  were  later  found  to  have  some  weaknesses.  With 

* RSA  keys  it  gets  as  many  bits  as  the  size  of  the  modulus  since  the  sizes 

* of  the  secret  primes  p and  q will  add  up  to  the  size  of  the  modulus. 

* (This  is  slight  overkill  since  the  entropy  in  a random  prime  is  less 

* than  the  entropy  of  a random  number  because  not  all  numbers  are  prime.) 

* 

* With  discrete  log  based  keys,  DSA  and  ElGamal,  only  the  private  exponent 

* X needs  to  be  kept  secret.  However,  the  public  values  are  generated  at 

* the  same  time  as  x,  and  are  seeded  ultimately  from  the  same  randpool. 

* These  values  could  theoretically  leak  information  about  the  state  of  the 

* randpool  when  they  were  generated,  and  therefore  about  x.  This  would 

* require  a very  powerful  attack  which  will  probably  never  be  possible, 

* but  we  want  to  defend  against  it.  One  approach  would  simply  be  to  acquire 

* as  much  additional  entropy  as  is  needed  for  the  public  values,  but  that 

* is  wasteful.  The  public  values  don't  need  to  be  random,  we  just  want  them 

* to  be  different  among  users. 

it 

* Instead,  we  create  a "firewall"  between  the  randpool  and  the  public 

* key  values.  We  instantiate  a second  Pg p Ra nd omC o n t ex t which  is  not 

* based  on  the  randpool  but  is  a simple  pseudo  RNG,  and  seed  it  with 

* a fixed  number  of  bits  from  the  true  RNG.  We  choose  enough  bits 

* for  the  seeding  that  different  keys  will  not  share  the  same  public 

* values.  Only  this  fixed  number  of  bits  reflects  the  state  of  the 

* randpool,  so  we  acquire  that  many  bits  of  additional  entropy  before 

* beginning  the  keygen.  This  second  RNG,  rcdummy  below  and  in  the 

* ElGamal  keygen,  is  used  to  generate  the  public  values  for  the  discrete 

* log  key . 

*/ 

struct  PgpSecKey  * 

d s a S e c G e n e r a t e ( u n s i g n e d bits.  Boolean  fastgen, 
n struct  PgpRandomContext  const  *rc, 

n int  p r og r e s s ( VO i d *arg,  int  c),  void  *arg,  int  *error) 

{ 
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n struct  PgpSecKey  *seckey  = NULL; 

n struct  DSAsecPLus  *sec; 

n struct  PgpRandomContext  *rcdummy  = NULL; 
n struct  BigNum  h; 

n struct  BigNum  e; 

n unsigned  qbits; 
n i n t i ; 

n byte  dummyseedEDSADUHMYBITS/83; 
n *error  = 0; 

n /*  Initialize  Local  pointers  (simplify  cleanup  below)  */ 
n seckey  = NULL; 
n sec  = NULL; 
n bnBegin(&h); 
n bnBeginCSe); 

n /*  Limit  the  size  we  will  generate  at  this  time  */ 
a if  (bits  > MAX_DSA_PRIHE_BITS ) { 
n n *error  = PG PE R R_PUBKE Y_T00B I G ; 
n n goto  done; 
n } 


n /*  Allocate  data  structures  */ 

n seckey  = (struct  PgpSecKey  * ) pg pMem A L L o c ( s i z e of ( *s e c key  ) ) ; 
n if  (!seckey) 

n n goto  memerror; 

n sec  = (struct  DSAsecPLus  * ) pg pMem A L L o c ( s i z e o f ( * s e c ) ) ; 
a if  ( ! sec) 

n n goto  memerror; 

a 

n bnBegin(&sec->s.p); 

n bnBegin(&sec->s.q); 

n bnBegin(&sec->s.g); 

n bnBegi n(8sec->s . y ); 

n bn  Beg i n ( 8s e c-> s . X ) ; 


n 

/* 

Use 

fixed  primes  and  generator  if 

D 

i f 

(fastgen)  { 

n 

n 

byte  const  *fixedp,  *fixedq; 

n 

□ 

size_t  fixedpLen,  fixedqlen; 

n 

n 

i f 

(pgpDSAfixed  (bits,  8fixedp, 

n 

Q 

B 

bn  I n se r t Bi gBy t e s (8sec->s.q, 

Q 

n 

B 

i f (progress) 

n 

B 

B 

n progress(arg,  ' '); 

n 

B 

B 

bn  I nse r t B i gBy t es  (8sec->s.p, 

D 

B 

B 

if  (progress) 

n 

B 

B 

n progress(arg,  ' '); 

n 

B 

B 

qbits  = bnBits  (8sec->s.q); 

n 

B 

B 

goto  choose_g; 

Q 

B 

> 

□ 

> 

in  our  table  */ 


8fixedpLen,  8fixedq,  8fixedqLen)  > 0 ) ■( 
fixedq,  0,  fixedqlen); 

fixedp,  0,  fixedpLen); 


n /*  Set  up  and  seed  Local  random  number  generator  for  p and  q */ 
n rcdummy  = pg p P s eudoRa ndomC r ea t e (); 
n i f ( ! r c dummy ) 
n n goto  memerror; 

n pg p Ra ndomG e t By t e s (rc,  dummyseed,  s i zeof ( dummy  seed )) ; 
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n pg pRa n dom AddBy t e s (rcdummy,  dummyseed,  s i z eo f ( d ummy s e ed ) ) ; 
n /* 

n * Choose  a random  starting  place  for  q,  in  the  high  end  of  the  range 
n */ 

n if  (bits  <=  1024) 

a n qbits  = 160;n  /*  Follow  the  published  standard  */ 

n else 

n n qbits  = pgpDiscreteLogExponentBits(bits); 

n if  ( pgpBnGenRa nd ( &s ec->s . q,  rcdummy,  qbits,  0xFF,  1,  qbits-9)  < 0) 
a n goto  nomem; 

n /*  And  search  for  a prime  */ 

n i = bnPrimeGen(&sec->s.q,  NULL,  progress,  arg,  0); 

n if(i<0) 

n n goto  nomem; 

n if  (progress) 

n n p r og r e s s ( a r g , ' '); 

n /*  ...and  now  a random  start  for  p (we  discard  qbits  bits  of  it)  */ 
n (void)bnSetQ(&sec->s.p,  0); 

n if  ( pgpBnGenRa nd ( &s e c->s . p,  rcdummy,  bits,  0xC0,  1,  bits-qbits)  < 0) 
n n goto  nomem; 


n 

/* 

Temporarily  double  q * 

/ 

n 

i f 

(bnLShi f t (&sec->s . q,  1)  < 0) 

a 

B 

goto  nomem; 

a 

/* 

Set  p = p - (p  mod  q ) 

+ 1,  i.e.  congruent  to  1 

mod  2*q  */ 

a 

i f 

(bnHod(&e,  &sec->s.p. 

&sec->s.q)  < 0) 

a 

B 

goto  nomem; 

a 

i f 

( bn S u b ( & s e c-> s . p , &e) 

< 0 1 1 b n Ad  da ( & s e c-> s . p , 

1 ) < 0) 

a 

B 

goto  nomem; 

a 

/* 

And  search  for  a prime 

, 1+2kq  for  some  k */ 

a 

i = 

: bn P r i meG e n S t r 0 ng ( & s e c 

->s.p,  &sec->s.q,  progress,  arg); 

a 

i f 

(i  < 0) 

a 

B 

goto  nomem; 

a 

i f 

(progress) 

a 

B 

progress(arg,  ' '); 

a 

/* 

Reduce  q agai n */ 

a 

bnRShift(&sec->s.q,  1); 

a 

/* 

Hay  get  here  directly 

from  above  if  fixed  primes  are  used 

choose_g: 

n /*  Now  hunt  for  a suitable  g - first,  find  (p-1)/q  */ 
n if  ( bn D i vMod ( &e , &h,  &sec->s.p,  &sec->s.q)  < 0) 
n n goto  nomem; 

n /*  e is  now  the  exponent  (p-1)/q,  and  h is  the  remainder  (one!)  */ 
n pg p As s e r t ( b nB i t s ( & h ) ==1 ) ; 

B if  (progress) 

B B p r og r e s s ( a r g , '.'); 

B /*  Search  for  a suitable  h */ 

B if  (bnSet9(&h,  2)  <0  | | 

B b nT wo ExpMod ( & s e c -> s . g , &e,  8sec->s.p)  < 0) 
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n n goto  nomem; 

n while  ( bnB i t s ( &s e c ->s . g ) < 2)  { 
n n if  (progress) 

n n n p r og r e s s ( a r g , '.'); 

n n if  (bnAddQ(&h,  1)  < 0 | | 

n a bnExpHod(&sec->s . g,  &h,  &e,  &sec->s.p)  < 0) 

a a a goto  nomem; 

a } 

n if  (progress) 
a a p r og r e s s ( a r g , ' '); 


a 

a 

a 

a 

a 

a 


/*  Choose  a random  0 < x < q of  reasonable  size  as  secret  key  */ 
if  ( pg pBnGe n Ra nd ( & s e c-> s . X , rc,  qbits  + 8,  0,  0,  qbits)  <0  |{ 
bnHod(&sec->s . X,  &sec->s.x,  8sec->s.q)  < 0) 
n goto  nomem; 

/*  prob.  failure  < 2^-140  is  awful  unlikely...  */ 
pg p As s e r t ( bnB i t s ( & s e c->s . X ) > 20); 


a /*  And  calculate  g**x  as  public  key  */ 

n if  ( bnExpHod ( Sse c->s . y , 8sec->s.g,  8sec->s.x,  8sec->s.p)  < 0) 
a a goto  nomem; 


a /*  And  that's  it...  success!  */ 


a /*  Fill  in  structs  */ 

a sec->cryptkey  = NULL; 

a sec->ckalloc  = sec->cklen  = 0; 
a sec-> locked  = 0; 
a d sa F i I I SecKey ( s e c key , sec); 

a /*  Fill  in  cryptkey  structure,  unencrypted  */ 
a dsaChangeLock  (seckey,  NULL,  NULL,  NULL,  0); 

a goto  done ; 


nomem : 

a bn En d ( 8 s e c->s . p ) ; 

a bnEnd(8sec->s . q); 
a bnEnd(8sec->s.g); 
a bnEnd(8sec->s.y); 
a bnEnd(8sec->s.x); 
a /*  Fall  through  */ 
memerror  : 

a pg pMem F r ee ( s e c key ) ; 

a pgpMemFree(sec); 
a seckey  = NULL; 

a *error  = PG PE RR_N0H EM ; 

a /*  Fall  through  */ 
done  : 

a bnEnd(8h); 
a bnEnd(8e); 

a i f ( r cd  ummy ) 

a a pgpRandomDestroy  (redummy); 

a return  seckey; 

} 
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/* 

* Local  Variables: 

* tab-wi dth : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpDSAKey . h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpDSAKey. h,v  1.4. 2.1  1 997/06/07  09:51:22  mhw  Exp  $ 

*/ 

#ifndef  PGPDSAKEY.H 
#define  PGPDSAKEY.H 

^include  "pgpUsuals.h"n  /*  For  byte  */ 

#incLude  <stddef.h>n  /*  For  size.t  */ 

#ifdef  cplusplus 

extern  "C"  { 

#end i f 

/*  Bits  for  uniqueness  of  p,  q */ 

#define  DSADUMMYBITSn  64 

struct  PgpPubKey; 
struct  PgpSecKey; 
struct  PgpRandomContext; 

struct  PgpPubKey  *dsaPubFromBuf(byte  const  *buf,  size.t  len,  int  *error); 
struct  PgpSecKey  *dsaSecFroniBuf(byte  const  *buf,  size.t  Len,  int  *error),- 
int  d sa Pu bKey P r e f i X S i z e ( by t e const  *buf,  size.t  size); 

struct  PgpSecKey  * 

d s a S e c G e n e r a t e ( un s i g ned  bits.  Boolean  fastgen, 
n struct  PgpRandomContext  const  *rc, 

n int  p r og r e s s ( VO i d *arg,  int  c),  void  *arg,  int  *error); 

#ifdef  cplusplus 

> 

# e n d i f 

#endif  /*  PGPDSAKEY.H  */ 
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/* 

* pgpESK.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpESK.c, V 1.2. 2.1  1 997/06/07  09:51:24  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end i f 


# i nc  L ude 
#incLude 
#incLude 
# i n c L ude 
#incLude 
# i n c L ud e 
# i nc  L ude 
SincLude 
#i nc  Lude 
#incLude 
#incLude 
# i n c L ude 


pgpDebug.h" 
pgpESK. h" 
pgpPktLi St . h" 
pgpAnnotate  . h 
pgpCFB.h” 
pgpCipher.h" 
pgpHash . h" 
pgpMem. h" 
pgpErr.h" 
pgpPubKey.h" 
pgpStr2Key. h" 
pgpUsuaLs.h" 


#define  ESKTYPE_CONVn  ( PG P_ E S KT Y P E_P AS S PH R A S E<<8 ) 

#define  E S KT YP E_N E W C ON V ( ( PG P_ E S KT Y P E_ P AS S P H R A S E<<8 ) + 1 ) 

#define  ESKTYPE_PKn  C PG P_ E S KT Y P E_ PUBKE Y<<8  ) 

#define  ESKTYPE  RSAn  CCPGP  ESKTYPE  PUBKE Y<<8 ) +PG P PKALG  RSA) 


struct  PgpESK  { 
n struct  PktList  pkt; 

>; 


/* 

* A PK  ESK 

* 0 1 
* 1 8 

* 9 1 

* 10 
*/ 


i s : 

Version 
Key  I D 
PK  a Lg 
A L go  r i t hm 


speci  f i c 


data 


static  int 

e s kPub keyVa L i da t e ( by t e const  *buf,  size_t 
{ 


a unsigned  bits; 


L e n ) 


□ 

□ 

□ 

□ 

D 

Q 

Q 

Q 

n 

Q 

Q 

□ 


if  (Len  < 1) 

n return  PG P E RR_ E S K_T00 S H 0 RT ; 

if  (bufC0]  !=  2 S&  bufC0!]  !=  3 S&  bufC0D  !=  4)a  /*  Version  byte  */ 
n return  PG PE R R_ E S K_B A D V E R S I 0 N ; 

if  (Len  < 10) 

n return  PGPERR_ESK_TOOSHORT; 

switch  (bufC9D)  Cn  /*  ALgorithm  Byte  */ 

case  PGP_PKALG_RSA : 

n bits  = ( ( u n s i g n e d ) b u f C 1 0 3 <<8  ) + bufC113; 

n if  (Len  !=  1 2+ ( b i t s+7 ) / 8 ) 

n n return  Len  < 1 2+ ( b i t s+7 ) / 8 ? PG PE R R_ E S K_T00 S H 0 RT  : 

n n n n a PGPERR_ESK_TOOLONG; 
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a a return  E S KT Y P E_R S A ; 

n } 

n return  ESKTYPE_PK  + buf:9:; 


* A SK  ESK  is: 


* 

0 

1 

Version 

★ 

1 

1 

Cipher 

* 

2 

X 

StringToKey  (x  >=  1) 

* 

*/ 

2 + x 

y 

ESK  (y  >=  0) 

static  i nt 

e s kCon V key Va L i da t e (byte  const  *buf,  size_t  Len) 
{ 

n struct  PgpCipher  const  *c; 

n intret; 


n 

□ 

□ 

n 

D 

D 


if  ( ! L e n ) 

n return  E S KT Y P E_C 0 N V ; 

if  (len  < 3) 

n return  PG P E R R_ E S K_T 00 S HO RT ; 

if  (bufC0]  !=  4)n  /*  Version  byte  */ 

n return  PG P E R R_ E S K_B A D VERSION; 


n /*  Try  to  decode  the  ESK  */ 

n c = pgpCi pherByNumber  (bufC13); 

n i f ( ! c ) 

B B return  PG PE RR_ E S K_B A D A LG  0 R I T H H ; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


/*  Decode  the  string  to  key  algorithm  */ 

ret  = pgpS2Kdecode  (NULL,  NULL,  buf+2,  len-2); 

if  (ret  < 0) 

B return  ret ; 

if  (ret  ==  0) 

B return  PGPERR_ESK_BADALGORITHri; 

len  -=  2+ret ; 
if  (len  ==  0) 

B return  ESKTYPE.NEWCONV; 

if  (len  < c->keysize+1) 

B return  PGPERR_ESK_T00SH0RT; 

if  (len  > c-> key s i z e+1 ) 

B return  PGPERR_ESK_T00L0NG; 

return  ESKTYPE_NEWCONV; 


static  struct  PgpESK  ** 

es kLi s t Ta i I ( s t r uc t PgpESK  **head) 

{ 

B while  (*head) 

B B head  = (struct  PgpESK  **  ) & ( *h e a d ) ->p k t . n ex t ; 

B return  head; 

> 


/*  Add  an  PgpESK  to  a list  thereof  */ 
i nt 

pgpE s kAdd ( s t r u c t PgpESK  **esklist,  int  type,  byte  const  *buf,  size_t  len) 
{ 
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n struct  PgpESK  *esk; 

n i n t i ; 


□ 

n 

n 

Q 

n 

n 

□ 

a 

a 

Q 

□ 

n 

□ 

a 

n 

o 

n 

> 


switch  (type)  { 

case  PGPANN_SKCIPHER_ESK: 

H i = e s kC o n V key Va L i d a t e ( b u f , Len); 

n i f ( i < 0 ) 

n n return  i; 

n break; 

case  PGPANN_PKCIPHER_ESK: 
n i = e s k Pu  b key  Va  L i da  t e ( bu  f , len); 

n ifCi<0) 

n n returni; 

n break; 

default  : 

n return  PG P E R R_ E S K_B A DT Y P E ; 

} 

esk  = (struct  PgpESK  * ) pg p P k t L i s t N e w ( i , buf,  len); 
*e s kL i s t Ta i I ( e s k I i s t ) = esk; 
return  esk  ? 0 : PGPERR.NOMEH; 


/*  A feu  trivial  access  functions  */ 


void 

pg p E s k F r e e L i s t (struct  PgpESK  *esklist) 

{ 

n pg p P k t L i s t F r e e L i s t ( ( s t r u c t PktList  *)esklist); 

> 


struct  PgpESK  * 

pgpEskNext  (struct  PgpESK  const  *esk) 

{ 

n i f ( e s k ) 

n n return  (struct  PgpESK  * ) e s k->p k t . nex t ; 

n return  NULL; 

> 


i nt 

pgpE s kTy pe ( s t ru c t PgpESK  const  *esk) 

{ 

n return  e s k-> p k t . t y pe  >>  8; 

} 

/*  Returns  PG P_ PK A LG_x xx  */ 
i n t 

pgpE s kPKA I g ( s t r u c t PgpESK  const  *esk) 

{ 

n pgpAssert (esk->pkt . type  >>  8 ==  PGP_ESKTYPE_PUBKE Y ) ; 

n return  e s k->p k t . t y p e S 255; 

} 

byte  const  * 

pg p E s k I d 8 ( s t r u c t PgpESK  const  *esk) 

{ 

a pgpAssert (esk->pkt . type  >>  8 ==  PG P_ E S KT Y P E_PUBKE Y ) ; 

n return  esk->pkt.buf+1; 
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/* 

* Return  the  size  of  the  Largest  possible  key  that  may 

* be  produced  as  output  from  and  e s kXXde c r y p t ( ) function. 

*/ 

s i ze_t 

pg p E s kMa xKey S i z e (struct  PgpESK  const  *esk) 

{ 

n switch  (pgpEskType  (esk))  { 

n case  PG P_ E S KT YP E_PA S S PH R A S E : 

n n return  (size_t)  (max  ((int)25,  ( i n t ) ( ( ( i n t ) e s k->p k t . L e n ) -3 ) ) ) ; 

n case  PGP_ESKTYPE_PUBKEY : 

n a /*  XXX  — this  only  works  with  RSA,  no?  Need  a PgpSecKey 

a a object  to  do  better,  though.*/ 

a a return  max  (25,  e s k->p k t . L e n-1 0 ) ; 

a > 

a returnO; 


/* 

★ 

★ 

★ 

*/ 
i n t 


The  "key"  is  from  a pass  phrase.  Returns  the  Length  of  the  key, 
which  is  <aLgorithm  i dent  i f i e rxkey  bits>.  The  actual  key  is 
obtained  via  a st r i ng-to-key  operation. 


pg p E s kC o n V D e c r y p t ( s t r u c t PgpESK  const  *esk,  struct  PgpEnv  const  *env. 


n char  const  *pass,  size_t  pLen,  byte  *buf) 

struct  PgpStringToKey  *s2k  = NULL; 
struct  PgpCf bContext  *cfb  = NULL; 
int  ret  = 0; 


s 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

n 

Q 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


switch  ( esk->pkt . type  & 0xff)  { 


B 

B 

B 

B 

B 

case 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

case 

B 

B 

fl 

B 


1 : 


struct  PgpHash  const  *hash; 
struct  PgpCipher  const  *c; 
byte  *key; 
byte  const  *of f ; 
i nt  Len; 

/*  OLd-styLe  (non  ConvESK)  */ 

hash  = pgp H a s h By Numbe r ( PG P_H A S H_M D 5 ) ; 

if  C ! hash) 

n return  PGPERR_BAD_HASHNUM; 

c = pg pc i ph e r By N umbe r ( PGP_C I P H E R_I D E A ) ; 
if  C ! c) 

B return  PG PE RR_BAD_C I PH E R NUM ; 

s2k  = pgpS2KsimpLe  (env,  hash); 
bufi:0:  = PGP_CIPHER_IDEA; 

ret  = pgpS t r i ngToKey  (s2k,  pass,  pLen,  buf+1,  c->keysize); 
if  ( ! ret ) 

n ret  = c->keysize+1; 

break; 

c = pgpC i p h e r By Numb e r ( e s k->p k t . b u f C 1 ] ) ; 
if  ( ! c) 

B return  PG P E R R.BA D_ C I PH E RN UM ; 

ret  = pgpS2Kdecode  (&s2k,  env,  e s k->p k t . bu f +2 , e s k->p k t . L e n-2 ) ; 
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□ 

n 

i f 

(ret 

< 0) 

n 

n 

B 

return  ret; 

n 

□ 

i f 

( ! s2k) 

a 

n 

B 

return  PG P E R R_N0H EH ; 

n 

B 

i f 

( e s k 

->pkt . Len-2-ret  !=  0)  { 

n 

B 

B 

/*  We  have  an  ESK  in  the  packet  */ 

n 

B 

B 

off  = esk->pkt . buf +2+ret;  /*  ESK  starts  here 

n 

B 

B 

Len  = e s k->p k t . L e n-2 - r e t ; /*  ESK  Length  */ 

n 

B 

B 

cfb  = pgpCfbCreate  Cc); 

n 

B 

B 

if  ( ! cf b)  { 

□ 

B 

B 

n ret  = PG P E R R_ NON  EH ; 

n 

B 

B 

n break; 

Q 

B 

B 

> 

n 

B 

B 

key  = (byte  *)pgpHemALLoc  (c->keysize); 

n 

B 

B 

if  (!key)  C 

n 

B 

B 

a ret  = PGPERR.NOHEH; 

n 

B 

B 

n break; 

n 

B 

B 

> 

n 

B 

B 

ret  = pg pS t r i ngToKey  (s2k,  pass,  pLen,  key. 

n 

B 

B 

n n c->keysize); 

a 

B 

B 

if  ( ret ) { 

u 

B 

B 

n memset  (key,  0,  c->keysize); 

n 

B 

B 

n pgpHemFree  (key); 

a 

B 

B 

n break; 

n 

B 

B 

> 

n 

B 

B 

pgpCfblnit  (cfb,  key,  NULL); 

n 

B 

B 

memset  (key,  0,  c->keysize); 

n 

B 

B 

pgpHemFree  (key); 

Q 

B 

B 

pgpCfbDecrypt  (cfb,  off,  buf,  Len); 

n 

B 

B 

pgpCfbUipe  (cfb); 

Q 

B 

B 

ret  = Len; 

n 

B 

> e 

L s e 

{ 

n 

B 

B 

/*  this  is  just  a key  to  use  */ 

n 

B 

B 

buf [03  = c->type; 

Q 

B 

B 

ret  = pgpS t r i ngToKey  (s2k,  pass,  pLen,  buf+1 

n 

B 

B 

n n c->keys i ze ) ; 

□ 

B 

B 

if  ( ! ret ) 

n 

fl 

B 

n ret  = c-> key s i z e+ 1 ; 

n 

B 

} 

n 

B 

break; 

n 

def au  Lt : 

n 

B 

ret 

= PGPERR_BADPARAM; 

D 

> 

n 

i f 

(s2k) 

n 

B 

pg p S 2 Kd e s t r oy  (s2k); 

n 

i f 

( c f b ) 

s 

B 

pgpCfbDestroy  (cfb); 

n 

return  ret; 

> 

/* 

* Do  pubLic-key  decryption  - buf  must  be  "big  enough"  as  defined  by 

* pgpSecKeyMaxDecryptedC ) . Returns  the  Length  of  the  decrypted  key,  or 

* <0  on  error. 

*/ 
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i nt 

pg p E s kPKde c ry p t ( s t r u c t PgpESK  const  *esk,  struct  PgpEnv  const  *env, 

H n struct  PgpSecKey  *sec,  byte  *buf) 

{ 

n size_t  Len; 

n interr; 

n pgpAssert  ( s e c->d e c r y p t ) ; 

n /*  XXX  should  "die"  gracefully,  here  */ 

n err  = pg p S e c Key D e c r y p t ( s e c , env,  pg p E s kPKA I g ( e s k ) , e s k->p k t . b u f + 1 0 , 

n n n e s k->p k t . I e n- 1 0 , buf,  8len,  NULL,  0); 

n if(err) 

n a returnerr; 

a return  (int)  len; 

} 
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/* 

* pgpESK.h  --  Encrypted  Session  Key  handler. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpESK.h, V 1.3. 2.1  1997/06/07  09:51:24  mhw  Exp  $ 

*/ 

#ifndef  PGPESK_H 
#define  PGPESK_H 

SincLude  "pgpUsuals.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

Send  i f 

/*  Return  values  from  eskType  */ 

Sdefine  PGP_ESKTYPE_PASSPHRASE  0 
Sdefine  PG P_ E S KT Y P E_ PU BKE Y 1 

struct  PgpEnv; 

Sifndef  TYPE_PGPENV 

Sdefine  TYPE_PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

Send  i f 

struct  PgpESK; 

Sifndef  TYPE_PGPESK 

Sdefine  TYPE_PGPESK  1 

typedef  struct  PgpESK  PgpESK; 

Sendi f 

struct  PgpSecKey; 

Sifndef  T Y P E_ PG PS E C KE Y 

Sdefine  T Y PE_PG PS E C KE Y 1 

typedef  struct  PgpSecKey  PgpSecKey; 

Sendi f 

/*  Some  access  functions.  */ 

int  PGPExport  pgpEskType  (struct  PgpESK  const  *esk); 

int  PGPExport  pgpEskPKALg  (struct  PgpESK  const  *esk); 

byte  const  PGPExport  *pgpEskId8  (struct  PgpESK  const  *esk); 

/*  How  big  might  the  output  key  possibly  be?  */ 

size_t  PGPExport  pg p E s kMa x Key S i z e (struct  PgpESK  const  *esk); 

/* 

* The  "key"  is  a passphrase.  Returns  the  length  of  the  key,  which 

* is  <aLgorithm  i dent  i f i e rxkey  bits> 

*/ 

int  PGPExport  pgpEskConvDecrypt  (struct  PgpESK  const  *esk, 

n struct  PgpEnv  const  *env,  char  const  *pass,  size_t  pLen,  byte  *buf); 

/*  Do  public-key  decryption  */ 

int  PGPExport  pg p E s k PKd e c r y p t (struct  PgpESK  const  *esk, 
n struct  PgpEnv  const  *env,  struct  PgpSecKey  *sec,  byte  *buf); 

struct  PgpESK  PGPExport  *pgpEskNext  (struct  PgpESK  const  *eskList); 
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int  PGPExport  pgpEskAdd  (struct  PgpESK  **esklist,  int  type,  byte  const  *buf, 
n si ze_t  L en  ) ; 

void  PGPExport  pg p E s k F r e e Li s t (struct  PgpESK  *eskList); 

#ifdef  cpLusplus 

> 

# e n d i f 

#endif  /*  PGPESK  H */ 
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/* 

* pgpELGKey.c  — ELGatnaL  encryption 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpELGKey . c,v  1.9. 2. 3 1997/06/07  09:51:25  mhw  Exp  $ 

*/ 

/*  Experiment  with  EL  GamaL  signatures  */ 

#undef  ELGSIGS 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 


#i  nc  Lude 

"pgpDebug . h" 

#incLude 

"pgpELGKey. h" 

#incLude 

"pgpKeyMi sc . h" 

#i  nc  Lude 

" bn . h " 

# i n c L ud e 

"bnprime. h" 

Sine  Lude 

"pgpCFB. h" 

#incLude 

"pgpCipher.h" 

# i n c L ude 

"pgpFixedKey.h 

#i nc  Lude 

" bnge  rma i n . h " 

#incLude 

"pgpHash.h" 

#i nc  Lude 

"pgpMem. h" 

#incLude 

"pgpErr.h" 

#i nc  Lude 

" bnprime. h" 

SincLude 

"pgpPubKey . h" 

#i nc  Lude 

"pgpRndom. h" 

SincLude 

" pg pS  t r 2Key . h " 

#incLude 

"pgpUsuaLs.h" 

#ifndef  NULL 
#def i ne  NULL  0 
#end i f 

#define  ASSERTELG(aLg)  pgpAssert((ALGHASK(aLg))==PGP_PKALG_ELGAMAL) 
struct  ELGpub  { 


n 

struct 

Bi gNum 

p;n 

n 

/* 

Pub  L i c 

prime  * / 

n 

struct 

Bi gNum 

g;n 

□ 

/* 

Pub  L i c 

generator  */ 

n 

>; 

struct 

Bi gNum 

y;n 

n 

/* 

Pub  L i c 

key,  g**x  mod  p */ 

struct  ELGsec  { 

n 

struct 

B i g N urn 

p;n 

n 

/* 

Copy  of 

pubLic  parameters 

*/ 

n 

struct 

B i g N urn 

g; 

□ 

struct 

B i g N urn 

y; 

□ 

>; 

struct 

B i g N urn 

x;n 

n 

/* 

Secret 

key,  discrete  Log 

of  y */ 

/* 

A PgpSecKey's 

p r i V 

points 

t 0 

this. 

an  ELGsec  pLus  the 

encrypted 

struct  ELGsecPLus  { 
n struct  ELGsec  s; 
n byte  *crypt  key; 

n size_t  ckaLLoc,  ckLen; 

n int  Locked; 
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>; 

/**  Public  key  functions  **/ 
static  void 

e L g Pu b D e s t roy ( s t r u c t PgpPubKey  *pubkey) 

{ 

n struct  ELGpub  *pub  = (struct  ELGpub  * ) p ub key->p r i v ; 
n ASSERTELG(pubkey->pkALg); 

D 

n bn E nd ( &pub->p ) ; 

n bnEnd(8pub->g); 
n b n E nd ( &pub->y ) ; 

n memset (pub,  0,  s i zeof ( pub ) ) ; 
n p g p M em F r e e ( p ub  ) ; 

n memset(pubkey,  0,  sizeof(pubkey)); 
n p g p M em F r ee ( p u b key  ) ; 

> 

#if  0 

static  void 

e L g PubI d8 ( s t r u c t PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

n pgpAssert(0); 

o struct  ELGpub  const  *pub  = (struct  ELGpub  *)pubkey->priv; 
n byte  *keybuf; 

n size_t  keybuflen; 

n struct  PgpHash  const  *h; 

n struct  PgpHashContext  *hc; 

n pgpAssert  ( p u b key->p k A L g ==  PG P_PKALG_E LG ) ; 

n /*  Unfortunately  we  have  no  way  of  indicating  failure  */ 
n h = pg p H a s h By N umbe r ( PG P_ H AS H _S H A ) ; 

n pgpAssert ( h ) ; 

a he  = pgpHashCreate(h); 

n pgpAssert(hc); 

n keybuflen  = e I g Pu bBu f f e r Le ng t h ( pub  key ) ; 
n keybuf  = pg pM em A I I o c ( key bu f I e n ) ; 
a pg p As s e r t ( key bu f ) ; 

n e I g PubToBu f f e r ( pu b key , keybuf); 

n pg p H a s h U pda t e ( h c , keybuf,  keybuflen); 

n memepy  (buf,  pg p H a s h F i na  I ( h c ) , 8); 
n pgpHashDestroy(hc); 

> 

#end i f 

/* 

* Return  the  largest  possible  PgpESK  size  for  a given  key. 

* Must  hold  two  numbers  up  to  p in  size. 

*/ 

static  size_t 

e I g Ma xe s k ( s t r u c t PgpPubKey  const  *pubkey,  PgpVersion  version) 

{ 

a struct  ELGpub  const  *pub  = (struct  ELGpub  * ) pub key->p r i v ; 
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n (void)version; 
n ASSERTELG(pubkey->pkALg); 
n return  2*(2  + C b n B i t s ( &p u b->p ) +7 ) / 8 ) ; 
} 


#if  0 
/* 

* Heuristic  algorithm  to  estimate  the  size  of  the  random  exponent  chosen 

* for  EL  Gamal  encryption. 

* sLoufactor  is  L n ( L n ( n ) ) ** ( 2 / 3 ) . 

* Formula  for  work  factor  is  exp(2.08*(Ln  n ) ** ( 1 / 3 ) * s L o w f a c t o r ) , where 

* that  2.08  is  sensitive  to  the  algorithm.  This  assumes  some  pretty  good 

* version  of  NFS. 

* Change  to  use  base  2 and  we  get: 

* 2**(2 . 656*( log2  n ) ** ( 1 /3 ) *s L owf a c t o r ) . 

* We  assume  a DH  exponent  of  160  is  about  right  for  n of  about  2**1000. 

* When  we  change  the  DH  exponent  by  n bits  we  get  2**(n/2)  increase  in 

* work  factor,  so  to  find  out  how  much  we  should  change  it,  take  the 

* power  of  2 in  the  formula  above,  double  it,  and  subtract  the  value 

* for  n=1000,  then  add  160.  This  leads  to  5.3  * sLowfactor  * (Log2 

* n)**(1/3)  all  minus  25  (-185.5+160). 

•k 

* A simpler  approximation  holds  sLowfactor  constant.  Varies  from  3.5  at 

* bitsize  of  1000  to  4.0  at  4000  bits,  so  I found  that  4.5  made  a good 

* conservative  approximation  for  values  in  this  range.  Then  heuristic 

* formula  becomes  cube  root  of  size  of  prime  in  bits,  times  24,  minus  80. 

* This  can  be  calculated  pretty  well  in  int  arithmetic  if  we  want  to. 

*/ 

static  unsigned 

elgExpBits  (unsigned  primebits) 

{ 

n unsigned  size; 
a double  sLowfactor, - 

Q double  logbits; 

□ 

n Logbits  = L og ( ( d ou b L e ) p r i me b i t s ) ; 
n sLowfactor  = exp ( ( 2 . / 3 . ) * L og ( - . 366  + logbits)); 
n size  = 5.3  * sLowfactor  * exp(Logbits/3.)  - 25; 

n return  size  >=  160  ? size  : 160; 

} 

#end i f 
/* 

* Given  a buffer  of  at  Least  "maxesk"  bytes,  make  an  PgpESK 

* into  it  and  return  the  size  of  the  PgpESK,  or  <0. 

* 

* ElGamal  encryption  is  a simple  variant  on  no n- i n t e r a c t o v e 

* D i f f i e-H e I L ma n . The  recipient  publishes  g,  p,  and  y = g**x  mod  p. 

* the  sender  picks  a random  xx,  computes  yy  = g**xx  mod  p,  and 

* the  shared  secret  z = y**xx  mod  p = yy**x  mod  p = g**(x*xx)  mod  p,  then 

* then  sends  z*m,  where  m is  the  message.  (Padded  in  the  usual 

* PKCS  manner.) 

*/ 

static  int 

e L g En c ryp t ( s t r uc t PgpPubKey  const  *pubkey,  byte  const  *key, 
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size_t  keyLen,  byte  *esk,  size_t  *esklen, 

struct  PgpRandomContext  const  *rc,  PgpVersion  version) 


a 

struct  E LG  pub 

const 

*pub  = 

(struct  ELGpub  *)pubkey 

n 

struct  Bi gNum 

XX  ; n 

n / * 

Random  exponent  */ 

n 

struct  BigNum 

yy;n 

n / * 

g**xx  mod  p */ 

n 

struct  BigNum 

z;n 

n /* 

y**xx  mod  p */ 

n 

unsigned  t; 

n 

unsigned  xxbits,  pbytes; 

n 

i n t i ; 

/*  We  don't  need  this  argument,  although  other  algorithms  may. 
(void)version; 

bnBegin(&xx) ; 
bnBeg i n ( &yy ) ; 
bnBeginC&z) ; 


. */ 


n AS S E RT E LG ( p ub key->p k A I g ) ; 
a t = bnBits(8pub->p); 
n if  Ct  > 0xffff) 

n n return  PG P E R R_ PUBKE Y_T00B I G ; 
n pbytes  = (t  + 7)  / 8; 
n if  (keylen  > pbytes) 

n n return  PGPERR_PUBKE Y_T00SMALL;  /*  data  too  big  for  pubkey  */ 


n /*  Add  checksum  to  key,  place  temporarily  in  esk  buffer  */ 
n t = 0 ; 

n eskC0]  = keyC0] ; 

n for  (i  = 1;  i < (int)keylen;  i++) 

n n t +=  eskCiH  = keyCi3; 

n eskCkeylen]  = (byte)(t  >>  8 & 255); 
n e s kC key  I e n + 1 D = (byte)(t  8 255); 

n /*  Choose  the  random  xx  value  to  be  used  for  this  encryption  */ 
n xxbits  = pg p D i s c r e t e Log Expon e n t B i t s ( bnB i t s ( 8pu b->p ) ) *3 / 2 ; 
n if  ( pgpBnGe n Ra nd ( 8xx , rc,  xxbits,  0,  0,  xxbits)  < 0) 
n n goto  nomem; 

n /*  Do  the  two  exponentiations  necessary  to  compute  yy  and  z */ 
n if  ( bnExpMod ( 8yy , 8pub->g,  8xx,  8pub->p)  < 0 || 

n bnExpnod(8z,  8pub->y,  8xx,  8pub->p)  < 0) 

a a goto  nomem; 

n /*  Re-use  xx  to  hold  the  PKCS-padded  conventional  key  */ 

n if  ( pg pPKC S Pa c k ( 8x X , esk,  keylen+2,  PKC S _P A D_ E N C R Y PT E D , pbytes,  rc)<0) 
n n goto  nomem; 

n pgpAssert  (bnCmp(8xx,  8pub->p)  < 0); 

n /*  Compute  xx*z  mod  p,  the  encrypted  session  key  we  will  transmit  */ 

n if  (bnMul(8z,  8z,  8xx)  < 0 | | 

n bnMod(8z,  8z,  8pub->p)  < 0) 

n n goto  nomem; 


/*  Pack  the  two  values  into  the  esk,  first  yy  and  then  k*z  */ 
t = pg pBnPu t P I a i n ( 8y y , esk); 
t +=  pg pBn Pu t P I a i n ( 8z , esk+t); 
if  (esklen) 
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n n *eskLen  = (size_t)t; 
n 

n i = 0 ; 

n goto  done; 

nomem : 

n i = PGPERR_NOHEH; 
done  : 

n bnEndC&z); 
n bnEndC&yy) ; 
a bnEndC&xx); 
a return  i; 

} 

#ifdef  ELGSIGS 
/* 

* Helper  routine  to  pack  a hash  into  a buffer  with  DER  prefix 

* Return  size  of  packed  data 
*/ 

static  unsigned 

elgPack  (byte  *buf,  unsigned  buflen,  struct  PgpHash  const  *h,  byte  const  *hash) 
{ 

a unsigned  t = h-> D E R p r e f i x s i z e + h->hashsize; 
a pgpAssert  (t  <=  buflen); 

a memcpyCbuf,  h -> D E R p r e f i x , h-> D E R p r e f i x s i z e ) ; 
a memcpy(buf+h->DERprefixsize,  hash,  h->hashsize); 
a return  t; 

} 

# e n d i f 

/* 

* Return  1 if  (sig,sigLen)  is  a valid  MPI  which  signs 

* (hash,  hashlen). 

* Not  implementing  ElGamal  signatures,  using  DSS. 

*/ 

static  i n t 

e IgVe ri f y ( St ruct  PgpPubKey  const  *pubkey,  int  sigtype,  byte  const  *sig, 
a size_t  siglen,  struct  PgpHash  const  *h,  byte  const  *hash) 

{ 

#ifndef  ELGSIGS 
a (void)pubkey; 
a (void)sigtype; 
a (void)sig; 
a (void)siglen; 
a (void)h; 
a (voidJhash; 

a return  PG P E R R_PUBKE Y_U N I M P; 

#e  I se 

a /*  Check  an  El  Gamal  signature  */ 

a struct  ELGpub  const  *pub  = (struct  ELGpub  * ) pu b key->p r i v ; 
a struct  BigNum  a,b,yaab; 

a byte  bufC64D;B  /*  largest  hash  size  + DER  prefix  */ 
a int  i ; 
a s i ze_t  off; 

a unsigned  t; 

a (void)sigtype; 

a bnBegin(&a); 
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n bnBegin(&b); 
n bnBeg1n(&yaab); 


n ASSERTELG(pubkey->pkALg); 


□ 

n 

□ 

n 

Q 

n 

Q 

n 

a 

n 

n 

□ 

□ 

a 

n 

D 

□ 

□ 

□ 

□ 

n 

Q 


/*  sig  holds  two  values.  Get  first,  a,  from  sig.  */ 
off  = 0 ; 

i = pg pBnG e t P I a i n ( &a , sig  + off,  siglen-off); 
if  (i  <=  0) 
n goto  fail; 

/*  Get  2nd  value,  b,  from  SIG  */ 
off  +=  i ; 

i = pg pBnG e t P I a i n ( &b , sig  + off,  siglen-off); 
if  (i  <=  0) 
n goto  fail; 
off  + = i ; 

if  (off  !=  siglen)  { 
n i = PGPERR_SIG_TOOLONG; 
n goto  done; 

} 

/*  Compute  y**a  * a**b,  put  in  a */ 
if  ( bn ExpMod ( Sy aa b,  &pub->y,  &a,  &pub->p)  < 0 || 

bnExpMod(&a,  &a,  &b,  &pub->p)  < 0 l| 

bnHulC&yaab,  Sa,  &yaab)  < 0 || 

bnModCSyaab,  Syaab,  Spub->p)  < 0) 

n goto  nomem; 


n /*  Reconstruct  PKCS  packed  hash  as  b */ 
n t = elgPackCbuf,  sizeof(buf),  h,  hash); 

n i = pgpPKCSPackCSb,  buf,  t,  PKC S_PA D_S I G N E D , ( bnB i t s ( apub->p ) +7 ) / 8 , 
n n n (struct  Pg pRa ndomC on t ex t const  *)NULL); 
n memset(buf,  0,  t); 
n if  (i  <0) 
n n goto  nomem; 


n /*  Calculate  g**H,  leave  in  a */ 
n if  (bnExpnod(&a,  &pub->g,  8b,  8pub->p)  < 0) 
n n goto  nomem; 

n /*  Compare  y**a  * a**b  with  g**M,  should  be  equal  */ 
a i = bnCmp(8a,  8yaab)  ==  0; 
n goto  done; 

nomem : 

n i = PGPERR_NOMEM; 

n goto  done; 

fail: 

n if  ( ! i ) 

n n i = PGPERR_SIG_TOOSHORT; 

n goto  done; 

done  : 

n bnEnd(8yaab); 

n bnEnd(8b) ; 

n bnEnd(8a); 


n return  i; 

#e nd i f 
} 
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/* 

* Turn  a PgpPubKey  into  the  algorithm-specific  parts  of  a public  key. 

* A public  key's  ELG-specific  part  is: 

* 

* 0 2+i  HPI  for  prime 

* 2+i  2+t  MPI  for  generator 

* 4+i+t  2+un  MPI  for  public  key 

* 6+i +t+u 
*/ 

static  size_t 

e I g Pu bBu f f e r Le ng t h ( s t r u c t PgpPubKey  const  *pubkey) 

{ 

n struct  ELGpub  const  *pub  = (struct  ELGpub  * ) p ub key->p r i v ; 

n return  6 + ( bn B i t s ( &p u b->p ) + 7 ) / 8 + ( b n B i t s ( &pu b->g ) +7  ) / 8 + 
n n ( bnB i t s ( &p ub->y ) + 7 ) / 8 ; 

> 

static  void 

e I g Pu bToBu f f e r ( s t r u c t PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

n struct  ELGpub  const  *pub  = (struct  ELGpub  *)pubkey->priv; 
n unsigned  off; 

n o f f = 0 ; 

a off  +=  pg pBn Pu t P I a i n ( &pu b->p , buf  + off); 
n off  +=  pgpBnPutPlain(&pub->g,  buf+off); 
n off  +=  pg pBn Pu t P I a i n ( &p u b->y , buf  + off); 

} 


/*  A little  helper  function  that's  used  twice  */ 
static  void 

e I g F i I I Pubkey ( s t r u c t PgpPubKey  *pubkey,  struct  ELGpub 


{ 


n pubkey->nextn 
n pub key->p kA I gn 
a pubkey->privn 
n pubkey->dest roy 
#if  0 


NULL; 

PGP_PKALG_ELGAHAL; 

pub; 

e IgPubDest  roy; 


n pubkey- 
#end  i f 
n pubkey- 
n pubkey- 
n pubkey- 
n pubkey- 
n pubkey- 


>i  d8 


= elgPubId8; 


>maxesk  = elgMaxesk; 

>encrypt  = elgEncrypt; 

>verify  = elgVerify; 

>bufferLength  = elgPubBufferLength; 
>toBuffer  = e I g Pu bToBu f f e r ; 


> 


*pub ) 


/* 

* Turn  the  algorithm-specific  parts  of  a public  key  into  a PgpPubKey 

* structure.  A public  key's  ELG-specific  part  is: 

* 

* 0 2+i  HPIforprime 

* 2+i  2+t  MPI  for  generator 

* 4+i+t  2+un  MPI  for  public  key 
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* 6+i+t+u 
*/ 

struct  PgpPubKey  * 

e I g Pu b F r omBu f ( by t e const  *buf,  size_t  size,  int  *error) 
{ 


n 

struct 

PgpPubKey  ♦pubkey; 

n 

struct 

E LG  pub  ♦pub; 

n 

unsigned  i,  t,  u; 

a 

int 

v; 

a 

bnInitC); 

n 

V = 

pgpBnPa r se ( buf , size,  3,  8i,  &t,  8u) 

/ 

n 

i f 

( V 

< 0)  { 

a 

a 

♦error  = v; 

a 

a 

return  NULL; 

a 

> 

a 

i f 

(CbufCt-n  S 1)  ==  0)  {n  /*  Too  small 

or  even  prii 

a 

a 

♦error  = PG PE R R_KE Y_H PI ; 

a 

a 

return  NULL; 

a 

> 

a 

pub 

= 

(struct  ELGpub  ♦ ) pgpMemA 1 1 oc ( s i zeof ( ♦pub  ) ) ; 

a 

if 

( pub ) { 

a 

a 

pubkey  = (struct  PgpPubKey  ♦ ) pg pMem A 1 1 o c ( s i z e of ( 

a 

a 

i f 

(pubkey)  { 

a 

a 

a 

bnBegi n(8pub->p); 

a 

a 

a 

bnBegi n(8pub->g)  ; 

a 

a 

a 

bnBegi n(8pub->y); 

a 

a 

a 

if  ( bn  I n se r t Bi gBy t e s ( 8pub->p,  buf  + i+2,  0,  t- 

a 

a 

a 

88  bnl nse r t B i gBy t e s ( 8pub->g , 

buf+t+2,  0, 

a 

a 

a 

n n n u-t-2)  >=  0 

a 

a 

a 

88  bnInsertBi gBytes (8pub->y, 

buf+u+2,  0, 

a 

a 

a 

n n n v-u-2)  >=  0) 

a 

a 

a 

{ 

a 

a 

a 

n elgFillPubkey(pubkey,  pub); 

a 

a 

a 

n ♦error  = 0; 

a 

a 

a 

n return  pubkey; 

a 

a 

a 

} 

a 

a 

a 

/♦  Failed  = clean  up  and  return 

NULL  ♦/ 

a 

a 

a 

bnEnd(8pub->p); 

a 

a 

a 

bn  End ( 8pub->g  ) ; 

a 

a 

a 

bn  End ( 8pub->y ) ; 

a 

a 

a 

pgpHemFree(pubkey); 

a 

a 

> 

a 

a 

pgpMemFreeCpub); 

-2) 


*error  = PGPERR_NOMEM; 
return  NULL; 


/* 

* Return  the  size  of  the  public  portion  of  a key  buffer. 
*/ 
int 

e L g PubKey P r e f i X S i z e ( by t e const  *buf,  size_t  size) 

{ 
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n return  pgpBnParseCbuf,  size,  3,  NULL,  NULL,  NULL); 
} 


/**  Secret  key  functions  **/ 
static  void 

e L g S e c D e s t r oy ( s t r u c t PgpSecKey  *seckey) 

n struct  ELGsecPLus  *sec  = (struct  ELGsecPlus  * ) s e c key->p r i v; 

n A S S E RT E LG ( s e c key->p k A I g ) ; 
n bn E nd ( & s e c -> s . p ) ; 
n b n E nd ( & s e c ->s  . g ) ; 
n bnEnd(&sec->s.y); 
n bnEnd(&sec->s.x); 

n memset ( sec->c rypt key,  0,  s e c -> c ka L L o c ) ; 
n p g pH em F r e e ( s e c -> c r y p t k ey ) ; 

n memsetCsec,  0,  sizeof(sec)); 

B pg pMem F r e e ( s e c ) ; 

B mem s e t ( s e c key , 0,  s i z eo f ( s e c key ) ) ; 

B pgpHem F r ee ( s e c key  ) ; 

} 

#if  0 

static  void 

e L g S e c I d8 ( s t r u c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

B Struct  ELGsecPlus  const  *sec  = (struct  ELGsecPlus  * ) s e c key->p r i v; 
B ASSERT  ( s e c key->p k A I g ) ; 

B bn  Ex t ra c t Bi gBy t e s ( &s e c-> s . p,  buf,  0,  8); 

> 

#end  i f 

/* 

* Generate  a PgpPubKey  from  a PgpSecKey 
*/ 

static  struct  PgpPubKey  * 

e I g Pub  key ( s t ru c t PgpSecKey  const  *seckey) 

{ 

B Struct  ELGsecPlus  const  *sec  = (struct  ELGsecPlus  * ) s e c key->p r i v ; 
B struct  PgpPubKey  *pubkey; 

B struct  E LG  pub  *pub; 

B A S S E RT E LG ( s e c key-> p k A I g ) ; 


n 

pub 

= 

(struct  ELGpub  *)pgpMemAlloc(sizeof(*pub)); 

n 

i f 

( pub ) { 

n 

□ 

pubkey  = (struct  PgpPubKey  *)pgpMemAlloc(sizeof(*pubkey)); 

n 

n 

i f 

(pubkey)  { 

Q 

Q 

s 

bnBegin(&pub->p); 

n 

n 

n 

bnBegin(8pub->g); 

n 

n 

D 

bnBegin(&pub->y); 

D 

n 

D 

if  ( bnCopy ( 8pub->p,  8sec->s.p)  >= 

0 

n 

n 

□ 

88  bnCopy (8pub->g,  8sec->s.g) 

>=  0 

□ 

n 

□ 

88  bn C opy ( 8p u b->y , 8sec->s.y) 

>=  0) 

□ 

n 

n 

{ 

a 

a 

n 

B e 1 g F i 1 1 P u b ke  y ( pu  b ke  y , pub); 
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n 

n 

n 

n 

n 

Q 

n 

D 

□ 

Q 

n 

□ 

n 

□ 

> 


n 

n 

n pubkey->pkAlg  = seckey->pkAlg; 

□ 

n 

n mem c py ( p u b ke y-> key I D , 

seckey->keyID 

a 

n 

n sizeof( pub  key- 

>keyID) ); 

n 

n 

n return  pubkey; 

n 

Q 

> 

a 

n 

/*  Failed  = clean  up  and 

return  NULL  */ 

n 

n 

bnEnd(&pub->p) ; 

n 

□ 

bnEnd(&pub->g) ; 

n 

□ 

bnEnd(&pub->y)  ; 

u 

n 

pgpMemFree(pubkey)  ; 

u 

> 

a 

> 

pgpHemFree(pub) ; 

return  NULL; 


/* 

* Yes,  there  *is*  a reason  that  this  is  a function  and  no  a variable. 

* On  a hardware  device  with  an  automatic  timeout, 

* it  actually  might  need  to  do  some  work  to  find  out. 

*/ 

static  int 

e I g I s I oc ked ( s t r u c t PgpSecKey  const  *seckey) 

a struct  ELGsecPlus  const  *sec  = (struct  ELGsecPlus  * ) s e c ke y->p r i v ; 

n ASSERTELG(seckey->pkAlg); 
n return  sec ->  locked; 

> 

/* 

* Try  to  decrypt  the  secret  key  wih  the  given  passphrase.  Returns  >0 

* if  it  was  the  correct  passphrase.  =0  if  it  was  not,  and  <0  on  error. 

* Does  not  alter  the  key  even  if  it's  the  wrong  passphrase  and  already 

* unlocked.  A NULL  passphrae  will  work  if  the  key  is  unencrypted. 

* 


* A (secret)  key's  ELG-specific  part  is: 


★ 

★ 

0 

2 + u 

HPI  for  prime 

* 

2 + u 

2 + v 

HPI  for  generator 

•k 

4+u+vn 

2+w  HPI 

for  public  key 

■k 

6+u+v+w 

1 

Encryption  algorithm 

(0  for  none. 

1 for  IDEA) 

* 

7+u+v+w 

t 

Encryption  IV:  0 or 

8 bytes 

•k 

7+t+u+v+w 

2 + x 

HPI  for  X (di screte 

log  of  public 

key) 

k 

9+t+u+v+w+x 

2 

Checksum 

k 

1 1 +t+u+v+w+x 

* 


* Actually,  that's  the  old-style,  if  pg p S 2 Ko I d Ve r s is  true. 

* If  it's  false,  the  algorithm  is  255,  and  is  followed  by  the 

* algorithm,  then  the  ( va r a i b I e- I e ng t h , se  I f-de  I i mi t i ng ) 

* s t r i n g- t o- key  descriptor. 

*/ 


static  int 

e I gUn I oc k ( s t ru c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n char  const  *phrase,  size_t  plen) 

{ 

n struct  ELGsecPlus  *sec  = (struct  ELGsecPlus  * ) s e c key->p r i v ; 
C:CHK:ce8d05469ff642fff854dc238859ccf7caad93a42a1e200c95bbbac8c0914b586:: 
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o struct  BigNum  x; 

n struct  Pg p C f b C on t ex t *cfb  = NULL; 
n unsigned  v; 
n unsi gned  a Lg; 

n unsigned  checksum; 

n 1 n t 1 ; 

n A S S E RT E LG ( s e c key->p k A I g ) ; 

sa  bnlnitC); 

n /*  Check  packet  for  basic  consistency  */ 

n i = pg pBn Pa r s e ( s e c-> c r y p t key , sec->ckLen,  3,  NULL,  NULL,  NULL); 

n i f ( i < 0 ) 

n n return  i; 

n /*  OK,  read  the  public  data  */ 

n i = pg pBnG e t P L a i n ( & s e c-> s . p,  s e c -> c r y p t key  + v , s e c -> c k L e n- v ) ; 
n if  (i  <=0) 
n n goto  fail; 

a V +=  i ; 

n i = pgpBnGe t P L a i n ( &se c->s  . g , s e c-> c r y p t key  + v , s e c -> c k L e n- v ) ; 
n if  ( i <=  0 ) 

n n goto  fail; 

n V +=  i ; 

n i = pg pBnG e t P L a i n ( & s e c-> s . y , s e c-> c r y p t key+ v , s e c-> c k L e n-v ) ; 
a i f ( i <=  0 ) 

n n goto  fail; 

n V + = i ; 

n /*  Get  the  encryption  algorithm  (cipher  number).  0 ==  no  encryption  */ 
n alg  = s e c-> c r y p t key C v ] ; 

n /*  If  the  phrase  is  empty,  set  it  to  NULL  */ 
n if  (plen  ==  0) 

a a phrase  = NULL; 

n / * 

n * We  need  a pass  if  it  is  encrypted,  and  we  cannot  have  a 

n * password  if  it  is  NOT  encrypted.  I.e.,  this  is  a logical 

a *xor  (**) 

n * / 

n if  Clphrase  !=  !alg) 
n n return  0; 

n i = pgpC i phe r Se t up ( se c->c ryp t key  + v,  sec->cklen  - v,  phrase,  plen, 
n env,8cfb); 

n if  (i  <0) 

n n goto  done; 

n V +=  i ; 

n checksum  = 0; 

n bnBegin(&x); 

n i = pgpBnGetNewCSx,  sec->cryptkey  + v,  sec->cklen  - v,  cfb,  &checksum); 
n i f ( i <=  0 ) 

D a goto  badpass; 

n V +=  i ; 

n if  (bnCmpC&x,  8sec->s.p)  >=  0) 

n n goto  badpass ;Q  /*  Wrong  passphrase:  x must  be  < p */ 
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n /*  Check  that  we  ended  in  the  right  place  */ 
n if  (sec->ckLen  - v !=  2)  { 
n n i = PGPERR_KEY_LONG; 

n n goto  done; 

n > 

n checksum  &=  Oxffff; 

n if  (checksum  !=  pg p C h e c ks umG e t N e w ( s e c-> c ry p t key  + v,  cfb)) 
a n goto  badpass; 

n / * 

n * Note  that  the  "nomem"  case  calls  bnEndC) 

a * more  than  once,  but  this  is  guaranteed  harmless, 

n * / 

n if  (bnCopy(&sec->s . X,  fix)  < 0) 
n n goto  nomem; 

n bnEnd(&x); 

n i = 1;n  /*  Decrypted!  */ 
n sec->locked  = 0; 
n if  (cfb) 

a u pg p C f bD e s t r oy  (cfb); 

n return  1;n  /*  Decrypted  */ 

nomem : 

n i = PGPERR_NOMEM; 
n goto  done ; 
fail: 

n if  ( li  ) 

n n i = PGPERR_KEY_SHORT; 

a goto  done ; 

badpass: 

n i = 0;n  /*  Incorrect  passphrase  */ 

n goto  done; 

done  : 

n bnEnd(&x); 
n if  (cfb) 

n a pg p C f bD e s t r oy  (cfb); 

n return  i; 

> 

/* 

* Relock  the  key. 

*/ 

static  void 

e I g Loc k ( s t r uc t PgpSecKey  *seckey) 

{ 

n struct  ELGsecPlus  *sec  = (struct  ELGsecPlus  * ) s e c key->p r i v; 

n ASSERTELG(seckey->pkAlg); 
a sec-> locked  = 1; 

n /*  bnEnd  is  documented  as  also  doing  a bnBegin  */ 
n bn  End ( &sec->s . X ) ; 

> 

/* 

* Return  the  size  of  the  buffer  needed,  worst-case,  for  the  decrypted 

* output.  A trivially  padded  key  (random  padding  length  = 0) 

* can  just  be  0 2 0 <key>. 
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*/ 

static  size_t 

e I gHa xde c ry p t ed ( s t ru c t PgpSecKey  const  *seckey) 

{ 

n struct  ELGsecPLus  const  *sec  = (struct  ELGsecPLus  *)seckey->priv; 
n size_t  size; 

n ASSERTELG(seckey->pkALg); 
n size  = ( b n B i t s ( & s e c-> s . p ) +7 ) / 8 ; 
n return  size  < 3 ? 0 : size-3, ■ 

> 

/* 

* Try  to  decrypt  the  given  esk.  If  the  key  is  Locked,  try  the  given 

* passphrase.  It  may  or  may  not  Leave  the  key  unLocked  in  such  a case. 

* (Some  hardware  i mp L erne n t a t i on s may  insist  on  a password  per  usage.) 

*/ 

static  i n t 

e L g D e c r y p t ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n int  esktype,  byte  const  *esk,  size_t  eskLen, 

n byte  *key,  size_t  *keyLen,  char  const  *phrase, 

n size_t  pLen) 

{ 

n struct  ELGsecPLus  *sec  = (struct  ELGsecPLus  * ) s e c key-> p r i v ; 

B struct  BigNum  k,  yy; 

B int  i , j ; 

B unsigned  t,  pbytes; 

B size_t  Len; 

B size_t  off; 

B (void)esktype; 

B ASSERTELG(seckey->pkALg); 

B if  ( s e c -> L o c ked ) { 

B B i = eLgUnLock(seckey,  env,  phrase,  pLen); 

B n if(i<=0) 

B B n return  i ? i : PGPERR_KEY_ISLOCKED; 

B B pgpAssert(!sec->Locked); 

B } 

B bnBegin(&k); 

B bnBegin(&yy); 

B /*  ESK  hoLds  two  vaLues.  Get  first,  yy,  from  ESK.  */ 

B o f f = 0 ; 

B i = pgpBnGetPLain(&yy,  esk+off,  eskLen-off); 

B i f ( i <=  0 ) 

B B goto  faiL; 

B /*  Get  2nd  vaLue,  k,  from  ESK  */ 

B off  +=  i; 

B i = pg pBnG e t P L a i n ( & k,  esk+off,  eskLen-off); 

B if(i<=0) 

B B goto  faiL; 

B o f f + = i ; 

B if  (off  !=  eskLen)  { 

B B i = PGPERR_ESK_T00L0NG; 

B B goto  done; 

B > 
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□ 

a /*  Calculate  yy  = yy**x  mod  p,  which  is  what  is  multiplied  by  k */ 

a if  ( bnExpHod ( &yy,  Syy,  &sec->s.x,  fisec->s.p)  < 0) 

n n goto  nomem; 

n /*  Set  k = k / (new)yy  , revealing  PKCS  padded  session  key  */ 

n if  (bnInvCSyy,  &yy,  &sec->s.p)  < 0 || 

n n bnMulC&k,  Sk,  8yy)  < 0 | | 

n n bnModCSk,  Sk,  &sec->s.p)  < 0)  { 

n n n goto  nomem; 

n } 

n bnEndl&yy); 
n 

a /*  k is  now  suitable  for  unpacking  */ 
n pbytes  = ( bnB i t s ( & s e c -> s . p ) + 7)  / 8; 
n len  = elgHaxdecrypted(seckey); 

a i = pgpPKCSUnpack  (key,  len,  &k,  PKC S_P A D_ E N C R Y PT E D , pbytes); 
n bnEndC&k); 
n if(i<0) 
n n return  i; 

n /*  Check  checksum  (should  this  be  here?)  */ 
n t = 0 ; 

n for  (j  = 1;  j < i-2;  j++) 

n a t +=  keyCjD; 

n if  (t  !=  ( ( uns i g ned ) key C i -2 ]<<8 ) + keyCi-1]) 
n n return  PG P E RR_PK_ C OR RU PT ; 
n memset(key+i-2,  0,  2); 

n /*  The  actual  key  */ 

n if  (keylen) 

n n *keylen  = (size_t)i-2; 

□ 

n return  0; 
fail: 

a i f ( 1 i ) 

n n i = PGPERR_ESK_TOOSHORT; 

n goto  done; 
nomem : 

n i = PGPERR_NOMEH; 
n goto  done; 
done  : 

n bnEnd (8yy ) ; 

□ bnEnd(8k); 
n return  0; 

} 

static  size_t 

e I gMaxs i g ( s t rue t PgpSecKey  const  *seckey,  PgpVersion  version) 

{ 

#ifndef  ELGSIGS 
n (void)seckey; 
n (void)version; 
n return  PG PE R R_ PUBKE Y_UN 1 M P ; 

#e  I s e 

B struct  ELGsecPlus  const  *sec  = (struct  ELGsecPlus  * ) s e c k ey->p r i v ; 
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n (void)version; 

n A S S E RT E LG ( s e c key->p k A L g ) ; 

n return  2*((bnBitsC&sec->s.p)+7)/8  + 2); 

# e nd i f 
} 

static  i n t 

e L g S i g n ( s t r u c t PgpSecKey  *seckey,  struct  PgpHash  const  *h,  byte  const  *hash, 
n byte  *sig,  size_t  *sigLen,  struct  Pg p R a n d omC on t ex t const  *rc, 
n PgpVersion  version) 

{ 

#ifndef  ELGSIGS 
n (void)seckey; 
o (void)h; 
n (void)hash; 
n (void)sig; 
n (void)sigLen; 
n (void)rc; 
a (void)version; 
a return  PG P E R R_PUBKE Y_U N I M P ; 

#e  L se 

n /*  Calculate  an  El  Gamal  signature  */ 

n struct  ELGsecPlus  *sec  = (struct  ELGsecPlus  *)seckey->priv; 
n struct  BigNum  pm1 , x1,  a,  bn,  xk,  xa; 
n unsigned  t; 

n unsigned  xlbits; 

a i n t i ; 

a /*  We  don't  need  this  argument,  although  other  algorithms  may...  */ 
a (void)version; 

a ASSERTELG(seckey->pkAlg); 
a if  ( s e c -> I o c ked  ) 

a n return  PG PE R R_ KE Y_ I S LO C KE D ; 

a if  ( h -> D E R p r e f i X s i z e + h->hashsize  > e I g Ha x s i g ( s e c key , version)) 
a a return  PG P E R R_ PU BKE Y_TOO S H A LL; 

a bnBeginC&pml); 
a bnBeg i n (8x1 ) ; 
a bnBegin(8a); 
a bnBeg i n ( Sbn  ) ; 
a bnBegin(8xk); 
a bnBegin(8xa); 

a /*  Some  calculations  done  mod  p-1  */ 

a if  (bnCopy  (8pm1,  8sec->s.p)  < 0 || 
a bnSubQ  (8pm1,  1)  < 0) 

a a goto  nomem; 

n /* 

a * Choose  the  random  x1  value  to  be  used  for  this  signature, 

a * Hake  sure  it  is  relatively  prime  to  p-1 

n */ 

a xlbits  = pg p D i s c r e t e Log  Ex pon e n t B i t s ( bnB i t s ( 8 s e c -> s . p ) ) *3 / 2 ; 
a do  { 

a a if  (pgpBnGenRand(8x1 , rc,  xlbits,  0,  1,  x1bits-1)  < 0 || 
a a bnGcd(8a,  8x1,  8pm1 ) < 0) 
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n n n goto  nomem; 

n } while  (bnBitsC&a)  > 1); 

n /*  Raise  g to  x1  power  to  get  a */ 

n if  ( bn ExpMod ( Sa , &sec->s.g,  Sxl,  &sec->s.p)  < 0) 
n n goto  nomem; 

n 

a /*  Calculate  x**-1  mod  p-1 , keep  in  x1  */ 
n if  (bnInvC&xl,  8x1,  &pm1 ) < 0) 
n n goto  nomem; 

a /*  Pack  message  hash  H into  buffer  bn  (use  sig  temporarily)  */ 
n t = elgPackCsig,  elgMaxsigCseckey,  version),  h,  hash); 
n if  ( pg p PKC S Pa c k ( 8bn , sig,  t,  PKC S_P AD_ S I G N E D , 
n n n C bn  B i t s C 8 s e c ->s  . p ) +7  ) / 8 , rc)  < 0) 

n n goto  nomem; 

n /*  Calculate  b = (M-xa)/k  mod  p-1,  put  it  in  bn  */ 

n if  (bnMul(8xa,  8sec->s.x,  8a)  < 0 || 

B bnMod(8xa,  8xa,  8pm1 ) < 0) 

B B goto  nomem; 

B if  (bnCmp(8bn,  8xa)  < 0)  ( 

B B if  (bnAdd(8bn,  8pm1 ) < 0) 

B n n goto  nomem; 

B > 

B bnSub(8bn,  8xa); 

B if  (bnnul(8bn,  8bn,  8x1)  < 0 | | 

B bnMod(8bn,  8bn,  8pm1 ) < 0) 

B B goto  nomem; 

B /*  Success,  now  just  pack  into  sig  buffer  */ 

B t = pgpBnPutPlain(8a,  sig); 

B t +=  pg pBn Pu t P I a i n ( 8bn , sig  + t); 

B if  (siglen) 

B B *siglen  = (size_t)t; 

B i = 0; 

B goto  done; 

nomem : 

B i = PGPERR_NOMEH; 

B /*  f a I I through  */ 
done  : 

B bnEnd(8xa); 

B bnEnd(8bn) ; 

B bnEnd(8pm1); 

B bnEnd(8x1); 

B bnEnd(8a); 

B bnEnd(8bn); 

B bnEnd(8xk); 

B return  i; 

#end i f 
} 

/* 

* Re-encrypt  a PgpSecKey  with  a new  passphrase. 

* A secret  key  is,  after  a non-specific  prefix: 
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* 0 1 Version  (=  2 or  3) 

* 1 4 Timestamp 


★ 

5 2 

Validity 

( = 0 at  present ) 

* 

7 1 

Algorithm 

(=PGP_PKALG_ELGAHAL 

for  ELG) 

★ 

The  following: 

* 

0 

2 + u 

HPI  for  prime 

* 

2 + u 

2 + v 

HPI  for  generator 

* 

4+U+ vn 

2+w  HPI 

for  public  key 

★ 

6+u+v+w 

1 

Encryption  algorithm 

(0  for  none. 

1 for  IDEA) 

* 

7+u+v+w 

t 

Encryption  IV:  0 or 

8 bytes 

★ 

7+t+u+v+w 

2 + x 

HPI  for  X (discrete 

log  of  public 

key) 

* 

9+t+u+v+w+x 

2 

Checksum 

★ 

1 1 +t+u+v+w+x 

* The  Encryption  algorithm  is  the  cipher  algorithm  for  the  old-style 

* St ri ng-to-key  conversion.  For  the  new  type,  it's  255,  then  a cipher 

* algorithm,  then  a s t r i ng - t o- key  algorithm  ( va r i a b I e- I e n g t h ) , 

* then  the  encryption  IV.  That's  16  bytes  plus  the  s t r i n g- t o- key 

* conversion  length. 

* 

* On  initial  key  generation  we  rely  on  calling  this  with  env=NULL  being 

* OK  if  phrase=NULL. 

*/ 

static  int 

e I gC ha ng e Loc k ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n struct  Pg p Ra ndomC on t ex t const  *rc,  char  const  *phrase,  size_t  plen) 

{ 

n struct  ELGsecPlus  *sec  = (struct  ELGsecPlus  * ) s e c key-> p r i v ; 
n struct  PgpStringToKey  *s2k  = NULL;n  /*  Shut  up  warnings  */ 
n struct  PgpCipher  const  *cipher  = NULL;n  /*  Shut  up  warnings  */ 

n struct  Pg p C f b Con t e X t *cfb  = NULL;o  /*  This  is  realy  needed  */ 

n by t e *p; 

n int  oldf  = 0;n  n n n /*  Shut  up  warnings  */ 
n unsi gned  len; 

n unsigned  checksum; 

n A S S E RT E LG ( s e c key->p k A I g ) ; 

n if  (sec->locked) 

n a return  PG P E R R_KE Y_ I S LO C KE D ; 

n len  = bnBy t e s ( & s e c -> s . p ) + bnBy t e s ( & s e c->s . g ) + 
n b nBy t e s ( 8s e c -> s . y ) + b nBy t e s ( 8 s e c ->s . x ) + 11; 

n if  (phrase)  { 

n n s2k  = pg p S 2 Kd e f a u I t ( e n v , rc); 

n n i f ( ! s2k) 

n n n return  PG P E R R_N OH  EH ; 

n n cipher  = pgpCipherDefaultKey(env); 

n n pg p A s s e r t ( c i p h e r ) ; 

n n if  (!cipher)  ( 

n n n pgpS2Kdestroy(s2k); 

n n n return  PGPERR_NOHEH; 

n n } 

n n len  +=  c i p h e r->b I o c ks i z e ; 

n n cfb  = pgpCfbCreate(cipher); 

n n if  (!cfb)  { 

n n n pg  p S 2 Kd  e s t r oy  ( s 2 k ) ; 

o a a return  PG P E R R_N0H EH ; 
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n n > 

n B oLdf  = pgpS2 Ki sO L dVe rs ( s2 k ) ; 

B B if  ( loLdf ) 

B B B Len  +=  1 + s2k->encodelen; 

B > 

B p = s e c->c ry p t key ; 

B if  (Len  > s e c-> c ka I L o c ) ( 

B B p = (byte  * ) pg pH emR e a I L o c ( p , Len); 

B B i f ( ! p ) { 

B B B pgpCfbDestroy(cfb); 

B B B pgpS2Kdestroy(s2k); 

B B B return  PGPERR_NOHEM; 

B B } 

B B sec->c rypt key  = p; 

B B sec->ckaLLoc  = (size_t)Len; 

B > 

B sec->ckLen  = Len; 

B /*  Okay,  no  more  errors  possibLe!  Start  instaLLing  data  */ 
B p +=  pgpBnPutPLai n(8sec->s . p,  p); 

B p +=  pgpBnPutPLai n(&sec->s . g,  p); 

B p +=  pgpBnPut P L a i n ( &sec->s . y , p); 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  Encryption  parameters  */ 
if  (!phrase)  ( 

B *p++  = 0;b  /*  Unencrypted  */ 

> e L se  { 

B if  (oLdf)  { 

B B *p++  = ci pher->type; 

B } e L se  < 

B B *p++  = 255; 

B B *p  + + = c i p h e r-> t y pe ; 

B B memcpy(p,  s2k->encodi ng,  s2 k->e n c od e L e n ) ; 

B B p +=  s2 k->encode L en; 

B > 

B /*  Create  IV  */ 

B pgpRandomGetBy tes ( rc,  p,  c i p h e r->b L o c ks i z e ) ; 
n /*  Use  data  buffer  as  temp  hoLding  space  for  key  */ 

B pgpAs se r t ( sec->c ka L L oc-c i phe r->b L oc ks i z e >=  c i phe r-> key s i ze ) ; 
B pgpS t r i ngToKey ( s2 k,  phrase,  pLen,  p+ c i ph e r->b L o c ks i z e , 

B B c i ph e r-> key s i z e ) ; 

B pgpCfblnit(cfb,  p+cipher->bLocksize,  p); 

B pgpS2Kdest roy ( s2k) ; 

B p +=  ci pher->bLocksi ze; 

B /*  Wipe  key  * i mmed i a t e L y * */ 

B memset(p,  0,  c i phe r-> key s i z e ) ; 

} 


B /*  Now  instaLL  x,  encrypted  */ 

B checksum  = 0; 

B p +=  pgpBnPutNew(&sec->s.x,  p,  cfb,  Schecksum); 

B pgpChecksumPutNew(checksum,  p,  cfb); 

B p +=  2; 

B pgpAssert((ptrdiff_t)Len  ==  p - sec->cryptkey); 
B if  (cfb) 

B B pgpCfbDestroy(cfb); 

B return  0;b  /*  Success  */ 
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} 

static  size_t 

e L g S e c Bu f f e r Le n g t h ( s t r u c t PgpSecKey  const  *seckey) 

{ 

n struct  ELGsecPLus  const  *sec  = (struct  ELGsecPLus  *)seckey->priv; 

n return  sec->ckLen; 

} 

static  void 

e I g S e c ToBu f f e r C s t r u c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

n struct  ELGsecPLus  const  *sec  = (struct  ELGsecPLus  * ) s e c key->p r i v; 

n memcpy(buf,  s e c-> c r y p t k ey , sec->ckLen); 

n /*  Return  onLy  a L g o r i t hm-d e pe nd e n t portion  */ 

} 


/*  F 

s t a t 

iLL  in  secret  key  structure  */ 

i c void 

e L g F 

{ 

iLLSecKey(struct  PgpSecKey  *seckey,  struct 

tt 

sec  key->p kA  L gn 

= 

PGP_PKALG_ELGAMAL; 

u 

seckey->privn 

= 

sec; 

n 

#i  f 

seckey->dest  roy 

0 

= 

eLgSecDestroy; 

a seckey->id8 

#e nd i f 

= 

eLgSecId8; 

□ 

seckey->pubkey 

= 

eLgPubkey; 

n 

seckey->isLocked 

= 

eLglsLocked; 

□ 

seckey->un  Lock 

= 

eLgUnLock; 

fi 

seckey->Lock 

= 

eLgLock; 

Q 

seckey->maxdecrypted 

= 

eLgMaxdecrypted; 

□ 

seckey->decrypt 

= 

eLgDecrypt; 

□ 

seckey->maxsig 

= 

eLgMaxsig; 

□ 

seckey->sign 

= 

e L g S i g n ; 

□ 

seckey->changeLock 

= 

eLgChangeLock; 

n 

seckey->bufferLength 

= 

eLgSecBufferLength; 

n 

seckey->toBuffer 

= 

eLgSecToBuffer; 

> 


ELGsecPLus  *sec) 


struct  PgpSecKey  * 

e L g S e c F r omBu f ( by t e const  *buf,  size_t  size,  int  *error) 

{ 

n struct  PgpSecKey  *seckey; 

n struct  ELGsecPLus  *sec; 

n byte  *cryptk; 

n bnlnit(); 

n cryptk  = (byte  * ) pg pM emA L L o c ( s i z e ) ; 

n if  (cryptk)  ( 

n n sec  = (struct  ELGsecPLus  * ) pgpHemA L L o c ( s i zeof  ( *s e c ) ) ; 
n n if  (sec)  { 

n n n seckey  = (struct  PgpSecKey  *) 
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n 

a 

a 

a 

pgpHemA  1 loc ( si zeof (*seckey) ) ; 

n 

a 

a 

if 

( seckey)  { 

n 

a 

a 

a 

memc py ( c r y p t k,  buf,  size); 

n 

a 

a 

a 

bnBegi n(8sec->s . p)  ; 

n 

a 

a 

a 

bnBegin(&sec->s.g); 

n 

a 

a 

a 

bnBegin(&sec->s.y); 

n 

a 

a 

a 

bnBegin(&sec->s.x); 

n 

a 

a 

a 

s e c -> c r y p t k ey  = cryptk; 

n 

a 

a 

a 

sec->cklen  = sec->ckalloc  = size; 

n 

a 

a 

a 

sec-> locked  = 1; 

n 

a 

a 

a 

/*  We  only  need  this  to  try  unlock 

n 

a 

a 

a 

s e c key->p k A 1 g = PG P_PKA LG_ E LG  AH A L; 

n 

a 

a 

a 

seckey->priv  = sec; 

a 

a 

a 

a 

a 

a 

a 

a 

if  ( e 1 g Un 1 oc k ( s e c key , NULL,  NULL,  1 

a 

a 

a 

a 

n elgFillSecKey(seckey,  sec); 

a 

a 

a 

a 

n *error  = 0; 

a 

a 

a 

a 

n return  seckey;n  /*  Success!  */ 

a 

a 

a 

a 

> 

n 

□ 

n 

Q 

n 

D 

D 

D 

o 

D 

n 

> 


□ 

□ 

□ 

n 

Q 

O 

□ 

n 

> 


n a /*  Ka-boom.  Delete  and  free  everything.  */ 
n n memsettcryptk,  0,  size); 

a n memsetCsec,  0,  sizeof(*sec)); 

n n pg pMem F r e e ( s e c key ) ; 

n } 

n pg pHem F r e e ( s e c ) ; 

> 

pgpHemFreeCcryptk); 


*error  = PG P E R R_N OH  EM  ; 
return  NULL; 


/*  Generate  super-strong  primes?  (Warning:  slow!)  */ 
#ifndef  ELG.GERHAIN 
#define  ELG_GERHAIN  0 
Send  i f 


/* 

* Generate  an  ELG  secret  key  with  prime  of  the  specified  number  of  bits. 

* Hake  callbacks  to  progress  function  periodically. 

* Secret  key  is  returned  in  the  unlocked  form,  with  no  passphrase  set. 

* fastgen  tells  us  to  use  canned  primes  if  available. 

* 

* If  ELG_GERMAIN  is  set  to  1,  we  generate  p such  that  (p-1)/2  is  also 

* prime.  This  takes  long  time.  ( Ps eudop r i ma I i t y tests  take  time 

* cubic  in  the  number  of  bits,  and  the  number  of  tests  needed  is 

* linear  in  the  number  of  bits,  so  it's  quartic  overall.  Searching 

* for  Sophier  Germain  primes  makes  it  quinticC!),  although  the  constant 

* factor  improves  to  make  up  for  a lot  of  that. 

* 

* The  alternative  (which  is  really  just  as  safe,  really)  is  to  generate 

* primes  which  have  a large  prime  factor  q about  10  bits  shorter  than 

* the  requested  length.  We  will  guarantee  that  2 is  a generator  of  a 

* subgroup  with  period  at  least  q. 

* 

* If  it  is  OK,  we  could  speed  it  up  more  by  generating  multiple  primes 

* qi  such  that  p = 2 * k*q 1 *q 2 *q3* . . . *q n + 1,  and  where  each  qi  is  greater 
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* than  2**160  (or  whatever  exponent  value  we  are  using).  Again,  once  we 

* verify  that  2's  period  is  > 2k  we  know  it  as  at  Least  min(qi),  which 

* should  be  Long  enough  for  prevention  of  discrete  Log  attacks. 

* 

* A bit  of  theory:  the  average  density  of  primes  around  n is  1/Ln(n), 

* so  the  average  gap  between  primes  is  Ln(n).  However,  the  maximum 

* gap  is  ln(n)*2.  The  fact  that  we're  searching  in  steps  other  than 

* 1 doesn't  matter  - it'LL  take  an  average  of  Ln(n)  steps. 

* 

* So  to  produce  a prime  of  the  desired  size,  we  should  have  p/q  at 

* Least  LnCp)  and  to  guarantee  it,  we  need  p/q  = Ln(p)*2.  This 

* means  that  we  want 

* Log2(Ln(p))  < Log2(p/q)  < L og2 ( L n ( p ) ^2  ) 

* L og 2 ( 0 . 693 * L og 2 ( p ) ) < Log2(p)  - Log2(q)  < 2 * Log2(0.693  * Log2(p)) 

* Log2( Log2(p)  ) - 0.529  < Log2(p)  - Log2(q)  < 2 * L og 2 ( L o g 2 ( p ) ) - 1.058 

* 

* At  this  point,  it's  safe  to  start  getting  crude,  because  if  we're 

* only  counting  bits,  2 ( b i t s ( x ) -1  ) <=  x < 2*bits(x)  <=  2*x,  or 

* bits(x)-1  <=  Log2(x)  < bits(x)  <=  Log2(x)+1.  Another  way  of  Looking 

* at  aLL  this  is  that  Log2(x)  is  bits(x)  - 0.5  +/-  0.5. 

* So  Let's  split  the  difference  and  use  1.5  * b i t s ( b i t s C p ) ) - 1 as  the 

* difference  in  bits  between  p and  q. 

* 

* See  the  discussion  preceding  the  DSA  keygen  routine  d s a S e cG e n e r a t e 

* in  pgpDSAKey.c  for  an  explanation  of  the  rcdummy  random  number 

* generator  below.  It  serves  to  Limit  Leakage  of  the  state  of  the 

* randpooL  into  the  public  values  generated  as  part  of  the  key. 

*/ 

struct  PgpSecKey  * 

e LgSecGenerateCunsi gned  bits.  Boolean  fastgen, 
n struct  Pg p Ra nd omC on t e x t const  *rc, 

n int  p r og r e s s ( VO i d *arg,  int  c),  void  *arg,  int  *error) 

{ 

n struct  PgpSecKey  *seckey; 

n struct  ELGsecPlus  *sec; 

n struct  Pg p Ra n domCo n t e X t *rcdummy  = NULL; 

B unsigned  bits2,- 

#if  !ELG_GERHAIN 

B unsigned  Lengthdiff; 

B struct  BigNum  q,  h,  e; 

B int  i ; 

#endi f 

B byte  dummyseedCELGDUMHYBITS/S]; 

B *error  = 0; 

B /*  Initialize  local  pointers  (simplify  cleanup  below)  */ 

B seckey  = NULL; 

B sec  = NULL; 

B /*  Allocate  data  structures  */ 

B seckey  = (struct  PgpSecKey  *)pgpMemAlLoc(sizeof(*seckey)); 

B if  (!seckey) 

B B goto  memerror; 

B sec  = (struct  ELGsecPlus  * ) pg pMemA L L o c ( s i z eo f ( * s e c ) ) ; 

B if  (!sec) 

B n goto  memerror; 

□ 
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n bnBegin(&sec->s.p); 
n bnBegin(&sec->s.g); 
n bnBeg i n ( &s e c-> s . y ) ; 
n bnBeginC&sec->s.x); 


n 


□ 

□ 

n 

□ 

□ 

B 

B 

B 

B 

B 

B 

B 


/*  Use  a fixed  prime  and  generator  if  in  our  table  */ 
if  (fastgen)  { 

n byte  const  *fixedp,  *fixedg; 

n size_t  fixedpLen,  fixedglen; 

B if  (pgpELGfixed  (bits,  Sfixedp,  SfixedpLen,  &fixedg,  Sfixedglen)  > 0)  { 
B B i f ( p rog  ress  ) 

B B B progressCarg,  ' '); 

B B bnInsertBi gBytes  (&sec->s.p,  fixedp,  0,  fixedpLen); 
n B if  (progress) 

H B B progress(arg,  ' '); 

B B bnInsertBigBytes  (&sec->s.g,  fixedg,  0,  fixedglen); 

n B goto  choose_x; 

n } 

} 


n /*  Set  up  local  random  number  generator  for  p and  q */ 
o rcdummy  = pg p Ps eudoRa ndomC r e a t e (); 
n i f ( ! rcdummy ) 
n B goto  memerror; 

n pg p Ra ndomG e t By t e s (rc,  dummyseed,  s i z e of ( d ummy s eed ) ) ; 

n pgpRandomAddBytes  (rcdummy,  dummyseed,  sizeof( dummyseed  ) ) ; 


#if 

ELG 

_GERHAIN 

Q 

/* 

Strong  ("sophie  germain")  prime 

search  */ 

n 

/* 

Find  p - choose  a starting  place 

*/ 

□ 

i f 

(pgpBnGenRand(&sec->s . p,  rcdummy 

, bits,  0xC0,  3 

, bits 

D 

B 

goto  nomem; 

D 

/* 

And  search  for  a prime  */ 

n 

i f 

( bnGe rma i nP r i meGen ( &se c->s . p,  1, 

prog  ress. 

a rg  ) 

< 0) 

n 

B 

goto  nomem; 

s 

/* 

We  have  chosen  p so  2 i s a good 

choi ce  for 

generator 

s 

i f 

( bn S e t Q ( &s e c-> s . g , 2)  < 0) 

n 

B 

goto  nomem; 

n 

/* 

Choose  a random  x of  reasonable 

size  as  secret 

key  * / 

n 

expbits  = e 1 g ExpBi t s ( bi t s ) ; 

□ 

i f 

( pgpBnGenRa nd ( &sec->s  . X,  rc,  expbits,  0,  0, 

expbi ts) 

n 

B 

goto  nomem; 

n 

/* 

And  calculate  g**x  as  public  key 

*/ 

n 

i f 

( bnTwoExpMod ( 8se c->s . y , 8sec->s. 

X,  8sec->s. 

V 

a. 

0) 

n 

B 

goto  nomem; 

#else  /*  !ELG_GERMAIN 
n bnBegin(&q); 
n bnBegin(8h); 
a bnBegin(&e); 


the  faster  version  */ 


B / * 

B * Choose  a random  starting  place  for  q,  a bit  less  than  p. 

a * (See  function  header  comment  above  for  the  theory  behind  this.) 
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n */ 

n Lengthdiff  = 0; 

n for  (bits2  = bits;  bits2;  bits2  >>=  1) 
a n Lengthdiff++; 
n Lengthdiff  +=  ( L e n g t h d i f f + 1 ) / 2 ; 
n bits2  = bits  - Lengthdiff; 

n if  ( pg pBn G e n Ra n d ( &q , rcdummy,  bits2,  0x80,  1,  bits2-2)  < 0) 
n n goto  nomem; 

o /*  And  search  for  a prime  */ 

n i = bnPrimeGenC&q,  NULL,  progress,  arg,  0); 
n i f ( i < 0 ) 
n n goto  nomem; 

n if  (progress) 
n n progressCarg,  ' ’); 

n /*  ...and  now  a random  start  for  p */ 
n ( VO i d ) bn S e t Q ( & s e c-> s . p , 0); 

n if  ( pgpBnGen Ra nd ( &s e c->s . p,  rcdummy,  bits,  0xC0,  1,  b i t s -b i t s 2 -3 ) < 0) 
o a goto  nomem; 

n /*  Double  q to  make  it  a suitable  stride  */ 

n if  (bnLShi f t (&q,  1)  < 0) 

n n goto  nomem; 

n /*  Set  p = p - Cp  mod  2q)  + 1,  i.e.  congruent  to  1 mod  2q  */ 
n if  (bnModCfih,  &sec->s.p,  &q)  < 0) 
n n goto  nomem; 

n if  ( bn S u b ( & s e c -> s . p,  &h)  < 0 | | bn AddQ C &se c->s  . p,  1)  < 0) 
n n goto  nomem; 

n /*  This  Loop  is  very  rarely  executed  */ 
retry: 

n /*  And  search  for  a prime,  1+2kq  for  some  k */ 
n i = bnPrimeGenStrong(&sec->s.p,  &q,  progress,  arg); 
n i f C i < 0 ) 

n n goto  nomem; 

n if  (progress) 

H a progress(arg,  ' '); 

n /*  Now  check  two  as  g:  first,  find  (p-1)/q  = 2* ( ( p-1 ) / ( 2*q ) ) */ 

n if  ( bn D i vHod ( 8e , &h,  &sec->s.p,  &q)  < 0 | | bnLShift(&e,  1)  < 0) 

n a goto  nomem; 

n /*  e is  now  (p-1)/q,  and  h is  the  remainder  (one!)  */ 
n pgpAssert  (bnBits(&h)  ==  1); 

n /* 

n * Make  sure  2**((p-1)/q)  mod  p is  not  small.  This  should  imply 

n * that  the  period  of  2 as  a generator  has  at  Least  q as  a factor, 

n * meaning  it  is  very  big. 

n * With  (p-1)/q  as  small  as  it  is,  the  chances  are  *exceLLent* 

n * that  it  will  work.  If  (p-1)/q  were  Less  than  a few  hundred 

n * 2**((p-1)/q)  would  be  Less  than  p and  coundn't  possibly  be  1. 
n * / 

n if  ( bnT wo ExpMod ( &h , &e,  &sec->s.p)  < 0) 
n n goto  nomem; 

n if  (bnBits(&h)  < 2)  { 
n n if  (progress) 
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n n n p rog  r e s s ( a rg  , ' 

a n goto  retry; 
n } 

n bnEnd(&e); 
n bnEndC&h); 
n bnEndC&q); 

# e nd i f 

n /*  We  have  done  things  so  2 is  a good  choice  for  generator  */ 
a if  ( bnSe t Q ( 8s e c->s . g , 2)  < 0) 
a a goto  nomem; 

a /*  Hay  get  here  directly  from  above  if  fixed  primes  are  used  */ 
choose_x: 

a /*  Choose  a random  x of  reasonable  size  as  secret  key  */ 
a bits2  = pg p D i s c r e t e Log E X po n e n t B i t s ( b i t s ) *3 / 2 ; 
a if  ( pg pBnGe n R a nd ( 8 s e c -> s . X , rc,  bits2,  0,  0,  bits2)  < 0) 
a a goto  nomem; 

a /*  And  calculate  g**x  as  public  key  */ 

a if  ( bn ExpHod ( 8 s e c-> s . y , 8sec->s.g,  8sec->s.x,  8sec->s.p)  < 0) 
a a goto  nomem; 

a 

a /*  And  that's  it...  success!  */ 

a /*  Fill  in  structs  */ 

a sec->cryptkey  = NULL; 

a sec->ckalloc  = sec->cklen  = 0; 
a sec->locked  = 0; 
a e I g F i I I SecKey ( se c key , sec); 

a /*  Fill  in  cryptkey  structure,  unencrypted  */ 
a elgChangeLock  (seckey,  NULL,  NULL,  NULL,  0); 

a goto  done; 

nomem : 

#if  !ELG_GERHAIN 
a bnEnd(8e) ; 
a bnEnd(8h) ; 
a bnEnd(8q); 

# e nd i f 

a bnEndC8sec->s.p); 
a bnEnd(8sec->s.g); 
a bnEnd(8sec->s.y); 
a bn  End ( 8se c->s . X ) ; 

a /*  Fa  I I through  */ 
meme  r r o r ; 

a pg pH em F r e e ( s e c key ) ; 

a pg pH em F r e e ( s e c ) ; 

a seckey  = NULL; 
a *error  = PG P E R R_N OH  EH ; 

done  : 

a if  ( r c dummy ) 

a a pg pRa ndomD e s t r oy  (rcdummy); 
a a 
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□ 


return  seckey; 


> 


/* 


* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpElGKey.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpELGKey . h,v  1.4. 2.1  1 997/06/07  09:51:25  tnhw  Exp  $ 

*/ 

#ifndef  PGPELGKEY.H 
#define  PGPELGKEY.H 

^include  " pg pU s ua L s . h " n /*  For  byte  */ 

//include  <stddef.h>n  /*  For  size.t  */ 

#ifdef  ..cpLusplus 
extern  "C"  { 

//e nd i f 

/*  Bits  for  uniqueness  of  p,  q */ 

//define  E LG  D UHH  YB I T S n 64 

struct  PgpPubKey; 
struct  PgpSecKey; 
struct  Pg pRa ndomC o n t ex t ; 

struct  PgpPubKey  *e L g Pu b F r omBu f ( by t e const  *buf,  size.t  Len,  int  *error); 
struct  PgpSecKey  *e L g Se c F romBuf ( by t e const  *buf,  size.t  Len,  int  *error); 
int  eLgPubKeyPrefixSize(byte  const  *buf,  size.t  size); 

struct  PgpSecKey  * 

e L g S e c G e n e r a t e ( un s i g ned  bits.  Boolean  fastgen, 
a struct  PgpRandomContext  const  *rc, 

n int  p r og r e s s ( VO i d *arg,  int  c),  void  *arg,  int  *error); 

//ifdef cpLuspLus 

> 

// e nd i f 

//endif  /*  PGPELGKEY.H  */ 
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/* 

* pgp  Fi xedKey  . c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* A singLe,  fixed  PGP  key  for  decryption  operations. 

* ALso  contains  fixed  primes  and  generators  for  discrete  Log  keys  which 

* can  share  these. 

* 

* $Id:  pg p F i xed Ke y . c , V 1.5. 2. 2 1997/06/09  23:46:27  quark  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e nd i f 

#incLude  " pg p F i xedKey . h " 


unsigned  char  const  f i xedKey I D C 8 D = { 

a 0xB8,  0xE1,  0x21,  0x0E,  0x88,  0x0C,  0x13,  0x99 

>; 


#if  1 

#incLude  "pgpESK.h" 
SincLude  "pgpRSAKey.h 
/* 

* A (secret)  key  is: 


* 0 1 

* 1 4 

*5  2 

* 7 1 

* 8 2 + u 

* 1 0+u  2+v 

* 12+u+v  1 

* 1 3+u+v  t 

* 1 3+t+u+v  2+u 

* 15+t+u+v+w  2+x 

* 17+t+u+v+w+x  2+y 

* 1 9 + t + u + v + u + x + y 2 + z 


* 21 +t+u+v+w+x+y+z  2 

* 23+t+u+v+w+x+y+z 
*/ 


Version  (=  2 or  3) 

Timestamp 

VaLidity  (=  0 at  present) 

ALgorithm  (=1  for  RSA) 

MPI  for  moduLus 
HPI  for  exponent 

Encryption  aLgorithm  (0  for  none,  1 for  IDEA) 

Encryption  IV:  0 or  8 bytes 

HPI  for  d 

HPI  for  p 

HPI  for  q 

HPI  for  u 

Checksum 


static  byte  const  fixedkeyCD  = { 


n 

PGPVERSION_ 

2, a 

/*  version  */ 

n 

0,  0, 

0,  0, 

o 

/*  timestamp 

*/ 

n 

0,  0, 

n n 

/*  validity  */ 

□ 

1,a 

a 

/*  a Lgo 

r i t hm 

= RSA  */ 

n 

0x02, 

0X00, 

a 

/ * bits 

in  n 

(512)  */ 

□ 

0xDB, 

0x24, 

0x36 

, 0x7B, 

0x91  , 

0x82,  0x8E, 

0x4F 

Q 

0x17, 

0x  D 4 , 

0xF7 

, 0x32, 

0xD8, 

0X0A,  0x59, 

0x7C 

Q 

0x96, 

0xD8, 

0xCB 

, 0xF7, 

0x29, 

0xCA,  0xB1 , 

0xA5 

B 

0xE2, 

0x09, 

0x27 

, 0xD1, 

0xA4, 

0xCD,  0xD7, 

0x6D 

n 

0xFD, 

0x6A, 

0x1  A 

, 0xD4, 

0x80, 

0x4D,  0x52, 

0 X D 6 

Q 

0x2B, 

0x29, 

0x99 

, 0xF9, 

0x31  , 

0x3F,  0x65, 

0x99 

Q 

0x59, 

0x19, 

0xDF 

, 0x62, 

0x58, 

0x88,  0x31 , 

0xC9 

D 

0xB8, 

0xE1  , 

0x21 

, 0X0E, 

0x88, 

0X0C,  0x13, 

0x99 

n 

0X00, 

0x06, 

a 

/ * bits 

in  e 

(512)  */ 

Q 

0x1  1 , 

#define  FIXEDKEY_PUBLEN  (12+64+1) 
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n 

0,n 

Q 

/ 

* Unencrypted  */ 

n 

0X01  , 

0xf 8,b 

/ 

* bits 

i n d 

*/ 

n 

0xEB, 

0xB7, 

0x16, 

0x08, 

0x24, 

0X0B, 

0x5A 

s 

0xAF, 

0x6D, 

0x88, 

0x91  , 

0x6C, 

0x78, 

0x83, 

0x9A 

n 

0x56, 

0xAF, 

0x29, 

0xBB, 

0x1  F, 

0x5E, 

0x6E, 

0x75 

n 

0xF0, 

0x  D0  , 

0xB5, 

0xF2, 

0xE5, 

0xCD, 

0x3C, 

0x10 

n 

0x96, 

0xBC, 

0xF0, 

0x12, 

0x26, 

0x10, 

0x7D, 

0xDA 

n 

0x4F, 

0x11  , 

0xF1  , 

0x4A, 

0xAA, 

0xAC, 

0xBB, 

0xD4 

n 

0x74, 

0xAC, 

0x9E, 

0xBD, 

0x7B, 

0xF3, 

0xBA, 

0xBE 

n 

0x58, 

0x15, 

0xBA, 

0xE2, 

0x77, 

0x75, 

0xE0, 

0xEF 

n 

0X01  , 

0x00, n 

/ 

* bits 

in  p 

*/ 

n 

0xE9, 

0x61  , 

0x7D, 

0xF2, 

0x29, 

0x47, 

0x80, 

0x09 

n 

0x44, 

0xDF, 

0x0  D , 

0x7B, 

0xD9, 

0X01  , 

0x67, 

0x47 

n 

0x34, 

0xD1  , 

0x5  F, 

0xD1  , 

0xC2, 

0xB7, 

0xAA, 

0x72 

n 

0xBE, 

0x4E, 

0xA6, 

0xD2, 

0xD4, 

0x2C, 

0xCE, 

0x4B 

n 

0x01  , 

0X00, Q 

/ 

* bits 

in  q 

*/ 

Q 

0xF0, 

0x61  , 

0x6C, 

0x02, 

0x  F3, 

0xB0, 

0xD1  , 

0xD7 

s 

0x63, 

0x9C, 

0x39, 

0x12, 

0xAB, 

0xA7, 

0x5E, 

0xCD 

n 

0xAB, 

0xCC, 

0xEB, 

0x67, 

0x59, 

0x38, 

0xEA, 

0x61 

D 

0x16, 

0x5E, 

0xBB, 

0xB0, 

0xA4, 

0x48, 

0x27, 

0x2B 

n 

0X01  , 

0X00, D 

/ 

* bits 

in  u 

*/ 

D 

0xD7, 

0x58, 

0xDF, 

0x29, 

0X01  , 

0x82, 

0x  A A, 

0x2E 

Q 

0x2A, 

0x5  A, 

0xF9, 

0x82, 

0x8F, 

0x4D, 

0x94, 

0x55 

n 

0x50, 

0x7A, 

0xAD, 

0xB6, 

0xC0, 

0xA6, 

0xB8, 

0xC8 

n 

0x57, 

0x47, 

0x45  , 

0x2F, 

0x55, 

0x3D, 

0xDC, 

0x50 

n 

0x52, 

0xC7n 

/ 

* Checksum  */ 

>; 


#if  0 /*OLd  code  - BAT  19970609*/ 
struct  PgpPubKey  * f i xed Key Pu b ( vo i d ) 

{ 

n int  err;n  /*  Always  0 */ 

n return  r s a Pu b F r omBu f ( f i x ed key , F I X E D KE Y_ PUB LE N , &err); 

> 


struct  PgpSecKey  *f i x edKey S e c ( vo i d ) 

{ 

n int  err;n  /*  Always  0 */ 

n return  rsaSecFromBufCfixedkey,  sizeofCfixedkey),  Serr); 

> 

#endif  /*0  on  old  code*/ 


/*  Fixed  p,  q,  g values  for  DSA  keys  */ 


#if  0 

static  byte  const  DSA1024pCD  = { 


n 

0xF4, 

0x88, 

0xFD, 

0x58, 

0x4E, 

0x49, 

0xDB, 

0xCD, 

0x20, 

0xB4 

n 

0x9D, 

0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B, 

0x33, 

0x6C, 

0x38, 

0X0D 

n 

0x45, 

0x1  D, 

0X0F, 

0x7C, 

0x88, 

0xB3, 

0x1  C, 

0x7C, 

0x5B, 

0x2D 

B 

0x8E, 

0x  F 6, 

0x  F3, 

0xC9, 

0x23, 

0xC0, 

0x43, 

0xF0, 

0xA5, 

0x5B 

B 

0x18, 

0x8D, 

0x8E, 

0xBB, 

0x55, 

0x8C, 

0xB8, 

0x5D, 

0x38, 

0xD3 

B 

0x34, 

0xFD, 

0x7C, 

0x17, 

0x57, 

0x43, 

0xA3, 

0x1  D, 

0x18, 

0x6C 

B 

0xDE, 

0x33, 

0x21  , 

0x2C, 

0xB5, 

0x2  A, 

0xFF, 

0x3C, 

0xE1  , 

0xB1 

B 

0x29, 

0x40, 

0x18, 

0x11  , 

0x8D, 

0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72 

B 

0xD6, 

0x86, 

0xC4, 

0x03, 

0x19, 

0xC8, 

0x07, 

0x29, 

0x7A, 

0xCA 
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Q 

0x95, 

0X0C, 

0xD9, 

0x96, 

0x9F, 

0xAB, 

0xD0, 

0x0  A, 

0x50, 

0x9B 

n 

0x02, 

0x46, 

0xD3, 

0x08  , 

0x3D, 

0x66, 

0xA4, 

0xB0, 

0xB6, 

0x51 

□ 

0xE2, 

0xBA, 

0 X E 5 , 

0x4E, 

0x44, 

0x39, 

0x7C, 

0x9F, 

0x2A, 

0x5E 

a 

0x31  , 

0x2F, 

0x  F 6 , 

0xDB, 

0x5C, 

0x7  5 , 

0xAE, 

0x81 

>; 

static 

byte  const  DSA1024qC3  = 

C 

n 

0xFF, 

0x9F, 

0x9C, 

0x7C, 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26 

Q 

\ . 

0xBA, 

0xAB, 

0xA2, 

0x5E, 

0xC3, 

0x55, 

0xE9, 

0x27, 

0xC2, 

0xB1 

^ , 

#endi  f 

static 

byte  const  DSA1  536pCIl  = ■ 

C 

D 

0xF8, 

0xF5, 

0x59, 

0x5  F, 

0xDC, 

0x76  , 

0x52, 

0x4F, 

0x30, 

0x30 

s 

0x8D, 

0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57, 

0x92, 

0x59, 

0xCO, 

0xFO 

□ 

0xB8, 

0xAE, 

0x74, 

0x4F, 

0xC5, 

0xFC, 

0x76, 

0xBC, 

0x83, 

0x  C 5 

n 

0x47, 

0x30, 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

0x66, 

0xFF, 

0x15, 

0xF9 

n 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

0xAA, 

0x03, 

0x5B, 

0x9E 

n 

0x8D, 

0xA0, 

0xA5, 

0x72, 

0x3A, 

0xD4, 

0x1  A, 

0xF0, 

0xBF, 

0x46 

Q 

0X00  , 

0x58, 

0x2B, 

0xE5, 

0xF4, 

0x88, 

0xFD, 

0x58, 

0x4E, 

0x49 

□ 

0xDB, 

0xCD, 

0x20, 

0xB4, 

0x9D, 

0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B 

n 

0x33, 

0x6C, 

0x38, 

0X0D, 

0x45  , 

0x1  D, 

0X0F, 

0x7  C, 

0x88, 

0xB3 

Q 

0x1  C, 

0x7C, 

0x5B, 

0x2D, 

0x8E, 

0xF6, 

0xF3, 

0xC9, 

0x23, 

0xC0 

s 

0x43, 

0xF0, 

0x  A 5 , 

0x5B, 

0x18, 

0x8D, 

0x8E, 

0xBB, 

0x55, 

0x8C 

n 

0xB8, 

0x5D, 

0x38, 

0x  D 3 , 

0x34, 

0xFD, 

0x7C, 

0x17, 

0x57, 

0x43 

Q 

0xA3, 

0x1  D, 

0x18, 

0x6C, 

0xDE, 

0x33, 

0x21  , 

0x2C, 

0xB5, 

0x2A 

□ 

0xFF, 

0x3C, 

0xE1  , 

0xB1  , 

0x29, 

0x40, 

0x18, 

0x1  1 , 

0x80, 

0x7C 

Q 

0x84, 

0xA7, 

0X0A, 

0x72, 

0xD6, 

0x86, 

0xC4, 

0x03, 

0x19, 

0xC8 

n 

0x07, 

0x29, 

0x7A, 

0xC  A, 

0x95, 

0X0C, 

0xD9, 

0x96, 

0x9F, 

0xAB 

□ 

0xD0, 

0X0A, 

0x50, 

0x9B, 

0x02, 

0x47, 

0x2C, 

0xCB, 

0x  A6  , 

0x82 

n 

0x  A 5 , 

0xEB, 

0xA2, 

0x84, 

0x3E, 

0xE3, 

0x30, 

0x56, 

0xE7, 

0xA9 

n 

0xF3, 

0xE1  , 

0xC4, 

0 x3  D , 

0x22, 

0x98, 

0x80, 

0xF3, 

0xC3, 

0x08 

n 

0x49, 

0x8F 

^ r 

Static 

byte  const  DSA1536qC3  = t 

C 

n 

0x3F, 

0xFD, 

0x66, 

0xA4, 

0x5D, 

0x41  , 

0x9F, 

0x9C, 

0x7C, 

0xBO 

n 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB, 

0xA2, 

0x5E, 

0xC3 

□ 

"V  . 

0x55, 

0xE9, 

0x27, 

0xC2, 

0x43 

^ r 

Static 

byte  const  DSA2048pCI]  = t 

r 

a 

0xF6, 

0x42, 

0x57, 

0xB7, 

0x08, 

0x7F, 

0x08, 

0x17, 

0x72, 

0xA2 

n 

0xBA, 

0 X D6  , 

0xA9, 

0x42, 

0xF3, 

0x05, 

0xE8, 

0xF9, 

0x53, 

0x1  1 , 

n 

0x39, 

0x4F, 

0xB6, 

0xF1  , 

0x6E, 

0xB9, 

0x4B, 

0x38, 

0x20, 

0xOA 

n 

0X01  , 

0xA7, 

0x56, 

0xA3, 

0x14, 

0xE9, 

0x8F, 

0x40, 

0x55, 

0xF3, 

o 

0x  D0  , 

0x07, 

0xC6, 

0xCB, 

0x43, 

0xA9, 

0x94, 

0xAO, 

0xF7, 

0x4C, 

n 

0x64, 

0x86, 

0x49, 

0xF8, 

0x0  C , 

0x83, 

0xBD, 

0x65, 

0xE9, 

0x17, 

n 

0xD4, 

0xA1  , 

0xD3, 

0x50, 

0xF8, 

0xF5, 

0x59, 

0x5F, 

0xOC, 

0x76 , 

n 

0x52, 

0x4F, 

0x3D, 

0x3D, 

0x8D, 

0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57, 

Q 

0x92, 

0x59, 

0xCD, 

0xFD, 

0xB8, 

0xAE, 

0x74, 

0x4F, 

0x  C 5 , 

0xFC, 

n 

0x76  , 

0xBC, 

0x83, 

0xC5, 

0x47, 

0x30, 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

n 

0x66, 

0xFF, 

0x15, 

0xF9, 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

n 

0xAA, 

0xD3, 

0x5B, 

0x9E, 

0x8D, 

0xA0, 

0x  A 5 , 

0x72, 

0x3A, 

0x04, 

n 

0x1  A, 

0xF0, 

0xBF, 

0x46, 

0X00, 

0x58, 

0x2B, 

0xE5, 

0xF4, 

0x88, 

□ 

0xFD, 

0x58, 

0x4E, 

0x49, 

0xDB, 

0xCD, 

0x20, 

0xB4, 

0x90, 

0xE4, 

n 

0x91  , 

0x07, 

0x36, 

0x6B, 

0x33, 

0x6C, 

0x38, 

0x0  0, 

0x45, 

0x1  0, 

n 

0X0F, 

0x7C, 

0x88, 

0xB3, 

0x1  C, 

0x7C, 

0x5B, 

0x20, 

0x8E, 

0xF6, 

Q 

0xF3, 

0xC9, 

0x23, 

0xC0, 

0x43, 

0xF0, 

0x  A 5 , 

0x5B, 

0x18, 

0x80. 

□ 

0x8E, 

0xBB, 

0x55, 

0x8C, 

0xB8, 

0x5D, 

0x38, 

0x03, 

0x34  , 

0x  FO, 

□ 

0x7C, 

0x17, 

0x57, 

0x43, 

0xA3, 

0x1  D, 

0x18, 

0x6C, 

0xOE, 

0x33, 
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B 

0x21, 

0x2C, 

0xB5, 

0x2A, 

0xFF, 

0x3C, 

0xE1  , 

0xB1  , 

0x29, 

0x40 

B 

0x18, 

0x1  1 , 

0x8D, 

0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72  , 

0xD6, 

0x86 

B 

0xC4, 

0x03, 

0x19, 

0xC8, 

0x07, 

0x29, 

0 x7  A, 

0xCA, 

0x95, 

0X0C 

B 

0xD9, 

0x96, 

0x9F, 

0xAB, 

0xD0, 

0X0A, 

0x51  , 

0xB8, 

0x4F, 

0xCF 

B 

0x7E, 

0xC9, 

0x6A, 

0x96, 

0xFA, 

0x9E, 

0x4E, 

0xDC, 

0x9F, 

0x93 

B 

0x37, 

0x21  , 

0x13, 

0x1  D, 

0xE3, 

0xDD, 

0x3D, 

0xE0, 

0x7D, 

0x1  D 

B 

\ . 

0x6B, 

0xCE, 

0x09, 

0x83, 

0x1  1 , 

0xB5 

J r 

static 

byte  const  DSA2048qCD  = 

{ 

B 

0X01  , 

0xFE, 

0x46, 

0xD3, 

0x08, 

0x3D, 

0x66, 

0xA4, 

0x5D, 

0x41 

B 

0x9F, 

0x9C, 

0x7C, 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA 

B 

0x  AB, 

0x  A2  , 

0x5E, 

0xC3, 

0x55, 

0xE9, 

0x27, 

0xC2, 

0xCF 

Static 

byte  const  DSA3072pCD  = 

{ 

B 

0xCC, 

0x1  D, 

0x77, 

0x57, 

0x24, 

0x38, 

0x4A, 

0xE2, 

0xC4, 

0xF0 

B 

0xE8, 

0x8E, 

0x13, 

0x67, 

0x97, 

0x4E, 

0x92, 

0x13, 

0x61  , 

0xF6 

B 

0xDB, 

0xEB, 

0x25, 

0X0E, 

0x17, 

0xFD, 

0x  F6, 

0x98, 

0xF7, 

0xC8 

B 

0x7C, 

0x79, 

0xB0, 

0x72, 

0x1  D, 

0x38, 

0x75, 

0xFB, 

0x  F6, 

0xC1 

B 

0x73, 

0xC4, 

0x83, 

0x1  1 , 

0x26, 

0x2B, 

0x43, 

0x60, 

0xC3, 

0xE3 

B 

0xE8, 

0x  D6  , 

0X0A, 

0xFD, 

0xA1  , 

0x28, 

0x26, 

0X0B, 

0xAE, 

0xA9 

B 

0xAE, 

0xB3, 

0x65, 

0X0F, 

0x  A2  , 

0X00, 

0x53, 

0X01  , 

0x  A0, 

0x7C 

B 

0xD6, 

0xAB, 

0xA3, 

0x12, 

0x1  E, 

0xFA, 

0X0F, 

0x2A, 

0xCE, 

0x1  F 

B 

0x74, 

0x84, 

0x4F, 

0xCA, 

0x  F3, 

0x17, 

0xF3, 

0xA4, 

0x40, 

0xE9 

B 

0xD7, 

0xD2, 

0x77, 

0xB6, 

0x42, 

0x2D, 

0x02, 

0x36, 

0xC1  , 

0x26 

B 

0xCB, 

0x68, 

0x5E, 

0x9D, 

0x7C, 

0x98, 

0x09, 

0x0  A, 

0x8D, 

0x7E 

B 

0x2D, 

0xED, 

0xE4, 

0x5D, 

0x79, 

0xF5, 

0xD4, 

0x92, 

0x4F, 

0x9B 

B 

0x18, 

0x8E, 

0xFC, 

0x2A, 

0x  A7, 

0x4B, 

0x7C, 

0x32  , 

0xF6, 

0x42 

B 

0x57, 

0xB7, 

0x08, 

0x7F, 

0x08, 

0x17, 

0x72, 

0xA2, 

0xBA, 

0xD6 

B 

0xA9, 

0x42  , 

0xF3, 

0x0  5, 

0xE8, 

0xF9, 

0x53, 

0x1  1 , 

0x39, 

0x4F 

B 

0xB6, 

0xF1  , 

0x6E, 

0xB9, 

0x4B, 

0x38, 

0x20, 

0xDA, 

0X01  , 

0xA7 

B 

0x56, 

0xA3, 

0x14, 

0xE9, 

0x8F, 

0x40, 

0x55, 

0x  F3, 

0x  D0  , 

0x07 

B 

0xC6, 

0xCB, 

0x43, 

0xA9, 

0x94, 

0xAD, 

0xF7, 

0x4C, 

0x64, 

0x86 

B 

0x49, 

0xF8, 

0X0C, 

0x83, 

0xBD, 

0x65, 

0xE9, 

0x17, 

0xD4, 

0xA1 

B 

0xD3, 

0x50, 

0xF8, 

0xF5, 

0x59, 

0x5F, 

0xDC, 

0x76, 

0x52, 

0x4F 

B 

0x3D, 

0x3D, 

0x8D, 

0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57, 

0x92, 

0x59 

fl 

0xCD, 

0xFD, 

0xB8, 

0xAE, 

0x74, 

0x4F, 

0xC5, 

0xFC, 

0x76, 

0xBC 

B 

0x83, 

0xC5, 

0x47, 

0x30, 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

0x66, 

0xFF 

B 

0x15, 

0xF9, 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

0xAA, 

0xD3 

B 

0x5B, 

0x9E, 

0x8D, 

0xA0, 

0x  A5  , 

0x72, 

0x3A, 

0x  D4, 

0x1  A, 

0xF0 

B 

0xBF, 

0x46, 

0X00, 

0x58, 

0x2B, 

0xE5, 

0xF4, 

0x88, 

0xFD, 

0x58 

B 

0x4E, 

0x49, 

0xDB, 

0xCD, 

0x20, 

0xB4, 

0x9D, 

0xE4, 

0x91  , 

0x07 

B 

0x36, 

0x6B, 

0x33, 

0x6C, 

0x38, 

0X0D, 

0x45, 

0x1  D, 

0X0F, 

0x7C 

B 

0x88, 

0xB3, 

0x1  C, 

0x7C, 

0x5B, 

0x2D, 

0x8E, 

0xF6, 

0xF3, 

0xC9 

B 

0x23, 

0xC0, 

0x43, 

0xF0, 

0xA5, 

0x5B, 

0x18, 

0x8D, 

0x8E, 

0xBB 

B 

0x55, 

0x8C, 

0xB8, 

0x5D, 

0x38, 

0xD3, 

0x34, 

0xFD, 

0x7C, 

0x17 

B 

0x57, 

0x43, 

0xA3, 

0x1  D, 

0x18, 

0x6C, 

0xDE, 

0x33, 

0x21, 

0x2C 

B 

0xB5, 

0x2  A, 

0xFF, 

0x3  C , 

0xE1  , 

0xB1  , 

0x29, 

0x40, 

0x18, 

0x1  1 

B 

0x8D, 

0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72, 

0xD6, 

0x86, 

0xC4, 

0x03 

B 

0x19, 

0xC8, 

0x07, 

0x29, 

0x7A, 

0xCA, 

0x95, 

0X0C, 

0xDB, 

0x13 

B 

0xD8, 

0x  A2  , 

0x1  A, 

0x8F, 

0x32, 

0x6B, 

0x11, 

0xEB, 

0xA3, 

0xF2 

B 

0x71, 

0x5E, 

0xF5, 

0xC5, 

0x43, 

0x6D, 

0x84, 

0x4B, 

0xF6, 

0xFE 

B 

0x52, 

0xB9, 

0x60, 

0x5A, 

0x8E, 

0x09, 

0xCE, 

0xCB, 

0xFE, 

0x94 

B 

0xBC, 

0xEF, 

0x23, 

0x5B 

J r 

s t a t i C 

byte  const  DSA3072qC3  = 

{ 

B 

0x3F, 

0xEB, 

0x  D0  , 

0X0A, 

0x50, 

0x9B, 

0x02, 

0x46, 

0xD3, 

0x08 

B 

0x3D, 

0x66, 

0xA4, 

0x5D, 

0x41  , 

0x9F, 

0x9C, 

0x7C, 

0xBD, 

0x89 

B 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB, 

0 X A2  , 

0x5E, 

0x  C 3 , 

0x55 
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n 0xE9,  0x27,  0xC3,  0x1D 


>; 

static  byte  const  DSA4096pC!]  = { 


n 

0xF9, 

0x18, 

0xA0, 

0x7E, 

0x5  A, 

0x06, 

0x61  , 

0x7A, 

0x43, 

0x90 

n 

0x95, 

0xDC, 

0x05, 

0x6C, 

0x87, 

0x86, 

0xEC, 

0x61  , 

0xEC, 

0xCD 

n 

0x45, 

0x1  F, 

0X0E, 

0xD8, 

0xE0, 

0xA3, 

0x79, 

0xC6, 

0xC9, 

0xDC 

a 

0 X 7 A , 

0X0B, 

0xAC, 

0xE4, 

0x3F, 

0xE3, 

0x46, 

0x94, 

0xB6, 

0x30 

n 

0x4A, 

0x53, 

0xD7, 

0x7C, 

0x02, 

0x16, 

0x48, 

0x80, 

0xB5, 

0x1  5 

n 

0xE5, 

0x29, 

0x99, 

0xA9, 

0x9F, 

0x07, 

0x74, 

0xD3, 

0xFF, 

0xE3 

n 

0xA1  , 

0x  C 5 , 

0x96, 

0x20, 

0x4E, 

0x98, 

0x65, 

0xB8, 

0x08, 

0X0D 

n 

0xEE, 

0x10, 

0x  5 D , 

0x  AB, 

0xB6, 

0x17, 

0x1  C, 

0x51  , 

0xD8, 

0x50 

n 

0xC  A, 

0x22, 

0x57, 

0x43, 

0x29, 

0xBE, 

0x95, 

0xE8, 

0x56, 

0x2B 

D 

0x38, 

0x78, 

0 X 5 C , 

0X0B, 

0xDB, 

0xF8, 

0x4C, 

0x4D, 

0xD5, 

0xE3 

n 

0xAA, 

0x46, 

0 X C C , 

0x  FB, 

0xCE, 

0x17, 

0xE8, 

0x2A, 

0x9D, 

0x14 

n 

0x61  , 

0xE3, 

0x84, 

0xA9, 

0x4F, 

0xD1  , 

0x83, 

0x84, 

0xA8, 

0x79 

n 

0xB6, 

0xEF, 

0x8F, 

0xA7, 

0x43, 

0x46, 

0x08, 

0xC6, 

0xCC, 

0x1  D 

n 

0x77, 

0x57, 

0x24, 

0x38, 

0x4A, 

0xE2, 

0xC4, 

0xF0, 

0xE8, 

0x8E 

n 

0x13, 

0x67, 

0x97, 

0x4E, 

0x92, 

0x13, 

0x61  , 

0x  F 6 , 

0xDB, 

0xEB 

u 

0x25, 

0X0E, 

0x17, 

0xFD, 

0xF6, 

0x98, 

0xF7, 

0xC8, 

0x7C  , 

0x79 

a 

0xB0, 

0x72, 

0x1  D, 

0x38, 

0x75, 

0xFB, 

0xF6, 

0xC1  , 

0x73, 

0xC4 

a 

0x83, 

0x11, 

0x26, 

0x2B, 

0x43, 

0x60, 

0xC3, 

0x  E3  , 

0xE8, 

0x  D 6 

D 

0X0A, 

0xFD, 

0xA1  , 

0x28, 

0x26, 

0X0B, 

0xAE, 

0xA9, 

0xAE, 

0xB3 

D 

0x65, 

0X0F, 

0xA2, 

0X00, 

0x53, 

0X01  , 

0xA0, 

0x7C, 

0xD6, 

0xAB 

□ 

0x  A3, 

0x12, 

0x1  E, 

0x  FA, 

0X0F, 

0x2A, 

0xCE, 

0x1  F, 

0x74, 

0x84 

n 

0x4F, 

0xC  A, 

0xF3, 

0x17, 

0xF3, 

0xA4, 

0x40, 

0xE9, 

0xD7, 

0xD2 

H 

0x77, 

0xB6, 

0x42, 

0x2D, 

0x02, 

0x36, 

0xC1  , 

0x26, 

0xCB, 

0x68 

Q 

0x5E, 

0x9D, 

0x7C, 

0x98, 

0x09, 

0X0A, 

0x8D, 

0x7E, 

0x2D, 

0xED 

n 

0xE4, 

0x5D, 

0x79, 

0x  F5  , 

0xD4, 

0x92, 

0x4F, 

0x9B, 

0x1  8, 

0x8E 

c 

0xFC, 

0x2A, 

0xA7, 

0x4B, 

0x7C, 

0x32, 

0xF6, 

0x42, 

0x57, 

0xB7 

B 

0x08, 

0x7F, 

0x08, 

0x17, 

0x72  , 

0xA2, 

0xBA, 

0xD6, 

0xA9, 

0x42 

n 

0xF3, 

0x05, 

0xE8, 

0xF9, 

0x53, 

0x11, 

0x39, 

0x4F, 

0xB6, 

0xF1 

B 

0x6E, 

0xB9, 

0x4B, 

0x38, 

0x20, 

0xDA, 

0X01  , 

0x  A7, 

0x56, 

0xA3 

E 

0x14, 

0xE9, 

0x8F, 

0x40, 

0x55, 

0xF3, 

0x  D0  , 

0x07, 

0xC6, 

0xCB 

B 

0x43, 

0xA9, 

0x94, 

0xAD, 

0xF7, 

0x4C, 

0x64, 

0x86, 

0x49, 

0xF8 

B 

0X0C, 

0x83, 

0xBD, 

0x65, 

0xE9, 

0x17, 

0xD4, 

0xA1  , 

0xD3, 

0x50 

B 

0xF8, 

0xF5, 

0x59, 

0x5F, 

0xDC, 

0x76, 

0x52, 

0x4F, 

0x3D, 

0x3D 

B 

0x8D, 

0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57, 

0x92, 

0x59, 

0xCD, 

0xFD 

B 

0xB8, 

0xAE, 

0x74, 

0x4F, 

0xC5, 

0xFC, 

0x76, 

0xBC, 

0x83, 

0xC5 

B 

0x47, 

0x30, 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

0x66, 

0xFF, 

0x15, 

0xF9 

E 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

0xAA, 

0xD3, 

0x5B, 

0x9E 

B 

0x8D, 

0xA0, 

0xA5, 

0x72, 

0x3A, 

0xD4, 

0x1  A, 

0xF0, 

0xBF, 

0x46 

B 

0X00, 

0x58, 

0x2B, 

0xE5, 

0xF4, 

0x88, 

0xFD, 

0x58, 

0x4E, 

0x49 

B 

0xDB, 

0xCD, 

0x20, 

0xB4, 

0x9D, 

0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B 

B 

0x33, 

0x6C, 

0x38, 

0X0D, 

0x45  , 

0x1  D, 

0X0F, 

0x7C, 

0x88, 

0xB3 

B 

0x1  C, 

0x7C, 

0x5B, 

0x2D, 

0x8E, 

0xF6, 

0xF3, 

0xC9, 

0x23, 

0xC0 

B 

0x43, 

0xF0, 

0x  A5  , 

0x5B, 

0x18, 

0x8D, 

0x8E, 

0xBB, 

0x55, 

0x8C 

B 

0xB8, 

0x5D, 

0x38, 

0xD3, 

0x34, 

0xFD, 

0x7C, 

0x17, 

0x57, 

0x43 

B 

0xA3, 

0x1  D, 

0x18, 

0x6C, 

0xDE, 

0x33, 

0x21  , 

0x2C, 

0xB5, 

0x2A 

B 

0xFF, 

0x3  C , 

0xE1  , 

0xB1  , 

0x29, 

0x40, 

0x18, 

0x11  , 

0x8D, 

0x7C 

B 

0x84, 

0xA7, 

0X0A, 

0x72, 

0xD6, 

0x86, 

0xC4, 

0x03, 

0x19, 

0xC8 

B 

0x07, 

0x29, 

0x88, 

0x50, 

0x05, 

0x4B, 

0xFE, 

0x24, 

0x36, 

0x96 

B 

0x47, 

0xAB, 

0x40, 

0x4A, 

0xA2, 

0xE5, 

0xB3, 

0xCB, 

0X0E, 

0X0F 

B 

0x2A, 

0x1  C, 

0x4  5, 

0x17, 

0x3D, 

0xD9, 

0x5D, 

0xED, 

0x9F, 

0X0D 

B 

B 

>; 

0x33, 

0xF4, 

0xDA, 

0x2D 

0x04, 

0xC9, 

0x19, 

0xA9, 

0x9D, 

0x3F, 

0x40, 

0xF3 

static  byte  const  DSA4096qC]  = { 
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0X01  , 

0xF  F, 

0X0C, 

0x09, 

0x96, 

0x9F, 

0xAB, 

0xD0, 

0X0A, 

0x50, 

0x9B, 

0x02, 

0x46, 

0xD3, 

0x08, 

0x3D, 

0x66, 

0xA4, 

0x5D, 

0x41  , 

0x9F, 

0x9C, 

0x7C, 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB, 

0x  A2  , 

0x5E, 

0xC3, 

0x55, 

0xE9, 

0x27, 

0xC2, 

0x65 

static  struct  t 


n 

unsignedn 

bits; 

Q 

byte  const  *p; 

n 

unsignedn 

p s i z e ; 

n 

byte  const  *q; 

n 

uns i gnedn 

qsi ze; 

> DSAtabCD  = { 

#if  0 

n <1024,  DSA1024p,  s i zeof ( DS A1 024p ) , 

n n DSA1024q,  s i z e o f ( D S A1 024q ) > , 

# e n d i f 


n 

o 

n 

Q 

□ 

□ 

n 

n 

>; 


{1536,  DSA1536P, 
n DSA1536q 

{2048,  DSA2048p, 
n DSA2048q 

{3072,  DSA3072p, 
n DSA3072q 

{4096,  DSA4096p, 
n DSA4096q 


sizeof(DSA1536p), 

sizeof(DSA1536q)> 

sizeof(DSA2048p), 

sizeof(DSA2048q)3' 

sizeof(DSA3072p), 

sizeof(DSA3072q)> 

sizeof(DSA4096p), 

sizeof(DSA4096q)> 


/*  Return  >0  if  we  find  one,  and  fill  in  pointers,  else  return  0 */ 
i n t 

pgpDSAfixed  (unsigned  bits,  byte  const  **p,  size_t  *pLen, 
n byte  const  **q,  size_t  *qLen) 

{ 

#if  0 

n (void)bits;n  n /*  Avoid  warnings  */ 

n (void)p; 

n (void)pLen; 

n (voi d)q; 

n (void)qLen; 

#e  L se 

n unsigned  i; 


n 

n 

□ 

n 

s 

Q 

□ 

□ 

n 

□ 

n 

n 

n 

D 

n 


for 

n 

n 

□ 

n 

□ 

n 

n 

Q 

Q 

Q 

a 

n 

□ 


(i=0;  i<sizeof(DSAtab)/sizeof(DSAtabC0]); 
if  ( DS At abC i D . b i t s > bits) 


D 

return 

0; 

if 

(DSAtabCil. 

bits  == 

n 

if 

(p) 

□ 

n 

*P  = 

n 

i f 

(pL 

e n ) 

n 

Q 

*p  L en 

n 

i f 

(q) 

n 

n 

*q  = 

n 

i f 

(ql 

e n ) 

n 

n 

*q  L en 

D 

return 

1; 

+ +i  ) { 

bits)  { 

DSAtabCiD.p; 

= DSAtabCil.psize; 
DSAtabCi3.q; 

= DSAtabCiD.qsize; 


} 
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# e n d i f 

n return0; 

} 


/* 

* Fixed  p,  g values  for  ELG  keys.  The  p values  are  all  "strong"  primes, 

* such  that  (p-1)/2  is  also  prime.  This  makes  2 an  appropriate  generator 

* in  each  case. 

*/ 


#if  0 

static  byte  const  ElG1  024pCIl  = { 


n 

0xF4, 

0x88, 

0xFD, 

0x58,  0x4E, 

0x49, 

0xDB, 

0xCD, 

n 

0x20, 

0xB4, 

0x9D, 

0xE4,  0x91, 

0x07, 

0x3  6, 

0x6B, 

Q 

0x33, 

0x6C, 

0x38, 

0X0D,  0x45, 

0x1  D, 

0X0F, 

0x7C, 

□ 

0x88, 

0xB3, 

0x1  C, 

0x7C,  0x5B, 

0x2D, 

0x8E, 

0x  F6, 

□ 

0xF3, 

0xC9, 

0x23, 

0xC0,  0x43, 

0xF0, 

0xA5, 

0x5B, 

n 

0x18, 

0x8D, 

0x8E, 

0xBB,  0x55, 

0x8C, 

0xB8, 

0x5D, 

n 

0x38, 

0xD3, 

0x34, 

0xFD,  0x7C, 

0x17, 

0x57, 

0x43, 

Q 

0x  A3, 

0x1  D, 

0x18, 

0x6C,  0xDE, 

0x33, 

0x21  , 

0x2C, 

n 

0xB5, 

0x2A, 

0xFF, 

0x3C,  0xE1, 

0xB1  , 

0x29, 

0x40, 

□ 

0x18, 

0x11, 

0x8D, 

0x7C,  0x84, 

0xA7, 

0x0  A, 

0x72, 

□ 

0xD6, 

0x86, 

0xC4, 

0x03,  0x19, 

0xC8, 

0x07, 

0x29, 

n 

0x7A, 

0xC  A, 

0x95, 

0X0C,  0xD9, 

0x96, 

0x9F, 

0x  AB, 

n 

0x  D0, 

0x0  A, 

0x50, 

0x9B,  0x02, 

0x46, 

0xD3, 

0x08, 

□ 

0x3D, 

0x66, 

0xA4, 

0x5D,  0x41, 

0x9F, 

0x9C, 

0x7C, 

n 

0xBD, 

0x89, 

0x4B, 

0x22,  0x19, 

0x26, 

0xBA, 

0xAB, 

n 

\ . 

0xA2, 

0x5E, 

0xC3, 

0x55,  0xE9, 

0x2F, 

0x78, 

0xC7 

J r 

Static 

byte  const  ElG1024gi;!]  = { 

□ 

>; 

#end i f 

0x02 

stati  c 

byte  const  ElG1  536pC!l  = { 

Q 

0xF8, 

0xF5, 

0x59, 

0x5  F,  0xDC, 

0x76, 

0x52, 

0x4F, 

n 

0x3D, 

0x3D, 

0x8D, 

0xDB,  0xCE, 

0x99, 

0xE1  , 

0x57, 

a 

0x92, 

0x59, 

0xCD, 

0xFD,  0xB8, 

0xAE, 

0x74, 

0x4F, 

D 

0xC5, 

0xFC, 

0x76, 

0xBC,  0x83, 

0xC5, 

0x47, 

0x30, 

0 

0x61  , 

0xCE, 

0x7C, 

0xC9,  0x66, 

0xFF, 

0x15, 

0xF9, 

0 

0xBB, 

0xFD, 

0x91  , 

0x5E,  0xC7, 

0X01  , 

0xAA, 

0xD3, 

0 

0x5B, 

0x9E, 

0x8D, 

0xA0,  0xA5, 

0x72, 

0x3A, 

0xD4, 

0 

0x1  A, 

0xF0, 

0xBF, 

0x46,  0x00, 

0x58, 

0x2B, 

0xE5, 

0 

0xF4, 

0x88, 

0xFD, 

0x58,  0x4E, 

0x49, 

0xDB, 

0x  C D , 

0 

0x20, 

0xB4, 

0x9D, 

0xE4,  0x91, 

0x07, 

0x36, 

0x6B, 

0 

0x33, 

0x6C, 

0x38, 

0X0D,  0x45, 

0x1  D, 

0X0F, 

0x7C  , 

0 

0x88, 

0xB3, 

0x1  C, 

0x7C,  0x5B, 

0x2D, 

0x8E, 

0xF6, 

0 

0xF3, 

0xC9, 

0x23, 

0xC0,  0x43, 

0xF0, 

0x  A 5 , 

0x5B, 

0 

0x18, 

0x8D, 

0x8E, 

0xBB,  0x55, 

0x8C, 

0xB8, 

0x5D, 

0 

0x38, 

0xD3, 

0x34, 

0xFD,  0x7C, 

0x17, 

0x57, 

0x43, 

0 

0x  A3, 

0x1  D, 

0x18, 

0x6C,  0xDE, 

0x33, 

0x21  , 

0x2C, 

0 

0xB5, 

0x2A, 

0xFF, 

0x3C,  0xE1, 

0xB1  , 

0x2  9, 

0x40, 

0 

0x18, 

0x11, 

0x8D, 

0x7C,  0x84, 

0xA7, 

0X0A, 

0x72, 

0 

0xD6, 

0x86, 

0xC4, 

0x03,  0x19, 

0xC8, 

0x07, 

0x29, 

0 

0x7A, 

0xC  A, 

0x95, 

0X0C,  0xD9, 

0x96, 

0x9F, 

0xAB, 

0 

0xD0, 

0X0A, 

0x50, 

0x9B,  0x02, 

0x46, 

0 X D 3 , 

0x08, 
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n 

0x3D, 

0x66, 

0xA4, 

0x50, 

0x41  , 

0x9F, 

0x9C, 

0x7C 

D 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB 

s 

\ , 

0x  A2  , 

0x5E, 

0xC3, 

0x55, 

0xE9, 

0x58, 

0x7C, 

0x47 

> r 

Static 

byte  const  ELG1536gC3  = 

{ 

Q 

\ . 

0x02 

^ r 

Static 

byte  const  ELG2048p[!D  = 

{ 

□ 

0x  F6, 

0x42, 

0x57, 

0xB7, 

0x08, 

0x7F, 

0x08, 

0x17 

n 

0x72, 

0xA2, 

0xBA, 

0x06, 

0xA9, 

0x42, 

0xF3, 

0x05 

n 

0xE8, 

0xF9, 

0x53, 

0x11, 

0x39, 

0x4F, 

0xB6, 

0xF1 

n 

0x6E, 

0xB9, 

0x4B, 

0x38, 

0x20, 

0xOA, 

0X01  , 

0xA7 

n 

0x56, 

0xA3, 

0x14, 

0xE9, 

0x8F, 

0x40, 

0x55, 

0 X F 3 

n 

0xD0, 

0x07, 

0xC6, 

0xCB, 

0x43, 

0xA9, 

0x94, 

0xAO 

s 

0xF7, 

0x4C, 

0x64, 

0x86, 

0x49, 

0xF8, 

0X0C, 

0x83 

□ 

0xBD, 

0x6  5, 

0xE9, 

0x17, 

0x04, 

0xA1  , 

0x03, 

0x50 

n 

0xF8, 

0x  F 5 , 

0x59, 

0x5  F, 

0xOC, 

0x76, 

0x52, 

0x4F 

n 

0x3D, 

0x3D, 

0x80, 

0xOB, 

0xCE, 

0x99, 

0xE1  , 

0x57 

Q 

0x92, 

0x59, 

0xCD, 

0xFO, 

0x68, 

0xAE, 

0x74, 

0x4F 

n 

0xC5, 

0xFC, 

0x76, 

0xBC, 

0x83, 

0xC5, 

0x47, 

0x30 

n 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

0x66, 

0xFF, 

0x15, 

0x  F9 

s 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

0xAA, 

0x03 

n 

0x5B, 

0x9E, 

0x80, 

0x  A0  , 

0x  A 5 , 

0x72  , 

0x3A, 

0x04 

n 

0x1  A, 

0xF0, 

0xBF, 

0x46  , 

0X00, 

0x58, 

0x2B, 

0xE5 

n 

0xF4, 

0x88, 

0xFO, 

0x58, 

0x4E, 

0x49, 

0xOB, 

0xCO 

n 

0x20, 

0xB4, 

0x90, 

0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B 

n 

0x33, 

0x6C, 

0x38, 

0x00, 

0x45, 

0x10, 

0X0F, 

0x7C 

n 

0x88, 

0xB3, 

0x1  C, 

0x7C, 

0x5B, 

0x20, 

0x8E, 

0x  F6 

n 

0xF3, 

0xC9, 

0x23, 

0xC0, 

0x43, 

0xF0, 

0xA5, 

0x5B 

n 

0x18, 

0x8D, 

0x8E, 

0xBB, 

0x55, 

0x8C, 

0xB8, 

0x50 

n 

0x38, 

0xD3, 

0x34, 

0xFO, 

0x7C, 

0x17, 

0x57, 

0x43 

n 

0x  A3, 

0x1  D, 

0x18, 

0x6C, 

0xOE, 

0x33, 

0x21, 

0x2C 

□ 

0xB5, 

0x2A, 

0xFF, 

0x3C, 

0xE1  , 

0xB1  , 

0x29, 

0x40 

□ 

0x18, 

0x1  1 , 

0x80, 

0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72 

n 

0xD6, 

0x86, 

0xC4, 

0x03, 

0x19, 

0xC8, 

0x07, 

0x29 

n 

0x7A, 

0xCA, 

0x95, 

0X0C, 

0x09, 

0x96, 

0x9F, 

0xAB 

n 

0xD0, 

0x0  A, 

0x50, 

0x9B, 

0x02, 

0x46, 

0x03, 

0x08 

D 

0x3D, 

0x66, 

0xA4, 

0x50, 

0x41  , 

0x9F, 

0x9C, 

0x7C 

□ 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB 

a 

\ . 

0xA2, 

0x5E, 

0xC3, 

0x55, 

0xE9, 

0x32  , 

0X0B, 

0x3B 

^ r 

stat  i c 

byte  const  ELG2048gCD  = 

{ 

□ 

"V  . 

0x02 

^ f 

static 

byte  const  ELG3072pC3  = 

{ 

a 

0xCC, 

0x1  D, 

0x77, 

0x57, 

0x24, 

0x38, 

0x4A, 

0xE2 

□ 

0xC4, 

0xF0, 

0xE8, 

0x8E, 

0x13, 

0x67, 

0x97, 

0x4E 

n 

0x92, 

0x13, 

0x61  , 

0xF6, 

0xOB, 

0xEB, 

0x25, 

0X0E 

n 

0x17, 

0xFD, 

0xF6, 

0x98, 

0xF7, 

0xC8, 

0x7C, 

0x79 

n 

0xB0, 

0x72, 

0x1  0, 

0x38, 

0x75, 

0xFB, 

0xF6, 

0xC1 

Q 

0x73, 

0xC4, 

0x83, 

0x11  , 

0x26, 

0x2B, 

0x43, 

0x60 

n 

0xC3, 

0xE3, 

0xE8, 

0x06, 

0X0A, 

0xFO, 

0xA1  , 

0x28 

a 

0x26, 

0X0B, 

0xAE, 

0xA9, 

0xAE, 

0xB3, 

0x65, 

0X0F 

Q 

0x  A2  , 

0X00, 

0x53, 

0X01  , 

0xA0, 

0x7C, 

0x06, 

0xAB 

n 

0xA3, 

0x12, 

0x1  E, 

0xFA, 

0X0F, 

0x2A, 

0xCE, 

0x1  F 

n 

0x74, 

0x84, 

0x4F, 

0xCA, 

0xF3, 

0x17, 

0xF3, 

0xA4 

n 

0x40, 

0xE9, 

0x07, 

0x02, 

0x77, 

0xB6, 

0x42  , 

0x20 

n 

0x02, 

0x36, 

0xC1  , 

0x26, 

0xCB, 

0x68, 

0x5E, 

0x90 
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Q 

0x7C,  0x98,  0x09,  0X0A, 

0x8D, 

0x7E, 

0x2D, 

0xED, 

□ 

0xE4,  0x5D,  0x79,  0xF5, 

0xD4, 

0x92, 

0x4F, 

0x9B, 

n 

0x18,  0x8E,  0xFC,  0x2A, 

0xA7, 

0x4B, 

0x7C, 

0x32, 

n 

0xF6,  0x42,  0x57,  0xB7, 

0x08, 

0x7  F, 

0x08, 

0x17, 

n 

0x72,  0xA2,  0xBA,  0xD6, 

0xA9, 

0x42, 

0xF3, 

0x05, 

n 

0xE8,  0xF9,  0x53,  0x11, 

0x39, 

0x4F, 

0xB6, 

0xF1  , 

□ 

0x6E,  0xB9,  0x4B,  0x38, 

0x20, 

0x  D A , 

0X01  , 

0xA7, 

Q 

0x56,  0xA3,  0x14,  0xE9, 

0x8F, 

0x40, 

0x55, 

0xF3, 

n 

0xD0,  0x07,  0xC6,  0xCB, 

0x43, 

0x  A9, 

0x94, 

0xAD, 

Q 

0xF7,  0x4C,  0x64,  0x86, 

0x49, 

0xF8, 

0X0C, 

0x83, 

n 

0xBD,  0x65,  0xE9,  0x17, 

0xD4, 

0xAl  , 

0xD3, 

0x50, 

a 

0xF8,  0xF5,  0x59,  0x5F, 

0xDC, 

0x76, 

0x52, 

0x4F, 

n 

0x3D,  0x3D,  0x8D,  0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57, 

n 

0x92,  0x59,  0xCD,  0xFD, 

0xB8, 

0xAE, 

0x74, 

0x4F, 

n 

0xC5,  0xFC,  0x76,  0xBC, 

0x83, 

0xC5, 

0x47, 

0x30, 

a 

0x61,  0xCE,  0x7C,  0xC9, 

0x66, 

0xFF, 

0x15, 

0xF9, 

a 

0xBB,  0xFD,  0x91,  0x5E, 

0xC7, 

0x01  , 

0xAA, 

0x  D3  , 

a 

0x5B,  0x9E,  0x8D,  0xA0, 

0x  A5  , 

0x72, 

0x3A, 

0xD4, 

n 

0x1A,  0xF0,  0xBF,  0x46, 

0X00, 

0x58, 

0x2B, 

0xE5, 

n 

0xF4,  0x88,  0xFD,  0x58, 

0x4E, 

0x49, 

0xDB, 

0xCD, 

tt 

0x20,  0xB4,  0x9D,  0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B, 

u 

0x33,  0x6C,  0x38,  0x0D, 

0x4  5, 

0x1  D, 

0X0F, 

0x7C, 

n 

0x88,  0xB3,  0x1C,  0x7C, 

0x5B, 

0x2D, 

0x8E, 

0xF6, 

u 

0xF3,  0xC9,  0x23,  0xC0, 

0x43, 

0xF0, 

0 X A 5 , 

0x5B, 

a 

0x18,  0x8D,  0x8E,  0xBB, 

0x55, 

0x8C, 

0xB8, 

0x50, 

n 

0x38,  0xD3,  0x34,  0xFD, 

0x7C, 

0x17, 

0x57, 

0x43, 

n 

0xA3,  0x1D,  0x18,  0x6C, 

0xDE, 

0x33, 

0x21  , 

0x2C, 

n 

0xB5,  0x2A,  0xFF,  0x3C, 

0xE1  , 

0xB1  , 

0x29, 

0x40, 

n 

0x18,  0x11,  0x8D,  0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72, 

n 

0xD6,  0x86,  0xC4,  0x03, 

0x19, 

0xC8, 

0x07, 

0x29, 

u 

0x7A,  0xCA,  0x95,  0x0C, 

0xD9, 

0x96, 

0x9F, 

0x  AB, 

a 

0xD0,  0X0A,  0x50,  0x9B, 

0x02, 

0x46, 

0xD3, 

0x08, 

n 

0x3D,  0x66,  0xA4,  0x5D, 

0x41  , 

0x9F, 

0x9C, 

0x7C, 

n 

0xBD,  0x89,  0x4B,  0x22, 

0x19, 

0x26, 

0xBA, 

0xAB, 

a 

\ . 

0xA2,  0x5E,  0xC3,  0x55, 

0xE9, 

0x4C, 

0x32, 

0x6  F 

■r  f 

static 

byte  const  ELG3072gCD  = 

{ 

n 

0x02 

^ f 

static 

byte  const  ELG4096pCD  = 

{ 

n 

0xF9,  0x18,  0xA0,  0x7E, 

0x5  A, 

0x06, 

0x61  , 

0x7A, 

n 

0x43,  0x90,  0x95,  0xDC, 

0x0  5, 

0x6C, 

0x87, 

0x86, 

a 

0xEC,  0x61,  0xEC,  0xCD, 

0x45, 

0x1  F, 

0X0E, 

0x08, 

n 

0xE0,  0xA3,  0x79,  0xC6, 

0xC9, 

0xDC, 

0x7A, 

0X0B, 

n 

0xAC,  0xE4,  0x3F,  0xE3, 

0x46, 

0x94, 

0xB6, 

0x30, 

□ 

0x4A,  0x53,  0xD7,  0x7C, 

0x02, 

0x16, 

0x48, 

0x80, 

tx 

0xB5,  0x15,  0xE5,  0x29, 

0x99, 

0xA9, 

0x9F, 

0x07, 

n 

0x74,  0xD3,  0xFF,  0xE3, 

0xA1  , 

0xC5, 

0x96, 

0x20, 

n 

0x4E,  0x98,  0x65,  0xB8, 

0xD8, 

0X0D, 

0xEE, 

0x10, 

n 

0x5D,  0xAB,  0xB6,  0x17, 

0x1  C, 

0x51  , 

0xD8, 

0x50, 

Q 

0xCA,  0x22,  0x57,  0x43, 

0x29, 

0xBE, 

0x95, 

0xE8, 

n 

0x56,  0x2B,  0x38,  0x78, 

0x5C, 

0X0B, 

0xDB, 

0x  F8, 

n 

0x4C,  0x4D,  0xD5,  0xE3, 

0xAA, 

0x46, 

0xCC, 

0x  FB, 

□ 

0xCE,  0x17,  0xE8,  0x2A, 

0x9D, 

0x14, 

0x61  , 

0xE3, 

n 

0x84,  0xA9,  0x4F,  0xD1, 

0x83, 

0x84, 

0xA8, 

0x79, 

a 

0xB6,  0xEF,  0x8F,  0xA7, 

0x43, 

0x46, 

0x08, 

0xC6, 

n 

0xCC,  0x1D,  0x77,  0x57, 

0x24, 

0x38, 

0x4  A, 

0xE2, 

n 

0xC4,  0xF0,  0xE8,  0x8E, 

0x13, 

0x67, 

0x97, 

0x4E, 
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n 

0x92, 

0x13, 

0x61  , 

0xF6, 

0xOB, 

0xEB, 

0x25, 

0X0E 

□ 

0x17, 

0xFD, 

0xF6, 

0x98, 

0x  F7, 

0xC8, 

0x7C  , 

0x79 

n 

0xB0, 

0x72, 

0x1  D, 

0x38, 

0x75, 

0xFB, 

0x  F6  , 

0xC1 

Q 

0x73, 

0xC4, 

0x83, 

0x11, 

0x26, 

0x2B, 

0x43, 

0x60 

n 

0xC3, 

0xE3, 

0xE8, 

0xD6, 

0X0A, 

0xFD, 

0xAl  , 

0x28 

n 

0x26, 

0X0B, 

0xAE, 

0xA9, 

0xAE, 

0xB3, 

0x65, 

0X0F 

n 

0xA2, 

0X00, 

0x53, 

0X01  , 

0x  A0, 

0x7C, 

0xD6, 

0xAB 

n 

0xA3, 

0x12, 

0x1  E, 

0xFA, 

0X0F, 

0x2A, 

0xCE, 

0x1  F 

n 

0x74, 

0x84, 

0x4F, 

0xCA, 

0xF3, 

0x17, 

0xF3, 

0x  A4 

n 

0x40, 

0xE9, 

0xD7, 

0xD2, 

0x77, 

0xB6, 

0x42  , 

0x2D 

n 

0x02, 

0x36, 

0xC1  , 

0x26, 

0xCB, 

0x68, 

0x5E, 

0x9D 

n 

0x7C, 

0x98, 

0x09, 

0x0  A, 

0x8D, 

0x7E, 

0x2D, 

0xED 

n 

0xE4, 

0x5D, 

0x79, 

0xF5, 

0xD4, 

0x92, 

0x4F, 

0x9B 

Q 

0x18, 

0x8E, 

0xFC, 

0x2  A, 

0xA7, 

0x4B, 

0x7C, 

0x32 

n 

0xF6, 

0x42, 

0x57, 

0xB7, 

0x08, 

0x7F, 

0x08, 

0x17 

n 

0x72, 

0xA2, 

0xBA, 

0xD6, 

0xA9, 

0x42  , 

0x  F3, 

0x05 

n 

0xE8, 

0xF9, 

0x53, 

0x1  1 , 

0x39, 

0x4F, 

0xB6, 

0xF1 

n 

0x6E, 

0xB9, 

0x4B, 

0x38, 

0x20, 

0xDA, 

0X01  , 

0xA7 

n 

0x56, 

0xA3, 

0x14, 

0xE9, 

0x8F, 

0x40, 

0x55, 

0x  F3 

n 

0x  D0  , 

0x07, 

0xC6, 

0xCB, 

0x43  , 

0xA9, 

0x94, 

0xAD 

n 

0x  F7, 

0x4C, 

0x64, 

0x86, 

0x49, 

0xF8, 

0x0  C , 

0x83 

n 

0xBD, 

0x65, 

0xE9, 

0x17, 

0xD4, 

0xA1  , 

0xD3, 

0x50 

n 

0xF8, 

0xF5, 

0x59, 

0x5F, 

0xDC, 

0x76, 

0x52, 

0x4F 

n 

0x3D, 

0x3D, 

0x8D, 

0xDB, 

0xCE, 

0x99, 

0xE1  , 

0x57 

n 

0x92, 

0x59, 

0xCD, 

0xFD, 

0xB8, 

0xAE, 

0x74, 

0x4F 

n 

0 X C 5 , 

0xFC, 

0x76, 

0xBC, 

0x83, 

0xC5, 

0x47, 

0x30 

u 

0x61  , 

0xCE, 

0x7C, 

0xC9, 

0x66, 

0xFF, 

0x15, 

0xF9 

n 

0xBB, 

0xFD, 

0x91  , 

0x5E, 

0xC7, 

0X01  , 

0x  AA, 

0xD3 

n 

0x5B, 

0x9E, 

0x8D, 

0xA0, 

0xA5, 

0x72, 

0x3A, 

0xD4 

n 

0x1  A, 

0xF0, 

0xBF, 

0x46, 

0X00, 

0x58, 

0x2B, 

0xE5 

□ 

0xF4, 

0x88, 

0xFD, 

0x58, 

0x4E, 

0x49, 

0xDB, 

0xCD 

n 

0x20, 

0xB4, 

0x9D, 

0xE4, 

0x91  , 

0x07, 

0x36, 

0x6B 

D 

0x33, 

0x6C, 

0x38, 

0X0D, 

0x45, 

0x1  D, 

0X0F, 

0x7C 

n 

0x88, 

0xB3, 

0x1  C, 

0x7C, 

0x5B, 

0x2D, 

0x8E, 

0x  F6 

Q 

0xF3, 

0xC9, 

0x23, 

0xC0, 

0x43, 

0xF0, 

0xA5, 

0x5B 

Q 

0x18, 

0x8D, 

0x8E, 

0xBB, 

0x55, 

0x8C, 

0xB8, 

0x5D 

B 

0x38, 

0xD3, 

0x34, 

0xFD, 

0x7C, 

0x17, 

0x57, 

0x43 

B 

0x  A3, 

0x1  D, 

0x18, 

0x6C, 

0xDE, 

0x33, 

0x21  , 

0x2C 

B 

0xB5, 

0x2  A , 

0xFF, 

0x3C, 

0xE1  , 

0xB1  , 

0x29, 

0x40 

B 

0x18, 

0x1  1 , 

0x8D, 

0x7C, 

0x84, 

0xA7, 

0X0A, 

0x72 

B 

0xD6, 

0x86, 

0xC4, 

0x03, 

0x19, 

0xC8, 

0x07, 

0x29 

B 

0x7A, 

0xCA, 

0x95, 

0X0C, 

0xD9, 

0x96, 

0x9F, 

0xAB 

B 

0xD0, 

0X0A, 

0x50, 

0x9B, 

0x02, 

0x46, 

0xD3, 

0x08 

B 

0x3D, 

0x66, 

0xA4, 

0x5D, 

0x41  , 

0x9F, 

0x9C, 

0x7C 

B 

0xBD, 

0x89, 

0x4B, 

0x22, 

0x19, 

0x26, 

0xBA, 

0xAB 

B 

>; 

Static 

B 

0xA2,  0x5E,  0xC3,  0x55, 

byte  const  ELG4096gC3  = 

0x02 

0xEB, 

{ 

0x3D, 

0x  D 6 , 

0x17 

>; 


Static 

struct  { 

B 

uns i gnedn 

bits; 

B 

byte  const  *p; 

B 

unsignedn 

psize; 

B 

byte  const  *g; 

B 

unsignedn 

g s i z e ; 

> ELGtabC:  = { 
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#if  0 


n 

{1024 

n 

Q 

#end i f 

Q 

{1536 

c 

Q 

n 

{2048 

n 

□ 

tt 

{3072 

n 

o 

a 

{4096 

n 

□ 

>; 

ELG1  024p,  s i z e o f ( E L G 1 02 4p  ) , 
ELG1024g,  s i z e o f ( E L G 1 02 4g ) } , 

ELG1  536p,  s i zeof C E L G1  536p  ) , 
ELG1  536g,  s i z eo f ( E L G 1 5 36g  ) > , 
ELG2048p,  sizeof (ELG2048p), 
ELG2048g,  s i z e o f ( E L G 2 048g  ) } , 
ELG3072p,  s i zeo f ( E L G3072 p ) , 
ELG3072g,  s i z eo f ( E L G 3072 g ) > , 
ELG4096p,  s i z e o f ( E L G 4 096p  ) , 
ELG4096g,  s i zeof ( E L G4096g  ) > 


/*  Return  >0  if  we  find  one,  and  fill  in  pointers,  else  return  0 */ 
i n t 


pgpE  L Gf 

i X e d 

(unsigned  bits. 

byte  const  **p,  size_t  *pLen, 

□ 

{ 

byte 

const 

**g,  size_t  *gLen) 

a 

unsigned  i; 

n 

for 

( 1 = 0 ; -i 

<sizeof(ELGtab)/sizeof(ELGtabC0]);  ++i ) 

n 

n 

if 

(ElGtabCiD.bits  > bits) 

n 

n 

n 

return  0; 

a 

n 

i f 

( E LGtabC 

iD.bits  ==  bits)  { 

u 

n 

n 

i f 

(p) 

Q 

n 

□ 

n 

*p  = ELGtabCi].p; 

Q 

n 

D 

i f 

( p L en  ) 

Q 

n 

n 

□ 

*pLen  = ELGtabCi3.psize; 

n 

□ 

n 

i f 

(g) 

Q 

n 

n 

n 

*g  = ELGtabCiD.g; 

n 

n 

n 

i f 

(glen) 

□ 

Q 

n 

a 

*gLen  = E 1 G t a b C i 3 . g s i z e ; 

n 

n 

□ 

return  1; 

n 

□ 

> 

Q 

> 

D 

return  0; 

> 

#e  1 se 

/*  Obsolete  code  */ 

#incLude  "keys 

. h" 

Static 

unsigned  char 

const 

nC512/8:  = 

{ 

Q 

0xDB, 

0x24, 

0x36, 

0x7B, 

0x91  , 

0x82, 

0x8E, 

0x4F, 

n 

0x17, 

0xD4, 

0xF7, 

0x32, 

0xD8, 

0X0A, 

0x59, 

0x7C, 

□ 

0x96, 

0xD8, 

0xCB, 

0xF7, 

0x29, 

0xC  A, 

0xB1  , 

0x  A5  , 

□ 

0xE2, 

0x09, 

0x27, 

0xD1  , 

0xA4, 

0xCD, 

0xD7, 

0x6  D , 

□ 

0xFD, 

0x6A, 

0x1  A, 

0xD4, 

0x80, 

0x4D, 

0x52, 

0xD6, 

o 

0x2B, 

0x29, 

0x99, 

0xF9, 

0x31  , 

0x3F, 

0x65, 

0x99, 

n 

0x59, 

0x19, 

0xDF, 

0x62, 

0x58, 

0x88, 

0x31  , 

0xC9, 

n 

0xB8, 

0xE1  , 

0x21  , 

0X0E, 

0x88, 

0x  0C  , 

0x13, 

0x99 

>; 
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Static 

unsi gned  cha 

r const 

d:51 2/8-1 : 

= { 

a 

0xEB, 

0xB7, 

0x16, 

0x08, 

0x2  4, 

0X0B, 

0x5A 

n 

0xAF, 

0x6D, 

0x88, 

0x91  , 

0x6C, 

0x78, 

0x83, 

0x9A 

Q 

0x56, 

0xAF, 

0x29, 

0xBB, 

0x1  F, 

0x5E, 

0x6E, 

0x75 

n 

0xF0, 

0x  D 0 , 

0xB5, 

0xF2, 

0x  E 5 , 

0xCD, 

0x3C, 

0x10 

o 

0x96, 

0xBC, 

0xF0, 

0x12, 

0x26, 

0x1  0, 

0x7D, 

0xDA 

o 

0x4F, 

0x11, 

0xF1  , 

0x4A, 

0x  AA, 

0xAC, 

0xBB, 

0xD4 

o 

0x74, 

0x  A C , 

0x9E, 

0xBD, 

0x7B, 

0xF3, 

0xBA, 

0xBE 

n 

>; 

0x58, 

0x15, 

0xBA, 

0xE2, 

0x77, 

0x75, 

0xE0, 

0xEF 

static 

unsigned  cha 

r const 

pC256/8:  = 

{ 

□ 

0xE9, 

0x61  , 

0x7D, 

0xF2, 

0x29, 

0x47, 

0x80, 

0x09 

□ 

0x44, 

0xDF, 

0X0D, 

0x7B, 

0xD9, 

0X01  , 

0x67, 

0x47 

a 

0x34, 

0xD1  , 

0x5F, 

0xD1  , 

0xC2, 

0xB7, 

0x  AA, 

0x72 

□ 

>; 

0xBE, 

0x4E, 

0xA6, 

0xD2, 

0xD4, 

0x2C, 

0xCE, 

0x4B 

static  unsigned  char 

const 

q:256/8:  = 

{ 

n 0xF0, 

0x61  , 

0x6C, 

0x02, 

0xF3, 

0xB0, 

0xD1  , 

0xD7 

n 0x63, 

0x9C, 

0x39, 

0x12, 

0xAB, 

0xA7, 

0x5E, 

0xCD 

a 0xAB, 

0xCC, 

0xEB, 

0x67, 

0x59, 

0x38, 

0xEA, 

0x61 

n 0x16, 

>; 

0x5E, 

0xBB, 

0xB0, 

0xA4, 

0x48, 

0x27, 

0x2B 

static  unsigned  char 

const 

u:256/8:  = 

{ 

n 0xD7, 

0x58, 

0xDF, 

0x29, 

0X01  , 

0x82, 

0xAA, 

0x2E 

n 0x2A, 

0x5A, 

0xF9, 

0x82, 

0x8F, 

0x4D, 

0x94, 

0x55 

n 0x50, 

0x7A, 

0xAD, 

0xB6, 

0xC0, 

0xA6, 

0xB8, 

0xC8 

n 0x57, 

0x47, 

0x45  , 

0x2F, 

0x55, 

0x3D, 

0xDC, 

0x50 

>; 

void 

f i X e d Key De s t roy ( s t r u c t PgpPubKey  *pub,  struct  PgpSecKey  *sec) 
{ 


n 

i f 

( pub  ) ( 

Q 

n 

bnEnd(&pub->n)  ; 

□ 

n 

bn  End ( &pub->e  ) ; 

D 

> 

n 

i f 

(sec)  { 

n 

□ 

bnEnd(&sec->d)  ; 

n 

a 

bnEnd(&sec->p)  ; 

□ 

a 

bn  End ( &s  ec->q  ) ; 

n 

n 

bnEnd(&sec->u); 

n > 

> 


i n t 

f i xedKeyGe t ( s t ru c t PgpPubKey  *pub,  struct  PgpSecKey  *sec) 


□ 

n 

□ 

n 

□ 

n 


if  (pub)  { 

n bnBe g i n ( &pub->n  ) ; 

n bnBegin(&pub->e); 

n if  C bnl nse r t B i gBy t es ( &pub->n , n,  0,  sizeof(n))  < 0 |1 

n bn S e t Q ( &pub->e , 17)  < 0)  { 

a a fixedKeyDestroyCpub,  (struct  PgpSecKey  *)0); 
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return  -1; 


pgpFixedKey.c 


□ Q n 
n n > 
H } 


□ 

n 

□ 

n 

Q 

□ 

n 

n 

n 

n 

n 

Q 

D 


if  (sec)  { 

n bnBeg i n ( &se c->d ) ; 

n bnBeg in(&sec->p); 

n bnBeg i n ( 6s e c->q ) ; 

n b n Be g i n C 6s e c ->u  ) ; 

n if  ( bn  I n se r t B i gBy t e s ( 6s e c->d,  d,  0,  sizeof(d))  < 0 || 

b n I n s e r t B i g By t e s ( 6 s e c ->p , p,  0,  sizeof(p))  < 0 | | 

bn  I n s e r t B i gBy t e s ( 6se c->q,  q,  0,  sizeof(q))  < 0 || 

b n I n s e r t B i g By t e s ( 6 s e c ->u , u,  0,  sizeof(u))  < 0)  { 

n n f i X e d Ke  y D e s t r oy  ( p u b , sec); 

n n return-1; 

n } 

> 


n return0; 

} 


#endifn  /*  End  of  obsolete  code  */ 
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/* 

* pgpFixedKey.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* A singLe,  fixed  PGP  key  for  decryption  operations. 

* 

* $Id:  pg p F i xed Key . h , V 1 . 5. 2.1  1 997/06/07  09:51  : 26  mhw  Exp  $ 

*/ 

#ifdef  cpLuspLus 

extern  "C"  f 
#end  i f 

#incLude  "pgpUsuaLs.h" 

struct  PgpPubKey; 

#ifndef  T Y P E_PG P PUBKE Y 

#define  TYPE_PGPPUBKEY  1 

typedef  struct  PgpPubKey  PgpPubKey; 

#end i f 

struct  PgpSecKey; 

#ifndef  TYPE_PGPSECKEY 

#define  TYPE_PGPSECKEY  1 

typedef  struct  PgpSecKey  PgpSecKey; 

#end  i f 

struct  PgpPubKey  PGPExport  *fixedKeyPub(void); 
struct  PgpSecKey  PGPExport  * f i xe d Key S e c ( vo i d ) ; 

extern  unsigned  char  const  PGPExport  f i xedKey I D C 8 D ; 

/*  Return  > 0 if  find  fixed  prime  params  of  the  specified  size,  0 if  not  */ 
i nt 

pgpDSAfixed  (unsigned  bits,  byte  const  **p,  size_t  *pLen, 
n byte  const  **q,  size_t  *qLen); 

i nt 

pgpELGfixed  (unsigned  bits,  byte  const  **p,  size_t  *pLen, 
n byte  const  **g,  size_t  *gLen); 


#ifdef  __cpLuspLus 

> 

#end i f 
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/* 

* pgpKeyMisc.c  --  Miscellaneous  helper  functions  for  public  key  modules. 

* Including  packing  and  unpacking  for  PKCS  compatibility. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg p Key H i s c . c , V 1.5. 2.1  1 997/06/07  09:51:26  mhw  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


^include 

"config.h" 

#end  i f 

# i nc 1 ude 

<stdarg.h> 

#i nc lude 

"pgpDebug.h" 

#include 

"pgpKeyHisc.h 

#i nc lude 

" bn . h " 

#i nc 1 ude 

"pgpCFB. h" 

#i nc lude 

"pgpCipher.h" 

^include 

"pgpHash.h" 

# i n c 1 ude 

"pgpHem. h" 

#include 

"pgpErr.h" 

#include 

"pgpPubKey. h" 

# i nc 1 ude 

"pgpRndom. h" 

# i n c 1 ude 

"pgpSt  r2Key . h 

#include 

"pgpUsuals.h" 

# i f nd  e f 

PKCS_C0MPAT 

^define  PKCS_COMPAT  1 
# en d i f 


/* 

★ 

Given  a 

number 

of  bits  in  a modulus,  compute  the  minimum 

exponent  si 

* 

needed 

to  provide  equivalent 

security  from  sma 1 1 -e xpo nen t 

attacks. 

★ 

* 

Adding 

padding 

on  top 

of  this 

is  not  an  entirely  evil  idea. 

* 

This  is 

based 

on  a paper  from 

Michael  Wiener 

1 This  extension  to 

★ 

on  the 

difficulty  of 

the  two 

attacks,  which 

1 the  table  is  not 

* 

★ 

the  f ol lowi ng 

table: 

1 part  of 

1 

the  origins 

★ 

•k 

Table 

1 : Subg  roup 

Sizes  to 

Match  Field  Sizes 

1 

1 THIS  FUNCTION 

1 

* 

Size  of  p Cost  of 

each  attack  Size  of  q 

1 

1 Output 

Error 

•k 

(bits)  ( 

instructions  or 

(bits) 

1 

(+  is  safe) 

* 

i( 

modular 

mu  1 1 i p 1 

i e s ) 

1 

★ 

512 

9 

X 

10*17 

1 1 9 

1 

1 137 

+ 18 

* 

768 

6 

X 

1 0*21 

145 

1 1 53 

+ 8 

★ 

1024 

7 

X 

1 0*24 

165 

1 169 

+ 4 

* 

1 280 

3 

X 

> 

IN) 

183 

1 184 

+ 1 

★ 

1 536 

7 

X 

1 0*29 

198 

1 1 98 

+ 0 

* 

1 792 

9 

X 

1 0*31 

212 

1 212 

+ 0 

* 

2048 

8 

X 

10*33 

225 

1 225 

+ 0 

* 

2304 

5 

X 

10*35 

237 

1 237 

+ 0 

* 

2560 

3 

X 

10*37 

249 

1 249 

+ 0 

★ 

2816 

1 

X 

10*39 

259 

1 260 

+ 1 
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★ 

3072 

3 

X 

10*40 

269 

1 

270 

+ 1 

★ 

3328 

8 

X 

10*41 

279 

1 

280 

+ 1 

* 

3584 

2 

X 

10*43 

288 

1 

289 

+ 1 

* 

3840 

4 

X 

1 0*44 

296 

1 

297 

+ 1 

★ 

4096 

7 

X 

1 0*45 

305 

1 

305 

+ 0 

* 

4352 

1 

X 

10*47 

313 

1 

313 

+ 0 

* 

4608 

2 

X 

00 

< 

320 

1 

321 

+ 1 

★ 

4864 

2 

X 

10*49 

328 

1 

329 

+ 1 

* 

51  20 

3 

X 

10*50 

335 

1 

337 

+ 2 

* 

This  function  fits 

a curve  to 

this. 

which 

overestimates 

the 

size 

* 

of  q requi red,  but 

by 

a very 

small 

amount 

in  the 

important 

1 000—4000 

★ 

bit  range.  It  is 

a 

quad  ratio 

curve 

up  to 

3840 

bits,  and 

a 

Linear 

★ 

curve  past  that . 

They 

are  designed 

to  be 

C(1  ) 

(have  the 

same  value 

•k 

and  the  same  slope) 

a t 

the  point  where  they  meet 

*/ 


#de  f i ne 

AN 

1 

/* 

a 

= - AN / A D 765536,  the  quadratic  coefficient  */ 

#de  f i n e 

AD 

3 

#def i ne 

H 

8 

/* 

slope  = 

M/256, 

i . e . 

1/32  where  Li 

near  starts  */ 

#def i ne 

TX 

3840 

/* 

X 

value 

at  the 

slope 

point,  where 

Linear  starts 

*/ 

#def i ne 

/* 

TY 

297 

/* 

Y 

value 

at  the 

slope 

point,  where 

Linear  starts 

*/ 

* For  a slope  of  M at  the  point  (TX,TY),  we  only  have  one  degree  of 

* freedom  Left  in  a quadratic  curve,  so  use  the  coefficient  of  x''2, 

* namely  a,  as  that  free  parameter. 

* 

* y = -AN/AD*(  (x-TX) /256)''2  + W*(x-TX)/256  + TY 

* = -AN*(x-TX)*Cx-TX)/AD/256/256  + H*x/256  - H*TX/256  + TY 

* = -AN*x*x/AD/256/256  + 2 * AN*x *TX / AD / 2 5 6 / 2 5 6 - AN*T X*T X / A D / 2 5 6 / 2 5 6 \ 

* + H*x/256  - M*TX/256  + TY 

* = -AN*(x/256)*2/AD  + 2*AN*(TX/256)*(x/256)/AD  + M*(x/256)  \ 

* - AN*(TX/256)''2/AD  - H*(TX/256)  + TY 

* = (AN*(2*TX/256  - x/256)  + M* A D ) *x / 2 56 / A D - ( AN* ( TX / 2 5 6 ) / A D + H)*TX/256  \ 

* + TY 

* = (AN*(2*TX/256  - x/256)  + H* A D ) *x / 2 5 6 / A D \ 

* - (AN*(TX/256)  + M*AD)*TX/256/AD  + TY 

* = (CM*AD  + AN*(2*TX/256  - x/256))*x  - ( AN  * ( TX / 2 5 6 ) +M* A D ) *TX ) / 2 5 6 / A D + TY 

* = ((M*AD  + AN*(2*TX  - x)/256)*x  - ( AN*  ( T X / 2 5 6 ) +M*  A D ) *TX  ) / 2 5 6 / A D + TY 

* = ((n*AD  + AN*(2*TX  - x)/256)*x  - (H*AD  + AN*TX / 2 5 6 ) *TX ) / 2 5 6 / A D + TY 

* = ( ( (256*H*AD  + 2*AN*TX-AN*x)/256)*x  - CH*AD  + AN *TX / 2 5 6 ) *TX ) / 2 56 / A D + TY 

* 

* Since  this  is  for  the  range  0...TX,  in  order  to  avoid  having  any 

* intermediate  results  Less  than  0,  we  need  one  final  rearrangement,  and 

* a compiler  can  easily  take  the  constant-folding  from  there... 

* 

* = TY  + ( ( (256*M*AD+2*AN*TX-AN*x) /256)*x  - (M*AD  + AN *T X / 2 5 6 ) *TX ) / 2 5 6 / A D 

* = TY  - ((M*AD  + AN*TX/256)*TX  - ( ( 2 5 6*M* A D+2 * AN*TX- AN*x ) / 2 56 ) *x ) / 2 5 6 / A D 

*/ 


#define  BITS(x)  \ 

TY  - ((M*AD  + AN*TX/256)*TX  - ( ( 2 5 6 *M * A D+ AN*2 *TX- AN *x ) / 2 5 6 ) *x ) / ( A D *2 5 6 ) 


unsigned 

pgpDiscreteLogExponentBitsCunsigned  modbits) 

{ 

n unsigned  expbits; 

n if  (modbits>TX) 
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Q 

n 

expbits  = H*modbi ts/256  - 

M*TX/256  + TY; 

/*  Linear  */ 

n 

else 

Q 

□ 

expbits  = B I T S ( mod b i t s ) ; 

/*  Quadratic 

*/ 

tt 

return 

expbits; 

> 

#undef  BITS 
#undef  TY 
#undef  TX 
# u nd  e f H 
#undef  AD 
#undef  AN 


/* 

* Fill  the  given  bignum,  from  bytes  high-1  through  Low  (where  0 is 

* the  Least  significant  byte),  with  non-zero  random  data. 

*/ 


static  i n t 

r a ndomPad ( s t r u c t Pg p R a ndomC on t e x t const  *rc,  struct  BigNum  *bn, 
n unsigned  high,  unsigned  Low) 

{ 

a unsi gned  i , L; 

n byte  paddingCbAD;  /*  This  can  be  any  size  (>0)  whatsoever  */ 


n 

n 

a 

n 

n 


high  -=  Low; 
whiLe  (high)  { 

n L = high  < s i z e o f ( pa dd i n g ) ? high  : s i z eo f ( pa dd i ng ) ; 

n pgpRandomGetBytes ( rc,  padding,  L); 

for  (i  = 0;  i < L;  i++)  { /*  RepLace  aLL  zero  bytes  */ 

wh i L e ( padd i ng C i ] ==  0) 

n n n pg pRa ndomGe t By t e s ( r c , padding+i,  1); 

> 

B high-=L; 

B if  ( bn  I n s e r t B i g By t e s ( bn , padding,  high+Low,  L)  < 0) 

B B return  PGPERR.NOMEM; 

> 


B mems e t ( pa d d i n g , 0,  s i z e o f ( pa dd i ng  ) ) ; 

B return0; 

} 


/* 

* FiLL  the  given  bignum,  from  bytes  high-1  through  Low  (where  0 is 

* the  Least  significant  byte),  with  aLL  ones  (0xFF)  data. 

*/ 

static  int 

on e s Pa d ( s t r u c t BigNum  *bn,  unsigned  high,  unsigned  Low) 

< 

B unsigned  L; 

B static  byte  const  paddingC]  = { 

B B 255,255,255,255,255,255,255,255, 

B B 255,255,255,255,255,255,255,255 

B >; 


high  -=  Low; 
whiLe  (high)  { 

B L = high  < s i z eof ( padd i ng  ) ? high  : s i zeof ( padd i ng ) ; 

B h i g h - = L ; 

B if  ( bn  I n s e r t B i gBy t es ( bn , padding,  high+Low,  L)  < 0) 
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n n 

> 

return  0; 


return  PGPERR_NOHEM; 


/* 

* The  Basic  Encoding  Rules  (of  which  the  Distinguished  Encoding  Rules 

* are  a simple  m i n i ma I -s i z ed  subset)  are  supposed  to  be  compact.  Humph. 

* Maybe  they  are,  but  the  ASN.1  they're  encoding  is  less  than  concise. 

* It's  sequence(sequence(object_id(1 .2.840.113549.2.5)),octet_string(. . . 
*/ 

static  byte  const  HD5_prefixC]  = { 

n 0x30,  /*  Universal,  Constructed,  Sequence  */ 

n 0x20,  /*  Length  32  (bytes  following)  */ 

n n 0x30,  /*  Universal,  Constructed,  Sequence  */ 

n n 0X0C,  /*  Length  12  */ 


) ) 


n 

a 

n 

0x06, 

/*  Universal,  Primitive,  ob j e c t - i de n t i f i e r * 

n 

n 

n 

0x08, 

/*  Length  8 */ 

n 

n 

n 

n 

0x2a,  /*  42  = ISO(1)*40  + Member  bodies(2) 

n 

n 

n 

n 

0x86,  0x48,  /*  840  = US  (ANSI)  */ 

□ 

n 

n 

□ 

0x86,  0xF7,  0X0D,  /*  113549  = RSADSI  */ 

n 

n 

n 

n 

0x02,  /*  2 = Hash  functions  */ 

n 

o 

Q 

n 

0x05,  /*  5 = MD5  */ 

n 

n 

n 

0x05  , 

/*  Universal,  Primitive,  NULL  */ 

n 

Q 

□ 

0x00, 

/*  Length  0 */ 

□ 

n 

0x04,  /*  Universal,  Primitive,  Octet  string  */ 

n 

n 

0x10  /* 

Length 

16  */ 

n 

>; 

D 

□ 

/*  16 

MD5  digest  bytes  go  here  */ 

/* 

This 

i s 

the 

PGP  2.2 

MD5  identification  byte  */ 

static 

by  t 

e const  pgp22 

_nD5_byte  = 1; 

/* 

* 

Wrap 

a 

PKCS 

wrapper 

around 

some  data. 

Type  1 is  for  signature,  type  2 for  encryption. 


Type  2 wrappers : 


If  the  modulus  is  n bytes  long,  with  the  most  significant  byte 
being  n-1  and  the  least  significant,  0,  the  wrapper  looks  like: 

Position  Value  Function 

n-1  0 This  is  needed  to  ensure  that  the  padded  number 

is  less  than  the  modulus. 

n-2  2 The  padding  type  (non-zero  random). 

n-3..len+1  ???  Non-zero  random  padding  bytes  to  "salt"  the 

output  and  prevent  duplicate  plaintext  attacks, 
len  0 Zero  byte  to  mark  the  end  of  the  padding 

len-1..0  data  Supplied  payload  data. 


In  the  case  of  PGP,  the  payload  is  a byte  indicating  the  type  of 
conventional  cipher,  currently  always  set  to  1 to  indicate  IDEA, 
and  a 16-byte  IDEA  key  followed  by  a 16-bit  checksum. 
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* Versions  of  PGP  up  to  2.2  generated  a "broken"  version  of  this  format, 

* which  had  the  components  (except  for  the  most  significant  zero  byte) 

* in  the  opposite  order.  This  is  controlled  by  PKCS_COHPAT. 

* There's  no  security  difference,  it's  just  nice  if  everyone  does  it 

* the  same  way. 


* 

★ 

* 

* 

* 

★ 

* 

★ 

* 

* 

★ 

* 

★ 

* 

★ 

* 

★ 

ic 


Position  Value 

n-1  0 

n-2..n-len-1  data 
n-len-2  0 

n-len-3..1  ??? 

0 2 


Supplied  payload  data. 

Zero  byte  to  mark  the  end  of  the  padding 
Non-zero  random  padding  bytes  to  "salt"  the 
output  and  prevent  duplicate  plaintext  attacks. 
The  padding  type  (non-zero  random). 


On  decryption,  the  fact  that  the  first  (most  significant)  byte  of 
payload  data  is  1 for  the  <=  2.2  format,  and  a padding  type  of  1 
(fixed,  all  ones)  is  never  used  for  public-key  encryption  lets 
these  be  distinguished. 


There  really  should  be  several  bytes  of  padding,  although  this 
routine  will  not  fail  to  encrypt  unless  it  will  not  fit,  even 
with  no  padding  bytes. 


* 


•k 

* 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 

k 


Type  1 padding: 


The  type  is  1,  and  the  padding  is  all  1's 

(hex  0xFF).  In  addition,  if  the  data  is  a DER-padded  HD5  hash,  there's 
an  option  for  encoding  it  with  the  old  PGP  2.2  format,  in  which  case 
that's  all  replaced  by  a 1 byte  indicating  HD5. 


When  decrypting,  distinguishing  these  is  a bit  trickier,  since  the 
second  most  significant  byte  is  1 in  both  cases,  but  in  general, 
it  could  only  cause  confusion  if  the  PGP  hash  were  all  1's. 


To  summarize,  the  formats  are: 


Position 

n-1 

n-2 

n-3 . . I en+1 
I en 

I en-1 . . X 
x-1 . . 0 


Value  Function 

0 This  is  needed  to  ensure  that  the  padded  number 
is  less  than  the  modulus. 

1 The  padding  type  (all  ones). 

255  All  ones  padding  to  ensure  signatures  are  rare. 

0 Zero  byte  to  mark  the  end  of  the  padding 

ASN.In  The  ASN.1  DER  magic  cookie  (18  bytes) 
data  The  payload  MD5  hash  (16  bytes). 


Posi ti on  Value 

n-1  0 

n-2  In 

n-2 . . n-len-2  data 
n-  I en-2  0 

n-len-3..1  255 

0 1 


"This  is  MD5" 

Supplied  payload  MD5  hash  (len  ==  16). 
Zero  byte  to  mark  the  end  of  the  padding 
All  ones  padding. 

The  padding  type  (all  ones). 


* The  reason  for  the  all  1's  padding  is  an  extra  consistency  check. 
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* A randomly  invented  signature  will  not  decrypt  to  have  the  long 

* run  of  ones  necessary  for  acceptance. 

* 

* Oh...  the  public  key  isn't  needed  to  decrypt,  but  it's  passed  in 

* because  a different  glue  library  may  need  it  for  some  reason. 

* 

* TODO:  Have  the  caller  put  on  the  PKCS  wrapper.  We  can  notice  and 

* strip  it  off  if  we're  trying  to  be  compatible. 

*/ 

i n t 

pgpPKC S Pa c k ( s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  len,  byte  padtype. 


n 

/ 

unsigned  bytes,  struct  Pg pRa ndomCon t e x t const  *rc) 

n 

i f 

( 1 en  + 3 > 

bytes ) 

u 

D 

return  PG PE R R_PU BKE Y_T00 SH A LL; n /*  data  won't  fit  in  pubkey 

! */ 

n 

/* 

Set 

the 

entire  number  to  0 to  start  */ 

n 

( VO i d ) bn S e t Q ( bn , 0) 

/ 

n 

n 

if 

( padtype 

==  PKCS 

_PAD_ENCRYPTED)  { 

n 

Q 

/* 

Random  padding  */ 

n 

n 

i f 

(PKCS_C0HPAT  II  ini:0:  !=  1)  { 

n 

n 

a 

i f 

( bn  I n se r t Bi gBy t e s ( bn,  Spadtype,  bytes-2,  1)  < 

0 

1 1 

n 

n 

n 

r a nd omPa d ( r c , bn,  bytes-2,  len+1)  < 0 | | 

n 

n 

n 

bn  I n s e r t B i gBy t e s ( b n , in,  0,  len)  < 0) 

n 

n 

□ 

n 

return  PG P E RR_N0M EM ; 

n 

n 

> else  { 

□ 

n 

D 

/* 

Old  <=  2.2  broken  format  */ 

n 

n 

n 

i f 

( bn  I nse r t Bi gBy t e s ( bn,  in,  bytes-len-1,  len)  < 

0 

1 1 

D 

n 

□ 

randomPad( rc,  bn,  bytes-len-2,  1)  < 0 || 

n 

n 

a 

bn  I nse r t B i gBy t es ( bn,  Spadtype,  0,  1)  < 0) 

n 

D 

n 

a 

return  PGPERR_N0MEM; 

n 

n 

> 

n 

> 

else 

n 

n 

pgpAssert  (padtype  ==  PKC S_P A D_ S I GN E D ) ; 

n 

n 

/* 

Constant 

padding  */ 

Q 

n 

i f 

( PKCS_C0MPAT 

□ 

n 

1 1 Len 

!=  s i z eo f ( M D 5_p r e f i X ) +1 6 

□ 

n 

II  memcmpCin,  f1D5_prefix,  s i z eo  f ( H D 5_p  r e f i x ) ) !=  0) 

n 

a 

n 

a 

D 

i f 

( bn  I nse r t Bi gBy t e s ( bn,  Spadtype,  bytes-2,  1)  < 

0 

1 1 

n 

a 

Q 

onesPadCbn,  bytes-2,  len+1)  <0  | | 

n 

D 

n 

bnl n s e r t Bi gBy t es ( bn,  in,  0,  len)  < 0) 

a 

Q 

a 

□ 

return  PGPERR_N0MEH; 

n 

n 

} e 

1 s e { 

n 

o 

n 

/* 

Old  <=  2.2  format  - no  DER  prefix  */ 

n 

n 

D 

len 

-=  s i z e of ( M D 5_p r e f i X ) ; 

n 

n 

a 

i n 

+=  s i z eof ( M D 5_p r e f i X ) ; 

a 

a 

n 

i f 

(len+3+1  > bytes) 

D 

D 

□ 

Q 

return  PG P E R R_PUBKE Y_T00 S H A LL; n /*  won't 

fit  */ 

n 

D 

n 

i f 

( bn  I nse r t B i gBy t e s ( bn,  Spg p2 2_M D 5_by t e , bytes-1 

A 

1 ) 

Q 

D 

n 

a 

n 

A 

n 

n 

n 

bn  I n s e r t B i gBy t e s ( bn , in,  bytes-len-2,  len)  < 

0 

1 1 

n 

D 

n 

onesPadCbn,  bytes-len-2,  1)  < 0 || 

n 

n 

n 

bn  I n s e r t Bi gBy t es ( bn , Spadtype,  0,  1)  < 0) 

n 

n 

Q 

n 

return  PGPERR_N0HEM; 

n 

□ 

> 
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n } 

n return  0; 

> 


/* 

* Searches  bytes,  beginning  with  start-1  and  progressing  to  0, 

* until  one  that  is  not  0xff  is  found.  The  idex  of  the  Last  0xff 

* byte  is  returned  (or  start  if  start-1  is  not  0xff.) 

*/ 

static  unsigned 

bn S ea r c h NonOn e F r omH i g h ( s t r u c t BigNum  const  *bn,  unsigned  start) 

{ 


Q 

byte 

buf[!16D;n  /*  Size  is  arbitrary  */ 

□ 

unsigned  L; 

n 

unsigned  i; 

n 

while 

(start)  { 

□ 

B 

L = 

start  < sizeof(buf)  ? start  : sizeof(buf),- 

□ 

B 

start  -=  L; 

n 

B 

bnExtractBigBytes(bn,  buf,  start,  L); 

n 

B 

for 

(i  =0;  i < L;  i++)  f 

s 

B 

B 

if  (bufli:  !=  0xff)  { 

n 

B 

B 

n memset(buf,  0,  sizeof(buf)); 

Q 

B 

B 

n return  start  + L - i; 

□ 

fl 

B 

} 

Q 

B 

> 

□ 

> 

□ 

/*  Nothing 

found  */ 

B 

memset(buf. 

0,  sizeof(buf)); 

B 

return  0; 

} 


/* 

* Searches  bytes,  beginning  with  start  and  going  up  (towards  more 

* significant  bytes),  until  one  that  is  not  0xff  is  found.  Since  the 

* input  number  is  finite,  there  must  be  zeros  eventually. 

* The  index  of  the  first  non-0xff  byte  is  returned. 

*/ 

static  unsigned 

bn S ea r c h NonOn e F romLow ( s t ru c t BigNum  const  *bn,  unsigned  start) 

{ 

H byte  bufC163;n  /*  Size  is  arbitrary  */ 

n unsigned  i; 


n 

Q 

D 

Q 

n 

a 

n 

D 

n 

Q 

n 

n 

} 


for  (;;)  { 

n bn  Ex t r a c t B i g By t e s ( b n , buf,  start,  s i z eo f ( bu f ) ) ; 

a i=sizeof(buf); 

n start+=i; 

n dot 

n n if  (bufC — iD  !=  0xff)  { 

a a a memset(buf,  0,  s i zeof ( buf  ) ) ; 

n n n return  start  - i - 1; 

n n > 

n >whiLe(i); 

} 

/*NOTREACHED*/ 
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/* 

* Searches  bytes,  beginning  with  start-1  and  progressing  to  0, 

* until  finding  one  that  is  zero,  or  the  end  of  the  array. 

* The  index  of  the  Last  non-zero  byte  is  returned  (0  if  the  array 

* is  all  non-zero,  or  start  if  start-1  is  zero). 

*/ 

static  unsigned 

bnSea r c h Ze ro F romH i g h ( s t r u c t BigNum  const  *bn,  unsigned  start) 

{ 

n byte  bufC163;n  /*  Size  is  arbitrary  */ 


n 

unsigned  L; 

n 

unsigned  i; 

□ 

while 

(start)  { 

n 

n 

1 = 

start  < sizeofCbuf)  ? start  : sizeofCbuf); 

n 

n 

start  -=  1 ; 

□ 

n 

bnExtractBigBytesCbn,  buf,  start,  L); 

n 

n 

for 

(i  =0;  i < L;  i++)  C 

n 

o 

n 

if  (bufCi:  ==  0)  { 

n 

n 

n 

n memsetCbuf,  0,  sizeofCbuf)); 

u 

n 

n 

n return  start  + L - i; 

n 

o 

n 

} 

n 

n 

> 

o 

> 

n 

/*  Nothing 

found  * / 

Q 

memsetCbuf, 

0,  sizeofCbuf)); 

n 

return 

0; 

} 


/* 

* Searches  bytes,  beginning  with  start  and  going  up  (towards  more 

* significant  bytes),  until  one  that  is  zero  is  found.  Since  the 

* input  number  is  finite,  there  must  be  zeros  eventually. 

* The  index  of  the  first  zero  byte  is  returned. 

*/ 

static  unsigned 

bnSea r chZe ro F romLow ( s t rue t BigNum  const  *bn,  unsigned  start) 

{ 

n byte  bufC16D;n  /*  Size  is  arbitrary  */ 

n unsigned  i; 


□ 

n 

n 

n 

n 

n 

□ 

n 

n 

D 

□ 

n 

> 


for  (;;)  ( 

n bn  Ex t ra c t Bi gBy t es ( bn,  buf,  start,  s i z eo f ( bu f ) ) ; 

n i = sizeofCbuf); 

n start  +=i; 

a dot 

n n if  (bufC--i]  ==  0)  { 

n n n memset(buf,  0,  sizeofCbuf)); 

n n n return  start  - i - 1; 

n n > 

n TwhileCi); 

> 

/*NOTREACHED*/ 
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/* 

* Performs  a PKCS  unpack  operation.  Returns  a prefix  of  the  unwrapped 

* data  in  the  given  buf.  Returns  the  Length  of  the  untruncated 

* data,  which  may  exceed  "Len".  Returns  <0  on  error. 

* 

* For  the  c on s t a n t -pa d d i n g (signature  checking)  case, 

* it  recongizes  the  PGP  2.2  format,  but  not  in  all  its  generality; 

* only  the  one  case  (framing  byte  = 1,  Length  = 16)  which  was  ever 

* generated.  It  fakes  the  DER  prefix  in  that  case. 

*/ 

i n t 

pg pPKC S U npa c k ( by t e *buf,  unsigned  Len,  struct  BigNum  *bn,  byte  padtype, 
n unsigned  bytes) 

n byte  tmpC2]; 

n bnExtractBigBytes(bn,  tmp,  bytes-2,  2); 

n i f (tmpC0ll  ! = 0)  < 

n n memset(tmp,  0,  2); 

n n return  PG P E R R_ PK„ C 0 R R U PT ; 

n > 


n 

n 

c 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


if 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


(padtype  ==  PKCS_PAD_ENCRYPTED ) -C 

/*  Decryption  case,  random  padding  */ 

/*  Special  case:  PGP  <=  2.2  hack  */ 
bn E X t r a c t B i g By t e s ( bn , tmp,  0,  1); 
if  (tmpEID  ==  1 &&  tmpC0]  ==  padtype 

bn S ea r c h Z e r o F r om Lo w ( b n , 1)  ==  by t e s -1 -1 -1 6-2-1  ) 

n /*  Aha,  i t * s PGP  <=  2.2  */ 

n if(Len>1+1 6+2 ) 

n B Len=1+16+2; 

B b n E X t r a c t B i g By t e s ( b n , buf,  bytes-1-Len,  Len); 

n return  1+16+2; 

> 


B 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

B 


/*  Okay,  assume  it*s  PKCS.1  */ 
if  (tmpCID  !=  2)  ■( 
n memset(tmp,  0,  2); 

n return  PGPERR_PK_CORRUPT; 

> 

memset ( tmp,  0,  2 ) ; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


n bytes  = b n S e a r c h Z e r o F r omH i g h ( b n , bytes-2); 

n i f (bytes--  ==  0) 

B B return  PGPERR_P K_ CORRUPT; 

> else  C 

n pgpAssert  (padtype==PKCS_PAD_SIGNED); 

n /*  Signature  check,  constant  padding  */ 

n if  (tmpCI]  !=  padtype)  { 

n B memset(tmp,  0,  sizeof(tmp)); 

n B return  PGPERR_PK_CORRUPT; 

B > 


B 

B 

B 


B 


B 

B 


B 

B 


/* 

* Special-case  hack:  is  is  PGP  <=  2,2  format?n  This  is 

* identified  by  a Least  significant  byte  of  1,  a byte 

* of  0 between  the  16-byte  HD5  hash  and  the  padding. 
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* and  all  ones  padding. 

*/ 

bnExtractBigByteslbn,  tmp,  0,  1);  /*  Should  be  1 if  <=  2.2  */ 

bnExtractBigBytesCbn,  tmp+1,  bytes-19,  1);  /*  zero  if  <=  2.2  */ 


n n if  (tmpC0D  ==  padtype  &S  tmpCID  ==  0 &S 


n 

n 

bn S e a r c h No n 0 n e F r omLo w ( bn , 1)  ==  bytes-19) 

n 

n 

Q 

n 

n 

/ * Aha, 

it's  PGP  <=  2.2  - fake  up  the  DER  prefix  */ 

n 

a 

n 

if  (Len 

<=  s i z eof ( M D 5 _p r e f i X ) ) ( 

n 

Q 

n 

n 

memcpy(buf,  MD5_prefix,  len); 

n 

n 

n 

> else 

n 

n 

n 

Q 

memcpy(buf,  HD5_prefix,  s i z eo f ( H D 5_p r e f i x ) ) ; 

Q 

n 

n 

n 

buf  +=  sizeof(MD5_prefix); 

Q 

n 

a 

n 

len  -=  sizeof(HD5_prefix); 

n 

o 

a 

n 

if  (len  > 16) 

n 

n 

a 

n 

n len=16; 

n 

n 

a 

n 

bnExtractBigByteslbn,  buf,  bytes-2-len,  len); 

s 

n 

a 

> 

n 

n 

a 

return 

16  + s i z eo f ( H D 5_p r e f i X ) ; 

n 

n 

> 

n 

D 

/* 

Okay,  assume 

it's  PKCS  format  thing.  */ 

n 

D 

□ 

Q 

Q 

a 

a 

a 

□ 

□ 

n 

a 


n bytes  = bn S ea r c h NonOne F romH i g h ( bn , bytes-2); 

n i f ( by t es  < 1 ) 

n n return  PGPERR_PK_ CORRUPT; 

n bytes — ; 

n tnipC1D  = 0; 

n bnExtractBigByteslbn,  tmp,  bytes,  1); 

n if(tmpC0D!=0){ 

n n mems e t ( t mp , 0,  s i zeof ( tmp ) ) ; 

n n return  PGPERR_PK_CORRUPT; 

n > 

n /*  Note:  tmp  isn't  secret  any  more  because  it's  a constant!  */ 

> 


□ 

n 

n 

□ 

n 

> 


/*  Success!  Return  the  data  */ 
if  (len  > bytes) 
n len=bytes; 

bn E X t r a c t B i g By t e s ( bn , buf,  bytes-len,  len); 
return  bytes; 


/* 

* Convert  a big-endian  byte  buffer  (with  bit-count  prefix)  to  an  MPI. 

* Returns  number  of  bytes  read  from  buffer,  or  <=  0 on  error. 

* (Returns  0 if  the  buffer  is  too  short.) 

*/ 

i n t 

pgpBnGe t P I a i n ( s t r u c t BigNum  *bn,  byte  const  *buf,  unsigned  size) 

{ 

n unsignedt; 

n if(size<2) 

n n return0; 

n t = ( ( u n s i g n ed  ) bu f [ 0 D <<  8)  + bufCID; 

n t = (t+7)/8; 
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n if(size<t+2) 

n n return®; 

n if  ( bn  I n se r t B i gBy t es ( bn , buf  + 2,  0,  t)  < 0) 

o a return  PGPERR_NOHEM; 

n return  (int)t+2; 

} 


/* 

* Helper  function  for  key  unlocking. 

* Convert  a big-endian  byte  buffer  to  an  MPI,  with  optional  decryption  and 

* checksums.  Accepts  cfb  ==  NULL  to  mean  "unencrypted". 

* Returns  number  of  bytes  read  from  buffer,  or  <=  0 on  error. 

* (Returns  0 if  the  buffer  is  too  short.) 

* 


* If  "old"  is  true,  this  does  it  in  the  PGP  2.x  way,  where  the  length 

* of  the  data  is  unencrypted  and  the  CFB  is  resynced  each  step. 

* If  "old"  is  false,  this  assumes  that  just  everything  is  encrypted 

* and 
*/ 


^ n t 


pgpBnGet (struct 

B i g N urn 

*bn,  byte  const  *buf,  unsigned  size. 

s 

struct 

PgpCf bContext  *cfb,  unsigned  *checksump,  int 

Q 

byte 

tmpC64];n 

/*  This  can  be  any  (non-zero)  size 

n 

unsigned  t,  1; 

□ 

if  ( ! 

!cfb)  { 

o 

B 

int  i ; 

□ 

B 

i = pgpBnGet P 1 a i n ( bn,  buf,  size); 

n 

B 

if  (i  > 

= 0 88  checksump)  C 

n 

B 

D 

for  (t  = 0;  t < (unsigned)i;  t++) 

□ 

B 

n 

n *checksump  +=  bufCtD; 

n 

B 

} 

n 

B 

return 

1 ; 

B 

> 

old) 

>=  2 */ 


B 

if 

(si 

z e < 2 ) 

B 

B 

return  0; 

B 

i f 

(old)  { 

B 

B 

/*  Length  it  bits  is  not  encrypted  */ 

B 

B 

pgpCfbSync(cfb); 

B 

B 

if  (checksump) 

B 

B 

n *checksump  +=  ( u n s i g n ed ) b u f C 0 ] 

B 

B 

t = ((unsigned)bufC03  <<  8)  + bufC13; 

B 

> e 

L se 

{ 

B 

B 

/*  Length  in  bits  is  encrypted  */ 

B 

B 

pgpCfbDecrypt(cfb,  buf,  tmp,  2); 

B 

B 

if  (checksump) 

B 

B 

n *checksump  +=  ( u n s i g n e d ) t mp C 0 3 

B 

B 

t = ((unsigned)tmpC03  <<  8)  + tmpC13; 

B 

> 

B 

buf 

+ = 

2; 

B 

t = 

(t+7)/8; 

B 

i f 

(size  < t+2) 

B 

B 

return  0; 

buf Cl  3; 


t mp  C 1 D ; 
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n 

/* 

n 

★ 

Descrypt 

and  convert  in  pieces.  It's  done  from  the 

n 

* 

mos t-s i gn i f i cn t end  to  force  allocation  of  the  resu 

n 

★ 

number  all  at  once  rather  than  reallocating  it  bit  1 

n 

* 

/ 

Q 

size  = 

t; 

n 

while 

(size)  { 

a 

□ 

1 = 

size  < sizeof(tmp)  ? size  : sizeof(tmp); 

a 

n 

pgpCf bDecrypt (cf b,  buf,  tmp,  1); 

n 

n 

size  -=  1; 

n 

Q 

buf 

+-  ( ; 

n 

Q 

i f 

( bn  I nse r t B i gBy t es ( bn,  tmp,  size,  1)  < 0)  ( 

n 

n 

n 

memset(tmp,  0,  s i z e o f ( t mp ) ) ; 

n 

n 

□ 

return  PGPERR_N0HEM; 

n 

□ 

> 

a 

n 

/* 

Checksum  */ 

n 

a 

i f 

(checksump)  ( 

□ 

n 

n 

do  { 

n 

n 

Q 

a *checksump  +=  tmpC — 13; 

n 

n 

□ 

> while  (1); 

n 

n 

> 

Q 

> 

n 

memset ( tmp. 

0,  sizeofCtmp)); 

n 

return 

(int)  t + 2 ; 

> 


bit. 


/* 

* Read  the  2-byte  simple  checksum  (as  computed  above)  from  the 

* buffer  for  comparison.  Old-style  is  unencrypted,  new-style  is 

* encrypted. 

*/ 


unsigned 

pgpChecksumGet (byte  const  *buf,  struct  Pg p C f bC on t ex t *cfb,  int  old) 
{ 


Q 

byte  tmpC23; 

n 

unsigned  checksum; 

n 

if  (old 

II  ! cf b)  ( 

D 

Q 

checksum  = ( ( u n s i g ned ) bu f C 0 3 

<< 

+ 

00 

Q 

> else 

{ 

n 

n 

pgpC f bDe c ryp t ( c f b,  buf,  tmp. 

2); 

Q 

n 

checksum  = ( ( un s i g n ed ) t mp C 0 3 

<< 

00 

+ 

n 

n 

memset(tmp,  0,  2); 

n 

> 

n 

return 

checksum; 

/* 

* Convert  an  MPI  to  a big-endian  byte  buffer,  with  a length  prefix. 

* Returns  number  of  bytes  put  into  buffer. 

*/ 

unsigned 

pgpBnPut P la i n ( St ruct  BigNum  const  *bn,  byte  *buf) 

{ 

n unsigned  t; 
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n t=bnBits(bn); 

n bufC0:  = (byte)(t»8  & 255); 

n bufCi:  = (byte)(t  & 255); 

n t=(t+7)/8; 

n b n E X t ra c t B i g By t e s ( bn , buf+2,  0,  t); 

n return  t+2; 

} 

/* 

* Helper  function  for  ChangeLock. 

* Convert  an  MPI  to  a big-endian  byte  buffer,  with  optional  encryption  and 

* checksums.  Accepts  cfb  ==  NULL  to  mean  "unencrypted". 

* Returns  number  of  bytes  put  into  buffer. 

*/ 

unsigned 

pgpBnPut ( st ruct  BigNum  const  *bn,  byte  *buf. 


n 

{ 

struct 

Pg p C f b C 0 n t ex t *cfb,  unsigned  *checksump,  int  old) 

n 

unsigned  t. 

u; 

n 

t 

= pgpBnPutPlain(bn,  buf); 

D 

i f 

(checksump) 

□ 

n 

for 

(u  = 0;  u < t;  U++) 

n 

Q 

Q 

*checksump  +=  bufCu3; 

n 

i f 

(cfb)  { 

n 

n 

i f 

(old)  { 

D 

n 

□ 

pgpCfbSync(cfb)  ; 

n 

n 

n 

pgpCfbEncrypt(cfb,  buf+2,  buf+2,  t-2); 

n 

n 

> e 

1 se  { 

n 

n 

n 

pgpCfbEncrypt(cfb,  buf,  buf,  t); 

□ 

n 

> 

□ 

> 

u 

return 

t; 

> 

/* 

* Write  the  2-byte  simple  checksum  (as  computed  above)  to  the 

* buffer  for  comparison.  Old-style  is  unencrypted,  new-style  is 

* encrypted. 

*/ 

void 

pgpChecksumPut (unsi gned  checksum,  byte  *buf,  struct  Pg p C f b C on t ex t *cfb, 
n i nt  o I d ) 

{ 

n bufC0Il  = ( by  t e ) ( c he  c ksum>>8  & 255  ); 

n bufC15  = (byte)(checksum  & 255); 

n if  (cfb  &&  !old) 

n n pgpCf bEncrypt ( cf b,  buf,  buf,  2); 

> 

/* 

* Generate  a random  bignum  of  the  specified  length,  with  the  given 

* high  and  low  8 bits.  "High"  is  merged  into  the  high  8 bits  of  the 

* number.  For  example,  set  it  to  0x80  to  ensure  that  the  number  is 

* exactly  "bits"  bits  long  (i.e.  2''(bits-1)  <=  bn  < 2*bits). 

* "Low"  is  merged  into  the  low  8 bits.  For  example,  set  it  to 

* 1 to  ensure  that  you  generate  an  odd  number. 
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*/ 
i n t 

pgpBnGenRa  nd  ( s t ru  c t BigNutn  *bn,  struct  Pg  pRa  ndomC  on  t e x t const  *rc, 
n unsigned  bits,  byte  high,  byte  Low,  unsigned  effective) 

{ 

n unsigned  char  bufC64]; 

n unsigned  bytes; 

n unsigned  L; 

n intern; 


n bnSetQCbn,  0); 


n /*  Get  high  random  bits  */ 

n bytes  = (bits+7)  / 8; 

n L = bytes  < sizeof(buf)  ? bytes  : sizeof(buf); 

n pgpRandomGetBytesEntropyCrc,  buf,  L,  effective); 

n /*  Mask  off  excess  high  bits  */ 

n bufCOD  &=  255  >>  (-bits  & 7); 

n /*  Merge  in  specified  high  bits  */ 

n bufC0D  1=  high  >>  (-bits  S 7); 

n if(bits&7) 

n n bufCID  |=  high  <<  (bits  8 7); 


a 

D 

n 

n 

□ 

n 

n 

□ 

□ 

□ 


for  (;;)  { 
n bytes-=L; 

n if  (!bytes)n  /*  Last  word  - merge  in  low  bits  */ 

n n bufCl-13  |=  low; 

n err  = bnInsertBigBytes(bn,  buf,  bytes,  L); 

n if  (! bytes  ||  err<0) 

Q a break; 

n L = bytes  < sizeof(buf)  ? bytes  : sizeof(buf); 

n p g p Ra ndomGe t By t e s En t r opy ( r c , buf,  L,  0); 

> 


n /*  Burn  and  return  */ 

n memset(buf,  0,  sizeof(buf)); 

n return  err; 

} 


/* 

* Parse  a buffer  containing  n mpi  format  numbers  (two  bytes  of  Length  in  bits, 

* followed  by  data).  Hake  sure  data  is  well  formed  and  doesn't  exceed 

* buffer  Length.  Take  n pointers  to  offsets  where  the  n numbers  start 

* (pointers  may  be  null  but  must  not  be  Left  off  arg  list). 

* Return  offset  past  Last  value,  or  negative  for  error. 

*/ 

i n t 

pgpBnPa r se ( by t e const  *buf,  unsigned  size,  int  n,  ...) 

{ 

n va_List  ap; 

n unsigned  nb; 

n unsigned  off; 

n unsi gned  *pof f ; 


n va_start  (ap,  n); 

n if(size<2LI*n) 

n n return  PGPERR_KEY_SHORT; 
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a 

off  = 

0; 

Q 

while 

(n  — ) { 

D 

□ 

poff  = va_arg(ap,  unsigned  *); 

□ 

n 

nb  = ( ( u n s i g n e d ) bu f C 0+0 f f D <<  8)  + bufCI+offD; 

n 

a 

if  (!nb  II  bufi:2  + off]  >>  ((nb-1)  S 7) 

1 = 

1 ) 

a 

n 

n return  PGPERR_KE Y_MPI ; /*  Bad 

bit 

length  */ 

a 

n 

nb  = (nb+7)/8; 

a 

a 

/*  Need  nb+2  bytes  for  this,  plus  2*n 

for 

rema i nde  r 

a 

a 

if  (size-off  < nb  + 2 + 2*n) 

a 

n 

a return  PG P E R R_KE Y_S H 0 RT ; 

n 

□ 

if  (poff) 

a 

□ 

n *pof  f = off; 

n 

a 

off  +=  nb+2; 

□ 

} 

n 

va_end 

lap); 

□ 

return 

off; 

> 


/* 

* Given  a cipher  algorithm  descriptor  in  (buf,Len)  and  a passphrase, 

* initialize  the  passed-in  Pg p C f b C on t e x t pointer  and  return  the 

* number  of  bytes  of  descriptor  used,  or  <0  on  error.  (In  which 

* case  *cfbp  is  NULL.) 

*/ 

i n t 

pgpC i ph e r S e t up ( by t e const  *buf,  unsigned  len,  char  const  *phrase,  size_t 
n struct  PgpEnv  const  *env,  struct  Pg p C f b C on t ex t **cfbp) 

{ 

n struct  PgpCipher  const  *cipher; 

n struct  PgpStringToKey  *s2k; 

n unsigned  alg; 

n intalglen; 

n byte  keyLPGP_CIPHER_MAXKEYSIZE:; 


n /*  First  things  first,  in  case  of  error...  */ 

n *cfbp  = NULL; 

n if(len<1) 

a n return  PG P E RR_KE Y_S H 0 RT ; 

n alg  = bufC0!]  S 255; 


if  (!alg)n  /*  The  key  isn't  encrypted;  just  read  it  in  */ 

n return  1 ; 


n if  (alg  ==  255)  { 

n n /*  New  style,  with  a separate  s t r i ng- t o- key  */ 


□ 

n 

□ 

n 

a 

□ 

n 

n 

□ 

□ 


a i f ( len  ==  1 ) 

a a return  PGPERR_KEY_SHORT; 

n alg  = buf[!1D; 

n alglen  = pg pS 2 Kd e c ode ( &s 2 k,  env,  buf+2,  len-2); 

n if(alglen<0) 

n n returnalglen; 

n alglen+=2; 

n if  (len  < ( un s i g ne d ) a I g I e n ) 

n n return  PG P E R R_KE Y_ S H 0 RT ; 

} else  { 
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n n /*  Old-style  s t r i ng - t o- key  */ 

n n s2k  = pg pS 2 Ks i mp I e ( e n v , pg pH  a s h By N umbe r ( PG P_H A S H_M D 5 ) ) ; 

n n i f ( ! s2k) 

n n n return  PG P E R R_NOH EM ; 

n n alglen=1; 

n } 

n /*  Okay  now,  do  the  conversion  */ 

n cipher  = pg p C i p h e r By N umbe r ( a I g ) ; 

n if  (Icipher)  { 

n n pgpS2Kdest roy ( s2 k ) ; 

n n return  PG P E R R_B A D_ C I PH E RN UH ; 

n } 

n if  (len  < alglen  + c i p h e r->b I o c ks i 2 e ) { 

n B pgpS2Kdestroy(s2k); 

B B return  PGP E R R_KE Y_ S H 0 RT ; 

B } 

B *cfbp  = pgpCfbCreate(cipher); 

B if(!*cfbp){ 

B B pgpS2Kdestroy(s2k); 

B B return  PG PE RR_N0H E M ; 

B > 

B pg p As s e r t ( c i p h e r-> key s i 2 e <=  s i 2 eo f ( key  ) ) ; 

B pg pS t r i ngToKey ( s 2 k,  phrase,  plen,  key,  c i p h e r-> key s i 2 e ) ; 

B pgpCf bini t (*cf bp,  key,  buf  + alglen); 

B memsetlkey,  0,  si2eof(key)); 

B pgpS2Kdestroy(s2k); 

B return  alglen  + c i ph e r-> b I o c ks i 2 e ; 

> 
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/* 

* pgpKeyMisc.h  --  PKCS  packing  and  unpacking 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pgpKeyMi sc . h, V 1.3. 2.1  1997/06/07  09:51:26  mhu  Exp  $ 

*/ 

#ifndef  PGPKEYMISC_H 
#define  PGPKEYMISC.H 

#include  "pgpUsuals.h"n  n /*  for  byte  */ 

#ifdef  __cplusplus 
extern  "C"  { 

# e nd i f 

struct  BigNum; 
struct  PgpEnv; 
struct  PgpRandomContext ; 
struct  Pg p C f b C o n t ex t ; 

/*  For  future  expansion  to  ignore  certain  bits  of  alg  */ 

#define  ALGMASK(alg)  (alg) 

unsigned  pgpDiscreteLogExponentBits(unsigned  modbits); 

/*  Block  types  from  PKCS  */ 

#define  PKC S_ P A D_Z E ROn  n 0 

Sdefine  PKC S_ P A D_ S I G N E Dnn  1 

#define  PKCS_PAD_ENCRYPTEDn  2 

int  pg pPKC S Pa c k ( s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  len,  byte  padtype, 
n unsigned  bytes,  struct  PgpRandomContext  const  *rc); 

int  pgpPKCSUnpackCbyte  *buf,  unsigned  len,  struct  BigNum  *bn,  byte  padtype, 
n unsigned  bytes); 

int  pgpBnGetPlainCstruct  BigNum  *bn,  byte  const  *buf,  unsigned  size); 
int  pgpBnGet ( St ruct  BigNum  *bn,  byte  const  *buf,  unsigned  size, 
n struct  PgpCf bContext  *cfb,  unsigned  *checksump,  int  old); 

//define  pgpBnGetNewCbn,buf,size,cfb,cs)  pgpBnGet(bn,buf,size,cfb,cs,0) 

//define  pgpBnGetOld(bn,buf,size,cfb,cs)  pgpBnGet(bn,buf,size,cfb,cs,1 ) 

unsigned  pg p C h e c ks umG e t ( by t e const  *buf,  struct  Pg p C f b C on t ex t *cfb,  int  old); 
^define  pg p C h e c ks umG e t N e w ( bu f , c f b ) pg p C h e c k s umG e t ( bu f , c f b , 0 ) 

//define  pg  p C h e c k s umG  e 1 0 I d ( bu  f , c f b ) pg  p C h e c ks  umG  e t C bu  f , c f b , 1 ) 

unsigned  pgpBnPutPlainCstruct  BigNum  const  *bn,  byte  *buf); 
unsigned  pg pBn P u t ( s t r u c t BigNum  const  *bn,  byte  *buf, 
n struct  Pg p C f b C on t ex t *cfb,  unsigned  *checksump,  int  old); 

//define  pg  pBn  Pu  t N e w ( bn  , bu  f , c f b,  c s ) pg  pBn  Pu  t ( bn  , b u f , c f b , c s , 0 ) 

//define  pg  pBn  Pu  1 0 I d ( bn  , bu  f , c f b , c s ) pg  pBn  Pu  t < bn  , b u f , c f b , c s , 1 ) 

void 

pg pC h e c ksumPu t C uns i g ned  csum,  byte  *buf,  struct  Pg p C f b C o n t e x t *cfb,  int  old); 
//define  pgpChecksumPutNeu(csum,buf,cfb)  pgpChecksumPut(csum,buf,cfb,0) 
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Sdefine  pgpChecksutnPutOLd(csum,buf,cfb)  pgpChecksuiiiPut(csum,buf,cfb,1  ) 


int  pgpBnGenRand ( St ruct  BigNum  *bn,  struct  Pg p R a ndomC on t e x t const  *rc, 
n unsigned  bits,  byte  high,  byte  Low,  unsigned  effective); 

int  pgpBnParse(byte  const  *buf,  unsigned  size,  int  n,  ...); 


i nt 

pgpC i phe r Se t up ( by t e const  *buf,  unsigned  Len,  char  const  *phrase,  size_ 
n struct  PgpEnv  const  *env,  struct  Pg p C f b C on t ex t **cfbp); 


#ifdef  cpLuspLus 

} 

#endi f 


#endif  /*  PGPKEYMISC.H  */ 
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/* 

* pgpKeySpec.c 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg pKey S p e c . c , V 1.4. 2. 2 1 997/06/07  09:  51  : 27  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#endi f 


#incLude  <time.h> 


#i  nc  Lude 
#incLude 
# i n c L ud  e 
#incLude 
#i  nc  L ude 
#incLude 


pgpKeySpec . h" 
pgpHem . h " 
pgpEnv. h" 
pgpErr.h" 
pgpTimeDate.h 
pgpUsuaLs.h" 


/* 

* The  things  in  a pubLic  key  that  aren't  part  of  the  ( a L g o r i t hm- s p e c i f i c ) 

* ma t h ema t i c a L pubLic  key.  PersonaLLy,  I'd  prefer  that  this  didn't  exist! 
*/ 

struct  PgpKeySpec  { 


□ 

PgpVersion  version;nn 

n 

/* 

Versi on 

of  key  to  create  */ 

n 

HO  rd32 

c rea  t i on; n n 

n 

/* 

Creation 

date  * / 

a 

>; 

wo  r d 1 6 

vaLidity;n  n 

n 

/* 

Validity 

period  * / 

struct  PgpKeySpec  * 

pgpKey S pe c C rea t e ( s t r u c t PgpEnv  const  *env) 
{ 

n struct  PgpKeySpec  *ks; 


n ks  = (struct  PgpKeySpec  * ) pg  pH  etn  A L L o c ( s i z e of  ( * k s ) ) ; 
a i f ( ks ) { 

n a /*  Default  values,  based  on  environment  */ 

n n /*ks->version  = pgpenvGetInt(env,  PGPENV_VERSION,  NULL,  NULL);*/ 
n n ks->version  = PG P V E R S I 0N_2_6 ; n /*  Default  to  this  unless  overridden  */ 

n n ks->creation  = pg pTi me S t amp ( pgpen vGe 1 1 n t ( en v,  PG P E N V_TZ F I X , 

nn  NULL,  NULL)); 

n n ks->vaLidity  = 0;n  /*  Forever  */ 

n } 

n return  ks; 

} 


struct  PgpKeySpec  * 

pgpKey S pe c Copy ( s t r u c t PgpKeySpec  const  *ks) 

{ 

n struct  PgpKeySpec  *ks2; 

n ks2  = (struct  PgpKeySpec  * ) pg pH em A L L o c ( s i z e o f ( * ks 2 ) ) ; 
n if  ( ks2 ) 

n n memcpy(ks2,  ks,  sizeof(*ks2)); 

n return  ks2; 

} 
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void 

pgpKey Spec De s t roy ( s t rue t PgpKeySpec  *ks) 

{ 

n memset(ks,  0,  sizeof(*ks)); 
n pgpMemF ree C ks ) ; 

> 

PgpVersion 

pg pKey S pe c Ve r s i on ( s t ru c t PgpKeySpec  const  *ks) 

{ 

n return  ks->version; 

> 

wo  rd32 

p g pKey S p e c C r ea t i on ( s t r u c t PgpKeySpec  const  *ks) 

{ 

n return  ks-> creation; 

> 

wo  rdl 6 

pg pKey S pe c Va L i d i t y ( s t r u c t PgpKeySpec  const  *ks) 

{ 

n return  k s-> va L i d i t y ; 

> 

i n t 

pgpKey Spec Se t Ve r s i on ( s t ru c t PgpKeySpec  *ks,  PgpVersion  ver) 

{ 

n switch(ver)  { 
n case  PG PV E RS I 0N_2 : 

n case  PG PV E RS I 0N_2_6 : 

n case  PG P VE R S 1 0 N_3 : 

n n ks->version  = ver; 

n n return  0; 

n } 

n /*  default  */ 
n return  PG PE RR_KE Y_ V E RS I ON  ; 

> 

i nt 

pg pKey Spe c Se t C rea t i on ( s t ru c t PgpKeySpec  *ks,  word32  creation) 

{ 

n ks->creation  = creation; 
n return  0; 

> 

i n t 

pgpKeySpecSetVa L i di ty ( St ruct  PgpKeySpec  *ks,  word16  validity) 

{ 

n ks->validity  = validity; 
n return  0; 

} 

/* 

* Local  Variables: 

* tab-width:  4 
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* End  : 


* vi:  ts=4  sw=4 


* vim:  si 
*/ 
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/* 

* pgpKeySpec . h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpKeySpec . h, V 1.3. 2.1  1997/06/07  09:51:27  mhw  Exp  $ 

*/ 

#ifndef  PGPKEYSPEC.H 
//define  PG P_KE Y S P E C_ h 

//incLude  "pgpUsuaLs.h" 

//ifdef  __cpLuspLus 
extern  "C"  i 
//end  i f 

struct  PgpKeySpec; 

//ifndef  TYPE.PGPKEYSPEC 

//define  T YP E_PG PKE Y S P E C 1 

typedef  struct  PgpKeySpec  PgpKeySpec; 

#e nd i f 

struct  PgpEnv; 

#ifndef  TYPE.PGPENV 

#define  TYPE.PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

//end  i f 

struct  PgpKeySpec  PGPExport  *pg pKey S pe c C r ea t e C s t r u c t PgpEnv  const  *env); 
struct  PgpKeySpec  PGPExport  *pg pKey S pe c Copy ( s t r u c t PgpKeySpec  const  *ks); 
void  PGPExport  pgpKeySpecDestroyCstruct  PgpKeySpec  *ks); 

PgpVersion  PGPExport  pg pKey S p e c V e r s i on ( s t r u c t PgpKeySpec  const  *ks); 

word32  PGPExport  pgpKeySpec CreationC struct  PgpKeySpec  const  *ks); 
word16  PGPExport  pgpKeySpecVaLidityCstruct  PgpKeySpec  const  *ks); 

int  PGPExport  pgpKeySpecSetVersionCstruct  PgpKeySpec  *ks,  PgpVersion  ver); 
int  PGPExport  pg pKey S pe c Se t C r ea t i on ( s t r u c t PgpKeySpec  *ks,  word32  creation); 
int  PGPExport  pg pKey S pe c Se t Va L i d i t y ( s t r u c t PgpKeySpec  *ks,  word16  vaLidity); 

//ifdef  __cpLuspLus 

> 

//endi  f 

//endif  /*  PGPKEYSPEC.H  */ 


CCCHK: 60fd1  7991  2277601  1 5f da66099d669333881  334666aaee56c0638a:: 
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/* 

* pgpMakeSig.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpMakeSig.c, V 1.5. 2. 3 1 997/06/07  09:51:27  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#endi f 


# i n c L ude 
#incLude 
#i nc  Lude 
#i nc  Lude 
# i n c L ud e 
#incLude 
#incLude 
#incLude 
#incLude 


pgpDebug.h" 
pgpMakeSig.h 
pgpHash.h" 
pgpErr.h" 
pgpMem. h" 
pgpPubKey . h " 
pgpRngPub. h" 
pgpS i gSpec  . h 
pgpUsuaLs.h" 


/*  Forward  decLaration  */ 
static  i nt 

pgpMa keS i gSubs  (byte  *buf,  struct  PgpSigSpec  const  *spec, 

a struct  PgpRandomContext  const  *rc,  struct  PgpHashContext  const  *hc); 

/*  True  if  wiLL  need  to  be  done  as  a V3  sig  */ 
static  int 

pgpV3Sig  (struct  PgpSigSpec  const  *spec) 

{ 

n si ze_t  L en; 

n return  pg p S i g S pe c P r e f A L g s (spec,  NULL)C0D  !=  0 | | 
n n pgpS i g Spe c Key  Exp i r a t i on  (spec)  !=  0 || 

n n pgpSigSpecRecoveryKey(spec,  (unsigned  int  *)  &Len,  0)  !=  0; 

} 


/*  The  maximum  size  of  the  signature  */ 
int 

pg pMa ke S i gMa X S i z e ( s t r u c t PgpSigSpec  const  *spec) 

{ 

n unsigned  extraLen; 
n if  (pgpV3Sig  (spec))  t 

n n /*  If  have  preferred  algorithms,  use  new  format  */ 
n n unsigned  krkeyLen; 

n n i n t i ; 

n n pg p S i g S p e c P r e f A L g s ( s pe c , SextraLen); 

n n extraLen  +=  2 + 2 + 8;n  /*  counts  two  subpacket  hdrs,  keyid  */ 

n n extraLen  +=  2 + 4;n  n /*  Sig  creation  subpacket  */ 

n n if  (pgpSigSpecKeyExpiration(spec)) 

n n B extraLen  +=2+4; 

B B for  (i=0;  pg p S i g S p e c Re c o V e r y Key  (spec,  SkrkeyLen,  i);  ++i ) 

B B B extraLen  +=  2 + krkeyLen; 

B B return  10  + extraLen  + pg p S e c Key Ma x s i g ( pg p S i g S pe c S e c key ( s pe c ) , 

B B B B B B B B B B B pgpSigSpecVersionLspec)),’ 

E } e L se  { 

B B /*0Ld  format*/ 

[i:CHK:682afbbb8977ef2d5fe499109440d866d6fcc2be49965e73ad411ff26391f6713]] 
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n n ( VO i d) pg p S i g S pe c E X t r a ( s p e c , SextraLen); 

n n return  14  + extraLen  + pg p S e c Key Ha x s i g ( pg p S i g S pe c S e c key ( s pe c ) , 


□ a 

n n 

Q n 

n n n n n pg p S i g S pe c V e r s i on 

n > 

> 

n 

/* 

* Given 

a buffer  of  at  Least  " pg pMa ke S i g Ha x S i z e " bytes,  make  a 

* into 

it  and 

return 

the  size  of  the  signature,  or  0. 

* Format  of  signature 

packets: 

★ 

Offset 

Length 

Meaning 

★ 

0 

1 

Version  byte  (=  2 or  3). 

* 

1 

1 

Length  of  following  material  included  in 

* 

2 

1 

Signature  type 

★ 

3 

4 

32-bit  timestamp  of  signature 

ic  _ _ — _ _ 

HD5 

additional  material  stops  here,  at  offset  7 

★ 

2 + x 

8 

Keyl  D 

* 

1 0 + x 

1 

PK  algorithm  type  (1  = RSA) 

★ 

11+x 

1 

HD  algorithm  type  (1  = MD5) 

* 

12  + x 

2 

First  2 bytes  of  message  digest  (16-bit  i 

* 

14  + x 

2 + ? 

HPI  of  PK-encrypted  integer 

*/ 

i n t 

pgpHakeSig  (byt 

e *bu f , 

struct  PgpSigSpec  const  *spec. 

struct  PgpRandomContext  const  *rc,  struct  Pg pHa s h Con t ex t const  *hc) 


n struct  PgpSecKey  *sec; 

n struct  PgpHashContext  *temp_hc; 

n unsigned  extraLen; 

n byte  const  *extra; 

n byte  const  *hash; 

a i nt  i ; 

n PgpVersion  version; 
n size_t  sigsize; 

n 

n /*  Use  subpacket  sig  formats  if  requesting  preferred  algs  */ 
n if  (pgpV3Sig  (spec))  { 

n n return  pgpHakeSigSubs  (buf,  spec,  rc,  he); 
n } 


5) 


n sec  = pgpSigSpecSeckey(spec); 
n version  = pgpSigSpecVersion(spec); 

n /*  XXX  should  "die"  gracefully  here  */ 
n pgpAssert  (sec->sign); 

n temp_hc  = pgpHashCLone  (he); 

n i f ( ! t emp_h  c ) 

n n return  PGPERR_NOHEH; 

n extra  = pgpSigSpecExtra(spec,  Sextralen); 
n pg p A s s e r t ( ex t r a L e n < 256); 

a pgpHashUpdate  (temp_hc,  extra,  extraLen); 
n hash  = pgpHa sh F i na L ( t emp_h c ) ; 

n /*  Copy  the  first  2 bytes  over  while  they're  available  */ 


i;CCHK:e2237713c3137333a1 21 697461 91 233fa9c 7741 7bb2ee000adeed966da85aee95:] 
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n memcpy  (buf+12+extraLen,  hash,  2); 

n i = pgpS e cKey S i g n ( s e c , hc->hash,  hash,  b u f + 1 4+ e x t r a L e n , Ssigsize, 
n re, version); 

n pgpHashDestroy  (temp_hc); 
n i f ( i < 0 ) { 
n n bu f [ 1 2 + e X t r a I e n ] = 0; 

a n buf C 1 3+ex t ra L en D = 0; 

a a return  i; 

n > 

Q 

n /*  Okay,  build  the  signature  packet  - Lots  of  magic  numbers.  */ 

n bufC0]  = Cbyte)PGPVERSI0N_2_6;n  n /*  Force  version  3 as  format  */ 

n bufCID  = extralen; 
n memcpy(buf+2,  extra,  extralen); 
n memcpy(buf+2+extraLen,  sec->keyID,  8); 
a 

n bufC10+extraLen]  = sec->pkAlg; 
n bu f C 1 1 +ex t r a L e n ] = h c-> h a s h-> t y pe ; 

n /*  First  2 bytes  of  hash  are  already  copied  in  */ 

n return  ( i n t ) s i g s i z e+1 4+ ( i n t ) e x t r a L en ; 

} 


/* 

* Subpacket  Sig  Layout: 

ilr 


★ 

Offset, 

Length 

H e a n i n g 

*a 

0Q  a 

1 a 

Version  byte  (=4) 

*n 

la  a 

1 a 

Signature  type  (included 

in  hash) 

(nested  flag) 

*n 

2 b n 

1 a 

PK  algorithm  (1  = RSA)  (included  i 

n hash) 

*n 

3b  a 

la 

Hash  algorithm  (1  = MD5) 

(included 

in  hash) 

*n 

4b  a 

2b 

Length  of  extra  material 

included 

in  hash  (=y) 

*n 

6a  a 

ya 

Subpackets  (hashed) 

* 

6 + yan 

2b 

Length  of  extra  material 

not  included  in  hash  (=z) 

★ 

8 + yBB 

za 

Subpackets  (unhashed) 

*rema i nder  not 

present  on  sig  headers 

*n 

8+y+zB 

2b 

First  2 bytes  of  message 

digest  (16-bit  checksum) 

*n  10+y+zn  2+wnMPI  of  PK-signed  integer 
*n  12+y+z+u 
★ 

*/ 

static  int 

pgpNa ke S i gSubs  (byte  *buf,  struct  PgpSigSpec  const  *spec, 

n struct  PgpRandomContext  const  *rc,  struct  Pg p H a s h C on t ex t const  *hc) 

{ 

n struct  PgpSecKey  *sec; 

a struct  PgpHashContext  *temp_hc; 

n unsigned  extralen; 

n unsigned  L; 

a unsigned  alglen; 

n unsigned  krkeylen; 

n byte  const  *extra; 

n byte  const  *hash; 

a byte  const  *aLgs; 

C[CHK:14071e739913a6eea777f9999b5bf078fe8d09ee2853e3993be3451b3b8dcb320]: 
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n byte  const  *krkey; 
n word32  exp; 
n i nt  i ; 

n PgpVersion  version; 
n size_t  sigsize; 
n byte  po s t s c r i p t C 6 D ; 
n 

n sec  = pgpSigSpecSeckey(spec); 
n version  = pg p S i g S p e c Ve r s i o n ( s p e c ) ; 

a /*  XXX  should  "die"  gracefully  here  */ 
n pgpAssert  (sec->sign); 

a extra  = pgpSigSpecExtraCspec,  Sextralen); 
n pg p As s e r t ( ex t r a I e n ==  5); 

n 

n /*  Okay,  build  the  signature  packet  - lots  of  magic  numbers.  */ 
a bufCO:  = (byte)PGPVERSI0N_3; 

n bufCID  = extraC0];n  n n /*  Signature  type  */ 
n bufC2D  = sec->pkAlg; 

a bufC3D  = hc->hash->type; 

n /*  Fill  in  extralen  after  we  figure  out  how  much  we  need  */ 
n 1=6; 

n bufCl+i:  = SIGSUB_CREATION; 
n bufCl]  = 5;nn  n n /*  length  */ 
n pg p C o py Memo ry  (extra+1,  buf+l+2,  4); 

n I +=  6; 

a if  ((exp  = pg pS i g Spe cKey Exp i r a t i on  (spec))  !=  0)  { 


n 

n 

buf Cl  + 1 ] 

= 

SIGSUB_KEY. 

EXPIRATION; 

u 

a 

bufCU  = 

5; 

n 

n 

buf C 1+2: 

= 

( byte ) ( exp 

>> 

24); 

n 

Q 

buf C 1+3: 

= 

( byte ) ( exp 

>> 

16); 

n 

n 

buf C 1+4: 

= 

(byte) (exp 

>> 

00 

n 

n 

buf c i + s: 

= 

(byte) (exp 

>> 

0); 

n 

n 

1 +=  6 ; 

n } 

n /*  Key  recovery  hash,  for  when  we  have  that  */ 

n for  (i=0;  ( k r key  = pg p S i g S pe c Re c o ve r y Key ( s pe c , & k r key  I e n , i ) ) !=  0;  ++i)  { 

n n pgpAssert  (krkeylen  + 1 < 192); 

n n bufCl+i:  = SIGSUB_KEY_RECOVERY_KEY; 

n n bufCl]  = krkeylen  + 1; 

a □ pgpCopyMemo ry  (krkey,  buf+l+2,  krkeylen); 
n n I +=  krkeylen  + 2; 

n > 

a /*  Preferred  algorithms  */ 

a algs  = pg p S i g S pe c P r ef A I g s (spec,  Salglen); 
n if  (alglen)  { 

n n bufCl  + 13  = S I G SUB_PRE F E RR E D_ A LG S ; 

n n bufClD  = alglen+1; 

n n pg pC opy Memo r y (algs,  buf+l+2,  alglen); 

a n l+=alglen+2; 

n } 

n /*  Now  can  go  back  and  fill  in  first  length  field  */ 
n buf:4:  = (byte)((l-6)  >>  8); 

n bufCSD  = (byte)((l-6)  >>  0); 

n /*  Hash  over  the  proper  portion  of  the  signature  packet  */ 
CCCHK:45825cc6ff511a004b00b1f97c402405f36d4778ebd970fc45b336322bb8e04fc:: 
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n temp_hc  = pgpHashCLone  (he); 
n if  (!temp_hc) 
a n return  PG P E R R_N0M EM ; 

n pgpHashUpdate  (temp_hc,  buf,  L); 

n 

n /*  Add  hash  "postscript"  to  ensure  hashed  data  can't  alias  anything  */ 
n po s t s c r i p t C 0 D = PG P V E R S I 0N_3 ; /*  Ha s h- c o n ve n t i o n version  */ 

n po s t s c r i p t C 1 ] = 0xff;n  n /*  5th  from  end,  !=  any  sig  type  value  */ 

n pos t s c r i p t n 2 D = (byte)(l  >>  24); 

n postscriptC3D  = (byte)(l  >>  16); 

n po s t s c r i p t C 4 ] = (byte)(l  >>  8); 

n postscriptC53  = (byte)(l  >>  0); 

H pgpHashUpdate  Ctemp_hc,  postscript,  s i z e o f ( po s t s c r i p t ) ) ; 

n /*  Fill  in  unhashed  subpacket  info  now.  First  length,  we  know  */ 
n bufCl]  = 0; 

n bufCl+i:  =8+2; 

n I +=  2; 

n /*  KeylD  packet  is  not  hashed,  it  is  advisory!  */ 
n buf:i+i:  = SIGSUB_KEYID; 

n bufCl]  = 8 + 1; 

n pgpCopyMemory  (sec->keyID,  buf+l+2,  8); 
n I +=  8 + 2; 

n /*  Now  finish  hash  calculation,  copy  over  2 esum  bytes,  put  in  sig  */ 
n hash  = pgpHashFinal(temp_hc); 
n pgpCopyMemory  (hash,  buf+l,  2); 

n i = pgpSe cKey S i g n ( se c , hc->hash,  hash,  buf+l+2,  &sigsize, 
n rc, version); 

n pg pH  a s h D e s t r oy  (temp_hc); 
n if(i<0){ 
n n bufClII  = 0; 

n n bufLl  + 1Il  = 0; 

n n return  i; 

n } 

n return  ( i n t ) s i g s i z e+ I +2 ; 

} 


/*  Routines  for  1-pass  signature  headers  */ 

/*  Right  now  the  header  is  always  13  bytes  long  */ 
i n t 

pgpMa ke S i gHeade rMaxS i z e (struct  PgpSigSpec  const  *spec) 

{ 

n ( voi d)spec; 
n return  13; 

} 

/* 

* Given  a buffer  of  appropriate  length  (currently  13),  create  a 

* single-pass  signature  header,  which  is  a "one-pass"  signature  that 

* will  have  a real  signature  later  on.  Don't  forget  that  you'll  need 

* the  packet  header  (2  more  bytes)  before  this.  The  format  is: 

i:[CHK:547777a3ada54ff9be44d2ea119044874ff000affff5533c83ccc5a1eaf3e3927:] 
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* 


★ 

Offset 

Length 

Meaning 

* 

0 

1 

Version  byte  ( 

* 

1 

1 

Si gnature  type 

★ 

2 

1 

Hash  Algorithm 

* 

3 

1 

PK  Algorithm 

★ 

4 

8 

Keyl  D 

* 

1 2 

1 

nested  flag 

*/ 

i n t 

pgpMakeSi gHeader  (byte  *buf,  struct  PgpSigSpec  const  *spec,  byte  nest) 
{ 

n struct  PgpHash  const  *h; 

n struct  PgpSecKey  const  *seckey; 

n byte  const  *extra; 

n unsigned  extraLen; 

n extra  = pg p S i g S pe c Ex t r a (spec,  SextraLen); 
n h = pgpS i gSpe c Ha s h (spec); 

n seckey  = pg p S i g S pe c Se c ke y (spec); 


n /*  XXX:  This  should  be  more  graceful  */ 
n pgpAssert  (extra); 

n pgpAssert  (h); 

n pgpAssert  (seckey); 

n pgpAssert  (seckey->sign); 


n bufC0Il  = ( by  t e ) PG  PVERS  10N_2_6;  n n /*  Force  version  3 as  format  */ 

a bufCI]  = *extra; 

n bufCZD  = h->type; 

n bufC3D  = seckey->pkAlg; 

a memcpy(buf+4,  seckey->keyID,  8); 
n bufC12D  = nest; 


n return  13; 
} 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


::CHK:d66278ad337e594331988dfeccce0562778666c6307c1974bf9d:: 
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/* 

* pgpMakeSig.h  — Make  a signature  packet  from  a secret  key,  a hash,  and 

* extradata. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  appLication. 

* 

* $Id:  pgpMakeSig.h, V 1.2. 2.1  1 997/06/07  09:51:28  mhw  Exp  $ 

*/ 

#ifndef  PGPMAKESIG.H 
#define  PGPMAKESIG.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  i 
#end  i f 

struct  PgpSigSpec; 
struct  PgpHashContext; 
struct  Pg p Ra n dome  on t e X t ; 

/*  The  maximum  size  of  the  signature  */ 

int  pgpMa ke S i gMa X S i ze ( s t r u c t PgpSigSpec  const  *spec); 

□ 

/* 

* Given  a buffer  of  at  Least  " pg pMa ke S i gMa x S i z e " bytes,  make  a signature 

* into  it  and  return  the  size  of  the  signature,  or  0. 

*/ 

i nt 

pgpMa ke S i g ( by t e *buf,  struct  PgpSigSpec  const  *spec, 

n struct  Pg pRa n d omC on t e X t const  *rc,  struct  PgpHashContext  const  *hc); 

/*  The  maximum  size  of  a signature  header  (one-pass  sig)  */ 
int  pg pMa ke S i g H ea de r Ma X S i z e (struct  PgpSigSpec  const  *spec); 

/*  Create  a one-pass  signature  header  bLock  for  "spec",  putting  it  in  buf  */ 
int  pgpMakeSigHeader  (byte  *buf,  struct  PgpSigSpec  const  *spec,  byte  nest); 

#ifdef  cpLuspLus 

> 

#endi f 

#endif  /*  PGPMAKESIG  H */ 


C[!CHK:6d0dab520d22acc11740072ccfff44019033feec223baaeee6ce7eII] 
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/* 

* pgpPktLi St . c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AU  rights  reserved. 

* 

* $Id:  pgpPktLi St . c,v  1.1. 2.1  1997/06/07  09:51:28  mhw  Exp  $ 

*/ 


#if  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 

#incLude  <string.h>n  /*  For  memcpy  */ 

^include  <stddef.h>n  /*  For  offsetof  */ 


^include  " pg p P k t L i s t . h 
^include  "pgpHem.h" 


struct  PktList  * 

pgpPkt Li stNew( i nt  type,  byte  const  *buf,  size_t  ten) 

{ 

n struct  PktList  *pkl; 

n pkL  = (struct  PktList  * ) pg pHemA L L o c ( L e n + o f f s e t o f ( s t r u c t PktList, 

n n n n n n a buf)); 

n if(pkL){ 


n 

n 

pkL->next  = (struct  PktList 

D 

n 

p k L->t ype  = t ype; 

n 

n 

pkL->Len  = Len; 

Q 

n 

tnemcpy(pkL->buf,  buf,  Len); 

n 

> 

n 

return 

pkL; 

> 


vo  i d 

pgpPkt Li s t F r eeOne ( s t r u c t PktList  *pkl) 

{ 

n memset(pkL,  0,  pkL->Len  + offsetofCstruct  PktList,  buf)); 

n pgpMemFree(pkL); 

> 


void 

pg pPkt Li s t F r ee Li s t ( s t r u c t PktList  *List) 
{ 


D 

St  ruct 

PktList  *cur; 

Q 

whi  Le 

(List)  { 

a 

n 

/*  If  you  don't  understand  this,  yer  a wimp.  BeLch.  Grunt 

n 

n 

List  = (cur  = List)->next; 

□ 

n 

memset(cur,  0,  cur->Len  + o f f s e t o f ( s t r u c t PktList,  buf)); 

D 

n 

pgpMemFree(cur) ; 

n 

> 

} 


CCCHK:6ff9a6ccad33bbb69904722fc79e0c46cce892899a7d11c6a1 51 0520290433 
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/* 

* pgpPktLi St  . h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpPktLi St . h,v  1.2. 2.1  1997/06/07  09:51:28  mhw  Exp  $ 

*/ 

#ifndef  PGPPKTLIST_H 
#define  PGPPKTLIST_H 

#incLude  <stddef.h>n  /*  For  size_t  */ 

#incLude  " pg pU s ua L s . h " n /*  For  byte  */ 

#ifdef  cpLuspLus 

extern  "C"  { 

Send i f 

/* 

* This  is  a triviaL  interface.  You  may  just  access  the  members 

* directLy.  buf  may  change  from  an  incLuded  buffer  to  a pointer 

* at  some  point,  but  that  shouLd  not  require  any  changes  to  the 

* source  code. 

*/ 

struct 
□ 

Q 
D 
□ 

>; 

struct  PktList  *pg p P k t L i s t N e w ( i n t type,  byte  const  *buf,  size_t  Len); 
void  pgpPktListFreeOneCstruct  PktList  *List); 
void  pgpPktListFreeListCstruct  PktList  *List); 

Si  f def cpLuspLus 

> 

S e nd i f 

Sendif  PGPPKTLIST  H 


PktList  { 

struct  PktList  *next; 
i nt  type ; 
size_t  Len; 

byte  bufC1D;n  /*  ExtensibLe  */ 


i:i:CHK:612b411  1 8 5 5 883377996  f ed  a 2 2 6d  5 b30  0 f 7bb89  3380  A7 1 8 c d 3 ] 


1567 


Pretty  Good  Privacy  5.0^'^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpPubKey.c 


/* 

* pgpPubKey . c 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg p Pu b Ke y . c , V 1.8. 2. 6 1997/06/10  04:26:34  haL  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG_H 


#i nc  Lude 

# e nd i f 

"config.h" 

#incLude 

"pgpDebug  . h" 

#incLude 

"pgpErr.h" 

#i n c L ude 

"pgpPubKey. h" 

#incLude 

"pgpKeyMi sc . h" 

#i n c L ude 

"pgpRSAKey. h" 

#incLude 

" pgpE  L GKey . h " 

ttincLude 

" pg  p D S AKey . h " 

#incLude 

"pgpFixedKey.h 

struct  PgpPkALg  { 
n byte  pkALg; 
n i nt  use; 

>; 

static  struct  PgpPkALg  const  pg pKno wn P k A L g s C 3 = { 
n { PGP_PKALG_RSA,  PG P_PKU S E_ S I GN_ EN C R Y PT  >, 

n { PGP_PKALG_RSA_SIG,  PG P_PKU S E_ S I GN  >, 
n { PGP_PKALG_RSA_ENC,  PG P_PKU S E_ E N C R YPT  >, 
n { PGP_PKALG_ELGAHAL,  PG P_PKU S E_ E N C R Y PT  >, 
n { PGP_PKALG_DSA,  PG P_ PKU S E_S I G N > 

>; 

/*  Return  whether  an  aLgorithm  can  sign,  encrypt,  or  do  both  */ 
struct  PgpPkALg  const  * 
pgpPka L gByNumbe r ( by t e pkaLg) 

{ 

n unsigned  i ; 
n pkaLg  = ALGHASKCpkaLg); 

n for  (i  = 0;  i < s i z eo f ( pg pKno w n P k A L g s ) / s i z e o f ( *pg pKno wn P k A L g s ) ; i++)  { 
n n if  ( pgpKnown PkA L g s C i 3 . pkA L g ==  pkaLg) 

n n n return  pg pKno wn P k A L g s + i; 

n > 

n return  NULL; 

} 

i n t 

pg pKey U s e ( s t r u c t PgpPkALg  const  *pkaLg) 

{ 

n i f ( ! pka  Lg) 

n n return  0;n  n /*  It's  no  use...  */ 
n return  pkaLg->use; 

} 

struct  PgpPubKey  * 

pg p PubKey F r omBu f ( by t e pkALg,  byte  const  *p,  size_t  Len,  int  *error) 
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{ 

n struct  PgpPubKey  *pub; 


n switch  (ALGHASKCpkALg) ) { 

n case  PG P_ PKA LG_ R S A : 

a case  PG P_ PKA LG_ R S A_ S I G : 

n case  PG P_ PK A LG_R S A_ E N C : 


( 

! NO 

_RSA) 

a 

n 

pub  = r sa Pub F romBuf ( p,  len. 

a 

n 

if  ( pub ) 

n 

Q 

B pub->pkAlg  = pkAlg; 

Uelse 

n 

n 

pub  = NULL; 

□ 

Q 

♦error  = PGPERR_KE Y_N0_RS A; 

Et 

n 

/♦Avoid  Warnings:*/ 

n 

n 

(void)  p; 

□ 

n 

(void)  len; 

#end  i f 

n a return  pub; 

n case  PG P_P KA LG_ E LG AM A L : 

a a pub  = e L g P u b F r omB u f ( p , Len,  error); 

n a i f ( pub  ) 

n n a pub->pkALg  = pkAlg; 

a a return  pub; 

B case  PGP_PKALG_DSA : 

a a pub  = d s a Pu b F r omBu f ( p , Len,  error); 

B B if  (pub) 

B a a pub->pkAlg  = pkAlg; 

B B return  pub; 

B default: 

B B *error  = PG P E R R_KE Y_ PKA LG ; 
a a return  0; 

B } 

a 
} 

struct  PgpSecKey  * 

pgpSe cKey F r omBu f { by t e pkAlg,  byte  const  *p,  size_t  len,  int  *error) 
{ 

B Struct  PgpSecKey  *sec; 


B s w i t c h ( A LGM A S K ( p k A I g ) ) { 

B case  PGP_PKALG_RSA : 

B case  PGP_PKALG_RSA_SIG : 

B case  PGP_PKALG_RSA_ENC : 

#if  (!N0_RSA) 

B B sec  = rsaSecFromBufCp,  len,  error); 
B B if  (sec) 

B B a sec->pkAlg  = pkAlg; 

#e  I se 

B a sec=NULL; 

a a *error  = PG P E R R_KE Y_N0_RS A ; 

B B /*Avoid  Warnings:*/ 

B B (void)  p; 

B B (void)  len; 

#end i f 

a a return  sec; 

B case  PGP  PKALG  ELGAHAL: 
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n n sec  = elgSecFromBufCp,  Len,  error); 

n n if  (sec) 

n n n sec->pkALg  = pkAlg; 

n n return  sec; 

n case  PG P_ PKA LG_ D S A : 

n n sec  = dsaSecFromBufCp,  ten,  error); 

n n if  (sec) 

n B B sec->pkALg  = pkALg; 

B B return  sec; 

n def au  Lt : 

B B *error  = PG P E R R_KE Y_PKA LG ; 

B B return  0; 

B } 

> 

/* 

* Scan  a buffer  and  return  the  size  of  the  part  which  corresponds  to 

* a public  key.  This  is  intended  to  be  "lightweight"  and  not  require 

* the  overhead  of  instantiating  a struct  PgpPubKey. 

* 

* This  rturns  0 if  the  size  is  unknown. 

*/ 


si z e_  t 

pgpPubKey Pr ef i X S i z e ( by t e pkAlg,  byte  const  *f 
{ 

n s w i t c h ( A LGH A S K ( p kA I g ) ) { 


size  t len) 


n 

case 

PGP_PKALG_RSA : 

a 

case 

PGP_PKALG_RSA_SIG : 

n 

case 

PGP_PKALG_RSA_ENC : 

f 

( ! NO 

_RSA) 

n 

n 

return  r s a Pub  Key P r e f i x S i z e ( p. 

len); 

# e 1 s e 

n 

n 

/*  We  know  it  is  2 HPI  values 

, just  parse 

s 

H 

return  pgpBnPa r se ( p,  len,  2, 

NULL,  NULL); 

#end i f 

Q 

n 

n 

case 

PGP_PKALG_ELGAMAL: 

D 

a 

return  e 1 g Pu bKey P r e f i x S i z e ( p , 

len); 

n 

case 

PGP_PKALG_DSA: 

n 

n 

return  dsa PubKeyPref i xS i ze ( p. 

len); 

n 

default: 

n 

a 

return  0; 

n 

> 

/* 

* 

★ 

* 

* 

* 

* 

* 

* 

* 

* 

* 


The  "progress"  function  is  called  periodically  during  key 
generation  to  indicate  that  *soniething*  is  happening. 

The  "int  c"  gives  a bit  of  indication  as  to  *what*  is 
happening.  In  fact,  this  is  just  the  character  that  text-mode 
PGP  prints!  It  will  do  as  well  as  any  other  sort  of  enum 
and  makes  life  simple. 

The  meaning  of  the  character  is  somewhat  type-dependent,  but 
the  convention  so  far  is: 

- Failed  p s e u dop r i ma I i t y test 
'/'  - Redoing  initial  setup  work 

- Passed  p s e u dop r i ma I i t y test,  further  work  needed 
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* '+'  - Passed  pseudopri ma L i ty  test,  further  work  needed 

* '*'  - Passed  pseudop r i ma L i ty  test  - almost  done! 

* ' ' - Completed  part  of  key  generation,  on  to  next  phase. 

* (Sorry,  no  way  to  know  how  many  phases  there  are...) 

*/ 

struct  PgpSecKey  * 

pgpSe cKeyGene ra t e ( s t r u c t PgpPkAlg  const  *alg,  unsigned  bits, 
n Boolean  fastgen, 

n struct  PgpRandomContext  const  *rc, 

n int  ( *p r og re s s ) ( VO i d *arg,  int  c),  void  *arg,  int  *error) 

{ 

n struct  PgpSecKey  *sec; 
n byte  pkAlg; 

n pgpAssert  (alg); 
n pkAlg  = alg->pkAlg,- 
n s w i t c h ( ALGM ASK( p kA I g ) ) { 

n case  PG P_PKA LG_ R S A : 

#if  (!N0_RSA  &S  ! NO_RSA_KEYGEN ) 

n n sec  = r s a S e cG e n e r a t e ( b i t s , fastgen,  rc,  progress,  arg,  error); 
n n if  (sec) 

n n n sec->pkAlg  = pkAlg; 

n n return  sec; 

#e  I s e 

n n *error  = PG P E R R_KE Y_N0_ R S A ; 
n n return(NULL); 

#en d i f 

a case  PG P_PKA LG_ E LG AH A L : 

n n sec  = e I g S e c G e n e r a t e ( b i t s , fastgen,  rc,  progress,  arg,  error); 
n n if  (sec) 

n n n sec->pkAlg  = pkAlg; 

n n return  sec; 

n case  PG P_PKA LG_ D S A : 

a n sec  = dsaSecGenerate(bits,  fastgen,  rc,  progress,  arg,  error); 
n n if  (sec) 

n n n sec->pkAlg  = pkAlg; 

n n return  sec; 

n default: 

n n *error  = PG P E R R_KE Y_ PKA LG ; 
n n return  0; 

n } 

} 

/* 

* Return  the  amount  of  entropy  needed  to  generate  this  key. 

* Entropy  is  a security  parameter,  controlling  the  amount  of 

* unpredictability  needed  in  the  key. 

* We  have  to  be  sure  to  return  a value  at  least  as  big  as  the  actual 

* depletion  of  the  randpool  which  the  keygen  creates. 

* For  simplicity  and  predictability,  we  return  the  non-fastgen  values 

* throughout,  even  though  they  are  a bit  larger  for  DSA  & ELG  keys. 

* (The  +64  in  the  RSA  case,  and  +128  in  the  DSA  case,  is  for  the  secret 

* key  encryption  IV  and  salt  when  the  secret  key  is  encrypted  with  the 

* passphrase.) 

*/ 

unsigned 

pg p S e c Key E n t r opy ( s t r u c t PgpPkAlg  const  *pkAlg,  unsigned  bits.  Boolean  fastgen) 
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{ 

n unsigned  xbits; 


□ 

n 

a 

n 

n 

a 

□ 

n 

a 

Q 

Q 

Q 

n 

Q 

n 

n 

n 

D 

D 

a 

□ 

□ 

□ 

□ 

□ 

d 

D 

D 

□ 

} 


(void)fastgen; 

pgpAssert  (pkALg); 
switch  ( ALGM AS K ( p k A L g->pkA  I g ) ) { 
case  PGP_PKALG_RSA : 
case  PGP_PKALG_RSA_SIG : 
case  PGP_PKALG_RSA_ENC  : 
n return  bits  + 64; 

case  PGP_PKALG_ELGAHAL: 

n xbits  = pgpDiscreteLogExponentBits(bits)*3/2  + 128; 

n /*  Always  return  fastgen  value 

n * if  (!fastgen  ||  IpgpElGfixed  (bits,  NULL,  NULL,  NULL,  NULL)) 

n */ 

n n xbits  +=  E LG D U MM YB I T S ; 

n return  xbits; 

case  PGP_PKALG_DSA : 
n / * 

n * Count  the  "160  bits  each  needed  to  generate  the  self  signature 

n * on  the  key's  userid,  and  on  the  subkey,  in  addition  to  the 

H * secret  exponent.  That  is  why  the  3*  below, 

n * / 

n xbits  = 3*((bits<=1024)?160:pgpDiscreteLogExponentBits(bits))  + 128; 

n /*  Always  return  fastgen  value 

n * if  (Ifastgen  ||  IpgpDSAfixed  (bits,  NULL,  NULL,  NULL,  NULL)) 

n * / 

n a xbits  +=  D S A D UMM YB I T S ; 

n return  xbits; 

} 

pgpAssert  (0); 
return  0; 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* pgpPubKey.h  — Structures  for  PGP  Pub L i c / P r i va t e Keys 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <Ha r L o r d SM I T . E D U> 

* 

* $Id:  pg p Pu bKey . h , V 1.4. 2. 3 1 997/06/07  09:51:29  mhw  Exp  $ 

*/ 

#ifndef  PGPPUBKEY.H 
#define  PGPPUBKEY.H 

#incLude  "pgpUsuaLs.h" 

#ifdef  ..cpLuspLus 
extern  "C"  { 

# e n d i f 

struct  PgpEnv; 

#ifndef  TYPE. PGPENV 

#define  TYPE. PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#end  i f 

struct  PgpHash; 

#ifndef  TYPE. PGPHASH 

/(define  TYPE. PGPHASH  1 

typedef  struct  PgpHash  PgpHash; 

//end  i f 

struct  Pg pRa ndomC o n t e X t ; 

//ifndef  TYPE.PGPRANDOHCONTEXT 
//define  TYPE.PGPRANDOHCONTEXT  1 

typedef  struct  PgpRandomContext  Pg p Ra n d omC on t e x t ; 

#endi f 

struct  PgpStringToKey; 

//ifndef  TYPE. PGPSTRINGTOKEY 
//define  T YP E.PG PS TR I NGTO KE Y 1 

typedef  struct  PgpStringToKey  PgpStringToKey; 

// e nd i f 

struct  PgpPkALg; 

#ifndef  T Y P E.PG P PKA LG 

//define  TYPE. PGPPKALG  1 

typedef  struct  PgpPkALg  PgpPkALg; 

//end  i f 

struct  PgpPubKey  C 
n struct  PgpPubKey  *next; 

n bytepkALg; 

n byte  keyIDCSD; 

n void*priv; 

n void  (*destroy)  (struct  PgpPubKey  *pubkey); 

a /*  The  size  of  buffer  required  for  encrypt  */ 

n size.t  (*maxesk)  (struct  PgpPubKey  const  *pubkey,  PgpVersion  version); 

n int  (*encrypt)  (struct  PgpPubKey  const  *pubkey,  byte  const  *key, 
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n size_t  keyLen,  byte  *esk,  size_t  *eskLen, 

n struct  Pg p Ra ndomC o n t e X t const  *rc,  PgpVersion  version); 

n int  (*verify)  (struct  PgpPubKey  const  *pubkey,  int  sigtype, 

n byte  const  *sig,  size_t  sigLen, 

n struct  PgpHash  const  *h,  byte  const  *hash); 

n size_t  ( *b u f f e r Le ng t h ) ( s t r u c t PgpPubKey  const  *pubkey); 

n void  ( * t oBuf f e r ) ( s t rue t PgpPubKey  const  *pubkey,  byte  *buf); 

>; 

#ifndef  T Y P E_PG P PUBKE Y 

#define  TYPE_PGPPUBKE Y 1 

typedef  struct  PgpPubKey  PgpPubKey; 

#endi f 


struct 

a 

n 

n 

n 

□ 

n 

a 

n 

a 

n 

□ 

D 

n 

Q 

n 

□ 

a 

a 

n 

D 

n 

□ 

□ 

>; 


PgpSecKey  { 
byte  pkALg; 
byte  keyIDCS]; 
void  *priv; 

void  (*destroy)  (struct  PgpSecKey  *seckey); 

struct  PgpPubKey  * (*pubkey)  (struct  PgpSecKey  const  *seckey); 
int  (*isLocked)  (struct  PgpSecKey  const  *seckey); 

int  (‘unlock)  (struct  PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
a char  const  ‘phrase,  size_t  plen); 

void  (‘lock)  (struct  PgpSecKey  ‘seckey); 

size_t  (‘maxdecrypted)  (struct  PgpSecKey  const  ‘seckey); 

int  (‘decrypt)  (struct  PgpSecKey  ‘seckey,  struct  PgpEnv  const  ‘env, 

n n int  esktype,  byte  const  ‘esk,  size_t  esklen, 

byte  ‘key,  size_t  ‘keylen,  char  const  ‘phrase, 
n n size_tplen); 

size_t  (‘maxsig)  (struct  PgpSecKey  const  ‘seckey,  PgpVersion  version); 
int  (‘sign)  (struct  PgpSecKey  ‘seckey,  struct  PgpHash  const  ‘h, 
byte  const  ‘hash,  byte  ‘sig,  size_t  ‘siglen, 
struct  PgpRandomContext  const  ‘rc,  PgpVersion  version); 
int  (‘changeLock) (struct  PgpSecKey  ‘seckey,  struct  PgpEnv  const  ‘env, 
struct  PgpRandomContext  const  ‘rc, 
n n char  const  ‘phrase,  size_t  plen); 

size_t  (‘bufferLength)(struct  PgpSecKey  const  ‘seckey); 
void  (‘toBuffer)(struct  PgpSecKey  const  ‘seckey,  byte  ‘buf); 


#ifndef  T YP E_PG P S E C KE Y 
^define  T YPE_PG PS E C KE Y 1 
typedef  struct  PgpSecKey  PgpSecKey; 
#e  nd i f 


#define  PGP_PKALG_RSAn  1 
/* 

* These  are  ViaCrypt's  "restricted"  versions  of  RSA.  There  are  reasons 
‘ to  want  PGP  to  limit  you  in  this  way.  Some  forces  which  might  try 

‘ to  force  disclosure  of  your  key  (such  as  courts)  can  be  dissuaded  on 
‘ the  grounds  that  nothing  is  being  hidden  by  the  keys. 

★ 

‘ The  ‘annoying‘  thing,  however,  is  that  ViaCrypt  chose  to  leave  the 
‘ encrypted  session  kay  and  signature  packets  with  a pkalg  byte  of  1. 

‘ Which  means  that  various  bits  of  code  contain  kludges  to  deal  with 
‘ this  f act  . 

‘/ 

^define  PGP_PKALG_RS A_ENCn  2 

^define  PG P_PKA LG_R S A_ S I Gn  3 
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//define  PGP_PKALG_ELGAHALn  0x10n  /*  A.K.A.  D i f f i e- H e L L ma  n */ 

#define  PGP_PKALG_DS An  n 0x11 


//define  PG  P_PKU  S E_S  I G N 0x01 

#define  PG P_ PKU S E_ E N C R Y PT  0x02 

//define  PGP  PKUSE  SIGN  ENCRYPT  (PGP  PKUSE  SIGN 


PGP_PKUSE  ENCRYPT) 


#d  e f i n e 
//define 
#d  e f i n e 
//define 
//d e f i n e 
//define 
//define 


pgpPubKeyNext ( p ) n (p)->next 

pgpPubKeyDestroy(p)n  (p)->destroy(p) 

pgpPubKeyMaxesk(p,v)n  (p)->maxesk(p,v) 

pgpPubKeyEncrypt(p,k,kL,e,eL,r,v)n  (p)->encrypt(p,k,kL,e,eL,r,v) 

pgpPubKey\/erify(p,t,s,sL,h,ha)n  (p)->verify(p,t,s,sL,h,ha) 
pgpPubKeyBufferLength(p)n  (p)->bufferLength(p) 

pg  p Pu  b Key  To  Bu  f f e r ( p , b ) n n ( p ) ->  t oBu  f f e r ( p , b ) 


#d  e f i n e 

# d e f i n e 
#def i ne 
//d e f i n e 
#d  e f i n e 
//define 
//d e f i n e 

n 

//define 

# d e f i n e 
#def i ne 
//define 
//d e f i n e 


pgpSecKeyDestroyCsIn  (s)->destroy(s) 

pgpSecKeyPubkey(s)n  (s)->pubkey(s) 

pgpSecKeyIsLocked(s)n  Cs)->isLocked(s) 
pgpSecKeyUnLock(s,e,p,pL)n  (s)->unLockCs,e,p,pL) 

pgpS e c Key Lo c k ( s ) n (s)->Lock(s) 

pgpSecKeyHaxdecrypted(s)n  (s)->maxdecrypted(s) 

pgpSecKeyDecrypt(s,env,t,e,eL,k,kL,p,pL)n  (s)->decrypt(s,env,\ 

n t , e , e L , k,  k L , p , p L ) 

pgpSecKeyMaxsig(s,v)n  (s)->maxsig(s,v) 

pgpSecKeySign(s,h,ha,si,siL,r,v)n  (s)->sign(s,h,ha,si,siL,r,v) 

pgpSecKeyChangeLock(s,e,r,p,pL)n(s)->changeLockCs,e,r,p,pL) 
pgpSecKeyBufferLength(s)n  (s)->bufferLength(s) 

pgpSe c KeyToBuf f e r ( s , b ) n n C s ) -> t oBu f f e r ( s , b ) 


struct  PgpPkALg  const  PGPExport  * pg p P ka I gBy N umbe r ( by t e pkalg); 
int  PGPExport  pg p Key U s e ( s t r u c t PgpPkALg  const  *pkALg); 

size_t  PGPExport  pgpPubKeyPrefixSizeCbyte  pkALg,  byte  const  *p,  size_t  Len); 
struct  PgpPubKey  PGPExport  * 

pg p Pu b Key F r omBu f ( by t e pkALg,  byte  const  *p,  size_t  Len,  int  *error); 
struct  PgpSecKey  PGPExport  * 

pgpSecKey FromBuf (byte  pkALg,  byte  const  *p,  size_t  Len,  int  *error); 

unsigned  PGPExport  p g p S e c Key E n t ropy ( s t r u c t PgpPkALg  const  *pkALg, 
n unsigned  bits,  BooLean  fastgen); 

struct  PgpSecKey  PGPExport  *pg p S e c Key G e n e r a t e ( s t r u c t PgpPkALg  const  *pkALg, 
n unsigned  bits,  BooLean  fastgen, 

Q struct  PgpRandomContext  const  *rc,  int  ( *p r og r es s ) ( vo i d *arg,  int  c), 

n void  *arg,  int  *error); 

//ifdef  __cpLuspLus 

> 

//e nd i f 

//endif  /*  PGPPUBKEY  H */ 
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/* 

* pgpRSAGlue.h  - RSA  encryption  and  decryption 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  file,  for  use  only  within  the  PGP  Library. 

* You  should  not  be  using  these  functions  in  an  application. 

* 

* $Id:  pg pR S AG  I ue . h , V 1.2. 2. 2 1 997/06/09  23:46:29  quark  Exp  $ 

*/ 

#ifndef  PGPRSAGLUE.H 
^define  PGPRSAGLUE.H 

^include  "bn.h" 

^include  " pg p U s u a I s . h " 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi f 


struct  Pg p Ra ndomCon t e X t ; 


/* 

A 

Structure 

to  hold  a public 

key 

*/ 

struct  RSApub 

{ 

n 

struct 

BigNum  n;Q 

/* 

The 

pub  Lie  modu 1 us  */ 

n 

>; 

struct 

BigNum  e;n 

/* 

The 

pub  L i c exponent  */ 

/* 

A 

structure 

to  hold  a secret 

key 

*/ 

struct  RSAsec 

{ 

n 

struct 

BigNum  n;n 

/* 

Copy 

of  public  parameters  */ 

n 

struct 

BigNum  e ; 

□ 

struct 

BigNum  d;n 

/* 

Decryption  exponent  */ 

n 

struct 

BigNum  p;n 

/* 

The 

smaller  factor  of  n */ 

n 

struct 

BigNum  q;n 

/* 

The 

Larger  factor  of  n */ 

Q 

struct 

BigNum  u;n 

/* 

1/p 

(mod  q ) * / 

>; 

/*  A PgpSecKey's  priv  points  to  this,  an  RSAsec  plus  the  encrypted  form...  */ 
struct  RSAsecPLus  { 
n struct  RSAsec  s; 

n byte  *cryptkey; 

n size.t  ckalLoc,  cklen; 

n i nt  locked; 

>; 

/*  Fill  in  secret  key  structure  */ 

void  rsaFilLSecKeyCstruct  PgpSecKey  *seckey,  struct  RSAsecPLus  *sec); 

/*  Declarations  */ 

int  rsaKeyTooBigCstruct  RSApub  const  *pub,  struct  RSAsec  const  *sec); 

/*  Encrypt  */ 

int  r s a Pu b L i c En c ry p t C s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  len, 

struct  RSApub  const  *pub, 

n n struct  Pg pRa ndomCon t e x t const  *rc); 

/*  Sign  */ 

int  r sa P r i va t eEn c ry p t ( s t rue t BigNum  *bn,  byte  const  *in,  unsigned  Len, 

struct  RSAsec  const  *sec); 
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/*  Verify  */ 

int  r s a Pu b I i c De c ry p t ( by t e *buf,  unsigned  Len,  struct  BigNum  *bn, 

struct  RSApub  const  *pub); 

/*  Dec  rypt  */ 

int  r sa P r i va t e De c rypt ( by t e *buf,  unsigned  Len,  struct  BigNum  *bn, 

struct  RSAsec  const  *sec); 

/♦Modular  Exponentiation*/ 


i nt 

bnExpModCRACstruct 

n struct 

n struct 

BigNum  *x,  struct  BigNum  const  *d, 

BigNum  const  *p,  struct  BigNum  const  *q, 

BigNum  const  *u); 

#ifdef  __cpLusplus 

> 

# en d i f 

#endif  /*  ! PG PR S AG LU E_ H */ 

[i:CHK:ec31977b99aff4e88941  6b5db:: 
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/* 

* pgpRSAGLue.c  - The  interface  between  bignum  math  and  RSA  operations. 

* This  Layer's  primary  reason  for  existence  is  to  allow  adaptation 

* to  other  RSA  math  Libraries  for  legal  reasons. 

* 

* Written  by  Colin  Plumb. 

* 

* Broken  into  two  files  by  BAT.  pg p RS AG  I u e 1 . c contains  encryption  and 

* signing  functions.  pgpRSAG I ue2 . c contains  decryption  and  verification 

* functions.  This  was  done  for  Legal  reasons. 

* 

* $Id:  pgpRSAGluel  . c,v  1.1. 2.1  1 997/06/09  23:46:31  quark  Exp  $ 

*/ 


/* 

* An  alternative  version 

* entire  source  file 
*/ 

#i f ( ! N0_RSA  &&  ! USE_RSA 
#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#endi  f 


of  this  module  is  used  if  RSAREF  is  needed.  This 
is  under  the  control  of  the  following  conditional: 

LEGACY  S&  !USE  RSAREF  FULL) 


nc lude 

"pgpESK. h" 

n c 1 u d e 

"pgpRSAKey.h" 

n c 1 ud  e 

"pgpRSAGLue.h" 

n c L ud e 

"pgpKeyMisc.h" 

n c 1 ude 

"bn . h" 

n c 1 ude 

"pgpErr.h" 

nc 1 ude 

"pgpRndom. h" 

n c L ud e 

"pgpUsuals.h" 

This  i 

s handy  for  debugging. 

#i 

#i 

#i 

tti 

#i 

#i 

#i 

#i 


* it  nicely  prints  every  detail  of  your  secret  key! 

*/ 

^define  BNDEBUG  0 

#if  BNDEBUG 

/*  Some  debugging  hooks  which  have  been  Left  in  for  now.  */ 

^include  "bnprint.h" 

Sdefine  bnd Pu t ( p r omp t , bn)  ( f p u t s ( p r omp t , stdout),  bn P r i n t ( s t dou t , bn),  \ 
n n n n pu t c h a r ( ' \ n ' ) ) 

^define  bndPrintf  printf 
Seise 

Sdefine  bnd Pu t ( p r omp t , bn)  ( ( vo  i d ) ( p r omp t ) , ( vo i d ) ( bn ) ) 

Sif  __GNUC__  > 1 

/*  Non-ANSI,  but  supresses  warnings  about  expressions  with  no  effect  */ 

Sdefine  bnd P r i n t f ( a r g . . . ) (void)0 

Seise 

/*  ANSI-compliant  - cast  entire  comma  expression  to  void  */ 

Sdefine  bndPrintf  (void) 

Send  i f 
Send i f 


1 n t 

r s a Pu b L i c E n c r y p t ( s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  Len, 
n struct  RSApub  const  *pub,  struct  Pg p Ra nd omC on t e x t const  *rc) 
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{ 

n unsigned  bytes  = (bnBits(&pub->n)+7)/8; 

n pg p PKC S Pa c k ( bn , in,  Len,  PKC S _ P A D_ E N C R Y PT E D , bytes,  rc); 

bndPrintf("RSA  encrypting. \n"); 
bndPutC" plaintext  = ",  bn); 

n return  bnExpHodCbn,  bn,  &pub->e,  &pub->n); 

> 


/* 

•k 

* 

•k 

* 

* 

* 

★ 

* 

•k 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 

* 


This  does  an  RSA  signing  operation,  which  is  very  similar,  except 
that  the  padding  differs.  The  type  is  1,  and  the  padding  is  all  1's 
(hex  0xFF).  In  addition,  if  the  data  is  a DER-padded  MD5  hash,  there's 
an  option  for  encoding  it  with  the  old  PGP  2.2  format,  in  which  case 
that's  all  replaced  by  a 1 byte  indicating  HD5. 


When  decrypting,  distinguishing  these  is  a bit  trickier,  since  the 
second  most  significant  byte  is  1 in  both  cases,  but  in  general, 
it  could  only  cause  confusion  if  the  PGP  hash  were  all  1's. 

To  summarize,  the  formats  are: 


Position 

n-1 

n-2 

n-3 . . I en+1 
I e n 

I en-1 . . X 
x-1 . . 0 


Value  Function 

0 This  is  needed  to  ensure  that  the  padded  number 
is  less  than  the  modulus. 

1 The  padding  type  (all  ones). 

255  All  ones  padding  to  ensure  signatures  are  rare. 

0 Zero  byte  to  mark  the  end  of  the  padding 

ASN.In  The  ASN.1  DER  magic  cookie  (18  bytes) 
data  The  payload  HD5  hash  (16  bytes). 


Position  Value 

n-1  0 


n-2 

n-2. .n-len-2 
n- I en-2 
n-  I en-3 . . 1 
0 


In  "This  is  HD5" 

data  Supplied  payload  MD5  hash  (len  ==  16). 

0 Zero  byte  to  mark  the  end  of  the  padding 

255  All  ones  padding. 

1 The  padding  type  (all  ones). 


* The  reason  for  the  all  1's  padding  is  an  extra  consistency  check. 

* A randomly  invented  signature  will  not  decrypt  to  have  the  long 

* run  of  ones  necessary  for  acceptance. 

* 

* Oh...  the  public  key  isn't  needed  to  decrypt,  but  it's  passed  in 

* because  a different  glue  library  may  need  it  for  some  reason. 

* 

* TODO:  Have  the  caller  put  on  the  PKCS  wrapper.  We  can  notice  and 

* strip  it  off  if  we're  trying  to  be  compatible. 

*/ 

static  const  byte  signedType  = 1; 


i n t 

r s a P r i va t e E n c r y p t ( s t r u c t BigNum  *bn,  byte  const  *in,  unsigned  len, 
n struct  RSAsec  const  *sec) 

{ 


[!CCHK:f811ae2eee7d8653acbe77935b76d30ccc130da1f7acb0a32bed55caf60ca1b77TD 
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n unsigned  bytes  = ( bnB i t s ( & s e c->n ) +7 ) / 8 ; 

n pg pPKC S Pa c k ( bn , in,  ten,  PKC S_P A D_ S I GN E D , bytes, 

n n (struct  Pg p Ra n domC on t e x t const  *)NULL); 

bndPrintf("RSA  signing. \n"); 
bndPutC" plaintext  = ",  bn); 

n return  bn E xpHod C R A ( bn , 8sec->d,  &sec->p,  8sec->q,  8sec->u); 

> 


#endi f 

/* 

* Local  Variables: 

* tab-wi dth  : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpRSAGLue.c  - The  interface  between  bignum  math  and  RSA  operations. 

* This  Layer's  primary  reason  for  existence  is  to  allow  adaptation 

* to  other  RSA  math  Libraries  for  Legal  reasons. 

* 

* Written  by  CoLin  Plumb. 

★ 

* Broken  into  two  files  by  BAT.  pg p R S AG L u e 1 . c contains  encryption  and 

* signing  functions.  pg p RS AG L u e 2 . c contains  decryption  and  verification 

* functions.  This  was  done  for  Legal  reasons. 

* 

* $Id:  pgpRSAGLue2.c,v  1.1. 2.1  1 997/06/09  23:46:33  quark  Exp  $ 

*/ 

/* 

* An  alternative  version  of  this  module  is  used  if  RSAREF  is  needed.  This 

* entire  source  file  is  under  the  control  of  the  following  conditional: 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 


#if  (!N0  RSA  SS  !USE  RSAREF  FULL) 


n c L ude 

"pgpESK.h" 

nc  Lude 

"pgpRSAKey.h" 

n c 1 u d e 

" pgpRSAG 1 ue  . h 

n c L ud e 

"pgpKeyHi sc  . h 

nc  Lude 

" bn . h " 

n c L ude 

"pgpErr.h" 

nc  Lude 

"pgpRndom. h" 

n c 1 u d e 

"pgpUsuals.h" 

/* 

* This  is  handy  for  debugging,  but 

* it  nicely  prints  every  detail  of 
*/ 

#define  BNDEBUG  0 


VERY  VERY  DANGEROUS  for  production  - 
your  secret  key! 


#if  BNDEBUG 

/*  Some  debugging  hooks  which  have  been  Left  in  for  now.  */ 

#include  "bnprint.h" 

//define  bndPut  (prompt,  bn)  ( f pu  t s ( p r omp  t , stdout),  bn  P r i n t ( s t dou  t , bn),  \ 
n n n n pu t c h a r ( ' \ n ' ) ) 

//define  bndPrintf  printf 
//else 

#define  bnd Pu t ( p r omp t , bn)  ( ( vo i d ) ( p r omp t ) , ( vo i d ) ( bn  ) ) 

//if GNUC > 1 

/*  Non-ANSI,  but  supresses  warnings  about  expressions  with  no  effect  */ 

//define  bn  d P r i n t f ( a r g . . . ) (void)0 

//else 

/*  AN S I -c omp I i a n t - cast  entire  comma  expression  to  void  */ 

^define  bndPrintf  (void) 

#e n d i f 
//  e n d i f 
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/* 

* If  you're  using  a legally  encumbered  library  (ugh!)  this  will  be 

* printed  in  the  program  banner. 

*/ 

char  const  banner_legaleseCD  = 

/* 

* This  returns  TRUE  if  the  key  is  too  big,  returning  the 

* maximum  number  of  bits  that  the  library  can  accept.  It 

* is  used  if  you  want  to  use  something  icky  from  RSADSI,  whose 

* code  is  known  to  have  satatic  limits  on  key  sizes.  (BSAFE  2.1 

* advertises  2048-bit  key  sizes.  It  lies.  It's  talking  about 

* conventional  RC4  keys,  whicah  are  useless  to  make  anything  like 

* that  large.  RSA  keys  are  limited  to  1024  bits. 

*/ 

i n t 

r s a Key TooB i g ( s t r u c t RSApub  const  *pub,  struct  RSAsec  const  *sec) 

{ 

n (void)pub; 
n Cvoid)sec; 

n return  0;n  /*  Never  too  big!  */ 

> 

/* 

* This  performs  a modular  exponentiation  using  the  Chinese  Remainder 

* Algorithm  when  the  modulus  is  known  to  have  two  relatively  prime 

* factors  n = p * q,  and  u = p^-1  (mod  q)  has  been  precomputed. 

* 

* The  Chinese  remainder  algorithm  lets  a computation  mod  n be  performed 

* mod  p and  mod  q,  and  the  results  combined.  Since  it  takes 

* (considerably)  more  than  twice  as  long  to  perform  modular  exponentiation 

* mod  n as  it  does  to  perform  it  mod  p and  mod  q,  time  is  saved. 

* 

* If  X is  the  desired  result,  let  xp  and  xq  be  the  values  of  x mod  p 

* and  mod  q,  respectively.  Obviously,  x = xp  + p * k for  some  k. 

* Taking  this  mod  q,  xq  ==  xp  + p*k  (mod  q),  so  p*k  ==  xq-xp  (mod  q) 

* and  k ==  p'^-l  * (xq-xp)  (mod  q),  so  k = u * (xq-xp  mod  q)  mod  q. 

* After  that,  x = xp  + p * k. 

* 

* Another  savings  comes  from  reducing  the  exponent  d modulo  phi(p) 

* and  phi(q).  Here,  we  assume  that  p and  q are  prime,  so  phi(p)  = p-1 

* and  phi (q)  = q-1  . 

*/ 

i n t 

bnExpHodCRA ( s t ru c t BigNum  *x,  struct  BigNum  const  *d, 

n struct  BigNum  const  *p,  struct  BigNum  const  *q,  struct  BigNum  const  *u) 
{ 

n struct  BigNum  xp,  xq,  k; 
n i n t i ; 

bndPrintf(" Performing  Chinese  Remainder  AlgorithmXn"); 

bndPut("x  = ",  x); 

bndPutC'p  = ",  p); 

bndPutC'q  = ",  q); 

bndPutC'd  = ",  d); 

bndPut("u  = ",  u); 

a bnBegin(&xp); 
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n 

bnBeg i n ( Sxq  ) ; 

n 

bnBegin(8k); 

n 

/*  Compute  xp  = (x  mod 

p)  ^ (d 

mod 

p-1  ) 

mod  p */ 

a 

if  (bnCopy(8xp,  p)  < 0)nn  /* 

First,  use  xp  to  hold 

p-1 

*/ 

a 

n goto  fail; 

n 

( VO i d ) b n S u bQ ( 8x p , 1);n 

n / * 

P > 

1 , so 

subtracting 

i s 

saf  e . 

n 

if  (bnHodCSk,  d,  Sxp)  < 

0)n  /* 

k = 

d mod 

(p-1)  */ 

u 

n goto  fail; 

bndPut("d  mod  p-1  = ",  8k); 

n 

if  (bnModCSxp,  x,  p)  < 

0 ) n /* 

Now 

xp  = 

( X mod  p ) */ 

n 

n goto  fail; 

bndPut("x  mod  p = ",  Sxp); 

n 

if  ( bnExpMod ( Sxp,  Sxp, 

8k,  p)  < 

: 0)B 

/*  xp  = (x  mod  p) 

^k 

mod  p 

Q 

n goto  fail; 

bndPut("xp  = x^d  mod  p = ", 

Sxp  ) ; 

n 

/*  Compute  xq  = (x  mod 

n 

> 

Q. 

mod 

q-1  ) 

mod  q */ 

n 

if  (bnCopyCSxq,  q)  < 0)nn  /* 

First,  use  xq  to  hold 

q-1 

*/ 

n 

n goto  fail; 

□ 

(void)bnSubQ(Sxq,  1);n 

B /* 

q > 

1 , so 

subtracting 

i s 

saf  e . 

a 

if  (bnModCSk,  d,  Sxq)  < 

0)b  /* 

k = 

d mod 

(q-1)  */ 

n 

n goto  fail; 

bndPut("d  mod  q-1  = ",  8k); 

□ 

if  (bnModCSxq,  x,  q)  < 

0 ) B /* 

Now 

xq  = 

(x  mod  q)  */ 

n n goto  fail; 

bndPut("x  mod  q = ",  &xq); 

n if  (bnExpModCSxq,  &xq,  &k,  q)  < 0)n  /*  xq  = (x  mod  q)*k  mod  q */ 
n n goto  fail; 

bndPut("xq  = x*d  mod  q = ",  Sxq); 

n /*  xp  < p and  PGP  has  p < q,  so  this  is  a no-op,  but  just  in  case  */ 

n if  (bnModC&k,  &xp,  q)  < 0) 

n n goto  faiL;n 

bndPut("xp  mod  q = ",  &k); 
a 

n i = bnSubCSxq,  &k); 
bndPutC"xq  - xp  = ",  &xq); 
bndPrintf("With  sign  %d\n",  i); 


n 

i f 

(i  < 0) 

□ 

n 

goto  fail; 

n 

i f 

( i ) { 

n 

a 

/* 

n 

□ 

* Borrow  out  - xq-xp  is  negative,  so 

bnSub  returned 

n 

□ 

* xp-xq  instead,  the  negative  of  the 

true  answer. 

n 

n 

* Add  q back  (which  is  subtracting  from  the  negative) 

n 

n 

* so  the  sign  flips  again. 

Q 

n 

*/ 

Q 

n 

i = bnSub(Sxq,  q); 

n 

n 

if  ( i < 0 ) 

n 

Q 

B goto  fail; 

bndPut("xq  - xp  mod  q = ",  &xq); 

bnd P r i n t f ( " W i t h sign  %d\n",  i);nn  /*  Must  be  1 */ 
n } 

n /*  Compute  k = xq  * u mod  q */ 
n if  (bnHuL(&k,  u,  Sxq)  < 0) 
n n goto  fail; 
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b nd Pu t ( " ( xq-xp  ) * u = ",  &k); 
n if  (bnMod(&k,  8k,  q)  < 0) 
a a goto  fail; 

bndPut("k  = (xq-xp)*u  % q = ",  8k); 

n /*  Now  X = k * p + xp  i s the  final  answer  */ 

n if  (bnMuLCx,  8k,  p)  < 0) 

n n goto  fail; 

bndPut("k  * p = ",  x); 

n if  CbnAddfx,  8xp)  < 0) 

n n goto  fail; 

bndPut("k*p  + xp  = ",  x); 

#if  BNDEBUGn/*  333  DEBUG  - do  it  the  slow  way  for  comparison  */ 

n if  (bnMul(8xq,  p,  q)  < 0) 

n n goto  fail; 

bndPut("n  = p*q  = ",  8xq); 

n if  ( bn  Ex pHod ( 8x p , x,  d,  8xq)  < 0) 

n n goto  fail; 

bndPut("x*d  mod  n = ",  8xp}; 

n if  (bnCmpCx,  8xp)  !=  0)  { 

bndPrintfC" Nasty!  ! !\n"); 

n n goto  fail; 

n > 

n bnSetQ(8k,  17); 
o bnExpMod(8xp,  8xp,  8k,  8xq); 
bndPut("x*17  mod  n = ",  8xp); 

#e n d i f 


a 

bnEnd(8xp); 

n 

bnEnd(8xq)  ; 

a 

bnEnd(8k) ; 

a 

return  0; 

fa  1 

1 : 

n 

bnEnd(8xp)  ; 

n 

bn  End ( 8xq  ) ; 

n 

bnEnd(8k)  ; 

a 

return  PG P E R R_N OM EM ; 

} 

/* 

* Decrypt  a message  with  a public  key. 

* These  destroy  (actually,  replace  with  a decrypted  version)  the 

* i nput  bi gnum  bn . 

* 

* It  recongizes  the  PGP  2.2  format,  but  not  in  all  its  generality; 

* only  the  one  case  (framing  byte  = 1,  length  = 16)  which  was  ever 

* generated.  It  fakes  the  DER  prefix  in  that  case. 

it 

* Performs  an  RSA  signature  check.  Returns  a prefix  of  the  unwrapped 

* data  in  the  given  buf.  Returns  the  length  of  the  untruncated 

* data,  which  may  exceed  "len".  Returns  <0  on  error. 

*/ 

i nt 

r sa Pub  I i c De c ry p t ( by t e *buf,  unsigned  len,  struct  BigNum  *bn, 
n struct  RSApub  const  *pub) 
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n unsigned  bytes; 

bndPrintfC"RSA  signature  checking. \n"); 
n if  ( bn ExpMod ( b n , bn,  &pub->e,  &pub->n)  < 0) 
n n return  PGPERR_NOMEM; 
bndPutC" decrypted  = ",  bn); 
n bytes  = (bnBits(&pub->n)+7)/8; 

n return  pg p PKC S U n pa c k ( bu f , Len,  bn,  PKC S _ P A D_ S I G N E D , bytes); 
} 


/* 

* Perforins  an  RSA  decryption.  Returns  a prefix  of  the  unwrapped 

* data  in  the  given  buf.  Returns  the  Length  of  the  untruncated 

* data,  which  may  exceed  "len".  Returns  <0  on  error. 

*/ 

i n t 

rsaPrivateDecryptCbyte  *buf,  unsigned  Len,  struct  BigNum  *bn, 
n struct  RSAsec  const  *sec) 

{ 

n unsigned  bytes; 
bndPrintf("RSA  decryptingXn"); 

n if  ( bnExpModCRA( bn,  &sec->d,  &sec->p,  &sec->q,  &sec->u)  < 0) 
n n return  PGPERR_NOMEM; 
bndPut(  "decrypted  = ",  bn); 
n bytes  = ( b n B i t s ( &s e c->n ) +7 ) / 8 ; 

a return  pg p PKC S Un pa c k ( bu f , Len,  bn,  PKC S_P A D _ E N C R Y PT E D , bytes); 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 
*/ 

#endif  ( ! NO  RSA  &S  ! U S E_RS A R E F_ F U LL) 
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/* 

* pgpRSAKey . c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpRSAKey . c,v  1.9. 2. 3 1997/06/09  23:46:35  quark  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


#incLude 

"config.h" 

//end  i f 

//if  (!N0_ 

RSA) 

//incLude 

"pgpDebug.h" 

//incLude 

"pgpKeyMi sc . h 

//  i nc  L ude 

"pgpRSAKey. h" 

//incLude 

"pgpRSAGLue.h 

//i  ncLude 

" bn . h " 

//incLude 

"pgpCFB. h" 

#incLude 

"pgpCipher.h" 

#i nc  Lude 

"pgpHash.h" 

//incLude 

"pgpMem. h" 

//i  nc  Lude 

"pgpErr  . h" 

//incLude 

"bnprime.h" 

//incLude 

" pg  p PubKey . h " 

//incLude 

"pgpRndom. h" 

//incLude 

"pgpStr2Key.h 

//incLude 

"pgpUsuaLs.h" 

#ifndef  NULL 
#def i ne  NULL  0 
# end i f 

//define  A S S E RTR  S A ( a L g ) pg  p As  s e r t ( ( A LGM  AS  K ( a L g ) ) = = PG  P_PKA  LG_R  S A ||  \ 

nan  ( A LG H AS K C a L g ) ) ==PG P_PKA LG_R S A_ E N C ||  \ 

n n n ( A LG H AS K ( a L g ) ) ==PG P_PKA LG_R S A_S I G ) 

//define  ASSERTRSASIGCa  Lg)  pg  p As  s e r t ( ( A LG  H A S K ( a L g ) ) = = PG  P_PK  A LG_R  S A ||  \ 

n n n n ( A LGM A S K ( a L g ) ) ==PG P_PKA LG_R S A_S I G ) 

//define  AS  S ERTRS  AENC  ( a Lg  ) pg  p As  s e r t ( ( A LG  M A S K ( a L g ) ) = = PG  P_PKA  LG_R  S A ||  \ 

n n n n ( A LGM A S K ( a L g ) ) = = PG P_PKA LG_R S A_ E N C ) 


/**  PubLic  key  functions  **/ 
static  void 

rsaPubDest roy ( St ruct  PgpPubKey  *pubkey) 

{ 

n struct  RSApub  *pub  = (struct  RSApub  * ) pub key->p r i v ; 

n AS S ERT R S A ( pu b key->p k A L g ) ; 

n 

n bn  End ( &pub->n  ) ; 

n bn  End ( &pub->e  ) ; 

n mems e t ( pu b , 0,  s i zeof ( pub  ) ) ; 

n pg pMem F r e e ( pub ) ; 

n mems e t ( pu b key , 0,  s i z e o f ( p u b key  ) ) ; 

n pg pMem F r e e C pu b key ) ; 

> 
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#if  0 

static  void 

rsa PubI d8 ( s t ru c t PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

a struct  RSApub  const  *pub  = (struct  RSApub  *)pubkey->priv; 

n A S S E RT R S A C p u b key->p k A L g ) ; 

n bnExtractBigBytes(&pub->n,  buf,  0,  8); 

} 

#e n d i f 

/*  Return  the  Largest  possible  PgpESK  size  for  a given  key  */ 
static  size_t 

r saMaxes k ( s t r u c t PgpPubKey  const  *pubkey,  PgpVersion  version) 

{ 

n struct  RSApub  const  *pub  = (struct  RSApub  *)pubkey->priv; 

n (void)version; 

a ASSERTRSAENC(pubkey->pkALg); 

n return  2 + (bnBits(8pub->n)+7)/8; 

} 

/* 

* Given  a buffer  of  at  Least  "maxesk"  bytes,  make  an  PgpESK 

* into  it  and  return  the  size  of  the  PgpESK,  or  <0. 

*/ 

static  int 

r s a E n c r y p t ( s t r u c t PgpPubKey  const  *pubkey,  byte  const  *key, 
size_t  keylen,  byte  *esk,  size_t  *eskLen, 
struct  Pg p Ra ndomC on t ex t const  *rc,  PgpVersion  version) 

{ 

n struct  RSApub  const  *pub  = (struct  RSApub  * ) pu b key->p r i v ; 

n struct  BigNum  bn; 

n unsigned  t; 

n inti; 

n /*  We  don't  need  these  arguments,  although  other  algorithms  may...  */ 

n (void)rc; 

n (void)version; 

n ASSERTRSAENC(pubkey->pkALg); 

n t = bnBi t s ( &pub->n ) ; 

B if  (t  > 0xffff) 

B B return  PG P E R R_PUBKE Y_T00B I G ; 

B i f ( key  L en  > t ) 

B B return  PG P E R R_ PUBKE Y_T00 S H A LL;  /*  data  too  big  for  pubkey  */ 

B /*  Add  checksum  to  key,  place  temporarily  in  esk  buffer  */ 

B t = 0 ; 

B eskC0]  = keyC0D; 

B for  (i  = 1;  i < (int)keylen,-  i++) 

B B t+=eskCiD=keyCiD; 

B eskCkeylen]  = (byte)(t  >>88  255); 

B e s k C ke y L e n+ 1 3 = (byte)(t  8 255); 

B bnBegin(8bn); 

B i = rsaPubl i cEncrypt (8bn,  esk,  keyLen+2,  pub,  rc); 
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Q 

i f 

(i  < 0)  { 

n 

Q 

bnEnd(&bn); 

Q 

n 

memset (esk,  0, 

key  1 en  + 2 ) ; 

n 

n 

return  i ; 

D 

> 

n 

a 

t = 

pgpBnPutPlain(&bn, 

esk); 

n 

bnEnd(&bn); 

□ 

if 

(esklen) 

n 

n 

*esklen  = (size 

_t)t; 

□ 

return  0; 

} 


/* 

* Return  1 if  (sig,sigLen)  is  a valid  HPI  which  signs 

* hash,  of  type  h.  Check  the  DER-encoded  prefix  and  the 

* hash  itself. 

*/ 

static  int 

r s a Ve r i f y ( s t r u c t PgpPubKey  const  *pubkey,  int  sigtype,  byte  const  *sig, 
□ 

{ 

□ 
n 
□ 
n 
□ 


size_t  siglen,  struct  PgpHash  const  *h,  byte  const  *hash) 

struct  RSApub  const  *pub  = (struct  RSApub  * ) pu b key->p r i v ; 
struct  BigNum  bn; 

byte  bufC64D;n  /*  largest  hash  size  + DER  prefix  */ 
int  i ; 
unsigned  t; 


(void)sigtype; 


ASSERTRSASIG(pubkey->pkAlg); 
t = ( ( un s i gned  ) s i g C03<<8 ) + sigC13; 
t = (t+7)/8; 
if  (siglen  !=  t+2) 

a return  siglen  < t+2  ? PG PE R R_ S I G_T00 S H 0 RT 

n :PGPERR_SIG_T00L0NG; 

bnBegin(&bn)  ; 

if  ( bn  I n s e r t B i gBy t e s ( &bn , sig  + 2,  0,  t)  < 0)  ( 
n bnEnd(&bn}; 

n return  PGPERR_NOHEH; 

> 

i = rsaPublicDecrypt(buf,  sizeof(buf),  8bn,  pub); 
bnEnd(Sbn)  ; 


D 

if  ( i >=  0 ) 

{ 

n 

n /* 

Check  that  the  returned  data  is  correct  */ 

Q 

n t = 

h->DERprefixsize; 

n 

n i = 

(size_t)i  <=  sizeof(buf) 

n 

n 

&&  (unsigned)i  ==  h->hashsize  + t 

a 

n 

&&  memcmpCbuf,  h-> D E Rp r e f i x , t)  ==  0 

□ 

n 

&&  memcmp(buf+t,  hash,  h->hashsize)  ==  0; 

D 

> 

n 

mems  e t ( b u f , 

0,  si zeof (buf  ) ); 

n 

return  i; 

> 

/* 
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* Turn  a PgpPubKey  into  the  a L g o r i t hm- s pe c i f i c parts  of  a public  key. 

* A public  key's  RSA-specific  part  is: 

* 

* 0 2+i  MPI  for  modulus 

* 2+i  2+t  MPI  for  exponent 

* 4+i+t 
*/ 

static  size_t 

r sa PubBu f f e r Leng t h ( s t r u c t PgpPubKey  const  *pubkey) 

{ 

n struct  RSApub  const  *pub  = (struct  RSApub  * ) p u b key->p r i v ; 

n return  4 + ( bnB i t s ( &pu b->n ) +7 ) / 8 + ( b n B i t s ( &p u b-> e ) +7 ) / 8 ; 

> 

static  void 

r s a Pu bToBu f f e r ( s t r u c t PgpPubKey  const  *pubkey,  byte  *buf) 

{ 

n struct  RSApub  const  *pub  = (struct  RSApub  * ) pu b key->p r i v ; 

n unsigned  i,  t; 

n i = bnBi t s ( &pub->n ) ; 

n pgpAssert(i  <=  0xffff); 

n bufC0!]  = (byte)(i  >>  8); 

n bufCI]  = (byte)i; 

n i = (i+7)/8; 

n bn  Ex t r a c t B i gBy t es ( &pub->n,  buf  + 2,  0,  i); 

n t = bnBits(&pub->e); 

n pgpAssert(t  <=  0xffff); 

n bufC2+iD  = (byte)(t  >>  8); 

n bufC3+i]  = (byte)t; 

n t = (t+7)/8; 

n bn  Ex t ra c t Bi gBy t e s ( &pub->e , buf  + 4+i,  0,  t); 

> 


/*  A little  helper  function  that's  used  twice  */ 
static  void 

r sa F i I I Pub  key ( s t r u c t PgpPubKey  *pubkey,  struct  RSApub 


i 

n 

pubkey->nextn 

= 

NULL; 

n 

pub  key->p  kA  1 gn 

= 

PGP_PKALG_RSA; 

n 

pubkey->p  r i vn 

= 

pub; 

□ 

f 0 

pubkey->destroy 

= 

rsaPubDestroy; 

n 

#endi f 

pubkey->i d8 

= 

rsaPubId8; 

□ 

pubkey->maxesk 

= 

rsaMaxesk; 

n 

pubkey->encrypt 

= 

rsaEncrypt; 

□ 

pubkey->veri fy 

= 

rsaVeri fy; 

B 

pubkey->buf f erLength  = r s a Pu bBu f f e r Le n g t h ; 

n 

y 

pubkey->toBuffer 

- 

rsaPubToBuffer; 

*pub ) 


/* 

* Turn  the  a I g o r i t h m- s pe c i f i c parts  of  a public  key  into  a PgpPubKey 

* structure.  A public  key's  RSA-specific  part  is: 

:i:CHK:b590b094ae00e666025441bc50f23735900028e2d8927e265bcdfff4601d8a84f:: 


1589 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRSAKey.c 


* 

* 0 2+i  HPI  for  modulus 

* 2+i  2+t  MPI  for  exponent 

* 4+i+t 
*/ 

struct  PgpPubKey  * 

rsaPubFromBuf ( byte  const  *buf,  size_t  size,  int  *error) 
{ 

n struct  PgpPubKey  *pubkey; 

n struct  RSApub  *pub; 

B int  err  = PG P E R R_NOn EM ; 

B unsigned  i,  t; 

B bnInitC); 


B if(size<4) 

B n returnNULL; 


a 

n 

□ 

n 

□ 

B 

□ 

B 

□ 

n 

□ 

B 

□ 

n 

□ 

Q 

□ 

n 

a 

□ 

□ 

a 

n 

□ 


i = ((unsigned)bufC0D  <<  8)  + bufCIIl; 
if  (!i  II  bufC2:  » (Ci-I)  8 7)  !=  1)  { 

B *error  = PG P E R R_KE Y_M0 DM P I ; 

B return  NULL;b  /*  Bad  bit  Length  */ 

> 

i = (i+7)/8; 
if  (size  < 4+i)  I 

a *error  = PG PE R R_KE Y_S H 0 RT; 

B return  NULL; 

> 

if  ((bufC1+iD  8 1)  ==  0)  {b  /*  Too  small  or  even  modulus  */ 

B *error  = PG PE R R_KE Y_H0 D E VEN ; 

B return  NULL; 

> 

t = ( ( uns i gned ) buf C 2+i ] <<  8)  + bufCB+iD; 
if  (!t  II  bufC4+i:  >>  ((t-1)  8 7)  !=  1)  { 

B *error  = PG PE RR_KE Y_EX PH P I ; 

B return  NULL;b  /*  Bad  bit  length  */ 

> 

t = (t+7)/8; 
if  (size  < 4+i+t)  { 

B *error  = PG P E RR_KE Y_S H 0 RT; 

B return  NULL; 

> 


□ 

n 

B 

a 

□ 

□ 

n 

n 

B 

D 

n 

n 

n 

n 

□ 


pub  = (struct  RSApub  * ) pg pMem A L L o c ( s i z eo f ( *pu b ) ) ; 
if  ( pub ) f 


pubkey  = (struct  PgpPubKey  *)pgpMemAlLoc(sizeof(*pubkey)); 
i f ( pubkey)  { 

bnBegin(8pub->n); 
bnBegin(8pub->e); 

if  ( bn  I n se r t Bi gBy t es ( 8pub->n,  buf  + 2,  0,  i)  >=  0 

88  bn  I n s e r t B i g By t e s ( 8pub->e , buf  + 4 + i,  0,  t)  > = 


if  ( r s a Key TooB i g (pub,  NULL))  { 

B err  = PG P E R R_KE Y_UN S U PP; 

} else  { 

B rsaFiLLPubkey(pubkey,  pub); 

B *e  r ro  r = 0; 

B return  pubkey; 
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n 

a 

a 

a } 

n 

a 

a 

} 

n 

a 

a 

/*  Failed  = clean  up 

□ 

a 

a 

bnEnd(8pub->n)  ; 

n 

a 

a 

bnEnd(8pub->e)  ; 

n 

a 

a 

pgpMemFree(pubkey)  ; 

n 

a 

> 

□ 

a 

pg  pMem  F 

ree ( pub ) ; 

n 

> 

n 

*e  r ro  r 

= err; 

n 

return 

NULL; 

} 


and  return  NULL  */ 


/* 

* Return  the  size  of  the  public  portion  of  a key  buffer. 
*/ 
i n t 

r s a Pu b Ke y P r e f i X S i z e ( by t e const  *buf,  size_t  size) 

{ 

n return  pg pBn Pa r s e ( bu f , size,  2,  NULL,  NULL); 

> 


/**  Secret  key  functions  **/ 
static  void 

r s a S e c D e s t r oy ( s t r u c t PgpSecKey  *seckey) 
f 

n struct  RSAsecPLus  *sec  = (struct  RSAsecPLus  *)seckey->priv; 

n ASSERTRSACseckey->pkALg); 

n bn  End ( & s e c -> s . n ) ; 

n bnEnd ( &se c->s . e ) ; 

n bnEnd ( &s e c->s . d ) ; 

n bn E n d ( 8s e c-> s . p ) ; 

n bnEnd(8sec->s  . q); 

n b n E nd ( 8s e c->s . u ) ; 

n mems e t ( s e c-> c r y p t key , 0,  s e c -> c ka L L o c ) ; 

n pgpMem F r ee C s e c->c ry p t key  ) ; 

n memsetCsec,  0,  sizeof(sec)); 

n pgpHemFree(sec); 

n memsetCseckey,  0,  sizeof(seckey)); 

n pgpMemFreeCseckey); 

> 

#if  0 

static  void 

r s a S e c I d8 ( s t r u c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

n struct  RSAsecPLus  const  *sec  = (struct  RSAsecPLus  * ) s e c key->p r i v ; 

n A S S E RT R S A ( s e c key->p k A L g ) ; 

n bnExtractBigBytes(8sec->s.n,  buf,  0,  8); 

> 

#endi f 

/* 
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* Generate  a PgpPubKey  from  a PgpSecKey 
*/ 

static  struct  PgpPubKey  * 

r sa Pubkey ( s t ru c t PgpSecKey  const  *seckey) 

{ 

a struct  RSAsecPLus  const  *sec  = (struct  RSAsecPLus  * ) s e c key->p r i v ; 

n struct  PgpPubKey  *pubkey; 

a struct  RSApub  *pub; 


□ 

n 

□ 

□ 

n 

n 

□ 

n 

□ 

n 

n 

n 

n 

a 

n 

D 

□ 

n 

□ 

a 

□ 

n 

□ 

n 

> 


ASSERTRSA(seckey->pkALg)  ; 

pub  = (struct  RSApub  * ) pg pM em A L L o c ( s i z eo f ( *pu b ) ) ; 
i f (pub)  { 

n pubkey  = (struct  PgpPubKey  * ) pg pMemA L L o c ( s i z e o f ( * pu b key  ) ) ; 


n 

i f 

( pubkey) 

□ 

n 

bnBegi n(&pub->n)  ; 

n 

n 

bnBegi n(8pub->e); 

n 

n 

i f 

(bnCopy(8pub->n,  8sec->s.n) 

>=  0 

Q 

n 

88  bnCopy(8pub->e,  8sec->s 

. e)  >=  0) 

n 

n 

i 

o 

n 

Q 

rsaFi llPubkey(pubkey, 

pub  ) ; 

n 

n 

n 

pubkey->pkAlg  = seckey 

->pkAlg; 

n 

n 

n 

memcpy(pubkey->keyID, 

seckey->keyID, 

n 

n 

n 

sizeof(pubkey->keyID)); 

n 

Q 

□ 

return  pubkey; 

□ 

n 

> 

n 

□ 

/* 

Failed  = clean  up  and  return  NULL  */ 

Q 

n 

bnEnd(&pub->n)  ; 

□ 

n 

bnEnd ( 8pub->e  ) ; 

D 

n 

pgpMemFree(pubkey); 

n 

> 

n 

pgpMemFree(pub) ; 

> 

return  NULL; 


/* 

* Yes,  there  *is*  a reason  that  this  is  a function  and  no  a variable. 

* On  a hardware  device  with  an  automatic  timeout, 

* it  actually  might  need  to  do  some  work  to  find  out. 

*/ 

static  int 

r sa  I s I oc ked ( s t ru c t PgpSecKey  const  *seckey) 

{ 

n struct  RSAsecPlus  const  *sec  = (struct  RSAsecPlus  * ) s e c key->p r i v ; 


n ASSERTRSA(seckey->pkAlg); 

n return  sec->locked; 

} 


/* 

* Try  to  decrypt  the  secret  key  wih  the  given  passphrase.  Returns  >0 

* if  it  was  the  correct  passphrase.  =0  if  it  was  not,  and  <0  on  error. 

* Does  not  alter  the  key  even  if  it's  the  wrong  passphrase  and  already 

* unlocked.  A NULL  passphrae  will  work  if  the  key  is  unencrypted. 

* 

* A (secret)  key's  RSA-specific  part  is: 

* 
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★ 

0 

2 + u 

MPI  for  modu 1 us 

* 

2 + u 

2 + v 

HPI  for  exponent 

* 

4 + u + v 

1 

Encryption  algorithm  (0  for  none,  1 for  IDEA) 

* 

5 + u + v 

t 

Encryption  IV:  0 or  8 bytes 

* 

5+t+u+v 

2 + w 

MPI  for  d 

★ 

7+t+u+v+w 

2 + x 

MPI  for  p 

★ 

9+t+u+v+w+x 

2+y 

HPI  for  q 

★ 

1 1 +t+u+v+w+x+y 

2 + z 

MPI  for  u 

* 

★ 

13+t+u+v+u+x+y+z 

1 5 + t + u + v + w + x + y + z 

2 

Checksum 

* 

Actually,  that's 

the 

old-style,  if  pg p S 2 Ko 1 d Ve r s is  true. 

* If  it's  false,  the  algoruthm  is  255,  and  is  followed  by  the 

* algorithm,  then  the  C va ra i b I e - I e ng t h , s e I f -d e I i m i t i n g ) 

* s t r i ng-t o-key  descriptor. 

*/ 


static  int 

r s a U n I o c k ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n char  const  *phrase,  size_t  plen) 

{ 

n struct  RSAsecPlus  *sec  = (struct  RSAsecPlus  *)seckey->priv; 

n struct  BigNum  d,  p,  q,  u,  bn; 

a struct  PgpCipher  const  *cipher; 

n struct  PgpCfbContext  *cfb  = NULL;n  /*  Necessary  */ 

n struct  Pg p S t r i ng ToKey  *s2k; 

n byte  key:PGP_CIPHER_MAXKEYSIZE:; 

n unsigned  V,  t; 

n unsigned  alg; 

n unsigned  checksum; 

n inti; 

n ASSERTRSA(seckey->pkAlg); 

n bnlnit(); 

n if  (sec->cklen  < 5) 

n n return  PG P E R R_KE Y_ S H 0 RT ; 

n V = ((unsigned)sec->cryptkey[!0D  <<  8)  + sec->cryptkeyC1D; 

a v=(v+7)/8; 

n if  (sec->cklen  < 5+v) 

a n return  PGPERR_KEY_SHORT; 

a if  ( bn  I n s e r t B i g By t e s ( &s e c -> s . n , s e c -> c r y p t key  + 2 , 0,  v)  < 0) 

n n return  PG P E R R_N OM E H ; 

n t = C ( u n s i g n ed  ) s e c->  c r y p t ke  y C 2 + V II  <<  8)  + s e c->  c ry  p t key  C 3 + v 3 ; 

n t = (t+7)/8; 

n if  (sec->cklen  < 4+v+t) 

n n return  PG P E RR_KE Y_ S H 0 RT ; 

n if  ( b n I n s e r t B i g By t e s C & s e c-> s . e , s e c-> c r y p t key  + 4 + v , 0,  t)  < 0) 

n n return  PGPERR_NOHEH; 

n V +=  t + 5; 

n if  (sec->cklen  < v) 

n n return  PGPERR_KE Y_S HORT; 

n /*  Get  the  encryption  algorithm  (cipher  number).  0 ==  no  encryption  */ 

a alg  = s e c->  c r y p t key  C v- 1 I]  ; 

n /*  If  the  phrase  is  empty,  set  it  to  NULL  */ 

n if  (Iphrase  ||  plen  ==  0) 
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n 

n 

n 

n 

Q 

Q 

n 

n 


n phrase  = NULL; 

/* 

* We  need  a pass  if  it  is  encrypted,  and  we  cannot  have  a 

* password  if  it  is  NOT  encrypted.  I.e.,  this  is  a Logical 

* xo  r ( ) 

*/ 

if  (Iphrase  !=  !aLg) 
n returnO; 


n 

n 

n 

n 

n 

D 

n 

Q 

n 

n 

n 

n 

n 

n 

Q 

n 

D 

n 

n 

n 

a 

n 

n 

D 

n 

D 

D 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

#if  0 

n 

n 

n 

s 


if  (!aLg)  -C 

n /*  The  key  isn't  encrypted;  just  read  it  in  */ 

n cfb  = NULL; 

> else  { 


n 

s 

□ 

D 

n 

D 

D 

n 

n 

n 

n 

n 

D 

D 

n 

n 

n 

n 


i f 
□ 

□ 

Q 

n 

n 

D 

□ 

□ 

Q 

□ 

□ 


CaLg  ==  255)  i 

/*  New  style,  with  a separate  st r i ng-to-key  */ 
if  Csec->cklen  ==  v) 
n return  PGPERR_KE Y_SHORT; 

alg  = s e c->c r y p t key C V++D ; 

i = pg pS2 Kde code ( &s 2 k,  env,  sec->c rypt key+v, 
n n s e c -> c k L e n-v ) ; 

if  ( i < 0 ) 
n returni; 

V +=  i; 

if  (sec->cklen  < v) 
n return  PGPERR_KE Y_SHORT; 


> else  i 


n /*  Old-style  s t r i ng - t o- key  */ 

n s2k  = pg p S 2 Ks i mp  I e < e n V , pg pHa s hBy N umbe r ( PG P_H AS H _M D 5 ) ) ; 

n i f ( ! s 2 k ) 

n n return  PGPERR_NOMEM; 


> 


Q 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


/*  Okay  now,  do  the  conversion  */ 
cipher  = pgpCipherByNumber(aLg); 
if  Clcipher)  -C 
B pgpS2Kdestroy(s2k); 

B return  PG P E RR_B A D_ C I PH E RN UH  ; 

> 

if  Csec->ckLen  < v + c i p h e r->b  I o c k s i z e ) -C 
B pgpS2Kdestroy(s2k); 

B return  PGPERR_KEY_SHORT; 

> 

cfb  = pgpC f be r ea t e C c i phe r ) ; 
i f ( ! cf  b)  <. 

B pgpS2Kdestroy(s2k); 

B return  PGPERR.NOHEM; 

> 

pgpAssert(cipher->keysi2e  <=  sizeof(key)); 

pg pS t r i ngToKey ( s 2 k,  phrase,  plen,  key,  c i p h e r-> key s i z e ) ; 

pg pc f bl n i t ( c f b,  key,  s e c -> c ryp t key+v ) ; 

memsetCkey,  0,  s i zeof ( key  ) ) ; 

pgpS2KdestroyCs2k); 

V +=  c i phe r->b L oc ks i z e ; n/ * Skip  over  IV  */ 


> else  in  /*  Old-style  */ 


ECCHK:0501e2a113dc036755c611e954f64c991545bcdd6bf3465f6cd5f99991e613925:3 


Pretty  Good  Privacy  5.0^'^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1594 


pgpRSAKey.c 


n 

Q 

n 

Q 

n 

n 

n 

n 

n 

n 

El 

□ 

a 

n 


n /*  The  key  is  encrypted;  create  a cfb  context  */ 

n cipher  = pg p C i ph e r By N umb e r ( a L g ) ; 

n if  (Icipher) 

a n return  PG P E RR„BA D_ C I PH E RN UM ; 

n if  (sec->ckLen  < v + c i p h e r->b L o c k s i z e ) 

n El  return  PG  PE  R R_  KE  Y_  S H 0 RT  ; 

a cfb  = pgpCfbCreate(cipher); 

n i f ( ! c f b ) 

a a return  PGPERR_NOHEM; 

a s2k  = pg p S 2 Ks i mp L e ( pg p H a s h By N umbe r C PG P_ H A S H _M D 5 ) ) ; 

a i f ( ! s2k)  { 

a a pgpCfbDestroyCcfb); 

a a return  PG P E R R_N0M EM ; 

a > 


n 

n 

n 

a 

n 

□ 

n 

n 

a 

n 

n 

□ 

a 

n 

#endi f 

Q 

a 

a 

n 

a 

a 

a 

a 

a 

n 

n 

a 

a 

a 

n 

n 

n 

a 

n 

n 

D 

n 

n 

a 

a 


a 

a 

n 

n 

a 

n 

o 

n 

a 

a 

a 

a 

a 

> 


he  = pg p H a s h C r e a t e ( pg p H a s h By N umbe r C PG P_ H A S H_H D 5 ) ) ; 
if  ( ! he)  C 

a pgpCfbDestroyCcfb); 

a return  PGPERR_NOMEM; 

> 

if  ( c i p h e r “> key s i z e > h c-> ha s h“> h a s h s i z e ) C 
a pgpCfbDestroyCcfb); 

a return  PGPERR_BAD_CIPHERNUM; 

> 

pg p H a s h U pd a t e C h c , Cbyte  const  *)phrase,  pLen); 
pgpCfblnitCcfb,  pgpHashFinaLChc),  sec->cryptkey+v); 
pgpHashDestroyChc); 

V +=  c i phe r->b L oc ks i z e; 


a 

checksum  = 0; 
bnBeginC&d); 
bnBeginC&p); 
bnBeg i n C &q  ) ; 
bnBeginC&u)  ; 
bnBeginC&bn); 

i = pgpBnGetO Ld C&d,  s e c-> c r y p t key  + v,  sec->ckLen  - v,  cfb,  Schecksum); 
if  Ci  <=  0) 
a gotofaiL; 

V +=  i ; 

if  CbnCmpC&d,  &sec->s.n)  >=  0) 

a goto  badpass;n  /*  Wrong  passphrase:  d must  be  < n */ 

i = pgpBnGe t 0 L d C &p,  sec->c rypt key  + v,  sec->ckLen  - v,  cfb,  &checksum); 

if  Ci  <=  0) 

a gotofaiL; 

if  C C bn LSWo r d C &p ) & 1)  ==  0) 

a goto  badpass; 

V +=  i; 

i = pgpBnGetOLdC&q,  sec->cryptkey  + v,  sec->ckLen  - v,  cfb,  Schecksum); 
if  C i <=  0 ) 
a gotofaiL; 

if  C C bn LS Wo r d C &q ) & 1)  ==  0) 
a goto  badpass ; 

V +=  i; 


a /*  ExtremeLy  high-powered  check.  Verify  that  p*q  ==  n */ 

a if  CbnMuLC&bn,  &p,  &q)  < 0) 
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n n gotonomem; 

n if  (bnCmp(&bn,  &sec->s.n)  !=  0) 

□ n gotobadpass; 

n /*  Verify  that  d*e  ==  1 mod  p-1  */ 

n (void)bnSubQ(Sp,  1); 

n if  (bnMuLC&bn,  &d,  8sec->s.e)  < 0 | | bnHod(&bn,  &bn,  &p)  < 0) 

n D goto  nomem; 

n if  (bnCmpQCSbn,  1)  !=  0) 

n n goto  badpass; 

n ( VO i d ) bn  Ad  do ( 8p,  1); 


n /*  Verify  that  d*e  ==  1 mod  q-1  */ 

a Cvoid)bnSub9(8q,  1); 

n if  CbnMuLC&bn,  8d,  8sec->s.e)  < 0 | | bnHod(8bn,  8bn,  8q)  < 0) 

n n goto  nomem; 

n if  (bnCmpQ(8bn,  1)  !=  0) 

□ □ gotobadpass; 

n ( VO i d ) bn Ad dQ ( 8q , 1); 

n i = pg pBn G e t 0 L d ( 8u , s e c -> c r y p t key  + v,  sec->cklen  - v,  cfb,  8checksum); 

n i f ( i <=  0 ) 

n n gotofail; 

n V +=  i ; 


n /*  Check  that  we  ended  in  the  right  place  */ 

n if  (sec->ckLen  - v !=  2)  { 

n n i = PGPERR_KEY_LONG; 

a n gotofail; 

n > 

a checksum  8=  0xffff; 

n if  (checksum  !=  ( ( un s i g n ed ) s e c-> c r y p t key C v D <<8 ) + s e c -> c r y p t key C 1 +v 3 ) 

□ n goto  badpass; 


n 

/* 

Verify  that  u = p*-1  mod  q is  less  than  q */ 

n 

i f 

(bnCmp(8u,  8q)  >=  0) 

n 

n 

goto  badpass; 

n 

/* 

Verify  that  u * p ==  1 mod  q */ 

n 

if 

(bnMul(8bn,  8p,  8u)  < 0 ||  bnMod(8bn,  8bn,  8q) 

< 0) 

n 

n 

goto  nomem; 

n 

if 

(bnCmpQ(8bn,  1)  !=  0) 

n 

n 

goto  badpass; 

a 

a 

/* 

★ 

Okay,  we've  verified  every  single  value  in  the 

secret  key 

n 

* 

against  the  public  key,  so  it  is  *definitely* 

the  right 

n 

★ 

secret  key.  Note  that  the  "nomem"  case  calls 

bnEnd  ( ) 

n 

* 

more  than  once,  but  this  is  guaranteed  harmless. 

n 

★ 

/ 

n 

bnEnd(8bn}  ; 

n 

i f 

(bnCopy(8sec->s . d,  8d)  < 0) 

n 

n 

goto  nomem; 

n 

bnEnd(8d); 

n 

i f 

(bnCopy (8sec->s . p,  8p)  < 0) 

n 

n 

goto  nomem; 

n 

bnEnd(8p); 

n 

if 

( bn C 0 py ( 8s e c-> s . q , 8q)  < 0) 

n 

n 

goto  nomem; 

CCCHK:d7dd1d6c2daa362ddaffa7eaaaa09dd99986063e3556b5ea8da1dbca3421f4d8533 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1596 


pgpRSAKey.c 


n bnEnd(&q); 

n if  ( bn C opy ( & s e c-> s . u , &u)  < 0) 

n n gotonomem; 

o bnEndC&u); 

n i = 1;n  /*  Decrypted!  */ 

n sec->locked  = 0; 

n if  (cfb) 

n n pg p C f b D e s t roy  (cfb); 

n return  1;n  /*  Decrypted  */ 

nomem : 

n i = PGPERR_NOHEM; 

n goto  done ; 

ba d pa  s s ; 

n i = 0;H  /*  Incorrect  passphrase  */ 

n gotodone; 

fail: 

n i f ( ! i ) 

n n i = PGPERR_KEY_SHORT; 

n gotodone; 

done  : 

n i f ( c f b ) 

n n pgpCf bDest roy  (cfb); 

n bnEnd(8bn); 

a bnEnd(Su); 

n bnEnd(&q); 

n bnEnd(&p); 

n bnEnd(&d); 

n returni; 

> 

/* 

* ReLock  the  key. 

*/ 

static  void 

r sa Loc k ( s t r u c t PgpSecKey  *seckey) 

{ 

n struct  RSAsecPLus  *sec  = (struct  RSAsecPLus  * ) s e c key->p r i v; 

n ASSERTRSA(seckey->pkALg); 

n sec->Locked  = 1; 

n /*  bnEnd  is  documented  as  also  doing  a bnBegin  */ 

n bnEnd ( &se c->s . d ) ; 

n b n E nd ( & s e c->s  . p ) ; 

n bnEnd(&sec->s . q); 

n bnEnd(&sec->s.u); 

} 

/* 

* Return  the  size  of  the  buffer  needed,  worst-case,  for  the  decrypted 

* output.  A trivially  padded  key  (random  padding  length  = 0) 

* can  just  be  0 2 0 <key>. 

*/ 

static  size_t 

r sa Ma xde c ry p t ed ( s t r u c t PgpSecKey  const  *seckey) 

{ 

n struct  RSAsecPlus  const  *sec  = (struct  RSAsecPlus  * ) s e c key->p r i v; 
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n size_t  size; 

n ASSERTRSAENC(seckey->pkALg); 

n size  = (bnBits(&sec->s.n)+7)/8; 

n return  size  < 3 ? 0 : size-3; 

> 


/* 

* Try  to  decrypt  the  given  esk.  If  the  key  is  Locked,  try  the  given 

* passphrase.  It  may  or  may  not  Leave  the  key  unLocked  in  such  a case. 

* (Some  hardware  i mp L erne n t a t i o n s may  insist  on  a password  per  usage.) 

*/ 

static  int 

r sa De c ry p t ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n int  esktype,  byte  const  *esk,  size_t  eskLen, 

n byte  *key,  size_t  *keyLen,  char  const  *phrase, 

n size_tpLen) 

{ 

n struct  RSAsecPLus  *sec  = (struct  RSAsecPLus  *)seckey->priv; 

n struct  BigNum  bn; 

n i n t i , j ; 

n unsigned  t; 

n size_tmax; 


n (void)esktype; 


□ 

a 

Q 

n 

Q 

n 

n 


ASSERTRSAENC(seckey->pkALg); 
if  ( s e c -> L o c ked ) { 

n i = r sa U n L o c k ( s e c key , env,  phrase,  pLen); 

n i f ( i <=  0 ) 

n n return  i ? i : PG P E R R_KE Y_ I S LO C KE D ; 

n pgp As s e r t ( ! se c-> L o c ked  ) ; 

} 


n if  (eskLen<2) 

n n return  PG P E R R_ E S K_T00 S H 0 RT ; 

n t = ((unsigned)eskC0Il<<8)  + eskClD; 

n t = (t+7)/8; 

n if(eskLen!=t+2) 

n n return  eskLen<t+2  ? PG PE R R_ E S K_T00 S H 0 RT  : PG P E R R_E S K_TOO LONG ; 

n bnBegin(&bn); 

n if  (bnInsertBi gBytes (&bn,  esk+2,  0,  t)  < 0)  { 

o n bnEnd (&bn  ) ; 

n n return  PG P E R R_NOH E H ; 

n } 

n max  = r s a Ma xd e c r y p t ed ( s e c key  ) ; 

n i = r s a P r i va  t e De  c r y p t ( key , max,  &bn,  &sec->s); 

n bnEnd(&bn); 

n i f ( i < 0 ) 

n n returni; 

n if  ((size_t)i  > max  ||  i < 3) 

n n return  PG P E RR_RS A_ C 0 R R U PT ; 

n /*  Check  checksum  (shouLd  this  be  here?)  */ 

n t = 0; 

n for  (j  = 1;  j < i-2;  j++) 

n n t +=  key C j 3 ; 

n if  (t  !=  ( ( u n s i g n e d ) key C i -2 D <<8  ) + keyCi-13) 

n n return  PG P E R R_ R S A_ C 0 R R U PT ; 
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n mens e t ( key+ i -2 , 0,  2); 

n /*  The  actual  key  */ 

n i f ( key  L en ) 

n B *keyLen  = (size_t)i-2; 

B return0; 

} 

static  size_t 

r sa Ma X s i g ( s t r u c t PgpSecKey  const  *seckey,  PgpVersion  version) 

{ 

B Struct  RSAsecPLus  const  *sec  = (struct  RSAsecPLus  *)seckey->priv; 

B Cvoid)version; 

B ASSERTRSASIG(seckey->pkALg); 

B return  (bnBits(&sec->s.n)+7)/8  + 2; 

> 


static  int 

r sa S i g n ( s t r u c t PgpSecKey  *seckey,  struct  PgpHash  const  *h,  byte  const  *hash, 
B byte  *sig,  size_t  *sigLen,  struct  Pg p Ra ndomC o n t e x t const  *rc, 

B PgpVersion  version) 

{ 


B Struct  RSAsecPLus  *sec  = (struct  RSAsecPLus  *)seckey->priv; 

B struct  BigNum  bn; 

B unsigned  t; 

B i n t i ; 


B /*  We  don't  need  these  arguments,  although  other  algorithms  may...  */ 

B (void)rc; 

B (void)version; 


B ASSERTRSASIG(seckey->pkALg); 

B if  ( s e c-> L o c ked ) 

B B return  PGPERR_KEY_I SLOCKED; 


B t = h-> D E R p r e f i X s i z e ; 

B if  (t+h->hashsize  > rsaHaxsig(seckey,  version)) 

B B return  PGPERR_PUBKEY_TOOSHALL; 

B memcpy(sig,  h-> D E Rp r e f i x , t); 

B memcpy ( s i g+t , hash,  h-> ha s h s i z e ) ; 

B t +=  h->hashsize; 

B bnBegin(&bn); 


B 

B 

B 

B 

B 

B 

B 

fl 


i = r s a P r i va t e E n c r y p t ( &bn , sig,  t,  &sec->s); 
memset(sig,  0,  t); 
if  (i  >=  0)  { 

B t=bnBits(&bn); 

B sigC0D  = (byte)(t  >>  8 & 255); 

B s i g m D = (byte)(t  & 255); 

B t=(t+7)/8; 

B b n E x t r a c t B i gBy t e s ( &b n , sig+2,  0,  t); 


B 

B 

B 


B 


B if  (siglen) 

B B *sigLen=(size_t)t+2; 

B i = 0; 

> 
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n bnEnd (&bn  ) ; 

n returni; 

> 

/* 

* Re-encrypt  a PGpSecKey  with  a new  urn  a PgpSecKey  into  a secret  key. 

* A secret  key  is,  after  a non-specific  prefix: 

* 0 1 Version  (=  2 or  3) 

* 1 4 Timestamp 

* 5 2 Validity  (=0  at  present) 

* 7 1 Algorithm  (=1  for  RSA) 


★ 

The  following: 

* 

0 

2 + u 

HPI  for  modulus 

* 

2 + u 

2 + v 

MPI  for  exponent 

* 

4 + u + v 

1 

Encryption  algorithm 

(0  for  none,  1 

for  IDEA) 

★ 

5 + u + v 

t 

Encryption  IV:  0 or  8 

bytes 

* 

5+t+u+v 

2 + w 

HPI  for  d 

★ 

7+t+u+v+w 

2 + x 

HPI  for  p 

* 

9+t+u+v+w+x 

2 + y 

HPI  for  q 

★ 

1 1 +t+u+v+w+x+y 

2 + z 

HPI  for  u 

* 

13+t+u+v+w+x+y+z 

2 

Checksum  (big-endian 

sum  of  all  the 

bytes ) 

* 

1 5+t+u+v+w+x+y+z 

★ 


* The  Encryption  algorithm  is  the  cipher  algorithm  for  the  old-style 

* s t r i ng- t o- key  conversion.  For  the  new  type,  it's  255,  then  a cipher 

* algorithm,  then  a s t r i ng- 1 o- key  algorithm  ( va r i a b I e- I e ng t h ) , 

* then  the  encryption  IV.  That's  16  bytes  plus  the  s t r i ng - t o- key 

* conversion  length. 

* 

* On  initial  key  generation  we  rely  on  calling  this  with  env=NULL  being 

* OK  if  phrase  = Nl)LL. 

*/ 


i n t 

r sa C ha nge Loc k ( s t r u c t PgpSecKey  *seckey,  struct  PgpEnv  const  *env, 
n struct  PgpRandomContext  const  *rc,  char  const  *phrase,  size_t  plen) 

{ 

n struct  RSAsecPlus  *sec  = (struct  RSAsecPlus  * ) s e c key->p r i v ; 


Q 

struct 

Pg p S t r i ngToKey  *s2k  = NULL;n  /* 

Shut 

up 

warnings 

*/ 

n 

struct 

PgpCipher  const  *cipher  = NULL;n  /* 

Shut 

up 

warnings 

*/ 

n 

struct 

PgpCf bContext  *cfb  = NULL;n  /* 

This 

i s 

realy  needed  */ 

□ 

byte  * 

p; 

Q 

intoldf=0;nn  n n /* 

Shut 

up 

warni ngs 

*/ 

n unsigned  len; 

n unsigned  checksum; 

n ASSERTRSA(seckey->pkAlg); 

n if  ( s e c ->  I oc ked ) 

n n return  PG PE RR_KE Y_ I S LOC KE D ; 


n 

□ 

D 

n 

n 

D 

n 

Q 


len  = b nBy t e s ( & s e c-> s . n ) + bnBy t e s ( & s e c->s . e ) + 
bnBy t es ( &se c->s . d ) + bnBy t e s ( & s e c->s . p ) + 
bnBytes(&sec->s.q)  + bnBytes(&sec->s.u)  + 15; 
if  (phrase)  ( 

n s2k  = pgpS2Kdef a u I t V2 ( env,  rc); 

n if(!s2k) 

n n return  PG PE R R_NOM EH ; 

n cipher  = pg p C i ph e r D e f a u 1 1 Key V2 ( e n v ) ; 
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n 

B 

pgpAssert(cipher); 

n 

B 

i f ( 

! c i ph  e r ) { 

Q 

B 

a 

pgpS2Kdestroy(s2k) ; 

a 

B 

□ 

return  PGPERR_N0MEM; 

□ 

B 

} 

n 

fl 

1 e n 

+=  c i p h e r-> b 1 0 c ks i z e ; 

s 

B 

c f b 

= pgpCfbCreate(cipher); 

n 

B 

if  ( 

!cfb)  { 

□ 

B 

□ 

pgpS2Kdestroy(s2k); 

n 

B 

a 

return  PG P E R R_N0M EM ; 

D 

B 

} 

□ 

B 

oldf 

= pgpS2Kis0ldVersCs2k); 

a 

B 

i f ( 

loldf  ) 

u 

B 

n 

len  +=  1 + s2k->enco 

a 

> 

n 

P = 

sec- 

■>c  rypt  key; 

a 

1 f 

( L e n 

> sec->ckalloc)  { 

n 

B 

P = 

(byte  * ) pg pMemR e a 1 1 0 c ( p , 

n 

B 

if  ( 

!p)  { 

□ 

B 

B 

pgpCfbDestroy(cfb); 

□ 

B 

B 

pgpS2Kdestroy(s2k); 

D 

B 

B 

return  PG P E R R_N0M EH ; 

□ 

B 

> 

Q 

B 

sec- 

>cryptkey  = p; 

B 

B 

sec- 

>ckalloc  = (size_t)len; 

B 

> 

B 

sec 

->cklen  = 

len; 

B 

/* 

Okay, 

no 

more  errors  possible! 

Start  installing  data  */ 


p +=  pg  pBn  Pu  t P I a i n ( &s  e c ->  s . n , p); 
p +=  pgpBn Pu t P I a i n ( &se c->s . e,  p); 


B 

/* 

Encryption  parameters  */ 

B 

if 

(!  phrase)  { 

B 

B 

* p + + = 

0;n  /*  Unencrypted  */ 

fl 

> 

else  { 

fl 

fl 

if  (oldf)  { 

B 

fl 

B 

*p++  = ci pher->type; 

fl 

fl 

> else 

{ 

B 

fl 

fl 

*p++  = 255; 

B 

fl 

n 

*p  + + = c i ph e r-> t y pe  ; 

fl 

fl 

fl 

memcpy(p,  s 2 k->e n c od i n g , s2 k->encode 1 en  ) ; 

B 

B 

fl 

p +=  s2k->encodelen; 

B 

fl 

> 

B 

B 

/*  Create  IV  */ 

fl 

fl 

pg p Ra n d omGe t By t e s ( r c , p,  c i p h e r->b  1 o c ks i z e ) ; 

fl 

fl 

/ * Use 

data  buffer  as  temp  holding  space  for  key  */ 

B 

fl 

pg p A s s e r t ( s e c -> c ka 1 1 0 c - c i p h e r->b 1 0 c ks  i z e >=  cipher- 

B 

fl 

pg p S t r i ng ToKey ( s 2 k,  phrase,  plen,  p+ c i p h e r->b  1 o c ks i 

B 

fl 

B 

cipher->keysize); 

B 

fl 

pg p C f b I n i t ( c f b , p+ c i p h e r ->b 1 o c k s i z e , p); 

fl 

fl 

pgpS2Kdestroy(s2k); 

B 

B 

p +=  c i 

pher->blocksi ze; 

fl 

fl 

/ * Wipe 

key  * i mme d i a t e 1 y * */ 

memsetCp, 


ci pher->keysi ze  ) ; 


a /*  Now  install  d,  p,  q and  u,  encrypted  */ 
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n checksuni  = 0; 

n P +=  pgpBnPutO Ld (&sec->s . d, 

n P +=  pgpBnPu t 0 L d { &se c->s . p, 

n p +=  pg pBn Pu t 0 L d ( & s e c-> s . q , 

n p +=  pg pBn Pu t 0 L d ( & s e c -> s . u , 

D pg p C h e c k s umPu t 0 L d ( c h e c k s um, 

n p +=  2; 

n pg p A s s e r t ( ( p t r d i f f _ t ) L e n == 

n if(cfb) 

n n pg  p C f b D e s t roy  ( c f b ) ; 

n return  0;n  /*  Success  */ 

> 

static  size_t 

r sa S e cBu f f e r Le n g t h ( s t r u c t PgpSecKey  const  *seckey) 

{ 

a struct  RSAsecPLus  const  *sec  = (struct  RSAsecPLus  *)seckey->priv; 

n return  sec->ckLen; 

> 


p. 

cf  b. 

&checksum) ; 

p. 

c f b , 

Schecksum) ; 

p. 

cf  b. 

Schecksum); 

p. 

c f b , 

Schecksum); 

p. 

cf  b) 

r 

p - s e c-> c r y p t key ) ; 


static  void 

r sa S e c ToBu f f e r ( s t r u c t PgpSecKey  const  *seckey,  byte  *buf) 

{ 

a struct  RSAsecPLus  const  *sec  = (struct  RSAsecPLus  * ) s e c key->p r i v ; 

n memcpyLbuf,  sec->cryptkey,  sec->ckLen); 


a 

#if  0 
n 

D 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

a 

□ 

□ 

#endi f 
> 


/*  Return  onLy  a L go r i t hm-d e pe nde n t portion  */ 


(ver  > PGPVERSI0N_2_6 ) 

ver  = PGPVERSI0N_2_6; 


i f 
n 

eLse  if  (ver  < 


PGPVERSION  2) 


n ver  = PG P V E R S I 0N_2 ; 

bufC0D  = (byte)ver; 
bufCID  = (byte) (tstamp  >>  24); 
bufC2D  = (byte)(tstamp  >>  16); 
bufC3D  = ( by t e ) ( t s t amp  >>  8); 
bufC4D  = ( by t e ) t s t amp; 

/*  Round  vaLidity  up  to  the  nearest  day  = 60*60*24  seconds  */ 

vaLidity  = (vaLidity  + 86399 ) /86400; 

bufLiSD  = ( by  t e ) ( va  L i d i t y >>  8); 

bufC6]  = (byte)vaLidity; 

bufCr:  = PGP_PKALG_RSA; 


#i  f 
/* 


Format  of  signature  packets: 

Offset  Length  Meaning 

0 1 Version  byte  (=  2 or  3). 

1 1 X,  Length  of  foLLowing  materiaL  incLuded  in  MD5  (= 

2 1 Signature  type  (=0  or  1) 

3 4 32-bit  timestamp  of  signature 

HD5  additionaL  materiaL  stops  here,  at  offset  2+x  
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* 

2 + x 

8 

KeylD 

* 

1 0 + x 

1 

PK  aLgorithm  type  (1  = RSA) 

* 

11+x 

1 

MD  aLgorithm  type  (1  = MD5) 

★ 

1 2 + x 

2 

First  2 bytes  of  message  digest 

* 

1 4 + x 

2+y 

HPI  of  PK-encrypted  integer 

★ 

1 6+x+y 

*/ 

static  int 

rsa S 1 g Va M da t e ( i nt  type,  byte  const 
{ 

n unsigned  extra,  bits; 

n struct  PgpHash  const  *hash; 


'^sig,  size_t  Len) 


n if(Len<1) 

n H return  PGPERR_SIG_T00SH0RT; 

n if  (sig:0]  !=  PGPVERSI0N_2  &&  sigC0]  !=  PG P V E R S I 0N_ 2 _6 ) 

n n return  PG P E R R_ S I G_B A D V E R S I 0 N ; 

n if(Len<2) 

n a return  PGPERR_SIG_TOOSHORT; 

n extra  = sigCI]; 

n if  (Len  < 11+extra) 

n n return  PGPERR_SIG_T00SH0RT; 

n if  (sig:i0+extra:  !=  PG P_ PKA LG_ R S A ) 

n n return  PGPERR_SIG_BADALGORITHH; 

n hash  = h a s h By N umb e r ( s i g C 1 1 +ex t r a 3 ) ; 

n if(!hash) 

n n return  PGPERR_SIG_BADALGORITHH; 

n if  (Len  < 16+extra) 


n n return  PGPERR_SIG_T00SH0RT; 

a bits  = ( ( u n s i g n ed ) s i g C 1 4 + ex t r a D <<8 ) + s i g C 1 5 + ex t r a 3 ; 

n if  (Len  !=  1 6+e x t r a+ ( b i t s+7 ) / 8 ) 

n n return  Len  < 1 6+e x t r a + ( b i t s+7 ) / 8 ? PG P E RR_ S I G_T 00 S H 0 RT  : 

n n PGPERR_SIG_T00L0NG; 

n if  (bits  8&  s i g C 1 6+e x t r a D >>  (bits  8 7)  !=  1) 

n n return  PG P E R R_ S I G_B I T S W RO NG ; 

n return0; 

} 

#endif  /*  0 */ 


/*  FiLL  in  secret  key  structure  */ 
void 

r sa F i L L Se cKey ( s t r u c t PgpSecKey  *seckey,  struct  RSAsecPLus 


n 

seckey->pkALgn 

_ 

PGP_PKALG_RSA; 

Q 

seckey->privn 

sec; 

Q 

#if  0 

seckey->destroy 

= 

rsaSecDest  roy; 

n 

# e n d i f 

seckey->id8 

rsaSecld8; 

Q 

seckey->pubkey 

= 

rsaPubkey; 

n 

seckey->i stocked 

= 

rsalsLocked; 

n 

sec  key->un  Lock 

= 

rsaUnLock; 

u 

seckey->Lock 

= 

rsaLock; 

a 

seckey->maxdecrypted 

= 

rsaMaxdecrypted; 

n 

sec  key->de  c ry p t 

= 

rsaOecrypt; 

n 

seckey->maxsig 

= 

rsaMaxsig; 

a 

seckey->sign 

= 

r s a S i g n ; 

*sec ) 
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n 

□ 

a 

> 


seckey->changeLock 

seckey->bufferLength 

seckey->toBuffer 


rsaChangeLock; 

rsaSecBufferLength; 

rsaSecToBuffer; 


struct  PgpSecKey  * 

rsa Se c F romBuf ( by t e const  *buf,  size_t  size,  int  *error) 
{ 


□ 

struct 

PgpSecKey  * 

seckey; 

n 

struct 

RSAsecPLus 

*sec; 

Q 

int  err  = PGPERR_N0MEH; 

n 

byte  * 

c r y p t k; 

n 

bnInitC); 

n 

c ry pt  k 

= (byte 

*)pgpMeniAL  loc(si  ze); 

n 

if  { c rypt  k ) { 

n 

B 

sec  = 

(struct  RSAsecPLus  * ) pg pMe m A L 1 o c ( s i z e o f ( * s e c ) ) ; 

Q 

B 

if  (sec)  { 

n 

B 

B 

seckey  = (struct  PgpSecKey  *) 

n 

B 

B 

B 

pgpMemAL  Loc(si zeof(*seckey) ) ; 

n 

B 

B 

if 

(seckey)  { 

n 

B 

B 

B 

memcpy ( c rypt k,  buf,  size); 

n 

B 

B 

B 

bnBegin(&sec->s.n); 

□ 

B 

B 

B 

bnBegin(&sec->s.e); 

n 

B 

B 

B 

bnBegin(&sec->s.d); 

□ 

B 

B 

B 

bnBegin(&sec->s.p); 

n 

B 

B 

B 

bnBegin(&sec->s.q); 

D 

B 

B 

B 

bnBegin(6sec->s.u); 

n 

B 

B 

B 

s e c->c r y p t ke y = cryptk; 

D 

B 

B 

B 

sec->ckLen  = sec->ckaLLoc  = size; 

n 

B 

B 

B 

sec-> Locked  = 1; 

D 

B 

B 

B 

/*  We  onLy  need  this  to  try  unLocking...  */ 

n 

B 

B 

B 

s e c key->p k A L g = PGP_PKALG_RSA; 

n 

B 

B 

B 

seckey->priv  = sec; 

n 

B 

B 

B 

Q 

B 

B 

B 

if  ( r sa  L)  n L 0 c k ( s e c key  , NULL,  NULL,  0)  >=  0) 

n 

B 

B 

B 

n if  ( r s a KeyTooB i g (NULL,  &sec->s))  ( 

n 

B 

B 

B 

n n err  = PG P E R R_KE Y_U N S U PP; 

Q 

B 

B 

B 

n } e L s e ( 

n 

B 

B 

B 

n n rsaFiLLSecKey(seckey,  sec); 

n 

B 

B 

B 

n n *error=0; 

n 

B 

B 

fl 

n n return  seckey;n  /*  Success! 

Q 

B 

B 

B 

n } 

n 

B 

B 

B 

> 

B 

B 

B 

B 

/*  Ka-boom.  DeLete  and  free  everything.  */ 

B 

B 

B 

fl 

memset ( c rypt k,  0,  size); 

B 

B 

B 

B 

memset(sec,  0,  s i zeof ( *sec  ) ) ; 

B 

B 

B 

B 

pgpHemFree(seckey); 

B 

B 

B 

> 

B 

B 

B 

pgpMemFree(sec); 

B 

B 

> 

B 

B 

pgpMemFree(cryptk) ; 

B 

> 

fl 

*e  r ro  r 

= err; 

B 

return 

NULL; 

> 
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#endif  /*!N0  RSA*/ 
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/* 

* pgpRS AKey . h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights 

* 

* $Id:  pg p R S AKey . h , V 1.3. 2. 2 1997/06/09  23:46:36  quark  Exp  $ 

*/ 

#ifndef  PGPRSAKEY.H 
^define  PGPRSAKEY.H 

#incLude  "pgpLlsuaLs.h''n  /*  For  byte  */ 

#incLude  <stddef.h>n  /*  For  size.t  */ 

#ifdef  cpLuspLus 

extern  "C"  { 
ttendi  f 

struct  PgpPubKey; 
struct  PgpSecKey; 
struct  PgpRandomCont ext ; 

struct  PgpPubKey  * r s a Pub F r omBu f ( by t e const  *buf,  size.t  Len,  int 
struct  PgpSecKey  * r sa S e c F romBu f ( by t e const  *buf,  size.t  Len,  int 
int  rsaPubKeyPref i xSi zeCbyte  const  *buf,  size.t  size); 

struct  PgpSecKey  * 

r sa S e cGene r a t e ( un s i gned  bits,  BooLean  fastgen, 
a struct  Pg p Ra ndomC on t ex t const  *rc, 

n int  p r og r e s s ( VO i d *arg,  int  c),  void  *arg,  int  *error); 

int  r sa C ha nge Loc k ( s t r uc t PgpSecKey  *seckey,  struct  PgpEnv  const 
n struct  PgpRandomContext  const  *rc,  char  const  *phrase,  s 

#ifdef  cpLuspLus 

> 

#end i f 

#endif  /*  PGPRSAKEY.H  */ 
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/* 

* pgpRSAKeyGen  . c 

* 

* Generates  an  RSA  Key  Pair.  Broken  out  from  pgpRSAKey.c  BAT  6/4/97 

* The  breakout  is  so  that  we  can  elect  not  to  ship  this  in  the  source. 

* 

* $Id:  pgpRSAKeyGen . c , V 1.1. 2.1  1 997/06/09  23:46:38  quark  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e nd i f 

#if  (!N0  RSA  &S  !N0  RSA  KEYGEN) 


#include 

"pgpDebug.h" 

#i nc lude 

"pgpKeyHisc.h 

#i nc  lude 

"pgpESK. h" 

#include 

"pgpRSAKey. h" 

# i n c 1 ud  e 

"pgpRSAGlue.h 

# i n c 1 u d e 

" b n . h " 

#include 

"pgpCFB. h" 

//include 

"pgpCipher.h" 

^include 

"pgpHash.h" 

//include 

"pgpHem. h" 

#i nc lude 

"pgpErr.h" 

# i n c 1 u d e 

"bnprime.h" 

#i nc lude 

" pgpPubKey . h " 

#include 

"pgpRndom. h" 

//include 

"pgpStr2Key.h 

^include 

"pgpUsuals.h" 

#define  RS A_ D E F AU LT_ E X PON E NTn  17 
/* 

* PgpRandomContext  to  use  for  primeGen  callback.  We  really  should  enhance 

* primeGen  to  pass  an  arg  parameter  along  with  the  limit  value. 

*/ 

static  struct  PgpRandomContext  const  *staticrc; 

/*  Random  callback  for  primeGen  */ 

static  unsigned  r a nd c a I I ba c k ( u n s i g n e d limit) 

{ 

n return  pg pRa nd omRa n g e ( s t a t i c r c , limit); 

} 

/* 

* Generate  an  RSA  secret  key  with  modulus  of  the  specified  number  of  bits. 

* We  choose  public  exponent  from  the  ^define  value  above. 

* The  high  two  bits  of  each  prime  are  always 

* set  to  make  the  number  more  difficult  to  factor  by  forcing  the 

* number  into  the  high  end  of  the  range. 

* Hake  callbacks  to  progress  function  periodically. 

* Secret  key  is  returned  in  the  unlocked  form,  with  no  passphrase  set. 

* fastgen  is  an  unused  flag  which  is  used  by  the  discrete  log  keygens  to 

* allow  use  of  canned  primes. 

*/ 

struct  PgpSecKey  * 
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rsaSecGenerateCunsi gned  bits.  Boolean  fastgen, 
n struct  Pg p Ra ndomC on t e X t const  *rc, 

n int  p rog re s s ( VO i d *arg,  int  c),  void  *arg,  int  *error) 

{ 

n struct  PgpSecKey  *seckey; 

n struct  RSAsecPLus  *sec; 

a structBigNumt;n  n /*temporary*/ 

n unsignedent;n  n n /*Entropy*/ 

n inti; 

n int  exp  = R S A_ D E F AU LT_ E X PON E N T ; 

n (void)  fastgen; 

n *error=0; 

n /*  Initialize  local  pointers  (simplify  cleanup  below)  */ 

n seckey=NULL; 

n sec=NULL; 

n bnBegin(&t); 

n /*  Allocate  data  structures  */ 

n seckey  = (struct  PgpSecKey  * ) pg pMem A I I o c ( s i z eo f ( * s e c key ) ) ; 

n if  (Iseckey) 

n n goto  memerror; 

o sec  = (struct  RSAsecPlus  * ) pg pHemA I I o c ( s i z eo f ( * s e c ) ) ; 

n i f ( ! sec ) 

n n goto  memerror; 

□ 

n bnBeg i n ( &s e c->s . n ) ; 

n bnBegin(&sec->s.e); 

n bnBegin(&sec->s.d); 

n bnBegin(&sec->s.p); 

n bnBegin(&sec->s.q); 

n bnBegin(&sec->s.u); 

a 

n if  ( bn S e t Q ( & s e c->s . e , exp)) 

n n gotobnerror; 

n /*  Find  p - choose  a starting  place  */ 

n if  ( pg pBnG e n Ra nd ( &s e c->s . p , rc,  bits/2,  0xC0,  1,  bits/2-3)  < 0) 

n n goto  bnerror; 

n /*  And  search  for  a prime  */ 

n staticrc  = rc; 

H i = bnP r i meGen ( 8se c->s . p , r a n d c a I I ba c k,  progress,  arg,  exp,  0); 

n i f ( i < 0 ) 

n n gotobnerror; 

n pg p A s s e r t ( bnModQ ( & s e c-> s . p , exp)  !=  1); 


n 

/* 

Make 

sure  p and  q aren' 

't  too  close 

together  */ 

n 

/* 

Bits 

of  entropy  needed 

to  generate 

q . * / 

n 

ent 

II 

cr 

its+1)/2  - 3; 

n 

/* 

Pick 

random  q until  we 

get  one  not 

too  close  to  p */ 

□ 

do 

{ 

n 

n 

/*  Visual  separator  between  the  two  progress  indicators 

n 

D 

if  (progress) 

n 

n 

n progress(arg,  ' '); 

CCCHK:4dd819b5144aa4481f223c6c094Ab82d0cc1aaec44002cb33ee43f79f9354167fD] 
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pg  p RS  AKeyGen . c 


n 

n 

a 

n 

a 

n 

n 

a 

a 

a 

a 

a 

n 

n 

n 

□ 

n 

□ 

n 

Q 

n 

D 

a 

a 

a 

□ 

Q 

n 

Q 

□ 

n 

D 

o 

a 

n 

□ 

n 

n 

□ 

n 

n 

B 

B 

B 

B 

B 

B 

B 

LCCHK 
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n if  ( pg pBnGen Ra nd ( &s e c->s . q,  rc,  (bits+1)/2,  0xC0,  1,  ent)  < 0) 

B B gotobnerror; 

n ent  = 0;n  /*  No  entropy  charge  next  time  around  */ 

a if  ( b n C opy ( & s e c-> s . n , &sec->s.q)  < 0) 

n B gotobnerror; 

n if  ( bnS ub ( 8s e c->s . n,  8sec->s.p)  < 0) 

n B gotobnerror; 

n /*  Note  that  bnSub(a,b)  returns  abs(a-b)  */ 

> while  ( bnB i t s ( 8 s e c -> s . n ) < bits/2-5); 

i = bn P r i me G e n ( 8s e c -> s . q , r a nd c a L L ba c k,  progress,  arg,  exp,  0); 
if  ( i < 0 ) 

n goto  bnerror; 

pgpAssert(bnHodQC8sec->s.p,  exp)  !=  1); 

/*  Wash  the  random  number  pool.  */ 
pgpRandomSti rCrc); 

/*  Ensure  that  q is  larger  */ 
if  (bnCmp(8sec->s . p,  8sec->s.q)  > 0) 
n b n S wa p ( 8 s e c -> s . p , 8sec->s.q); 

/* 

* Now  we  compute  d, 

* the  decryption  exponent,  from  the  encryption  exponent. 

*/ 

/*  Decrement  q temporarily  */ 

( VO i d ) b n S u bQ ( 8 s e c -> s . q , 1); 

/*  And  u = p-1,  to  be  divided  by  gcd(p-1,q-1)  */ 
if  (bnCopy(8sec->s . u,  8sec->s.p)  < 0) 
n goto  bnerror; 

(void)bnSubQ(8sec->s.u,  1); 

/*  Use  t to  store  gcd(p-1,q-1)  */ 
if  (bnGcd(8t,  8sec->s.q,  8sec->s.u)  < 0)  { 
n goto  bnerror; 

> 

/*  Let  d = Cp-1)  / gcd(p-1,q-1)  (n  is  scratch  for  the  remainder)  */ 
i = bn D i vMod ( 8 s e c-> s . d , 8sec->s.n,  8sec->s.u,  8t); 
if  ( i < 0 ) 

n goto  bnerror; 

pg  p A s s e r t ( b nB i t s ( 8 s e c ->s  . n ) ==  0); 

/*  Now  we  have  q-1  and  d = (p-1)  / gcd(p-1,q-1)  */ 

/*  Find  the  product,  n = lcm(p-1,q-1)  = c * d */ 
if  ( bnMu I ( 8s e c->s . n,  8sec->s.q,  8sec->s.d)  < 0) 
n goto  bnerror; 

/*  Find  the  inverse  of  the  exponent  mod  n */ 
i = bn  I nv ( 8se c->s . d,  8sec->s.e,  8sec->s.n); 
if  ( i < 0 ) 

n goto  bnerror; 

pgpAssert(!i);n  /*  We  should  NOT  get  an  error  here  */ 

/* 

* Now  we  have  the  comparatively  simple  task  of  computing 
dae9539cdd2320097765ddb92cc0de69ee6b8116da299731444524995feec1feb]D 
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n * u = p^-1  mod  q. 

n * / 


n /*  But  it  *wouLd*  be  nice  to  have  q back  first.  */ 

n ( VO i d ) b n Adda ( &s e c-> s . q , 1); 


n /*  Now  compute  u = p*-1  mod  q */ 


n 

i = 

bn  I n V ( 6s e c -> s . u , 8sec->s.p, 

8sec->s.q); 

□ 

i f 

(i  < 0) 

n 

n 

goto  bnerror; 

n 

pg p A s s e r t ( ! i ) ; n /*  p and  q had 

better  be  relatively 

n 

/* 

And  finally,  n = p * q */ 

n 

i f 

(bnHu 1 (8sec->s . n,  8sec->s.p, 

8sec->s . q)  < 0) 

n 

n 

goto  bnerror; 

n 

/* 

And  that's  it...  success!  */ 

n 

/* 

Fill  in  structs  */ 

n 

sec 

->cryptkey  = NULL; 

n 

sec 

->ckalloc  = sec->cklen  = 0; 

D 

sec 

->  locked  = 0; 

n 

r sa F i 1 L S e c Key ( s e c key , sec); 

n 

/* 

Fill  in  cryptkey  structure. 

unencrypted  */ 

Q 

r sa C ha ng e Lo c k (seckey,  NULL,  rc 

, NULL,  0); 

Q 

goto  done; 

prime! 


*/ 


b n e r r o r : 


n 

bnEnd(8sec->s.n); 

□ 

bnEndC8sec->s.e); 

n 

bnEnd(8sec->s.d); 

Q 

bnEnd(8sec->s.p); 

n 

bnEnd(8sec->s.q); 

a 

bnEnd(8sec->s.u); 

n 

/*  Fall  through  */ 

meme  r r 0 r : 

n 

pgpHemFree(seckey); 

n 

pgpMemFree(sec)  ; 

n 

seckey  = NULL; 

n 

*error  = PGPERR_N0MEM 

□ 

done  : 

/*  Fall  through  */ 

a 

bnEnd(8t); 

n 

return  seckey; 

> 

#endi f 
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/* 

* pgpSig.c 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved 

* 

* $Id:  pgpSig.c, V 1.4. 2. 2 1997/06/07  09:51:31  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 


L ude 

"pgpDebug.h" 

L u d e 

"pgpPktList.h" 

L ude 

" pg  pS i g . h " 

L ude 

"pgpAnnotate.h 

L ude 

"pgpHash.h" 

L ude 

"pgpErr.h" 

L ude 

" pgpPubKey . h " 

L ude 

"pgpUsuaLs.h" 

//define  S I G VE  R S 1 0 N_1  P A S S ( PG  P V E R S 1 0 N_2  _6  + 1) 

//define  S I G BU  F_1  P AS  S ( b , L ) ((L)  ==  13) 

#define  S I G PKT_1 P AS S ( p ) S I GBU F_ 1 P A S S ( ( p ) ->p k t . b u f , ( p ) ->p k t . L e n ) 


struct  PgpSig  { 
a struct  PktList  pkt; 
>; 


/* 

* 

* 


Format  of  one-pass  signature  packets: 


* 

Offset 

Length 

Meaning 

* 

0 

1 

Version  byte  (=3) 

* 

1 

1 

Signature  type 

* 

2 

1 

Hash  ALgorithm 

* 

3 

1 

PK  ALgorithm 

* 

4 

8 

Keyl  D 

★ 

* 

12 

1 

nested  f Lag 

★ 

* Format  of  reguLar  si 

gnature  packets : 

* 

Offset 

Lengt  h 

Meaning 

★ 

0 

1 

Version  byte  (=  2 or  3). 

* 

1 

1 

X,  Length  of  foLLowing  materiaL 

incLuded  in  MD5  ( 

* 

2 

1 

Signature  type  (=0  or  1) 

★ 

3 

4 

32-bit  timestamp  of  signature 

■k  _ _ _ . 

HD5 

additionaL  materiaL  stops  here,  at  offset  2+x  

★ 

2 + x 

8 

Keyl  D 

•k 

1 0 + x 

1 

PK  aLgorithm  type  (1  = RSA) 

* 

1 1+x 

1 

MD  aLgorithm  type  (1  = MD5) 

* 

12  + x 

2 

First  2 bytes  of  message  digest 

(16-bit  checksum) 

★ 

1 4 + x 

2 + y 

MPI  of  PK-encrypted  integer 

* 

1 6+x+y 

*/ 

static 

i n t 

C[CHK:63e298aa369991c03ed55a51113b77021189bf5006825433e1777bd77b79ce38a:] 
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s i g Va L i da t e ( by t e const  *sig,  size_t  Len,  byte  *pkaLg) 
{ 

B unsigned  extra,  bits; 

B byte  aLg; 

B struct  PgpHash  const  *hash; 


Q 

if 

( p ka  L g ) 

n 

B 

*pkalg  = 0; 

a 

i f 

(Len  < 1 ) 

n 

B 

return  PGPERR_SIG_T00SH0RT; 

n 

if 

( SIGBUF_1 PASS  (si g,  Len))  ( 

n 

B 

/*  One-pass  signature  packet  */ 

u 

B 

if  (Len  < 13) 

tt 

B 

n return  PG P E R R_S I G_T00 S H 0 RT ; 

n 

B 

if  (Len  > 13) 

a 

B 

n return  PG P E R R_S I G_T00 LONG ; 

n 

B 

alg  = sigC33; 

n 

B 

if  (pkaLg) 

B 

B 

a *pkaLg  = aLg; 

B 

B 

hash  = pgpHashByNumber(sigE23); 

B 

B 

if  ( ! hash  ) 

B 

B 

n return  PG P E R R_B A D_H A S H N UH ; 

B 

B 

return  0; 

B 

> e 

Lse  if  (sigC03  ==  PG PV E R S I 0N_3 ) E 

B 

B 

/*  New-format  key  signature  packet 

B 

B 

return  0; 

B 

> 

B 

i f 

(sig:03  !=  PGPVERSI0N_2  &S  sigC03  ! 

B 

B 

return  PG P E R R_S I G_B A D V E RS I ON ; 

B 

if 

(Len  < 2 ) 

B 

B 

return  PG P E RR_S I G_T00 S HORT ; 

B 

extra  = sigC13; 

B 

i f 

(Len  < 11+extra) 

B 

a 

return  PG P E R R_ S I G_T00 S H 0 RT ; 

B 

a L g 

= s i g C 1 0 + ex t r a 3 ; 

B 

i f 

(pkaLg) 

B 

a 

*pkalg  = aLg; 

#i  f 

0 

validated  in  pgpRngPars.c  */ 


PGPVERSI0N_2_6) 


B if  (alg  !=  PGP_PKALG_RSA) 

B n return  PG P E R R_S I G_B A D A LGO R I T HH ; 

#endi f 

B hash  = pgpHa shBy Numbe r ( s i g C 1 1 +ex t ra D ) ; 

B if  ( ! hash) 

B n return  PGPERR_BAD_HASHNUH; 

B /*  This  part  here  gets  RSA-specific  */ 

B if  (Len  < 16+extra) 

B B return  PGPERR_SIG_T00SH0RT; 

B if  (a Lg==PGP_PKALG_RSA)  { 

B B bits  = C ( u n s i g n ed ) s i g C 1 4 + ex t r a 3 <<8 ) + s i g C 1 5 + ext ra 3 ; 

B n if  (Len  !=  1 6+ext ra+ ( b i t s+7 ) /8 ) 

n n B return  Len  < 1 6+e x t r a+ ( b i t s+7 ) / 8 ? PG PE R R_S I G_T00 S H ORT 

n n n a B n n : PG P E RR_S I G_TOO LONG ; 

B B if  (bits  &&  s i g E 1 6 + e X t r a 3 >>  ((bits-1)  & 7)  !=  1) 

B B B return  PG PE R R_ S I G_B I T S W RONG ; 

B > 

B return  0; 

} 
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static  struct  PgpSig  ** 
s i g L i s t Ta i L ( s t r u c t PgpSig  **head) 

{ 

0 while  (*head) 

H n head  = (struct  PgpSig  **  ) & ( *h e a d ) ->p k t . n e x t ; 
n return  head; 

> 

1 n t 

pg p S i g S i gTy pe  (byte  const  *buf,  size_t  Len) 

{ 


□ 

int  i ; 

□ 

1 

= s i g Va  L 

idate(buf,  Len,  NULL); 

□ 

i f 

(i  < 0) 

n 

a 

return 

i ; 

n 

i f 

(SIGBUF 

_1PASS(buf,  Len))  { 

n 

n 

return 

buf Cl :; 

□ 

> 

else  if 

(bufC0:  ==  PGPVERSI0N_3) 

□ 

n 

return 

b u f C 1 : ; 

n 

> 

n 

i f 

(buf Cl  : 

< 1 ) 

n 

n 

return 

PGPERR_SIG_BADEXTRA; 

n 

return  bufC2D  8 255; 

> 

i n t 

pgpSigAdd  (struct  PgpSig  **sigList,  int  type,  byte  const  *buf,  size_t  Len) 
{ 

n Struct  PgpSig  *sig; 

n struct  PgpSig  **psig2; 

n byte  pkalg; 

n byte  *b2; 

n int  err; 

n switch  (type)  { 

case  PGPANN_SIGNED_SIG : 
n n err  = sigVaLidate  (buf,  Len,  &pkaLg); 

n n if  (err) 

a n n return  err; 

n n sig  = (struct  PgpSig  *)pgpPktListNew(pkaLg,  buf,  Len); 
n n i f ( ! s i g ) 

n n n return  PGPERR_NOMEH; 

a a *sigListTaiL(sigList)  = sig; 
a a return  0; 

a case  PG P AN N_S I G N E D_ S I G2 : 

an/*  Second  packet,  should  be  merged  with  an  existing  one  */ 
a a if  (SIGBUF_1 PASS(buf , Len)) 

a a n return  PG P E R R_ S I G_B A DT Y P E ; 

a a if  (bufC13  !=  5)  /*  extra  bytes  must  be  standard  */ 

a a n return  PGPERR_SIG_BADTYPE; 

a a err  = sigVaLidate  (buf,  Len,  SpkaLg); 

a a if  (err) 

a a n return  err; 

a a /*  Search  for  matching  1-pass  signature  on  the  List  */ 
a a for  (psig2=siglist;  *psig2; 

a a psig2  = (struct  PgpSig  ** ) 8 ( *p s i g 2 ) ->p k t . n e x t ) { 

a n n if  ( ! S I G PKT_1 P A S S ( *p s i g 2 ) ) 

[CCHK:09bd8811a0455026a33104a1cc0a8df2f00fcdcd69d4f75d799dc892ae9757127]] 
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n 

B 

B 

□ 

continue; 

□ 

B 

B 

b2 

= (*psig2)->pkt.buf; 

n 

B 

B 

i f 

(b2i:i:  !=  bufC2:)  /*  sig  type  */ 

n 

B 

B 

a 

continue; 

n 

B 

B 

i f 

(b2C2:  !=  buf Cl 1+buf Cl ::)  /*  hash 

n 

B 

B 

n 

continue; 

a 

B 

B 

i f 

(b2C3:  !=  bufC10+bufCi::)/*  pkalg 

a 

B 

B 

a 

continue; 

a 

B 

B 

i f 

( memcmp ( b2+4,  bu f +2+b u f C 1 3 , 8))  / 

a 

B 

B 

a 

continue; 

a 

B 

B 

/* 

Here  we  have  a match  */ 

B 

B 

B 

break; 

n 

B 

y 

B 

B 

/* 

Error  if  found  no  match  */ 

B 

B 

if 

( ! * 

p s i g 2 ) 

B 

B 

n 

return  PG PE R R_ S I G_B A DT Y P E ; 

n n /*  Replace  *psig2  with  new  sig  */ 

n n sig  = (struct  PgpSig  *)pgpPktListNew(pkaLg,  buf,  ten); 

n n if  ( ! s i g ) 

n n n return  PG P E R R_NOM EH ; 
n n s i g->p k t . ne X t = ( *ps i g 2 ) ->p k t . nex t ; 
n n pg p P k t L i s t F r e e On e C ( s t r u c t PktList  *)*psig2); 

a n *psig2  = sig; 

n n return  0; 

n > 

□ □ 

return  PG P E R R_S I G_B A DT Y P E ; 

> 

/*  Return  true  if  this  signature  is  followed  immediately  by  signed  data  */ 
i n t 

pgpS i gNes t F I ag ( by t e const  *buf,  size_t  len) 

{ 

n (void)len; 

n if  (SIGBUF_1 PASSCbuf , len)) 
n n return  bufC123;n/*  nest  flag  */ 
n else 

n n return  1;n  /*  always  true  for  old  packets  */ 

> 


/*  How  here  come  some  access  functions  */ 
i n t 

pg pS i g PKA Ig ( s t r uc t PgpSig  const  *sig) 

{ 

n pgpAssert(sig); 
n if  ( SIGPKT_1 PASS ( si g ) ) 
n n return  s i g ->p k t . bu f C 3 D ; 
n else 

n n return  s i g->p k t . bu f C 1 0+s i g->p kt . bu f C 1 D D ; 

> 


struct  PgpHash  const  * 
pgpS i g Ha s h ( s t r u c t PgpSig  const  *sig) 
{ 

n int  alg; 


:CCHK;4d284d7089a0a0c99e4b708ee699c0079f780846ddb95574507bb971dd45381d9:: 
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n pgpAssert(sig); 
n if  ( SIGPKT_1 PASS ( si g ) ) 
a a alg  = sig->pkt.bufC2D; 

n else 

n n aLg  = s i g ->p k t . bu f C 1 1 + s i g ->p k t . b u f C 1 ] ] ; 
n return  pg p H a s h By N umbe r ( a L g ) ; 

> 

byte  const  * 

pgpS i g Ex t r a ( s t r u c t PgpSig  const  *sig,  unsigned  *Len) 

{ 

n pgpAssert(sig); 
n if  ( SIGPKT_1 PASS ( si g ) ) { 
n n *Len=0; 

n n return  0; 

a > 

n *Len  = sig->pkt.buf[!1Il; 
n return  s i g->p k t . b u f +2 ; 

} 

word32 

pg p S i gT i me s t a mp  (struct  PgpSig  const  *sig) 

{ 

o byte  const  *extra; 

n unsigned  extralen; 

n pgpAssert  (sig); 

a if  (SIGPKT_1 PASS(sig) ) 

n n return  0; 

n extra  = pgpSigExtra  (sig,  SextraLen); 
a if  (!extra  ||  extralen  < 5) 

n n return  0; 

n return  ( ( wo r d32 ) e x t r a C 1 ] <<2 4 ) + ( ( wo r d3 2 ) e x t r a C 2 D <<1 6 ) + 
n ( ( wo rd32 ) ex t ra C3D<<8 ) + ( wo r d 32 ) e x t r a C 4 3 ; 

> 

byte  const  * 

pgpS i g I d8 ( s t r u c t PgpSig  const  *sig) 

{ 

n pgpAssert(sig); 
n if  (SIGPKT_1 PASS(sig) ) 

n n return  sig->pkt.buf+4; 
n else 

n n return  s i g->p k t . bu f +2+ s i g ->p k t . bu f C 1 ] ; 

> 

/*  Return  a count  of  the  number  of  distinct  hash  algorithms  in  the  list  */ 
unsigned 

pgpS i g D i s t i nc t Ha s h Count ( s t rue t PgpSig  const  *sig) 

{ 

n struct  PktList  const  *next; 
n unsigned  total; 

n int  alg,  nextalg; 

n for  (total  = 0;  sig;  sig  = (struct  PgpSig  const  * ) s i g->p k t . n ex t ) { 
n n total++; 

a a / * 

n n * If  another  one  later  on  the  list  has  the  same  alg, 
[[CHK:86b442889590382142aa8c8d66f29fcf7c002887a505445916c3ee6c70e8a233a:: 
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n n * don't  count  this  one. 

n n * / 

H n if  (SIGPKT_1 PASS ( si g ) ) 

a n n aLg  = sig->pkt.buf[!2Il; 

n n else 

n n n aLg  = sig->pkt.bufni1+sig->pkt.bufC1D!]; 

n n for  (next  = sig->pkt.next;  next;  next  = next -> next)  { 


n 

B 

B 

i f 

(SIGBUF_1PASS(next->buf,  next -> Len)) 

n 

B 

B 

B 

nextalg  = n ex t -> bu f C 2 3 ; 

n 

B 

B 

e L 

s e 

n 

B 

B 

B 

nextalg  = nex t ->b u f C 1 1 +n ex t ->bu f C 1 3 3 ; 

n 

B 

B 

B 

B 

B 

if 

(nextalg  ==  alg)  { 

B 

B 

B 

B 

total--; 

B 

B 

B 

B 

break; 

B 

B 

B 

> 

B 

B 

> 

n > 

n return  total; 

> 


/* 

* Return  a buffer  full  of  byte  hash  identifiers.  The  buffer  must  be 

* of  Legnth  s i g D i s t i n c t ha s h Coun t ( L en ) Length,  and  that  number  is 

* returned  for  convenience. 

*/ 


uns i gned 

pg p S i g D i s t i n c t H a s h e s ( s t r u c t PgpSig  const  *sig,  byte  *buf) 
{ 


B 

unsi 

gned  Len; 

B 

i nt 

a Lg; 

B 

for 

(len  = 0;  sig;  sig  = (struct 

B 

B 

if  (SIGPKT_1 PASS ( si g ) ) 

B 

B 

n alg  = sig->pkt.bufC23; 

B 

B 

else 

B 

B 

n alg  = s i g->p k t . b u f C 1 1 + s i g 

B 

B 

if  ( ! memch r ( buf , alg,  Len)) 

fl 

B 

n bufCLen++3  = (byte)aLg; 

B 

> 

B 

return  Len; 

/* 

* The  internal  checking  function,  not  for  public  use. 

*/ 
i n t 

pgpS i gChec kBuf ( by t e const  *sig,  size_t  Len,  struct  PgpPubKey  const  *pub, 
n byte  const  *hash) 

{ 

n unsigned  extra; 
n byte  type; 

n struct  PgpHash  const  *h; 
n if  (sigC0:  ==  PG PV E RS 1 0N_3  ) { 

n n /*  New  signature  format;  see  pgpHakeSig.c  */ 
n n extra  = (unsigned)sigC4D<<8  | sigC53; 

CCCHK:08e1d3abde555d7a072dd56a1be9fa552f6543f5bccc2b6273ea4eebb5bf17d8f]] 
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pgpSig.c 


n 

n 

extra  +=  ( u n s i g n e d ) s i g C e x t r a + 6 11  <<8 

1 sigCextra  + 7!]; 

Q 

n 

/*  Quick  rejection  test:  check  the 

given 

two  bytes 

n 

Q 

if  (memcmp  (hash,  sig+8+extra,  2)  ! 

II 

n 

n 

n return  0; 

n 

c 

h = pgpHashByNumber  (sigC3D); 

n 

n 

type  = sigC13; 

□ 

n 

/*  Skip  to  signature  data  */ 

n 

n 

extra  +=  10; 

n 

> 

else  { 

n 

n 

extra  = sigCID; 

n 

n 

/*  Quick  rejection  test:  check  the 

given 

two  bytes 

n 

n 

if  (memcmp  (hash,  s i g+1 2+ext ra , 2) 

!=  0) 

Q 

a 

n return  0; 

n 

n 

h = pgpHashByNumber  ( s i g C 1 1 +e x t r a ] ) 

r 

n 

tt 

type  = sign2D; 

□ 

o 

/*  Skip  to  signature  data  */ 

n 

a 

extra  +=  14; 

n 

y 

n 

/* 

XXX  Should  "die"  gracefully  here  */ 

pgpAssert  ( p u b-> ve r i f y ) ; 

return  pg p Pub  Key Ve r i f y (pub,  type,  sig  + extra,  Len-extra,  h,  hash); 


/* 

* Check  a signature  against  a given  public  key  and  hash. 

* Returns  0 if  it  did  not  check,  and  1 if  it  did. 

* Returns  <0  on  some  sort  of  error. 

* (The  hash  better  be  the  right  algorithm.) 

*/ 

i n t 

pg p S i g C h e c k ( s t r u c t PgpSig  const  *sig,  struct  PgpPubKey  const  *pub, 
n byte  const  *hash) 

{ 

n return  pgpSigCheckBuf(sig->pkt.buf,  sig->pkt.len,  pub,  hash); 

} 


struct  PgpSig  * 

pgpSigNext  (struct  PgpSig  const  *sig) 

{ 

n if  ( s i g ) 

n n return  (struct  PgpSig  *)sig->pkt.next; 

n return  NULL; 

} 

void 

pgpSi g FreeLi St  (struct  PgpSig  *siglist) 

{ 

n pg p P k t L i s t F r e e L i s t ( ( s t r u c t PktList  *)siglist); 

} 


/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi:  ts=4  sw=4 

[[CHK:89fdf73bc1be1a3fc5521799c26721cbde744f6aeff3553c56111b3051fffab0e:: 
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* vim:  si 
*/ 


CCCHK: 446f b1 a6c:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1618 


pgpSig.h 


/* 

* pgpSig.h 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpSig.h, V 1.3. 2.1  1997/06/07  09:51:31  mhw  Exp  $ 

*/ 

#ifndef  PGPSIG.H 
#define  PGPSIG.H 


#incLude  "pgpUsuaLs.h" 

#ifdef cpLuspLus 

extern  "C"  { 

#end  i f 

struct  PgpHash; 

#ifndef  TYPE. PGPHASH 

#define  TYPE. PGPHASH  1 

typedef  struct  PgpHash  PgpHash; 

# e nd i f 

struct  PgpPubKey; 

#ifndef  TYPE. PGPPUBKEY 

^define  TYPE. PGPPUBKEY  1 

typedef  struct  PgpPubKey  PgpPubKey; 

#end  i f 

struct  PgpSig; 

#ifndef  TYPE. PGPSIG 

^define  TYPE. PGPSIG  1 

typedef  struct  PgpSig  PgpSig; 

#endi  f 

/*  These  are  the  public  access  functions  to  the  Sig  object  */ 
int  PGPExport  pgpSigPKALg  (struct  PgpSig  const  *sig); 

struct  PgpHash  const  PGPExport  *pgpSigHash  (struct  PgpSig  const  *sig); 
byte  const  PGPExport  *pgpSigExtra  (struct  PgpSig  const  *sig,  unsigned  *Len); 
uord32  PGPExport  pgpSigTimestamp  (struct  PgpSig  const  *sig); 
byte  const  PGPExport  *pgpSigId8  (struct  PgpSig  const  *sig); 

/* 

* Check  a signature  against  a given  pubLic  key  and  hash. 

* Returns  0 if  it  did  not  check,  and  1 if  it  did. 

* Returns  <0  on  some  sort  of  error. 

* *Do*  make  sure  it's  the  right  hash  you're  passing  in. 

*/ 

int  PGPExport  pgpSigCheck  (struct  PgpSig  const  *sig, 
n struct  PgpPubKey  const  *pub,  byte  const  *hash); 

/* 

* BeLow  this  Line  are  the  internaL  functions  that  are  used  onLy 

* inside  the  PGP  Library.  AppLciations  probabLy  shouLdn't  be 

* using  these  functions. 

*/ 
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/* 

* Internal  variant  of  pgpSigCheck,  not  for  public  use.  Signature  *must* 

* be  known  good. 

*/ 

i n t 

pgpSi gCheckBuf  (byte  const  *sig,  size_t  len,  struct  PgpPubKey  const  *pub, 
n n byte  const  *hash); 

/*  Check  the  buffer  for  a valid  signature  block  and  obtain  the  sigtype  */ 
int  PGPExport  pg p S i g S i gTy pe  (byte  const  *buf,  size_t  len); 

int  PGPExport  pg p S i g Ne s t F I a g ( by t e const  *buf,  size_t  len); 

unsigned  PGPExport  pgpSigDistinctHashCount  (struct  PgpSig  const  *siglist); 
unsigned  PGPExport  pg p S i g D i s t i n c t H a s h e s (struct  PgpSig  const  *siglist, 
n byte*buf); 

int  PGPExport  pgpSigAdd  (struct  PgpSig  **siglist,  int  type,  byte  const  *buf, 
n s i ze_t  len); 

struct  PgpSig  PGPExport  *pgpSigNext  (struct  PgpSig  const  *sig); 
void  PGPExport  pg p S i g F r ee Li s t (struct  PgpSig  *siglist); 

#i f def  cplusplus 

} 

#e nd  i f 

Sendif  /*  PGPSIG.H  */ 
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Makefile. in 


# 

# L i b / pgp / random/Ma ke f i L e . i n 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

# $Id:  Ma ke f i L e . i n , V 1.15.2.4  1997/06/07  09:51:32  mhu  Exp  $ 

U 

OBJS=pgpRndoni. o pgpRndPooL.o  pgpRndUnix.o  pgpRndEvnt.o  pgpRndSeed.o 
SHAREDHDRS=  pgpRndom.h  pgpRndPooL.h  pgpRndSeed.h 

a L L : : DONE 


[CCHK:307fe022833956ffd3a]] 
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# 

# 1 1 b / pg  p / r a n dotn / ma  ke  f i L e . ms  c 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

ft  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:51:33  mhw  Exp  $ 
ft 


PGPLIB=n. .\. .\pgpLib. Lib 

C F LAG S =- 1 . . \ \ \ i n c L u d e -I  . . \ . . \ i nc L ude  \ 

n -I..\..\..  -DHAVE  CONFIG  H=1  $(DEBUG) 


a L L : : n □ Lib 


headers:n  incL 

lincLude  "makefiLe.in 


i n c 1 : 

n 

if 

not 

n 

D 

o 

i f 

not 

a 

n 

$(SHAREDHDRS)"==""  \ 

for  in  ( $ ( S H A R E D H D R S ) ) do  copy  %f  . . \ \ \ i n c L ude 

$(PRIVHDRS)"==""  \ 

for  %f  in  C SCPRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L ud e 


D0S0BJSX  = n $ ( OB J S : . o= . ob j ) 

DOSOBJS=n  $( DOSOBJ SX : Uni x=Wi n32) 


L i b : n 


$(D0S0BJS) 


. c . ob  j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 


c L ea  n : 

n deL*.obj 


DONE  : 

n if  exist  $(PGPLIB)  L i b / o u t : $ ( PG PLI B ) $(PGPLIB)  $(D0S0BJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) $(D0S0BJS) 


:[CHK:3676d4aae799ff11bb4864227c99511188205c031e7a3a 
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pgpRnd.h 


/* 

* pgpRnd.h  - s y s t em- s pe c i f i c gathering  of  h i g h- r e s o L u t i on  timers  for  RNG. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  is  a PRIVATE  header  fiLe,  for  use  onLy  within  the  PGP  Library. 

* You  shouLd  not  be  using  these  functions  in  an  application. 

* 

* The  interface  is  s y s t em- i nd e p e n d e n t , but  the  implementation  shouLd  be 

* highly  system-dependent,  to  get  at  as  much  state  as  possible. 

* 

* $Id:  pgpRnd.h, V 1.2. 2.1  1997/06/07  09:51:33  mhw  Exp  $ 

*/ 

#incLude  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

#e n d i f 

struct  PgpRandomContext; 

word32  ranGet Ent ropy ( st ruct  PgpRandomContext  const  *rc); 

#ifdef  __cpLuspLus 

> 

#end  i f 


[CCHK:6ac0ed6395f9ccaa58ddcccc04fbb068f43] 
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/* 

* 

* 

* 

* 

* 

* 

* 

•k 

*/ 


pgpRndEvnt.c  --  Take  random  events  and  add  it  to  the  random  pool. 

This  also  does  entropy  estimation. 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
Written  by:n  CoLin  PLumb 

$Id:  pg pR nd E vn t . c , V 1.5. 2.1  1 997/06/07  09:51:33  mhw  Exp  $ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

#e nd i f 

#incLude  "pgpRnd.h" 

//incLude  "pgpRndPooL.h"n/*  Our  functions  are  decLared  here  */ 

/*  Number  of  eLements  in  the  given  array  */ 

^define  eLemsof(x)  C ( un s i g n ed ) ( s i z eo f ( x ) / s i z e o f ( *x  ) ) ) 

/* 

* Estimate  the  amount  of  entropy  in  an  input  vaLue  x by  seeing  how 

* different  it  is  from  what  has  come  before. 

* 

* This  is  based  on  computing  the  deLta  from  the  previous  vaLue,  and  the 

* second-order  deLta  from  the  previous  deLta,  and  so  on,  for  h orders. 

* The  minimum  of  any  of  those  deLtas  is  returned  as  the  entropy  estimate. 

* (Which  must,  of  course,  have  a Logarithm  taken  to  produce  a "number 

* of  bits"  output.) 

* 

* This  requires  a pointer  to  a h-word  history  tabLe  of  previous  deLtas. 

* A vaLue  of  h = 3 is  generaLLy  good,  but  some  things  (Like  keystroke 

* timings)  feed  deLtas  and  not  input  vaLues  into  this,  so  that  removes 

* the  first  LeveL. 

*/ 

static  word32 

rand Es t i ma t e ( wo rd32  x,  word32  *history,  unsigned  h) 

{ 


□ 

wo  rd32 

t,  min  = x; 

a 

while 

(h--)  { 

n 

D 

t = historyCh];nn 

n 

/*  Last  deLta  */ 

n 

n 

r+ 

II 

X 

V 

rt 

• O 

X 

1 

r+ 

t - X ; n 

/*  1 X - hi storyChD | 

n 

Q 

historyCh]  = x; 

n 

□ 

X = t; 

n 

□ 

if  (min  > x) 

n n n min=x; 

n } 

n returnmin; 

> 

/* 

* Gather  and  estimate  entropy  from  keyboard  timings.  DoubLe  Letters 

* are  aLLowed,  but  tripLes  and  more  are  considered  suspiscious  and 

* entropy  is  not  counted.  (The  actuaL  criterion  is  that  the  current 

* Letter  has  appeared  more  than  once  in  the  previous  four  Letters, 

* which  rejects  aaaa...  and  ababa...) 

CCCHK: 6f 7ca9a2a0004dde777dd1 1 bb080311f25980f733383a3e9ed88348f315c25efa:: 
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pgpRndEvnt.c 


* 

* The  "Letter"  can  be  generalized  to  mo u s e- c L i c k s , bu t t on -pu s h e s , menu 

* selections,  or  anything  else  that  can  be  categorized  into  a finite 

* number  of  events. 

* 

* Question:  is  there  a way  to  achieve  this  effect  without  remembering 

* the  recent  keystrokes  so  explicitly?  It  seems  Like  a possible 

* security  hole. 

* 

* We  incorporate  entropy  from  the  first  3 samples,  but  don't  count  them 

* since  only  after  that  many  do  we  get  reliable  per-sampLe  entropy  estimates. 

* (This  is  time  for  the  two  entries  in  teh  hist  array  to  get  initialized, 

* plus  the  one  Level  of  delta  history  implicitly  included  in  the 

* r a nGe t En t ropy  timing.  It  has  to  be  there  unless  we  want  to  export 

* knowledge  about  the  modulus  at  which  the  timer  it  uses  wraps.) 

*/ 


unsigned 

pg p Ra nd Poo L Key s t r o ke ( i n t event) 
{ 


Q 

n 

Q 

□ 

□ 

n 

□ 


static  int  pa  s t e v e n t C 4 !]  ; n /*  Last  4 events  */ 

static  word32  histC2D; 

static  unsigned  h i s t c oun t =e L ems o f ( h i s t ) + 1 ; 

n n n n /*  # invalid  entries  in  hist  array  */ 

word32  delta; 
unsigned  n = 0; 
int  i ; 


n delta  = r a n G e t E n t r opy ( &pg p Ra ndomPoo L ) ; 

n delta  = r a n d E s t i ma t e ( d e L t a , hist,  e L ems o f ( h i s t ) ) ; 


n pgpRandomAddBytesC&pgpRandomPooL,  (byte  *)&event,  sizeof(event)); 

a /*  Check  for  repetitive  keystroke  patterns  */ 

n i = e Lemsof Cpastevent ) - 1; 

n n = (event  ==  pasteventCiD); 

a d o { 

n n n +=  (event  ==  ( pa s t e ve n t C i D = pa s t e ve n t C i -1 3 ) ) ; 

a }whiLe( — i); 

n pasteventC03  = event; 


a if  (histcount  > 0)  { 


n 

n 

/*  Not 

yet  filled  hist  array  */ 

□ 

n 

— histcount; 

n 

n 

return 

0; 

a > 


n return  (n  > 1)  ? 0 : pg p Ra nd Poo L Add E n t r opy ( d e L t a ) ; 

} 


/* 

* Generate  entropy  from  mouse  motion.  This  simply  measures  entropy 

* in  both  directions  independently.  Also  includes  entropy  of  timing, 

* although  that  may  be  pretty  Low  due  to  OS  synchrony. 

* 

* In  essence,  we  try  to  predict  the  mouse  position  from  past  positions, 

* using  three  predictors:  constant  position,  constant  velocity,  and 

* constant  acceleration.  The  minimum  misprediction  distance  is  used 

* to  extimate  entropy  from. 


[:CHK:3a3ee8b5ce3ea84595ec85f1b00aaa33ac4c4e119feadd855a3e30db8efa16716:: 
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* 

* We  incorporate  entropy  from  the  first  3 samples,  but  don't  count  them 

* since  only  after  that  many  do  the  predictors  start  working. 

* (Note  that  the  timing  history  array  is  one  shorter,  because  one  extra 

* level  of  delta  computation  is  buried  in  r a nG e t En t r o py ( ) . ) 

*/ 

unsigned 

pg pRa nd Poo  I Hou s e ( wo r d32  x,  word32  y) 

{ 


n 

stat  i c 

word32  histxC33,  histyC3D 

; /*  X and  Y position  history 

*/ 

n 

static 

word32  histC2D;n  n 

/*  Timing  history  */ 

n 

static 

unsigned  histxcount=elemsof(histx); 

n 

D 

nan 

/*  # invalid  entries  in  histx 

array 

n 

wo  r d32 

delta, -n  n n 

/*  Timing  delta  */ 

Q 

wo  rd32 

deltax;nn  n 

/*  X delta  */ 

□ 

wo  rd32 

deltay;nn  n 

/*  Y delta  */ 

n 

delta  = 

ranGetEntropy(&pgpRandomPool ); 

n 

delta  = 

r a nd Es t i ma t e ( de 1 t a , hist 

, elemsof(hist)); 

u 

de 1 1 a X 

= r a nd E s t i ma t e ( X , histx. 

elemsof(histx)); 

n 

de 1 1 ay 

= ra nd Es t i ma t e ( y , histy. 

elemsof(histy)); 

n pgpRandomAddBytesC&pgpRandomPool,  (byte  *)&x,  sizeof(x)); 

n pg p Ra ndom Add  By t e s ( &pg p Ra n domPoo I , (byte  *)Sy,  sizeof(y)); 


n 

□ 

n 

n 

a 

n 

n 

a 

> 


/*  Wait  until  we  have  filled  our  arrays  to  start  counting  entropy  */ 
if  (histxcount  > 0)  { 
n --histxcount; 

n return0; 

> 

return  pgpRandPoolAddEntropy(delta) 

+ pgpRa ndPoo I AddEn t r opy ( de I t ax ) 

+ pgpRandPoolAddEntropy(deltay); 
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/* 

* 

★ 

* 

* 

•k 

* 

*/ 


pgpRndMSDOS.c  --  Get  h i g h- r e s o L u t i on  timing  information  to  seed  the 
random  number  generator.  MS-DOS  version. 

Copyright  CO  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

$Id:  pgpRndHSDOS . c,v  1.1. 2.1  1 997/06/07  09:51:34  mhw  Exp  $ 


#if  HAVE_C0N FIG_H 
#incLude  "config.h" 

#endi f 

#incLude  <time.h>n  /*  For  time  measurement  code  */ 


#if  BORLANDC 

#ifndef  far 

#define  far  __far  /*  BorLand  C++  3.1's  <dos.h>  kacks  in  ANSI  mode.  Ugh! 

# e nd i f 

# e nd i f 


#incLude  <dos.h>n 
#incLude  <conio.h>n 


/*  for  enabLeC)  and  disabLeC)  */ 
/*  for  inpC)  and  outpC)  */ 


#i nc  Lude 
#incLude 
# i n c L ude 


pgpRndom. h" 
pgpUsuaLs.h 
pgpRnd.h" 


/* 

* This  code  gets  as  much  information  as  possible  out  of  8253/8254  timer  0, 

* which  ticks  every  .84  microseconds.  There  are  three  cases: 

* 1)  Original  8253.  15  bits  available,  as  the  Low  bit  is  unused. 

* 2)  8254,  in  mode  3.  The  16th  bit  is  avaiLabLe  from  the  status  register. 

* 3)  8254,  in  mode  2.  ALL  16  bits  of  the  counters  are  avaiLabLe. 

* (This  is  not  documented  anywhere,  but  I've  seen  it!) 

* 

* This  code  repeatedly  tries  to  Latch  the  status  (ignored  by  an  8253)  and 

* sees  if  it  Looks  Like  xx1101x0.  If  not,  it's  definitely  not  an  8254. 

* Repeat  this  a few  times  to  make  sure  it  is  an  8254. 

*/ 


static  int 

has8254(void) 

{ 


D 

int  i , 

si,  s 2 ; 

D 

for  ( i 

= 0;  i < 5;  i++)  { 

n 

n 

_disabLe(); 

□ 

n 

outp(0x43,  0xe2);n 

/* 

D 

n 

si  = inp(0x40);nn 

/* 

n 

a 

outp(0x43,  0xe2);n 

/* 

n 

Q 

s2  = inpC0x40);nn 

/* 

□ 

n 

_enabLeC  ); 

□ 

n 

if  ((si  & 0x3d)  !=  0x34 

1 1 

s 

n 

n return0;n 

/* 

Q 

> 

Q 

return 

1;n  /*  Status  reads 

a s 

Latch  status  for  timer  0 */ 

If  8253,  read  timer  Low  byte  */ 
Latch  status  for  timer  0 */ 

If  8253,  read  timer  high  byte  */ 

(s2  S 0x3d)  !=  0x34) 

Ignoring  status  Latch;  8253  */ 

expected;  8254  */ 


i:i:CHK:6179dc55589bbee77b2007ee62443c0e82720ff3ee7aa2061  4acaa52774e6997c]D 
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static  unsigned 
read8254(void) 

{ 

n unsigned  status,  count; 

n _disabLe(); 

n outp(0x43,  0xc2);n  /*  Latch  status  and  count  for  timer  0 */ 

n status  = inp(0x40); 

n count  = inp(0x40); 

n count  1=  inp(0x40)  <<  8; 

a _enabLe(); 

n /*  The  timer  is  usually  in  mode  3,  but  some  motherboards  use  mode  2.  */ 

n if(status&2) 

n n count  = count>>1  | (status  S 0x80)<<8; 

n return  count ; 

> 

static  unsigned 
read8253(void) 

{ 

a unsigned  count; 

n _disable(); 

n outp(0x43,  0x00};n  /*  Latch  count  for  timer  0 */ 

a count  = (inp(0x40)  8 0xff); 

n count  1=  (inp(0x40)  8 0xff)  <<  8; 

n _enable(); 

n return  count  >>  1; 

> 

/* 

* Add  as  much  timing-dependent  random  noise  as  possible 

* to  the  randPool.  Typically,  this  involves  reading  the  most 

* accurate  system  clocks  available. 

* 

* Returns  the  number  of  ticks  that  have  passed  since  the  last  call, 

* for  entropy  estimation  purposes. 

*/ 

wo  r d32 

ra nGe t En t ropy ( s t r u c t Pg p Ra nd omC on t ex t const  *rc) 

{ 

a word32  delta; 

n static  unsigned  deltamask  = 0; 

n static  unsigned  prevt; 

n unsigned  t; 

n time_t  tnow; 

a clock_t  enow; 

n if  (deltamask  ==  0) 

n n deltamask  = has8254()  ? 0xffff  : 0x7fff; 

n t = (deltamask  8 0x8000)  ? read8254()  : read8253(); 

n pg pRa nd om Ad dBy t e s ( r c , (byte  const  *)8t,  sizeof(t)); 

n delta  = deltamask  8 (t  - prevt); 

n prevt=t; 

n /*  Add  mo r e- s i g n i f i c a n t time  components.  */ 
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n 

enow  = cLockC); 

o 

pgpRandomAddBytesCrc, 

(byte 

*)&cnow. 

sizeof(cnow)) 

o 

tnow  = time((time_t  * 

)0); 

n 

pgpRandomAddBytes(rc, 

(byte 

*)&tnou. 

sizeof(tnow)) 

n 

return  delta; 

} 
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/* 

* pgpRndMac.c  — Get  h i g h-re so L u t i on  timing  information  to  seed  the  random 

* number  generator.  Mac  version.  (The  complicated  one.) 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg p RndMa c . c , V 1.1. 2.1  1997/06/07  09:51:34  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
^include  "config.h" 

# e nd i f 

^include  <stdLib.h>n  /*  For  qsortC)  */ 

//include  <Timer.h> 

//include  "pgpRnd.h" 

//include  "pgpRndom.h" 

//include  " pg  pL)  s ua  I s . h " 

#define  MINTICK  0 

#define  N 15n  /*  Number  of  deltas  to  try  (at  Least  5,  preferably  odd)  */ 

typedef  UnsignedWide  timetype; 

/*  Function  needed  for  qsort()  */ 
static  int 

ranCompa r e ( voi d const  *p1,  void  const  *p2) 

{ 

n return  *(unsigned  const  *)p1  > *(unsigned  const  *)p2  ? 1 : 

n *(unsigned  const  *)p1  < *(unsigned  const  *)p2  ? -1  : 0; 

} 

/* 

* XXX:  Not  necessarily  accurate! 

* 

* This  returns  t1  - t2  if  it  fits  in  an  unsigned  Long,  or  else  it  returns  0 

* if  negative  or  UL0NG_MAX  if  out  of  range. 

*/ 

static  unsigned  long 

t i c kd i f f ( Un s i g n ed W i d e const  t1,  UnsignedWide  const  t2) 

{ 


Q 

if  (t1 . 

hi  = 

= t2  . hi  ) 

n 

{ 

Q 

n 

if 

(t1 . Lo  >=  t2. Lo) 

U 

n 

a 

return  tl.Lo 

- 1 2 . L 0 ; 

a 

n 

else 

n 

n 

o 

return  0; 

n 

> 

n 

else  if 

(t1 

.hi  ==  t2.hi  + 1) 

n 

{ 

D 

n 

i f 

(tl.Lo  < t2.Lo) 

n 

n 

n 

return  tl.Lo 

- t 2 . L o ; n 

/* 

This  underflows,  */ 

o 

n 

D 

n a 

n 

/* 

and  that's  the  intent 

Q 

n 

else 

n 

D 

n 

return  UL0NG_ 

MAX; 
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n 

} 

a 

else 

if  ( t1  . hi 

< t 2 . h i ) 

D 

□ 

return 

0; 

Q 

else 

n 

□ 

return 

UL0NG_MAX; 

/* 

* Find  the  resolution  of  the  h i g h - r e s o L u t i on  clock  by  sampling  successive 

* values  until  a tick  boundary,  at  which  point  the  delta  is  entered  into 

* a table.  An  average  near  the  median  of  the  table  is  taken  and  returned 

* as  the  system  tick  size  to  eliminate  outliers  due  to  descheduling  (high) 

* or  tv0  not  being  the  "zero"  time  in  a given  tick  Clow). 

* 

* Some  trickery  is  needed  to  defeat  the  habit  systems  have  of  always 

* incrementing  the  microseconds  field  from  g e 1 1 i meo f d a y ( ) results  so  that 

* no  two  calls  return  the  same  value.  Thus,  a "tick  boundary"  is  assumed 

* when  successive  calls  return  a difference  of  more  than  MINTICK  ticks. 

* (For  ge 1 1 i meof day ( ) , this  is  set  to  2 us.)  This  catches  cases  where  at 

* most  one  other  task  reads  the  clock  between  successive  reads  by  this  task. 

* More  tasks  in  between  are  rare  enough  that  they'll  get  cut  off  by  the 

* median  filter. 

* 

* When  a tick  boundary  is  found,  the  *first*  time  read  during  the  previous 

* tick  (tv0)  is  subtracted  from  the  new  time  to  get  microseconds  per  tick. 

* 

* Suns  have  a 1 us  timer,  and  as  of  SunOS  4.1,  they  return  that  timer,  but 

* there  is  ”50  us  of  system-call  overhead  to  get  it,  so  this  overestimates 

* the  tick  size  considerably.  On  SunOS  5.x/Solaris,  the  overhead  has  been 

* cut  to  about  2.5  us,  so  the  measured  time  alternates  between  2 and  3 us. 

* Some  better  algorithms  will  be  required  for  future  machines  that  really 

* do  achieve  1 us  granularity. 

* 

* Current  best  idea:  discard  all  this  hair  and  use  Ueli  Maurer's  entropy 

* estimation  scheme.  Assign  each  input  event  (delta)  a sequence  number. 

* 16  bits  should  be  more  than  adequate.  Make  a table  of  the  last  time 

* (by  sequence  number)  each  possibe  input  event  occurred.  For  practical 

* implementation,  hash  the  event  to  a fixed-size  code  and  consider  two 

* events  identical  if  they  have  the  same  hash  code.  This  will  only  ever 

* underestimate  entropy.  Then  use  the  number  of  bits  in  the  difference 

* between  the  current  sequence  number  and  the  previous  one  as  the  entropy 

* estimate. 

* 

* If  it's  desirable  to  use  longer  contexts,  Maurer's  original  technique 

* just  groups  events  into  non-overlapping  pairs  and  uses  the  technique  on 

* the  pairs.  If  you  want  to  increment  the  entropy  numbers  on  each  keystroke 

* for  u s e r- i n t e r f a c e niceness,  you  can  do  the  operation  each  time,  but  you 

* have  to  halve  the  sequence  number  difference  before  starting,  and  then  you 

* have  to  halve  the  number  of  bits  of  entropy  computed  because  you're  adding 

* them  twice. 

* 

* You  can  put  the  even  and  odd  events  into  separate  tables  to  close  Maurer's 

* model  exactly,  or  you  can  just  dump  them  into  the  same  table,  which  will 

* be  more  conservative. 

*/ 

static  unsigned  long 
ranTickSize(void) 

{ 
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c 


c 


n 

i nt 

i = 

> 

tl 

0; 

n 

unsigned 

long 

diff,  dCN!]; 

n 

timetype 

t V0, 

tvl,  tv2; 

n 

/* 

n 

ic 

TODO 

Get  some  per-run  data 

to  seed  the 

RNG  ’ 

n 

* 

pi  d. 

ppi  d. 

etc. 

n 

*/ 

n 

Mi croseconds(&tv0) ; 

a 

tvl 

= tv0; 

n 

do 

n 

n 

Mi  croseconds(&tv2) ; 

a 

n 

diff  = 

tickdiff(tv2. 

tvl  ); 

n 

n 

if  (diff  > MINTICK)  { 

n 

n 

n 

dCi+  + !]  = diff 

/ 

u 

□ 

tt 

t v0  = t v2; 

n 

n 

n 

j = 0; 

n 

D 

> else 

if  (++j  >=  4096)n/*  Always 

gett 

n 

n 

□ 

return  MINTICK  + IMINTICK; 

n 

n 

tv1  = 

tv2; 

n 

} while 

( i < N ) ; 

n 

/* 

Return  average  of  middle  5 

values  (rounding 

n 

qsort (d. 

N , si 

zeof(dC0D),  ranCompare); 

n diff  = (d[N/2-2:  + di;N/2-1  ] + dCN/2]  + dCN/2  + 1 : + dCN/2  + 2D  + 4) /5; 

#if  NOISEDEBUG 

n fprintfCstderr,  "Tick  size  is  %u\n",  diff); 

#endi f 

n return  diff; 

} 

/* 

* Add  as  much  timing-dependent  random  noise  as  possible 

* to  the  randPooL.  Typically,  this  involves  reading  the  most 

* accurate  system  clocks  available. 

* 

* Returns  the  number  of  ticks  that  have  passed  since  the  last  call, 

* for  entropy  estimation  purposes. 

*/ 

word32 

ra nGe t Ent ropy ( s t rue t Pg pRa ndomC o n t e x t const  *rc) 

{ 

n word32  delta; 

n t i metype  t ; 

n static  unsigned  long  ticksize  = 0; 

n static  timetype  prevt; 

n H i c r o s e c ond s ( & t ) ; 

n pgpRandomAddBytesCrc,  (byte  const  *)8t,  sizeof(t)); 


if  (Iticksize) 

{ 

n ticksize  = r a nT i c k S i z e ( ) ; 

n prevt  = t ; 

} 

delta  = ( uo r d32 ) ( t i c kd i f f ( t , prevt)  / ticksize); 
prevt  = t; 
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o return  delta; 

} 
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/* 

* pgpRndPoo L . c --  True  random  number  computation  and  storage 

★ 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Wrtten  by  CoLin  Plumb. 

★ 

* This  performs  a strong  hash  on  the  data  as  it  is  fed  into  the 

* pool,  and  the  pool  is  again  strongly  hashed  to  produce  the  output 

* of  the  random-number  generator.  This  is  overkill,  as  either  step 

* should  produce  high-quality  numbers. 

* 

* $Id:  pgpRndPoo I . c, V 1.8. 2.1  1997/06/07  09:51:34  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#include  "config.h" 

# e n d i f 


^include  <stdlib.h> 
^include  <string.h> 


#i nc  lude 
^include 
#i nc lude 
^include 


pgpDebug . h" 
pgpRndPool . h 
pgpRndom. h" 
pgpUsuals.h" 


/* 

* Accumulators  to  estimate  entropy  in  the  pool. 

*/ 

static  unsigned  randBits  = 0;  /*  Bits  of  entropy  in  pool  */ 

static  word32  randFrac  = 0;  /*  Fraction  of  a bit  of  entropy  in  pool  */ 

static  unsigned  randInBits  = 0;  /*  Bits  of  entropy  added  to  pool  */ 


/*  We  import  the  following  things  from  the  MD5  code  */ 
void  H D 5T r a n s f o r m ( wo r d32  *block,  word32  const  *key); 
^define  Ha s hT ra n s f o rm  HDSTransform 
^define  HASH_INWORDS  16 
^define  HASH  OUTWORDS  4 


/* 

* The  pool  must  be  a multiple  of  the  hash  input  size  and  the  hash 

* output  size.  For  HD5,  these  are  16  and  4 words,  respectively, 

* so  the  pool  must  be  a multiple  of  16  words.  If  the  hash  were 

* SHA,  it  would  have  to  be  a multiple  of  16  and  of  5,  or  a multiple 

* of  80  all  together.  (80  words  is  2560  bits.) 

*/ 

^define  R AN D POO LWO R D S 1 60n  /*  5,120  bits  */ 

^define  RANDPOOLBITS  ( 32 *R AN D POO LWO R D S ) 

#if  RANDPOOLWORDS  % H ASH_0UTW0RDS 

terror  RANDPOOLWORDS  must  be  a multiple  of  H A S H _0 UT WOR D S 
Send  i f 

Sif  RANDPOOLWORDS  % HASH_INWORDS 

Serror  RANDPOOLWORDS  must  be  a multiple  of  HASH_INWORDS 
Send i f 


/*  Must  be  wo r d-a  I i g n e d , so  make  it  words.  Cast  to  bytes  as  needed.  */ 
static  word32  r a nd Poo  I C R AN D POO LWO R D S 3 ; n /*  Random  pool  */ 

static  unsigned  r a nd Poo  I Add Po s = 0;n  /*  Position  to  encrypt  into  (words)  */ 


CLCHK: 66809428b72d25a 7888 eea6811 871 3acc9299ee2fcc1db22a486a44691d5f2e0e:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1635 


pgpRndPool.c 


static  word32  r a n d Key C H A S H_ I N WO R D S 3 ; b /*  Random  input  buffer  */ 
static  unsigned  randKeyAddPos  = 0;b  /*  Position  to  add  to  (bytes)  */ 

static  word32  randOutCHASH_OUTWORDS];n  /*  Random  output  buffer  */ 

static  unsigned  randOutGetPos  = sizeof(randOut);  /*  Position  to  get  from  (b)  */ 

/*  Keeps  track  of  when  we  need  to  do  another  hashing  step  */ 
static  unsigned  r a nd Ha s h C ou n t e r = 0; 

static  void 

r a n d Poo  I W i p e ( VO i d *ctx) 

{ 


n 

(void)ctx; 

n 

memset(randPool 

, 0, 

sizeof(randPool)); 

s 

memset(randKey, 

0, 

si  zeof( randKey) ); 

n 

memset ( randOut, 

0, 

sizeof(randOut)); 

n 

randPoolAddPos 

= 0; 

n 

randKeyAddPos  = 

0; 

Q 

randOutGetPos  = 

sizeof(randOut); 

} 

/* 

* To  mix  input  into  the  pool,  we  insert  it  into  a key  buffer  and  then 

* use  the  key  buffer  to  CBC-encrypt  the  pool.  Actually,  to  make  sure 

* that  the  input  (which  includes  such  sensitive  information  as  passphrase 

* keystrokes)  is  not  left  in  memory,  we  XOR  it  with  the  old  contents  of 

* the  key  buffer  along  with  some  of  the  the  data  about  to  be  encrypted. 

* Since  none  of  the  disguising  data  depends  on  the  byte,  this  does 

* not  destroy  any  entropy  inherent  in  the  input  byte. 

* 

* To  reduce  burstiness  in  the  timing,  rather  than  wait  until  the  key 

* buffer  is  full  to  encrypt  the  entire  pool,  we  update  part  of  the  key 

* and  then  encrypt  part  of  the  pool.  The  r a n d H a s h C o u n t e r keeps  track 

* of  what's  going  on  to  ensure  that  a byte  of  key  is  not  overwritten 

* until  it  has  participated  in  the  encryption  of  every  block  of  the  pool. 

* 

* The  pool  contains  R AN D POO LWO R D S / H A S H_0 UT WO R D S blocks.  We  must  do 

* that  many  ha s h-enc r py t i on  steps  before  4*HASH_INW0RDS  bytes  of  the 

* key  have  been  overwritten.  So  r a nd H a s h C oun t e r is  incremented  by 

* RANDPOOLWORDS/HASH_OUTWORDS  each  time  a byte  is  added,  and  when  this 

* exceeds  4*HASH_INW0RDS,  it  is  decreased  by  that  amount  and  a hashing 

* step  is  performed.  It  should  be  easy  to  see  that  that  guarantees 

* correct  behaviour. 

* 

* The  bits  deposited  need  not  have  any  particular  distribution;  the 

* stirring  operation  transforms  them  to  uniformly-distributed  bits. 

*/ 

static  void 

r a ndPoo I AddBy t e ( by t e b) 

{ 

B inti; 

B unsigned  pos; 

B /*  Mix  new  byte  into  pool  */ 

B ((byte  * ) ra  ndKey  ) C r a ndKeyAddPos  ] ''=  b; 

B if  ( ++ r a ndKey Ad d Po s ==  s i z eof ( ra ndKey ) ) 

B n randKeyAddPos=0; 
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/* 

* If  we've  reached  the  end  of  a word,  mask  the  next  word  with 

* a soon- t o-be-o V e r w r i t t e n byte  of  the  pool.  With  a 64-byte  input 

* hash,  this  will  use  a different  word  for  masking  each  of  the 

* 16  words  as  Long  as  there  are  at  Least  16  output  bLocks 

* (64  words  at  4 words  per  output  bLock,  or  512  bits  totaL)  in  the 

* pooL.  Just  to  be  sure.  Let's  enforce  it... 

*/ 

#if  HASH_INWORDS  > R AN D POO LWO R D S / H A S H_0 UT WO R D S 

#error  PLease  make  R AN D POO LWO R D S bigger  than  HASH_INWORDS  * H A S H_0UTW0 R D S . 
#end  i f 

n if  ( r a nd Key Add Po s % s i z eo f ( wo r d32  ) ==  0) 

n n *(word32  *)((byte  * ) r a ndKey  + r a n d KeyAdd  Po  s ) = 

n n r a nd Poo L C r a nd Poo L Add Po s 3 ; 

n /*  Do  a hashing  step  if  required  */ 

n randHashCounter  +=  R AN D POO LWO R 0 S / H A S H_0 UT WO R D S ; 

n whiLe  (randHashCounter  >=  4* H A S H_ I N WO R D S ) { 

randHashCounter  -=  4 *H A S H_ I N W 0 R D S ; 

/*  CBC-encrypt  the  current  bLock  */ 
pos  = r a n d Poo L Add Po s ; 

HashTransform(randPooL  + pos,  randKey); 

/*  Get  the  offset  of  the  next  bLock  and  XOR  this  one  in  */ 
randPooLAddPos  = pos  + H A S H_0 UT WO R D S ; 
if  (randPooLAddPos  ==  RANDPOOLWORDS ) 
n randPooLAddPos  = 0; 

for  (i  = 0;  i < H AS H _OUT WO R D S ; i++) 

n r a nd Poo L C r a nd Poo L Ad d Po s + i D r a n d Poo L C po s+ i D ; 


/* 

* Hake  a deposit  of  information  (entropy)  into  the  pooL. 
*/ 

static  void 

randPooLAddBytes(voi d *ctx,  byte  const  *p,  unsigned  Len) 

{ 

n (void)ctx; 

n whiLe  (Len — ) 

n n randPooLAddByte(*p++); 

n /*  PooL  has  changed,  randOut  is  out  of  date  */ 

n r a ndOu t Ge t Po s = s i z eo f ( r a ndOu t ) ; 

} 


static  void 
randGetOutput(void) 
{ 

n i n t i ; 


/* 

* Hash  the  pending  input  and  the  entire  pooL,  with  the  oLd 

* randOut  as  IV. 

*/ 

HashTransform( randOut,  randKey); 
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n for  (i  = 0;  i < R A N D PO 0 LW 0 R D S ; i +=  H A S H_  I N WO R D S ) 

n n H a s hT r a n s f o r m ( r a nd Ou t , randPooL+i); 

n /*  Okay,  we  can  now  fetch  starting  at  the  beginning  of  randOut  */ 

n r a ndOu t G e t Po s = 0; 

} 


/* 

* Withdraw  some  bits  from  the  pool.  Regardless  of  the  distribution  of  the 

* input  bits,  the  bits  returned  are  uniformly  distributed,  although  they 

* cannot,  of  course,  contain  more  Shannon  entropy  than  the  input  bits. 

*/ 


static  void 

r a nd Poo  I G e t By t e s E n t r o py C VO i d *ctx,  byte  *buf,  unsigned  len,  unsigned  bits) 
{ 


Q 

unsigned 

t; 

n 

(void)ctx; 

n 

i f 

(randBits  >=  bits) 

n 

n 

randBi ts  -=  bits; 

Q 

e L 

s e 

n 

a 

randFrac  = randBits  = 0; 

n 

while  ( 1 

en  > (t  = s i zeof ( randOut ) - r a nd 0 u t G e t Po s ) ) 

□ 

Q 

memcpy(buf,  (byte  * ) r a n d 0 u t + r a nd 0 u t Ge t Po s , 

a 

n 

buf  +=  t ; 

n 

n 

len  - = t ; 

n 

n 

randGetOutput ( ) ; 

n 

> 

Q 

i f 

(len) 

{ 

□ 

□ 

memcpy(buf,  (byte  * ) r a nd Ou t + r a n dOu t G e t Po s , 

n 

□ 

r a ndOu t G e t Po s +=  len; 

n 

> 

> 


#if  0 
byte 

randPoolGetByte(void) 

{ 

n if  (randBits  >=  8) 

n n randBits-=8; 

a else 

n n randFrac  = randBits  = 0; 


a if  ( ra ndOutGet Pos  ==  s i z eo f ( r a ndO u t ) ) 

n n randGetOutputC); 

n return  ((byte  * ) r a n dOu t ) C r a nd Ou t G e t Po s + + D ; 

} 

# en  d i f 


/* 

* Destroys  already-used  random  numbers.  Ensures  no  sensitive  data 

* remains  in  memory  that  can  be  recovered  later.  This  repeatedly 

* mixes  the  output  of  the  generator  back  into  itself  until  all  internal 

* state  has  been  overwritten. 

[CCHK:9009dcc319fdb2277ffcd1dd6a748ee8596cc0922248eef88e1eef4d78dbc634f:] 


1638 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRndPool.c 


*/ 


static  void 

ra ndPoo L S t i r ( VO i d *ctx) 


{ 

n 


unsigned  i; 


n (void)ctx; 

n for  Ci  = 0;  i < 5*sizeof(randKey)/sizeof(rand0ut);  i++)  { 

n n randPooLAddBytesCNULL,  (byte  const  *)randOut,  sizeof(randOut)); 

n n randGetOutputC); 

n } 

} 


static 

□ 

n 

□ 

>; 


struct  PgpRandoiti  PooLDesc  = { 

"GLobaL  true  random-number  pool", 
randPooLAddBytes,  randPooLGetBytesEntropy, 
r a nd Poo L S t i r , r a nd Poo L W i pe 


/*  The  destroy  function  is  uncalLable  anyway...  */ 
struct  PgpRandomContext  const  pg p Ra ndomPoo L = { 
n SPooLDesc,  0,  (void  (*)(struct  PgpRandomContext  *))0 

>; 


/* 

* 

★ 

★ 

★ 

★ 

* 

* 

* 

★ 

★ 

★ 

ic 

* 

* 

* 

* 

* 

* 

* 

* 

★ 

★ 

* 

★ 

* 

* 

* 

* 

* 

•k 

it 

it 

* 


True  random  bit  accumulation.  These  are  extra  functions  exported 
by  pgpRndPooL.h  for  entropy  estimation. 

Entropy  is  expressed  in  terms  of  a delta,  essentially  the  difference 
between  the  observed  value  and  the  expected  value,  whose  logarithm 
is  a measure  of  entropy.  (The  logarithm  to  the  base  2 is  entropy 
expressed  in  bits.) 

The  internal  amount-of-ent ropy  accumulator  is  maintained  in  two 
halves:  a counter  of  bits,  and  a fraction  of  a bit,  expressed 
in  the  form  of  a normalized  delta.  If  0 <=  f < 1 is  a fraction 
of  a bit,  then  1 <=  2^f  < 2,  so  it's  remembered  as 
0 <=  X = 2*f  - 1 < 1,  a fixed-point  number. 

Given  a new  f r a c t i ona  I -b i t delta,  1+y  in  similar  form  (obtained 
by  normalizing  the  delta  into  the  desired  form),  the  output 
fractional  bit  delta  1+z  = (1+x)  * (1+y).  If  this  exceeds  2, 
divide  it  by  2 and  add  a full  bit  to  the  bit  counter. 

The  implementation,  of  course,  actually  computes  z = x + y + x*y, 
where  0 <=  z < 3.  This  can  be  done  by  adding  each  of  the  three  terms 
(each  of  which  is  less  than  1)  and  noticing  the  overflow.  If  the 
addition  does  not  overflow,  z < 1 and  nothing  needs  to  be  done. 

If  one  addition  overflows,  1 <=  z < 2,  but  after  overflow  we  get 
z-1 . We  want  (1+z)/2-1  = (z-1)/2,  so  just  divide  the  result  of 
the  wrapped  addition  by  2. 

If  both  additions  overflow,  the  addition  wraps  to  z-2,  but  we 
still  want  (z-1)/2  = (z-2)/2  + 1/2,  so  divide  the  wrapped  result 
by  2 and  add  1/2. 

Due  to  the  way  that  the  fixed-point  numbers  are  stored,  the  x*y  part  is 
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* the  high  half  of  the  32-bit  unsigned  product  of  x and  y.  This  can  be 

* safely  underestimated  if  desired,  if  a 64-bit  product  is  difficult  to 

* comput  e . 

* 

* The  simplest  snd  safest  definition  is 

* //define  U MU  LH_32  ( r , a , b ) (r)  = 0 
*/ 

#ifndef  UHULH_32 

//if  d e f i n ed  ( __G  N U C __ ) &S  definedC i 386__) 

/*  Inline  asm  goodies  */ 

//define  U M U LH_32  ( r , a , b ) asm ("mull  %2"  : " = d"(r)  : "%a"(a),  "mr"(b)  : "ax") 

#elif  HAVE64 

#define  UMU LH_3 2 ( r , a , b ) ((r)  = ( wo r d3 2 ) ( ( wo r d64  ) ( a ) * (b)  >>  32)) 

#e  I s e 

/*  Underestimate  the  product  */ 

#define  UMU LH_32 ( r , a , b ) ((r)  = ((a)  >>  16)  * ((b)  >>  16)) 

//end i f 

//endif  /*  !UMULH_32  */ 

//define  DERATING  2n  /*  # of  bits  to  underestimate  */ 

unsigned 

pgpRandPoolAddEntropy(word32  delta) 

{ 

n word32  frac,  t; 

n unsigned  n; 


n 

1 f 

(delta  < 1 

<<  DERATING) 

□ 

□ 

return  0; 

n 

n 

= 31 -DERATING; 

n 

i f 

([(delta  & 

0xf f f f 0000) ) 

a 

Q 

delta 

<<=  16,  n -=  16; 

n 

if 

([(delta  S 

0xff 000000)  ) 

a 

s 

delta 

<<=  8,  n -=  8; 

n 

i f 

([  (delta  S 

0xf 0000000)  ) 

a 

n 

delta 

<<=  4,  n -=  4; 

n 

i f 

([(delta  & 

0XC0000000) ) 

a 

n 

delta 

<<=  2,  n -=  2; 

□ 

i f 

([ (delta  & 

0x80000000)  ) 

Q 

n 

delta 

<<=  1 , n -=  1 ; 

n 

pgpAssert(n  < 

32); 

n 

/* 

Lose  high- 

order  bit  of  delta 

a pgpAssert(delta  & 0x80000000); 

n delta<<=1; 


n 

f r a c = 

randFrac; 

□ 

UMULH_ 

32(t, delta, frac); 

Q 

i f 

((frac  +=  t)  < t) 

{ 

n 

n 

if  ((frac  += 

delta)  < delta) 

n 

B 

n frac 

= (frac  >>  1)  + 0x80000000u 1 ; 

n 

B 

else 

B 

B 

n frac 

>>=  1; 

B 

Q 

n + + ; 

n 

> 

else 

if  ((frac  += 

delta)  < delta)  { 

Q 

n 

frac  >>=  1; 

B 

B 

n + + ; 
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n > 

n /*  n is  now  the  count  of  whole  bits  */ 

n if  (CrandBits  +=  n)  >=  RANDPOOLBITS ) { 

n n /*  Overflow  - saturate  at  RANDPOOLBITS  */ 

a a randBits  = RANDPOOLBITS; 

a n randFrac=0; 

a > 

a /*  Also  count  the  inflow  without  regard  to  outflow  */ 

a if  ((randInBits  +=  n)  >=  RANDPOOLBITS)  { 

a n randInBits  = RANDPOOLBITS; 

a } 

a returnn; 

> 

unsigned 

pgpRandPoolEntropy(void) 

{ 

a return  randBits; 

} 

unsigned 

pgpRandPoolSize(void) 

{ 

a return  RANDPOOLBITS; 

) 

unsigned 

pgpRandPoolInflow(void) 

{ 

a return  randInBits; 

} 


/* 

*a  DUMMY  POOL 

★ 

*B  The  dummy  pool  is  a pluggable  replacement  for  the  RandPool  to  be  used 

*B  for  generating  values  which  we  want  to  be  unique  but  don't  have  to  be 

*B  cryptographically  strong:  such  as  the  p and  q values  used  in  discrete 

*B  log  keys.  We  prefer  not  to  use  the  regular  RandPool  for  such  values 

*B  so  that  we  don't  leak  information  about  the  secret  values  which  are 

*a  calculated  in  close  proximity. 

★ 

*B  The  dummy  pool  should  be  used  as  the  "base"  paramater  for 

*n  pgpRandomC r ea t eX9_1 7 . It  always  returns  0 values,  and  the  X9.17  RNG 

*B  will  then  produce  non- c r y p t og r a ph i c a I I y-s t r ong  p s e u do- r a n dom  numbers. 

* 

*n  Use  pgpRandomAddBy tes  on  the  X9.17  Ra nd omC o n t ex t to  seed  it. 

*/ 

/*  Dummy  pool  always  returns  zeros  */ 
static  void 

d umPoo I G e t By t e s E n t r opy ( VO  i d *ctx,  byte  *buf,  unsigned  len,  unsigned  bits) 

{ 

a (void)ctx; 

a {void)bits; 
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n whi Le  ( Len--)  { 

n n *buf ++  = 0; 

n > 

> 

static  void 

dumPoo L AddBy t es ( VO i d *ctx,  byte  const  *p,  unsigned  Len) 
{ 


□ 

(void)ctx; 

Q 

( voi d ) p; 

U 

> 

(void) Len; 

static 

void 

d umPoo 1 S t i r ( VO i d *ctx) 

{ 

n 

(void)ctx; 

} 

static  void 

d umPoo L W i pe ( VO i d *ctx) 
{ 

n (void)ctx; 

> 


static  struct  PgpRandom  Dummy  Poo L Des c = { 

H "Dummy  random-number  pool", 

n d umPoo L AddBy t e s , dumPoo L G e t By t e s E n t r opy , dumPooLSt 

>; 


r,  dumPooLWipe 


struct  PgpRandomContext  const  pgpDummyPooL  = { 

n &DummyPooLDesc,  0,  (void  (*)(struct  PgpRandomContext  *))0 

>; 
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/* 

* pgpRndPoo L . h --  The  interfaces  to  the  pgpRandomPoo L . This  exports 

* the  randompooL  RNG  as  well  as  interfaces  to  the  entropy  in 

* the  random  pool,  including  random  events 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* $Id:  pg p Rnd Poo L . h , V 1.5. 2.1  1997/06/07  09:51:35  mhw  Exp  $ 

*/ 


«ifndef  PGPRNDPOOL.H 
#define  PGPRNDPOOL  H 


^include  "pgpRndom.h" 

^include  "pgpUsuaLs.h" 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi  f 

/*  One  true  random  number  generator:  the  global  random  number  pool.  */ 
extern  struct  Pg p R a ndomCon t e x t const  PGPExport  pg p Ra ndomPoo L ; 


/*  Dummy  pool  allows  non- c r y p t o-s t r ong  RNG's  for  public  values  */ 
extern  struct  PgpRandomContext  const  PGPExport  pgpDummyPooL; 

/* 

* Add  the  'event'  to  the  random  pool.  Returns  the  number  of  bits  of 

* entropy  that  was  added  to  the  random  pool  as  a result  of  the 

* irregularity  in  timing  of  this  event.  (This  can  also  be  used 

* for  bu t t on- c L o c ks , menu  selections,  and  so  on  - just  assign 

* each  such  event  a unique  "event"  code.) 

*/ 

unsigned  PGPExport  pgpRandPooLKeystroke  (int  event); 


/* 

* Add  entropy  based  on  the  current  mouse  position  to  the  random  pool. 

* Returns  the  number  of  bits  of  entropy  that  was  added  to  the  random 

* pool  as  a result  of  the  irregularity  in  timing  of  this  event. 

*/ 

unsigned  PGPExport  pg p Ra nd Poo  I Mou s e (word32  x,  word32  y); 


/*  Extra 
unsigned 
uns i gned 
uns i gned 


functions 
PGPExpo  rt 
PGPExpo  rt 
PGPExpo  rt 


for  entropy  estimation  */ 
pg pRa nd Poo L Add E n t ropy  (word32  delta); 
pgpRa ndPoo L En t r opy  (void); 
pg pRa nd Poo L S i z e (void); 


/* 

* Return  the  number  of  bits  added  to  the  rand  pool  over  its  Lifetime. 

* This  does  not  count  any  seed  bits  from  pgpRndSeed . c . 

*/ 

unsigned  PGPExport  pgpRandPooLlnflow  (void); 

Sifdef  cplusplus 

> 

# e nd i f 


#endif  /*  PGPRNDPOOL.H  */ 
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/* 

* 

* 

★ 

* 

* 

* 

★ 

* 

*/ 


pgpRndSeed.c  --  Read  and  write  randseed.bin  files,  to  seed  and 
random  number  generate  state. 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights 
Written  by:n  Derek  Atkins  < wa r L o r daM I T . E D U>  and  CoLin  PLumb 
$Id:  pg p Rnd S e e d . c , V 1.6. 2.1  1 997/06/07  09:51:35  mhw  Exp  $ 


store 


reserved. 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 
#end  i f 

#incLude  <stdio.h> 


^include 
#i nc  Lude 
#incLude 
#i nc  L ude 
^include 


pgpDebug.h" 
pgpRndSeed.h 
pgpCFB.h" 
pgpErr.h" 
pgpRndPoo  L . h 


/* 

* Load  the  RNG  state  from  the  file  on  disk  (randseed.bin). 

* Returns  0 on  success,  <0  on  error. 

* Must  read  at  Least  24  bytes  (the  size  of  the  X9.17  generator's 

* state)  to  be  considered  successful.  Any  additional  data  is  just 

* dumped  into  the  "true"  randpool. 

*/ 

/*  XXX  What  to  do  with  the  X9.17  RNG  data?  */ 


i nt 

pgpRandSeedRead  (FILE  *fiLe,  struct  Pg pRa ndomC o n t ex t const  *rc) 
{ 


byte  bufC128D; 
i n t L e n ; 


n 

s i ze_ 

t 

total; 

n 

i f ( ! 

file) 

n 

n 

return  PG P E R R_N 0_ F I LE ; 

Q 

i f ( ! 

r c ) 

Q 

n 

rc  = SpgpRandomPoo L ; 

n 

pgpAssert  (file); 

n 

/*  Dump 

the  file  into  the  random  seed  file  */ 

n 

total 

= 

0; 

□ 

for  ( 

r / 

) { 

Q 

□ 

Len  = fread  ((char  *)buf,  1,  sizeof(buf),  file); 

□ 

□ 

if  (len  <=  0 ) 

n 

n 

n break; 

n 

n 

total  +=  Len; 

n 

n 

pg pRa nd om Ad dBy t e s ( r c , buf,  Len); 

n 

> 

□ 

return 

total  < PGP_SEED_MIN_BYTES  ? PG P E R R_R AN D S E E D _T00 S M A LL 

0; 
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/* 

* Save  the  "state"  of  the  random  number  generator  to  "file"  using 

* "cfb"  as  the  washing  mechanism.  If  cfb  is  NULL,  do  not  wash 

* the  output. 

*/ 

VO  i d 

pg p Ra nd S ee dU r i t e (FILE  *file,  struct  Pg pR a nd omC o n t e x t const  *rc, 
n n struct  Pg p C f b C on t ex t *cfb) 

{ 

byte  bufC128D;  /*  Additional  bytes  written  out  */ 

unsigned  bytes; 
unsigned  L; 

n i f ( ! f i L e ) 

a a return; 


n i f ( ! r c ) 

n n rc  = &pg p Ra nd omPoo L ; 

n pgpRandomStir(rc); 


n 

Q 

n 

n 

n 

a 

n 

□ 

n 

n 

□ 

n 

n 

n 

> 


bytes  = (pgpRandPooLSize()+7)/8; 
if  (bytes  < PG P_ S E E D_M I N_B YT E S ) 
n bytes  = PGP_SEED_MIN_BYTES; 

else  if  (bytes  > 512) 
n bytes=512; 

while  (bytes)  { 

n I = (bytes  < sizeof(buf))  ? bytes  : sizeof(buf); 

n pgpRa ndomGe t By t e s ( r c , buf,  1); 

n if(cfb) 

n n pgp C f b En c r y p t (cfb,  buf,  buf,  1); 

n fwrite  (buf,  1,  I,  file); 

n bytes-=l; 

> 

memset  (buf,  0,  s i z eo f ( b u f ) ) ; 
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/* 

* pgpRndSeed.h  --  read  and  write  the  randseed.bin  file. 

★ 

* Copyright  CC)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa  r L o r d a)M  I T . E D U> 

* 

* This  is  a PubLic  API  Function  Header. 

★ 

* $Id:  pgpRndSeed . h,v  1.5. 2.1  1 997/06/07  09:51:35  mhw  Exp  $ 

*/ 

#ifndef  PGPRNDSEED.H 
#define  PGPRNDSEED.H 

SincLude  <stdio.h> 

#ifdef  ..cpLuspLus 
extern  "C"  { 

#end  i f 

struct  PgpCfbContext; 

#ifndef  T Y P E.PG PC F B C ONT EXT 
#define  T Y P E.PG PC F BC ONT EXT  1 

typedef  struct  PgpCfbContext  PgpCfbContext; 

#e n d i f 

struct  PgpRandomContext; 

#ifndef  T Y P E. PG P R AN  DOM C ONT EXT 
^define  TYPE. PGPRANDOMCONTEXT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

#endi  f 

/*  We  want  to  see  at  Least  this  many  bytes  in  randseed  */ 

#define  PGP. SEED. MIN. BYTESn  n 24 

int  PGPExport  pgpRandSeedRead  (FILE  *fiLe,  struct  PgpRandomContext  const  *rc); 
void  PGPExport  pg p Ra nd S e e d W r i t e (FILE  *fiLe, 

n struct  PgpRandomContext  const  *rc,  struct  PgpCfbContext  *cfb); 

#ifdef  ..cpLuspLus 
} 

#e nd i f 

#endif  /*  PGPRNDSEED.H  */ 


[CCHK:6848a36ccedd644ff202208fc22e792ffdbb5411d9dd4456fe79:: 
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/* 

★ 

* 

* 

* 

★ 

★ 

*/ 


pgpRndUnix.c  --  Get  h i g h- r e s o L u t i o n timing  information 
number  generator.  Unix  version.  (The 

Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL 

$Id:  pg p Rnd U n i X . c , V 1.1. 2. 2 1 997/06/1  2 02:29:37  mhw  Exp 


to  seed  the  random 
comp  Licated  one.) 

rights  reserved. 

$ 


#if  HAVE_CONFIG_H 
#incLude  "config.h" 

#end i f 

/* 

* This  code  uses  five  different  timers,  if  avaiLabLe.  Each  possibiLity 

* can  be  specificaLLy  enabLed  or  disabLed  by  predefining  USE_XX  to  1 

* or  0.  For  some,  the  code  attempts  to  detect  avaiLabiLity  a u t oma t i c a L L y . 

* If  the  symbols  HA\/E_XX  are  defined,  they  are  used.  If  not,  they  are  set 

* to  reasonable  defaults  whiLe  other  cLues  are  checked.  The  choices, 

* and  the  auto-detection  methods  used,  are: 

* - gethrtimeO,  if  H A V E_G  ET  H RT I M E is  set  to  1. 

* - cLock_gettime(CLOCK_REALTIHE, . . . ),  if  C LO C K_R E A LT I M E is  in  <time.h> 

* - get t i meof day ( ) , assumed  avaiLabLe  unLess  H A VE_G ETT I H EO F D A Y=0 

* - ge t i t i me r ( ITI MER_R E AL, . . . ) , if  ITIHER_REAL  is  defined  in  <sys/time.h> 

* - ftimeC),  assumed  avaiLabLe  unLess  HAVE_FTIME=0 

* 

* These  are  aLL  accessed  through  the  gettimeC),  timetype,  and  tickdiffC) 

* macros.  The  MINTICK  constant  is  something  to  avoid  the  g e t t i meo f d a y ( ) 

* gLitch  wherein  it  increments  the  return  vaLue  even  if  no  tick  has  occurred. 

* When  measuring  the  tick  intervaL,  if  the  difference  between  two  successive 

* times  is  not  at  Least  MINTICK  ticks,  it  is  ignored. 

*/ 

#ifndef  TIHE_UITH_SYS_TIHE 

/^define  TIME_WITH_SYS_TIME  In  /*  Assume  true  if  not  toLd  */ 

#e  nd i f 


/* 

* Include  <time.h>  and  <sys/time.h> 
*/ 

#if  HAVE_SYS_TIHE_H 
#incLude  <sys/time.h> 

#if  TIME_WITH_SYS_TIME 
#incLude  <time.h> 

#endi f 
#e  L se 

#incLude  <time.h> 

#e  nd i f 


#i nc  Lude 

<sys / types . h> 

ttincLude 

<sy s /times. h>n 

/* 

for 

t i mes ( ) 

*/ 

#incLude 

<std  L i b . h>n 

/* 

For 

q s o r t C ) 

*/ 

#incLude 

"pgpRnd.h" 

/tincLude 

"pgpRndom. h" 

t/incLude 

"pgpUsuaLs.h" 

# i f nd  e f 

USE  GETHRTIME 

CCCHK: 61 ed274bb0eeec71 81 eeSef a9f b3e3866f 2ddc0b21 f 5a2466520033555d3be1  77]] 
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#def i ne 

#end  i f 

USE_GETHRTIME  H A V E_G ET H RT I H E 

#if  USE. 

.GETHRTIME 

t y ped  e f 

#def i ne 

# d e f i n e 

#def i ne 

hrtime_t  timetype; 

gettime(s)  (*(s)  = gethrtimeC)) 

t i c kd  i f f ( s y,  t ) ((s)-(t)) 

HINTICK  0 

Seise 

Si f ndef 

USE_CLOCK_GETTIME 

Si f nd  e f 

HAVE_CLOCK_GETTIME 

Sdef i ne 

S e n d i f 

HAVE_CLOCK_GETTIHE  1 

#if  HAVE_CLOCK_GETTIME 
#ifdef  CLOCK_REALTIME 
#define  U S E_C LO C K_G ETT I M E 1 


Se  nd i f 

Send  i f 

Send  i f 

Sif  USE. 

.CL0CK_GETTIME 

Sd  e f i n e 

CH0ICE_CL0CK_GETTIHE  1 

typedef 

Sd  e f i n e 

Sdef i ne 

□ 

struct  timespec  timetype; 

gettime(s)  ( vo i d ) c 1 o c k_g e 1 1 i me ( C LOG K_ R E A LT I M E , s) 
t i c kd i f f ( s , t ) (( C s ). t v_ s e c- ( t ). t v_s e c )* 1 000000000  + \ 

(s).tv_nsec  - (t).tv_nsec) 

Si f nd  e f 

HAVE_CLOCK_GETRES 

Sdef i ne 

Send  i f 

Seise 

HAVE_CLOCK_GETRES  1 

Si f ndef 

USE_GETTIMEOFDAY 

Si f ndef 

HAVE_GETTIHEOFDAY 

Sdef  i ne 

S e nd i f 

HAVE_GETTIMEOFDAY  In  /*  Assume  we  have  it...  */ 

Sdef i ne 

S e nd i f 

USE_GETTIHEOFDAY  HAVE_GETTIHEOFDAY 

Sif  USE. 

.GETTIMEOFDAY 

typedef 

S d e f i n e 

Sdef i ne 

Sd  e f i n e 

Seise 

struct  timeval  timetype; 

gettime(s)  C vo i d ) g e 1 1 i me  of  da y ( s , (struct  timezone  *)0) 

tickdiff(s,t)  (((s).tv_sec-(t).tv_sec)*1000000+(s).tv_usec-(t).tv_usec) 

HINTICK  1 

Si f nd  e f 

USE_GETITIMER 

Si f nd  e f 

HAVE.GETITIHER 

Sdef i ne 

S end i f 

HAVE_GETITIHER  1 

Si f nde  f 

HAVE_SETITIMER 

Sdef i ne 

Sendi f 

HAVE_SETITIHER  1 

#-if  HAVE_GETITIMER  S&  H A V E_  S ET  I T I H E R 
#ifdef  ITIf1ER_REAL 

[[CHK:5556ca6dd450e411a214433cde58671166583e56680eb77ff61ddcb3e6c68e4cb:: 
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^define  USE_GETITIHER  1 
#e  nd i f 
#end i f 
#end i f 

ttii  USE_GETITIHER 
^define  C H 0 1 C E_G ET I T I M E R 1 

^include  <signal.h>n  /*  For  signaU),  SIGALRM,  SIG_IGN  */ 

typedef  struct  itimervaL  timetype; 

^define  gettime(s)  ( vo i d ) ge t i t i me r ( IT IHER_RE AL,  s) 

/*  Subtract  *backwards*  because  timer  is  counting  *doun*  */ 

//define  t i c kd  i f f ( s , t ) (((  t ).  i t _va  L u e . t v_  s e c- ( s ).  i t _va  L u e . t v_s  e c )*  1 000000  + \ 
n C t ) . i t _ va L u e . t v_u s e c - C s ) . i t _ va L u e . t v_u s e c ) 

//define  HINTICK  1 

ft  else 


//ifndef  USE_FTIME 
//ifndef  HAVE_FTIHE 
//define  HAVE_FTIME  1 
#e  nd i f 

//ifndef  HAVE_SYS_TIMEB_H 
//define  H A V E_S  Y S_T  I M EB_H  1 
//endi  f 

#define  USE_FTIME  HAVE_FTIHE  &S  H A V E_S Y S_T I M EB_ H 
//end  i f 


//if  USE_FTIHE 
//include  <sys/timeb.h> 
typedef  struct  timeb  timetype; 

#define  gettime(s)  ( vo i d ) f t i me ( s ) 

//define  t i c kd  i f f ( s , t ) ( ( ( s ) . t i me- ( t ) . t i me  ) * 1 000  + (s).miLLitm  - (t).miLLitm) 
//define  HINTICKn0 


ft  else 


//error  No  clock  available 

//endif  /*  USE_FTIME  */ 

//endif  /*  USE_GETITIHER  */ 

//endif  /*  U S E_G  ETT I M EO  F D A Y */ 

//endif  /*  USE_CLOCK_GETTIHE  */ 

//endif  /*  U S E_G  ETH  RT I H E */ 

//if  CHOICE  CLOCK  GETTIHE  &&  H AV  E_C  LO  C K_G  ET  R E S 


static  unsigned 
ranTickSize(void) 

{ 

n struct  timespec  res; 

n c I o c k_g e t r e s ( C LO C K_R E A LT I H E , 8res); 

n return  ( u n s i g n ed ) r e s . t v_n s e c ; 

} 

//else  /*  Normal  clock  resolution  estimation  */ 
#if  NOISEDEBUG 
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#incLude  <stdio.h> 

# e nd i f 

//define  N 15n  /*  Number  of  deltas  to  try  (at  Least  5,  preferably  odd)  */ 

/*  Function  needed  for  qsortC)  */ 
static  i nt 

r a n C ompa r e ( VO i d const  *p1,  void  const  *p2) 

{ 

n return  *(unsigned  const  *)p1  > *(unsigned  const 

a *(unsigned  const  *)p1  < *(unsigned  const 

} 

/* 

* Find  the  resolution  of  the  h i g h - r e s o L u t i on  clock  by  sampling  successive 

* values  until  a tick  boundary,  at  which  point  the  delta  is  entered  into 

* a table.  An  average  near  the  median  of  the  table  is  taken  and  returned 

* as  the  system  tick  size  to  eliminate  outliers  due  to  descheduLing  (high) 

* or  tv0  not  being  the  "zero"  time  in  a given  tick  (Low). 

* 

* Some  trickery  is  needed  to  defeat  the  habit  systems  have  of  always 

* incrementing  the  microseconds  field  from  g e 1 1 i meo f da y ( ) results  so  that 

* no  two  calls  return  the  same  value.  Thus,  a "tick  boundary"  is  assumed 

* when  successive  calls  return  a difference  of  more  than  HINTICK  ticks. 

* (For  g e t t i me o f da y ( ) , this  is  set  to  2 us.)  This  catches  cases  where  at 

* most  one  other  task  reads  the  clock  between  successive  reads  by  this  task. 

* More  tasks  in  between  are  rare  enough  that  they'll  get  cut  off  by  the 

* median  filter. 

* 

* When  a tick  boundary  is  found,  the  *first*  time  read  during  the  previous 

* tick  (tv0)  is  subtracted  from  the  new  time  to  get  microseconds  per  tick. 

* 

* Suns  have  a 1 us  timer,  and  as  of  SunOS  4.1,  they  return  that  timer,  but 

* there  is  “50  us  of  system-call  overhead  to  get  it,  so  this  overestimates 

* the  tick  size  considerably.  On  SunOS  5.x/SoLaris,  the  overhead  has  been 

* cut  to  about  2.5  us,  so  the  measured  time  alternates  between  2 and  3 us. 

* Some  better  algorithms  will  be  required  for  future  machines  that  really 

* do  achieve  1 us  granularity. 

* 

* Current  best  idea:  discard  all  this  hair  and  use  Deli  Maurer's  entropy 

* estimation  scheme.  Assign  each  input  event  (delta)  a sequence  number. 

* 16  bits  should  be  more  than  adequate.  Hake  a table  of  the  Last  time 

* (by  sequence  number)  each  possibe  input  event  occurred.  For  practical 

* implementation,  hash  the  event  to  a fixed-size  code  and  consider  two 

* events  identical  if  they  have  the  same  hash  code.  This  will  only  ever 

* underestimate  entropy.  Then  use  the  number  of  bits  in  the  difference 

* between  the  current  sequence  number  and  the  previous  one  as  the  entropy 

* estimate. 

* 

* If  it's  desirable  to  use  Longer  contexts,  Maurer's  original  technique 

* just  groups  events  into  non-overlapping  pairs  and  uses  the  technique  on 

* the  pairs.  If  you  want  to  increment  the  entropy  numbers  on  each  keystroke 

* for  u s e r- i n t e r f a c e niceness,  you  can  do  the  operation  each  time,  but  you 

* have  to  halve  the  sequence  number  difference  before  starting,  and  then  you 

* have  to  halve  the  number  of  bits  of  entropy  computed  because  you're  adding 

* them  twice. 

* 

* You  can  put  the  even  and  odd  events  into  separate  tables  to  close  Maurer's 
Ci:CHK:355bb4e329944c5f4b6286cc27b1220c86ff6a246753583d3deb000f3784e03c9:: 


*)p2  ? 1 : 

*)p2  ? -1  : 0; 


1650 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpRndUnix.c 


* model  exactly,  or  you  can  just  dump  them  into  the  same  table,  which  will 

* be  more  conservative. 

*/ 

static  unsigned 
ranTickSize(void) 

{ 

n unsigned  i = 0,  j = 0,  diff,  dCND; 

n timetype  tv0,  tvl,  tv2; 

n / * 

n * TODO  Get  some  per-run  data  to  seed  the  RNG  with, 

n *pid,  ppid,  etc. 

n * / 


n 

gettime(&tv0) 

f 

n 

tvl  = 

t v0; 

□ 

do  { 

n 

n 

gettime(&tv2) ; 

n 

D 

diff 

- ( un s i g n ed ) t i c kd i f f ( t V 2 , tvl); 

tt 

D 

if  (diff  > MINTICK)  ( 

n 

□ 

Q 

dCi++:  = diff; 

n 

n 

n 

tv0  = tv2; 

n 

o 

n 

j = 0; 

n 

Q 

> else  if  (++j  >=  4096)n/*  Always  getting  <=  MINTICK 

n 

□ 

□ 

return  MINTICK  + IMINTICK; 

n 

Q 

tvl  = 

tv2; 

□ 

> wh  i 

1 e ( i < 

N); 

o 

/*  Return  average  of  middle  5 values  (rounding  up)  */ 

n 

qsort(d,  N,  sizeof(dC0:),  ranCompare); 

n 

diff 

= (di;N/2 

-2:  + dCN/2-i:  + dCN/2:  + di;N/2  + i:  + d:N/2  + 2:  + 4)/5; 

#if  NOISEDEBUG 

n fprintfCstderr,  "Tick  size  is  %u\n",  diff); 

# end i f 

n return  diff; 

> 

#endif  /*  Clock  resolution  measurement  selection  */ 


/* 

* Add  as  much  timing-dependent  random  noise  as  possible 

* to  the  randPool.  Typically,  this  involves  reading  the  most 

* accurate  system  clocks  available. 

* 

* Returns  the  number  of  ticks  that  have  passed  since  the  last  call, 

* for  entropy  estimation  purposes. 

*/ 

word32 

ranGe t Ent ropy ( s t rue t Pg pRa ndomC o n t e x t const  *rc) 

< 

n word32  delta; 

n t i metype  t ; 

n static  unsigned  ticksize  = 0; 

n static  timetype  prevt; 

n gettimeC&t); 

#if  CHOICE_GETITIHER 

n /*  If  itimer  isn't  started,  start  it  */ 

n if  ( t . i t _ va I u e . t v_ s e c ==  0 &&  t . i t _ va I u e . t v_u s e c ==  0)  { 

n n / * 


[CCHK: b27c69f cf 2e3f 86db0e1  24c022  9f 787c87700d0f 3935ca9b57a99063087ed1 f 6a:: 
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n 

n 

a 

□ 

□ 


□ 

D 

□ 

□ 

n 


n n 

#ifdef  SIGALRM 


* start  the  timer  - assume  that  PGP  won't  be  running  for 

* more  than  31  days... 

*/ 

t . i t _ va L u e . t v_s e c = 1 000000000; 
t . i t_i nterva L . tv_sec  = 1000000000; 
t . i t _ i n t e r va L . t v_u s e c = 0; 


n n s i g na L ( S I G A LRM,  SIG_IGN);n  /*  just  in  case..  */ 

#end  i f 

n n setitimer(ITIHER_REAL,  8t,  NULL); 

n n t . i t _ va L u e . t v_ s e c = 0; 

n > 

n pgpRa ndomAddBy t e s ( r c , (byte  const  * ) &t . i t _va L ue , s i z eo f ( t . i t _ va L u e ) ) ; 

Seise 

n pg pRa ndomAddBy t e s ( r c , (byte  const  *)&t,  sizeof(t)); 

Sendi  f 

n if  (Iticksize) 

n n ticksize  = ranTickSize(); 

n delta  = ( wo r d3 2 ) ( t i c kd i f f ( t , prevt)  / ticksize); 

n prevt=t; 


n return  delta; 

} 


C:CHK:6f227325f8184ac5587a557af3b01ec:] 
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/* 

* pgpRndVMS.c  --  Get  environmental  noise  to  seed  the  random  number  generator. 

* VHSversion. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  hasn't  been  examined  in  a Long  time  (December,  1995). 

* Could  someone  who  knows  VMS  please  have  a Look  at  it  and  determine 

* if  this  is  stiLL  good? 

* 

* $Id:  pgpRndVHS . c, V 1.1. 2.1  1 997/06/07  09:51:36  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e nd i f 


#incLude 
#i nc  Lude 
#incLude 


pgpRnd . h " 
pgpRndom . h " 
pgpUsua  L s . h 


/* 

* Add  as  much  e n v i r onmen t a L L y-d e r i ve d random  noise  as  possible 

* to  the  randPooL.  Typically,  this  involves  reading  the  most 

* accurate  system  clocks  available. 

* 

* Returns  the  number  of  ticks  that  have  passed  since  the  Last  call, 

* for  entropy  estimation  purposes. 

*/ 

wo  rd32 

r a nG e t En t r opy ( s t r u c t Pg p Ra ndomC o n t e x t const  *rc) 

{ 

D word32  delta; 

n word32  d1;n  /*  HSW  of  difference  */ 

n word32  tC2D;n  /*  Little-endian  64-bit  timer  */ 

n static  word32  prevtC23; 


n 

□ 

n 

□ 

n 

□ 

□ 

Q 

n 

Q 

n 

n 

n 

n 

n 

n 

□ 

Q 

o 

□ 

n 

n 


S YSSGETTI H ( t ) ; n /*  VMS  hardware  clock  increments  by  100000  per  tick  */ 
pg pRa ndom Ad d By t e s ( r c , (byte  const  *)t,  sizeof(t)); 

/*  Get  difference  in  d1  and  delta,  and  old  time  in  prevt  */ 

d1  = t[1]  - prevtCID  + (tL03  < prevtC0]); 

prevtCID  = tC13,- 

delta  = tC03  - prevtC03; 

prevtC0!]  = tC0D; 

/*  Now,  divide  the  64-bit  value  by  100000  = 2^5  * 5*5  = 32  * 3125  */ 

/*  Divide  value,  MSU  in  d1  and  LSW  in  delta,  by  32  */ 

delta  >>=  5 ; 

delta  1=  d1  <<  (32-5); 

d1  »=  5; 

/* 

* Divide  by  3125.  This  fits  into  16  bits,  so  the  following 

* code  is  possible.  2*32  = 3125  * 1374389  + 1671. 

* 

* This  code  has  confused  people  reading  it,  so  here's  a detailed 

* explanation.  First,  since  we  only  want  a 32-bit  result, 

* reduce  the  input  mod  3125  * 2*32  before  starting.  This 

* amounts  to  reducing  the  most  significant  word  mod  3125  and 

* Leaving  the  L ea s t -s i g n i f i c a n t word  alone. 


CCCHK:647f5 99421 bf64006d99d3aaa87dd439c3ee75d880ff64dda5c78d6d812deb2d2:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1653 


pgpRndVMS.c 


n 

□ 

□ 

Q 

n 

n 

n 

Q 

□ 

n 

□ 

D 

□ 

n 

n 

n 

□ 


* 

* Then,  using  / for  mathematical  (real,  not  integer)  division,  we 

* want  to  compute  floor((d1  * 2*32  + d0)  / 3125),  which  I'LL  denote 

* using  the  oLd  L ] syntax  for  floor,  so  it's 

* [ (d1  * 2*32  + d0)  / 3125  ] 

* = [ (d1  * (3125  * 1374389  + 1671)  + d0)  / 3125  ] 

* = C d1  * 1374389  + (d1  * 1671  + d0)  / 3125  1 

* = d1  * 137438  + C Cdl  * 1671  + d0)  / 3125  ] 

* = d1  * 137438  + : d0  / 3125  D + C (d1  * 1671  + d0  % 3125)  / 3125  2 

* 

* The  C / operator,  applied  to  integers,  performs  C a / b D,  so 

* this  can  be  implemented  in  C,  and  since  d1  < 3125  (by  the  first 

* modulo  operation),  d1  * 1671  + d0  % 3125  < 3125  * 1672,  which 

* is  5225000,  Less  than  2*32,  so  it  all  fits  into  32  bits. 

*/ 

d1  %=  3125;n  /*  Ignore  overflow  past  32  bits  */ 

delta  = delta/3125  + d1*1374389  + (delta%3125  + d1*1671)  / 3125; 


a return  delta; 

> 
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/* 

* pgpRndUi n32 . c --  Get  h i g h - r e s o L u t i on  timing  information  to  seed  the  random 

* number  generator.  Win32  version. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pg p Rnd W i n3 2 . c , V 1.2. 2.1  1997/06/07  09:51:36  mhw  Exp  $ 

*/ 


#if  HAVE  CONFIG  H 


#i nc  lude 

#endi f 

"config.h" 

#include 

<wi ndows . h> 

#i nc lude 

"pgpUsuals.h 

/^include 

"pgpRndom. h" 

#i nc  lude 

"pgpRnd. h" 

/* 

* Add  as  much  timing-dependent  random  noise  as  possible 

* to  the  randPooL.  Typically,  this  involves  reading  the  most 

* accurate  system  clocks  available. 

* 

* Returns  the  number  of  ticks  that  have  passed  since  the  last  call, 

* for  entropy  estimation  purposes. 

*/ 


wo  rd32 

ranGe t En t ropy ( s t r u c t Pg pRa ndomC o n t e x t const  *rc) 


□ 

wo  rd32 

delta; 

n 

static 

WORD  oldms; 

n 

static 

DWORD  oldlow; 

n 

LARGE, 

INTEGER  newperf; 

Q 

SYSTEHTIME  stime; 

n 

if  ( Que r y Pe r f 0 rma n c e C oun t e r C &ne wpe r f ) ) { 

n 

s 

pgpRandomAddBytesC rc,  (byte  *)&newperf 

n 

n 

delta  = newperf. LowPart  - oldlow; 

n 

Q 

oldlow  = newperf. LowPart; 

n 

> else 

{ 

n 

D 

GetSystemTime(&stime); 

n 

n 

pg pRa ndomAd dBy t e s ( r c , (byte  *)&stime. 

Q 

n 

delta  = s t i me . wH i 1 1 i s e c ond s - oldms; 

n 

n 

oldms  = s t i me . wM i 1 1 i s e c ond s ; 

□ 

D 

delta  /=  10;n  /*  crude  resolution  */ 

n 

> 

n 

return 

delta; 

si zeofCnewperf  ) ); 


sizeof(stime)); 
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/* 

* pgpRndom.c  — a general  RNG  interface 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  CoLin  Plumb  and  Derek  Atkins  <wa r L o r dSM I T . E D U> 

★ 

* $Id:  pgpRndom.c, V 1.6. 2.1  1 997/06/07  09:51:36  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

#end  i f 


# i n c L ud e 
#i nc  Lude 
# i n c L ud e 
#i nc lude 
#i nc  Lude 
SincLude 


pgpCFB.h" 
pgpCipher.h" 
pgpMem. h" 
pgpRndom  . h " 
pgpRndPooL . h" 
pgpUsuals.h" 


/*  X9.17  interface  */ 


struct  X9_17Context  { 
a struct  Pg p C f b C on t e X t *cfb; 

n struct  PgpRandomContext  const  *base_rc; 

>; 

static  void 

randomX9_1 7AddBytes ( voi d *priv,  byte  const  *buf,  unsigned  Len) 

{ 

n struct  X9_17Context  *ctx  = (struct  X9_17Context  *)priv; 

n pg p C f b Ra nd Wa s h ( c t x-> c f b , buf,  Len); 

} 


static  void 

randomX9_1 7GetBytesEnt ropyCvoi d *priv,  byte  *buf,  unsigned  Len,  unsigned  bits) 
{ 

n struct  X9_17Context  *ctx  = (struct  X9_17Context  *)priv; 

n byte  saLtCsizeof  c t x-> c f b-> i v ] ; 

n unsigned  bLocksize  = c t x-> c f b-> c i ph e r-> c i p h e r->b L o c ks i z e ; 

n unsigned  t; 

n /*  Charge  the  entropy  to  the  base  RNG  */ 

a pgpRandomGetBytesEntropy(ctx->base_rc,  buf,  0,  bits); 


n t = pgpCf bRandBytes( ctx->cf b,  buf,  Len); 

a Len-=t; 

a buf+=t; 


a 

a 

n 

a 

a 

□ 

a 

} 


while 

a 

□ 

a 

a 

a 

> 


(Len)  { 

pgpRa ndomGe t By t es En t r opy ( c t x->ba se_ r c , salt,  bLocksize,  0); 
pg p C f b Ra nd C y c L e ( c t x-> c f b , salt); 
t = pg p C f bRa ndBy t e s ( c t x-> c f b , buf,  Len); 

Len  - = t ; 
buf  +=  t ; 
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static  void 

ra nd omX9_1 7 S t i r ( VO i d *priv) 

{ 

n struct  X9_17Context  *ctx  = (struct  X9_17Context  *)priv; 

n pgpCfbRandWash(ctx->cfb,  (byte  const  0); 

n pg p Ra ndomS t i r ( c t x->ba s e_ r c ) ; 

> 


static  void 

r a n d omX 9_1 7W i pe ( VO i d *priv) 

{ 

n struct  X9_17Context  *ctx 

n pg p C f b W i p e ( c t x-> c f b ) ; 

> 


(struct  X9_17Context  *)priv; 


struct  PgpRandom  X9_17Desc  = { 
n "X9.17-based  cryptographic  PRNG", 

n r a ndomX9_ 1 7 AddBy t e s , r a nd omX9_ 1 7G e t By t e s E n t r opy , 

n r a ndomX9_ 1 7 S t i r , r a ndomX9_1 7 W i pe 

>; 

/*  Forward  reference  */ 

static  void  r a ndomX9_1 7 De s t r oy  (struct  Pg p Ra nd omC on t e x t *rc); 


struct  Pg p Ra ndomC o n t e X t * 

pg p Ra n dome r ea t e X9_1 7 ( s t r u c t PgpCipher  const  *c, 

struct  Pg pRa nd omC o n t ex t const  *base) 

{ 

struct  Pg p Ra ndomC on t ex t *rc; 
struct  PgpCf bContext  *cfb; 
struct  X9_17Context  *ctx; 
byte  bufC32]; 


cfb  = pg p C f b C r ea t e ( c ) ; 
if  ( ! cf b) 
n returnO; 

rc  = (struct  Pg pRa ndomC on t e x t * ) pg pM em A L L o c ( s i z eo f ( * r c ) ) ; 
if  ( ! rc)  { 

n pg  p C f b De  s t r oy  ( c f b ) ; 

n returnO; 

} 

ctx  = (struct  X9_17Context  *)pgpHemALLoc(sizeof(*ctx)); 
if  ( ! ctx)  { 

n pgpC f bDes t roy ( c f b ) ; 

n pg pH em F r e e ( r c ) ; 

n return0; 

} 

/*  Get  a reasonable  initial  state  */ 

pgpRandomGetBytesEnt ropy(base,  buf,  sizeof(buf),  0); 
pg pC f b Ra n d Wa s h ( c f b , buf,  s i zeof ( buf  ) ) ; 
memset(buf,  0,  s i z eo f ( bu f ) ) ; 


rc->random  = &X9_17Desc; 
rc->priv  = ctx; 

rc->destroy  = r a ndomX9_1 7 D e s t r oy ; 
ctx->cfb  = cfb; 
ctx->base_rc  = base; 
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n return  rc; 

> 

/*  The  default:  X9.17,  with  CASTS,  based  on  the  pg pRa ndomPoo L . */ 

struct  PgpRandomContext  * 

pgpRandomCreate(void) 

{ 

n struct  PgpCipher  const  *c; 

n c = pgpCipherByNumber(PGP_CIPHER_CAST5); 

n i f ( ! c ) 

n n returnO; 

n return  pg p Ra n d omC r e a t e X 9_ 1 7 C c , &pg p Ra n domPoo L ) ; 

> 


/* 

* P s e u d o- r a nd om  number  generator  based  on  the  dummy  pool  (which 

* always  produces  zeros).  This  is  useful  for  public  data  where  we 

* just  want  uniqueness  but  don't  need  cryptographic  strength,  and  where 

* we  don't  want  to  draw  down  the  randomness  in  the  true  random  pool. 

* An  example  would  be  generating  the  public  prime  in  DSA  key. 

* Use  pg p Ra nd om Ad dBy t e s to  seed  it. 

*/ 

struct  PgpRandomContext  * 
pgpPseudoRandomCreate(void) 

n struct  PgpCipher  const  *c; 


D 

n 

D 

n 

} 


c = pg p C i p h e r By N umb e r C PG P_ C I PH E R_C A ST  5 ) ; 
if  ( ! c ) 

n return0; 

return  pgpRandomCreateX9_17(c,  SpgpDummyPool); 


/* 

* The  simple  get-byte  function...  entropy  charged  is  the  number  of 

* bits  read  out. 

*/ 

void 

pgpRa ndomGe t By t e s ( s t ru c t PgpRandomContext  const  *rc,  byte  *buf,  unsigned  len) 
{ 

n pg p Ra ndomGe t By t e s E n t r opy ( r c , buf,  len,  8*len); 

> 


static  void 

r a n d omX9_1 7 De s t r oy  (struct  PgpRandomContext  *rc) 

{ 

n struct  X9_17Context  *ctx  = (struct  X9_17Context  *)rc->priv; 

n struct  Pg p C f b C on t e X t *cfbp  = ctx->cfb; 


□ 

□ 

n 

D 

n 

□ 

> 


pgpCfbWipe(cfbp); 

pgpCfbDestroy(cfbp); 

memset(ctx,  0,  s i z eof ( *c t x ) ) ; 

pgpHemFree(ctx); 

memset(rc,  0,  s i z eo f ( * r c ) ) ; 

pgpHemFree(rc); 
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/* 

* Generate  a uniformly  distributed  random  number  from  0.. 

* range  is  Limited  to  65536. 

* 

* This  is  very  careful  to  avoid  all  bias  in  its  selection 

* using  too  many  input  bytes.  For  a range  of  256  or  Less 

* one  byte  if  possible,  and  an  average  of  Less  then  two, 

* the  worst-case  range=129. 

*/ 

unsigned 

pgpRandomRange ( St ruct  PgpRandomCont ext  const  *rc,  unsigned 
{ 

unsigned  d,  r; 
byte  bC2:; 


n 


> 


if  (range  <=  1) 

return  0; 

if  (range  <=  256)  ( 

d = 256/range; 
do  { 

pg p Ra ndomGe t By t e s ( r c , b,  1); 
r = bC0:/d; 

> while  (r  >=  range); 

> else  ( 

d = (unsigned)(65536/range); 
do  { 

pgpRandomGetBytes(rc,  b,  2); 
r = ( (unsigned)bC0:  <<  8 | bC13)/d 

} while  ( r >=  range) ; 

n bCi:  = 0; 

> 

bC0:  = 0; 
return  r; 
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/* 

* pgpRndom.h  --  a General  Random  Number  Generator  interface 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  CoLin  Plumb  and  Derek  Atkins  <ua r L o r d 3 H I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpRndom.h, V 1.9. 2.1  1997/06/07  09:51:37  mhw  Exp  $ 

*/ 

#ifndef  PGPRNDOM_H 
#define  PGPRNDOM.H 

#incLude  "pgpUsuals.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e n d i f 


struct  PgpCipher; 

#ifndef  T Y PE_PG P C I PH E R 
#define  T Y PE_PG P C I P H E R 1 
typedef  struct  PgpCipher  PgpCipher; 
#end  i f 


struct  PgpRandom  i 


□ 

char 

const  *name; 

Q 

void 

(*addBytes)  (void  *priv. 

byte  const  *buf. 

□ 

void 

(*getBytesEnt ropy)  (void 

*priv,  byte  *buf. 

n 

unsigned  bits); 

n 

void 

(*stir)  (void  *priv); 

s 

>; 

void 

(*wipe)  (void  *priv); 

#ifndef  T YPE.PG PR AN D OM 
#define  TYPE  PGPRANDOM  1 


unsigned 
unsi gned 


L e n ) ; 
L en. 


typedef  struct  PgpRandom  PgpRandom; 
# en d i f 


struct  Pg pRa nd omC on t e X t { 
n struct  PgpRandom  const  *random; 

n void*priv; 

n void  (*destroy)  (struct  PgpRandomContext  *rc); 

>; 

#ifndef  T Y P E_PG PR AN  DOM CONT E XT 
#define  T Y P E_PG PR AN  DOM C ONT E XT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

#e nd i f 


#define  pg pRa nd om AddBy t e s ( r c , b , L ) ( r c ) -> r a ndom->a ddBy t e s C ( r c ) ->p r i v , b,  L) 
#define  pg pRa nd omGe t By t e s E n t r o py ( r c , b , I , t ) \ 

a ( r c ) -> r a ndom->ge t By t es En t ropy C ( r c ) ->p r i V,  b,  L,  t) 

#define  pg pRa nd omS t i r ( r c ) ( r c ) -> r a nd om-> s t i r ( ( r c ) -> p r i v ) 

#define  pg p Ra nd omW i p e ( r c ) ( r c ) -> r a nd om-> w i pe ( ( r c ) -> p r i v ) 

#define  pgpRandomDest roy ( rc ) ( r c ) ->des t roy ( r c ) 


struct  PgpCipher; 
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void  pg pRandomGe t By t e s ( s t rue t Pg p R a nd omC on t e x t const  *rc, 
n byte  *buf,  unsigned  Len); 

/* 

* Another:  The  X9.17  generator,  with  a specified  cipher  and 

* base  random  generator  used  to  seed  it. 

*/ 

struct  PgpRandomContext  PGPExport  * 

pg p Ra ndomC r ea t e X9_1  7 ( s t r u c t PgpCipher  const  *c, 

a n struct  PgpRandomContext  const  *base_rc); 

/*  The  default:  X9.17,  with  CASTS,  based  on  the  pgpRandomPoo L */ 
struct  PgpRandomContext  PGPExport  *pg p Ra ndom C r e a t e (void); 

/* 

* A non-strong  p s e u do- r a n dom  number  generator.  Use  this  only  when 

* you  don't  need  cryptographic  strength,  but  just  want  some  unique 

* values,  and  don't  want  to  draw  down  the  random  pool  (for  example, 

* generating  the  public  primes  in  a DSA  key).  Based  on  the  dummy 

* pool,  which  always  produces  zeros,  and  a CASTS  cipher  used  per 

* X9.17  to  generate  the  pseudo  random  values. 

*/ 

struct  PgpRandomContext  PGPExport  *pgpPseudoRandomCreate  (void); 

/*  Generate  a random  number  in  the  specified  range  */ 

unsigned  PGPExport  pg pRa ndomRa n g e ( s t r u c t PgpRandomContext  const  *rc, 

n unsigned  range); 

#ifdef  cplusplus 

> 

#endi f 

#endif  /*  PGPRNDOM  H */ 
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c 


OBJS=n  pgpConf.o  pgpDecPipe.o  pgpEncPipe.o  pgpFiLeType.o  pgpEnv.o  \ 
n pgpSigPipe.o  pg pS i g S pe c . o 

SHAREDHDRS=  pgpConf.h  pgpDecPipe.h  pgpEncPipe.h  pg p F i L eTy pe . h pgpEnv.h  \ 
n pgpSigPipe.h  pgpSigSpec.h 

all::  DONE 


U 

U M b /pgp /u t i L s /Ma ke f i L e . i n 

n 

K Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

# $Id:  Makef i Le . i n,v  1.16.2.4  1997/06/07  09:51:38  mhw  Exp  $ 

U 
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n 

It  L i b / pg  p /u  t i L s /ma  ke  f i L e . ms  c 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

ft  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:51:38  mhw  Exp  $ 

n 

PGPLIB  = h.  .\.  .\pgpLib.  Lib 

C F L AG S = -I . . \ \ \ i n c L ud e - 1 . . \ . . \ i n c L u d e \ 
n -I..\..\..  -DHAVE_C0NFIG_H=1  SCDEBUG) 

a L L : : n n Lib 

headers:n  incL 

lincLude  " ma ke f i L e . i n " 

i n c L : 

n if  not  "$(SHAREDHDRS) \ 

n n for  %f  in  ( $ ( S H AR E D H D R S ) ) do  copy  %f  . . \ \ \ i n c L u d e 

a if  not  "$(PRIVHDRS)"==""  \ 

n n for  %f  in  ( SCPRIVHDRS)  ) do  copy  %f  . . \ . . \ i n c L u d e 

D0S0BJSX=n  $ ( OB J S : . o= . o b j ) 

D0S0BJS=n  $( DOSOBJSX : Uni x=Wi n32 ) 

Lib:n  $(D0S0BJS) 

. c . ob j : 

n $(CC)  SCCFLAGS)  -Z7  -c  $< 

c L ea  n : 

H de  L * . ob j 

DONE  : 

n if  exist  $(PGPLIB)  L i b/out : $ C PGPLIB ) $(PGPLIB)  $(D0S0BJS) 

n if  not  exist  SCPGPLIB)  L i b / ou t : $ ( PG P L I B ) SCDOSOBJS) 
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/* 

* pgpConf.c  - Parse  configuration  files  and  Lines. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  CoLin  Plumb  and  Derek  Atkins  <ua  r L o r dSM  I T . E D Ll> 

* 

* $Id:  pgpConf.c, V 1.6. 2. 2 1 997/06/07  09:51:38  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
#incLude  "config.h" 

# en  d i f 


ttincLude 

<ctype.h> 

# i n c L ude 

<stdio. h> 

#incLude 

<stdLib.h>n 

^include 

<string.h> 

ttincLude 

"pgpConf  . h" 

#include 

"pgpEnv.h" 

#include 

"pgpErr.h" 

#i nc  Lude 

"pgpHsg  . h" 

#i nc  1 ude 

"pgpUI . h" 

/*  For  strtoLC)  */ 


struct 

n 

D 

□ 

n 

>; 


Conf i g { 

char  const  *name; 
i nt  va  r ; 
unsigned  flags; 
int  min,  max; 


/*  The 

following  are  i 

n the 

flags: 

*/ 

#def i ne 

0PT_ 

TYPEMASKn 

3 

#def i ne 

0PT_ 

IGNOREn 

0n 

/* 

Ignore  i 

f encountered  */ 

#def i ne 

0PT_ 

BINARYn 

In 

/* 

Boolean 

options:  min  = false,  max  = true 

#def i ne 

0PT_ 

INTnn 

2n 

/* 

Integer 

option,  in  range 

Cmin,max!]  */ 

#def i ne 

0PT_ 

STRINGn 

3n 

/* 

String, 

of  length  <=  max 

*/ 

/*  The 

following  addit 

i ona  1 

flags 

are  also 

used : */ 

#def i ne 

0PT_ 

CMDnn 

4n 

/* 

Command 

Line  only  */ 

#def i ne 

0PT_ 

LOWERD 

8n 

/* 

Lowercase  strings  before 

storing  */ 

#def i ne 

OPT 

FUNCn 

1 6n 

/* 

Call  function  rather  than 

set  conf  */ 

*/ 


/*  Up  to  this  many  errors  are  ignored  when  reading  a config  file.  */ 
^define  MAX_ERRORS  3n  /*  Don't  give  up  right  away  on  error.  */ 


#define  F UN C_ R AN D SO U R C En2 


/*  The 

options  List. 

Indexes 

in  the 

Left  margin 

are 

used  in 

c on  f i g I 

nit.  * / 

stati  c 

struct  Config 

EnvOpt 

ionsCD  = { 

n 

{ 

"armor". 

PGPENV_ 

ARMOR, 

OPT 

.BINARY, 

0, 

1 >, 

o 

{ 

"armorlines' 

/ 

PGPENV_ 

ARMORLINES, 

OPT 

_INT, 

0, 

INT. MAX 

n 

{ 

"bakring". 

PGPENV_ 

BAKRING, 

OPT 

.STRING, 

0, 

0 y. 

n 

{ 

"cert_depth' 

PGPENV_ 

CERTDEPTH, 

OPT 

_INT, 

0, 

8 >, 

n 

{ 

"charset". 

PGPENV_ 

CHARSET, 

OPT 

.STRING, 

0, 

0 y. 

□ 

{ 

"cLearsig", 

PGPENV_ 

CLEARSIG, 

OPT 

.BINARY, 

0, 

1 >, 

n 

{ 

"comment". 

PGPENV_ 

COMMENT, 

OPT 

.STRING, 

0, 

70  >, 

CCCHK: 
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n 

{ 

"compLetes_needed' 

',  PGPENV_ 

COMPLETES, 

0PT_INT, 

1,  4 

>, 

n 

{ 

"compress". 

PGPENV_ 

COMPRESS, 

OPT_BINARY, 

0,  1 

£t 

{ 

"companykey". 

PGPENV_ 

COMPANYKEY, 

OPT_STRING, 

0,  255  >, 

a 

{ 

"encrypttoself". 

PGPENV_ 

ENCRYPTTOSELF 

,OPT_BINARY, 

0,  1 

/ *n 

{ 

"interactive". 

PGPENV_ 

INTERACTIVE, 

OPT_BINARY, 

0,  1 

>,*/ 

/ *n 

{ 

"keepbinary". 

PGPENV_ 

KEEPBINARY, 

OPT_BINARY, 

0,  1 

},*/ 

n 

{ 

" Language", 

PGPENV_ 

LANGUAGE,  0PT_ STR I NG | 0 PT_ 

LOWER, 

0,  16  >, 

n 

{ 

"marginaLs_needed' 

',  PGPENV_ 

MARGINALS, 

0PT_INT, 

1,  4 

>, 

a 

{ 

"myname". 

PGPENV_ 

MYNAME, 

0PT_STRING, 

0,  255  >, 

/ *n 

{ 

"pager". 

PGPENV_ 

PAGER, 

OPT_STRING, 

0,  255  >,*/ 

/ *n 

{ 

"pkcs_compat". 

PGPENV_ 

PKCS_COMPAT, 

0PT_INT, 

0,  INT_ 

MAX  },*/ 

n 

{ 

"pgp_mime". 

PGPENV_ 

PGPMIME, 

OPT_BINARY, 

0,  1 

n 

{ 

"pgp_mimeparse". 

PGPENV_ 

PGPMIMEPARSEBOD Y,  0 PT_B I N A R Y , 0 , 1 

n 

{ 

"pubring". 

PGPENV_ 

PUBRING, 

OPT_STRING, 

0,  0 

a 

{ 

"randomdevi ce". 

PGPENV_ 

RANDOMDEVICE, 

OPT_STRING, 

0,  0 

>, 

a 

{ 

"randseed". 

PGPENV_ 

RANDSEED, 

OPT_STRING, 

0,  0 

#ifdef  UNIX 

/*n  { "randsource",  F U N C _R AN D S 0 U R C E , 0 PT_STR I N G | 0 PT_ F U N C , 0,  0 >,*/ 

#endi f 


a 

{ " 

secring". 

PGPENV_SECRING, 

0PT_ 

STRING, 

0, 

0 

a 

{ " 

showpass". 

PGPENV_SHOWPASS, 

0PT_ 

BINARY, 

0, 

1 

a 

{ " 

textmode". 

PGPENV_TEXTMODE, 

0PT_ 

BINARY, 

a. 

1 

a 

{ " 

tmp". 

PGPENV_THP, 

0PT_ 

STRING, 

0, 

0 

/* 

Temp  for 

new  trust 

- change  to  something  better 

*/ 

a 

{ " 

trusted". 

PGPENV_TRUSTED, 

0PT_ 

INT, 

0, 

255  >, 

a 

{ " 

t z f i X " , 

PGPENV_TZFIX, 

0PT_ 

INT, 

-24 

24  >, 

a 

{ " 

verbose". 

PGPENV_VERBOSE, 

0PT_ 

INT, 

0, 

INT_MAX 

/*  Experimental  XXXaaa  */ 


a 

{ 

"version". 

PGPENV_ 

VERSION, 

0PT_INT,  2, 

4 

>, 

a 

{ 

"ci phernum",n 

PGPENV_ 

CIPHER, n 

0PT_INT,n  1, 

INT_ 

MAX 

a 

{ 

"hashnum",n 

PGPENV_ 

HASH,n 

0PT_INT,n  1, 

INT_ 

MAX 

a 

{ 

"fastkeygen". 

PGPENV_ 

FASTKEYGEN, 

OPT_BINARY,n  0, 

1 

a 

/* 

command  Line  only 

*/ 

a 

{ 

"batchmode". 

PGPENV_ 

BATCHMODE, 

OPT_BINARY 1 0PT_CMD, 

0, 

1 

a 

{ 

"force". 

PGPENV_ 

FORCE, 

OPT_BINARY 1 0PT_CMD, 

0, 

1 

a 

{ 

"magi c " , 

PGPENV_ 

MAGIC, 

OPT_BINARY 1 0PT_CMD, 

0, 

1 

a 

{ 

" n oou  t " , 

PGPENV_ 

NOOUT, 

OPT_BINARY 1 0PT_CMD, 

0, 

1 

>, 

a 

/* 

N u L L - t e r m i n a t ed  */ 

a 

>; 

{ 

(char  const  *)0, 

0, 

0, 

n 0,  0 > 

/*  Ca s e- i n s e n s i t i ve  memory  compare  */ 
static  int 

xmemi cmp  (char  const  *in1,  char  const  *in2,  int  Len) 
{ 


a 

while 

(Len—)  { 

a 

a 

if  (toLower(*in1) 

a 

a 

n returni; 

a 

a 

i n 1 ++ ; 

a 

a 

i n2  + +,- 

a 

> 

a 

return 

0; 

> 


!=  toLower(*in2)) 


/* 

* Find  a keyword  in  a n u L L - t e r m i na t e d options  List. 

* Returns  the  option,  or  NULL  if  the  option  is  ambiguous. 
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* or  a pointer  to  the  null  option  if  it  is  not  found. 

* optmask  is  a mask  of  bits  in  the  opt->fLags  list  which  cause 

* entries  with  any  of  those  bits  set  to  be  ignored. 

*/ 

static  struct  Config  const  * 

configLookup  (struct  PgpUICb  const  *ui,  void  *arg,  unsigned  Linenum, 
n char  const  *key,  unsigned  keylen,  int  optmask) 

{ 

n struct  Config  *hit  = NULL; 

n inti; 

n struct  PgpUICbArg  msgargi,  msgarg2,  msg3rg3,  msgarg4; 


n 

n 

□ 

□ 

n 

□ 

□ 

n 

n 

□ 

□ 

□ 

n 

D 

n 

B 

B 

B 

B 

B 

B 

B 


for 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


(i=0;  EnvOpt i ons C i D . name;  i++)  { 

if  ( ( E n vOp t i on s C i D . f L a g s & optmask)  !=  0) 

B continue; 

if  ( xmem i cmp ( E n vO p t i on s C i ] . na me , key,  keylen)  !=  0) 

B continue; 

/*  We  have  a match!  */ 

if  C s t r L en  ( EnvOp  t i ons  C i II  . name  ) ==  keylen) 

B return  ( & C EnvOpt i ons C i 3 ) ) ; /*  exact  match  */ 

/*  Do  we  have  a double  match?  */ 
if  (hit)  { 

B msgargl.type  = PG P_U  I _ A RG_UN S I GN E D ; 

B ms g a r g 1 . va  I . u = linenum; 

B msgarg2.type  = PG P_U I _ A RG_B U F F E R ; 

B msga rg2 . va  I . buf . buf  = (byte  *)key; 

B msga rg2 . va  I . buf . I en  = keylen; 

B msgargS.type  = PG P_U I _ A RG_ S T R I NG ; 

B msga rg3 . va I . s = hit->name; 

n msgargA.type  = PG P_U I _ A RG_ S TR I NG ; 

B msga rg4 . va  I . s = En vOp t i ons C i 3 . name ; 

B ui->message  (arg,  PG P E R R_CO N F I G , 

B B PGPMSG_CONFIG_AMBIGUOUS,  4,  8msgarg1, 

B B &msgarg2,  Smsgarg3,  &msgarg4); 


B 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

} 


B return  (struct  Config  const  *)0; 

} 

/*  Remember  this  match  */ 
hit  = & ( En vOp t i on s C i 3 ) ; 

/*  Keep  looking  for  an  exact  match  or  ambiguity.  */ 


B if(hit){ 

B B returnhit; 

n } 

n msgargl.type  = PGP_UI_ARG_UNSIGNED; 

B msga rg1 . va I . u = linenum; 

B msgarg2.type  = PG P_U I _ A RG_BU F F E R ; 

n msga rg2 . va I . buf . buf  = (byte  *)key; 

n ms ga r g 2 . va I . bu f . I en  = keylen; 

B ui->message  (arg,  PG P E R R_ C 0 N F I G , PG PH S G_ C ON F I G_U N KNO WN_KE YWO R D , 

B B Z,  &msgarg1,  &msgarg2); 

n return  ( & E n vOp t i on s C i 3 ) ; 

} 


static  int 
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c 0 n f 1 

gCaLLFunci  (struct 

Pg  p E n V 

*env. 

int  va  rnum. 

<. 

n 

(void)env; 

u 

(void)vaL; 

a 

(void)pri ; 

n 

switch  (varnum) 

{ 

a 

default : 

n 

n return  PGPERR_ 

CONFIG 

_BADFUNC; 

n 

> 

> 

static  int 

conf i gCa L L Funcs  (struct 

Pg  p E n v 

*env. 

int  va  rnum. 

n 

a i n t p r i 

) 

< 

n 

(void)env; 

n 

(void)string; 

a 

(void) Len; 

n 

(void)pri ; 

rt 

switch  (varnum) 

case  FUNC_RANDSOURCE : 
default: 

n return  PGPERR_CONFIG_BADFUNC; 

> 


/*  Return  the  number  of  Leading  whitespace  characters  in  a buffer  */ 
static  unsigned 
s k i p W h i t e C c h a r const  *buf) 

{ 

n unsigned  i=0; 


while  ( i s s pa ce ( buf C i D ) ) 
n i++; 


n returni; 

> 


/* 

* Reduce  "Len"  by  the  amount  of  trailing  whitespace  characters  in  the 

* string  starting  at  buf  and  Len  characters  Long. 

*/ 

static  unsigned 

uns ki pWh i t e ( c ha r const  *buf,  unsigned  Len) 

{ 

o while  (Len  SS  i s s pa c e ( bu f C L e n- 1 ] ) ) 

n n — Len; 

n return  Len; 

} 

/* 

* Get  a word  up  to  the  next  non-graphic  character,  comment  symbol  (#) 

* or  delimiter  (such  as  ’=').  Set  delimiter  to  a non-graphic  character 

* (0  works  weLL)  to  not  use  it. 

* Returns  the  Length  of  the  word  found. 

*/ 

static  unsi gned 

[:CHK:93e067071ee51f9b1a463d3955c2ae777008ffdaeafb74eef227cdc452d2bf3ac:] 


Len, 


1668 


Pretty  Good  Privacy  5.0’^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpConf.c 


getWordCchar  const  *buf,  char  delimiter) 
{ 


n chare; 

n i n t i = 0 ; 


n do  { 

n n c = bufCi++!]; 

n > while  (isgraphCc)  &&  c !=  &&  c !=  delimiter); 


n return  i-1; 

} 


/* 

* Get  a string  in  the  nasty  non-quoted  format. 

* Spaces  are  allowed,  but  the  string  ends  at  a comment  and 

* trailing  whitespace  is  suppresed. 

* Returns  the  length  of  the  string  found. 

*/ 

static  unsigned 
g e t S t r i ng ( c h a r const  *buf) 

{ 

n chare; 

n uns i gned  i =0; 


n do 

n n c=bufCi++D; 

n while  (isprint(c)  8&  c !=  '#'); 

n return  u n s k i pWh i t e ( bu f , i-1); 

> 


/* 

* Get  a quoted  string.  Anything  is  allowed  up  to  a trailing  double 

* quote.  Returns  the  length  of  the  string  found,  or  -1  on  error. 

*/ 

static  unsigned 

getast ri ng ( St ruct  PgpUICb  const  *ui,  void  *arg,  unsigned  linenum, 
n char  const  *buf) 

{ 

n chare; 

n unsigned  i=0; 

n struct  PgpUICbArg  msgargi,  msgarg2; 


□ 


a 

□ 


do 

n c=bufCi++D; 

while  Cc  SS  c !=  '"'); 


n — i ; 

n i f (c  ==  ""  ) 

n n returni; 


n /*  Error  case  - drop  trailing  whitespace  (like  NL)  when  printing  */ 

n msgargi. type  = PGP_U I _ A RG_UN S I GN E D ; 

n m s g a r g 1 . va I . u = linenum; 

n msgargZ.type  = PGP_U I _ A RG_BU F F E R ; 

n msgarg2.val.buf.buf  = (byte  *)buf; 

n msgarg2.val.buf.len  = unskipWhite  (buf,  i); 
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a ui->message  (arg,  PG P E R R_C ON F I G , PG PM S G_ C 0 N F I G_ S T R I NG E N D , 

an  2,  Smsgargl,  &msgarg2); 

a return  (unsigned)-l; 

} 


/* 

* Parse  a Line  of  input.  Linenum  ==  0 indicates  the  command  Line, 

* and  causes  a few  changes  in  activity: 

* - some  extra  parameters  are  recognized  (0PT_CHD) 

* - "=0N"  is  impLicit  for  booLean  options 

* - error  messages  are  printed  differentLy 

* - Unknown  keywords  are  fataL 

* - Strings  need  not  be  copied,  since  the  argv  array  isn't  going  away 

* 

* Note  that  the  input  "Line"  array  is  not  permanentLy  modified,  but  it 

* is  occasionaLLy  modified  in  pLace  temporariLy  to  instaLL  a traiLing 

* nuLL  character  in  the  middLe. 

* 

* Returns  0 on  success,  a PGPERR_*  on  fa 
*/ 

static  i nt 

c on f i g L i ne Pa r s e ( s t r u c t PgpUICb  const  *ui, 
n n unsigned  Linenum,  char  *L 

{ 

n char  const  *key; 

n unsigned  keyLen; 

n unsigned  i; 

n struct  Config  const  *opt; 

n LongvaL; 

n char*p; 

n struct  PgpUICbArg  msgargi,  msgarg2,  msgargS,  msgargA,  msgargS; 

a Line  +=  skipWhite  (Line); 


i Lure. 

void  *arg,  struct  PgpEnv  *env, 
ine,  int  pri) 


a keyLen  = getWord  (Line, 

a i f ( ! key  L en ) 

a a return0;a  /*BLankLine*/ 

a key=Line; 


□ 

n 

□ 

a 

□ 

□ 

a 

D 


opt  = configLookup  (ui,  arg,  Linenum,  key,  keyLen, 
a a Linenum?OPT_CHD:0); 

if  ( ! opt ) 

a return  PGPERR_CONFIG_BADOPT,- 

if  ( ! opt->name )n/*  In  the  config  fiLe,  not  found  isn't  fataL  */ 
a return  Linenum  ? 0 : PG PE R R_ C ON F I G _B A D 0 PT ; 

if  ((opt->fLags  S OPT.TYPEHASK)  ==  0PT_IGN0RE) 
a returnO; 


n 

msgargi. type  = 

PGP_UI 

_ARG_UNSIGNED 

n 

msgargi. vaL.u  = 

Linenum; 

a 

msga  rg2 . type  = 

PGP_UI 

_ARG_BUFFER; 

a 

msgarg2.vaL.buf 

.buf  = 

(byte  *)key; 

a 

msga  rg2 . va  L . buf 

. L e n = 

key  L en; 

a 

Line  +=  keyLen; 
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Line  +=  s k i p W h i t e ( I i n e ) ; 
if  (*Line  !=  '=' ) { 


Q 

B 

i f 

B 

B 

B 

B 

{ 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 

B 

B 

U 1 

/*  On  the  command  Line,  "armor"  means  "armor=on' 
(ILinenum  &&  *Line  ==  '\0'  && 

(opt->fLags  & OPT_TYPEHASK)  ==  OPT_BINARY) 

if  (opt->fLags  & 0PT_FUNC) 


*/ 


n 

□ 

e L se 
n 

D 

n 

return 


( VO i d ) c on f i g C a L L F u n c i ( e n V , opt->var,  opt->max, 
n n p r i ) ; 

(void)pgpenvSetlnt(env, 

n n (enum  Pg p E n v I n t s ) op t ->va r , 

n n opt->max,pri); 

0; 


n n 2,  Smsgargl,  Smsgarg2); 

n return  PG P E R R_ C 0 N F I G ; 

> 

Line++;  /*  skip  '='  */ 


/*  Skip  assignment  and  foLLowing  whitespace  */ 
Line  +=  s k i p W h i t e ( L i n e ) ; 

switch  (opt->fLags  & OPT_T Y P E M AS K ) { 
case  OPT  BINARY: 


B 

B 

i 

= getWordCLine,  0); 

B 

B 

i f 

( ( i 

= = 

3 &S  xmem i c mp ( " o f f " , Line 

S 

II 

II 

B 

B 

( i 

= = 

1 SS  LineC0:  ==  '0')) 

B 

B 

{ 

B 

B 

B 

i f 

(opt->fLags  & 0PT_FUNC) 

B 

B 

B 

B 

( VO i d ) c on f i g C a L L F un c i ( e n V , opt->var,  opt 

B 

B 

B 

B 

fl  B 

p r i ) ; 

B 

B 

B 

e 1 

s e 

B 

B 

B 

B 

(void)pgpenvSetInt( 

e n V , 

B 

B 

B 

B 

B B 

(enum  PgpEn vl n t s ) op t - 

B 

B 

fl 

B 

B fl 

opt->min,  pri); 

B 

B 

B 

break; 

B 

B 

> 

e L s e 

if 

(Ci  ==  2 &S  xmem i cmp ( " on " 

, Line,  2)  ==  0)  | | 

B 

B 

(i  ==  1 &&  LineCO:  ==  '1 

' ) ) 

B 

B 

B 

B 

B 

i f 

(opt->fLags  & 0PT_FUNC) 

B 

B 

B 

fl 

C VO i d ) c on f i g C a L L F un c i ( e n V , opt->var,  opt 

B 

B 

B 

B 

fl  fl 

pri); 

B 

B 

B 

e L se 

B 

B 

B 

B 

(void)pgpenvSetlnt(env, 

B 

B 

B 

fl 

B B 

(enum  Pg p E n v I n t s ) op t- 

B 

B 

B 

B 

fl  fl 

opt->max,  pri); 

B 

B 

B 

break; 

B 

B 

> 

e L s e 

i f 

(i  ==  0)  t 

ui->message  (arg,  PG P E R R_ CON F I G , 
n PGPMSG_CONFIG_MISSING_BOOLEAN,  2, 

n &msgarg1,  &msgarg2); 

b r ea  k; 


/*  FaLL  through:  defauLt  case  */ 
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B 

B 

msgargS.type 

= PGP_UI_ARG_BU F FER; 

B 

B 

msgargS.vaL. 

buf. buf  = (byte  *)Line; 

B 

B 

msga  rg3 . va  L . 

buf.Len  = i; 

B 

B 

u i ->me  s sa  g e 

(arg,  PG P E R R_ C ON F I G , 

B 

fl 

n 

PGPMSG_C0NFIG_UNKN0WN_B00LEAN, 

B 

B 

a 

&msgarg2,  SmsgargS); 

B 

fl 

return  PG P E R R_C 0 N F I G ; 

B 

case 

0PT_1NT: 

B 

fl 

vaL  = strtoL 

(Line,  &p,  0); 

B 

fl 

i = getWord 

(Line,  0); 

&msga  rg1 ^ 


n 

n 


n 


n 

n 


n 


msgargS. type  = PG P_ U I _ A RG_BU F F E R ; 
msga rg3 > va L . but . buf  = (byte  *)Line; 
m s g a rg 3 . va L . bu f . I e n = i; 


□ 

n 

n 

n 

u 

u 

n 

n 

a 

□ 

o 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

fl 

fl 

B 

fl 

fl 

B 

fl 

B 

fl 

B 

fl 

B 

B 

fl 

fl 

B 

fl 

B 

fl 

B 

fl 

fl 

B 

B 

B 

B 

B 

B 

fl 

fl 

fl 

fl 

fl 

B 

fl 

B 


if  (!isspace(*p)  && 


\0'  ) { 


fl 

B 

fl 

B 

B 

fl 

fl 

fl 

fl 

fl 

fl 

fl 

> 


if  (i  ) 

B 
B 
fl 
fl 

} else 

fl 
fl 
fl 
fl 
> 

return  PGPERR_CONFIG; 


ui ->message 

n Carg,  PG P E R R_C 0 N F I G , 

n PGPMSG_CONFIG_UNKNOWN_INTEGER,  3, 

a &msgargl,  &msgarg2,  &msgarg3); 

C 

ui->message 

n (arg,  PG P E R R_C 0 N F I G , 

a PGPMSG_CONFIG_MISSING_INTEGER,  2, 

a &msgarg1^  &msgarg2); 


msgargA.type  = PGP_UI_ARG_INT; 
msgargA.vaL.i  = vaL; 
if  (vaL  > ( L o n g ) op  t ->ma  X ) -C 


fl 

fl 

fl 

fl 

fl 

fl 


msgargS.type  = PGP_UI_ARG_INT; 
msga rg 5 . va L . i = opt->max; 
ui->message  (arg,  PG P E R R_ C ON F I G , 
n PGPMSG_CONFIG_INT_TOO_HIGH,  4, 

Q &msgarg1^  &msgarg2^  &msgarg4^  &msgarg5); 

val  = (Long)opt->max; 


> else  if  (vaL  < ( L o n g ) op  t “>m  i n ) -C 


msgargS.type  = PGP_UI_ARG_INT; 
msga rgS  . va L . u = opt->min; 
ui->message  Carg,  PG PE R R_ C ON F I G , 
n PGPMSG_C0NFIG_INT_T00_L0W,  4, 

n Smsgargl^  &msgarg2^  &msgarg4,  fimsgargS); 

val  = <Long)opt->min; 


if  ((opt->fLags  & OPT.FUNC)  ==  0)  -C 


( VO i d ) pg p e n V S e t I n t ( en V,  (enum  PgpEnvInt s )opt“>va r, 
n fl  (int)vaL,pri); 


> else  if  ( conf i g Ca L L Fun c i ( env,  opt->var,  (int)vaL,  pri)  < 0 ) f 


fl 

fl 

fl 

fl 

> 

break; 


ui->message  (arg,  PG PE RR_ C 0 N F I G , 
n PG PM SG_C0NFIG_IN VALID, INTEGER,  3, 

n &msgarg1,  &msgarg2,  &msgarg3); 

return  PG P E R R_C ON F I G ; 
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case  OPT_STRING; 

if  ( * L i ne  ^ 


) { 


n 

□ 

□ 

> else 
a 

> 


i = g e t Q S t r i ng ( u i , arg,  Linenum,  ++Line); 
if  (i  ==  ( un s i g ned ) - 1 ) 
n return  PG PE R R_ CONFIG; 


i = getString(Line); 


n n msgarg3.type  = PG P_U I _ A RG_BU F F E R ; 

n n msgarg3.vaL.buf.buf  = (byte  *)Line; 

n n msgarg3.vaL.buf.Len  = i; 


if  (i 

n 

n 

n 

□ 

n 

n 

D 

> 

{ 

n 

a 


( uns i g ned  ) op t->max-1 ) { 

msgargA.type  = PG  P_LI  I _ A RG_  I NT  ; 

msga rg4 . va L . i = opt->max-1; 

ui->message  (arg,  PG P E RR_ C ON F I G , 

n PGPMSG_CONFIG_STRING_TOO_LONG,  3, 

n Smsgargi,  Smsgarg2,  SmsgargA); 

return  PG P E R R_C ON F I G ; 

/*  CaLL  function  to  set:  never  any  need  to  copy  */ 


char  c ; 
int  status; 


c = LineCiD; 


n 

n 

B 

L i ne  C 1 D 

= ■ \0' 

;n/*  NuLL-terminate  the  string  */ 

a 

n 

B 

if  (opt 

-> f L a g s 

S 0PT_FUNC) 

n 

n 

B 

B 

status 

= c on f i g C a L L F u n c s (env,  opt 

->va  r , 

n 

Q 

B 

B 

n 

a n Line,i, 

pri  ); 

D 

n 

B 

else 

n 

s 

B 

B 

status 

= pg pe n V S e t S t r i ng 

D 

B 

B 

B 

□ 

(env,  (enum  Pg p E n v S t r i ng s ) 

opt->va  r. 

n 

B 

B 

fl 

n 

Line,  pri); 

n 

B 

B 

1 i n e C i D 

= c;n 

/*  Restore  the  string  */ 

n 

B 

B 

if  (status  >= 

0) 

n 

B 

B 

B 

break; 

n /*  Success  */ 

n 

B 

B 

ui->message  (arg,  PG P E R R_C0N F I G , 

n 

B 

fl 

fl 

PGPMSG_CONFIG_INVALID_STRING, 

3, 

n 

B 

B 

B 

Smsgargi,  Smsgarg2,  Smsgarg3) 

r 

n 

B 

B 

return 

PGPERR_ 

CONFIG; 

n 

B 

> 

n 

B 

break; 

n returnO; 

> 

/* 

* "option"  may  be  modified  temporariLy,  but  it  is  restored  prior  to 

* returning. 

*/ 

int 

pg p C o n f i g L i n e P r o c e s s ( s t r u c t PgpUICb  const  *ui,  void  *arg. 
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n 

{ 

a 

n 

□ 

} 


n struct  PgpEnv  *env,  char  *option,  int  pri) 

if  (!ui  II  ! u i ->me s s a g e ) 
n return  PGPERR_UI_INVALID; 

return  c on f i g L i n e Pa r s e (ui,  arg,  env,  0,  option,  pri); 


^define  CPM_E0Fn26n  /*  - accept  this  as  a file  terminator.  */ 

/* 

* Read  a Line  from  file  f,  into  buf,  up  to  the  given  Length.  Anything  after 

* that  is  ignored.  Strips  trailing  spaces  and  Line  terminator,  can  read 

* LF,  CRLF  and  CR  terminated  Lines.  Also  accepts  CPM_E0F  (^Z)  as  a file 

* terminator. 

*/ 

static  char  * 

conf i g Li neGe t ( F I LE  *f,  char  *buf,  unsigned  Len) 

{ 

n i n t c ; 

n char*p=buf; 


/*  Skip  Leading  whitespace  */ 
do  { 

n c=getc(f); 

} while  (c  ==  ' ' II  c ==  ' \t  ' ); 


n while  (Len  > 0 &8  c ! = '\n'  S&  c !=  '\r'  &&  c !=  EOF  8&  c !=  CPH_E0F) 

a { 

n n *p++  = c; 

n n --len; 

o n c=getc(f); 

n } 


n /*  Return  NULL  on  EOF  */ 

n if  (p  ==  buf  SS  (c  ==  EOF  | | c ==  CPH_E0F))  { 

n a *buf='\0'; 

n n return  (char  *)0; 

n } 

□ 

n / * 

n * Skip  to  end  of  Line,  setting  Len  to  non-zero  if  anything  trailing  is 

n * not  a space  (meaning  that  any  trailing  whitespace  in  the  buffer  is 

a * not  trailing  whitespace  on  the  Line  and  should  not  be  stripped). 


□ 

*/ 

n 

Len 

= 

0; 

□ 

wh  i 

1 e 

( c ! = 

' \n ' &S  c 

!=  ’\r'  &&  c !=  EOF  S&  c !=  CPM_E0F)  { 

n 

D 

Len 

1=  c * ' 

';n/*  Avoid  branches  for  fast  processors  */ 

a 

n 

c = 

getc(f); 

a 

} 

B 

/* 

Put  back 

CPM_E0F, 

and  character  after  \r  if  it's  not  \n  */ 

B 

i f 

( c 

==  CPM_E0F  1 1 ( 

c ==  '\r'  SS  (c  = getc(f))  !=  '\n')) 

n 

n 

ungetc(c,  f); 

□ 

/* 

If 

Line 

wasn't  too 

Long,  skip  trailing  WS  and  n u L L - t e r m i na t e */ 

n 

i f 

( ! 

len)  { 

/*  Skip 

trailing  whitespace,  as  described  above  */ 

B 

n 

w h i 

Le  (p  >=  buf  &&  pC-ID  ==  ' ') 

B 

□ 

□ 

— p; 

D 

Q 

*P 

= ■\0'; 
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n > 

n returnbuf; 

} 


i nt 

pg pc 0 n f i g F i L e P ro c e s s ( s t r u c t PgpUICb  const  *ui,  void  *arg. 


n 

f 

n 

struct  PgpEnv 

*env,  char  const 

*filename,  int 

\ 

D 

FILE  *f; 

U 

unsigned 

Linenum  = 0; 

n 

unsigned 

errors  = 0; 

n 

i n t i ; 

Q 

char  bufC130Il;n  /*  Maximum 

allowable  line  si 

ze  */ 

□ 

struct  PgpUICbArg  msgargl. 

msgarg2,  msgarg3; 

n 

if  ( ! u i 

II  ! u i ->me  s sage) 

n 

n 

return  PG P E RR_U I _ I N V A LI D ; 

n 

f = fopen  (filename,  "r"); 

n 

if  Cf  == 

NULL)  { 

n 

n 

msgargl.type  = PGP 

_UI_ARG_STRING; 

n 

n 

msgargl.val.s  = fi 

1 ename ; 

n 

n 

ui->message  Carg, 

PGPERR_C0NFIG, 

n 

n 

n PGPMSG_C0NFIG_N0_FILE, 

1,  Smsgargl); 

a 

Q 

return  0;n  /* 

treat  like  empty 

config  file  */ 

n 

> 

p r i ) 


□ 

n 

o 

a 

n 

n 

n 


bufCsizeof(buf)-1!]  = ’\0*; 

while  (errors  < HAX_ERRORS  &&  con f i g L i n e G e t ( f , buf,  s i z eo f ( bu f ) ) ) { 


n 

+ + linenum; 

n 

msgargl.type  = 

PGP_UI 

_ARG_UNSIGNED; 

n 

msga  rg1 . va  1 . u 

= linenum; 

n 

msga  rg2 . type  = 

PGP_UI 

_ARG_STRING; 

□ 

msga  rg2  . va  1 . s 

= bu  f ; 

n 

Q 

Q 

a 

n 

n 

n 

a 

n 

Q 

n 

a 

n 

Q 

n 

o 

n 

n 

n 

D 

n 

n 

n 


n 

n 

n 

n 

n 

n 

n 

□ 

n 

n 

n 

□ 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

a 

o 


/*  Line  too  Long?  */ 
if  C buf C s i zeof C buf ) -1 D !=  *\0*)  i 
n buf C s i zeof ( buf ) -1 ] = *\0*; 

n ui->message  Carg,  PG P E R R_ C ON F I G , 

n n PGPMSG_CONFIG_LINE_TOO_LONG,  2, 

n n fimsgargl,  &msgarg2); 

n e r r o r s + + ; 

n continue; 

> 

/*  Illegal  character?  */ 

for  (i  = 0;  bufCiD  !=  *\0*;  i++)  -C 

n if  ( ! i s p r i n t < buf C i 3 ) &&  bufEil  !=  *\t*) 

n n break; 

> 

if  (buf Ci 3 ! = * \0*  ) { 

n msga rg3 . type  = PGP_UI_ARG_INT; 

n msga rg3 . va I . i = i; 

n ui->message  Carg,  PG P E R R_ C ON F I G , 

n n PGPMSG_CONFIG_BAD_CHAR,  3, 

n n &msgarg1,  &msgarg2,  &msgarg3); 

n errors++; 

n continue; 

> 
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n 

n 

n 

n 

□ 

n 

n 

n 

□ 

n 

Q 

a 

n 

□ 

n 

□ 


n if  ( con f i g L i ne Pa r s e <ui,  arg,  env,  Linenum,  buf,  pri) 

n < 0 ) 

n n e r r o r s + + ; 


fcLose  <f); 
if  (errors  > 0)  -C 


n msgargl.type  = PGP_UI_ARG_INT; 

n msga rgl . va L . i = errors; 


if  (errors  >=  MAX  ERRORS) 


B 

B 

else 

B 

B 


ui ->message  (arg,  PGPERR_CONFIG, 

n PG PM SG_CONFIG_HAX_ ERRORS,  1,  Smsgargl); 

ui->message  (arg,  PG P E R R_ C 0 N F I G , 

n PGPMSG_CONFIG_NUM_ERRORS,  1,  Smsgargl); 


return  PG P E R R_ C ON F I G ; 


n return0; 

> 
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/* 

* pgpConf.h  - Parse  configuration  files  and  Lines. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa  r L o r d SM I T . E D Ll> 

* 

* $Id:  pgpConf.h, V 1.4. 2.1  1 997/06/07  09:51:39  mhw  Exp  $ 

*/ 

#ifndef  PGPCONF.H 
^define  PGPCONF.H 

#ifdef  cpLuspLus 

extern  "C"  { 

#endi f 


struct  PgpEnv; 

#ifndef  TYPE. PGPENV 

#define  TYPE. PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#e nd i f 

struct  PgpUICb; 

#ifndef  TYPE. PGPUICB 

#define  TYPE. PGPUICB  1 

typedef  struct  PgpUICb  PgpUICb; 

#end i f 

/*  Process  a single  Line  */ 

int  PGPExport  pg p C o n f i g L i ne P r o c e s s (struct  PgpUICb  const  *ui,  void  *arg, 
n n n struct  PgpEnv  *env,  char  *option,  int  pri); 

/*  Process  a whole  file  */ 

int  PGPExport  pg pC on f i g F i L e P r o c e s s (struct  PgpUICb  const  *ui,  void  *arg, 
n n n struct  PgpEnv  *env,  char  const  *fiLename,  int  pri); 

#ifdef  cpLuspLus 

> 

#endi f 

#endif  /*  PGPCONF.H  */ 
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/* 

* pgpDecPipe.c  --  setup  the  Decryption  Pipeline,  given  the  arguments 

* of  the  UI.  This  is  just  a helper  function  to  setup  the  decryption 

* pipeline.  It  would  be  just  as  easy  for  an  application  to  do  it. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <warlordaMIT.EDU> 

★ 

* $Id:  pgpDecPi pe . c,v  1.3. 2.1  1997/06/07  09:51:39  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
//include  "config.h" 
//end  i f 


#include  <stdio.h> 


//include 
//include 
# i n c I u d e 
//include 


pgpDecPi pe . h 
pgpFI FO  . h" 
pgpPrsAsc.h" 
pgpReadAnn. h 


struct  PgpPipeline  ** 

pgpDe c r yp t P i pe I i ne C r ea t e (struct  PgpPipeline  **head. 


n 

n 

n 

struct 

PgpEnv  *env. 

□ 

n 

n 

struct 

PgpFifoDesc  const  *fd. 

a 

Q 

n 

struct 

PgpUICb  const  *ui , 

u 

Q 

□ 

void  * 

u i _a  r g ) 

i 

□ 

i f 

( ! h e a d ) 

n 

n 

return 

NULL; 

n 

i f 

( ! f d) 

n n fd=&pgpByteFifoDesc; 

n head  = pgpParseAscCreate  (head,  env,  fd,  ui,  ui_arg); 

n if(!head) 

n n returnNULL; 

n return  pg p An  no t a t i on  Rea d e r C r e a t e (head,  env,  ui,  ui_arg); 

} 
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/* 

* pgpDecPipe.h  --  Create  a Decryption  Pipeline 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r dSM I T . E D U> 

★ 

* This  is  a Public  API  Function  Header. 

★ 

* $Id:  pg p De c P i pe . h , V 1.4. 2.1  1997/06/07  09:51:39  mhw  Exp  $ 

*/ 

#ifndef  PGPDECPIPE.H 
#define  PGPDECPIPE.H 

#ifdef  ..cpLusplus 
extern  "C"  { 

#endi f 

struct  PgpFifoDesc; 

#ifndef  T YPE.PG P F I F 0 D E S C 

^define  T YPE.PG P F I F 0 D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

#end i f 

struct  PgpPipeLine; 

#ifndef  TYPE. PGPPIPELINE 

^define  T YPE.PG PP I P E LI N E 1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

# end i f 

struct  PgpEnv; 

#ifndef  TYPE. PGPENV 

^define  TYPE. PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

# end i f 

struct  PgpUICb; 

#ifndef  TYPE. PGPUICB 

#define  TYPE. PGPUICB  1 

typedef  struct  PgpUICb  PgpUICb; 

#e  nd i f 

struct  PgpPipeLine  PGPExport  ** 


pgpDecryptPipeLineCreate 

(struct 

PgpPipeLine  **head. 

n n 

n 

struct 

PgpEnv  *env. 

n o 

D 

struct 

PgpFifoDesc  const  *fd 

n n 

n 

struct 

PgpUICb  const  *ui , 

o o 

c 

void  * 

u i .a  rg  ) ; 

#ifdef  ..cpLuspLus 

> 

# e nd i f 

#endif  /*  PGPDECPIPE.H  */ 
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/* 

* pgpEncPipe.c  --  setup  the  Encryption  Pipeline,  given  the  arguments 

* of  the  UI.  This  will  setup  the  type  of  pipeline  that  we  want! 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  < wa  r I o r dcDM  I T . E D U> 

★ 

* $Id:  pgpEncPipe.c,v  1.12.2.1  1997/06/07  09:51:40  mhw  Exp  $ 

*/ 

#ifdef  HAVE_C0N FIG_H 


t/include 

"config.h" 

# e n d i f 

#include 

<stdio.h> 

#include 

"pgpEncPipe.h" 

#include 

"pgpArmor.h" 

#include 

"pgpCipher.h" 

//include 

"pgpCiphrMod.h 

//include 

"pgpCFB.h" 

#include 

"pgpCompress.h 

//include 

"pgpCompHod.h" 

# i n c 1 u d e 

"pgpConvKey. h" 

//include 

" pgpConvMod . h " 

#include 

"pgpDevNull.h" 

//include 

"pgpFIFO.h" 

//include 

"pgpHash.h" 

//include 

"pgpHeader.h" 

//include 

"pgpLiteral.h" 

#include 

"pgpMem.h" 

#include 

" PgpPipeline. h 

//i  nc  lude 

"pgpEnv. h" 

//include 

"pgpPKEMod.h" 

//include 

"pgpPubKey. h" 

//include 

" pgpRndPoo 1 . h " 

//include 

"pgpSi gHod . h" 

//include 

"pgpSigSpec.h" 

//include 

"pgpSplit.h" 

//include 

"pgpStr2Key. h" 

#i nc  lude 

"pgpTextFilt.h 

/*  Forward  */ 

static  byte  * c r ea t e H a s h L i s t ( s t r u c t PgpSigSpec  const  *sigspecs,  int  *count); 


struct  PgpPipeline  ** 

pg p E n c r y p t P i pe I i n e C r ea t e (struct  PgpPipeline  **head. 


n 

n 

n 

struct 

PgpEnv  const  *env. 

n 

Q 

u 

struct 

PgpFifoDesc  const  *fd. 

□ 

n 

D 

struct 

Pg p Ra n dome o n t e X t const  *rng 

n 

n 

n 

struct 

PgpConvKey  *convkeys. 

Q 

a 

s 

struct 

PgpPubKey  *pubkeys. 

n 

n 

n 

struct 

PgpSigSpec  *sigspecs. 

Q 

u 

n 

struct 

PgpLi t e ra 1 Pa  rams  *literal. 

Q 

n 

n 

int  sepsig) 

{ 
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n struct  PgpPipeLine  **taiL  = head; 

n struct  PgpPipeLine  *sighead  = NULL,  **sigtaiL  = NULL; 
n struct  PgpPipeLine  **texttaiL  = NULL; 
n int  cLearsig,  compress,  text,  armor,  pgpmime; 
n int  err  = 0,  *error  = &err; 

n PgpVersion  version; 

n version  = pgpenvGetInt  (env,  PG PE N V_V E R S 1 0 N , NULL,  error); 
n compress  = pgpenvGetInt  (env,  PG P E N V_C OM PR E S S , NULL,  error); 
n text  = pgpenvGetInt  (env,  PG  P E N\/_T  E XTMO  D E , NULL,  error); 
n armor  = pgpenvGetInt  (env,  PGPENV_ARHOR,  NULL,  error); 


n 

/* 

Force  1 - 

pass  sig  packets  if  encrypting  to  onLy  non-RSA  keys  */ 

n 

/* 

Don't  do 

it  if  just  signing,  may  be  going  to  PGP  2.6  user  */ 

n 

i f 

(version 

<=  PGPVERSI0N_2_6)  { 

n 

B 

struct 

PgpPubKey  *pkList; 

o 

B 

struct 

PgpSigSpec  *ssList; 

n 

B 

p k L i s t 

= pubkeys; 

n 

B 

if  (pkList)  { 

a 

B 

n int 

oLdkey  = 0; 

□ 

B 

a whiLe  (pkList  &S  loLdkey)  { 

n 

B 

B B 

if  ( pkL i st->pkA Lg  <=  PGP_PKALG_RSA  + 2)  { 

Q 

B 

B B 

n oLdkey  = 1; 

n 

B 

B B 

> 

Q 

B 

B B 

pkList  = p k L i s t ->n e X t ; 

n 

B 

B > 

Q 

fl 

B if 

(loLdkey)  ( 

n 

B 

B B 

/*  Upgrade  version  if  aLL  post-RSA;  aLso  fix  sigspecs 

n 

B 

B B 

version  = PG P V E RS I 0N_3 ; 

D 

B 

B B 

ss  L i St  = si gspecs; 

n 

B 

B B 

whiLe  (ssList)  ( 

n 

B 

B B 

n if  ( pg p S i g S p e c Ve r s i on  (ssList)  <=  PG PV E R S I 0N_2_6 ) 

B 

B 

B B 

n n pg p S i g S pe c S e t Ve r s i on  (ssList,  PG PV E R S 1 0N_3  ) ; 

B 

B 

B B 

n ssList  = pgpSigSpecNext  (ssList); 

B 

B 

B B 

> 

B 

B 

B > 

B 

B 

> 

B 

> 

B 

if 

( ! head  ) 

B 

B 

goto  err; 

B 

/* 

Turn  off 

LiteraL  and  compression  for  sepsig  creation  */ 

B 

i f 

(sepsig) 

{ 

B 

B 

compress  = 0; 

B 

B 

L i t e ra  L 

= NULL; 

B 

> 

B 

/* 

disaLLow 

separate  signatures  when  we  have  these  other  types  */ 

B 

i f 

( sepsi g 

&& 

B 

B 

(tsigspecs  ||  compress  ||  LiteraL  ||  convkeys  ||  pubkeys)) 

B 

B 

goto  err; 

B 

/* 

B 

* 

Don't  aLLow  the  specification  of  convkeys  and  pubkeys  at  the 

B 

* 

same  time,  yet. 

B 

*/ 

n if  (convkeys  &&  pubkeys) 
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a 

n 

goto  err; 

n 

1 f 

(convkeys  88  c on v key s ->n e x t ) 

Q 

n 

goto  err; 

□ 

/* 

This  is  how  we  define  when  to  do  a clears 

igned  message 

*/ 

n 

clearsig  = (text  S&  sigspecs  SS  armor  88 

□ 

Q 

pgpenvGetInt  (env,  PG PE N V_ C L E AR S I G , 

NULL,  error) 

88 

n 

n 

tconvkeys  88  Ipubkeys  88  Isepsig); 

n 

pgpmime  = pgpenvGetInt  (env,  PG P E N V_ PG PM  I M E , 

NULL,  error) 

/ 

n 

i f 

( ! f d) 

□ 

n 

fd  = 8 pg p F 1 e X F i f 0 D e s c ; 

n 

/* 

n 

★ 

If  we  can  clears ign,  then  we  do  something 

special.  Do 

not  add 

□ 

* 

the  literal  packet  type,  do  not  compress. 

and  create  a 

split 

n 

★ 

for  the  input  data. 

a 

*/ 

n 

1 f 

(clearsig)  { 

n 

n 

literal  = NULL; 

n 

n 

compress  = 0; 

n 

□ 

if  ( ! pgpmi me  ) ( 

n 

n 

a n texttail  = pg p S p 1 i t C r e a t e (tail) 

r 

□ 

n 

B B tail  = pgpSplitAdd  (*tail); 

n 

n 

> 

n 

> 

n 

i f 

(text)  { 

Q 

n 

byte  const  *charmap; 

□ 

n 

if  (lliteral  88  Iclearsig  88  Isepsig) 

n 

□ 

B goto  err; 

□ 

n 

/* 

n n * Use  the  appropriate  charmap.  Stripspaces  if  we 

n n * are  c L e a r s i g ng i n g or  if  it  was  requested, 

n n * Always  add  CRLF. 

n n * / 

n n charmap  = (byte  const  *) 

n n n p g p e n vG e t Po i n t e r (env,  PG P EN V_C H ARM APTO L AT  I N 1 , NULL,  NULL); 

n n tail  = p g pTe x t F i L t C r e a t e (tail,  charmap,  cLearsig  ? 1 : 0, 

n n n n n PGP_TEXTFILT_CRLF); 

n > 

a if  (sigspecs)  { 

a a struct  PgpPipeLine  **temptaiL  = NULL; 
n n sigtail  = tail; 

n n tail  = pg p S i g C r ea t e ( s i g t a i L , version,  fd,  rng); 
n n sighead  = *sigtaiL; 


/*  XXX:  should  I do  this?  */ 

temptail  = pg p S i g S i g n a t u r e (sighead,  sigspecs,  clearsig); 
if  ( t empta i I ) 
n sigtail  = temptail; 
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n 

i f 

(Li 

t e ra  L ) ( 

n 

□ 

byte  Len  = 0; 

u 

Q 

1 f 

(LiteraL->fi Lename) 

n 

n 

B 

Len 

= strLen  ( L i t e r a L ->f i L en a me ) ; 

n 

n 

Q 

B 

tail  = 

pgpLi tera LCreate  (taiL,  version,  fd. 

Q 

B 

B 

B 

a (text  ? PGP_LITERAL_TEXT  : 

n 

B 

B 

B 

n PGP_LITERAL_BINARY), 

n 

B 

B 

B 

n (byte  *)  L i t e r a L ->f i L e na me , Len, 

n 

B 

B 

B 

n L i tera L->t i mestamp) ; 

n 

> 

n 

■1  f 

(si 

gspecs)  { 

n 

B 

i f 

(cLearsig  ||  sepsig)  ( 

n 

B 

B 

i f 

( ! pg pDe vNu L L C r ea t e (taiL)) 

n 

B 

B 

B 

taiL  = NULL; 

n 

B 

B 

e L s e { 

n 

B 

B 

B 

if  (sepsig)  ( 

n 

B 

B 

B 

n taiL  = sigtaiL; 

tt 

B 

B 

B 

} e L s e { 

n 

B 

B 

B 

n /*  create  cLearsig  armor  here  */ 

n 

B 

B 

B 

n byte  *hashList; 

n 

B 

B 

B 

n int  hashcount; 

D 

B 

B 

B 

n hashList  = c r ea t e H a s h Li s t ( s i g s pe c s , 

n 

B 

B 

B 

n n n n Shashcount); 

n 

B 

B 

B 

n if  ( pgpmi me ) { 

n 

B 

B 

B 

n n taiL  = pg p A rmo r W r i t e C r e a t e Pg pM i me s i g 

n 

B 

B 

B 

n n n n (head,  sigtaiL,  env. 

D 

B 

B 

B 

a n n n fd,  version,  hashList,  hashcount); 

n 

B 

B 

B 

a } e L se  { 

□ 

B 

B 

B 

a a taiL  = pg p A rmo r W r i t e C r ea t e C L ea r s i g 

□ 

B 

B 

B 

a a a a (texttaiL,  sigtaiL,  env. 

n 

B 

B 

B 

a a a a fd,  version,  hashList, 

n 

B 

B 

B 

a a a a hashcount); 

n 

B 

B 

B 

a > 

n 

B 

fl 

B 

a pg pHem F r ee ( h a s h L i s t ) ; 

n 

B 

B 

B 

> 

n 

B 

B 

B 

□ 

B 

B 

> 

□ 

B 

> 

else 

Q 

B 

B 

taiL  = pgpSigTextInsert  (sighead,  taiL); 

n 

> 

Q 

i f 

(compress)  { 

Q 

B 

i n t a L g 

= pgpenvGetlnt  (env,  PG P E N V_C OH  PR E S S A LG , NULL,  NULL); 

n 

B 

int  quaL  = pgpenvGetlnt  (env,  PGPENV_COMPRESSQUAL,  NULL,  NULL) 

n 

B 

n 

B 

tail  = 

pgpCompressHodCreate  (taiL,  version,  fd,  aLg,  quaL); 

n 

> 

n 

i f 

(convkeys  | | pubkeys)  ( 

n 

B 

struct 

PgpCipher  const  *cipher; 

a 

B 

struct 

Pg p C f b Con t e X t *cfb; 

n 

B 

struct 

Pg p S t r i ngToKey  *s2k  = NULL; 

n 

B 

byte  i V C I V L E N-2 U ; 

n 

B 

byte  keyC25D;n  n /*  Max  keysize  */ 
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n n byte  ciphernum  = pgpenvGetInt  (env,  PGPEN\/_CIPHER,  NULL,  NULL); 

n n byte  passkey  = 0; 

a u if  (!rng) 

n n n rng  = &pgpRandomPooL; 

n n cipher  = pg p C i p h e r By N umb e r (ciphernum); 
n n if  (Icipher) 

n n n gotoerr; 

n n 

a a cfb  = pgpCfbCreate  (cipher); 

a a i f ( ! cf b) 

a a a gotoerr; 

a a a 

n a if  (convkeys)  { 

a a a s2k  = pgpS2KdefauLtV2  (env,  rng); 

a a a if(!s2k){ 

a a a a pgpCfbDestroy  (cfb); 

a a a a gotoerr; 

a a a } 

a a } 

a a /*  Generate  the  key  (randomly  or  not)  */ 
a a keyC0]  = ciphernum; 


n 

n 

i f 

(convkeys  &S 

! c 0 n V ke y s->n e X t &&  tpubkeys)  ( 

n 

n 

n 

i n t 

ret; 

n 

Q 

n 

/* 

Use  the 

pass  phrase  as  the  session  key  */ 

n 

n 

n 

ret 

= pgpSt ri ngToKey  ( ( c on v key s -> s t r i n g ToKey 

a 

n 

Q 

n 

B 

c 0 nv key s -> s t r i ng ToKey  : s2k). 

u 

n 

n 

Q 

B 

convkeys->pass. 

a 

n 

n 

B 

B 

c on V key s->pa s s 1 e n , key  + 1. 

□ 

Q 

n 

B 

B 

cipher->keysize); 

a 

n 

s 

i f 

< ret ) -C 

n 

n 

n 

B 

mems  e t 

(key,  0,  sizeof  (key)); 

Q 

n 

n 

B 

pgpCfbDestroy  (cfb); 

Q 

n 

Q 

B 

goto  err; 

n 

Q 

n 

> 

a 

n 

> 

else 

{ 

□ 

n 

n 

/* 

Generate 

a random  session  key  */ 

a 

n 

n 

pgpRandomGetBytes  (rng,  key+1,  c i p h e r-> key s i 

n 

□ 

n 

passkey  = 1 

/ 

a a /*  Initialize  the  Cfb  */ 
a a pgpCfblnit  (cfb,  key+1,  NULL); 

a a /*  Generate  the  random  IV  and  create  the  cipher  module  */ 
n a pg pRa ndomGe t By t e s (rng,  iv,  sizeof  (iv)); 
a a tail  = pg p C i p h e r Mod E n c r y p t C r e a t e (tail,  version,  fd. 


B 

B 

B 

B B 

n cfb,  iv. 

env ) ; 

B 

B 

i f 

(convkeys)  ( 

B 

B 

B 

tail  = 

pgpConvHodCreate 

(tail,  version. 

B 

B 

B 

B B 

n convkeys. 

B 

B 

B 

B B 

a ciphernum. 

B 

B 

B 

B B 

a (passkey  ? 

key  : NULL)); 

B 

B 

B 

pg p S 2 Kd e s t r oy  (s2k); 
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n n > 

D □ Q n □ n 

n n if  (pubkeys)  { 

n n n struct  PgpPipeLine  **pketaiL; 

n n n struct  PgpPubKey  const  *thiskey; 

n n n /*  Save  off  the  tail  so  we  can  talk  to  the  PkeMod  */ 
n n n pketaiL=taiL; 


Q 

tt 

D 

tail  = pgpPkeCreate  (pketaiL,  version,  key. 

tt 

tt 

n 

Q 

n cfb->cipher->cipher->keysize+1); 

O 

tt 

n 

i f 

( ! t a i 1 ) { 

n 

tt 

tt 

n 

memset  (key,  0,  sizeof  (key)); 

n 

tt 

tt 

n 

goto  err; 

n 

a 

tt 

> 

n 

tt 

tt 

for 

(thiskey  = pubkeys;  thiskey; 

n 

tt 

tt 

thiskey  = t h i s key->next ) 

n 

tt 

tt 

tt 

if  (thi skey->encrypt ) 

n 

tt 

tt 

tt 

a pgpPkeAddKey  (*pketail,  thiskey,  rng); 

a 

tt 

y 

n 

tt 

memset 

(key,  0,  sizeof  (key)); 

□ 

} 

tt 

i f 

( ! c Lea  rs 

i g ) { 

tt 

n 

tail 

= 

pg pH ea d e r C r ea t e (tail); 

tt 

> 

tt 

i f 

(armor  SS  IcLearsig)  { 

tt 

n 

i ntnn 

armorType  = PGP_ARMOR_SEPSIG; 

tt 

□ 

switch 

(sepsig)  ■( 

tt 

n 

tt 

case  0 : 

tt 

n 

tt 

n 

armorType  = PG P_ A RMO R_NORH A L ; 

tt 

tt 

tt 

n 

break; 

n 

a 

tt 

/* 

n 

tt 

tt 

★ 

XXX:  This  case  is  a hack  until  PGP/MIME  is  proper 

tt 

tt 

n 

* 

implemented  in  the  Library.  It  indicates  that  th 

tt 

tt 

tt 

* 

separate  signature  should  say  "BEGIN  PGP  MESSAGE" 

tt 

tt 

n 

* 

instead  of  "BEGIN  PGP  SIGNATURE",  so  that  it  can 

tt 

tt 

n 

★ 

used  to  form  a PGP/HIME  clear-signed  message. 

tt 

tt 

Q 

*/ 

tt 

tt 

tt 

case  PGP_SEPSIGHSG : 

tt 

tt 

tt 

n 

armorType  = PGP_ARMOR_SEPSIGMSG; 

tt 

tt 

n 

tt 

break; 

tt 

tt 

n 

default: 

tt 

tt 

n 

tt 

armorType  = PG P_ ARMO R_S E PS  I G ; 

tt 

tt 

n 

tt 

break; 

tt 

tt 

> 

Q 

tt 

tail 

= 

pgpArmorUriteCreate  (tail,  env,  fd,  rng,  version. 

tt 

tt 

tt 

o 

n n n n n armorType); 

tt 

> 

tt 

i f 

( ! t a i L ) 

{ 

err 

tt 

□ 

/*  Clean  up  on  error  */ 

tt 

□ 

tail 

= 

NULL; 
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n > 

n return  tail; 

> 


/*  Create  a List  of  hash  bytes  from  a sigspec  list,  and  return  the  Length  */ 
static  byte  * 

createHashLi St ( St ruct  PgpSigSpec  const  *sigspecs,  int  *count) 

{ 


n 

int 

cnt 

f 

Q 

struct 

PgpSigSpec  const  *ss1,  *ss2; 

n 

byte  *List; 

n 

c n t 

= 0 

/ 

□ 

/* 

Count  unique  hash  types  */ 

n 

for 

(ss1=sigspecs;  ssl;  ss1=pgpSigSpecNext(ss1))  { 

n 

n 

for 

( s s2  = s i g s pe c s ; ss2!=ss1;  s s 2 = pgpS i g S pe cNex t ( s s2 ) ) 

n 

n 

n 

if  (pgpSigSpecHashtypeCss2)==pgpSigSpecHashtypeCss1 )) 

Q 

o 

n 

n break; 

n 

□ 

> 

n 

n 

i f 

(ss2==ss1 ) 

n 

n 

a 

+ + c n t ; 

□ 

> 

n 

/* 

Allocate  list  */ 

n 

List  = 

(byte  * ) pg pMem A 1 L 0 c ( c n t ) ; 

□ 

i f 

( ! 1 i 

St)  { 

Q 

n 

*count  = 0; 

□ 

D 

return  NULL; 

n 

> 

a 

/* 

Put 

unique  hash  types  on  List  */ 

n 

cnt 

= 0 

r 

n 

for 

( s s 1 = s i g s pe c s ; ssl;  s s 1 =pg p S i g S p e c N ex t ( s s 1 ) ) { 

n 

n 

for 

(ss2=si gspecs;  ss2!=ss1;  s s 2=pgpS i g S pe cNex t ( s s2 ) ) 

{ 

n 

n 

c 

if  (pgpSigSpecHashtypeCss2)==pgpSigSpecHashtype(ss1 )) 

n 

□ 

n 

n break; 

n 

a 

> 

n 

□ 

if 

(ss2==ss1 ) 

□ 

n 

□ 

List[cnt++D  = pgpSigSpecHashtype(ssl); 

n 

> 

n 

*count 

= cnt; 

Q 

return 

List; 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


C[CHK:31444a7f5c0cc29788364fbb6d44b885ceca82694b0cc1625a0b6df1256:] 


1686 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpEncPipe.h 


/* 

* pgpEncPipe.h  --  setup  the  Encryption  Pipeline,  given  a set  of  arguments 

* from  the  UI.  This  will  setup  a pipeline,  or  return  NULL  if  there  is 

* any  error  along  the  way. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r I o r d SM I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pg p E n c P i pe . h , V 1.5. 2.1  1997/06/07  09:51:40  mhu  Exp  $ 

*/ 

#ifndef  PGPENCPIPE.H 
#define  PGPENCPIPE.H 

//include  "pgpUsuals.h" 

//ifdef  ..cplusplus 
extern  "C"  f 
//e n d i f 

struct  PgpConvKey; 

//ifndef  TYPE. PGPCONVKEY 

#define  T YP E.PG PC  0 N V KE Y 1 

typedef  struct  PgpConvKey  PgpConvKey; 

//endi  f 

struct  PgpEnv; 

//ifndef  TYPE. PGPENV 

//define  TYPE. PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

//endi  f 

struct  PgpFifoDesc; 

//ifndef  T Y PE.  PG  P F I FO  D E S C 

#define  T Y PE.PG P F I FO D E S C 1 

typedef  struct  PgpFifoDesc  PgpFifoDesc; 

// end i f 

struct  PgpPipeline; 

//ifndef  TYPE. PGPPIPELINE 

//define  TYPE.PGPPIPELINE  1 

typedef  struct  PgpPipeline  PgpPipeline; 

//e nd i f 

struct  PgpRandomContext; 

#ifndef  TYPE. PGPRANDOMCONTEXT 
//define  TY  PE.PG  P RAN  D OHC  ONT  E XT  1 

typedef  struct  PgpRandomContext  PgpRandomContext; 

//endi  f 

struct  PgpSigSpec; 

//ifndef  T Y PE.PG  P S I G S P E C 

//define  T Y PE.PG  P S I G S P E C 1 

typedef  struct  PgpSigSpec  PgpSigSpec; 

//endi  f 
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struct  PgpPubKey; 

#ifndef  TYPE_PGPPUBKEY 
#define  T Y PE_ PG P PUBKE Y 1 
typedef  struct  PgpPubKey  PgpPubKey; 
#end  i f 


struct  Pg pLi  t e r a L Pa r ams  { 
n char  const  *filename; 

n word32n  timestamp; 

>; 

#ifndef  T Y P E_ PG P L I T E R A LP A R AH S 
#define  T Y PE_ PG P L I T E R A LP AR AH S 1 

typedef  struct  Pg p L i t e r a L Pa r a ms  Pg p L i t e r a L Pa r a m s ; 
# e n d i f 


/* 

* Create  the  encryption  pipeline.  This  function  will  use  parameters 

* set  in  the  environment  and  parameters  passed  in  to  determine  which 

* filters  to  create.  This  will  perform  some  limited  sanity  checking 

* on  the  arguments.  For  example,  it  is  illegal  to  create  a separate 

* signature  while  encrypting. 

* 

* Pass  in  a pointer  to  where  the  head  of  the  pipeline  should  go. 

* This  function  will  return  you  pointer  to  the  tail  of  the  pipeline. 

* 


* If  you  pass  in  needoutput,  it  will  be  filled  in  with  0 or  1,  depending 

* on  if  the  pipeline  requires  an  output  module.  When  using  multipart 

* armor,  for  example,  no  output  file  is  required  --  the  armor  module  will 

* open  the  appropriate  files. 

* 

* A rgument  s : 

*n  head;  The  head  of  the  pipeline  created. 

*n  env:  The  current  PGP  Environment 

*n  fd:  The  Fifo  Descriptor  to  use  for  buffering 

*n  rng:  The  Random  Number  Generator  to  use  for  padding  and  randomness 

*n  convkeys:  The  list  of  Conventional  Keys  to  use  for  conventional 

*n  n encryption  (encrypting  with  a passphrase) 

*n  pubkeys:  The  list  of  Public  Keys  to  use  for  public  key  encryption. 

*n  sigspecs:  The  list  of  Signature  Specifications  to  use  for  making 

*n  n signatures. 

*a  literal:  should  this  be  processed  as  a literal  packet,  or  is  it 

*n  a a PGP  message  or  a clearsigned  message,  or  a separate 

*n  n signature?  This  includes  the  input  filename  to  be  included 

*n  n in  the  literal  packet,  and  other  literal  information. 

*n  sepsig:  perform  a separate  signature.  Only  valid  with  a few  other 

*n  n options.  If  the  special  value  PG P_ S E P S I GH S G is  passed, 

*n  n separate  signature  will  say  "BEGIN  PGP  HESSAGE"  instead  of 

*n  D "BEGIN  PGP  SIGNATURE",  so  that  it  can  be  used  to  form  a PGP/HIHE 

*n  a clear-signed  message.  XXX:  This  is  a hack  until  PGP/HIHE  is 

*n  n properly  implemented  in  the  library. 

*/ 


struct  PgpPipeline  PGPExport  ** 
pg pEn c ry pt Pi pe I i neC r ea t e (struct 

□ no 

□ n n 

□ □ □ 

□ n □ 


PgpPipeline  **head, 
struct  PgpEnv  const  *env, 
struct  PgpFifoDesc  const  *fd, 
struct  Pg p Ra n domCon t e X t const  *rng, 
struct  PgpConvKey  *convkeys. 
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n 

n 

n 

struct 

PgpPubKey  *pubkeys. 

□ 

s 

Q 

struct 

PgpSigSpec  *sigspecs. 

n 

n 

n 

struct 

Pg p L i t e r a L Pa r a ms  *LiteraL, 

n 

D 

n 

int  sepsig); 

#def i ne 

P6P_ 

.SEPSIGMSGn 

7361 

#ifdef  __cpluspLus 

> 

# e nd i f 

#endif  /*  PGPENCPIPE.H  */ 
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/* 

* pgpEnv.c  --  Handle  PGP  Environments.  This  contains  much  of  the 

* "global"  PGP  environment  code.  This  contains  the  information  that 

* is  obtains  from  the  configuration  file  or  command-line  or  some 

* other  means.  It  defines  the  environment  in  which  it  operates.  It 

* is  possible  to  have  multiple  threads  operating  in  the  same 

* environment,  but  in  general  each  thread  would  have  its  own 

* environment.  For  example,  a PGP  Server  would  have  one  of  these 

* for  each  client. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <wa  r I o r d 31*1 1 T . E D U> 

* 

* $Id:  pgpEnv.c, V 1.4. 2.1  1997/06/07  09:51:40  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

#end  i f 


#i nc lude 

<stdi 0 . h> 

^include 

<string.h>n  n 

/* 

for 

memset  ( ) */ 

#include 

"pgpCharMap. h"nn 

/* 

for 

pgpCha  rmaps ( ) */ 

#i nc lude 

"pgpCipher.h"n  n 

/* 

for 

PGP_CIPHER_IDEA  */ 

^include 

"pgpCompress  . h"n 

/* 

for 

PGP_COI*IPRESSALG_ZIP 

# i nc 1 ude 

"pgpHash.h"n  n 

/* 

for 

PGP_HASH_I*ID5  */ 

#include 

"pgpMem. h" 

^include 

"pgpErr.h" 

#include 

"pgpEnv.h" 

struct  Conf  { 
n u n i 0 n { 

n n intnum; 

n n char*string; 

n } V a I ; 

n i n t p r i ; 

>; 

struct  PgpEnv  { 


n 

struct 

Conf  n 

a 

conf IntCPGPENV, 

MAX_INT 

- 

n 

a 

n 

a 

a a 

PGPENV 

_BASE_ 

INTT; 

□ 

struct 

Conf  n 

a 

confStringCPGPENV_HAX_ 

STRING 

- 

n 

n 

a 

a 

a a 

PGPENV 

_BASE_ 

string:; 

n 

void 

*a 

a 

a 

poi ntersCPGPENV 

_MAX_P0INTER 

- 

n 

s 

a 

a 

a a 

PGPENV 

_BASE_ 

POINTER]; 

n 

s i z e_ 

tn 

a 

a 

pointerSizeCPGPENV_l*IAX 

.POINTER  - 

n 

>; 

n 

a 

a 

a a 

PGPENV 

-BASE. 

POINTER]; 

struct  PgpEnv  * 
pgpenvCreate  (void) 

{ 

n struct  PgpEnv  *env; 

n env  = (struct  PgpEnv  * ) pg  pl*l  em  A I I o c (sizeof  (*env)); 

n i f ( ! env ) 
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n n return  NULL; 


n memset  (env,  0,  sizeof  (*env)); 


a 

n 

D 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*  Now  initialize  the  environment  pointers  as  appropriate  */ 


pgpenvSetInt 

B 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

B 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

pgpenvSetInt 

B 


(env,  PGPENV_CIPHER,  PG P_C I PH E R_I D E A , 
PGPENV_PRI_PUBDEFAULT); 

(env,  PGPENV_HASH,  PG P_H AS H_H D 5 , PG P E N V_PR I _PUB D E F AU LT ) ; 
(env,  PGPENV_COMPRESS,  1,  PGPENV_PRI_PUBDE FAULT ) ; 

(env,  PGPENV_COHPRESSALG,  PG P_C OHPR E S S A LG_Z I P, 
PGPENV_PRI_PUBDEFAULT); 

(env,  PGPENV_COMPRESSQUAL,  5,  PG P EN V_ PR  I _PUB D E F AU LT ) ; 
(env,  PGPENV_ARMORLINES,  720,  PG P EN V_PR I _PUB D E F AU LT ) ; 
(env,  PGPENV_CERTDEPTH,  4,  PGPENV_PRI_PUBDE FAULT ) ; 

(env,  PGPENV_COMPLETES,  1,  PGPENV_PRI_PUBDE FAULT ) ; 

(env,  PGPENV.MARGINALS,  2,  PG PEN V_P R I _PUB D E F AU LT ) ; 

(env,  PGPENV_TRUSTED,  120,  PGPENV_PRI_PUBDE FAULT ) ; 

(env,  PGPENV_CLEARSIG,  1,  PGPENV_PRI_PUBDE FAULT ) ; 

(env,  PGPENV_VERSION,  PG P V E RS I 0N_2_6 , 

PGPENV_PRI_PUBDE FAULT); 


B 


B 

B 


pg pe n V S e t S t r i ng  (env,  PG P E N V_PG PP AT H , PG P E N V_ P R I _PUBD E F A U LT ) ; 

pg pe n V S e t S t r i ng  (env,  PG P E N V_U P AT H , 

B B "/home/ch/keyserver",  PGPENV_PRI_PUBDE FAULT ) ; 


#ifdef 

MSDOS 

Q 

#e  L se 

pgpenvSetSt  ri ng 

( env. 

PGPENV_ 

CHARSET 

c 

#endi f 

n 

n 

> 

pgpenvSetSt  ring 

return  env; 

( env. 

PGPENV_ 

CHARSET 

"cp850",  PGPENV_PRI_PUBDEFAULT); 
"noconv",  PGPENV_PRI_PUBDE FAULT); 


/* 

* Copy  an  environment.  WARNING:  Although  the  strings  will  be  copied, 

* the  "pointers"  will  not.  Take  care  when  destroying  an  environment; 

* you  can  only  destroy  the  pointers  from  the  first  one.  Since  the 

* environment  doesn't  do  this  on  its  own,  this  is  not  a problem  for 

* this  code. 

*/ 


struct  PgpEnv  * 

pgpenvCopy  (struct  PgpEnv  const  *env) 
{ 

n struct  PgpEnv  *tmp; 

B char  const  *s; 

n char*s2; 

n inti; 


B if(!env) 

B B returnNULL; 


B /*  Create  the  new  env  */ 

B tmp  = (struct  PgpEnv  * ) pg pHem A I I o c (sizeof  (*tmp)); 

B if(!tmp) 

B B returnNULL; 


n /*  Clone  the  old  env  */ 
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n 

memcpy 

( tmp 

, env. 

sizeof  (*env)); 

n 

/*  Alloc  and  copy 

the  strings  */ 

c 

for  ( i 

= 0;  i 

< PGPENV_MAX_STRING-PGPENV_BASE_STRING;  i++)  { 

Q 

n 

s = 

tmp->confStringni].val. string; 

n 

n 

i f 

(s)  { 

u 

n 

n 

s2 

= (char  * ) pgpHemA 1 1 oc  (strlen  (s)  + 1); 

n 

n 

n 

i f 

(s2) 

a 

□ 

o 

B 

memcpy  (s2,  s,  strlen  (s)  + 1); 

s 

□ 

Q 

tmp->confStringCiIl.val. String  = s2; 

n 

n 

> 

n 

> 

n 

return 

tmp; 

> 


void 

pg p e n V D e s t roy  (struct  PgpEnv  *env) 
{ 

a inti; 

n char*s; 

n if(!env) 

B B return; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 


/*  De-aLLocate  aLL  the  string  variables  */ 

for  (i=0;  i < PGPENV_MAX_STRING-PGPENV_BASE_STRING;  i++)  { 
B s = en v->conf S t r i ng C i 3 . va I . s t r i ng ; 

B i f ( s ) f 

n B memsetCs,  0,  strLen(s)); 

a a pgpMemFree(s); 

B > 

> 


B B 

memset  (env,  0,  sizeof  (*env)); 
pgpMemFree  Cenv); 


/* 

* Set  an  Integer  Value  for  the  environment  variable  var  in  the 

* environment  env  to  num  with  priority  pri. 

*/ 

i nt 

pgpenvSetInt  (struct  PgpEnv  *env,  enum  PgpEnvInts  var,  int  num,  int  pri) 
{ 


n 

int 

i dx; 

n 

i f 

( ! env ) 

□ 

□ 

return 

PGPERR_ 

BADPARAM; 

s 

i f 

(var  < PGPENV_BASE_ 

INT 

1 1 var  >=  PGPENV_HAX_INT) 

n 

n 

return 

PGPERR_ 

ENV_ 

BADVAR; 

Q 

i d X 

= (int) var 

- PGPENV_BASE_INT; 

n 

if 

(pri  < env- 

>confIntCidx].pri) 

n 

s 

ret  u rn 

PGPERR_ 

ENV_ 

LOWPRI; 
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n env->confIntCidx].vaL.num  = num; 

n env->conf IntCi dxD . pri  = pri; 

n returnO; 

> 

static  int 

DoSetString  (struct  PgpEnv  *env,  unsigned  var,  char  const  *string,  int  pri) 
{ 


n 

cha 

r *s; 

n 

va  r 

-=  PGPENV_BASE_STRING; 

Q 

i f 

(string) 

{ 

& 

n 

s = 

(char  *)pgpHemRea 1 loc  ( e n v-> c o n f S t r i ng C va r D . va L . s t r i n g , 

Q 

n 

n 

n n strlen(string)+1); 

n 

Q 

i f 

(s  ==  NULL) 

n 

a 

n 

return  PG P E R R_N0H E M ; 

n 

n 

strcpy  (s,  string); 

Q 

> e 

1 s e i 

n 

Q 

i f 

(env->confStri ngCvarD .va 1 . stri  ng) 

n 

n 

n 

pgpHemFree  (env->confStringCvarD.val. string); 

n 

Q 

s = 

NULL; 

n 

> 

u 

env 

->confStringCvarD.val. string  = s; 

n 

env 

-> con f S t r i ng C va r D . p r i = pri; 

n 

return  0; 

> 

static  int 

SetPointer  (struct  PgpEnv  *env,  unsigned  var,  void  *ptr,  size_t  size) 

{ 

n var  -=  PG P E N V_B AS E_P0 I NT E R ; 

n e n v->po i n t e r s C va r D = ptr; 

n en v->poi n t e r S i zeC va r ] = size; 

n returnO; 

> 

/* 

* Set  a String  Value  for  the  environment  variable  var  in  the 

* environment  env  to  string  with  priority  pri.  Space  is  allocated 

* for  the  string. 

"k 

* If  the  string  is  null,  free  the  old  string  (if  one  existed)  and 

* then  set  the  placeholder  to  NULL. 

*/ 

int 

pg pen V S e t S t r i ng  (struct  PgpEnv  *env,  enum  Pg p E n v S t r i ng s var, 
n n char  const  *string,  int  pri) 

( 

n interr=0; 

n i f ( ! env) 

n n return  PG P E RR_B A D P A R AH ; 

n if  (var  < PG P E N V_B AS E_ST R I NG  ||  var  >=  PG PEN V_H AX_S TR I NG  ) 

n n return  PGPERR_ENV_BADVAR; 

CCCHK:f1abba5d447f82dcc061d30092d225ecd174aaa920589aedd7bbdcc944607f62b:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


lo93 


pgpEnv.c 


if  (pri  < e n v->conf  S t r i ng  C va  r-PGPEN\/_BAS  E_STR  I NG  3 . p r i ) 


n 

□ 

return 

PGPERR 

:_ENV_L0WPRI;n 

/*  not  assi gned  */ 

n 

switch 

(var)  { 

□ 

case  PGPENV_CHARSET : 

a 

n 

c 

n 

n 

byte 

const  *toLocaL 

, *toLatin1; 

□ 

n 

n 

err  = 

pgpCharmaps  (string,  strlen  (string),  StoLocal, 

Q 

Et 

n 

D 

n 

StoLatinl); 

n 

n 

n 

if  ( ! 

err)  { 

□ 

Q 

n 

□ 

DoSetString 

(env,  PG P E N V_ C H A R S ET , string,  pri 

n 

□ 

n 

□ 

SetPoi nter 

(env,  PGPENV_CHARHAPT0L0CAL, 

n 

□ 

n 

n 

□ 

(void  *)toLocaL,  256); 

□ 

Q 

n 

□ 

SetPointer 

(env,  PGPENV_CHARMAPT0LATIN1 , 

tt 

□ 

n 

n 

□ 

(void  *)toLatin1,  256); 

n 

n 

□ 

> 

Q 

n 

> 

□ 

D 

break; 

n 

default 

: 

Q 

n 

err  = 

DoSetString  (env,  var 

, string,  pri); 

n 

> 

n 

> 

return 

err; 

/* 

* 

Set  a Pointer  Value 

for  the  environment 

variable  var  in  the 

* 

envi ronment 

env  to 

the  Pointer  passed  in 

*/ 

int 

pgpenvSetPoi nter  (struct  PgpEnv  *env,  enum 

Pg pE n vPo i n t e r s var,  void  *ptr. 

□ 

f 

a 

□ 

s i ze_ 

t size) 

\ 

D 

if  ( ! e n V ) 

n 

n 

return 

PGPERR 

_BADPARAM; 

n 

if  (var 

< PGPENV_BASE 

_P0INTER  1 1 va 

r >=  PGPENV_MAX_POINTER) 

n 

Q 

return 

PGPERR 

_ENV_BADVAR; 

if  (var  ==  PGPENV_CHARMAPTOLOCAL  ||  var  ==  PG P E N V_C H A RH APTO L AT  I N 1 ) 
n return  PG P E R R_ E N V_B A D V A R ; 


return  SetPointer  (env,  var,  ptr,  size); 


1 n t 

pgpenvGetInt  (struct  PgpEnv  const  *env,  enum  PgpEnvInts  var,  int  *pri, 
n int*error) 


int  err  = 0; 
int  vaL  = 0; 
int  i dx; 


if  ( ! env ) { 


err  = PGPERR_BADPARAM; 
goto  getint_end; 
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n 

if  (var 

< PGPENV_BASE_INT  1 | var 

n 

n 

err  = PG P E R R_ E N V_B A D V AR ; 

a 

n 

goto  getint_end; 

a 

} 

a 

idx  = (i 

nt)var  - PG P E N V_B A S E_ I NT ; 

a 

if  ( p r i ) 

a 

D 

*pri  = e n v-> c 0 n f I n t C i d X 3 . 

a 

va L = e n v-> c on f I n t C i d X 3 . va L . n um; 

g e t i n t 

_end  : 

a 

if  ( e r ro 

r ) 

a 

n 

*error  = err; 

a 

return  vaL; 

> 

char  const  * 

pgpenvGetString 

(struct  PgpEnv  const  *env 

a 

a 

int  *error) 

{ 

a 

int  err 

= 0; 

a 

char  const  *s  = NULL; 

a 

int  idx; 

a 

if  ( ! env ) { 

a 

a 

err  = PG PE R R_B A D P A R AM ; 

a 

a 

goto  getstr_end; 

n if  (van  < PG  PE  N V_B  A S E_  ST  R I NG  ||  var  >=  PG  P EN  V_ri  AX_  ST  R I NG  ) f 

n n err  = PGPE R R_ E N V_B A D V AR ; 

n n goto  getstr_end; 

n > 

n idx  = (int)var  - PG P E N V_B A S E_ ST R I NG ; 

n if(pri) 

n n *pri  = e n v-> c o n f S t r i ng C i dx D . p r i ; 

n s = e n v-> c on f S t r i ng  C i d X !]  . va  L . s t r i n g ; 

getstr_end: 
n if  (error) 

n n *error=err; 


n returns; 

> 


void  * 

pg p e n vGe t Po i n t e r (struct  PgpEnv  const  *env,  enum  Pg p E n v Po i n t e r s var, 
a n size_t  *size,  int  *error) 

{ 


□ 

D 


int  err  = 0; 
void  *ptr  = NULL; 
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n 

i n t i d X ; 

n 

if  (!env)  { 

a 

n err  = PG P E R R_B A D P A R AM  ; 

n 

n goto  getptr_end; 

Q 

> 

□ 

if  (var  < PGPENV_BASE_POINTER  ||  var  >=  PG P E N V_M AX_P0 I NT E R ) { 

□ 

n err  = PGPERR_ENV_BADVAR; 

□ 

n goto  getptr_end; 

Q 

> 

□ 

idx  = (int)var  - PG P E N V_B A S E_ PO I NT E R ; 

n 

Q 

if  (size) 

n 

n *size  = env->pointerSizeCidx]; 

□ 

ptr  = e n v-> po i n t e r s C i d X 3 ; 

getpt  r. 

_end  : 

Q 

if  (error) 

n 

n *error=err; 

n 

return  ptr; 

} 
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/* 

* pgpEnv.h  — The  PGPLib  Environment. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* Keep  track  of  what  used  to  be  "gLobaL"  state;  these  values  are  valid 

* only  within  a working  environment.  Multiple  environments  can  co-exist 

* within  a single  application,  however  each  one  would  have  its  own  unique 

* environment  structure  and  should  pass  it  on  to  its  children. 

* 

* The  main  purpose  of  this  structure  is  to  gether  together  a Lot  of 

* Little  fiddly  things  that  a user  might  want  to  adjust  into  a single 

* variable  so  code  that  doesn't  want  to  fiddle  with  them  doesn't  have  to 

* think  about  the  issue.  It  makes  passing  a different  value  of  an 

* environment  variable  to  a function  more  awkward  (you  have  to 

* copy  a parent  environment  and  set  the  vaLue(s)  of  interest),  but 

* it's  quite  possible  if  you  want  more  detailed  control. 

* 

* The  big  win  is  that  to  add  an  extra  control  parameter  to  a function 

* that  already  gets  some  parameters  from  an  environment,  you  can  just 

* add  it  to  the  environment  and  change  the  function  to  get  its  parmaeter 

* from  the  environment  and  all  of  the  code  in  between  can  just  be 

* relinked. 

* 

* Written  by:n  Derek  Atkins  <wa r L o r dSH I T . E D U> 

* 

* This  is  a Public  API  Function  Header. 

★ 

* $Id:  pgpEnv.h, V 1.20. 2. A 1997/06/07  09:51:41  mhw  Exp  $ 

*/ 


#ifndef  PGPENV.H 
^define  PGPENV.H 


#ifdef  ..cpLuspLus 
extern  "C"  { 

# e n d i f 


struct  PgpEnv; 

#ifndef  TYPE. PGPENV 
^define  TYPE. PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 
//endi  f 


^define  PG P E N V.B A S E. I NTnl 000 
enum  PgpEnvInts  { 

a PGPENV. ARMOR=PGPENV. BASE. INT,  PG P EN V. A RHO R LI N E S , 

n PGPENV. CERTDEPTH,  PG P E N V. C I P H E R , PG P E N V. C L E A R S I G , 

n PGPENV. COMPLETES,  PG P EN V.C OMPR E S S , PG P E N V.C OMPR E S S A LG , 

n PGPENV. COMPRESSQUAL,  PG P E N V.EN C R YPTTO S E L F , PGPENV. HASH, 

n PGPENV. MARGINALS,  PG PE N V. S HOWP A S S , PG P E N V.T E XTMO D E , 

n PGPENV.TRUSTED,  PGP E N V.T Z F I X,  PG PE N V. V E RBOS E , 

n PGPENV. VERSION,  PG P E N V.B AT C HHO D E , PG P E N V_ F ORC E , 

n PGPENV. MAGIC,  PGPENV. NOOUT,  PG P E N V.PG PM  I M E , 

n PGPENV. MAI LWORDWRAPENABLE,  PGP E N V.M A I LWOR D W R A PU I DT H , 

n PGPENV. MAILPASSCACHEENABLE,  PG P E N V.M A I LP A S S C AC H E D U R AT  I ON , 

n PGPENV. MAILENCRYPTPGPMIME,  PG P EN V.M A I L S I GN PG PM  I M E , 

n PGPENV.FASTKEYGEN,  PG P E N V. S I G N C A C H E E N AB LE , PG P E N V. S I G N C A C H E DU R AT  I 0 N , 
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H PGPENV_WARNONMIXRSAELGAMAL, 

n PGPENV_MAILENCRYPTDEFAULT,  PG P E N V_M A I LS I G N D E F AU LT , 

n PGPENV_DATEOFLASTSPLASHSCREEN,  PG P E N V_H A RG I N A L L Y V A L I D W A R N I N G , 

n PGPENV_PGPHIMEPARSEBODY,  PG P E N V_ F I R STKE YG E N E R AT E D , 

n PGPENV_HTTPKEYSERVERPORT,  PGPENV_WARNONRSARECIPANDNONRSASIGNER, 

n PGPENV_MAX_INT 

>; 

#define  PG P EN V_B A S E_ ST R I N Gn  2000 

enum  Pg p En v S t r i ng s { 

n PGPENV_BAKRING=PGPENV_BASE_STRING,  PG P E N V_ C H A R S ET , 

a PGPENV_COMHENT,  PGPENV_COMPAN YKE Y,  PG P E N V_ R A N D OH D E V I C E , 

n PGPENV_LANGUAGE,  PG P E N V_M Y N AH E , PG P EN V_PG PP AT H , PG P E N V_PUBR I N G , 

n PGPENV_RANDSEED,  PG P E N V_ S E C R I N G , PG P E N V_ S Y S D I R , PGPENV_THP, 

n PGPENV_UPATH,  PG P E N V_0 W N E RN AH E , PGPENV_COHPAN YN AHE, 

a PGPENV_LICENSENUHBER,  PG P E N V_H TT PKE Y S E R V E R H 0 S T , PG P E N V_H AX_ S T R I N G 

>; 

#define  PG PE N V_B AS E_ PO I NT E Rn  3000 

enum  Pg p E n v Po i n t e r s { 

n PGPENV_CHARHAPTOLATIN1=PGPENV_BASE_POINTER, 

n PGPENV_CHARHAPTOLOCAL, 

a PGPENV_PUBRINGREF, 

n PGPENV_PRIVRINGREF, 

B PGPENV_RANDSEEDDATA, 

n PGPENV_PGPKEYSHACHAINWINPOS, 

n PGPENV_PGPAPPHACPRI VATEDATA, 

n PGPENV_ENCRYPTIONCALLBACK, 

B PGPENV_PGPHENUHACAPPSIGNATURES, 

B PGPENV_HAX_POINTER 

>; 

/*  Configuration  priorities  */ 

^define  PG P E N V_P R I _ F OR C En  25 

#define  PG PE N V_PR I _ CH D L I N En  20 

//define  PG  P EN  V_PR  I _C  ON  F I Gn  15 

//define  PG  P EN  V_  PR  I _PR  I V D E F A U LTn  10 
//define  PG  P E N V_PR  I _S  Y S C ON  Fn  5 

//define  PG  PE  N V_PR  I _PUB  D E F AU  LTn  0 

/*  Exported  Functions  */ 

/*  create  and  initialize,  copy,  and  destroy  an  environment  */ 
struct  PgpEnv  PGPExport  *pgpenvCreate  (void); 

struct  PgpEnv  PGPExport  *pgpenvCopy  (struct  PgpEnv  const  *env); 
void  PGPExport  pgpenvDestroy  (struct  PgpEnv  *env); 

/* 

* Set  Integer  and  String  configuration  parameters.  Strings  are 

* copied  by  the  environment;  the  caller  need  not  preserve  them. 

* (They  must,  of  course,  be  n u I I - 1 e r m i na t e d . ) 

*/ 

int  PGPExport  pgpenvSetInt  (struct  PgpEnv  *env,  enum  PgpEnvInts  var,  int  num, 
n intpri); 

int  PGPExport  pg pe n v S e t S t r i ng  (struct  PgpEnv  *env,  enum  Pg p E n v S t r i ng s var, 
n n char  const  *string,  int  pri); 


/* 
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* Retrieve  Integer  and  String  configuration  parameters. 

*/ 

int  PGPExport  pgpenvGetInt  (struct  PgpEnv  const  *env,  enum  PgpEnvInts  var, 
n int  *pri,  int  *error); 

char  const  PGPExport  *pg pen vG e t S t r i ng  (struct  PgpEnv  const  *env, 
n enum  Pg p E n v S t r i ng s var,  int  *pri,  int  *error); 

/* 

* Set  and  get  Pointer  parameters  --  these  are  not  configuration  values, 

* in  general,  so  they  are  treated  somewhat  differently.  Note: 

* the  environment  code  does  *not*  copy  the  objects  associated  with  the 

* pointers,  since  it  doesn't  know  how  large  they  are  or  what  other 

* dependent  objects  they  may  contain.  It  is  up  to  the  caller  to 

* ensure  that  the  pointers  remain  valid  as  long  as  a copy  of  them 

* might  exist,  and  to  free  them  when  a pointer  no  longer  exists. 

*/ 

int  PGPExport  pg p e n v S e t Po i n t e r (struct  PgpEnv  *env,  enum  Pg p E n v Po i n t e r s var, 
n void  *ptr,  size_t  size); 

void  PGPExport  * pg p en vGe t Po i n t e r (struct  PgpEnv  const  *env, 
n enum  Pg p En v Po i n t e r s var,  size_t  *size,  int  *error); 

#ifdef  __cplusplus 

> 

Send  i f 

Sendif  /*  PGPENV_H  */ 
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/* 

* pgpFiLeType.c  --  Figure  out  the  type  of  a file. 

★ 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* Written  by  CoLin  PLumb. 

★ 

* $Id:  pgp  F i L eTy  pe  . c , V 1.1. 2.1  1 997/06/07  09:51:41  tnhw  Exp  $ 

*/ 


#ifdef  HAVE_CON FIG_H 
#incLude  "config.h" 

#end  i f 

#incLude  <string.h>n  /*  For  strcmp  */ 

#incLude  "pgpFiLeType.h" 

#incLude  " pg p P k t By t e . h " 

#define  FILETYPELENn  8n  /*  # of  characters  needed  */ 

struct  F i L eTy pe I n t e r na L { 

n unsigned  char  const  patternCFILETYPELENH;  /*  First  char  is  Length  */ 

n struct  PgpFiLeType  type; 

>; 

/*  A character  that  does  not  appear  in  any  pattern  */ 

Sdefine  ANYn  (unsigned  char)255 


static  struct  F i L e Ty pe I n t e r n a L patternsCD  = 


n 

{ 

{ 

2, 

26,  11  }, 

{ " 

'PAK", 

' . pa  k' 

/ 

0 

> 

Q 

{ 

{ 

2, 

31,  139  >, 

{ ■' 

gzi  p" 

/ 

" . gz' 

/ 

0 

> 

n 

{ 

{ 

2, 

31,  157  >, 

{ " 

compressed' 

',".Z' 

/ 

0 

> 

a 

{ 

{ 

2, 

234,  96  >, 

{ " 

Ar  j ", 

'.arj' 

r 

0 

> 

n 

□ 

/*  '‘Z  H P % */ 

n 

{ 

{ 

4, 

26,  72,  80,  37  }, 

{ " 

Hyper 

r 

' ■ hyp' 

0 

> 

n 

n 

/*  G I F 8 */ 

□ 

{ 

{ 

71,  73,  70,  56  >, 

{ " 

GIF", 

'.gif' 

r 

0 

> 

n 

n 

/*  HPAK  */ 

n 

{ 

{ 

4, 

72,  80,  65,  75  >, 

{ " 

H pa  c k 

' . hpk' 

f 

0 

> 

n 

n 

/*  P K *D  */ 

n 

{ 

{ 

4, 

80,  75,  3,  4 >, 

{ " 

Zip", 

'.zip' 

/ 

0 

> 

Q 

a 

/*  Z 0 0 */ 

n 

{ 

{ 

4, 

90,  79,  79,  32  }, 

{ " 

Zoo", 

'.zoo' 

0 

> 

>, 

n 

n 

/*??-Lha0-  -Lhal-  - 

Lha2 

- 

and 

- L ha3 

- */ 

n 

{ 

{ 

7, 

ANY,  ANY,  45,  108,  104, 

48, 

45 

{ " 

LH  A r c 

f 

' . L z h ' 

/ 

0 

> 

n 

{ 

{ 

7, 

ANY,  ANY,  45,  108,  104, 

49, 

45 

>, 

{ " 

LH  A r c 

/ 

' . L z h ' 

/ 

0 

> 

n 

{ 

{ 

7, 

ANY,  ANY,  45,  108,  104, 

50, 

45 

{ " 

LHArc 

/ 

' . L z h ' 

f 

0 

> 

n 

{ 

{ 

7, 

ANY,  ANY,  45,  108,  104, 

51, 

45 

{ " 

LHArc 

r 

' . L z h ' 

r 

0 

> 

>, 

n 

n 

/*??-Lha?-*/ 

n 

>; 

{ 

{ 

7, 

ANY,  ANY,  45,  108,  104, 

ANY, 

45 

{ " 

LHArc 

. L h a ' 

/ 

0 

> 

> 

static 

struct 

PgpFiLeType  PGPFiLe  = {"PGP",  " 

■ pgp 

0>; 

n a a a a /*  \250  3 P G P */ 

static  unsigned  char  const  PGPPatternCD  = { 5,  168,  3,  80,  71,  80  }; 

static  i nt 
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f i L eTy peMa t c h (byte  const  *bytes,  byte  const  *prefix,  unsigned  len) 

{ 

n unsigned  L = *bytes++; 

n uns i gned  i ; 

n if(l>len) 

n n returnO; 

n for  (i  = 0;  i < L;  i++) 

n n if  (bytesCi!]  !=  prefixCiD  S&  bytesCi]  !=  ANY) 

n n n returnO; 

n return  1;n  /*  Success*/ 

> 

/*  Figure  out  if  the  file  is  a recognized  type  */ 
struct  PgpFiLeType  const  * 

pgpFiLeType  (byte  const  *prefix,  unsigned  Len) 

{ 

n unsigned  i; 

n for  (i  = 0;  i < sizeof(patterns)/sizeof(*patterns);  i++)  { 

n n if  ( fi  LeTypeMatchCpatternsCi  II  . pattern,  prefix,  len)) 

n n n return&patternsCiD.type; 

n } 

n if  ( pgp F i L eTypePGP  (prefix,  Len)) 

n n return  &PGPFiLe; 

n return  (struct  PgpFiLeType  *)0; 

} 

/* 

* Figure  out  if  a file  is  a binary  PGP  file. 

* Returns  1 if  it  is  a PGP  file,  0 if  it  is  not. 

*/ 

i nt 

pgp F i L eTy pePGP  (byte  const  *prefix,  unsigned  Len) 

{ 


n 

i f 

( ! Len) 

n 

Q 

return  0; 

Q 

/* 

_ALL_  PGP  messages  start  with  a character 

1 0XXXXXX 

*/ 

n 

i f 

( ! IS_0LD_PKTBYTE  (*prefix)) 

a 

D 

return  0; 

n 

/* 

Check  for  a new-styLe  PGP  file,  using  the 

PGP  file 

header  */ 

n 

i f 

( f i L eTy peHa t ch  (PGPPattern,  prefix,  Len)) 

D 

o 

return  1; 

n 

n 

Q 

/* 

n 

★ 

Check  for  old-styLe  PGP  file,  checking  the  middle  bits  for 

n 

* 

known  packet  types.  This  needs  to  match 

Lib/pi pe/f 

i Le/pgpHeader 

s 

*/ 

n 

switch  (OLD_PKTBYTE_TYPE  (*prefix))  < 

n 

case  PKTBYTE_ESK: 

n 

case  PKTBYTE_SIG: 

n 

case  PKTBYTE_CONVESK: 

n 

case  PKTBYTE_SECKEY: 

n 

case  PKTBYTE_PUBKEY : 
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□ 

case 

PKTBYTE_SECSUBKEY : 

n 

case 

PKTBYTE_PUBSUBKEY : 

□ 

case 

PKTBYTE_COMPRESSED : 

n 

case 

PKTBYTE_C0NVENTI0NAL: 

u 

case 

PKTBYTE_LITERAL: 

u 

n 

/*  These  are  the  known  packet  types  */ 

a 

Q 

return  1; 

a 

default  : 

u 

n 

/*  Its  not  known  — perhaps  something  else? 

n 

n 

return  0; 

n 

> 

n 

/*  NOTREACHED  */ 

n 

return  0; 

/* 

* Figure  out  if  a file  is  human-readable  or  not. 

* Returns  0 if  text,  1 if  binary. 

* 

* A file  is  considered  binary  if  it  contains  any  illegal  control  characters 

* or  "too  many"  characters  with  the  8th  bit  set.  If  you're  using  Latin-1, 

* you  might  have  some  such  characters,  but  a binary  file  probably  averages 

* about  half  odd  characters.  This  test  assumes  a file  is  binary  if  the 

* number  of  bytes  with  the  high  bit  set  exceeds  a quarter  of  the  buffer. 

* EXCEPTION:  If  working  in  Russian,  Cyrillic  is  usually  placed  in  the  high 

* half,  so  ignore  this  test  in  that  case. 

* 


* 

The 

legal 

control  characters  are: 

★ 

0 

NU 

null  (nul) 

ILLEGAL 

* 

1 

SH 

start  of  heading  (soh) 

ILLEGAL 

* 

2 

sx 

start  of  text  (stx)nn 

ILLEGAL 

* 

3 

EX 

end  of  text  (etx) 

ILLEGAL 

★ 

4 

ET 

end  of  transmission  (eot) 

ILLEGAL 

★ 

5 

EQ 

enquiry  (enq) 

ILLEGAL 

★ 

5 

EQ 

enquiry  ( enq ) 

ILLEGAL 

* 

6 

AK 

acknowledge  (ack) 

ILLEGAL 

★ 

7 

BL 

bell  (bel) 

1 e g a 1 n 

' \a  ' 

★ 

8 

BS 

backspace  (bs) 

lega  In 

' \b  ' 

* 

9 

HT 

character  tabulation  (ht) 

lega  In 

' \t  ' 

★ 

1 0 

LF 

line  feed  (If) 

1 ega  1 Q 

' \n  ' 

★ 

1 1 

VT 

line  tabulation  (vt) 

lega  In 

■ \v  ' 

it 

1 2 

F F 

form  feed  (ff) 

1 ega  1 n 

■ \f  ■ 

* 

1 3 

CR 

carriage  return  (cr) 

lega  In 

■ \r  ' 

★ 

1 4 

SO 

shift  out  (so) 

ILLEGAL 

★ 

1 5 

SI 

shift  in  (si) 

ILLEGAL 

★ 

1 6 

DL 

datalink  escape  (die) 

ILLEGAL 

* 

1 7 

D1 

device  control  one  (del) 

ILLEGAL 

it 

18 

D2 

device  control  two  (dc2) 

ILLEGAL 

★ 

1 9 

D3 

device  control  three  (dc3) 

ILLEGAL 

* 

20 

D4 

device  control  four  (dc4) 

ILLEGAL 

* 

21 

NK 

negative  acknowledge  (nak) 

ILLEGAL 

★ 

22 

S Y 

syncronous  idle  (syn) 

ILLEGAL 

* 

23 

EB 

end  of  transmission  block  (etb) 

ILLEGAL 

* 

24 

CN 

cancel  (can) 

ILLEGAL 

* 

25 

EM 

end  of  medi urn  ( em) 

ILLEGAL 

* 

26 

SB 

substitute  (sub) 

legal  (CP/H 

S MS-DOS  EOF) 

* 

27 

EC 

escape  (esc) 

ILLEGAL 
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★ 

28 

FS 

file  separator  (is4) 

ILLEGAL 

★ 

29 

GS 

group  separator  (is3) 

ILLEGAL 

it 

30 

RS 

record  separator  (is2) 

ILLEGAL 

* 

it 

31 

US 

unit  separator  (isl) 

ILLEGAL 

it 

TODO 

Worry  about  EBCDIC 

it 

TODO 

Use  the  charset  rather  than  the 

language  to 

* 

*/ 

1 n t 

TODO 

Worry  about  shift-JIS  and  other 

heavy  top-8 

pg p F i L eTy peB i na ry ( c h a r const  *Lang,  byte  const  *buf,  unsigned  Len) 
{ 

n unsigned  highlimit; 

n chare; 


n i f ( ! L en  ) 

n n return  1;n  /*  empty  file  or  error,  not  a text  file  */ 

n if  ( pg p F i L eTy p e ( bu f , Len)) 

n n returni; 

n /*  Limit  on  number  of  8th-bit-set  characters  allowed  */ 

n highlimit  = len/4; 

a if  (Lang  &S  strcmpCLang,  "ru")  ==  0) 

n a highlimit=len; 


n 

d 0 

n 

n 

c = 

*buf ++; 

□ 

□ 

i f 

(c  < ' ' && 

( c 

n 

Q 

Q 

return 

1; 

n 

n 

if 

(Cc  & 0x80) 

SS 

n 

n 

n 

return 

1; 

n 

> 

while 

Len); 

< ' \a ' II  c > ' \r ' ) SS  c ! = 26) 

/*  Illegal  control  char  */ 
highlimit  — ==  0) 

/*  Too  many  8th  bits  set  */ 


n return0; 

> 
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/* 

* pgpFileType.h  - classify  files 

★ 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved 


* 

* $Id: 

*/ 

pg p F i 1 eTy p e . h , V 1.3. 2.1  1997/06/07  09:51:41  mhw  Exp  $ 

# i f n d e f 

PGPFILETYPE  H 

#define  PGPFILETYPE.H 

#include  "pgpUsuals.h" 

#ifdef  cplusplus 

extern  "C"  < 

#endi f 

struct  PgpFileType  { 

n char  const  *typename;n  /*  Noun/adjective  to  modify  "file"  */ 


n 

n 

>; 

char  const  *ext;n  /*  .zip,  .lha,  .gz,  etc.  */ 

int  c omp r e s s i b 1 e ; n /*  Can  it  be  further  compressed  (.tar)  */ 

# i f nd  e f 

TYPE. PGPFILETYPE 

ttdef  i ne 

TYPE. PGPFILETYPE  1 

t y pede  f 

#e n d i f 

struct  PgpFileType  PgpFileType; 

struct  PgpFileType  const  PGPExport  *pgpFileType  (byte  const  *prefix, 
n unsigned  len); 

int  PGPExport  pg p F i I eTy p eB i na r y (char  const  *lang,  byte  const  *buf, 
n unsigned  len); 

int  PGPExport  pgpFileTypePGP  (byte  const  *prefix,  unsigned  len); 


# i f d e f 

} 

# e nd i f 

..cplusplus 

#endif  /*  PGPFILETYPE.H  */ 
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/* 

* pgpSigPipe.c  — Create  a Signature  Verification  Pipeline 

* 

* Copyright  CO  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  <wa r L o r dSM I T . E D U> 

* 

* $Id:  pgpSi gPi pe . c,v  1.2. 2.1  1 997/06/07  09:51:42  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#end i f 

^include  <stdio.h> 


#include 
#incLude 
#i nc  Lude 
^include 


pgpSigPipe.h" 
pgpFIFO.h" 
pgpPrsAsc  . h" 
pgpVe  r i f yRa . h 


struct  PgpPipeLine 


pgpSignatureVerifyCreate 

(struct 

PgpPipeLine  **texthead. 

n 

n n 

struct 

PgpPipeLine  **sighead. 

a 

n n 

struct 

PgpEnv  const  *env. 

n 

n n 

struct 

PgpFifoOesc  const  *fd. 

n 

n n 

byte  const  *hashList,  unsigned 

n 

n n 

int  textmode. 

n 

r 

n n 

struct 

PgpUlCb  const  *ui,  void 

1 

n 

if  ( ! texthead 

1 1 

Isighead) 

n 

n return 

NULL; 

n 

if  ( !fd) 

fd  = &pg pBy t e F i f o D e s c ; 


hash  Len, 
*u i _a  rg ) 


n sighead  = pg pPa r s e As c C r e a t e (sighead,  env,  fd,  ui,  ui_arg); 

n i f C ! si ghead) 

n n returnNULL; 


n 

n 


} 


return 

a 


pgpVeri fyReaderC reate  (texthead, 
n n hashList, 


sighead, 

hashLen, 


env,  fd, 

textmode,  ui,  ui_arg); 
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/* 

* pgpSigPipe.h  --  Create  a Signature  Verification  Pipeline 

* 

* Copyright  CC)  1995-1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

★ 

* Written  by:n  Derek  Atkins  <warLord3MIT.EDU> 

* 

* This  is  a Public  API  Function  Header. 

* 

* $Id:  pgpSi gPi pe . h,v  1.4. 2.1  1997/06/07  09:51:42  mhw  Exp  $ 

*/ 

#ifndef  PGPSIGPIPE_H 
#define  PGPSIGPIPE_H 

^include  "pgpUsuals.h" 


#ifdef  __cpLusplus 
extern  "C"  { 

#endi f 

struct  PgpFifoDesc; 

#ifndef  T Y P E_ PG P F I F 0 D E S C 
#define  T Y P E_ PG P F I F 0 D E S C 1 
typedef  struct  PgpFifoDesc  PgpFifoDesc; 
#endi f 

struct  PgpPipeline; 

#ifndef  T Y P E_ PG P P I P E LI N E 
^define  TYPE_PGPPI PELI N E 1 
typedef  struct  PgpPipeline  PgpPipeline; 
#end  i f 


struct  PgpEnv; 

#ifndef  TYPE_PGPENV 
^define  TYPE_PGPENV  1 
typedef  struct  PgpEnv  PgpEnv; 
#endi f 


struct  PgpUICb; 

#ifndef  TYPE_PGPUICB 
#define  TYPE_PGPUICB  1 
typedef  struct  PgpUICb  PgpUICb; 
# en d i f 


struct  PgpPipeli 
pgpSi gnatureVeri 


□ a 
a a 
a a 
a a 
n n 
a a 
Q n 


**texthead, 

struct  PgpPipeline  **sighead, 
struct  PgpEnv  const  *env, 
struct  PgpFifoDesc  const  *fd, 
byte  const  *hashList, 
unsigned  hashlen,  int  textmode 
struct  PgpUICb  const  *ui, 
void  *ui_arg); 


ne  PGPExport  * 

fyCreate  (struct  PgpPipeline 

Q 


Q 

a 

n 

a 

n 

n 


#i  f def 

> 


cp I u s p L 


u s 


#e  nd i f 
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#endif  /*  PGPSIGPIPE  H */ 
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/* 

* pgpSigSpec.c  --  Signature  Specification 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Code  to  specify  a PGP  signature  and  signature  attributes 

* 

* Written  by:n  Derek  Atkins  <wa r L o r d an  I T . E DU> 

★ 

* $Id:  pgpSi gSpec . c, V 1.8. 2.1  1 997/06/07  09:51:42  mhw  Exp  $ 

*/ 

#ifdef  HAVE  CONFIG  H 


//i  nc  Lude 

" conf i g . h " 

// e nd i f 

//incLude 

<stdio.h> 

//i  nc  Lude 

<t i me  . h> 

# i n c L u d e 

<string.h> 

//incLude 

"pgpDebug.h" 

//i  nc  Lude 

"pgpHash.h" 

//incLude 

"pgpMem. h" 

//incLude 

"pgpEnv. h" 

# i n c L u d e 

"pgpErr.h" 

//incLude 

" pgpPubKey . h " 

//incLude 

"pgpTimeDate.h 

#incLude 

"pgpUsuaLs.h" 

nine Lude 

"pgpSigSpec.h" 

/*  Maximum  number  of  recovery  keys  */ 
//define  NR  4 

struct  PgpSigSpec  { 
n struct  PgpSigSpec  *next; 

n struct  PgpSecKey  *seckey; 

n PgpVersion  version; 

n byte  hashtype; 


n 

byte  extraC53;n  n 

□ 

/*  I know  t h i 

s is  5 bytes  now!  */ 

c 

/*  Next  two  are  onLy 

used 

on  key  seLf-sigs  */ 

n 

word32  key Exp i ra t i on ; 

n / * 

Timestamp  for  key 

to  expire  */ 

Q 

byte  p r e f A L g s C 2 0 3 ; n 

n 

/*  Preferred 

aLgorithms  */ 

n byte  havekrecovery[!NR3;nn  /*  True  if  krecovery  has  been  set  */ 

n byte  k r e c o ve r y C N R 3 C 2 2 3 ; nn  /*  Key  recovery  information  */ 

>; 

struct  PgpSigSpec  * 

pgpS i g Spe c C r ea t e (struct  PgpEnv  const  *env,  struct  PgpSecKey  *sec, 
n n by t e sigtype) 

{ 

n struct  PgpSigSpec  *ss; 

□ 

n if(!env||  !sec) 

n n returnNULL; 

n ss  = (struct  PgpSigSpec  * ) pgpMemA L L oc  (sizeof  (*ss)); 

H i f ( s s ) { 

n n / * 

[:CHK:6756363d92bb92cca6aa4b6c5bc700addcd906a171732282e655b33d9a148f1de33 
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n 

a 

* XXX  : 

n 

n 

★ 

a 

a 

*/ 

a 

a 

i n t t z F i 

a 

a 

i nt  hash 

a 

s 

PgpVersi 

with  pg p H a s h A L g U s e d F o r S i g na t u r e s (in  pgpKeyMan.c) 


n 
a 
n 
n 
□ 
n 
a 
□ 
n 
n 
o 
c 
n 
> 

return  ss, 


n n a n NULL); 

/*  Force  SHA-1  hash  with  DSA  */ 
if  (sec->pkALg  ==  PG P_PKA LG_ D S A ) 
n hash  = PG P_H A S H_ S H A ; 

memset  (ss,  0,  sizeof  (*ss)); 
ss->seckey  = sec; 

if  ( pgpS i g Spe c Se t Ha s h t y pe  (ss,  hash)  || 

pgpS i g Spe c Se t S i g t ype  (ss,  sigtype)  M 

pg p S i g S p e c S e t T i me s t amp  (ss,  pgpTimeStamp  (tzFix))  | | 
pgpSi gSpecSetVersi on  (ss,  version))  { 
n pgpMemFree  (ss); 

a ss  = NULL; 

> 


struct  PgpSigSpec  * 

pgpSi gSpecCopy  (struct  PgpSigSpec  const  *spec) 
{ 

a struct  PgpSigSpec  *ss; 


a 

1 f 

( ! spec ) 

n 

n 

return  NULL; 

a 

s s 

= (struct  PgpSigSpec 

n 

i f 

(ss)  { 

n 

n 

memcpy  (ss,  spec 

n 

n 

ss->next  = NULL; 

n 

> 

B 

return  ss; 

} 


* ) pg pHemA L L o c (sizeof  (*ss)); 
, sizeof  (*ss)); 


void 

pgpS i g Spec Dest roy  (struct  PgpSigSpec  *spec) 
C 


B 

Struct 

PgpSigSpec  *ss; 

B 

for  (ss 

= spec;  ss;  ss 

B 

B 

spec  = ss->next 

B 

B 

memset  ( ss,  0, 

B 

B 

pgpMemFree  (ss) 

B 

> 

spec)  f 
zeof  (*ss)); 


} 


/*  Lists...  Add  a spec  to  a list;  get  the  next  spec  from  the  List  */ 
i n t 

pgpSi gSpecAdd  (struct  PgpSigSpec  **List,  struct  PgpSigSpec  *spec) 

{ 


a if(!List) 

a a return  PGPERR_BADPARAM; 


:CCHK:11ee1b4fe8b6b30a4aab8663d688ecc78aecaff468ccfd804445362caa031efbd:: 
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n spec->next  = *List; 

n *list=spec; 

n returnO; 

} 


struct  PgpSigSpec  * 

pg p S i g S p e c N e X t (struct  PgpSigSpec  const  *List) 

{ 

a ifCIList) 

n n returnNULL; 

n return  List->next; 

} 

/* 

* Access  functions  and  Modifier  functions  follow  below 
*/ 

/*  The  SecKey  cannot  be  changed  */ 
struct  PgpSecKey  * 

pgpS i g Spe c S e c key  (struct  PgpSigSpec  const  *spec) 

{ 

a return  s pe c-> s e c key ; 

} 


/*  Set  and  get  the  hash  */ 
i n t 

pgpS i g Spec  Set  Ha s h type  (struct  PgpSigSpec  *spec,  byte  hashtype) 
{ 

n pgpAssert  (spec); 


n if  ( ! pg pH  a s h By N umbe r ( h a s h t y pe  ) ) 

n n return  PG P E R R_B A D_ H A S H N UM; 


a spec -> hashtype  = hashtype; 

n returnO; 

} 


struct  PgpHash  const  * 

pgpS i g Spe c Ha sh  (struct  PgpSigSpec  const  *spec) 

{ 

n return  pg p H a s h By N umb e r ( s pe c->h a s h t y pe ) ; 

> 


byte 

pgpSi gSpecHashtype  (struct  PgpSigSpec  const  *spec) 

{ 

a return  s pe c -> h a s h t y p e ; 

} 

/*  Set  and  get  the  version  */ 
i n t 

pgpS i g Spec Se tVe rs i on  (struct  PgpSigSpec  *spec,  PgpVersion  version) 

{ 

a pgpAssert  (spec); 

a s p e c-> ve r s i o n = version; 

a return0; 

C:CHK:61c2212ee88600deffbf61822c276773228511073daaa483aa13f911bcf860904]3 
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> 


PgpVersion 

pgpSi gSpecVersi on  (struct  PgpSigSpec 


{ 

n 


return  s p e c -> ve r s i on ; 


> 


const 


*spec ) 


/*  Set  the  sigtype  and  timestamp;  get  the  "extra"  bytes  which  result  */ 
i n t 

pg pS i g S pe c Se t S i g t y pe  (struct  PgpSigSpec  *spec,  byte  sigtype) 

{ 

n pgpAssert  (spec); 

n spec->ext ra COD  = sigtype; 

B return  0; 

> 


i n t 

pgpS i g Spe c Se t T i me s t amp  (struct  PgpSigSpec  *spec,  word32  timestamp) 
{ 

B pgpAssert  (spec); 


B spec->extraC1D 
B s pe c->e X t r a C 2 D 
B s pe c -> e X t r a C 3 D 
B s pe c-> e X t r a C 4 D 
B returnO; 


(byte)(timestamp>>24); 
(byte)(timestamp>>16); 
(byte) (timestamp>>8) ; 
(byte)timestamp; 


* The  timestamp  is  external  for  now  because 

* SigParams  structure  from  the  environment. 

* a part  of  the  PgpSigSpec  structure 


it  is  a part  of  the 
Everything  else  is 


byte  const  * 

pg p S i g S p e c Ex t r a (struct  PgpSigSpec  const  *spec,  unsigned  *extralen) 
{ 

B i f ( ext  ra  I en ) 

B B *extralen=5; 


B return  spec->extra; 

} 


/*  Access  functions  for  self-sig  related  signature  subpackets  */ 

/*  Returns  0 if  no  expiration  has  been  set  */ 
wo  r d3  2 

pgpS i gSpecKeyExpi rat i on  (struct  PgpSigSpec  const  *spec) 

{ 

B return  s pe c-> key E x p i r a t i o n ; 

} 

i n t 

pg p S i g S p e c S e t Ke y E xp i r a t i on  (struct  PgpSigSpec  *spec,  word32  keyExpire) 

{ 

CCCHK:bb61c2bb543daa1a228c1332e80a22bbc7cc9e3ff4111aaa6fbde0071637479d6DD 
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n s pe c -> key E X p i r a t i on  = keyExpire; 

a returnO; 

> 

/*  Returns  a pointer  to  a byte  of  0,  with  *prefLen  = 0 if  no  aLgs  set  */ 
byte  const  * 

pg pS  i g S pe c P r ef A L g s (struct  PgpSigSpec  const  *spec,  unsigned  *prefLen) 

{ 

n if  (prefLen)  { 


□ 

u 

unsigned  i; 

Q 

n 

for  (i=0;  i < s i z e 0 f ( s pe c ->p r e f A L g s ) ; 

□ 

n 

n if  ( spe c->p r ef A L g s C i 3 ==  0) 

Q 

n 

n H break; 

n 

n 

} 

n 

n 

*prefLen  = i; 

n 

> 

n 

return 

spec->prefALgs; 

> 

i n t 

pgpS i g Spe c Se t Pr ef A L g s (struct  PgpSigSpec  *spec,  byte  const  *aLgs,  size_t 
{ 

n pgpAssert  (ten  < sizeof(spec->prefALgs)); 

n pg p C opy Memo ry  (aLgs,  s pe c->p r e f A L g s , Len); 

n spec->pref ALgsC Len+1 ] = 0; 

a return0; 

} 


/*  Returns  NULL  if  no  recovery  key  has  been  set  */ 
byte  const  * 

pgpSi gSpecRecoveryKey  (struct  PgpSigSpec  const  *spec,  unsigned  *prefLen, 
o i n t n t h ) 


{ 

n 

Q 

n 

□ 

n 

D 

n 

n 

□ 

} 


if  (nth  >=  NR) 
n return  NULL; 

if  ( ! s pe c ->h a ve k r e c o ve r y C n t h D ) { 
a return  NULL; 

> 

if  (prefLen)  { 

n *prefLen  = sizeof(spec->krecoveryCnth]); 

> 

return  s pe c-> k r e c o ve ry C n t h ] ; 


i n t 

pg p S i g S pe c S e t Re c o ve r y Key  (struct  PgpSigSpec  *spec,  byte  *krinfo,  size_t 
n intnth) 

{ 

n if(nth>=NR) 

n n return  PG P E R R_G E N E R I C ; 

a pgpAssert  (Len  ==  s i z e o f ( s pe c-> k r e c o v e r y C n t h D ) ) ; 

a pgpCopyMemory  (krinfo,  s pe c-> k r e c o ve ry C n t h 3 , Len); 

n s pe c->h a ve k r e c o ve r y C n t h 3 = 1; 

n return0; 

> 


[CCHK:f78821f5 8785431 d544768ac6addc639b45570d387bb36d4f5e106c4af4d6a3 3 
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/* 

* pgpSigSpec.h  --  Signature  Specification;  specify  the  attributes  of  a 

* signature  or  list  of  signatures 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  By:n  Derek  Atkins  <wa  r L o r dolH  I T . E D U> 

★ 

* $Id:  pgpSi gSpec . h, V 1.8. 2.1  1997/06/07  09:51:42  mhw  Exp  $ 

*/ 

#ifndef  PGPSIGSPEC.H 
^define  PGPSIGSPEC.H 

/* 

* Signature  type  values 
*/ 


#d  e f i ne 

PGP. 

SIGTYPE. 

BINARYn 

n 

0 

#d  e f i ne 

PGP. 

SIGTYPE. 

TEXTn 

n 

1 

#def i ne 

PGP. 

SIGTYPE. 

KEY. 

GENERICnn 

0x10 

#def i ne 

PGP. 

SIGTYPE. 

KEY. 

PERSONAnn 

0x11 

#def i ne 

PGP. 

SIGTYPE. 

KEY. 

CASUALn 

n 

0x12 

#def i ne 

PGP. 

SIGTYPE. 

KEY. 

POSITIVEn 

0x13 

//define 

PGP. 

SIGTYPE. 

KEY. 

SUBKEYn 

n 

0x18 

//define 

PGP. 

SIGTYPE. 

KEY. 

COMPROHISEn 

0x20 

//define 

PGP. 

SIGTYPE. 

KEY. 

SUBKEY. 

REVOKE 

0x28 

//define 

PGP. 

SIGTYPE. 

KEY. 

UID.REVOKEn 

0x30 

//define 

PGP. 

SIGTYPE. 

NOTARYn 

n 

0x40 

/* 

* A signature  with  this  bit  set  is  considered  "extended"  and  allows  us  to 

* parse  "extra"  information  > 5 bytes  without  fear  of  being  bitten  by  the 

* PGP  2.x  aliasing  problem. 

*/ 

^define  PG P.S I GT Y P E F _ EXT EN D E Dn  n 0x80 

^include  "pgpUsuals.h" 

#ifdef  cpLusplus 

extern  "C"  { 

#endi f 

struct  PgpEnv ; 

#ifndef  TYPE. PGPENV 

#define  TYPE.PGPENV  1 

typedef  struct  PgpEnv  PgpEnv; 

#endi  f 

struct  PgpSigSpec; 

#ifndef  T YPE.PG PS  I G S PE C 

^define  T YPE.PG PS  I G S P E C 1 

typedef  struct  PgpSigSpec  PgpSigSpec; 

# e nd i f 

struct  PgpSecKey; 

#ifndef  TYPE.PGPS ECKEY 

^define  TYPE.PGPS ECKEY  1 

typedef  struct  PgpSecKey  PgpSecKey; 

#end  i f 

CCCHK:6dc6200cf88900c3f6ce9db31bf9273c1ff66e0006535ffbae9ee39be0b586b66:: 
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1* 

* Create  and 

Dest  roy  a 

signature 

* are 

passed 

into  this 

function. 

* the 

*/ 

Pg  p E n V . 

struct 

PgpSigSpec  PGPExport  *pgpS 

n struct  PgpSecKey  *seckey,  byte  sigtype); 

struct  PgpSigSpec  PGPExport  * pg p S i g S pe c C o py  (struct  PgpSigSpec  const  *spec); 
void  PGPExport  pgpSigSpecDestroy  (struct  PgpSigSpec  *spec); 


/*  Deal  with  Lists  of  signature  specifications  */ 
int  PGPExport  pg p S i g S pe c Ad d (struct  PgpSigSpec  **List, 
a struct  PgpSigSpec  *spec); 

struct  PgpSigSpec  PGPExport  *pgpSigSpecNext  (struct  PgpSigSpec  const  *List); 


/*  Access  functions  for  sigspec  parameters  */ 

PgpVersion  PGPExport  pgpSigSpecVersion  (struct  PgpSigSpec  const  *spec); 
struct  PgpSecKey  PGPExport  *p g p S i g S p e c S e c key  (struct  PgpSigSpec  const  *spec); 
struct  PgpHash  const  PGPExport  * pg p S i g S p e c H a s h ( 
n struct  PgpSigSpec  const  *spec); 

byte  PGPExport  pgpSigSpecHashtype  (struct  PgpSigSpec  const  *spec); 
byte  const  PGPExport  *pg p S i g S pe c E x t r a (struct  PgpSigSpec  const  *spec, 
unsigned  *extraLen); 

/*  Modification  functions  for  sigspec  parameters  */ 

int  PGPExport  pgpSigSpecSetHashtype  (struct  PgpSigSpec  *spec,  byte  hashtype); 
int  PGPExport  pg p S i g S p e c S e t S i g t y p e (struct  PgpSigSpec  *spec,  byte  sigtype); 
int  PGPExport  pg p S i g S p e c S e t T i me s t a mp  (struct  PgpSigSpec  *spec, 
a uord32  timestamp); 

int  PGPExport  pg p S i g S p e c S e t V e r s i o n (struct  PgpSigSpec  *spec, 
n PgpVersion  version); 

/*  Access  functions  for  seLf-sig  subpackets  */ 
word32  PGPExport 

pgpS i g Spe cKey Exp i ra t i on  (struct  PgpSigSpec  const  *spec); 
int  PGPExport 

pgpSigSpecSetKeyExpiration  (struct  PgpSigSpec  *spec,  word32  keyExpire); 
byte  const  PGPExport  * 

pgpSigSpecPrefALgs  (struct  PgpSigSpec  const  *spec,  unsigned  *prefLen); 
int  PGPExport 

pgpS i g Spe c S e t P re f A L g s (struct  PgpSigSpec  *spec,  byte  const  *aLgs,  si2e_t  Len); 
byte  const  PGPExport  * 

pgpS i g Spe c Re  cove ryKey  (struct  PgpSigSpec  const  *spec,  unsigned  *prefLen, 
n intnth); 

int  PGPExport 

pgpS i g Spe c S et Re  cove ryKey  (struct  PgpSigSpec  *spec,  byte  *krinfo,  size_t  Len, 
n intnth); 


#ifdef  __cpLuspLus 
} 

Send i f 

Sendif  /*  PGPSIGSPEC.H  */ 


C:CHK:0c9c55ff577812aa3142d184425e0fe662f141399e0b96eeee6dddbea15dd6D: 
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Makefile. in 


n 

U L i b / s i mp L e /Ma kef i L e . i n 
# 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc. 

U 

tt  $Id;  Ma  ke  f i L e . i n , V 1.1. 2. 2 1 997/06/07  09:51:43  mhw 

# 

OB J S=spgpABuf . o spgpExtK.o  spgpSFiLe.o  s pg pd e c r y p t . o 
n spgpAFiLe.o  spgpNKey.o  spgpVBuf.o  spgpinit.o 

n spgpAddK.o  spgpRBuf.o  spgpVFiLe.o  spgpkcheck 

n spgpChkR.o  spgpRFiLe.o  spgpbuf.o  s pg pn a me i d 8 

□ spgpRNG.o  s pg p c a L I ba c k . o spgprec L i st . o spgpE 

Q s pg pd e a r mo r . o spgpring.o 

SHAREDHDRS=  spgp.h 

INSTALLLIBS=  $(SIMPLE) 

LIBTARGET=$(SIHPLE) 

LIBTDEPS=DONE 

all::  $(SIHPLE) 

ve  ry-c  lean: : 

n $(RM)  ../SCSIMPLE)  SCSIMPLE)  Makefile 


[CCHK:315306bb25600b553bcc3315254f21dD: 
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spgpsigner.o  \ 
spgptext.c  \ 
o test . o \ 
o spgpEBuf.o  \ 
i I e . o spgpSBuf . o \ 
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/* 

* spgp.h  — Simple  PGP  API 

* 

* NOTICE: 

* THE  API  DESCRIBED  HERE  WAS  DESIGNED  BY  VIACRYPT,  INC.  AND  IS  NOT 

* INTENDED  TO  BE  SUPPORTED  BY  PGP,  INC.  BEYOND  THE  CURRENT  VERSION. 

* IT  WAS  USED  AS  AN  INTERIM  MEASURE  FOR  THE  CURRENT  RELEASE  ONLY. 

* 

* STAY  TUNED  FOR  A NEW,  IMPROVED  ENCRYPTION  API  IN  THE  NEXT  RELEASE. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  spgp.h, V 1.24.2.3  1997/06/07  09:51:45  mhw  Exp  $ 

*/ 


#ifndef  SPGP_H 
^define  SPGP_H 

/*  Standard  includes  needed  by  PGP  */ 

//^include  <stdio.h> 

/*  PGP  library  */ 

#if  HAVE_CONFIG_H 
^include  " con-fig. h" 

# e n d i f 


#if  PRAGMA_IMPORT_SUPPORTED 
#pragma  import  on 
#end  i f 


ffinclude 

//include 

//include 

//include 

//include 


pgpUsuals.h" 
pgpFi  leRef.h" 
pgpFi  leMod.h" 
pgpT ext  F i 1 1 . h 
pgpEncPipe.h" 


/* 

* Defines 
*/ 


/*  Line  ending  types  */ 

typedef  enum  PGPLi neEndType_ 

{ 

n kPGPLi neEndLFn  = PG P_T EXT F I LT_ L F , 
n kPGPLi neEndCRn  = PG P_T EXT F I LT_C R, 

n kPGPLi neEndCRLFn=  ( kPG P Li ne E nd L F | kPG P L i n e En d C R ) 

> PG P L i n e E ndTy pe ; 

typedef  PGPFileReadCallBack  SPGPProgressCallBack; 

/* 

* Return  codes 
*/ 

/*  Kernel  return  codes  */ 

[:CCHK:6474e636192bf22644dd88329bbe5118015ee10aaaee46d4d22881711d281e706:] 
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//def  i ne 

KERNEL. 

EXIT.OKn  n n 

n 

n 

0 

#def i ne 

KERNEL. 

EXIT.OK.NOSIGn 

n 

1 

//d e f i n e 

KERNEL. 

FILE. NOT. FOUND. 

ERRORnn 

2 

#def i ne 

KERNEL. 

UNKNOWN. FILE. ERRORn 

n 

3 

//define 

KERNEL. 

NO.BATCHnn  n 

□ 

a 

4 

//define 

KERNEL. 

BAD. ARG. ERRORn 

n 

n 

5 

//def  i ne 

KERNEL. 

INTERRUPTn  n 

n 

a 

6 

//def  i ne 

KERNEL. 

OUT.OF.HEHn  n 

n 

n 

7 

//def  i ne 

KERNEL. 

INVALID. FILE. OP 

.ERRORn 

8 

/ * Ke  y r i 

ng  errors:  Base  value 

= 10  * 

/ 

//define 

KERNEL. 

KEYGEN. ERRORnn 

Q 

□ 

10 

//d e f i n e 

KERNEL. 

NONEXIST. KEY. ERRORn 

s 

1 1 

//define 

KERNEL. 

KEYRING. ADD. ERRORn 

□ 

1 2 

#d  e f i n e 

KERNEL. 

KEYRING. EXTRACT 

.ERRORn 

1 3 

//def  i ne 

KERNEL. 

KEYRING.EDIT. ERRORn 

a 

14 

# d e f i n e 

KERNEL. 

KEYRING. VIEW. ERRORn 

a 

1 5 

//def  i ne 

KERNEL. 

KEYRING.REHOVE. 

ERRORnn 

1 6 

//def  i ne 

KERNEL. 

KEYRING. CHECK. ERRORn 

n 

1 7 

//def  i ne 

KERNEL. 

KEY. SIGNATURE. ERRORn 

n 

1 8 

//def  i ne 

KERNEL. 

KEYSIG. REHOVE. ERRORn 

n 

1 9 

/*  Encode  errors:  Base  value  = 

20  */ 

//define 

KERNEL. 

SIGNATURE. ERRORn  n 

n 

20 

//define 

KERNEL. 

RSA.ENCR. ERRORn 

n 

D 

21 

//define 

KERNEL. 

ENCR. ERRORn  n 

a 

n 

22 

#def i ne 

KERNEL. 

COHPRESS. ERRORn 

a 

□ 

23 

/*  Decode  errors:  Base  value  = 

30  */ 

# d e f i n e 

KERNEL. 

SIGNATURE. CHECK 

.ERRORn 

30 

//def  i ne 

KERNEL. 

RSA.DECR.ERRORn 

D 

□ 

31 

#def  i ne 

KERNEL. 

DECR. ERRORn  n 

n 

a 

32 

#define  KERNEL  D E C OMPR E S S_ E R RO Rnn 


33 


/*  Things  missing  from  the  full  SPGP  spec  */ 
#define  S I H P LE PG P_U N I HPLEH ENT E Dnn  n 50 

/*  Unseeded  RNG  */ 

^define  S I M P LE PG P_ RNG NOT S E E D E Dn  n n 51 

/*  Incorrect  secret  key  passphrase  */ 

^define  S I H P LE PG P_B A D KE YP A S S P H R A S En  n 52 


/*  Incorrect  conventional  key  passphrase  */ 
^define  S I M P LE PG P_B A D CON VENT  I ON A LP A S S PH R A S E 53 

/*  The  keyring  is  currently  open  for  writing  */ 
#define  S I HP L E PG P_KE Y R I NG W R I T E LOC KE Dn  54 


/*  Insufficient  access  to  open  keyrings  */ 
#define  S I HP L E PG P_KE Y RI NG PE RM I S S I ON S n 55 

/*  No  PGP  data  in  input  buffer  */ 

//define  S I H P L E PG  P_N0PG  P D AT  Ann  n n 56 


/*  Wrong  keys  or  key  types  */ 

^define  S I HP LE PG P_N0N EX  I ST E NTR E C I P I E NTKE Yn  60 

C:CHK:dafeb1c6b2220521c0b1c77eb37ffbdf6bbcaa5223bb7446aa11142289877c73a]: 
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#define  S I MPLE PG P_N ON E X I S T E NT S I G N E R KE Yn  n 61 
#define  S I H P LE PG P_NON E X I ST  ENT D E C R Y PT I ON KE Yn  62 
^define  S I MPLE PG P_ NO N E X I ST E NT E XT R A CT I ONKE Yn  63 
#define  SIMPLEPGP_RECIPIENTKEYSIGNATURE0NLYn64 
^define  SIHPLEPGP  S I GN E R KE Y E N C R Y PT I 0 NON L Yn  65 


/*  Detached  sigs  found  or  not  found  when  we  didn't  wantem  */ 
#define  SIMPLEPGP_DETACHEDSIGNATUREN0TF0UNDn66 
#define  SIHPLEPGP_DETACHEDSIGNATUREFOUNDn  67 

/*  Problems  reading  keyrings  */ 

^define  S I M P L E PG P_ E R RO R R E A D I N G PU B R I N Gn  n 68 
^define  S I H P LE PG P_ E R ROR R E A D I N G S E C R I N Gn  n 69 

/*  Recipients  could  not  agree  on  an  encryption  algorithm  */ 
#define  S I MPLE PG P_ I N C 0 N S I ST E NT R E C I P I ENTS ETn  70 


/*  PGP-detected  problems  */ 


n 

s 

s 

fl 

B 

/* 

Unexpected  conditions  found  */ 

Q 

s 

n 

B 

B 

/* 

(Use  this  code  if  no  other  code  */ 

n 

n 

Q 

B 

B 

/* 

fits,  and  the  conditions  seem  so  */ 

n 

Q 

D 

B 

B 

/* 

wildly  unlikely  as  to  not  need  */ 

n 

n 

n 

B 

B 

/* 

a unique  exit  code  - */ 

s 

□ 

o 

B 

B 

/* 

expect  the  unexpected.)  */ 

#def i ne 

KERNEL_ 

EXIT 

.UNEXPECTEDn  n 80 

n 

n 

D 

B 

fl 

/* 

Evaluation  copy  of  executable  */ 

n 

n 

n 

B 

B 

/* 

expire  date  has  passed.  */ 

#def i ne 

KERNEL. 

EXIT 

.EXPIREDnn  81 

n 

n 

n 

B 

B 

/* 

-r  pgpoutfile  */ 

n 

Q 

B 

B 

B 

/* 

syntax  or  cannot  open  */ 

#def i ne 

KERNEL. 

EXIT 

_STDOUT.FAILn82 

n 

n 

B 

B 

B 

/* 

acmdfile  or  -a  cmdfile  */ 

Q 

n 

B 

B 

fl 

/* 

syntax  or  cannot  open  */ 

#define  KERNEL  EXIT  CMDFILE  OPENn  83 


fl  B 

fl 

B 

fl 

/* 

acmdfile  mem  alloc  failure  */ 

B fl 

fl 

B 

B 

/* 

arg  list  too  big  */ 

fl  B 

B 

B 

B 

/* 

avail  mem  too  small  */ 

fl  fl 

fl 

B 

B 

/* 

or  Ctrl  value  problem  */ 

#def i ne 

KERNEL. 

EXIT 

.CMDFILE. HEHn84 

fl  fl 

fl 

fl 

B 

/* 

acmdfile  unrecognized  directive  */ 

#def i ne 

KERNEL. 

EXIT 

.CMDFILE. UNRECn  85 

B B 

fl 

fl 

B 

/* 

OK  exit  status,  non-zero  value  */ 

B B 

fl 

B 

B 

/* 

used  with  se t j mp ( ) / 1 ong j mp ( ) */ 

fl  fl 

B 

fl 

B 

/* 

to  resume  pgp.cmd. 1 n ( ) /ma i n ( ) */ 

#de  f i ne 

KERNEL. 

EXIT 

_0K. 

NZn  n 86 

fl  B 

B 

B 

B 

/* 

Problem  with  kbhitC)  */ 

B B 

fl 

B 

B 

/* 

simulation  - raw  terminal  10  */ 

#def i ne 

KERNEL. 

EXIT 

.TERM.IOnn  87 

B B 

B 

fl 

fl 

/* 

Attempt  to  create  session  with  */ 

B fl 

B 

B 

fl 

/* 

cryptographic  engine  - failed  */ 

#def i ne 

KERNEL. 

NO. CRYPT 

ENGINEq  n 88 

^define  KE RN E L_V E R S I ON_M I S M AT C H nn  90 
^define  KE RN E L_C AN C E L_ON_BU S Yn  n 91 

^define  KE RN E L_ E X I T_C 0 D E_N0T_ W R I TT E Nn  100 
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/*  keyset  return  codes  */ 

#define  KEYSEL_0K  n 0 

#define  KE Y S E L_ LO C KE D n 201 

#define  KE Y S E L_B A D KE Y R I N GT Y P E 202 
//define  KE  Y S E L_B  A D KE  YT  Y P E 203 

#define  KEYSEL  NOKE Y R I N G N AM E 204 


/*  The  KeyRingType  argument  is  invalid  */ 


#d  e f i n e 

KEYSEL_ 

USERABORT 

205 

#def i ne 

KEYSEL_ 

NOPGPPATH 

206 

/* 

No  PGPPATH  env 

variable  set  */ 

#def  i ne 

KEYSEL_ 

OPENFAILED 

207 

/* 

fopen  of  keyring  failed  */ 

//def  i ne 

KEYSEL_ 

EOF 

208 

/* 

End-Of-File  in 

keyring  encountered 

*/ 

//def  i ne 

KEYSEL_ 

BADCTBLENOFLEN 

209 

/* 

Unexpected  CTB 

1 eng t h-of- 1 eng t h code 

□ □ 

D □ 

Q Q n 

n 

/*i  n 

ringfile.  Possible  keyring  corruption 

//def  i ne 

KEYSEL_ 

READFAILURE 

210 

/* 

fread  of  ringf 

ile  failed  unexpectedly 

# d e f i n e 

KEYSEL_ 

BADUIDLEN 

211 

/* 

User  ID  longer 

than  255  (bad!)  */ 

#def  i ne 

KEYSEL_ 

UIDTOOLONG 

212 

/* 

the  length  of 

the  userid  is  longer 

*/ 

□ □ 

n a 

□ n n 

n 

/* 

than  the  size 

of  the  userid  element 

*/ 

Q □ 

a a 

n n □ 

n 

/* 

of  the  pgpkey 

struct.  */ 

#def i ne 

KEYSEL_ 

BADCREATIONDATE 

213 

/* 

Creation  date 

in  key  is  0 */ 

//define 

KEYSEL_ 

UNKNOWNUID 

214 

//define 

KEYSEL_ 

NOMEMORY 

215 

/* 

mattoc  failed  */ 

#def i ne 

KEYSEL_ 

BADPKT 

216 

/* 

unexpected  for  ma 

Iformed  packet  found 

*/ 

#d  e f i ne 

KEYSEL_ 

BADPOINTER 

217 

/* 

one 

of  the  pointer  args  is  invalid  */ 

*/ 


//define  KE  Y S E L_U  S E I D E AON  L Y 218 
//define  KE  Y S E L_C  AN  C E L_ON_BU  S Y 219 

//define  KE  Y S E L_U  N KN  0 WN  225 

/*  Function  return  status  codes  */ 


//def  i ne 
//def  i ne 
//def  i ne 
//def  i ne 
#def i ne 
//def  i ne 
//define 
//define 
#def i ne 
//def  i ne 
//def  i ne 
//def  i ne 
//def  i ne 
//def  i ne 
//d  e f i n e 


SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 

SIMPLEPGPKEYSEL 


KEYLIBOKn  nnnnnnnnn0 
.USEI DEAONLYnn  nnnnnnnn  301 

.CANCELn  nnnnnnnnnn  302 

.NULLCAPTIONSTRINGPOINTERn  n n n n n 303 

.EMPTYCAPTIONSTRINGn  a a a a a n a 304 

.KEYRINGTYPENOTPUBLICORSECRETn  n n n n 305 

.NULLPOINTERTOSELECTEDLISTn  n n n n n 306 

.SELECTEDLISTLENGTHTOOSMALLn  n n n n n 307 

.NULLPOINTERTOSELECTEDLISTCOUNTn  n n n n 308 

.BADINCLUDEWHATVALUEnn  n n n n n n 309 

.NULLPOINTERTOUIDKIDSEARCHSTRINGnn  a a a 310 

.BADKEYTYPEBITMAPn  n n n n n n n 311 

.BADDISPLAYTYPEBITHAPn  n n n ts  n n 312 

.BADSHAREDBUTTONIDBITMAPnn  n n n n n 313 

KEYRINGFILENOTFOUNDnn  n n n n n n 314 


//define  S I M P LE  PG  P E N C R Y PT  F I LE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
#define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
#define  SIMPLEPGPENCRYPTFILE. 
//define  SIMPLEPGPENCRYPTFILE. 
#define  SIMPLEPGPENCRYPTFILE. 


OKnn  nnnnnnnnn0 
NULLPOINTERTOINPUTFILENAMEnn  n a a 401 

EMPTYINPUTFILENAMESTRINGn  n n n n 402 

INPUTFILEDOESNOTEXISTn  n n n n n 403 

NULLPOINTERTOOUTPUTFILENAMEn  n n n 404 

EMPTYOUTPUTFILENAMESTRINGn  n n n n 405 

NULLPOINTERTORECIPIENTLISTnn  n n n 406 

EMPTYRECIPIENTLISTSTRINGn  n n n n 407 

RECIPIENTLISTDOESNOTENDWITHNEWLINEnn  n 408 

RECIPIENTLISTDOESNOTSTARTWITHGOODCODECHARn  409 
NULLPOINTERTOSIGNERKEYIDSTRINGnn  n n 410 

NULLPOINTERTOSIGNERPASSPHRASESTRINGn  n 411 

NULLPOINTERTOIDEAPASSPHRASESTRINGn  n n 412 
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#define  S I H P LE PG P E N C R YPT F I L E. 
//define  S I HP  LE  PG  P E N C R Y PT  F I LE. 
//define  S I H P LE  PG  P E N C R Y PT  F I LE. 
#define  S I H P LE PG P E N C R Y PT F I LE. 
//define  S I H P LE  PG  P E N C R YPT  F 1 LE. 
//define  S I HP  LE  PG  P E N C R Y PT  F I LE. 
//define  S I HP  L E PG  P E N C R Y PT  F I LE. 
#define  S I H P LE PG P E N C R Y PT F I LE. 
//define  S I HPLE  PGPENC  R YPT  F I LE. 
//define  S I HP  LE  PG  P E N C R Y PT  F I LE 


NOTENOUGHHEHORYFORINPUTSTRUCTUREn  n n 413 
NOTENOUGHHEHORYFOROUTPUTSTRUCTUREb  n n 414 
KEYSELCANCELn  n n n n n n n 415 
SIGNERPWDBUFFERTOOSHALLb  n n n n 416 
IDEAPWDBUFFERTOOSHALLn  n n n n n 417 
CANNOTUSEUNTRUSTEDKEYb  n n n n n 418 
ENCRYPTNOTSIGN_FUNCTIONNOTENABLEDn  n n 419 
ENCRYPTANDSIGN_FUNCTIONNOTENABLEDn  n n 420 
CANNOTUSEUNCERTI FIEDKEYb  a n n n 421 
OUTPUTFILECREATIONERRORn  anna  431 


^define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST. 
#define  SIHPLEPGPREADRECIPIENTLIST. 
//define  SIHPLEPGPREADRECIPIENTLIST 


OKn  aaenaana 
NULLPOINTEROREHPTYLISTn  a a a 

LISTDOESNOTSTARTWITHGOODCODECHARna 
AUSERIDSTRINGISTOOLONGb  a a a 

OUTOFHEHORYFORUSERIDLISTaa  a 
AKEYIDSTRINGISTOOLONGn  a a 

OUTOFHEHORYFORKEYIDLISTa  a a 

LISTDOESNOTENDWITHNEWLINEn  a 
CANNOTUSEUNTRUSTEDKEYa  a a 


0 

501 

502 

503 

504 

505 

506 

507 

508 


//define  S I HPLE  PG  P E N C R YPTBU  F F E R. 
//define  S I HPLEPG  PE  N C R YPTBU  F F ER. 
#define  S I H P LE PG P E N C R Y PTBU F F E R. 
//define  S I HPLEPG  PEN  C R YPTBU  F F ER. 
//define  S I H P LE  PG  PE  N C R Y PTBU  F F E R. 
//define  S I H P LE  PG  P E N C R Y PTBU  F F E R. 
//define  SIHPLEPGPENCRYPTBUFFER. 
aaaaaaaa 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
^define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
#define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER. 
//define  SIHPLEPGPENCRYPTBUFFER 


NULLPOINTERTOINPUTBUFFERBa  a a a 601 
INPUTBUFFERLENGTHISZEROb  a a a a 602 
NULLPOINTERTOOUTPUTBUFFERb  a a a 603 
NULLPOINTERTORECIPIENTLISTa  ana  604 
EHPTYRECIPIENTLISTSTRINGBn  nan  605 
RECIPIENTLISTDOESNOTENDUITHNEWLINEb  a 606 
RECIPIENTLISTDOESNOTSTARTWITHGOODCODECHAR  \ 


nnnnannan 
NULLPOINTERTOSIGNERKEYIDSTRINGb  a 
NULLPOINTERTOSIGNERPASSPHRASESTRINGb 
NULLPOINTERTOIDEAPASSPHRASESTRINGb 
NOTENOUGHHEHORYFORINPUTSTRUCTUREbh 
NOTENOUGHHEHORYFOROUTPUTSTRUCTUREb 
KEYSELCANCELBn  anna 
SIGNERPWDBUFFERTOOSHALLb  a a 

IDEAPUDBUFFERTOOSHALLb  a a 

OUTPUTBUFFERTOOSHALLbb  a a 

CANNOTUSEUNTRUSTEDKEYb  a a 

ENCRYPTNOTSIGN_FUNCTIONNOTENABLEDb 
ENCRYPTANDSIGN_FUNCTIONNOTENABLEDb 
CANNOTUSEUNCERTI FIEDKEYb  nan 
16BITINPUTBUFFERLENGTHGTR65500B  a 
16BITOUTPUTBUFFERLENGTHGTR65500B  a 


607 

608 

609 

610 
61  1 
61  2 

613 

614 
61  5 
616 

617 

618 

619 

620 
621 
622 


//define  S I H PLE  PG  PS  I G N F I LE. 
#define  S I H P LE PG PS  I G N F I LE. 
//define  S I H P LE  PG  P S I G N F I LE. 
//define  S I H P LE  PG  PS  I G N F I LE. 
//define  S I H P LE  PG  P S I G N F I LE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE. 
//define  SIHPLEPGPSIGNFILE 


NULLPOINTERTOINPUTFILENAHEb  a a 
EHPTYINPUTFILENAHESTRINGb  nan 
INPUTFILEDOESNOTEXISTnn  nan 
NULLPOINTERTOOUTPUTFILENAHEb  a a 
EHPTYOUTPUTFILENAHESTRINGbb  a a 
NULLPOINTERTOSIGNERKEYIDSTRINGb  a 
NULLPOINTERTOSIGNERPASSPHRASESTRINGb 
NOTENOUGHHEHORYFORINPUTSTRUCTUREb  a 
NOTENOUGHHEHORYFOROUTPUTSTRUCTUREbb 
KEYSELCANCELb  a a a a a a 
SIGNERPWDBUFFERTOOSHALLb  nan 
FUNCTIONNOTENABLEDb  anna 
CANNOTUSEUNCERTI FIEDKEYb  nan 


701 

702 

703 

704 

705 

706 

707 

708 

709 

710 
71  1 
71  2 
713 


C:CHK:9c410852d33ec0be07688799e261cef6772cb81a915ee5e03abcc43bdce7271f4:D 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1721 


spgp.h 


/(define  S I MPLE  PG  PS  I GN  F I LE  0 UT  PUT  F I L E C R E AT  I ON  E R RO  Rn 


731 


//define  S I MPLE  PG  P S I G N BU  F F E R. 
//define  S I H P LE  PG  PS  I G NBU  F F E R. 
#define  S I H P LE PG PS  I G NBU F F E R. 
Sdefine  S I M P LE PG PS  I G NBU F F E R. 
#define  S I HPLEPGPS I GNBU F F ER. 
#define  S I M P L E PG PS  I G NBU F F E R. 
Sdefine  S I M P L E PG P S I G NBU F F E R. 
#define  S I MP LE PG P S I G NBU F F E R. 
//define  S I MPLE  PG  PS  I GNBU  F F E R. 
//define  S I M PLE  PG  P S I G N BU  F F E R. 
//define  S I M P LE  PG  PS  I GN  BU  F F E R. 
//define  S I M P LE  PG  PS  I GN  BU  F F E R. 
//define  S I MPLEPGPS  I GNBU  F F ER. 
//define  S I M P LE  PG  PS  I GNBU  F F E R. 


NULLPOINTERTOINPUTBUFFERn  n n n n 801 
INPUTBUFFERLENGTHISZEROnn  n n n n 802 
NULLPOINTERTOOUTPUTBUFFERn  n n n n 803 
NULLPOINTERTOSIGHERKEYIDSTRINGn  n n n 804 
NULLPOINTERTOSIGNERPASSPHRASESTRINGnn  n 805 
NOTENOUGHMEMORYFORINPUTSTRUCTUREn  n n 806 
NOTENOUGHMEMORYFOROUTPUTSTRUCTUREn  a n 807 
KEYSELCANCELn  n n n n n n n 808 
SIGNERPWDBUFFERTOOSMALLnn  n n n n 809 
OUTPUTBUFFERTOOSMALLn  n n n n n 810 
FUNCTIONNOTENABLEDn  n n n n n n 811 
CANNOTUSEUNCERTI FIEDKEYnn  n n n n 812 
16BITINPUTBUFFERLENGTHGTR65500n  n n n 813 
16BITOUTPUTBUFFERLENGTHGTR65500nn  n n 814 


#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOINPUTDATAFILENAME  \ 
nnnnnnnnnnnnnnnnnn  901 
#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_EMPTYINPUTDATAFILENAMESTRING  \ 
nnnnnnnnnnnnnnnnnn  902 
//define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_INPUTDATAFILEDOESNOTEXIST  903 
//define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOINPUTSIG FILENAME  \ 
nnnnnnnnnnnnnnnnnn  904 
//define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_EMPTYINPUTSIGFILENAMESTRING  \ 
nnnnnnnnnnnnnnnnnn  905 
//define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_INPUTSIGFILEDOESNOTEXISTn  906 
//define  SIHPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOSIGNATURESTATUS  \ 
nnnnnnnnnnnnnnnnnn  907 
#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOSIGNERSTRING  908 
#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_SIGNERBUFLENGTHTOOSMALLn  909 
//define  S I MP  LE  PG  P V E R I F Y D ET  A C H E 0 S I G N AT  U R E F I L E_N  U LLPO  I NT  E RTO  S I G N D AT  En  n 910 
#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE.SIGNDATEBUFLENGTHTOOSHALL  911 
//define  \ 

SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHHEMORYFORINPUTDATASTRUCTURE  \ 
nnnnnnnnnnnnnnnnnn  912 
//def  i ne  \ 

SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHHEMORYFORINPUTSIGSTRUCTURE  \ 
nnnnnnnnnnnnnnnnnn  913 
//define  S I M P LE  PG  P V E R I F Y D ET  A C H E D S I GN  ATU  R E F I LE_  F U N CT I 0 N NOT  E N AB  LE  Dnn  n 914 
#define  S I MPLEPGPVERI F Y D ET AC H E DS I GN ATURE F I LE  C AN N OTU S E U N C E RT I F I E D KE Y 915 


//define 
n n 
//define 
n n 
//define 
n n 
//define 
n n 
//define 
n n 
//define 
n n 
//define 
//define 
//define 
n n 


SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER 

nnnnnnnnnn 


NULLPOINTERTOINPUTDATABUFFER  \ 
n n n n n n 1001 

INPUTDATABUFFERLENGTHISZERO  \ 
n n n n n n 1002 

NULLPOINTERTOINPUTSIGBUFFER  \ 
n n n n n n 1003 

INPUTSIGBUFFERLENGTHISZERO  \ 
n n n n n n 1004 

NULLPOINTERTOSIGNATURESTATUS  \ 
n n n n n n 1 005 

NULLPOINTERTOSIGNERSTRING  \ 
n n n n n n 1006 

SIGNERBUFLENGTHTOOSMALL  1007 
NULLPOINTERTOSIGNDATEn  1008 
SIGNDATEBUFLENGTHTOOSHALL  \ 
n n n n n n 1009 
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#def i ne  \ 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER  NOTENOUGHHEMORYFORINPUTDATASTRUCTURE  \ 


□ n 
#def i ne 


1010 


SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NOTENOUGHHEHORYFORINPUTSIGSTRUCTURE  \ 
nnnnnnnnnnnnnnnnnn  1011 
#define  S I HPLEPGPV E R I F Y D ET AC H E D S I G N ATU R EBU F F E R_ F U N C T 1 0 NNOT E N AB L E Du  n 1012 
#define  SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_CANNOTUSEUNCERTIFIEDKEYn  1013 
#d  e f i n e \ 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_16BITINPUTDATABUFFERLENGTHGTR65500  \ 
nnnnnnnnnnnnnnnnnn  1014 
#def i ne  \ 

SIHPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_16BITINPUTSIGBUFFERLENGTHGTR65500  \ 
nnnnnnnnnnnnnnnnnn  1015 


#def i ne 
#de  f i n e 
#def i ne 
#def 1 ne 
#def i ne 
//define 
//define 
//define 
//define 
//define 
//define 
//define 
//d e f i ne 
//def  i ne 
//define 
//def  i ne 
//def  i ne 
//define 
//define 


SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE. 

SIHPLEPGPRECEIVEFILE 


NULLPOINTERTOINPUTFILENAHEnn  n n 
EHPTYINPUTFILENAHESTRINGn  n n n 
INPUTFILEDOESNOTEXISTn  n n n n 
NULLPOINTERTOOUTPUTFILENAHEn  n n 
EHPTYOUTPUTFILENAHESTRINGn  n n n 
NULLPOINTERTODECRYPTPASSPHRASEnn  n 
NULLPOINTERTOSIGNATURESTATUSn  n n 
NULLPOINTERTOSIGNERSTRINGn  n n n 
SIGNERBUFLENGTHTOOSHALLn  nan 
NULLPOINTERTOSIGNDATEn  n n n n 
SIGNDATEBUFLENGTHTOOSHALLn  n n n 
NOTENOUGHHEHORYFORINPUTSTRUCTUREn  n 
NOTENOUGHHEHORYFOROUTPUTSTRUCTUREn  n 
DECRYPTPWDBUFFERTOOSHALLn  n n n 
ISKEYn  nnnnnnnn 
FUNCTIONNOTENABLEDnn  n n n n 
CANNOTUSEUNCERTI FI EDKEYn  n n n 
OUTPUTFILENAHETOOLONGn  n n n n 
OUTPUTFILECREATIONERRORn  n n n 


n 

n 

n 

n 

n 


n 

n 

n 

n 

n 

n 

n 

n 


n 

n 

n 

n 


1 101 
1 1 02 
1103 
1 1 04 
1 105 
1 1 06 
1 1 07 
1 1 08 
1 1 09 
1110 
1111 
1112 

1113 

1114 

1115 

1116 

1117 

1118 
1 131 


//define 
//define 
//define 
//def  i ne 
//def  i ne 
//def  i ne 
//def  i ne 
//define 
//define 
//define 
//define 
//define 
//define 
//define 
//define 
//def  i ne 
//define 
//define 


SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTOINPUTBUFFERnn  n n 
SIHPLEPGPRECEIVEBUFFER_INPUTBUFFERLENGTHISZEROn  n n n 
SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTOOUTPUTBUFFERn  n n 
SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTODECRYPTPASSPHRASEn  n 
SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTOSIGNATURESTATUSnn  n 
SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTOSIGNERSTRINGn  n n 
SIHPLEPGPRECEIVEBUFFER_SIGNERBUFLENGTHTOOSHALLn  n n n 
SIHPLEPGPRECEIVEBUFFER_NULLPOINTERTOSIGNDATEn  n n n 
SIHPLEPGPRECEIVEBUFFER_SIGNDATEBUFLENGTHTOOSHALLn  n n 
SIHPLEPGPRECEIVEBUFFER_NOTENOUGHHEHORYFORINPUTSTRUCTUREnn 
SIHPLEPGPRECEIVEBUFFER_NOTENOUGHHEHORYFOROUTPUTSTRUCTUREn 
SIHPLEPGPRECEIVEBUFFER_DECRYPTPWDBUFFERTOOSHALLnn  a a 
SIHPLEPGPRECEIVEBUFFER_OUTPUTBUFFERTOOSHALLnn  n n n 
SIHPLEPGPRECEIVEBUFFER_ISKEYn  n n n n n n n 
SIHPLEPGPRECEIVEBUFFER_FUNCTIONNOTENABLEDn  n n n n 
SIHPLEPGPRECEIVEBUFFER_CANNOTUSEUNCERTI  FIEDKEYn  n n n 
SIHPLEPGPRECEIVEBUFFER_16BITINPUTBUFFERLENGTHGTR65500n  n 
SIHPLEPGPRECEIVEBUFFER_16BITOUTPUTBUFFERLENGTHGTR65500n  n 


□ 

D 

□ 


□ 

n 

n 

n 


n 


n 

o 

n 

a 

□ 

D 

D 


1 201 
1 202 
1 203 

1204 

1205 

1206 

1207 

1208 

1209 

1210 
1211 
1212 

1213 

1214 
1 215 
1 216 

1217 

1218 


//define  S I HPLEPGPG  E N E R AT  E KE  Y_  F UN  C T I ONNOT  E N AB  LE  Dnn  ana 
//define  S I HPLEPGPG  E N E R AT  E KE  Y_N  U L LPO I NT  E RTOU  S E I D S TR I NGa  n n 
//define  S I HPLEPG  PG  E N E R AT  EKE  Y_U  S E R I D ST  R I NG  I S EHPT  Yn  n n n 
//define  S I HPLE  PG  PG  EN  E R ATE  KE  Y_KE  Y LE  NGTH  OUTO  F R ANG  En  n n n 


n n 

n n 

a a 


a a 


1 301 
1302 
1 303 
1 304 
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#define  S I M P LE PG PG E N E R AT E KE Y_B A D KE YT Y P Enn  n n n n n n n 1305 
#define  S I M P LE PG PG E N E R AT E KE Y_ V A LI D D A Y S 0 UTO F R AN G En  n n n n n 1306 
#define  S I M P L E PG PG E N E R AT E KE Y_ N U L LPO I NT E RTOG E N KE Y I Dn  n n n n n 1308 
#define  S I HP L E PG PG EN E R AT E KE Y_ PW DBU F F E RTOO S M A L Ln  n n n n n n 1309 


^define  S I M P LE PG P E XT R A CT KE Y 
#define  S I M P LE PG P E XTR A CTKE Y 
#define  S I M P LE PG P EXT R A C TKE Y 
#define  S I H P LE PG P EXT R A C TKE Y 
//define  SIMPLEPGPEXTRACTKEY 
//define  SIMPLEPGPEXTRACTKEY 
#define  SIMPLEPGPEXTRACTKEY 
//definenSIHPLEPGPEXTRACTKEY 
#definenSIMPLEPGPEXTRACTKEY 
#define  SIMPLEPGPEXTRACTKEY 


.FUNCTIONNOTENABLEDn  n n n n n n 1401 
.NULLPOINTERTOUIDKIDSTRINGn  n n n n 1402 
.UIDKIDSTRINGISEMPTYnn  a n a a a 1403 
.NULLPOINTERTOOUTPUTFILENAMEnn  n n n 1404 
.OUTPUTFILENAMESTRINGISEHPTYnn  nan  1405 
.NOTENOUGHMEHORYFOROUTPUTSTRUCTUREn  n n 1406 
.OUTPUTFILECREATIONERRORnn  n n n n 1407 
.NULLPOINTERTOOUTPUTBUFFERn  n n n n 1408 
.NULLPOINTERTOOUTPUTBUFFERLENn  n n n 1409 
OUTPUTBUF FERTOOSMALLn  n n n n n 1410 


//define 
//def  i ne 
//define 
//define 
//def  i ne 
//def  i ne 
#def i ne 


SIHPLEPGPADDKEY. 

SIMPLEPGPADDKEY. 

SIHPLEPGPADDKEY. 

SIMPLEPGPADDKEY. 

SIMPLEPGPADDKEY. 

SIMPLEPGPADDKEY. 

SIHPLEPGPADDKEY 


FUNCTIONNOTENABLEDn  n n n n n n n 1501 
NULLPOINTERTOINPUTFILENAHEn  n n n n n 1502 
INPUTFILENAHESTRINGISEHPTYn  n n n n n 1503 
INPUTFILENAHEDOESNOTEXISTn  n n n n n 1504 
NOTENOUGHMEHORYFORINPUTSTRUCTUREn  n n n 1505 
NULLPOINTERTOINPUTBUFFERn  n n n n n 1506 
OTHERINSTANCERUNNINGn  n n n n n n 1507 


#define  S I HP L E PG PR EHO V E KE Y_ F UN CT I ON  NOT E N AB L E Dn  n n n n n n 1601 
#define  S I H P L E PG PR EMO V E KE Y_NU L LPO I NT E RTO U I D KI D S T R I N Gn  n n n n 1602 
#define  S I H P LE PG PR EMO V E KE Y U I D KI D S T R I NG I S EM PT Yn  n n n n n n 1603 


#define  S I M PLE PG PC E RT I F YKE Y. 
//define  S I M P LE  PG  PC  E RT  I F YKE  Y. 
//define  SIHPLEPGPCERTI  F YKEY. 
#define  S I H P LE PG PC E RT I F YK E Y. 
^define  S I M P LE PG PC E RT I F YKE Y. 
//define  S I M P LE  PG  P C E RT  I F YKE  Y. 
//define  S I M P LE  PG  P C E RT  I F YKE  Y 


FUNCTIONNOTENABLEDn  n n n n n n 1701 
NULLPOINTERTOKEYTOCERTI FYn  n n n n 1702 
KEYTOCERTI FYSTRINGISEHPTYn  n n n n 1703 
NULLPOINTERTOSIGNERSTRINGn  n n n n 1704 
KEYSELCANCELn  n n n n n n n 1706 
SIGNERPWDBUFFERTOOSMALLnn  n n n n 1707 
CANNOTUSEUNCERTI FIEDKEYnn  n n n n 1708 


//define  SIMPLEPGPOPENPUBLICKEYRING_OKn  nnnnnnnn0 
//define  S I HP  LE  PG  POP  EN  PUB  LI  C KE  Y R I N G_  U S E R C AN  C E LO  NT  A S KBU  S Ynn  n n n 1801 

//define  S I HP  L E PG  POP  EN  PUB  LI  C KE  YR  I N G _ C ANTO  P E NKE  Y R I NG  F I LEn  n n n n 1802 

#define  S I HP LE PG POP EN PUB  LI C KE Y R I N G OUTOFMEMORYn  n n n n n n 1803 


#define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 
//define  SIHPLEPGPGETNEXTPUBLICKEY. 
//define  SIHPLEPGPGETNEXTPUBLICKEY. 
//define  SIHPLEPGPGETNEXTPUBLICKEY. 
//define  SIHPLEPGPGETNEXTPUBLICKEY. 
//define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 
#define  SIHPLEPGPGETNEXTPUBLICKEY. 


OKn  n n n n n 

EOFnn  n n n n 

NULLUSERIDSTRINGPOINTERn 
NULLKEYIDSTRINGPOINTERn 
NULLKEYLENGTHPOINTERn  n 
NULLCREATIONDATEPOINTERn 
NULLEXPIRATIONDATEPOINTERnn 
NULLVALIDDAYSPOINTERn  n n 
NULLKEYTYPEPOINTERn  n 
NULLKEYTYPEESPOINTERn  n 
NULLKEYSTATEPOINTERn  n 
BADHANDLEnn  n n n 


0 

8 

1 901 
1 902 
1903 
1 904 
1 905 
1 906 

1907 

1908 
1 909 
1910 


//define  S I H P L E PG  P C LO  S E PUB  LI  C KE  Y R I N G_0  Kn  nnnnnnnnO 
#define  S I HP L E PG P C LO S E PUB  LI C KE Y R I NG _B A D H AN D LEn  n n n n n n 1911 

//define  S I M P LE  PG  PO  P E N PR  I V AT  E KE  Y R I N G_OKn  nnnnnnnn0 
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#define  SIHPLEPGPOPENPRIVATEKEYRING_USERCANCELONTASKBUSYn  n n 
^define  SIHPLEPGPOPENPRIVATEKEYRING  C ANTO P E N KE Y R I NG F I LEnn  n n 


#def i ne 
#def i ne 
#def i ne 
#def i ne 
#d  e f i n e 
#def i ne 
#def i ne 
#def i ne 
#def i ne 
#def 1 ne 
#d  e f i n e 
#def i ne 


SIHPLEPGPGETNEXTPRIVATEKEY_OKn  n n n n n n 
SIHPLEPGPGETNEXTPRIVATEKEY_EOFn  n n n n n n 
SIMPLEPGPGETNEXTPRIVATEKEY_NULLUSERIDSTRINGPOINTERn  n 
SIHPLEPGPGETNEXTPRIVATEKEY_NULLKEYIDSTRINGPOINTERn  n 
SIMPLEPGPGETNEXTPRIVATEKEY_NULLKEYLENGTHPOINTERnn  n 
SIHPLEPGPGETNEXTPRIVATEKEY_NULLCREATIONDATEPOINTERn  n 
SIHPLEPGPGETNEXTPRIVATEKEY_NULLEXPIRATIONDATEPOINTERn 
SinPLEPGPGETNEXTPRIVATEKEY_NULLVALIDDAYSPOINTERnn  n 
SIHPLEPGPGETNEXTPRI VATEKEY_NULLKEYTYPEPOINTERn  n n 
SIHPLEPGPGETNEXTPRIVATEKEY_NULLKEYTYPEESPOINTERnn  n 
SIHPLEPGPGETNEXTPRIVATEKEY_NULLKEYSTATEPOINTERn  n n 
SiriPLEPGPGETNEXTPRIVATEKEY_BADHANDLEn  n n n n 


n 

□ 

o 

□ 

n 

□ 

n 

n 

a 

a 

n 

□ 


#define  S I MP L E PG PC LO S E PR  I V AT E KE Y R I NG_0Knn  a a a n a 
//define  S I MPLE  PG  PC  LO  S E PR  I V AT  E K E Y R I N G_B  A D H A N D LEn  n n n n 


n 


□ 


//define  S I M P LE  PG  P AN  A L YZ  E F I L E_  F I L E N AM  E PO I NT  E R I S NU  LLn  nan 
#define  SIHPLEPGPANALYZEFILE.FILENAHESTRINGISEMPTYn  n n n 

//define  S I HP  LE  PG  P A N A L Y Z E F I LE_  F I LE  N AH  E DO  E S N OT  E X I STn  n n n 

//define  SIHPLEPGPANALYZEFILE  NOTENOUGHHEHORYn  n n n n 


Q 

n 

a 


n 


//define  S I HPLEPG  PAN  A LYZ  EBU  F F ER_BU  F F ERPOI  NTERI  SNU  LLn  ana 
//define  S I HPLE  PG  P A N A L Y Z EBU  F F E R_BU  F F E R LE  N GTH  I S Z E ROn  n n n 
//define  S I MPLEPGPAN  AL  YZ  EBU  F F ER_C  ANTOPENTEHP  F I LEnn  n n n 
//define  S I M PLE  PG  P A N A L YZ  EBU  F F E R_  E R ROR  WR I T I NGT  EH  P F I LEnn  n n 


n 

n 

n 


n 


//define  S IHPLEPG  PWI  PE  F I LE_0Kn  a a a a a 

//define  S I HP  LE  PG  PW  I P E F I LE_C  A NTOP  E N F I LEn  n n n 

//define  S IHPLEPG  PW  I PE  F I LE  C ANT  R E MO  V E F I LEn  n a 


n a 


n n 

□ □ 


n 

D 


n 


n 

n 


n 


//define  S I HP  LE  PG  PG  ET  V E R S I 0 N_0  Kn  n n n n n n n 
//define  S IHPLEPG  PG  ETVERS I ON_BU  F F ERPOI  NTERI  S NU  LLnn  n n 

//define  S I HPLE  PG  PG  E T V ER  S I ON_BU  F F E RTOO  SM  A LLn  n n n n 


D 


n 


□ 

n 


n 


//def  i ne 
//def  i ne 
//def  i ne 
//define 
//define 


SIHPLEPGPCHECKRECIPIENT_OKn  nnnnnnnn 
SIMPLEPGPCHECKRECIPIENT_NULLPOINTERTORECIPIENTn  n n n 
SIHPLEPGPCHECKRECIPIENT_RECIPIENTLENGTHISZEROn  n n n 
SIHPLEPGPCHECKRECIPIENT_NOTENOUGHMEMORYFORINPUTSTRUCTUREn 
SIHPLEPGPCHECKRECIPIENT_CANNOTUSEUNTRUSTEDKEYn  n n n 


a 

2001 

n 

2002 

n 

0 

n 

8 

Q 

2101 

n 

2102 

Q 

2103 

n 

2104 

n 

2105 

n 

2106 

n 

2107 

a 

2108 

o 

2109 

n 

2110 

a 

0 

n 

2111 

n 

2201 

Q 

2202 

n 

2203 

Q 

2204 

n 

2301 

n 

2302 

n 

2304 

Q 

2305 

n 

0 

n 

2401 

n 

2402 

n 

0 

n 

2501 

D 

2502 

a 

0 

n 

2601 

o 

2602 

a 

2603 

n 

2604 

/* 

* Signature  status  codes 

*/ 

//define  SIGSTS_NOTSIGNEDn  n n 1 

//define  S I G ST  S_  V E R I F I E Dnn  n n 2 

//define  S I G ST  S_NOT  V E R I F I E Dn  n n 3 

#define  S I GST S _B A D S I Gn  n n n 4 

//define  SIGSTS  VERIFIED  UNTRUSTEDn  5 


/* 

* S i mp L e Ana L y z e codes 

*/ 

//define  S I HP  L E AN  A L Y Z E_UNKNOWNn  n n 0 
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# d e f i n e 

SIHPLEANALYZE_ 

ENCRn  B 

n 

n 

1 

//define 

SIMPLEANALYZE_ 

SIGNn  B 

n 

n 

2 

//define 

SIHPLEANALYZE_ 

KEYn  a 

n 

u 

3 

//define 

SIMPLEANALYZE_ 

lOERRORn 

n 

u 

4 

//d e f i n e 

SIMPLEANALYZE_ 

DETACHEDSIGn 

n 

5 

/* 

* KeySeLect  codes 
*/ 

/*  Keyring  Types:  */ 

#define  KE Y S E L_ PU B L I Cn  1 
#define  KE Y S E L_ S E C R ETn  2 
#define  KE Y S E L_G R OU Pn  3 

/*  Show  or  Hide  goups  or  expired,  disabled,  or  revoked  keys  */ 

#define  K E Y S E L_ S H 0 W_G ROU PSn  n 0x0100 

#define  KEYSEL_SHOW_EXPnn  n 0x0200 

#define  KE Y S E L_ S H 0 W_ D I Snn  n 0x0400 

//define  KE  Y S E L_S  H 0 W_R  E Vnn  n 0x0800 

/*  Identify  the  shared  button  to  use  */ 

//define  KE  Y S E L_G  RO  U P_  D E Fn  n b n 1 
//define  KEYSEL_DISABLE_SHARED_BUTTONSn  4 

/* 

* KeyType  codes 
*/ 


#d  e f i n e 

KEYS 

_0LD 

01 

/* 

Tradi ona 1 

PGP 

RSA  Keys  */ 

//define 

KEYS 

_ENCR 

02 

/* 

New 

style 

PGP 

Encryption-only 

keys  */ 

//define 

KEYS 

_SIGN 

04 

/* 

New 

style 

PGP 

Signature-only 

keys  * / 

/* 

* Re c i p i e n t Li s t codes 
*/ 

#define  INCLUDE_ONLYUSERIDS  1 
//define  I N C LU  D E_ON  L Y KE  Y I D S 2 
//define  INCLUDE_BOTH  3 


/* 

* XXX:  If  SPGP_SIGNATURE_ONLY_PGPHIME_HACK  is  passed  for  <S i g na t u r e On L y> 

* then  the  detached  signature  will  say  "BEGIN  PGP  MESSAGE"  instead 

* of  "BEGIN  PGP  SIGNATURE".  This  is  only  a hack  until  PGP/MIHE  is 

* implemented  in  the  library. 

*/ 

//define  SPGP_SIGNATURE_ONLY  PGPMIHE  HACKn  PGP  SEPSIGMSG 


//ifdef cplusplus 

extern  "C"  { 

//endi  f 
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/* 

* Prototypes 
*/ 


i 

S 

a 

a 

a 

n 

n 

□ 

n 


nt  SPGPExport 

i mp L e PG PEn c ry p t F i L e (void  *handle, 

char  * I n pu t F i L eName , char  *0 u t pu t F i L eNa me , 

int  Signit,  int  Wipe,  int  Armor,  int  Textmode,  int 

int  U s e Un t r u s t edKey s , char  * Re c i p i en t L i s t , 

char  *Si gnerKeylD,  size_t  S i g n e r Bu f f e r Le n , 

char  *S i g ne r Pa s s p h r a s e , size_t  S i g n e r PwdBu f f e r Le n , 

char  *IDEAPassphrase,  size_t  I D E A PwdBu f f e r Le n , 

char  * Pu b L i c Key R i ng Name , char  * P r i va t e Ke y R i n g n ame ) ; 


IDEAOn  Ly, 


i 

S 

a 

n 

□ 

□ 

□ 

□ 

□ 

Q 


nt  SPGPExport 

i mp L e PGPEn c ry p t Buf f e r (void  *handLe, 

char  * I npu t Bu f f e r , size_t  I n pu t Bu f f e r Le n , char  * I n p u t Bu f f e r Na me 

char  *0utputBuf f er,  size_t  *0u t pu t Bu f f e r Le n , 

int  Signit,  int  Armor,  int  Textmode,  int  IDEAOnLy, 

int  Usellnt  rustedKeys,  char  * R e c i p i e n t L i s t , 

char  *S i gne rKey I D,  size_t  S i g n e r Bu f f e r Le n , 

char  *S i gne r Pa ss ph ra se,  size_t  S i g n e r PwdBu f f e r Len , 

char  * I D E APa s s ph r a s e , size_t  I D E APwdBu f f e r Le n , 

char  *PubLicKeyRingName,  char  *PrivateKeyRingName); 


int  SPGPExport 

S i mp L e PG PS i g n F i L e (void  *handLe, 
n char  * I npu t F i L eN a me , char  *0u t pu t F i L e Na me , 

n int  Armor,  int  Textmode,  int  S i g na t u r eO n L y , int  CLearSign, 
n char  *S i gne rKeyl D,  size_t  S i g n e r Bu f f e r Le n , 
n char  *S i gne r Pa s s p h r a s e , size_t  S i g n e r PwdBu f f e r Len , 
n char  *P r i va t eKey R i ngName ) ; 


int  SPGPExport 

S i mp L ePGPS i gnBuf f e r (void  *handLe, 

n char  * I npu t Bu f f e r , size_t  I npu t Bu f f e r Le n , char  * I n pu t Bu f f e r Na me , 
a char  *0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n , 

a int  Armor,  int  Textmode,  int  S i g na t u r e On  I y , int  CLearSign, 
a char  * S i g n e r Key  I D , size_t  S i g ne r Bu f f e r Le n , 
a char  *S i g n e r Pa s s ph r a s e , size_t  S i g ne r P wd Bu f f e r Le n , 
a char  *P r i va t e Key R i ng Name ) ; 


int  SPGPExport 

S i mp L e PG PRe c e i ve F i L e (void  *handLe, 
a char  * I npu t F i I e Na me , char  *0u t pu t F i L e Na me , 

char  * De c r y p t Pa s s Ph r a s e , size_t  d e c r y p t P wd Bu f f e r Le n , 
a int  *Si gnatureStatus,  char  *Signer,  size_t  S i g n e r Bu f Le n , 
a byte  *SignDate,  size_t  S i g n Da t e Bu f Le n , 
a char  *Pub L i c Key R i ng Name , char  * P r i va t e Key R i ng N ame ) ; 

int  SPGPExport 

S i mp L e PG PRe c e i veBu f f e r (void  *handLe, 

a char  * I npu t Bu f f e r , size_t  I n pu t Bu f f e r Len , char  * I n pu t B u f f e r Na me , 
a char  *0utputBuf f er,  size_t  *0u t p u t Bu f f e r Le n , 

char  *DecryptPassPhrase,  size_t  d e c ryp t PwdBu f f e r Le n , 
a int  *S i gna t u r e S t a t u s , char  *Signer,  size_t  S i g n e r Bu f Le n , 
a byte  *SignDate,  size_t  S i g n Da t eBu f Len , 
a char  * Pub L i c Key R i n g Name , char  *P r i va t e Ke y R i n g Na me ) ; 
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int  SPGPExport 

S i mp L ePGPVe r i f y D e t a c hed S i gna t u re F i L e (void  *handLe, 
n char  * I n p u t D a t a F i L e Name , char  * I n pu t S i g n a t u r e F i L e Na me , 
n int  *Si gnatureStatus,  char  *Signer,  size_t  S i g n e r Bu f Le n , 
a byte  *SignDate,  size_t  S i g n D a t eBu f Le n , 
n char  * Pu b L i c Ke y R i ng Na me ) ; 

int  SPGPExport 

S i mp L ePGPVe r i f y D e t a c hed S i gna t u r eBuf f e r (void  *handLe, 
n char  * I n p u t D a t a Bu f f e r , size_t  I n pu t Da t a Bu f f e r Le n , 
n char  * I n p u t S i g na t u r eBu f f e r , size_t  I n p u t S i g na t u r e Bu f f e r Le n , 
n int  *S i g na t u r e S t a t us , char  *Signer,  size_t  S i g n e r Bu f Le n , 
n byte  *SignDate,  size_t  S i g n D a t eBu f Le n , 
n char  * Pu b L i c Key R i ng N a me ) ; 

int  SPGPExport 

S i mp L e PG P A na L y z e F i L e (char  *FiLename); 
int  SPGPExport 

S i mp L e PG P An  a L y z e Bu f f e r (char  *Buffer,  size_t  Len); 
i nt  SPGPExport 

S i mp L e PGPOpenPub L i c Key R i ng  (void  *handLe,  char  * Pu b L i c Ke y R i n g N a me ) ; 
int  SPGPExport 

S i mp  L e PG  PG  e t N e X t Pu  b L i c Key  (void  *handLe,  char  *LlserID,  char  *KeyID, 
n int  *KeyLength,  char  * C r e a t i on D a t e , char  * Exp i r a t i o n D a t e , 
n int  *VaLidityDays,  int  *KeyType,  char  *KeyTypeES,  char  *KeyState); 

int  SPGPExport 

S i mp L e PGPC L osePub L i c Key R i ng  (void  *handLe); 
int  SPGPExport 

SimpLePGPOpenPrivateKeyRing  (void  *handLe,  char  *PrivateKeyRingName); 
int  SPGPExport 

S i mp L e PG PG e t N e X t P r i va t eKey  (void  *handLe,  char  *UserID,  char  *KeyID, 
n int  *KeyLength,  char  *C r ea t i on  Da t e , char  * E xp i r a t i on  Da t e , 
n int  *Va L i di tyDays,  int  *KeyType,  char  *KeyTypeES,  char  *KeyState); 

int  SPGPExport 

S i mp L e PG PC L o s e P r i va t e Key R i ng  (void  *handLe); 
int  SPGPExport 

SimpLePGPAddKey  (void  *handle,  char  *InputFiLeName,  char  *KeyRingName); 
int  SPGPExport 

S i mp L e PG P Ad d Key Bu f f e r (void  *handLe,  byte  * I n pu t Bu f f e r , 
n size_t  I n p u t Bu f f e r Le n , char  *Key R i n g Na me ) ; 

i nt  SPGPExport 

S i mp L e PGPExt r a c t Key  (void  *handLe,  char  * U s e r I D Key  I D , 
n char  *0ut put F i L eName,  char  *Key R i ng N ame ) ; 

i nt  SPGPExport 

S i mp L ePGPEx t ra c t KeyBu f f e r (void  *handLe,  char  * U s e r 1 D Key  I D , 
n byte  *0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n , char  *Key R i ng N a me ) ; 

i:[CHK:9ca6a0667fcc1c33488022fee68788f33cffa11887bbaee71883d1155918024bb:] 
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int  SPGPExport 

S i mp L ePGPChe c kRe c i p i en t (void  ‘handle,  char  ‘Recipient,  int  U s e Un t r u s t e dKey s , 
n char  ‘Pub  I i cKey R i ng Name  ) ; 

PG P L i ne E ndTy pe  SPGPExport 
SimpLePGPGetLineEndType  (void); 

PGPLi neEndType  SPGPExport 

S i mp I ePG PS e t L i ne EndTy pe  ( PG PLi n e E n dTy pe  L i n e E n dTy pe ) ; 


/‘  Extended  versions  of  the  above  ‘/ 

/‘ 

‘ The  < L o c a L E n c ode>  params  below  are  used  to  convey  MacBinary  mode: 

‘n  n Neve  r : n 0 

‘n  n Auto:n  kPG P F i I eOpe nMa y be Lo c a I E n c od e 
‘n  n Forcein  k PG P F i I eOpe n F o r c e Lo ca  I E n c od e 
‘ (The  above  constants  are  defined  in  pg p F i I e Re f . h ) 

‘/ 

int  SPGPExport 

S i mp I e PG P E n c ry p t F i I e X (void  ‘handle, 

n PGPFileRef  ‘ I n pu t F i I e R e f , PGPFileRef  ‘Ou t pu t F i I e Re f , 
n int  Signit,  int  Wipe,  int  Armor,  int  Textmode,  int  IDEAOnly, 

n int  U s e U n t r u s t edKey s , int  F o r You r Ey e sOn  I y , char  ‘Re c i p i e n t Li s t , 

n char  ‘S i g n e r Key  I D , size_t  S i g n e r Bu f f e r Le n , 
n char  ‘S i g n e r Pa s s p h r a s e , size_t  S i g ne r PwdBu f f e r Len , 
n char  ‘I D E A Pa s s p h r a s e , size_t  I D E A PwdBu f f e r Len , 
n PGPFileRef  ‘ Pub  I i c Key R i ng R e f , PGPFileRef  ‘ P r i va t eKey R i ng Re f , 
a PGP F i I eOpen F I ag s localEncode,  S PG PP r og r e s s C a I I Ba c k callBack, 

n void  ‘callBackArg); 

int  SPGPExport 

S i mp I ePGPEnc ry p t Buf f e r X (void  ‘handle, 

n char  ‘ 1 npu t Bu f f e r , size_t  I n p u t Bu f f e r Len , char  ‘ I n pu t Bu f f e r Name , 
n char  ‘Ou t p u t Bu f f e r , size_t  ‘Ou t pu t Bu f f e r Le n , 
n int  Signit,  int  Armor,  int  Textmode,  int  IDEAOnly, 
n int  Usellnt  rustedKeys,  int  F o r You  r Ey  e sOn  I y , char  ‘Re  c i p i e n t L i s t , 
n char  ‘S i gne rKeyl D,  size_t  S i g n e r Bu f f e r Le n , 
n char  ‘S i gne r Pa s sph r a s e,  size_t  S i g n e r PwdBu f f e r Le n , 
n char  ‘ I D E A Pa s s p h r a s e , size_t  I D E A PwdBu f f e r Le n , 
n PGPFileRef  ‘Pu b I i c Key R i n g Re f , PGPFileRef  ‘P r i va t e Key R i n g R e f , 
n S PG PP r og r e s s C a 1 1 Ba c k callBack,  void  ‘callBackArg); 

int  SPGPExport 

S i mp I ePGPS i gn F i I eX  (void  ‘handle, 

n PGPFileRef  ‘ I n p u t F i I e R e f , PGPFileRef  ‘Ou t p u t F i I e Re f , 
n int  Armor,  int  Textmode,  int  S i g na t u r eOn  I y , int  ClearSign, 
n char  ‘ S i g ne r Key I D , size_t  S i g n e r Bu f f e r Le n , 
n char  ‘ S i g ne r Pa s s p h r a s e , size_t  S i g ne r Pwd Bu f f e r Le n , 
n PGPFileRef  ‘P r i va t e Key R i ng Re f , PG P F i I eOpe n F I a g s localEncode, 
a SPGPProgressCallBack  callBack,  void  ‘callBackArg); 

int  SPGPExport 

S i mp I e PG PS i g n Bu f f e r X (void  ‘handle, 

n char  ‘ I n pu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  ‘ I npu t Bu f f e r Na me , 
:CCHK:935779ee71 1 1 e e 1 b7e e 5 d dd f 0bd3 e 4 1 9bb0 f 4 b2 0738 5 f f 96d 5 0 70 b b33d5 c f 9 1 a 2 ] ] 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1729 


spgp.h 


a char  *0 u t p u t Bu f f e r , size_t  *0u t p u t Bu f f e r Le n , 

n int  Armor,  int  Textmode,  int  S i g n a t u r eOn L y , int  CLearSign, 
n char  * S i g n e r Key  I D , si2e_t  S i g n e r Bu f f e r Len , 
n char  * S i g n e r Pa s s p h r a s e , size_t  S i g n e r P wdBu f f e r Le n , 
n PGPFiLeRef  * P r i va t e Key R i n g Re f , S PG PP r og r e s s C a L L Ba c k caLlBack, 
n void  *caLLBackArg); 

int  SPGPExport 

S i mp L ePGPRe c e i ve F i L eX  (void  *handLe, 

n PGPFiLeRef  * I n pu t F i L e Re f , PGPFiLeRef  *0u t p u t F i L e R e f , 
char  * D e c r y p t Pa s s Ph ra s e , size_t  d e c r y p t P wd Bu f f e r Le n , 
n int  *Si gnatureStatus,  byte  *S i gne rKeyl D,  size_t  S i g n e r Key  I D Bu f Le n , 
n char  *Signer,  size_t  S i g n e r Bu f Le n , 

n byte  *SignDate,  size_t  S i g n Da t eBu f Le n , BooLean  * F o r You r Ey e s On L y , 
n PGPFiLeRef  * Pu b L i c Key R i ng R e f , PGPFiLeRef  *P r i va t e Key R i ng Re f , 
n PGPFi LeOpenF Lags  LocaLEncode,  S PG PP r og r e s s C a L L Ba c k caLLBack, 
n void  *caLLBackArg); 

int  SPGPExport 

S i mp L e PG P Re c e i ve Bu f f e r X (void  *handLe, 

n char  * I n p u t Bu f f e r , size_t  I n pu t Bu f f e r Len , char  * I n p u t Bu f f e r N a me , 
n char  *0 u t pu t Bu f f e r , size_t  *0u t p u t Bu f f e r Le n , 

char  * De c ry p t Pa s sPh r a s e,  size_t  de c r y p t Pwd Bu f f e r Le n , 
n int  *Si gnatureStatus,  byte  *S i g ne r Key  I D , size_t  S i g n e r Key  I D Bu f Le n , 
n char  *Signer,  size_t  S i g n e r Bu f Len , 

n byte  *SignDate,  size_t  S i g n Da t eBu f Le n , BooLean  * F o r You r Ey e sOn L y , 
n PGPFiLeRef  *Pub L i c Key R i n g Re f , PGPFiLeRef  *P r i va t e Key R i n g R e f , 
n S PG PP r og r e s s C a L L Ba c k caLLBack,  void  * c a L L Ba c k A r g ) ; 

int  SPGPExport 

S i mp L ePGPVe r i f y De t a c hed S i gna t u r e F i L eX  (void  *handLe, 

n PGPFiLeRef  * I n pu t D a t a F i L e Re f , PGPFiLeRef  * I n pu t S i g na t u r e F i L e Re f , 
n int  *S i g n a t u r e S t a t u s , byte  *S i gne rKeyl D,  size_t  S i g n e r Key  I DBu f Le n , 
n char  *Signer,  size_t  S i g n e r Bu f Le n , 
n byte  *SignDate,  size_t  S i g n Da t eBu f Len , 

n PGPFiLeRef  *Pu b L i c Key R i ng R e f , PG P F i L e Ope n F L a g s LocaLEncode, 
n S PG PP r og r e s s Ca L L Ba c k caLLBack,  void  * ca L L Ba c k A r g ) ; 

i nt  SPGPExport 

S i mp L e PGPVe r i f y De t a c hedS i gna t u reBuf f e r X (void  *handLe, 
n char  * I n p u t Da t a Bu f f e r , size_t  I npu t Da t a Bu f f e r Le n , 
n char  * I n p u t S i g n a t u r e Bu f f e r , size_t  I n p u t S i g na t u r eBu f f e r Le n , 
n int  *Si gnatureStatus,  byte  * S i g ne r Key  I D , size_t  S i g n e r Key  I DBu f Le n , 
n char  *Signer,  size_t  S i g ne r Bu f Len , 
n byte  *SignDate,  size_t  S i g n Da t eBu f Le n , 

n PGPFiLeRef  * Pub L i c Key R i ng Re f , S PG PP r og r e s s C a L L Ba c k caLLBack, 
n void  * c a L L Ba c k A r g ) ; 

i nt  SPGPExport 

S i mp L e PG P Ana L y z e F i L e X (PGPFiLeRef  *FiLeref,  S PG P P r og r e s s C a L L Ba c k caLLBack, 
n void  * c a L L Ba c k A r g ) ; 

i nt  SPGPExport 

S i mp L ePGPAna L y zeBu f f e r X (char  *Buffer,  size_t  Len, 
a S PGPP rog r e s s Ca L L Ba c k caLLBack,  void  * c a L L Ba c k A r g ) ; 

i nt  SPGPExport 

S i mp L e PG PO p e n Pu b L i c Key R i n g X (void  *handLe,  PGPFiLeRef  *Pu b L i c Key R i n g Re f ) ; 
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int  SPGPExport 

SimpLePGPOpenPrivateKeyRingX  (void  *handLe,  PGPFiLeRef  *PrivateKeyRingRef); 
int  SPGPExport 

S i mp L ePGPAddKeyX  (void  *handLe,  PGPFiLeRef  * I n p u t F i I e R e f , 
n PGPFiLeRef  *Key R i ng R e f ) ; 

i nt  SPGPExport 

S i mp L e PG P AddKey Bu f f e r X (void  *handLe,  byte  * I n p u t Buf f e r , 
a size_t  I np u t Bu f f e r Le n , PGPFiLeRef  *Key R i ng Re f ) ; 

int  SPGPExport 

S i mp L ePGPEx t ra c t Key X (void  *handLe,  char  *U s e r I DKey I D , 
n PGPFiLeRef  *0u t p u t F i L e R e f , PGPFiLeRef  *Key R i ng R e f ) ; 

int  SPGPExport 

S i mp  L ePGPEx  t ra  c t KeyBuf  f e r X (void  *handLe,  char  *LI  s e r I D Key  I D , 
n byte  *0u t p u t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n , PGPFiLeRef  *KeyRi  ngRef ) ; 

i nt  SPGPExport 

S i mp L e PG P C h e c k R e c i p i e n t X (void  *handLe,  char  *Recipient,  int  U s eUn t r u s t ed Key s , 
n PGPFiLeRef  * Pu b L i c Key R i n g Re f ) ; 

int  SPGPExport 

SimpLePGPRandomNeeded  (void  *handLe); 


#ifdef  __cpLuspLus 

> 

# e nd i f 

#if  PRAGMA_IHPORT_SUPPORTED 
^pragma  import  reset 
#end i f 

#endif  /*  SPGP_H  */ 

/* 

* LocaL  VariabLes: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpABuf.c  — Simple  PGP  API  Analyze  buffer 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  spgpABuf.c, V 1.7. 2.1  1997/06/07  09:51:46  mhu  Exp  $ 

*/ 

#i nc lude  <stdi o . h> 

^include  "spgp.h" 

Sinclude  "spgpint.h" 

i n t 

S i mp I e PG P A n a I y z eBu f f e r X (char  *Buffer,  size_t  Len, 


n 

r 

SPGPProgressCal IBack 

callBack, 

void 

*callBackArg) 

\ 

a 

Pg  p E n V 

* e n V ; 

/* 

Dummy  environment  handle 

*/ 

a 

PgpPi peli ne 

*head,nn 

/* 

Pipeline  head  pointer  */ 

a 

* * t a i 1 ; 

/* 

Pipeline  tail  pointer  */ 

a 

PgpUICb 

u i ; n B 

/* 

Callback  functions  */ 

n 

SPgpSimpUI 

u i _a  rg ; 

/* 

Parameters  for  callbacks 

*/ 

n 

i n t 

e r r ; n b 

/* 

Error  variable  */ 

Et 

head  = NULL; 

n 

env  = NULL; 

B 

if  (IBuffer)  { 

n n return  S I H P LE PG P AN A L Y Z EBU F F E R_BU F F E R PO I NT E R I S N U LL; 
n } 

n if  (!Len)  { 

n n return  SIMPLEPGPANALYZEBUFFER_BUFFERLENGTHISZERO; 

n > 

n /*  Setup  the  UI  callback  functions  8 args  */ 
n spgpUISetup  (8ui,  8ui_arg); 

n ui _a rg . ana lyze  = -1;n  b n /*  Request  analysis  */ 

n /*  Set  up  pipeline  */ 

n head  = NULL; 

n env  = pgpenvCreate  (); 

n tail  = pg p De c ry p t Pi pe I i neC r ea t e (Shead,  env,  NULL,  8ui,  8ui_arg); 
a /*  Send  data  through  */ 

n err  = spgpHemPump  (head,  (byte  *)Buffer,  Len,  callBack,  c a I I Ba c k A r g ) ; 
n h ea d-> t ea r d o wn  (head); 

a head  = NULL; 


B 

if  (err  ! = 

PGPERR_0K  88  err  ! 

= PGPERR_INTERRUPTED  ) 

B 

n goto  error; 

B 

err  = S I M P LE AN A L Y Z E_U NKN 0 WN  ; 

B 

if  (ui_arg 

.analyze  ==  PGPANN_ 

PGPKEY_ 

BEGIN  ) 

{ 

B 

n e r r = 

SIMPLEANALYZE_KEY; 

B 

> else  if 

( u i _a r g . a n a 1 y z e = = 

PGPANN_ 

CIPHER 

.BEGIN)  { 

B 

n e r r = 

SIHPLEANALYZE_ENCR; 

B 

> else  if 

( u i _a r g . a n a 1 y z e = = 

PGPANN_ 

CLEARSIG_BEGIN  | | 

B 

B B 

u i _a r g . a na 1 y z e = = 

PGPANN_ 

SIGNED 

.BEGIN  1 1 

[CCHK:69d1a5bb003aa1dd9b58d5992aae4087cc01aa46988fd3117dd8d9d19829a0c0a:: 
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n 

n 

n 

ui _a rg  . ana  lyze  ==  PG P AN N_C OH  PR E S S E D_ 

BEGIN) 

D 

Q 

err  = 

SIMPLEANALYZE_SIGN; 

n 

> 

else  if 

(ui_arg. analyze  ==  PGPANN_SIGNED_SEP) 

{ 

n 

n 

err  = 

SIHPLEANALYZE_DETACHEDSIG; 

n 

> 

error: 

a 

i f 

(head) 

n 

n 

h ead-> t ea r do wn  (head); 

n 

i f 

( en  V ) 

n 

n 

pgpe n V 0 e s t r oy  (env); 

n 

return  err 

/ 

> 

i n t 

S i mp I e PG P Ana L y 2 eBu f f e r (char  *Buffer,  size_t  Len) 

{ 

n return  S i mp L e PG P Ana  I y z eBu f f e r X (Buffer,  Len,  NULL,  NULL); 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpAFile.c  --  Simple  PGP  API  Analyze  file 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  s pg p A F i I e . c , V 1.1  0.2.1  1 997/06/07  09:51:46  mhw  Exp  $ 

*/ 

#i  nc  lude  <stdi o . h> 

//include  "spgp.h" 

//include  "spgpint.h" 

i n t 

S i mp  I ePGPAna I y ze F i I eX  (PGPFileRef  *Fileref,  S PG P P r og r e s s C a I I Ba c k callBack, 


Q 

r 

void  * c a 1 1 Ba c k A r g ) 

\ 

n 

PgpEnv 

*env  ; 

/* 

Dummy  environment  handle 

*/ 

n 

PgpFi  leRead 

*pfrin;n 

/* 

Data  file 

handle  */ 

n 

PgpPi pe  1 i ne 

*head,na 

/* 

Pipeline 

head  pointer  */ 

n 

**ta i 1 ; 

/* 

Pipeline 

tail  pointer  */ 

n 

PgpUICb 

u i ; n n 

/* 

Callback 

functions  */ 

n 

SPgpSimpUI 

u i _ a r g ; 

/* 

Parameters  for  callbacks 

*/ 

n 

i nt 

e r r ; n n 

/* 

Error  variable  */ 

n 

env  = NULL; 

n 

head  = NULL; 

n 

/*  Setup  the  UI  ca 

llback  functions  & 

a r g s * / 

a 

spgpUISetup  (8ui, 

8ui_arg); 

u 

u i _a r g . a n a 1 y z e = - 

1 ; n n n 

/* 

Request  analysis  */ 

a 

/*  Open  input  file 

*/ 

Q 

pfrin  = pgp F i 1 eRef Rea dC r ea t e 

(Fileref 

, k PG  P F i 1 e Ope  n Re  a d Pe  r m. 

NULL); 

a 

if  (!pfrin)  { 

n a err  = S I M P LE PG P AN  A L Y Z E F I L E_ F I L E N AH E DO E S NOT E X I ST ; 
n n goto  error; 

n > 

n pg p F i I e Rea d S e t C a I I Ba c k ( p f r i n , callBack,  c a I I Ba c k A r g ) ; 

n /*  Set  up  pipeline  */ 

n head  = NULL; 

n env  = pgpenvCreate  (); 

n tail  = pgpDecryptPipelineCreate  (&head,  env,  NULL,  &ui,  &ui_arg); 

n /*  Send  data  through  */ 
n err  = pg p F i I e Rea d Pump  (pfrin,  head); 
n pgpFileReadDestroy  (pfrin); 
a h ea d-> s i z e Ad V i s e (head,  0); 

n head->teardown  (head); 
n head  = NULL; 

n if  (err  !=  PGPERR_0K  &&  err  !=  PG P E R R_ I NT E R RU PT E D ) 

H n goto  error; 

n err  = S I H P L E A N A L Y Z E_U N KN OW N ; 

n if  ( u i _a r g . a na  I y z e ==  PG P AN N_ PG PKE Y_B EG  I N ) { 
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D 

n 

err  = 

SIMPLEANALYZE_KEY; 

n 

> 

else  if 

( u i _a r g . a na 1 y z e = = 

PGPANN_ 

CIPHER. 

BEGIN)  { 

a 

n 

err  = 

SIHPLEANALYZE_ENCR; 

n 

> 

else  if 

(ui _a rg . ana  lyze  = = 

PGPANN_ 

CLEARSIG.BEGIN  | | 

n 

n 

n 

u i _a r g . a n a 1 y z e = = 

PGPANN_ 

SIGNED. 

BEGIN  1 1 

n 

□ 

n 

u i _a r g . a na 1 y z e = = 

PGPANN_ 

COMPRESSED.BEGIN) 

n 

n 

err  = 

SIMPLEANALYZE_SIGN; 

n 

> 

else  if 

( u i _a  rg  . a na  1 y ze  = = 

PGPANN_ 

SIGNED. 

SEP)  { 

□ 

□ 

err  = 

SIMPLEANALYZE_DETACHEDSIG; 

o 

> 

error: 

n if  (head) 

n n head->t ea rdown  (head); 
a if  (env) 

n n pgpenvDestroy  (env); 

n return  err; 

} 

i n t 

S i mp L ePGPAna Lyze F i L e (char  *FiLename) 

{ 

n PGPFiLeRefn  n n *ref; 

n PGPErrorn  n n err; 

n if  (IFiLename)  { 

n n return  S I H P LE PG P AN A L Y Z E F I L E_ F I LE N AM E PO I NT E R I S NU L L; 
n } 

n if  ( ! F i I e na me C 0 3 ) { 

n n return  S I M P L E PG P AN A L Y Z E F I LE_ F I LE N AH E S T R I NG  I S EMPT Y ; 
n } 

n ref  = pg pNe w F i L e Re f F r om F u L L Pa t h (Filename); 
a if  (!ref)  { 

n n err  = S I HP L E PG P AN A L Y Z E F I L E_NOT ENOU G HH E HOR Y ; 
a } e L se  { 

n n err  = S i mp L e PG P Ana L y z e F i L e X (ref,  NULL,  NULL); 
n > 

n if  ( ref ) 

a n pgpFreeFileRef  (ref); 
n return  err; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpAddK.c  --  Simple  PGP  API  Add  Key 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  spgpAddK.c, V 1.12.2.1  1997/06/07  09:51:46  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i i 

#i nc  Lude  <stdi o . h> 

#ifdef  HAVE_UNI STD_H 

#incLude  <un i s t d . h>n / * For  unlink!)  */ 

# e nd i f 

#incLude  "spgp.h" 

#incLude  "spgpint.h" 

#incLude  "pgpKeyDB.h" 


static  int 

S i mp L e PG PAddKey Common  (int  fFilein,  PGPFiLeRef  * I n pu t F i L e R e f , 
n byte  * I n p u t B u f f e r , si2e_t  I npu t Bu f f e r Le n , PGPFiLeRef  *KeyRingRef) 
{ 


n 

Pg  p E n V 

*env  ; 

/* 

PGP  Local  environment  */ 

n 

RingPooL 

*ringpooL;a 

/* 

Keyring  pool  */ 

Q 

RingFi Le 

*rf pub,n 

/* 

Public  keyring  file  */ 

n 

* r f t mp ; 

/* 

Keyring  file  for  keyadd  tmpfile  */ 

n 

Ri ngSet  const 

*rspub,n 

/* 

Public  keyring  ringset  */ 

s 

*rstmp; 

/* 

Ringset  for  keyadd  tmpfile  */ 

n 

Ri ngSet 

* r s n e w ; 

/* 

Updated  public  keyring  ringset  */ 

s 

Pg  p F i L e 

*pf pub,n 

/* 

Public  keyring  file  handle  */ 

n 

*pf  tmp; 

/* 

Tmpfile  handle  for  added  key  */ 

o 

byte 

*fi Lebuf; 

/* 

Temp  buffer  for  key  data  */ 

n 

s i ze_t 

fi Lebuflen; 

/* 

Size  of  f i Lebuf  */ 

n 

int 

e r r ; n n 

/* 

Error  variable  */ 

n 

BooLeannn  n n 

havesem; 

/* 

Have  opened  our  semphore  interlock 

n 

/*  Initialize  some 

null  pointers 

to 

simplify  error  cleanup  */ 

D 

rfpub  = NULL; 

a 

pfpub  = NULL; 

n 

rsnew  = NULL; 

n 

env  = NULL; 

n /*  Need  write  permission  on  keyrings,  get  interlock  semaphore  */ 
n havesem  = pgpOpenSemaphoreC); 
n if  (Ihavesem)  { 

n n err  = S I HP LE PG P A D D KE Y_0T H E R I N ST A N C E RU N N I NG  ; 
n n goto  error; 
n > 

n /*  Create  global  structures  */ 

n spgpinit  C&env,  SringpooL); 
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n /*  Some  pointer  checks  */ 
n if  (!env  ||  IringpooL)  { 

a a err  = S I MP L E PG P AD D KE Y_N0T ENOUG HM EHO R Y F 0 R I N PUTS! RU C TU R E ; 
n n goto  error; 

n > 

n /*  Open  keyring  and  get  ringset  */ 

n err  = s pg pOp en R i ng f i L e s (env,  ringpooL,  KeyRingRef,  NULL, 

n a Spfpub,  Srfpub,  Srspub,  NULL,  NULL,  NULL,  TRUE); 

a if  (err) 
n { 

n n if  (err  ==  S I HPLEPG P_KE Y R I NGUR I T E LO C KE D ) 

n n n err  = S I H PLEPG P AD D KE Y_0T H E R I N ST AN C E R U NN I NG ; 

n n goto  error; 

n } 


n /*  Make  a mutable  ringset  to  receive  the  new  keys  */ 
n rsnew  = r i ng S e t C r ea t e (ringpooL); 
n if  (!rsnew)  { 

a a err  = S I MP LE PG P A D DKE Y_NOT E NOUG HH EMO R Y F 0 R I N PUT S TR U CT U R E ; 
n n goto  error; 

B > 

B r i n g S e t Add S e t (rsnew,  rspub); 


n 

n 

n 

B 

□ 

n 

n 

B 

□ 

□ 


/*  Remove  any  ascii  armor  from  input  file  */ 
if  (fFilein)  { 

B err  = spgpDearmorKeyFile  (env,  InputFiLeRef,  SfiLebuf,  Sfilebuflen); 
} else  { 

B err  = s pg p De a r mo r Key Bu f f e r (env,  InputBuffer,  I npu t Bu f f e r Len , 

B B Sfilebuf,  &f i L ebu f I e n ) ; 

} 

if  (err)  { 

B goto  error; 

> 


B /*  Open  keyring  data  */ 

B pftmp  = pgpFiLeMemReadOpen  (filebuf,  filebuflen); 

B rftmp  = ringFileOpen  (ringpooL,  pftmp,  1,  &err); 

B i f ( ! rftmp)  { 

B B pgpMemFree  (filebuf); 

B B err  = KE RN E L_KE YR I NG_ A D D_E R RO R; 

B B goto  error; 

B } 

B rstmp  = r i ng F i L eS e t ( rf t mp ) ; 

B /*  Add  the  new  ringset  */ 

B ri ngSet AddSet  (rsnew,  rstmp); 

B /*  Write  out  updated  ringset  */ 

B r i ng S e t F ree z e (rsnew); 

B err  = spgpWriteoutSet  (env,  KeyRingRef,  rsnew,  rfpub,  pfpub,  FALSE); 

B s pg p R i ng F i I e C I os e (rftmp); 

B pgpFileClose  (pftmp); 

B pgpMemFree  (filebuf); 

B if  (!err)  { 

B B rsnew  = NULL; 

B B rfpub  = NULL; 

B n pfpub  = NULL; 
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n } 

error: 

n if  (rsnew) 

n n r i n g S e t De s t r oy  (rsnew); 
n if  (rfpub) 

a n s pg p R i n g F i L e C L o s e (rfpub); 
n if  (pfpub) 

n n pgpFiLeCLose  (pfpub); 

n spgpFinish  (env,  ringpooL,  err); 

n if  (havesem) 
n n pgpC LoseSemaphore  (); 
n return  err; 

} 


i n t 

S i mp L e PG P Ad d Key X (void  *handLe,  PGPFiLeRef  * I n p u t F i L e R e f , 
n PGPFiLeRef  *KeyRingRef) 

{ 

a (void)handLe; 

a return  S i mp L e PG P Ad d Key C ommo n (TRUE,  I n p u t F i L e R e f , NULL,  (size_t)0, 
a a KeyRingRef); 

} 

i n t 


S 1 mp  L ePGPAddKey 
/ 

(void 

*handLe,  char  * I n p u t F i L e N a me , char  * Key R i ng N a me ) 

\ 

a PGPFiLeRefa 

n 

n 

*refInput=NULL, 

a a a a 

n 

n 

*refKeyRing=NULL; 

a PGPErrora 

s 

n 

err; 

a if  ( ! I npu t F i L e N ame  ) { 

a a return  SIMPLEPGPADDKEY_NULLPOINTERTOINPUT FILENAME ; 
a } 

a if  ( ! I npu t F i L eName C 03 ) ( 

a a return  S I H P LE PG P A D D KE Y_I N PUT F I LEN AM E ST R I NG I S EH PT Y ; 
a } 

a if  ('.(refinput  = pgpNewFiLeRefFromFuLLPath  (InputFiLeName)))  { 
a a err  = S I H P L E PG  P A D DKE  Y_N0T  E NOUG  H H EHO  R Y FO  R 1 N P UT  ST  RU  C T U R E ; 

a a goto  error; 

a } 

a if  (KeyRingName  &S  Key R i ng Na me C 0 3 ) { 

a a if  ( ! ( r e f Key R i ng  = pgpNewFiLeRefFromFuLLPath  (KeyRingName)))  { 

a a a err  = S I H P LE PG P A D D KE Y_N0T E NOU G H H E HO R Y F 0 R I N PUT  ST R U CT U R E ; 

a a a gotoerror; 

a a > 

a } 

a err  = SimpLePGPAddKeyX  (handLe,  refinput,  refKeyRing); 
error: 

a i f ( refinput ) 

a a pg p F r e e F i L e Re f (refinput); 

a if  (refKeyRing) 
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n n pgpFreeFileRef  (refKeyRing); 
n return  err; 

} 

c 

i nt 

S i mp L e PG P AddKey Bu f f e r X (void  *handLe,  byte  * I n p u t Bu f f e r , 
a size_t  I np u t Bu f f e r Len , PGPFiLeRef  *KeyRingRef) 

{ 

a (void)handLe; 
n if  ( ! I npu t Buf f e r ) { 

n n return  S I M P LE PG PA D DKE Y_N U L L PO I NT E RTO I N PUTBU F F E R ; 

n > 

n return  S i mp L e PG PAddKey Common  (FALSE,  NULL,  InputBuffer,  I npu t Bu f f e r Len , 
n n KeyRingRef); 

> 


i nt 

S i mp L e PG P AddKe y Bu f f e r (void  *handLe,  byte  * I n pu t Bu f f e r , 
n si2e_t  InputBuf f erLen,  char  *KeyRi ngName) 

{ 

n PGPFileRefn  n n * r e f Ke y R i n g = N U L L ; 

n PGPErrorn  n n err; 


a if  (KeyRingName  &&  Key R i n g Na me C 0 D ) C 

n n if  ( ! ( ref KeyRi  ng  = pg p N e w F i I e Re f F r om F u L L Pa t h (KeyRingName)))  { 
n n n err  = S I M PLE PG P A D D KE Y_NOT EN 0 UG HH EMO R Y FO R I N PUT  ST RU C TU R E ; 

n n n gotoerror; 

□ n > 

n > 


n err  = S i mp L e PG P Add  Key Bu f f e r X (handle,  InputBuffer,  I n p u t Bu f f e r Len , 
n n refKeyRing); 


error: 


n if  (refKeyRing) 

n n pgpFreeFileRef  (refKeyRing); 
n return  err; 

} 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpChkR.c  --  Simple  PGP  API  Check  recipient 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgpChkR.c, V 1.7. 2.1  1997/06/07  09:51:47  mhw  Exp  $ 

*/ 


//include  <stdio.h> 

//include  "spgp.h" 
#include  "spgpint.h 


int  SPGPExport 

S i mp I e PG PC h e c kRe c i p i en t X (void  *handle,  char  *Recipient,  int  U s e U n t r u s t ed Key s , 
a PGPFileRef  *Pu b I i c Key R i n g Re f ) 

{ 


B 

Pg  p E n V 

*env; 

/* 

PGP  local  environment  */ 

B 

R i ng  Poo  1 

*ringpool;n 

/* 

Keyring  pool  */ 

B 

RingFi  le 

*rfpub;n 

/* 

Public  keyring  file  */ 

B 

Ri ngSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

B 

Pg  p F i 1 e 

*pfpub;n 

/* 

Public  keyring  file  handle 

*/ 

B 

Ri ngSet 

*rsuser;n 

/* 

Ringset  holding  keys  for  userid 

B 

Ringiterator 

*riuser;n 

/* 

Iterate  over  rsuser  */ 

B 

RingObject 

*robuser;n 

/* 

RingObj  for  encryption  key 

*/ 

B 

i n t 

e r r ; n n 

/* 

Error  variable  */ 

n (void)handle; 

n /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n rfpub  = NULL; 

n pf pub  = NULL; 

n env  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  (&env,  &ringpool); 

n /*  Some  pointer  checks  */ 

n if  (!  Recipient)  C 

n a err  = S I H P L E PG P C H E C KR E C I P I ENT_N U LLPO I NT E RTO R E C I PI  ENT  ; 
n n goto  error; 

n > 

n if  ( ! Reci pi ent C0D ) { 

n n err  = S I H P L E PG P C H E C KR E C I PI ENT_R E C I P I ENT LE NGT H I S Z E RO  ; 
n n goto  error; 


*/ 


n > 

n if  (!env  {|  Iringpool)  { 

n n err  = S I M P L E PG P C H E C KR E C I PI E NT_N0T E NO UG H M EHO R Y F 0 R I N PUT S T RU C T U R E ; 
H n goto  error; 

n > 

n /*  Open  keyring  and  get  ringset  */ 
n err  = s pg pOpe n R i n g f i I e s (env,  ringpool, 
n n Pub  I i cKey R i ng Re f , NULL, 

n n Spfpub,  &rfpub,  Srspub,  NULL,  NULL,  NULL,  FALSE); 

a if  (err) 

n n goto  error; 


n rsuser  = r i n g S e t C r e a t e (ringpool); 
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n if  ( ! r i ng S e t F i L t e r S pe c (rspub,  rsuser.  Recipient, 
n n n n n n n PG P_PKU S E_ E N C R Y PT ) ) { 

n n err  = S I M P L E PG P_NON EX  I ST E NTR E C I P I E NTK E Y ; 

n n r i ng S e t D e s t r oy  (rsuser); 
n n goto  error; 
n > 

n r i ng S e t F r ee z e (rsuser); 
n riuser  = ringIterCreate  (rsuser); 
n ringIterNextObject  (riuser,  1); 
n robuser  = r i ng I t e r C u r r e n t Ob j e c t (riuser,  1); 

n if  ( ! s pg pKey OKTo En c r y p t (rspub,  robuser,  U s e U n t r u s t e d Key s ) ) { 
n n ringObjectReLease  (robuser); 

n n r i ng I t e r D e s t r oy  (riuser); 

n n r i ng S e t D e s t r oy  (rsuser); 

n n err  = S I HP LE PG PC H E C KRE C I P I ENT_ C AN  NOT U S E U NT R U ST E D KE Y ; 
n n goto  error; 

n } 

n ringObjectReLease  (robuser); 
n ringlterOestroy  (riuser); 
a r i n g S e t 0 e s t r oy  (rsuser); 

error: 

n if  (rfpub) 

n n spgpRingFiLeCLose  (rfpub); 

n if  (pfpub) 

n n pgpFiLeCLose  (pfpub); 

n spgpFinish  (env,  ringpooL,  err); 

n return  err; 

> 

i n t 

S i mp L e PGPC hec kRec i p i en t (void  *handLe,  char  *Recipient,  int  U s e Un t r u s t ed Key s , 
n char  *Pub L i cKeyRi ngName ) 

{ 

n PGPFiLeRefn  *refPubRing  = NULL; 
n PGPErrorn  err; 

n if  ( Pub L i cKeyRi ngName  &S  Pub L i c Key R i ng N a me C 0 ] ) C 

n n if  ( ! ( r e f Pu b R i ng  = pg pNe w F i I eRe f F r om F u L L Pa t h ( Pub L i c Key R i ng N ame ) ) ) { 
n n n err  = KE RN E L_0UT_0 F_H EH ; 
n n n gotoerror; 

n n } 

n } 

Q 

n err  = S i mp I e PG PC h e c kRe c i p i en t X (handle.  Recipient,  U s e U n t r u s t ed Key s , 
n n refPubRing); 

error: 

a if  (refPubRing) 

n n pg p F r ee F i L e R e f (refPubRing); 

n return  err; 

} 

/* 

* Local  Variables: 
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* tab-width:  4 

* End  : 

* vi  : ts  = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* spgpEBuf.c  --  Simple  PGP  API  Encrypt  buffer 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  spgpEBuf.c, V 1.19.2.4  1997/06/07  09:51:47  mhw  Exp  $ 

*/ 

#i nc  Lude  <stdi o . h> 

#incLude  "spgp.h" 

#incLude  "spgpint.h" 

i nt 

S i mp L e PG PEn c r y p t Bu f f e r X (void  *handLe, 

n char  * I npu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  * I n pu t Bu f f e r N a me , 
n char  *OutputBuf f er,  size_t  *0 u t pu t Bu f f e r Le n , 
n int  Signit,  int  Armor,  int  Textmode,  int  IDEAOnLy, 
n int  U s eU n t r u s t ed Key s , int  F o r You r Ey e s 0 n L y , char  * R e c i p i e n t L i s t , 
n char  *S i gne rKeyl D,  size_t  S i g n e r Bu f f e r Le n , 
n char  * S i g n e r Pa s s p h r a s e , size_t  S i g n e r Pwd Bu f f e r Len , 
n char  * I D E A Pa s s p h r a s e , size_t  I D E A Pwd Bu f f e r Le n , 
n PGPFiLeRef  *PubLicKeyRingRef,  PGPFiLeRef  *PrivateKeyRingRef, 


n 

{ 

SPGPProgressCalLBack 

call  Back, 

void 

*caL  IBackArg) 

n 

PgpEnv 

*env  ; 

/* 

PGP  Local  environment  */ 

n 

RingPooL 

*ringpooL 

; a /* 

Keyring  pool  */ 

n 

Ri ng  F i L e 

*rfpub;n 

/* 

Public  keyring  file  */ 

a 

RingSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

a 

RingFi  le 

*rfsec;n 

/* 

Secret  keyring  file  */ 

n 

RingSet  const 

*rssec;n 

/* 

Secret  keyring  ringset  */ 

0 

Ri ngObject 

*robsign; 

a / * 

RingObj  for  signing  key  */ 

0 

PgpFi Le 

*pf pub,n 

/* 

Public  keyring  file  handle 

*/ 

0 

*pfsec;n 

/* 

Secret  keyring  file  handle 

*/ 

0 

PgpRandomContext 

* r n g ; n n 

/* 

Random  number  generator  */ 

0 

PgpPubKey 

*pubkeys  ; 

/* 

ALL  public  keys  for  recips 

*/ 

0 

PgpSecKey 

*sksign;B 

/* 

Signature  key  */ 

0 

PgpSigSpec 

*sigspec; 

a / * 

Signature  data  structure  */ 

0 

PgpConvKey 

convkey. 

n / * 

Conventional  key  */ 

0 

*convkeys 

;b  /* 

Pointer  to  convkey  */ 

0 

PgpLiteralParams 

Literal; 

n / * 

Filename  info  */ 

0 

PgpPipeline 

*head,nn 

/* 

Pipeline  head  */ 

0 

**ta i L , 

/* 

Pipeline  tail  pointer  */ 

0 

*pi pebuf  ; 

a /* 

Output  buffer  pipeline  */ 

0 

s i ze_t 

bufsize; 

/* 

Output  buffer  size  */ 

0 

int 

e r r ; n n 

/* 

Error  variable  */ 

n (void)handLe; 

n (void)InputBufferName; 

n /*  Initialize  some  nuLL  pointers  to  simplify  error  cleanup  */ 
n pubkeys  = NULL; 

n convkeys  = NULL; 
n sksign  = NULL; 

n sigspec  = NULL; 

n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 

n rng  = NULL; 
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n env  = NULL; 

a /*  Create  gLobaL  structures  */ 

n spgpinit  C&env,  &ringpooL); 


□ 

□ 

□ 

n 

Q 

Q 

Q 

n 

□ 

n 

D 

n 

a 

n 

Q 

n 

Q 


/*  Some  pointer  checks  */ 
if  (IlnputBuffer)  f 

n err  = S I M P LE PG P E N C R Y PTBU F F E R_N U LLPO I NT E RTO I N PUTBU F F E R ; 
a goto  error; 

> 

if  ( ! Ou t pu t Bu f f e r ) { 

n err  = S I H P L E PG P E N C R Y PTBU F F E R_N U L L PO I NT E RTOOUT PUTBU F F E R ; 
n goto  error; 

> 

if  C I n p u t Bu f f e r Len  ==  0)  { 

n err  = S I H P LE PG P E N C R Y PT BU F F E R_ I N PUTBU F F E R L E NGT H I S Z E RO  ; 
n goto  error; 

> 

if  (!env  ||  IringpooL)  { 

n err  = S I M P L E PG P E N C R Y PTBU F F E R_N OT E N OU G H M EMO R Y F 0 R I N PUT  ST RU C TU R E ; 
n goto  error; 

> 


n /*  Hake  sure  we  have  our  RNG  seeded  */ 
n if  ( s pg p R n g C h e c k ()  !=  PGPERR_0K)  { 

n n err  = S I M P LE PG P_ R N G N OT S E E D E D ; 
n n goto  error; 
n > 


n /*  Set  the  armor  flag  if  requested  */ 

n pgpenvSetInt  (env,  PGPENV_ARMOR,  Armor,  PGPENV_PRI_FORCE); 
n pgpenvSetInt  (env,  PG P E N V_T E XTHO D E , Textmode,  PG PE N V_PR I _ F OR C E ) ; 


n /*  Open  keyrings  and  get  ringsets  */ 
n err  = s pg pO p e n R i ng f i L e s (env,  ringpooL, 
n n Pub L i cKey R i ng Re f , P r i va t e Key R i ng Re f , 

n n Spfpub,  Srfpub,  Srspub,  &pfsec,  Srfsec,  &rssec,  FALSE); 
n if  (err) 

n n goto  error; 


n /*  Initialize  random  number  generator  */ 
n rng  = pgpRandomCreate  (); 


n 

a 

n 

n 

n 

a 

Q 

n 

Q 

n 

n 

n 

□ 

n 

□ 


if  (IDEAOnly)  ( 

n /*  Conventional  encryption  */ 
n if  ( ! I D E APa s sph r a s e ) ( 

n n err  = S I M P LE PG P E N C R Y PTBU F F E R_NU LLPO I NT E RTO I D E AP AS S PH R A S E ST R I N G ; 
n n goto  error; 

n } 

n if  ( ! * I D E APa s s ph r a se  ||  I D E A P wdBu f f e r Le n ) ( 

a a /*  Can't  ask  user  for  pass  phrase,  not  implementing  UI  */ 
n n err  = SIMPLEPGP_UNIMPLEHENTED; 

n > 

n convkey.next  = NULL; 
n c on  V key  . s t r i n g To  Key  = 0; 

n convkey.pass  = IDEAPassphrase; 
n convkey.passlen  = strlen  (convkey.pass); 
n convkeys  = Sconvkey; 
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n > e I se  -C 

n n /*  Public  key  encryption  */ 

n n pubkeys  = s pg p Re c i pTo Pu b key s ( Re c i p i e n t L i s t , rspub,  U s eUn t r u s t e d Key s , 
nnnnnnnnn  env^  &err); 

n n if  (err) 

n n n gotoerror; 

n > 


n 

□ 

n 

n 

n 

a 

n 

a 

a 

n 

n 

n 

□ 

Q 

□ 

n 

n 

n 

n 

o 

n 

n 

□ 

n 

n 

n 

n 

n 

a 

n 

n 

Q 

a 

□ 

n 

Q 

n 

n 

s 

n 

n 

n 


/* 

if 

a 

Q 

n 

n 

n 

n 

n 

n 

D 

c 

n 

n 

a 

n 

n 

Q 

s 

n 

D 

n 

Q 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


Prepare  signature  struct  if  requested  */ 

(Signit)  i 
int  rsLt; 

if  ( ! S i gne r Keyl D ) i 

B err  = SIMPLEPGPENCRYPTBUFFER_NULLPOINTERTOSIGNERKEYIDSTRING; 
n goto  error; 

> 

if  ( ! Si gnerPassphrase)  { 

B err  = S I M P L E PG P E N C R Y PTBU F F E R_N U LLPO I NT E RTO S I G N E R PA S S PH RA S E S T R I NG ; 
n goto  error; 

> 

/*  Not  implemented  to  ask  for  pass  phrase,  no  UI  functionality  */ 
if  ( *S i gne r Pa s sph r a s e== * \0 ’ &&  S i g n e r PwdBu f f e r Le n ) { 

B err  = SIMPLE PGP_ UNIMPLEMENTED; 
n goto  error; 

> 

/*  Get  signing  key  and  data  */ 

robsign  = s pg pG e t S i g ne r Key  C S i gne r Key I D , S i g n e r Bu f f e r Le n , env,  rssec); 
if  ( ! robsi  gn)  <. 

n err  = S I M P LE PG P_N0N E X I ST ENT S I G N E RKE Y ; 
n goto  error; 

> 

sksign  = r i ng S e c S e c Key  (rssec,  robsign,  PGP_PKU S E_S I G N ) ; 
ringObjectRe lease  (robsign); 
if  (Isksign  ||  !sksign“>sign)  { 

B err  = SIMPLE PGP_ SIGNERKEYENCRYPTIONONLY; 

B if  (isksign)  { 

B B /*  Problem  with  key  itself;  if  UNIMP,  use  high  level  error  */ 

n B PGPError  erri  = r i ng S e t E r r o r ( r s s e c ) ->e r r o r ; 

B B if  (erri  !=  PGPERR_PUBKEY_UNIMP)  C 
B B B err=err1; 

B B } 

n > 

n goto  error; 

> 

rslt  = pgpSecKeyUn lock  (sksign,  env,  S i g n e r Pa s s ph r a s e , 

B B B B B B strlen(SignerPassphrase)); 

if  (rslt  <=  0)  { 

B err  = S I M P L EPG P_BA D KE Y P A S S PH R A S E ; 
n goto  error; 

> 


n B sigspec  = pg p S i g S pe c C r e a t e (env,  sksign, 

B B B B (byte) (Textmode  ? PGP_SIGTYPE_TEXT  : PG P_ S I GT Y P E.B I N A R Y ) ) ; 

B > 


B /*  Through  with  key  rings,  close  them  */ 

n spgpRingFileClose  (rfpub); 

n spgpRingFileClose  (rfsec); 
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n pgpFiLeCLose  (pfpub); 

n pgpFiLeCLose  (pfsec); 

n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 

n /*  Fake  up  Literal  params  */ 
n if  ( F o r Yo u r Ey e sOn I y ) { 

n n static  char  fyeomagicC]  = "_C0NS0LE"; 

n n L i t e r a L . f i L ename  = pgpMemALLoc  ( s i 2 e of ( f y eoma g i c ) ) ; 
n H if  ( ! L i t e r a L . f i L ename ) { 

n n n err  = PG P E R R_N OH  EM ; 

n a n gotoerror; 

n n } 

n n strcpy  ((char  * ) L i t e r a L . f i L e na me , fyeomagic); 
a > e L s e { 

n n Literal. filename  = "stdin"; 

n > 

n I i t e r a L . t i me s t a mp  = (word32)  0; 

n /*  Add  some  data  from  the  buffer  to  the  RNG  for  more  entropy  */ 
n pg pRa nd om AddBy t e s (rng,  InputBuffer,  min(1024,  I n pu t B u f f e r Le n ) ) ; 


n /*  Set  up  pipeline  */ 
head  = NULL; 

n tail  = pg p En c r y p t P i p e L i n e C r ea t e (Shead,  env,  NULL,  rng,  convkeys,  pubkeys, 
nnnnnnnnn  sigspec,  Sliteral,  0); 
a if  (Armor)  ( 

an/*  Convert  to  Local  line  endings  if  appropriate  */ 
a a tail  = pg pTex t F i L t C r e a t e (tail, 

a a a n pg pe n vG e t Po i n t e r (env,  PG P E N V_C H A RM A PTO LAT I N 1 , NULL, 

n n a a aa  a a a NULL), 

a a n n 0,  S i mp L e PG PG e t Li n e EndTy pe ( ) ) ; 

a > 

a bufsize  = *OutputBuf f erLen; 

a pipebuf  = pgpMemModCreate  (tail,  OutputBuffer,  bufsize); 
a if  (Ipipebuf)  { 

a a err  = S I HPLE PG P E N C R Y PTBU F F E R_N OT E N OUG H M EHO R Y FO R I N PUT S T R U C TU R E ; 
a a goto  error; 
a } 


a /*  Send  data  through  */ 

a err  = spgpMemPump  (head,  (byte  * ) I n pu t Bu f f e r , I n p u t Bu f f e r Le n , 
a a a a a a calLBack,  c a L L Ba c kA r g ) ; 
a if  (!err)  { 

a a err  = s pg pHemOu t pu t (pipebuf,  0,  Ou t pu t Bu f f e r Le n ) ; 
a > 

a h ea d-> t ea r do wn  (head); 


error: 

a if  (sigspec) 

a a pgpSigSpecDestroy  (sigspec); 

a while  (pubkeys)  { 

a a PgpPubKey  *pk1  = pgpPubKeyNext  (pubkeys); 

a a pgpPubKeyDestroy  (pubkeys); 

a a pubkeys  = pkl; 

a } 

a if  (sksi gn) 

a a pg p S e c Key D e s t r oy  (sksign); 
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□ 

1 f 

( rng  ) 

□ 

n 

pg p Ra n dom D e s t r oy  (rng); 

Q 

if 

( rf pub) 

n 

n 

s pg p R i ng F i L e C L 0 s e (rfpub); 

n 

i f 

( rf sec  ) 

□ 

n 

s pg p R i ng F i L e C L os e (rfsec); 

n 

if 

( p f pu  b ) 

n 

n 

pgpFileCLose  (pfpub); 

n 

i f 

( pf  s e c ) 

n 

□ 

pgpFiLeCLose  (pfsec); 

n 

spgpFinish  (env,  ringpooL,  err! 

□ 

return  err; 

> 

i n t 

S i mp L e PG P E n c r y p t Bu f f e r (void  *handle, 

n char  * I n pu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  * I n p u t Bu f f e r Na me , 
n char  *0 u t pu t Bu f f e r , size_t  *0 u t pu t Bu f f e r Le n , 
n int  Signit,  int  Armor,  int  Textmode,  int  IDEAOnLy, 
a int  U s eU n t r u s t e dKey s , char  *Re c i p i e n t L i s t , 
n char  *S i gne rKey I D,  size_t  S i g n e r Bu f f e r Le n , 
n char  *S i g n e r Pa s s p h r a s e , size_t  S i g n e r Pwd Bu f f e r Le n , 
n char  * I D E A Pa s s p h r a s e , size_t  I D E APwdBu f f e r Len , 
n char  *Pub L i c Key R i n g Name , char  *P r i va t e Ke y R i ng Na me ) 

{ 

n PGPFileRefn  n n * r e f Pu bR i ng=NU LL, 

n n n n n n * r e f P r i v R i ng  = NU  LL; 

n PGPErrorn  n n err; 


n 

n 

n 

n 

n 

n 

D 

n 

n 

> 

n 

i f 

n 

Q 

n 

D 

n 

n 

fi 

D 

n 

> 

Q 

err 

n 

□ 

n 

n 

n 

n 

D 

n 

D 

n 

error: 

□ 

i f 

n 

n 

n 

i f 

n 

n 

if  ( Pub L i c Key R i ngName  S&  Pub L i c Key R i n g N a me C 0 ] ) ( 

if  ( ! ( r e f Pu bR i ng  = pg pN e w F i I e Re f F r om F u L L Pa t h ( Pub L i cKeyRi ngName  ))  ) { 
n err  = S I H P LE PG PE N C R Y PTBU F F E R_N0T E NOUG HH EHOR Y FOR  I N PUT S T R U C TU R E ; 
n goto  error; 

> 


if  ( ! { r e f P r i vR i ng  = pg pN e w F i L e Re f F r om F u L L Pa t h ( P r i va t e Key R i ng N a me  ) ) ) ( 
n err  = S I MP LE PG PEN C R YPTBU F F E R_N0T E NOUG HH EHO R Y F 0 R I N PUTSTRU CTU R E ; 
n goto  error; 

> 


InputBuf f erName,  Ou t pu t Bu f f e r , Ou t pu t Bu f f e r Le n , 

Signit,  Armor,  Textmode,  IDEAOnLy,  U s e Un t r u s t ed Key s , FALSE, 

Re c i p i en t L i s t , SignerKeylD,  S i g ne r Bu f f e r Len , S i g n e r Pa s s p h r a s e , 
Si gnerPwdBuf f erLen,  I D E APa s s ph r a s e , I D E A P wdBu f f e r Le n , 
refPubRing,  refPrivRing,  NULL,  NULL); 


pg p F r e e F i L e Re f (refPubRing); 
IrefPrivRing) 

pgpFreeFiLeRef  (refPrivRing); 
return  err; 
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/* 

* Loca  L Variables: 

* tab-wi dth : A 

* End : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* spgpEFile.c  --  Simple  PGP  API  Encrypt  file 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  s pg p E F i I e . c , V 1.24.2.4  1997/06/07  09:51:47  mhw  Exp  $ 

*/ 

^include  <stdio.h> 

^include  "spgp.h" 

^include  "spgpint.h" 

i nt 

S i mp I ePGPEnc ryp t F i I eX  (void  *handle, 

n PGPFileRef  * I n pu t F i I e Re f , PGPFileRef  *0 u t p u t F i I e Re f , 

n int  Signit,  int  Wipe,  int  Armor,  int  Textmode,  int  IDEAOnly, 

n int  U s e Un t r u s t edKey s , int  F o r You r Ey e s 0 n I y , char  * Re c i p i e n t L i s t , 

II  char  *Si  gnerKeylD,  size_t  S i g n e r Bu  f f e r Le  n , 
n char  * S i g ne r Pa s s ph r a s e , size_t  S i g n e r P wdBu f f e r Le n , 
char  * I D E A Pa s s p h r a s e , size_t  I D E A PwdBu f f e r Len , 

PGPFileRef  * Pu b I i c Key R i n g Re f , PGPFileRef  * P r i va t eKey R i ng Re f , 

PG P F i I eOpen F I ag s localEncode,  SPGPProgressCa  I iBack  callBack, 
void  * ca I I Ba c k A r g ) 


n 

Pg  p E n V 

*env  ; 

/♦ 

PGP  local  environment  ♦/ 

s 

RingPool 

♦ringpool  ;ii 

/♦ 

Keyring  poo  1 ♦ / 

n 

RingFi  le 

*rfpub;n 

/♦ 

Public  keyring  file  ♦/ 

n 

Ri ngSet  const 

*rspub;ti 

/♦ 

Public  keyring  ringset  ♦/ 

a 

RingFi  1 e 

*rfsec;n 

/♦ 

Secret  keyring  file  ♦/ 

B 

RingSet  const 

*rssec;n 

/♦ 

Secret  keyring  ringset  ♦/ 

B 

Ri ngOb j ect 

*robsign;n 

/♦ 

RingObj  for  signing  key  ♦/ 

B 

Pg  p F i 1 e 

*pf pub,n 

/♦ 

Public  keyring  file  handle 

B 

*pfsec,n 

/♦ 

Secret  keyring  file  handle 

B 

*pf out ; n 

/♦ 

Output  file  handle  ♦/ 

B 

PgpFi leRead 

*pf  r i n ; n 

/♦ 

Input  file  handle  ♦/ 

B 

PgpRandomContext 

*rng; n n 

/♦ 

Random  number  generator  ♦/ 

B 

PgpPubKey 

♦pubkeys; 

/♦ 

All  public  keys  for  recips 

B 

PgpSecKey 

*sksign;n 

/♦ 

Signature  key  ♦/ 

B 

PgpS i g Spe  c 

*sigspec;ci 

/♦ 

Signature  data  structure  ♦/ 

B 

PgpConvKey 

convkey,n 

/♦ 

Conventional  key  ♦/ 

B 

♦convkeys  ;ci 

/♦ 

Pointer  to  convkey  ♦/ 

B 

PgpLiteralParams 

literal  ;n 

/♦ 

Filename  info  ♦/ 

B 

PgpPi pe 1 i ne 

♦head,nn 

/♦ 

Pipeline  head  ♦/ 

B 

♦ ♦ t a i 1 ; 

/♦ 

Pipeline  tail  pointer  ♦/ 

B 

byte  constn  n n 

♦peekbuf;n 

/♦ 

RNG  seed  data  from  file  ♦/ 

B 

si ze_tn  n n n 

peeklength; 

/♦ 

Size  of  peekbuf  data  ♦/ 

B 

int 

e r r ; n n 

/♦ 

Error  variable  ♦/ 

n pg p As s e r t ( ( I o c a I E n c ode  S “ ( kPG P F i I e Ope n Ma y be Lo ca I E n cod e | 
nnnnnnnn  kPG P F i I eOp e n F o r c e Lo ca  I En c od e ) ) ==  0 ) ; 

n (void)handle; 

n /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n pubkeys  = NULL; 
n convkeys  = NULL; 

n sksign  = NULL; 

n sigspec  = NULL; 
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a rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 

a rng  = NULL; 

n env  = NULL; 

n L i t e r a L . f i L e n a me  = NULL; 

n /*  Create  global  structures  */ 

n spgplnit  (&env,  Sringpool); 

n if  (Wipe)  ( 

n n err  = S I HPLEPGP_UN IMPLEMENTED; 

n n goto  error; 

D > 

n if  (!env  ||  Iringpool)  { 

n a err  = S I H P L E PG P E N C R Y PT F I LE_N OT E N OU G H M EMO R Y F 0 R I N PUT  ST RU C TU R E ; 
n n goto  error; 

a } 

n /*  Make  sure  we  have  our  RNG  seeded  */ 
n if  (spgpRngCheck  ()  !=  PGPERR_OK)  { 

n n err  = S I M P LE PG P_RN G NOT S E E D E D ; 
n n goto  error; 

n } 

n /*  Set  the  armor  flag  if  requested  */ 

n pgpenvSetInt  (env,  PGPENV_ARMOR,  Armor,  PGPENV_PRI_ FORCE); 
n pgpenvSetInt  (env,  PGPENV_TEXTMODE,  Textmode,  PGPENV_PRI_ FORCE); 

n /*  Open  keyrings  and  get  ringsets  */ 
n err  = s pg p 0 pe n R i ng f i I e s (env,  ringpool, 
n n Pu b I i c Key R i ng R e f , P r i va t e Key R i ng Re f , 

n n Spfpub,  &rfpub,  Srspub,  Spfsec,  Srfsec,  Srssec,  FALSE); 
n if  (err) 

n n goto  error; 

n /*  Initialize  random  number  generator  */ 
n rng  = pgpRandomCreate  (); 


n 

□ 

n 

□ 

□ 

□ 

n 

□ 

□ 

n 

a 

□ 

n 

□ 

Q 

Q 

n 

n 

n 

a 


if  (IDEAOnly)  { 

n /*  Conventional  encryption  */ 
n if  ( ! I D E APa s s p h r a s e ) { 

n n err  = S I M P L E PG P E N C R YPT F I L E_NU LLPO I NT E RTO I D E A P A S S PH R A S E ST R I NG  ; 
n n goto  error; 
n } 

n if  ( ! * I D E APa s s p h r a s e ||  I D E A PwdBu f f e r Le n ) { 

n n /*  Can't  ask  user  for  pass  phrase,  not  implementing  UI  */ 
n Q err  = S I MP LE PG P_U N I M P LEM E NT E D ; 
n } 

n convkey.next  = NULL; 
a c on V key . s t r i ng To  Key  = 0; 

n convkey.pass  = I D E A Pa s s p h r a s e ; 
n c on V ke y . pa s s I e n = strlen  (convkey.pass); 

n convkeys  = Sconvkey; 

} else  { 

n /*  Public  key  encryption  */ 

n pubkeys  = s pgpRe c i pToPub key s ( Re c i p i en t L i s t , rspub,  U s e U n t r u s t ed Key s , 
nnnnnnnn  env,  &err); 

n if  (err) 


CCCHK:d3d500dbb7f3bae0665ab333faeed77a0aacbbea25f072c0588ab6b0f205e9df5IIIl 


1750 


Pretty  Good  Privacy  5.0'^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


spgpEFile.c 


n n n gotoerror; 
n > 


n 

n 

□ 

n 

n 

n 

n 

□ 

n 

n 

D 

n 

□ 

n 

n 

n 

n 

n 

□ 

a 

a 

a 

n 

B 

n 

n 

n 

n 

B 

B 

B 

n 

n 

n 

n 

B 

B 

B 

B 

Q 

n 

a 


/* 

i f 

n 

n 

s 

□ 

□ 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


Prepare  signature  struct  if  requested  */ 

(Signit)  -C 
int  rslt; 

if  ( ! S i gne  r Key  I D ) -C 

n err  = S I M P LE PG P E N C R Y PT F I LE_NU LLPO I NT E RTO S I G N E R KE Y I D S T R I N G ; 
n goto  error; 

> 

if  ( ! S i g n e r Pa s s ph r a s e ) { 

n err  = SIMPLE PGPENCRYPT FILE_NULL POINT ERTOSIGNERPASSPHRASESTRING; 
n goto  error; 

> 

/*  Not  i mp L emented  to  ask  for  pass  phrase,  no  UI  functionality  */ 
if  ( *S  i g n e r Pa  s s ph  r a s e = = * \ 0 * &&  S i g n e r P wdBu  f f e r Len  ) -C 
a err  = S I H PL E PG P_U N I MP LE H E NT E D ; 
n goto  error; 

> 

/*  Get  signing  key  and  data  */ 

robsign  = s pg pG e t S i g n e r Key  ( S i gne r Key I D,  S i g ne r Bu f f e r Len , env,  rssec); 
if  (Irobsign)  { 

a err  = SIMPLE PGP_ NONEXISTENTSIGNERKEY; 
n goto  error; 

> 

sksign  = r i n g S e c S e c Key  (rssec,  robsign,  PG P_ PKU S E_ S I G N ) ; 
r i ng Ob j e c t R e I ea s e (robsign); 
if  (Isksign  ||  ! s ks i g n-> s i g n ) f 

n err  = SIMPLE PGP_ SIGNER KEYENCRYPTIONON LY; 
a if  (Isksign)  f 

n n /*  Problem  with  key  itself;  if  UNIMP,  use  high  level  error  */ 

n a PGPError  erri  = r i ng S e t E r r o r ( r s s e c ) ->e r r o r ; 

n a if  (erri  !=  PG P E R R_PUBKE Y_U N I MP ) i 
B a a err=err1; 

a a > 

n > 

n goto  error; 

> 

rslt  = pg p S e c Key Un L o c k (sksign,  env,  S i g n e r Pa s s ph r a s e , 
a a a a a a strlen(SignerPassphrase)); 

if  (rslt  <=  0)  i 

a er r = S I MP LE PGP_BA D KE YPA S S PH RA S E ; 
a goto  error; 

> 


a a sigspec  = pg p S i g S p e c C r ea t e (env,  sksign, 

a a a a ( by t e ) ( Textmode  ? PG P_S I GT Y PE_T E XT  : PG P_ S I GT YP E_B I N A R Y ) ) ; 

a > 

a /*  Through  with  key  rings,  close  them  */ 
a s pg p R i ng F i I e C I o s e (rfpub); 

a s pg p R i ng F i I e C I o s e (rfsec); 

a pgpFileClose  (pfpub); 

a pgpFileClose  (pfsec); 

a rfpub  = rfsec  = NULL; 

a pfpub  = pfsec  = NULL; 

a 
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n /*  Open  input  and  output  files  */ 

n pfrin  = pg p F i L e R e f Re  a d C r e a t e C I n p u t F i L e Re f , ( k PG P F i L e 0 pe n Re  a d Pe rm  | 

n n n n n n n H n n n n LocaLEncode),NULL); 

n if  (Ipfrin)  { 

n n err  = S I M PLE PG P E N C R Y PT F I LE_ I N PUT F I LE DO E S NOT E X I ST ; 
n n goto  error; 

n } 

n pg p F i L e Rea d S e t C a L L Ba c k ( p f r i n , calLBack,  c a L L Ba c k A r g ) ; 

a if  ( Fo r You r Ey e s 0 n L y ) f 

n n static  char  fyeomagicCD  = "_CONSOLE"; 

n n L i t e r a L . f i L e n a me  = pgpMemALLoc  ( s i z eo f ( f y eoma g i c ) ) ; 
n n if  ( ! L i t e ra L . f i L ename ) { 
n n n err  = PGPERR_NOMEH; 

a n n gotoerror; 

n n } 

n n strcpy  ((char  * ) L i t e r a L . f i L e na me , fyeomagic); 
n } e I s e { 

n n L i t e r a L . f i L e n a me  = pg  pG  e t F i L e R e f Na  me  ( I n p u t F i L e R e f ) ; 
n > 

n L i t e r a I . t i me s t amp  = (word32)  0; 

n pfout  = pg p F i I e R e f 0 p e n ( Ou t pu t F i L e Re f , k PG P F i L eOpe n S t d W r i t e F L a g s , 
n a ( A r mo r ? kPG P F i L e Ty pe A r mo r F i I e : k PG P F i L eTy pe E n c r y p t e d D a t a ) , NULL); 

n if  (Ipfout)  { 

n n err  = S I MP  L E PG  P E N C R YPT  F I L E_0  UT  PUT  F I LE  C R E AT  I 0 N E R RO  R ; 

n n goto  error; 

n } 

n /*  Add  some  data  from  the  file  to  the  RNG  for  more  entropy  */ 
n peekbuf  = pgpFileReadPeek  (pfrin,  SpeekLength); 
n pg p Ra ndom Ad dBy t e s (rng,  peekbuf,  peekLength); 

n /*  Set  up  pipeline  */ 

n head  = NULL; 

n tail  = pgpEncryptPi pe I i neCreate  (&head,  env,  NULL,  rng,  convkeys,  pubkeys, 
n n n n n n n sigspec,  Sliteral,  0); 

n if  (Armor)  ( 

an/*  Convert  to  local  line  endings  if  appropriate  */ 
n n tail  = pg pTe x t F i 1 1 C r ea t e (tail, 

n n n a pg pe n vG e t Po i n t e r (env,  PG P E N V_C H ARM A PTO L AT  I N 1 , NULL, 

a a a a a a a a NULL), 

a a a a 0,  S i mp I e PG PG e t L i n e E ndTy p e ( ) ) ; 

a > 

a if  ( ! pgp F i I e W r i t eC r ea t e (tail,  pfout,  1))  ( 

a a err  = S I M P LE PG PE N C R Y PT F I L E_NOT ENO UG H M E MO R Y F 0 R I N PUT S T R U C T U R E ; 
a a goto  error; 

a } 

a /*  Send  data  through  */ 
a err  = pgpFileReadPump  (pfrin,  head); 
a pg p F i I e Rea d 0 e s t r oy  (pfrin); 
a h e a d->s i z e Ad V i s e (head,  0); 
a h ea d-> t ea r down  (head); 

error: 

a if  (sigspec) 

a a pgpSigSpecDestroy  (sigspec); 

a while  (pubkeys)  { 

a n PgpPubKey  *pk1  = pgpPubKeyNext  (pubkeys); 

a a pg p Pu bKey D e s t r oy  (pubkeys); 
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n 

u 

Q 

n 

n 

□ 

□ 

n 

D 

□ 

□ 

n 

D 

n 

n 

n 

□ 

Q 

□ 

n 

} 


n pubkeys  = pkl; 

> 

if  (sksign) 

n pgpSecKeyDestroy  (sksign); 
if  ( rng ) 

n pg p Ra ndom D e s t roy  (rng); 

if  (rfpub) 

n s pg pR i ng F i L e C L o s e (rfpub); 
if  (rfsec) 

n spgpRingFiLeCLose  (rfsec); 
if  (pfpub) 

n pgpFiLeCLose  (pfpub); 
if  (pfsec) 

n pgpFileCLose  (pfsec); 
if  ( L i t e r a L . f i L e na me ) 

n pgpFree  ((char  * ) L i t e r a L . f i L e n ame  ) ; 
if  (err  !=  PGPERR_OK) 
n pgpDeLeteFile  (OutputFiLeRef); 
spgpFinish  (env,  ringpooL,  err); 
return  err; 


i nt 

S i mp L e PG P En c ry p t F i L e (void  *handLe, 
n char  * I npu t F i L e Name , char  *0 u t pu t F i L e Na me , 

int  Signit,  int  Wipe^  int  Armor,  int  Textmode,  int  IDEAOnLy, 
int  UseUntrustedKeys,  char  * Re c i p i e n t L i s t , 
char  *S i gne rKeyl D,  size_t  S i g n e r Bu f f e r Len , 
char  *S i gne r Pa s s ph ra se , size_t  S i g ne r P wd Bu f f e r Le n , 
char  *I D E APa s s p h r a s e , size_t  I D E AP wdBu f f e r Le n , 
char  *Pub I i cKeyRi ngName,  char  * P r i va t e Key R i ng Na me ) 


PGPFi  leRefn 

n 

o 

*refInput=NULL, 

□ n 

n 

n 

n 

*refOutput=NULL, 

n n 

n 

D 

n 

*refPubRi ng=NULL, 

n n 

u 

n 

n 

*refPrivRing=NULL; 

PGPErrorn 

□ 

a 

err; 

/* 
i f 

D 

n 

} 

i f 
□ 
n 
> 

i f 
n 

Q 

> 

i f 
n 
n 
} 


Some  pointer  checks  */ 

( ! I npu t F i L e N ame ) { 

err  = S I M P LE PG PE N C R YPT F I L E_N U LLPO I NT E RTO I N PUT F I LE N AH E ; 
goto  error; 

( ! Ou t pu t F i L e N ame ) { 

err  = S I HPLE PG PE N C R Y PT F I LE_N U LLPO I NT E RTOO UT PUT F I LE N AM E ; 
goto  error; 

( *I nput F i L eName  ==  '\0')  ( 

err  = S I M P LE PG P E N C R Y PT F I LE_ EH PT Y I N PUT F I LE N AM E ST RI NG ; 
goto  error; 

( *0utput F i L eName  ==  '\0')  f 
err  = S I H P LE PG PE N C R Y PT F I L E_ EM PT YOUT PUT F I LE N AH E ST R I NG ; 
goto  error; 


n if  (!(reflnput  = pg  pN  e w F i L e Re  f F r om  F u 1.  L Pa  t h ( I n pu  t F i L e N a me  ) ) ) { 
n n err  = S I M P L E PG P EN C R Y PT F I LE_N OT E NO U G H M E MO R Y F 0 R I N PUT  ST R U C TU R E ; 
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n D 
n > 
n i f 

Q □ 

□ D 

n } 
n i f 
a n 
n n 

□ a 
Q n 
n > 
a if 

□ n 
n n 

□ a 

□ D 

n > 

n err 
n □ 

□ o 
n n 

□ D 


goto  error; 

(!(refOutput  = pg p N e w F i L e R e f F r om F u L L Pa t h ( Ou t pu t F i L e Na me ) ) ) { 
err  = S I M PL E PG P E N C R Y PT F I L E_ N OT E NOU G H M E HO R Y FO R I N PUT S T RU CT U R E ; 
goto  error; 

( Pu b L i c Key R i ng N a me  &S  P u b L i c Key R i ng Na me C 0 ] ) { 
if  ( ! ( r e f Pu b R i n g = pg p N e w F i L e R e f F r om F u L L Pa t h ( Pu b I i c Key R i n g Na me  ) ) ) { 
n err  = S I M P L E PG P E N C R Y PT F I LE_N OT E NO UG H M EHO R Y F OR  I N PUT  ST RU C TU R E ; 
n goto  error; 

} 

( Pr i va t eKey R i ng Name  &S  P r i va t e Key R i ng N a me C 0 3 ) { 
if  ( ! C ref Pri vRi ng  = pg pN e w F i L e R e f F r om F u L L Pa t h ( P r i va t e Key R i ng N a me ) ) ) 
n err  = S I M P LE PG P E N C R Y PT F I L E_N OT E NO U G H H EHO R Y F 0 R I N PUT S T RU C T U R E ; 
n goto  error; 

} 


= S i mp L e PG P En c ry p t F i L eX  ChandLe,  refinput,  refOutput, 

Signit,  Wipe,  Armor,  Textmode,  IDEAOnLy,  U s e Un t r u s t e d Key s , FALSE, 
Reci pi entLi St,  SignerKeylD,  S i g n e r Bu f f e r Le n , S i g n e r Pa s s p h r a s e , 

S i g n e r PwdBu f f e r Le n , I D E A Pa s s p h r a s e , I D E APwdBu f f e r Le n , 

refPubRing,  refPrivRing,  kPGPFiLeOpenHaybeLocalEncode,  NULL,  NULL); 


{ 


error: 

Q 

i f 

(refinput) 

n 

n 

pgpFreeFi leRef 

(refinput); 

Q 

i f 

(refOutput) 

n 

n 

pgpFreeFi leRef 

(refOutput); 

□ 

if 

(refPubRing) 

□ 

& 

pgpFreeFi leRef 

(refPubRing); 

Q 

if 

(refPrivRing) 

n 

n 

pgpFreeFi leRef 

(refPrivRing); 

n 

return  err; 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi : ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpExtK.c  — Simple  PGP  API  Extract  key 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  spgpExtK.c, V 1.12.2.1  1997/06/07  09:51:48  mhu  Exp  $ 

*/ 


#incLude  <stdio.h> 


# include  "spgp.h" 

#incLude  "spgpint.h" 

static  int 

S i mp  L e PG  P E X t r a c t Key  C ommon  (void  *handLe,  char  *LI  s e r I D Key  I D , int  fFileout, 
n PGPFiLeRef  *0u t pu t F i L e Re f , byte  *0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n , 
n PGPFiLeRef  *KeyRingRef) 

{ 


n 

Pg  p E n V 

*env  ; 

/* 

PGP  Local  environment  */ 

n 

R i ng  Poo  L 

*ringpooL;n 

/* 

Key r i ng  poo  L */ 

n 

RingFi Le 

*rf pub;n 

/* 

Public  keyring  file  */ 

□ 

RingSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

n 

R i n g S e t 

*rsuser. 

/* 

Keys  matching  UserIDKeylD  */ 

a 

*rsuser2; 

/* 

Keys  to  extract  */ 

n 

Ringiterator 

*riuser; 

/* 

Iterator  over  rsuser  */ 

n 

Ri ngOb j ect 

*robuser; 

/* 

Keyring  object  for  rsuser2  */ 

n 

Pgp  F i L e 

*pfpub;n 

/* 

Public  keyring  file  handle  */ 

n 

FILE 

*f  d; 

/* 

Output  file  stream  */ 

a 

int 

Level; 

/* 

Iterator  hierarchy  Level  */ 

n 

int 

e r r ; n n 

/* 

Error  variable  */ 

n CvoidIhandLe; 

n /*  Initialize  some  nuLL  pointers  to  simplify  error  cleanup  */ 
n rfpub  = NULL; 

n pfpub  = NULL; 

n rsuser  = NULL; 

n rsuser2  = NULL; 

n env  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  (8env,  SringpooL); 


D 

□ 

n 

n 

n 

n 

o 

n 

n 


/*  Some  pointer  checks  */ 
if  C iUserIDKeylD)  { 

n err  = S I H P LE PG PE  XT R A CTKE Y_N U LLPO I NT E RTOU I DKI D S TR I NG ; 
n goto  error; 

> 

if  ( !UserIDKeyIDC0:)  { 

a err  = S I MP LE PG PEXT R A CTKE Y_U I DKI D ST R I NG I S EMPT Y ; 
n goto  error; 

> 


n if  ( ! env  ||  IringpooL)  { 

n n err  = S I H P LE PG P EXTR ACTKE Y_N OT ENOUG HH EMO R Y FO ROUTPUT ST RU CTU R E ; 
n n goto  error; 
n > 


n /*  Open  keyring  and  get  ringset  */ 
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n 

Q 

D 

n 

□ 

Q 

n 

□ 

n 

□ 

n 

a 

n 

□ 

n 

Q 

n 

Q 

n 

□ 

□ 

n 

a 

□ 

□ 

n 

n 

□ 

a 

Q 

D 

□ 

B 


err  = spgpOpenRi ngf i les  (env,  ringpooL,  KeyRingRef,  NULL, 
n Spfpub,  Srfpub,  Srspub,  NULL,  NULL,  NULL,  FALSE); 
if  (err) 
n goto  error; 

/*  Find  first  matching  key,  add  it  and  aLL  its  children  to  rsuser2  */ 
rsuser  = r i n g S e t C r e a t e (ringpooL); 
rsuserZ  = r i ng S e t C r ea t e (ringpooL); 
if  (Irsuser  ||  !rsuser2)  { 

n err  = S I M P L E PG P EXT R A C TKE Y_ NOT E NO UG H M E MO R Y F 0 R OUT  PUT S T RU CTU R E ; 
n goto  error; 

} 

if  ( ! ri ngSet Fi L terSpec  (rspub,  rsuser,  UserIDKeylD,  PG P_ PKU S E _ E N C R Y PT  ) ) { 
n err  = S I MPLE PG P_N ON E X I S T E NT  EXT R A CT I 0 N KE Y ; 
n goto  error; 

} 

ringSetFreeze  (rsuser); 

riuser  = r i ng  1 1 e r C r e a t e (rsuser); 

if  (Iriuser)  ( 

n err  = S I H P LE PG P E XT R A CTKE Y_N0T E NO UG H M E MO R Y F 0 ROUT  PUT S T RU CT U R E ; 
a goto  error; 

> 


Level  = r i n g 1 1 e r N e X 1 0 b j e c t A ny wh e r e (riuser); 
robuser  = r i ng I t e r C u r r e n t Ob j e c t (riuser.  Level); 
do  { 

n ringSetAddObject  (rsuser2,  robuser); 

B Level  = r i ng I t e r Nex t Ob j e c t Any w h e r e (riuser); 
n if  (Level  > 1) 

B B robuser  = r i ng I t e r C u r r e n t Ob j e c t (riuser, 

} while  (Level  > 1); 

ringIterDestroy  (riuser); 

r i ng S e t De s t roy  (rsuser); 

rsuser  = NULL; 

ringSetFreeze  (rsuser2); 


Level); 


B 

B 

B 

B 

B 

B 

B 

B 


if  (fFileout)  { 
n /*  Open  output  file  */ 

B fd  = pg p F i L e R e f S t d I OOpen  ( Ou t pu t F i L eRef , kPG P F i L eOpe n S t d W r i t e F L a g s , 
BBBBBBBB  k P G P F i L e T y p 6 A r m o r F i L e , NULL); 

B i f ( ! f d)  { 

B B err  = S I M P LE PG P E XT R A CTKE Y_0 UT PUT F I L E C R E AT  I 0 N E RROR ; 

B B goto  error; 

B } 


B B /*  Do  the  extraction.  This  won't  hurt,  much.  */ 

B B err  = s pg p W r i t e A r mo r ed S e t F i L e (fd,  rsuser2,  env); 

B B if(err){ 

B B B pgpStdIOCLose  (fd); 

B B } 

B } e L s e { 

B B /*  Do  it  for  an  output  buffer  */ 

B B size_t  bufsize  = *OutputBufferLen; 

B B err  = s pg p W r i t e A r mo r e d S e t Bu f f e r ( Ou t pu t Bu f f e r , Ou t pu t Bu f f e r Le n , 
B B B rsuser2,  env); 

B B if  (bufsize  < *0 u t pu t Bu f f e r Le n ) 

B B B err  = SIMPLEPGPEXTRACTKEY_OUTPUTBU F FERTOOSMALL; 

B > 

B r i ng Se t Des t roy  (rsuser2); 
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n rsuser2  = NULL; 

error: 

n i f ( rsuser) 

n n r i ng S e t D e s t r oy  (rsuser); 
n if  (rsuser2) 

n n ringSetDestroy  (rsuser2); 
o if  (rfpub) 

n B s pg pR i ng F i L e C L o s e (rfpub); 
n i f ( pf pub  ) 

B B pgpFiLeCLose  (pfpub); 

n spgpFinish  (env,  ringpooL,  err); 

B return  err; 

} 


i nt 

S i mp L ePGPEx t ra c t Key X (void  *handle,  char  *U s e r I D Ke y I D , 

B PGPFileRef  *0u  t p u t F i 1.  e R e f , PGPFileRef  *KeyRingRef) 

{ 

B return  S i mp L e PG P Ex t r a c t Key C ommo n (handle,  UserIDKeylD,  1,  Ou t pu t F i L e Re f , 
n B NULL,  NULL,  KeyRingRef); 

} 


i nt 

S i mp L ePGPEx t ra c t Key  (void  *handLe,  char  *U s e r I D Key  I D , 
B char  *0utput Fi LeName,  char  *KeyRi ngName  ) 

{ 

B PGPFileRefB  b b * r e f 0 u t pu t =N U LL, 

B B B B B B * r e f Key R i ng=N U L L; 

B PGPErrorn  a b err; 


n if  ( ! Ou t pu t F i L eName ) { 

B B return  S I M P LE PGPEXT R A CT KE Y_N U LLPO I NT E RTOOUT PUT F I LEN AM E ; 
n ) 

B if  ( ! Ou t pu t F i L e N ame L 0 3 ) { 

n B return  S I M P LE PG PEXT R A CT KE Y_OUT PUT F I LE N AM E ST R I NG I S EH PT Y ; 
B > 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


if  (!(refOutput  = pg pNe w F i L e Re f F r om F u L L Pa t h ( Ou t pu t F i L e Na me ) ) ) { 
n err  = S I M PLE PG P A D DKE Y_N0T E NOUGH M E HO R Y F 0 R I N PUTSTRU CT U R E ; 

B goto  error; 

} 

if  (KeyRingName  &&  Key R i n g Na me C 0 3 ) { 

n if  ( ! ( r e f Key R i ng  = pg p N e w F i L e Re f F r om F u L L Pa t h (KeyRingName)))  { 
B B err  = S I H P LE PG PA D D KE Y_NOT ENOUG HH EHO R Y FOR  I N PUT  ST RU CTU R E ; 

B B goto  error; 
n } 

} 


n err  = S i mp L e PG PE x t r a c t Key X (handle,  UserIDKeylD,  refOutput,  refKeyRing); 


error: 


n if  (refOutput) 

n B pgp F r ee F i I eRe f (refOutput); 

B i f ( ref KeyRi ng ) 

B B pg p F r ee F i I e Re f (refKeyRing); 
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n return  err; 

} 

i n t 

S i mp L ePGPEx t ra c t Key Buf f e r X (void  *handLe,  char  *U s e r I D Key  I D , 
n byte  *0 u t pu t Bu f f e r , size_t  *0 u t p u t Bu f f e r Le n , PGPFiLeRef  *KeyRingRef) 
{ 

n if  ( ! 0 u t pu t Bu f f e r ) ( 

n n return  S I M P L E PG P E XT R A C TKE Y_N U L LPO I NT E RT 00 UT PUTBU F F E R ; 
n } 

n if  ( ! Ou t pu t Bu f f e r Le n ) { 

n n return  S I M P LE PG PE  XT R A C T KE Y_N U LLPO I N T E RTOOU T PUTBU F F E R LE N ; 
n } 

n return  S i mp I e PG P E x t r a c t Key C ommo n (handle,  UserIDKeylD,  0,  NULL, 
n n 0 u t pu t Bu f f e r , Ou t p u t Bu f f e r Le n , KeyRingRef); 

> 


i n t 

S i mp L e PG P Ex t r a c t Key Bu f f e r (void  *handLe,  char  *U s e r I D Key  I D , 
n byte  *0u t p u t Bu f f e r , size_t  *0 u t p u t Bu f f e r Le n , char  *Key R i n g Na me ) 
{ 

n PGPFileRefn  n n * r e f Ke y R i n g =N U LL; 

n PGPErrorn  n a err; 


□ 

n 

D 

□ 

□ 

n 


if  (KeyRingName  &&  Key R i n g N a me C 0 D ) T 

n if  ( ! ( r e f Key R i ng  = pg pN e w F i L e Re f F r om F u L L Pa t h (KeyRingName)))  { 
a a err  = S I H P LE PG P A D D KE Y_N OT E N 0 UG H M EMO R Y F 0 R I N PUT  ST RU CTU R E ; 
n n goto  error; 
n > 

} 


n err  = S i mp L e PG P E x t r a c t Key Bu f f e r X (handle,  UserIDKeylD,  0 u t pu t Bu f f e r , 
n n OutputBufferLen,  refKeyRing); 


error: 


n if  (refKeyRing) 

n n pg p F r ee F i I e R e f (refKeyRing); 

n return  err; 

> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpNKey.c  — Simple  PGP  API  0 pe n / G e t Ne x t / C L o s e keyrings 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  spgpNKey.c, V 1 . 6. 2.1  1 997/06/07  09:51:48  mhu  Exp  $ 

*/ 


^include  <stdio.h> 


#incLude 

#incLude 

^include 


spgp. h" 

spgpint.h" 

pgpTimeDate.h 


/*  Struct  to  maintain  state  given  that  we  may  have  several  client  apps  */ 
typedef  struct  OpenRing  { 


n 

struct  OpenRing 

* n e X t ; 

/♦ 

chaining  pointer  ♦/ 

n 

void 

♦handle; 

/♦ 

Opaque  handle  from  application 

n 

Pg  p F i 1 e 

*pgpf i le; 

/♦ 

Open  PgpFi  le  ♦/ 

□ 

RingFi  le 

♦ringfi  le; 

/♦ 

RingFile  from  pgpfile  ♦/ 

n 

RingSet  const 

♦ringset; 

/♦ 

RingSet  from  ringfile  ♦/ 

n 

Ringiterator 

♦ringiterator 

;/ 

♦ Ringiterator  from  ringset  ♦/ 

s 

RingPooln  n n 

♦ringpool;n 

/♦ 

Ringpool  for  all  sets  ♦/ 

n 

PgpEnvn  n n n 

♦pgpenv;n 

/♦ 

Global  environment  settings  ♦/ 

n 

i n t 

privring; 

/♦ 

Flag  for  private  ring  ♦/ 

> OpenRing; 

static  OpenRing  *o pe n r i ng  I i s t ; 


/*  Internal  routine  to  open  either  public  or  private  keyring  */ 
static  int 

spgpOpenKeyRing  (void  *handle,  int  privring,  PGPFileRef  *KeyRingRef) 
{ 


n 

OpenRi ng 

♦openri ng; 

/♦ 

List  element  for  open  keyring 

n 

R i ng  Poo  1 

♦ringpool; 

/♦ 

Pool  for  this  session  ♦/ 

a 

PgpEnv 

♦env; 

/♦ 

PGP  environment  ♦/ 

a 

PgpFi  1 e 

♦pfi le;n 

/♦ 

Keyring  file  handle  ♦/ 

n 

RingFi  1 e 

♦ r f i 1 e ; 

/♦ 

Ringfile  for  keyring  ♦/ 

a 

RingSet  const 

♦rset; 

/♦ 

Ringset  for  keyring  ♦/ 

n 

Ringiterator 

♦ r i t e r ; 

/♦ 

Ringiterator  for  keyring  ♦/ 

n 

int 

e r r; 

/♦ 

Return  status  ♦/ 

□ 

int 

eoff; 

/♦ 

Error  code  offset  ♦/ 

□ 

eoff  = 0; 

u 

if  (privring) 

D 

a eoff  = SIHPLEPGPOPENPRIVATEKEYRING_CANTOPENKEYRINGFILE  - 

n 

n n n S I M P LE PG PO PE N PUB  LI C KE Y R I NG_C ANTO P ENKE YR I NG F I L E ; 

Q 

openring  = (OpenRing  ♦ ) pg pM emA 1 1 o c 

(sizeof(OpenRing)); 

Q 

if  (lopenring)  ( 

n 

n return  S I HP L E PG POP E N PUB L I C KE YR I NG 

_0UT0FHEH0RY+eof f ; 

n 

> 

n 

env  = NULL; 

n 

/♦  Create  global 

structures  ♦/ 

n 

spgpl n i t ( &env. 

Sringpool); 
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n /*  XXX  musthandLe  failures  on  these  */ 


n /*  Open  keyrings  and  get  ringsets  */ 
n if  (privring)  { 

a a err  = s pg pO p en R i n g f i L e s (env,  ringpooL,  NULL,  KeyRingRef, 

n B n NULL,  NULL,  NULL,  Spfile,  Srfile,  firset,  FALSE); 

B > e L s e { 

B B err  = s pg pOpe n R i ng f i L e s (env,  ringpooL,  KeyRingRef,  NULL, 

B B B Spfile,  Srfile,  &rset,  NULL,  NULL,  NULL,  FALSE); 

B > 

B if  (err)  { 

B B pgpMemFree  (openring); 

B B return  SIMPLEPGPOPENPUBLICKEYRING_CANTOPENKEYRINGFILE+eoff; 

B } 

B /*  Create  iterator,  point  at  first  key  */ 

B riter  = r i n g I t e r C r ea t e (rset); 

B if  (Iriter)  { 

B B pgpMemFree  (openring); 

B B spgpRingFileCLose  (rfile); 

B B pgpFileCLose  (pfile); 

B B return  SIMPLEPGPOPENPUBLICKEYRING_CANTOPENKEYRINGFILE+eoff; 

B } 

B ringIterNextObject  (riter,  1); 

B /*  Remember  info  for  future  calls  */ 

B op e n r i ng->h a n d I e = handle; 

B op e n r i ng->pg p f i I e = pfile; 

B openring ->ringfile  = rfile; 

B op  e n r i ng ->  r i ng  s e t = rset; 

B ope n r i ng -> r i ng i t e r a t o r = riter; 

B ope n r i ng -> r i ng poo  I = ringpool; 

B openring ->pgpenv  = env; 

B ope n r i ng ->p r i V r i n g = privring; 

B open r i ng->next  = o pe n r i ng  I i s t ; 

B openringlist  = openring; 

B return  0; 

> 


/*  Internal  routine  to  get  next  key  from  either  public  or  private  ring 
static  int 

spgpGetNextKey  (void  *handle,  int  privring,  char  *UserID,  char  *KeyID, 
B int  *KeyLength,  char  *C r ea t i on  Da t e , char  * E xp i r a t i on  Da t e , 

B int  * Va I i d i t y D a y s , int  *KeyType,  char  *KeyTypeES,  char  *KeyState) 


{ 

B OpenRing 
B char  const 
B s i ze_t 
B Ringiterator 
B RingSet  const 
B RingObject 

B 

B wo  r d32 

B 


*openring;  /*  List  element  for  open  keyring 

* s name ; 

I n a m e ; 

* r i t e r ; 

* r s e t ; 

* name , 

*key; 

c da  t e , 
e d a t e ; 


*/ 


*/ 
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a byte 
n byte 
o 1 nt 
a -i  n t 


pkaLg; 
kidC8]; 
k e y u s e ; 
eof  f ; 


n eoff=0; 
n if  (privring) 

n n eoff  = S I M PLE  PG  PG  ETN  EXT  P R I V AT  EKE  Y_N  U L LU  S E R I D S TR I NG  PO  I NT  E R - 

n n n n SIMPLEPGPGETNEXTPUBLICKEY_NULLUSERIDSTRINGPOINTER; 


□ 

a 

n 

D 

n 

□ 

o 

□ 

D 

O 

□ 

n 

n 

D 

n 

□ 

□ 

a 


if  (lUserlD) 

n return  SIMPLEPGPGETNEXTPUBLICKEY_NULLUSERIDSTRINGPOINTER+eoff; 
if  (IKeylD) 

n return  S I M PL E PG PG ETN E XT  PUB L I C KE Y_N U LLKE Y I D ST R I NG PO I NT E R + e o f f ; 
if  (IKeyLength) 

n return  S I H P LE PG PG ET N E XT  PUB  LI C KE Y_N U LLKE Y L E NGT H PO I NT E R + e o f f ; 
if  (!CreationDate) 

n return  SIMPLEPGPGETNEXTPUBLICKEY_NULLCREATIONDATEPOINTER+eoff; 
if  ( ! Exp i r a t i on D a t e ) 

n return  SIMPLEPGPGETNEXTPUBLICKEY_NULLEXPIRATIONDATEPOINTER+eoff; 
if  (IVaLidityDays) 

n return  S I H P L E PG PG ETN E XT  PUB  LI C KE Y_N U LL V A LI D D A YS PO I NT E R + eof f ; 
if  ( ! KeyType ) 

n return  S I H PL E PG PG ETN E XT  PUB  LI C KE Y_N U L LKE YT YP E PO I NT E R + e o f f ; 
if  (IKeyTypeES) 

n return  S I M P LE PG PG ET N EXTPUBLI C KE Y_N U L LKE YT YP E E S PO I NT E R + eo f f ; 
if  ( ! KeyState) 

n return  S I H P LE PG PG ETN EXT PU B LI C KE Y_N U LLKE Y S T AT E PO I NT E R + e o f f ; 


n for  ( ope n r i ng  = ope n r i ng I i s t ; openring;  ope n r i ng  = ope n r i ng->n e x t ) 
n n if  ( open r i ng-> ha nd L e = = h a n d L e SS  open r i ng->p r i v r i n g = = p r i v r i ng  ) 
n n n break; 

n if  (lopenring)  { 

n n return  S I MP LE PG PG ETN E XT  PUB L I C KE Y_B A D H AN D LE  + eo f f ; 

n > 


n riter  = ope n r i ng-> r i ng i t e r a t o r ; 
n rset  = open r i ng -> r i ng s e t ; 

n /*  Scan  for  next  name  on  keyring  */ 
n for(;;){ 

n n if  ( ri ngIterNextOb j ect  (riter,  2)  < 2)  { 
n n n if  ( r i ng I t e r Nex t Ob j e c t (riter,  1)  < 1)  ( 

n n n n return  S I HP LE PG PG ETN EXT  PUB  LI C KE Y_ EO F ; 

n n n > 

n n >else{ 

n n n name  = r i ng I t e r C u r r e n t Ob j e c t (riter,  2); 

n n n if  ( r i n g Ob j e c t Ty pe ( n a me ) ==  R I NGT Y P E_N AH E ) 

a n a n break; 

n n > 

n } 

n key  = r i n g I t e r C u r r e n t Ob j e c t (riter,  1); 

n sname  = ringNameName  (rset,  name,  SLname); 
n memcpy  (UserlD,  sname,  (name); 
n U s e r I D C L name D = '\0'; 
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n KeyIDCe:  = '0'; 

n KeylDCID  = 'x'; 

n ringKeyIDS  (rset,  key,  &pkaLg,  kid); 

n s pg pKey I D T e X t 8 (KeyID+2,  kid); 

n *KeyLength  = ringKeyBits  (rset,  key); 

n cdate  = r i n g Key C r e a t i o n (rset,  key); 
n s pg p D a t eT e X 1 1 0 ( C r e a t i on D a t e , cdate); 

n edate  = ringKeyExpiration  (rset,  key); 

n spgpDateText10  (ExpirationDate,  edate); 

n * Va L i d i t y D a y s = edate  ? (int)((edate  - cdate)  / (36001*24))  : 0; 

n *KeyType  = ( p ka L g ==PG P_ PK A LG_ R S A ) ? KEYS_OLD  : 
n ( pka Lg==PGP_PKALG_RSA_ENC ) ? KEYS.ENCR  : 

n CpkaLg==PGP_PKALG_RSA_SIG)  ? KEYS_SIGN  : 0; 

n keyuse  = ringKeyUse  (rset,  key); 

n if  (keyuse  ==  PG P_PKU S E_ S I G N_ E N C R Y PT ) 

n a strcpy  (KeyTypeES,  "ES"); 

a else  if  (keyuse  ==  PG P_ PKU S E_ E N C R Y PT ) 
a a strcpy  (KeyTypeES,  "E"); 

a else 

a a strcpy  (KeyTypeES,  "S"); 

a if  ( r i ngKey Revoked  (rset,  key)) 

a a strcpy  (KeyState,  "rev"); 

a else  if  (edate  &&  ( wo r d32 ) pg pG e t T i me ( ) > edate) 
a a strcpy  (KeyState,  "exp"); 

a else  if  ( ri ngKeyDi sabLed  (rset,  key)) 

a a strcpy  (KeyState,  "dis"); 

a else  if  (edate) 

a a spgpExpText3  (KeyState,  (int)((edate  - pgpGetTime())  / (36001*24))); 
a else 

a a strcpy  (KeyState,  " "); 

a return  0; 

} 


/*  Internal  routine  to  close  either  private  or  public  ring  */ 
static  i nt 

s pg p C I o s e Key R i n g (void  *handle,  int  privring) 

{ 


n 

OpenRi ng 

*openri ng. 

/* 

List  element  for  open  keyring  */ 

n 

**popenring; 

/* 

Pointer  to  next  of  prev  element  */ 

n 

Ri ngPoo  1 

*ringpool; 

/* 

Global  ring  pool  for  this  session  */ 

n 

PgpEnva  n 

n 

a 

*env; a n 

/* 

Global  environment  with  settings  */ 

n 

int 

eoff; 

a eoff  = 0; 
a if  (privring) 

a a eoff  = S I M P LE PG P C LO S E PR  I V AT E KE Y R I N G_B A D H A N D L E - 
anna  S I M P LE PG PC LO S E PUB L I C KE Y R I N G_B A D H AN D LE ; 
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n for  ( pope n r i ng  = 8op e n r i ng  I i s t ; *popenring;  pop e n r i ng  = & ( * pope n r i ng ) ->n ex t ) 
n n if  ( ( *pop e n r i n g ) -> h a nd L e = = ha nd I e &&  ( * po p e n r i ng ) -> p r i v r i ng  = = p r i v r i ng ) 

n n n break; 

n if  ( ! *popen r i ng ) { 

n n return  S I M P L E PG PC LO S E PUB  LI C KE Y R I NG_B A D H AN D LE  + e o f f ; 
n } 

n openring  = *popenring; 
n *popenring  = ope n r i ng->n ex t ; 

n ringpooL  = op en r i ng -> r i ng poo L ; 
n env  = open r i ng->pg p e n v ; 

n r i ng 1 1 e r De s t r oy  ( ope n r i ng-> r i ng i t e r a t o r ) ; 

n spgpRi ng F i L eC L ose  ( open r i ng -> r i ng f i L e ) ; 
n pgpFileCLose  ( ope n r i ng->pg p f i L e ) ; 
n memset  (openring,  0,  sizeof  ( *open r i ng  ) ) ; 
n pgpMemFree  (openring); 

n spgpFinish  (env,  ringpooL,  ( i n t ) h a n d L e ) ; 

n return  0; 

} 

/*  Entry  points  for  "public  keyring"  versions  */ 
i nt 

S i mp L e PG POpe n Pu b L i c Key R i ng  (void  *handle,  char  *Pu b L i c Key R i n g N a me ) 

{ 

n PGPFileRefn  *refPubRing  = NULL; 
n PGPErrorn  err; 

n if  ( Pub L i c Key R i n g Na me  &S  Pu b L i c Key R i ng Na me C 0 3 ) { 

n n if  ( ! ( ref PubRi  ng  = pg pN e w F i L e Re f F r om F u L I Pa t h ( Pu b L i c Key R i ng Na me ) ) ) ( 
n n n err  = KE RN E L_0UT_0 F _H EH ; 

n n n gotoerror; 

n n > 

n } 

□ 

n err  = S i mp L e PG POp e n Pu b L i c Key R i n g X (handle,  refPubRing); 

error: 

n if  (refPubRing) 

n n pg p F r ee F i L e R e f (refPubRing); 
n return  err; 

} 

i n t 

S i mp L ePGPOpenPub L i cKey R i ngX  (void  *handLe,  PGPFileRef  * Pu b L i c Key R i ng Re f ) 

{ 

n return  spg pOpe n Key R i ng  (handle,  0,  Pub L i c Key R i ng Re f ) ; 

> 

i n t 

S i mp I e PG PGe t N ex t Pu b L i c Key  (void  *handLe,  char  *UserID,  char  *KeyID, 
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n int  *KeyLength,  char  * C r e a t i o n Da t e , char  * E x p i r a t i on D a t e , 
n int  * Va L i d i t y D a y s , int  *KeyType,  char  *KeyTypeES,  char  *KeyState) 

{ 

n return  s pg pG e t N e x t Key  (handle,  0,  UserlD,  KeylD,  KeyLength, 
n n C r ea t i on  Da t e,  E x p i r a t i on  Da t e , Va L i d i t y Da y s , 
a n KeyType,  KeyTypeES,  KeyState); 

> 

i nt 

S i mp L e PG PC L o s e Pu b L i c Key R i n g (void  *handle) 

{ 

n return  s pg p C L o s e Key R i n g (handle,  0); 

> 

/*  Entry  points  for  "private  keyring"  versions  */ 
int 

S i mp I e PG POpe n P r i va t e Key R i n g (void  *handle,  char  * P r i va t e Key R i n g Na me ) 

{ 

n PGPFileRefn  *refPrivRing  = NULL; 
n PGPErrorn  err; 

n if  ( P r i va t e Key R i ng Na me  &&  P r i va t e Key R i n g Na me C 0 D ) { 

n n if  ( ! ( r e f P r i V R i ng  = pg pN e w F i I e R e f F r om F u I I Pa t h ( P r i va t eKey R i ng N a me ) ) ) ( 
n n n err  = KE R N E L_0UT_0 F_M EM ; 

n n B gotoerror; 

B B } 

n > 

B 

n err  = SimplePGPOpenPrivateKeyRingX  (handle,  refPrivRing); 

error: 

B if  (refPrivRing) 

n B pgpFreeFileRef  (refPrivRing); 

n return  err; 

} 

i nt 

SimplePGPOpenPrivateKeyRingX  (void  *handle,  PGPFileRef  *P r i va t e Key R i n g R e f ) 

{ 

B return  spgpOpenKeyRi ng  (handle,  1,  P r i va t e Key R i ng Re f ) ; 

> 

int 

S i mp I e PG PGe t N ex t P r i va t eKey  (void  *handle,  char  *UserID,  char  *KeylD, 

B int  *KeyLength,  char  * C r e a t i on  Da t e , char  * Ex p i r a t i on  Da t e , 

B int  * Va I i d i t y Da y s , int  *KeyType,  char  *KeyTypeES,  char  *KeyState) 

{ 

B return  s pg pGe t N e x t Key  (handle,  1,  UserlD,  KeylD,  KeyLength, 

B B Creati onDate,  Exp i ra t i on  Da t e,  Va I i di tyDays, 

B B KeyType,  KeyTypeES,  KeyState); 

> 

int 

S i mp I e PGPC lose P r i va t eKey R i ng  (void  *handle) 

{ 

B return  spgpCloseKeyRing  (handle,  1); 
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> 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpRBuf.c  --  Simple  PGP  API  Receive  buffer 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights 

* 

* $Id:  spgpRBuf.c, V 1.18.2.3  1997/06/07  09:51:49  mhu  Exp  $ 

*/ 


reserved. 


#incLude  <stdio.h> 


^include  "spgp.h" 
#incLude  "spgpint.h 


i nt  SPGPExport 


Si 

mplePGPReceiveBufferX 

(void  *handle. 

Q 

char  * I n p u t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  * I n p u t Bu f f e r N a me , 

□ 

char  *0u t pu t Bu f f e r , 

size_t  *0utputBuf f erLen, 

char  *DecryptPassPhrase,  size_ 

t d e c r y p t P wdBu f f e r Le n , 

n 

int  *S i g n a t u r e S t a t u s 

, byte  *S i gne rKey I D,  size_t  S i g n e r Key  I D Bu f Le n , 

Q 

char  *Signer,  size_t 

SignerBufLen, 

n 

byte  *SignOate,  size 

_t  S i g n Da t eBu f Le n 

, Boolean  * F o r You r Ey e s On  1 y , 

□ 

PGPFileRef  *Pub 1 i c Key R i n g Re f , 

PGPFileRef  * P r i va t e Key R i ng Re f , 

□ 

r 

SPGPProgressCa 1 IBack 

callBack, 

void  * 

ca  1 IBackArg ) 

\ 

a 

Pg  p E n V 

* e n V ; 

/* 

PGP  local  environment  */ 

n 

R i ng  Poo  1 

*ringpool 

;b  /* 

Keyring  pool  */ 

n 

RingFi  le 

*rfpub;B 

/* 

Public  keyring  file  */ 

u 

Ri ngSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

a 

RingFi  le 

*rfsec;B 

/* 

Secret  keyring  file  */ 

n 

RingSet  const 

*rssec;B 

/* 

Secret  keyring  ringset  */ 

B 

RingSetnn  b b 

*rsboth;B 

/* 

Union  of  public  and  priv  ringsets 

n 

Pg  p F i 1 e 

*pf pub,B 

/* 

Public  keyring  file  handle  */ 

D 

*pf  se  c ; n 

/* 

Secret  keyring  file  handle  */ 

n 

PgpPipeline 

*head,nB 

/* 

Pipeline  head  */ 

n 

* * t a i 1 ; 

/* 

Pipeline  tail  pointer  */ 

n 

PgpUICb 

u i ; B B 

/* 

Callback  functions  */ 

n 

SPgpSi mpUI 

ui_arg; 

/* 

Parameters  for  callbacks  */ 

□ 

int 

e r r ; B b 

/* 

Error  variable  */ 

n 

(void)handle; 

n 

(void)InputBufferName; 

n ( VO i d ) d e c r y p t PudBu f f e r Le n ; 

n /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 

n rsboth  = NULL; 

n env  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  (8env,  &ringpool); 


n /*  Some  pointer  checks  */ 
n if  C ! I n p u t Bu f f e r ) { 

n n err  = S I M P L E PG PRE C E I V EBU F F E R_N U L LPO I NT E RTO I N PUTBU F F E R ; 
n B goto  error; 

B > 

B if  ( ! OutputBuf f er)  { 
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a a err  = S I M P LE PG PR E C E I V E BU F F E R_NU LLPO I NT E RTOO UT PUTBU F F E R ; 
n n goto  error; 

n > 

n if  ( Input Buf f e r Len  ==  0)  { 

n n err  = S I MP L E PG PR E C E I V EBU F F E R_I N PUTBU F F E R LEN GT H I S Z E R 0 ; 
n n goto  error; 

n > 

n if  Cfenv  ||  IringpooL)  -C 

n n err  = S I M P LE  PG  P E N C R Y PT  F I L E_N  OT  E NOUG  H M EHO  R Y F OR  I N P UT  S T R U C TU  R E ; 
n n goto  error; 

n > 

n /*  Open  keyrings  and  get  ringsets  */ 
n err  = s pg pOpe n R i ng f i L e s (env,  ringpooL, 
n n Pu b I i c Key R i ng Re f , P r i va t e Key R i ng Re f , 

n n Spfpub,  Srfpub,  Krspub,  Spfsec,  Srfsec,  Srssec,  FALSE); 
n if  (err) 

n n goto  error; 

n /*  Create  union  of  the  two  ringsets  */ 

n rsboth  = ringSetUnion  (rspub,  rssec); 

n /*  Setup  the  UI  callback  functions  S args  */ 
a spgpUISetup  (&ui,  &ui_arg); 

n ui_arg.env  = env;D  n n n /*  Environment  */ 

n u i _a r g . r i ng s e t = rsboth;n  n /*  Keyrings  */ 

n ui_arg.passphrase  = DecryptPassPhrase;n  /*  Key/msg  passphrase  */ 
a u i _a rg . ou t bu f = (byte  * ) Ou t p u t Bu f f e r ; n /*  Output  buffer  */ 
n ui_arg.outbufsize  = *OutputBufferLen; 

n /*  Set  up  pipeline  */ 

n head  = NULL; 

n tail  = pgp De c r y p t P i pe I i n e C r e a t e (&head,  env,  NULL,  &ui,  &ui_arg); 
n /*  Send  data  through  */ 

n err  = spgpMemPump  (head,  (byte  * ) I npu t Buf f e r , I n pu t B u f f e r Le n , 

a □ n a a a callBack,  callBackArg); 

a if  (!err)  { 

n n if  ( u i _a r g . ou t bu f ) { 

n n n /*  If  we  got  no  data,  outbuf  will  still  be  non-NULL  */ 

n n n /*  Gets  recognized  in  s pg p De c ry p t S t a t u s */ 

n n lelsef 

n n n err  = s pg pMemOu t p u t ( u i _a r g . p i p e bu f , u i _a rg . ou t b u f s i z e , 

n n n n Ou t pu t Bu f f e r Le n ) ; 

n n } 

n } 

n head->tea rdown  (head); 

n r i ng Se t De s t r oy  (rsboth); 

n rsboth  = NULL; 

n /*  PGPERR_CB_I NVALI D means  we  aborted  due  to  no  valid  ESK  decrypt  */ 
n if  (err  !=  PGPERR_0K  &S  err  !=  PG P E R R_ C B_ I N V A L I D ) 
n n goto  error; 

n /*  Set  FYEO  mode  if  appropriate  */ 
n if  ( F o r You r Ey e s On  I y ) { 

n n * Fo r You r Ey e s On  I y = ui_arg.fyeo; 

n } 
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n /*  Set  signer  info  if  avail  */ 

n s pg pS i gn S t a t u s (&ui_arg,  rspub,  S i g n a t u r e S t a t u s , 
n n SignerKeylD,  S i g n e r Key  I D Bu f Le n , Signer,  S i g n e r Bu f Le n , 
a u SignDate,  S i g n Da t eBu f Le n ) ; 

n /*  Calculate  error  codes,  in  future  return  other  recipients  */ 
n err  = spgpDecryptStatus  C&ui_arg,  rspub,  NULL,  0); 

n /*  Through  with  key  rings,  close  them  */ 
n s pg p R i ng F i I e C I os e (rfpub); 
n s pg p R i ng F i I e C I o s e (rfsec); 
n pgpFileClose  (pfpub); 

n pgpFileClose  (pfsec); 

n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 


error : 

n if  (rsboth) 

n n r i ng S e t D e s t r oy  (rsboth); 

n i f ( rfpub) 

n n s pg p R i n g F i I e C I o s e (rfpub); 

n if  (rfsec) 

n n s pgpR i ng F i I e C I os e (rfsec); 

n if  (pfpub) 

n n pgpFileClose  (pfpub); 

n if  (pfsec) 

n n pgpFileClose  (pfsec); 

n spgpFinish  (env,  ringpool,  err); 

n return  err; 

> 

i n t 

S i mp I e PG PRe c e i ve Bu f f e r (void  *handle, 

n char  * I npu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  * I np u t Bu f f e r Na me , 
n char  *0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n , 

char  * D e c r y p t Pa s s Ph r a s e , size_t  d e c r y p t P wdBu f f e r Le n , 
n int  *Si gnatureStatus,  char  *Signer,  size_t  S i g n e r Bu f Len , 
n byte  *SignDate,  size_t  S i g n Da t e Bu f Le n , 
n char  * Pu b I i c Key R i ng Na me , char  * P r i va t e Key R i n g N ame ) 

{ 

n PGPFileRefn  n n * r e f Pu b R i ng =N U LL, 

n n n n n n *refPrivRing=NULL; 

n PGPErrorn  n n err; 


D 

n 

n 

a 

D 

n 

B 

B 

B 

B 

B 

B 

B 


if  ( Pu b I i c Key R i n g Na me  &&  Pub  I i c Key R i ng Na me L 0 3 ) { 

n if  ( ! ( r e f Pu b R i ng  = pg p N e w F i I e Re f F r om F u I I Pa t h ( Pu b I i c Key R i ng Name ) ) ) ( 
n B err  = S I H P LE PG P R E C E 1 V E F I L E_N OT E NO UG H H E MO R Y F 0 R I N PUT S T RU C T U R E ; 
n B goto  error; 

n > 

} 

if  ( P r i va t e Key R i ng Na me  SS  P r i va t e Key R i ng Name C 0 3 ) { 

n if  ( ! ( r e f Pr i vR i ng  = pg p N e w F i I e Re f F r om F u I I Pa t h ( P r i va t e Key R i ng Name )) ) { 
B n err  = S I M PLE PG PR E C E I V E F I LE_N0T E NOU G H M EMOR Y F 0 R I N PUT  ST RU CTU R E ; 

B B goto  error; 

B > 

} 

err  = S i mp I e PG P Re c e i veBu f f e r X (handle,  InputBuffer,  I n p u t Bu f f e r Le n , 
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H n I npu t Bu f f e r N a me , Ou t p u t Bu f f e r , Ou t pu t Bu f f e r Len , 

n a de c ry p t Pwd Bu f f e r Le n , S i g n a t u r e S t a t u s , NULL,  0, 

n n Signer,  S i g n e r Bu f Le n , SignDate,  S i g n Da t e Bu f Le n , 
n n refPubRing,  refPrivRing,  NULL,  NULL); 

error: 


n if  CrefPubRing) 

n n pg p F r e e F i L e R e f (refPubRing); 

n if  (refPrivRing) 

n n pgp F ree F i L eRef  (refPrivRing); 
n return  err; 

} 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpRFile.c  — Simple  PGP  API  Receive  file 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  s pg p R F i I e . c , V 1.20.2.4  1997/06/07  09:51:49  mhw  Exp  $ 

*/ 

#include  <stdio.h> 

//include  "spgp.h" 

//include  "spgpint.h" 

int  SPGPExport 

S i mp I e PG PR e c e i V e F i I e X (void  *handle, 

n PGPFileRef  * I n pu t F i I e R e f , PGPFileRef  *0 u t p u t F i I e R e f , 
char  * De c ry p t Pa s s Ph r a se , size_t  d e c r y p t P wdBu f f e r Le n , 
n int  * S i g na t u r e S t a t u s , byte  *S i gne rKeyl D,  size_t  S i g n e r Key  I DBu f Le n , 
n char  *Signer,  size_t  S i g n e r Bu f Le n , 

a byte  *SignDate,  size_t  S i g n Da t e Bu f Len , Boolean  * F o r You r Ey e s 0 n I y , 
n PGPFileRef  * Pu b I i c Key R i ng R e f , PGPFileRef  * P r i va t e Key R i ng Re f , 
a PG P F i I e Ope n F I a g s localEncode,  S PG PP r og r e s s C a I I Ba c k callBack, 

n void  * c a I I Ba c k A r g ) 

{ 


n 

Pg  p E n V 

*env  ; 

/* 

PGP  local  environment  */ 

□ 

Ri ngPool 

*ringpool;n 

/* 

Keyring  pool  */ 

Q 

RingFi  le 

*rfpub;n 

/* 

Public  keyring  file  */ 

B 

Ri ngSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

B 

RingFi  le 

*rfsec;n 

/* 

Secret  keyring  file  */ 

B 

Ri ngSet  const 

*rssec;n 

/* 

Secret  keyring  ringset  */ 

B 

Ri ngSetnn  n 

B 

*rsboth;n 

/* 

Union  of  public  and  priv  ringsets  */ 

B 

Pg  p F i 1 e 

*pf pub,n 

/* 

Public  keyring  file  handle  */ 

B 

*pfsec;n 

/* 

Secret  keyring  file  handle  */ 

B 

PgpFi leRead 

*pfri n;n 

/* 

Input  file  handle  */ 

B 

PgpPipeline 

♦head, an 

/* 

Pipeline  head  */ 

B 

* * t a i 1 ; 

/* 

Pipeline  tail  pointer  */ 

fl 

PgpUICb 

u i ; n n 

/* 

Callback  functions  */ 

B 

SPgpSimpUI 

u i _a  r g ; 

/* 

Parameters  for  callbacks  */ 

B 

i nt 

e r r ; n n 

/* 

Error  variable  */ 

n pg p A s s e r t ( ( I o c a I En c ode  & “ ( kPG P F i I eOpe nMay be Lo ca I E n c od e 

n n n n n n n | kPG  P F i I eOpe  n N oHa  cB  i n C R C 0 ka  y ) ) ==  0); 
n (void)handle; 

n ( VO i d ) de c r y p t Pwd Bu f f e r Le n ; 

a /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 

n rsboth  = NULL; 

a env  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  (&env,  Sringpool); 

n if  ( ! env  ||  Iringpool)  ( 

n n err  = S I H P LE PG PR E C E I V E F I LE_N0T E N OU G HH EHO R Y F 0 R I N PUT S T R U CTU R E ; 
n n goto  error; 

n > 
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n /*  Open  keyrings  and  get  ringsets  */ 
a err  = s pg pOpen R i n g f i L e s (env,  ringpooL, 
n n Pub L i c Key R i ng Re f , P r i va t e Key R i ng R e f , 

n n Spfpub,  Srfpub,  Srspub,  Spfsec,  Srfsec,  Srssec,  FALSE); 
n if  (err) 

n n goto  error; 

n /*  Create  union  of  the  two  ringsets  */ 

n rsboth  = ringSetUnion  (rspub,  rssec); 

n /*  Setup  the  UI  callback  functions  & args  */ 
n spgpUlSetup  (8ui,  &ui_arg); 

n ui_arg.env  = env;n  n n n /*  Environment  */ 

n u i _a r g . r i ng s e t = rsboth;n  n /*  Keyrings  */ 

n u i _a r g . pa s s p h r a s e = De c ry p t Pa s s P h r a s e ; /*  Key/msg  passphrase  */ 

n u i _a rg . out  ref  = Ou t pu t F i I e R e f ; n /*  Filename  */ 

n u i _a r g . I o c a I E n c ode  = localEncode; 

n /*  Open  input  file  (output  file  will  be  opened  by  library  callback)  */ 
n pfrin  = pgpFileRefReadCreate  (InputFileRef,  kPGPFileOpenReadPerm,  NULL); 
n if  (Ipfrin)  { 

n n err  = S I H P LE PG PR E C E I V E F I L E_ I N PUT F I L E D 0 E S NOT E X I ST ; 
n n goto  error; 

n } 

Q pg p F i I e Rea d S e t C a I I Ba c k ( p f r i n , callBack,  c a I I Ba c k A r g ) ; 


n /*  Set  up  pipeline  */ 

n head  = NULL; 

n tail  = pgpDecryptPipelineCreate  (&head,  env,  NULL,  8ui,  8ui_arg); 

n /*  Send  data  through  */ 

n err  = pg p F i I e Rea d Pump  (pfrin,  head); 
n pgpFileReadDestroy  (pfrin); 

n head->sizeAdvise  (head,  0); 

n h e a d-> t ea r down  (head); 

n ringSetDestroy  (rsboth); 

n rsboth  = NULL; 

n /*  PG PERR_C B_ I N V A LI D means  we  aborted  due  to  no  valid  ESK  decrypt  */ 
n if  (err  !=  PGPERR_0K  88  err  !=  PGPERR_CB_I NVALI D ) 
n n goto  error; 


n /*  Set  FYEO  mode  if  appropriate  */ 
n if  ( F o r You r Ey e sOn I y ) { 
n n * F o r Yo u r Ey e s On  I y = ui_arg.fyeo; 

n > 

n /*  Set  signer  info  if  avail  */ 

n spgpSi gnStatus  (8ui_arg,  rspub,  S i g na t u r e S t a t u s , 
n n SignerKeylD,  S i g ne r Key  I DBu f Len , Signer,  S i gne rBuf Len, 
a n SignDate,  SignDateBufLen); 


n /*  Calculate  error  codes,  in  future  return  other  recipients  */ 


#if  0 

n { char  t mpb u f C 1 02 A D ; 

n size_t  tmpbufsize  = s i z eo f ( t mp bu f ) ; 

n err  = spgpDecryptStatus  (8ui_arg,  rspub,  tmpbuf,  8tmpbufsize); 
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n tmpbufCminCtmpbufsize,  sizeof(tmpbuf)-l)]  = '\0'; 
n printf  ("Also  to:  %s\n",  tmpbuf); 
n } 

#endi f 

n err  = spgpDecryptStatus  C&ui_arg,  rspub,  NULL,  NULL); 

n /*  Through  with  key  rings,  close  them  */ 
n s pg p R i n g F i I e C I o s e (rfpub); 

H s pg p R i n g F i I e C I o s e (rfsec); 
a pgpFileClose  (pfpub); 

n pgpFileClose  (pfsec); 

n rsboth  = NULL; 

n rfpub  = rfsec  = NULL; 

n pfpub  = pfsec  = NULL; 


error: 

□ 

i f 

(rsboth) 

n 

n 

ringSetDestroy  (rsboth); 

n 

i f 

( rfpub) 

Q 

□ 

spgpRingFileClose  (rfpub); 

Q 

1 f 

(rfsec) 

n 

Q 

spgpRingFileClose  (rfsec); 

n 

i f 

(pfpub) 

a 

n 

pgpFileClose  (pfpub); 

n 

i f 

(pfsec) 

n 

n 

pgpFileClose  (pfsec); 

n 

i f 

(err  !=  PGPERR_0K) 

u 

Et 

pg p D e 1 e t e F i 1 e ( Ou  t pu  t F i 1 e Re f ) 

n 

spgpFinish  (env,  ringpool,  err); 

n 

return  err; 

i n t 

S i mp I e PG P Re c e i ve F i I e (void  *handle, 
n char  * I n pu t F i I e Na me , char  *0u t pu t F i I e Na me , 

char  * De c ry p t Pa s s Ph ra se , size_t  de c r y p t P wdBu f f e r Le n , 
n int  *Si gnatureStatus,  char  *Signer,  size_t  S i g n e r Bu f Le n , 
n byte  *SignDate,  size_t  S i g n Da t eBu f Le n , 
n char  * Pub  I i c Key R i ng Na me , char  * P r i va t e Key R i n g Na me ) 


PGPFi  leRef n 

o 

n 

*refInput=NULL, 

Q Q 

n 

n 

n 

*refOutput=NULL, 

n n 

n 

n 

n 

*refPubRing=NULL, 

n n 

n 

n 

n 

*refPrivRing=NULL; 

PGPErrorn 

D 

n 

err; 

D 

n 

□ 

□ 

n 

n 

D 

n 

n 

n 

n 


/*  Some  pointer  checks  */ 
if  (! Input Fi leName ) { 

n err  = S I H P LE PG PR E C E I V E F I L E_N U L LPO I NT E RTO I N PUT F I LE N AM E ; 
n goto  error; 

> 

if  ( ! Ou t pu t F i I eName ) ( 

n err  = S I M PLE PG PR E C E I V E F I L E_N U LLPO I NT E RTOOUT PUT F I LEN AM E ; 
n goto  error; 

> 

if  ( *I npu t F i I eName  ==  '\0')  I 

a err  = S I MP  L E PG  P R E C E I V E F I LE_  EMPT  Y I N PUT  F I LE  N AM  E S T R I NG  ; 
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D 

D 

n 

□ 

D 

o 


n goto  error; 

> 

if  ( *0u t pu t F i I e N a me  ==  '\0')  i 

n err  = S I M P LE PG P R E C E I V E F I L E _ EHPT YOUT PUT F I L E N AM E ST R I N G ; 
n goto  error; 

> 


n if  (!(reflnput  = pg pN e w F i L e R e f F r om F u L L Pa t h ( I nput F i L eName ) ) ) { 
n n err  = S I M P LE PG P R E C E I V E F I L E_ NOT EN OU G H M E MO R Y F 0 R I N PUT S T R U C TU R E ; 

a a goto  error; 

n } 

n if  (!(refOutput  = pg pN e w F i L e R e f F r om F u L L Pa t h C Ou t pu t F i L e N a me ) ) ) { 
n n err  = SIMPLEPGPRECEIVEFILE_NOTENOUGHMEMORYFORINPUTSTRUCTURE; 

n n goto  error; 

n } 

n if  ( Pub L i c Key R i n g N ame  &&  Pu b L i c Key R i ng Na me C 0 3 ) { 

n n if  ( ! ( r e f Pu b R i n g = pg p N e w F i L e Re f F r om F u L L Pa t h ( Pub L i c Key R i ng Na me ) ) ) { 
n n n err  = S I M P LE PG PR E C E I V E F I LE_N OT E NOU G H M EMO R Y F 0 R I N PUT S TRU CTU R E ; 
n n n gotoerror; 

n n } 

n > 

n if  ( P r i va t e Key R i n g Na me  SS  P r i va t e Key R i n g Na me C 0 3 ) { 

n n if  ( ! ( r e f P r i vR  i ng  = pg  p N e w F i L e Re  f F r om  F u L L Pa  t h ( P r i va  t eKey  R i ng  Na  me  ) ) ) f 

n n n err  = S I MP L E PG PR E C E I V E F I L E_NOT E N 0 UG H H E MOR Y FO R I N PUT  ST RU CTU R E ; 

n n n gotoerror; 

n n > 

n } 


n 

Q 

□ 


a 

□ 


err  = S i mp L e PG P Re c e i ve F i L e X (handle,  refinput,  refOutput, 
n DecryptPassPhrase,  de c r y p t P wdBu f f e r Le n , S i g na t u r e S t a t u s , 
n NULL,  0,  Signer,  S i g n e r Bu f Le n , SignDate,  S i g n D a t e Bu f Len , NULL, 
n refPubRing,  refPrivRing, 

B k PG P F i L e Ope n Ma y be Lo c a L E n c od e , NULL,  NULL); 


error: 


Q 

if 

(refinput) 

n 

n 

pgpFreeFi leRef 

(refinput); 

n 

i f 

(refOutput) 

n 

n 

pgpFreeFi leRef 

(refOutput); 

n 

i f 

(refPubRing) 

n 

s 

pgpFreeFi leRef 

(refPubRing); 

n 

i f 

(refPrivRing) 

n 

D 

pgpFreeFi leRef 

(refPrivRing) 

a 

> 

return  err; 

/* 

* 

Local  Variables: 

it 

t a b- 

width:  4 

* 

End  : 

★ 

V i : 

ts=4  sw=4 

it 

vim: 

s i 

*/ 
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/* 

* spgpRNG.c  — Simple  PGP  API  (extended)  Random  Number  Generator 

* related  routines 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgpRNG.c, V 1.1. 2.1  1 997/06/07  09:51:50  mhw  Exp  $ 

*/ 


#include  <stdio.h> 

#include  "spgp.h" 
^include  "spgpint.h' 


#include  "pgpRndSeed.h' 


/* 

* Detect  uninitialized  RNG  state.  This  happens  if  we  did  not  find 

* a randseed  file,  and  the  app  hasn't  added  any  entropy  to  the 

* randpool. 

* If  no  randseed  was  found  and  so  we  returned  an  error,  then  the  app 

* added  entropy  to  the  randpool,  we  return  OK.  However  when  this 

* entropy  gets  used  up,  we  might  spuriously  return  another  error. 

* So  we  will  set  pgpRngSeeded  when  we  return  OK  to  prevent  this. 

*/ 

PGPError 
spgpRngCheck  ( ) 

{ 

a extern  PGPKDBExport  Boolean  pgpRngSeeded; 
n if  (pgpRngSeeded) 
n n return  PGPERR_OK; 

n if  ( pg p Ra nd Poo  I E n t r o py ( ) !=  0)  { 

n n pgpRngSeeded  = TRUE; 

n n return  PGPERR_0K; 

n } 

n return  PG P E R R_ R AN D S E E D_T00S M A LL ; 

} 

/* 

* Return  the  number  of  random  bits  which  should  be  requested  from  the 

* user  if  a function  returned  an  error  due  to  an  unseeded  RNG. 

* The  PGP3  library's  randomness  functions  should  be  used  to  acquire 

* this  many  bits  from  the  user. 

* 

* We  use  a value  from  pgpRndSeed.h. 

*/ 

int  SPGPExport 

S i mp I e PG PRa ndomNe e d e d (void  *handle) 

{ 

a (void)handle; 

n if  (spgpRngCheck  ()  ==  PGPERR_0K) 
n n return  0; 

n return  PG P_ S E E D_n I N_B YT E S * 8; 

} 

/* 

* Local  Variables: 
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★ 

★ 

* 

* 

*/ 


tab-widt 
End  : 

vi : t s = 4 
vim:  si 


h : 4 


sw  = 4 
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/* 

* spgpSBuf.c  --  Simple  PGP  API  Sign  buffer 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights 

★ 

* $Id:  spgpSBuf.c, V 1.18.2.4  1997/06/07  09:51:50  mhw  Exp  $ 

*/ 

#incLude  <stdio.h> 

#incLude  "spgp.h" 

#incLude  "spgpint.h" 


reserved. 


i n t 

S i mp L e PG PS i g n Bu f f e r X (void  *handLe, 

n char  * I n pu t Bu f f e r , size_t  I n pu t Bu f f e r Le n , char  * I n p u t Bu f f e r N a me , 
n char  *0u t pu t Bu f f e r , size_t  *0u t p u t Bu f f e r Le n , 

n int  Armor,  int  Textmode,  int  S i g na t u r eOn L y , int  CLearSign, 
n char  *S i g n e r Key  I D , size_t  S i g n e r B u f f e r Le n , 
n char  * S i g n e r Pa s s p h r a s e , size_t  S i g n e r Pwd Bu f f e r Le n , 
n PGPFiLeRef  * P r i va t e Key R i n g Re f , S PG P P r og r e s s C a L L Ba c k caLLBack, 
n void  * c a L L Ba c k A r g ) 

{ 


n 

Pg  p E n V 

*env; 

/* 

PGP  Local  environment  */ 

n 

RingPooL 

*ringpooL;n 

/* 

Keyring  pool  */ 

n 

RingFi Le 

*rfsec;n 

/* 

Secret  keyring  file  */ 

n 

RingSet  const 

*rssec;n 

/* 

Secret  keyring  ringset  */ 

Q 

RingObject 

*robsign;n 

/* 

RingObj  for  signing  key  */ 

n 

Pg  p F i L e 

*pfsec;n 

/* 

Secret  keyring  file  handle 

n 

PgpRandomContext 

* r n g ; n n 

/* 

Random  number  generator  */ 

□ 

PgpSecKey 

*sksign;n 

/* 

Signature  key  */ 

□ 

PgpSigSpec 

*sigspec;n 

/* 

Signature  data  structure  */ 

n 

PgpLiteraLParams 

LiteraL;n 

/* 

Filename  info  */ 

n 

PgpPipeLine 

*head,nn 

/* 

Pipeline  head  */ 

□ 

**t  a i L , 

/* 

Pipeline  tail  pointer  */ 

n 

*pipebuf;n 

/* 

Output  buffer  pipeline  */ 

n 

s i z e_  t 

bufsize; 

/* 

Output  buffer  size  */ 

Q 

i nt 

e r r ; n n 

/* 

Error  variable  */ 

rt 

int 

r s L t ; n 

/* 

Return  code  from  pgplib  */ 

Q 

(void)handLe; 

Q 

(void)InputBufferName; 

n 

/*  Initialize  some  nuLL  pointers 

to  s 

impLify  error  cleanup  */ 

n 

sksign  = NULL; 

a 

sigspec  = NULL; 

a 

rfsec  = NULL; 

n 

pfsec  = NULL; 

n 

rng  = NULL; 

n 

env  = NULL; 

n 

/*  Create  global 

structures  */ 

n 

spgpinit  (&env. 

SringpooL); 

u 

/*  Some  pointer 

checks  */ 

n if  ( 1 I npu t Buf f e r ) { 

n H err  = S I H P LE PG P S I G NBU F F E R_N U LLPO I N T E RTO I N PUTB U F F E R ; 
n n goto  error; 


*/ 
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n } 

n if 

a n 

n n 

n > 

n i f 

n □ 

n □ 

n > 

n i f 

n n 

D a 

n } 

n / * 

n i f 

n □ 

n n 

n > 


( ! OutputBuf f er)  { 

err  = S I H P L E PG P S I G NBU F F E R_N U LLPO I NT E RTOOUT PUTBU F F E R ; 
goto  error; 

C I npu t Bu f f e r Len  ==  0)  { 

err  = S I H P L E PG PS  I GN BU F F E R_ I N PUTBU F F E R LE NGT H I S Z E RO ; 
goto  error; 

(!env  II  IringpooL)  { 

err  = S I M P LE PG PEN C R Y PT F I LE_NOT E NOUG H M EHO R Y F 0 R I N PUT S T R U C TU R E ; 
goto  error; 


Make  sure  we  have  our  RNG  seeded  */ 
(spgpRngCheck  ()  !=  PGPERR_0K)  { 

err  = S I H P LE PG P_ RNGNOT S E E D E D ; 
goto  error; 


n /*  Set  the  armor  flag  if  requested  */ 
n if  (CLearSign)  { 

an/*  CLearsign  implies  these  others  */ 
a a Armor  = Textmode  = TRUE; 
n > 

n pgpenvSetlnt  (env,  PG P E N V_ A RMO R , Armor,  PG PE N V_PR I _ F 0 R C E ) ; 
n pgpenvSetlnt  (env,  PGPENV_TEXTMODE,  Textmode,  PGPENV_PRI_FORCE); 
n pgpenvSetlnt  (env,  PGPE N V_ C L E A R S I G , CLearSign,  PG PE N V_ P R I _ F 0 R C E ) ; 


n /*  Open  keyring  and  get  ringset  */ 

n err  = s pg pO p e n R i ng f i L e s (env,  ringpooL,  NULL,  P r i va t eKey R i ng Re f , 

a a NULL,  NULL,  NULL,  Spfsec,  &rfsec,  &rssec,  FALSE); 

n if  (err) 

a a goto  error; 


a /*  Initialize  random  number  generator  */ 
n rng  = pgpRandomCreate  (); 


a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 


/*  Prepare  signature  struct  */ 
if  ( ! S i gne rKey I D ) { 

n err  = S I HP LE PG PS  I G N F I L E_N U L LPO I NT E RTO S I G N E RKE Y I D S T R I NG ; 
n goto  error; 

> 

if  ( ! S i g ne r Pa s s ph r a s e ) f 

n err  = S I M P LE PG PS  1 G N F I L E_N U LLPO I NT E RTO S I G N E RP AS S PH R A S E ST R I NG ; 
n goto  error; 

} 

/*  Not  implemented  to  ask  for  pass  phrase,  no  UI  functionality  */ 
if  ( *S i gne r Pa s sph r a se== ' \0 ' &&  S i g n e r PwdBu f f e r Len ) { 
n err  = S 1 M P LE PG P_U N I H P L EM E NT E D ; 
n goto  error; 

} 


n /*  Get  signing  key  and  data  */ 

n robsign  = s pg pGe t S i g n e r Key  ( S i g n e r Key  I D , S i g n e r Bu f f e r Le n , env,  rssec); 
n if  (Irobsign)  { 

n a err  = S I H P LE PG P_N ON  EX  I S T E NT S I G N E RKE Y ; 
n a goto  error; 
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B 

} 

B 

sksign  = 

r i n g S e c S e c Key  (rssec,  robsign,  PGP_ 

B 

r i 

ngObjectRelease  (robsign); 

B 

1 f 

(Isksign  ||  ! s k s i g n-> s i g n ) { 

B 

B 

err 

= SIMPLEPGP_SIGNERKEYENCRYPTIONONLY; 

B 

B 

if  C 

Isksign)  { 

B 

B 

B 

/*  Problem  with  key  itself;  if  UNIMP 

B 

B 

B 

PGPError  erri  = r i n g S e t E r r o r ( r s s e c ) - 

B 

B 

B 

if  (erri  !=  PG P E R R_ P UBKE Y_U N I MP ) { 

B 

B 

B 

a err  = erri; 

B 

B 

B 

> 

B 

B 

> 

B 

B 

goto 

error; 

n > 

n rsLt  = pgpSecKeyUn Lock  (sksign,  env,  S i g n e r Pa s s p h ra s e , 
n n n n n n n s t r L e n ( S i g n e r Pa  s s p h ra  s e ) ) ; 
n if  (rsLt  <=  0)  { 

n n err  = SIMPLEPGP_BADKEYPASSPHRASE; 

a a goto  error; 

a > 


a sigspec  = pg p S i g S pe c C r ea t e (env,  sksign, 

a a a ( by t e ) ( Tex t mod e ? PG P_ S I GT YPE_T E XT  : PG P_S I GT Y P E_B I N A R Y ) ) ; 

a /*  Through  with  key  rings,  close  them  */ 
a spgpRi ng Fi  LeC Lose  (rfsec); 
a pgpFiLeCLose  (pfsec); 
a rfsec  = NULL; 
a pfsec  = NULL; 

a /*  Fake  up  Literal  params  */ 

a Literal. filename  = "stdin"; 
a L i t e r a L . t i me s t a mp  = (word32)  0; 

a /*  Set  up  pipeline  */ 

a head  = NULL; 

a tail  = pg p E n c ry p t P i pe L i n e C r ea t e (&head,  env,  NULL,  rng,  NULL,  NULL, 
a a a a a a a sigspec,  Sliteral,  SignatureOnly); 

a if  (Armor  ||  CLearSign)  { 

a a /*  Convert  to  Local  Line  endings  if  appropriate  */ 

a a tail  = pg pTe x t F i L t C r ea t e (tail, 

a a a a pg pe n vG e t Po i n t e r (env,  PG P E N V_C H ARM APTO L AT  I N 1 , NULL, 

aaan  naaa  NULL), 
a a a a 0,  SimpLePGPGetLineEndType()); 

a > 

a bufsize  = *0 u t pu t Bu f f e r Le n ; 

a pipebuf  = pg pMemMod C r ea t e (tail,  0 u t pu t Bu f f e r , bufsize); 
a if  (!pipebuf)  ( 

a a err  = SIMPLEPGPSIGNBUFFER_NOTENOUGHHEHORYFORINPUTSTRUCTURE; 

a a goto  error; 

a } 

a /*  Send  data  through  */ 

a err  = spgpHemPump  (head,  (byte  * ) I n p u t Bu f f e r , I npu t Bu f f e r Le n , 

a a a a a a calLBack,  c a I L Ba c k A r g ) ; 

a if  (!err)  I 

a a err  = s pg pHemOu t pu t (pipebuf,  0,  Ou t p u t Bu f f e r Le n ) ; 

a > 
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a h e a d-> t ea rdo wn  (head); 


error: 

n 

1 f 

(sigspec) 

n 

o 

pgpSigSpecDestroy 

(sigspec) 

n 

i f 

(sksign) 

n 

n 

pgpSecKeyDestroy 

(sksign); 

n 

i f 

( r n g ) 

n 

□ 

pgpRandomDestroy 

( r n g ) ; 

n 

i f 

( rf  sec ) 

n 

a 

spgpRingFi LeCLose 

(rfsec); 

n 

i f 

( pf sec  ) 

□ 

a 

pgpFileCLose  (pfsec); 

n 

spgpFinish  (env,  ringpool,  err) 

Q 

return  err; 

> 

i nt 

S i mp L e PG PS  1 gnBuf f e r (void  *handLe, 

n char  * I n p u t Bu f f e r , size_t  I n p u t Bu f f e r Le n , char  * I n pu t Bu f f e rName  , 
n char  *0u t pu t Bu f f e r , size_t  *0 u t pu t Bu f f e r Le n , 
n int  Armor,  int  Textmode,  int  S i g na t u r eOn L y , int  CLearSign, 
n char  *S i g ne r Key  I D , size_t  S i g n e r Bu f f e r Le n , 
n char  *S i g ne r Pa s s p h r a s e , size_t  S i g ne r PwdBu f f e r Le n , 
n char  *P r i va t e Key R i ng Na me ) 

{ 

n PGPFiLeRefn  n n * r e f P r i v R i ng =NU LL; 

n PGPErrorn  n n err; 

a if  ( P r i va t e Key R i n g N ame  SS  P r i va t eKey R i ng Na me C 0 3 ) { 

n n if  ( ! ( ref Pri  vRi  ng  = pg p N e w F i L e Re f F r om F u L L Pa t h ( P r i va t eKey R i ng N a me ) ) ) { 

n n n err  = S I MP LE PG PS  I G NBU F F E R_N0T ENOUG HH EMO R Y F OR  I N PUT STRU CTU R E ; 

n n n gotoerror; 

n n } 

n > 

n err  = S i mp L e PG PS i g n Bu f f e r X (handle,  InputBuffer,  I npu t Bu f f e r Le n , 
n n InputBuf f erName,  Ou t pu t B u f f e r , Ou t p u t Bu f f e r Len , Armor,  Textmode, 
n n S i g na t u r e On L y , CLearSign,  SignerKeylD,  S i g ne r Bu f f e r Len, 

n n S i gne r Pa s sph ra se,  S i g n e r PwdBu f f e r Le n , refPrivRing,  NULL,  NULL); 

error: 

n if  (refPrivRing) 

n B pg p F r e e F i L e Re f (refPrivRing); 

B return  err; 

> 

/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* spgpSFiLe.c  --  Simple  PGP  API  Sign  file 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgpSFi  le.c,v  1 . 27.2.4  1 997/06/07  09:51  : 51  mhw  Exp  $ 

*/ 

#include  <stdio.h> 

^include  "spgp.h" 

#include  "spgpint.h" 

i nt 

S i mp I e PG P S i g n F i I e X (void  *handle, 

n PGPFileRef  * I n p u t F i I e Re f , PGPFileRef  *0u t pu t F i I e R e f , 
n int  Armor,  int  Textmode,  int  S i g na t u r e On  I y , int  ClearSign, 
n char  * S i g n e r Key I D , si2e_t  S i g n e r Bu f f e r Le n , 
n char  * S i g n e r Pa s s p h r a s e , size_t  S i g ne r PudBu f f e r Le n , 
n PGPFileRef  * P r i va t e Key R i ng R e f , PG P F i I eOpen F I a g s localEncode, 


n 

SPGPProgressCallBack 

call  Back, 

void 

*callBackArg) 

Q 

Pg  p E n V 

*en  V ; 

/* 

PGP  local  environment  */ 

n 

Ring  Poo  1 

*ringpool; 

n /* 

Keyring  pool  */ 

n 

RingFi  le 

*rfsec;n 

/* 

Secret  keyring  file  */ 

n 

RingSet  const 

*rssec;n 

/* 

Secret  keyring  ringset  */ 

Q 

Ri ngOb j ect 

*robsign;n 

/* 

RingObj  for  signing  key  */ 

n 

Pg  p F i 1 e 

*pf sec,n 

/* 

Secret  keyring  file  handle  */ 

n 

*pf out  ;n 

/* 

Output  file  handle  */ 

n 

PgpFi leRead 

*pf  r i n; n 

/* 

Input  file  handle  */ 

n 

PgpRandomContext 

* r n g ; n n 

/* 

Random  number  generator  */ 

a 

PgpSecKey 

*sksign;n 

/* 

Signature  key  */ 

n 

PgpSi gSpec 

*sigspec;n 

/* 

Signature  data  structure  */ 

n 

PgpLi tera IPa  rams 

literal;n 

/* 

Filename  info  */ 

□ 

PgpPipeline 

*head,nn 

/* 

Pipeline  head  */ 

n 

**tai  1; 

/* 

Pipeline  tail  pointer  */ 

□ 

i n t 

e r r ; n n 

/* 

Error  variable  */ 

n 

i n t 

r s 1 1 ; n 

/* 

Return  code  from  pgplib  */ 

n 

PGPFi leOpenFlagsn 

open  F 1 ags 

r 

n 

PGP  F i 1 eT ypenn  n 

f i 1 e T y p e ; 

n pg  p A s se  r t ( C I o ca  I En  code  & ~ ( kPG P F i I eOpe nHa y be  Lo c a I E n c od e | 

nnnnnnnn  kPG P F i I e Open F o r c e Lo c a I E n c od e ) ) ==  0); 
n (void)handle; 

n /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n sksi gn  = NULL; 

n sigspec  = NULL; 

n rfsec  = NULL; 

n pfsec  = NULL; 

a rng  = NULL; 

n env  = NULL; 

n I i t e r a I . f i I e na me  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  (&env,  Sringpool); 

n if  (!env  ||  Iringpool)  { 
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n n err  = S I M P LE PG PS  I G N F I LE_N OT E NOUG HM EMO R Y F 0 R I N PUTST R U CT U R E ; 
n n goto  error; 

n > 

n /*  Make  sure  we  have  our  RNG  seeded  */ 
n if  ( s pg p Rn g C h e c k ()  !=  PGPERR_0K)  { 

n n err  = S 1 H P L E PG P_RNGN0T S E E D E D ; 
n n goto  error; 

n > 

n /*  Set  the  armor  flag  if  requested  */ 
n if  (CLearSign)  { 

n n /*  CLearsign  implies  these  others  */ 

n n Armor  = Textmode  = TRUE; 

n > 

n pgpenvSetInt  (env,  PGPENV_ARMOR,  Armor,  PG P E N V_ PR  I _ F 0 R C E ) ; 
a pgpenvSetInt  (env,  PGPENV_TEXTHODE,  Textmode,  PGPENV_PRI_FORCE); 
n pgpenvSetInt  (env,  PGPENV_CLEARSIG,  CLearSign,  PGPENV_PRI_FORCE); 

n /*  Open  keyring  and  get  ringset  */ 

n err  = s pg pOpe n R i ng f i L e s (env,  ringpooL,  NULL,  P r i va t e Key R i n g Re f , 

n n NULL,  NULL,  NULL,  Spfsec,  Srfsec,  Srssec,  FALSE); 

n if  (err) 
n a goto  error; 


n /*  Initialize  random  number  generator  */ 
n rng  = pg pRa ndomC r ea t e (); 


n 

n 

n 

D 

n 

n 

Q 

n 

Q 

a 

a 

n 

n 

a 


/*  Prepare  signature  struct  */ 
if  (ISignerKeylD)  { 

n err  = S I MP LE PG PS  I G N F I L E_NU LLPO I NT E RTO S I G N E RKE Y I D ST R I NG ; 
n goto  error; 

} 

if  ( ! S i g n e r Pa s s ph r a s e ) { 

n err  = S I HPLE PG PS  I GN F I LE_NU LLPO I NT E RTOS I G N E R P A S S P H R A S E ST R I NG ; 
n goto  error; 

> 

/*  Not  implemented  to  ask  for  pass  phrase,  no  UI  functionality  */ 
if  ( *S i gne r Pa s s p h r a se  = = ' \ 0 ' S&  S i g ne r PwdBu f f e r Le n ) i 
n err  = S I H PLE PG P_UN I M P LEM E NT E D ; 
n goto  error; 

} 


n /*  Get  signing  key  and  data  */ 

n robsign  = s pg pG e t S i g n e r Key  ( S i gne rKey I D,  S i g ne r Bu f f e r Le n , env,  rssec); 
n i f ( ! robs i gn ) ( 

n n err  = S I MP LE PG P_N0N E X I ST E NT S I G N E R KE Y ; 
n n goto  error; 

n } 

n sksign  = ringSecSecKey  (rssec,  robsign,  PGP_PKUSE_SIGN); 
n r i n g Ob j e c t Re  I e a s e (robsign); 

a if  (isksign  ||  ! s ks i gn-> s i g n ) { 

n n err  = S I HPLE PG P_S I GN E RKE Y E N C R Y PT I ONO N L Y ; 
n n if  (Isksign)  { 

n n n /*  Problem  with  key  itself;  if  UNIHP,  use  high  level  error  */ 
a a n PGPError  erri  = ringSetError(rssec)->error; 

n n n if  (erri  !=  PG P E R R_PUBKE Y_U N I H P ) < 
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n n n n err=err1; 

n n n > 

n n } 

n n goto  error; 

n > 

n rsLt  = pgpSecKeyUnLock  (sksign,  env,  SignerPassphrase, 
n n n n n n n strLen(SignerPassphrase)); 
n if  (rsLt  <=  0)  -C 

n n err  = S I H P LE  PG  P_B  A D KE  Y P A S S P H R A S E ; 

n n goto  error; 

n } 

n sigspec  = pgpS i g S pe c C r ea t e (env,  sksign, 

n n n C by t e ) ( T ex t mod e ? PG P_ S I GT Y P E_T E XT  : PG P_S I GT Y P E_B I N A R Y ) ) ; 

n /*  Through  with  key  rings,  close  them  */ 
n spgpRingFileCLose  (rfsec); 
n pgpFileCLose  (pfsec); 
n rfsec  = NULL; 

n pfsec  = NULL; 

n /*  Open  input  and  output  files  */ 

n openFlags  = kPG P F i I e Op e n R ea d Pe r m | localEncode; 
n if  ( S i gna t u r eOn I y ) 

n n openFlags  |=  kPG P F i I e Op e n Lo c a I E n c od e H a s h On  I y ; 

n pfrin  = pg p F i I e Re f R ea d C r e a t e ( I n p u t F i I e R e f , openFlags,  NULL); 
n if  (!pfrin)  { 

n n err  = S I M P L E PG P S I G N F I LE_ I N PUT F I L E DO E S N OT E X I ST  ; 
n a goto  error; 
a } 

a pgp F i I eRead Se t Ca I I Ba c k ( pf r i n,  callBack,  c a I I Ba c k A r g ) ; 

a literal. filename  = pgpGetFileRefName  (InputFileRef); 

a literal. timestamp  = (word32)  0; 
a 

a if  (Armor) 

a a fileType  = kPGPFileTypeArmorFile; 

a else  if  ( S i g n a t u r e On  I y ) 

a a fileType  = kPG P F i I eTy p e D e t a c h e d S i g ; 

a else 

a a fileType  = kPG P F i I eTy pe S i g n ed D a t a ; 

a 

a pfout  = pg  p F i I e Re  f Ope  n ( Ou  t pu  t F i I e Re  f , k PG  P F i I e 0 p e n S t d W r i t e F I a g s , 
a a a a a a a fileType, NULL); 

a if  (Ipfout)  { 

a a err  = SIHPLEPGPSIGNFILE.OUTPUTFILECREATIONERROR; 

a a goto  error; 

a } 

n /*  Set  up  pipeline  */ 

a head  = NULL; 

a tail  = pg p En c ryp t Pi pe I i neC r ea t e (Shead,  env,  NULL,  rng,  NULL,  NULL, 
a a a a a a a sigspec,  Sliteral,  SignatureOnly); 

a if  (Armor  ||  ClearSign)  { 

a a /*  Convert  to  Local  Line  endings  if  appropriate  */ 

a a tail  = pgpText F i L t C rea t e (tail, 

a a a a p g pe  n vG  e t Po  i n t e r (env,  PG  P E N \/_  C H A RM  A PTO  L AT  I N 1 , NULL, 
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n n n n a a n n NULL), 

n n n n 0,  S i mp L e PG PG e t L i n e E n dTy pe  ( ) ) ; 

n } 

n if  ( ! pg p F i L e W r i t e C r e a t e (tail,  pfout,  1))  { 

n n err  = S I HP L E PG PS  I G N F I L E_N OT E NOUG HH EHO R Y F 0 R I N PUT  ST RU C T U R E ; 
n n goto  error; 
n } 

n /*  Send  data  through  */ 
n err  = pg p F i L e Re  a d Pump  (pfrin,  head); 
n pg  p F i 1.  e R ea  d D e s t r oy  (pfrin); 

n head->si zeAdvi se  (head,  0); 
n h e a d-> t ea r do wn  (head); 


error: 

n if  (sigspec) 

n n pgpSigSpecDestroy  (sigspec); 

n if  (sksign) 

n n pgpSecKeyDestroy  (sksign); 

n if  (rng) 

n n pgpRandomDest roy  (rng); 

n if  (rfsec) 

n n s pg pR i ng F i L e C L o s e (rfsec); 

n if  (pfsec) 

n n pgpFiLeCLose  (pfsec); 

n if  ( L i t e r a L . f i L e na me ) 

n n pgpFree  ((char  *)LiteraL. filename); 

o if  (err  !=  PGPERR_OK) 
n n pgpDeleteFile  (OutputFiLeRef); 

n spgpFinish  (env,  ringpooL,  err); 
n return  err; 

> 


i n t 

S i mp L e PGPS i gn F i L e (void  *handLe, 

n char  *Input F i L eName,  char  *0 u t pu t F i L eNa me , 

n int  Armor,  int  Textmode,  int  S i g na t u r eOn L y , int  CLearSign, 
n char  *S i g ne r Key  I D , size_t  S i g n e r Bu f f e r Le n , 
n char  *S i g ne r Pa s s p h r a s e , size_t  S i g ne r PwdBu f f e r Le n , 
n char  *P r i va t e Key R i ng Name ) 

{ 


D 

PGPFi LeRefn 

a 

a 

*ref Input=NULL, 

n 

D a Q 

a 

n 

*refOutput=NULL, 

n 

Don 

a 

n 

*refPrivRing=NULL; 

n 

PG  PE  r ro  rn 

a 

n 

err; 

D 

n 

n 

n 

n 

n 

n 

n 

□ 

□ 

n 

□ 

n 


/*  Some  pointer  checks  */ 
if  ( ! I npu t F i L eName ) t 

n err  = S I HP L E PG PS  I GN F I L E_N U L LPO I NT E RT 0 1 N PUT F I LE N AH E ; 
n goto  error; 

> 

if  (!  Out  put F i L eName ) { 

n err  = S I HP  LE  PG  PS  I GN  F I L E _N  U L LPO  I NT  E RTOO  UT  PUT  F I LE  N AH  E ; 
n goto  error; 

} 

if  ( *I npu t F i L e Na me  ==  '\0')  { 

n err  = S I HP  LE  PG  PS  I G N F I L E _ E H PT  Y I N PUT  F I LE  N AH  E S TR I NG  ; 
n goto  error; 

} 
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n if  ( *0 u t pu t F i L e N a me  ==  '\0')  { 

a n err  = S I M P L E PG PS  I G N F I L E_ E M PT YO UT PUT F I LE N AH E S T R I NG  ; 
n n goto  error; 
n } 


□ 

n 

a 

n 

Q 

Q 

n 

□ 

a 

□ 

n 

a 

n 

□ 


if  (!(reflnput  = pg pN e w F i L e Re f F r om F u L L Pa t h ( I n pu t F i L e Na me ) ) ) { 
n err  = SIMPLEPGPENCRYPTFILE_NOTENOUGHHEMORYFORINPUTSTRUCTURE; 
n goto  error; 

> 

if  (!(refOutput  = pg pN e w F i L e R e f F r om F u L L Pa t h ( Ou t pu t F i L e N a me ) ) ) { 
n err  = S I M P L E PG P E N C R Y PT F I L E_N OT E N OUG H M EHO R Y F 0 R I N PUT S TR U C TU R E ; 
n goto  error; 

} 

if  ( P r i va t e Key R i ngName  &S  P r i va t e Key R i n g Na me C 0 ] ) { 

a if  ( ! ( r e f P r i V R i ng  = pg pN e w F i L e R e f F r om F u L L Pa t h ( P r i va t e Key R i ng N a me ) ) ) { 
n n err  = S I M P LE PG P E N C R Y PT F I L E_N OT E NOUG H M E HO R Y F OR  I N PUT S T RU CTU R E ; 
n n goto  error; 
n > 

} 


n err  = S i mp L e PG P S i g n F i L e X (handle,  refinput,  refOutput, 
n n Armor,  Textmode,  S i g n a t u r eO n I y , CLearSign,  SignerKeylD, 

n n S i g n e r Bu f f e r Le n , S i g n e r Pa s s p h r a s e , S i g n e r P wd Bu f f e r Le n , 

n n refPrivRing,  k PG P F i L eOp e n Ha y be Lo c a I E n c od e , NULL,  NULL); 


error: 

n i f ( refinput  ) 

n n pgpFreeFiLeRef  (refinput); 

n if  (ref  Output) 

n n pgpFreeFiLeRef  (refOutput); 

n if  (refPrivRing) 

n n pgpFreeFiLeRef  (refPrivRing); 

n return  err; 

> 


/* 

* LocaL  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpVBuf.c  — Simple  PGP  API  Verify  detached  signature  buffer 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

* 

* $Id:  spgpVBuf.c, V 1.13.2.4  1997/06/07  09:51:51  mhw  Exp  $ 

*/ 

^include  <stdio.h> 

^include  "spgp.h" 

#incLude  "spgpint.h" 


i nt  SPGPExport 

S i mp L e PG PVe r i f y De t a c hedS i gna t u r eBu f f e rX  (void  *handLe, 


char  *InputDataBuf f er,  size_t  I npu t Da t a Bu f f e r Le n , 

char  *InputSi gnatureBuf f er,  size_t  I n pu t S i g n a t u r e Bu f f e r Le n , 

int  *S i gna t u reS t a t u s,  byte  *S i gne rKey I D,  size_t  S i g n e r Key  I DBu f Le n , 

char  *Signer,  size_t  S i g ne r Bu f Le n , byte  *SignDate,  size_t  S i g n Da t e Bu f Le n , 

PGPFiLeRef  * Pu b L i c Key R i ng Re f , S PG PP r og r e s s C a L L Ba c k calLBack, 

void  *ca L I Ba c kA rg  ) 


n 

PgpEnv 

*env  ; 

/* 

PGP  Local  environment  */ 

n 

R i ng  Poo  L 

*ringpooL;n 

/* 

Key  r i ng  poo  L * / 

□ 

RingFi  Le 

*rfpub;n 

/* 

Public  keyring  file  */ 

D 

RingSet  const 

*rspub;n 

/* 

Public  keyring  ringset  */ 

n 

Pgp  F i L e 

*pfpub;n 

/* 

Public  keyring  file  handle  */ 

n 

PgpPi pe  L i ne 

*texthead,n 

/* 

Pipeline  text  head  */ 

n 

*sighead,n 

/* 

Pipeline  signature  head  */ 

D 

*t  a i L ; 

/* 

Pipeline  tail  pointer  */ 

n 

PgpUICb 

u i ; n n 

/* 

Callback  functions  */ 

n 

SPgpSimpUI 

ui_arg; 

/* 

Parameters  for  callbacks  */ 

n 

i n t 

e r r ; n n 

/* 

Error  variable  */ 

n 

(void)handLe; 

D 

/*  Initialize  some  nuLL  pointers 

t 0 

simplify  error  cleanup  */ 

n 

rfpub  = NULL; 

n 

pfpub  = NULL; 

n 

env  = NULL; 

□ 

texthead  = NULL; 

n 

sighead  = NULL; 

n 

/*  Create  global 

structures  */ 

Q 

spgpinit  (&env. 

Sringpool); 

o 

/*  Some  pointer 

checks  */ 

if  ( ! I npu t Da t a Bu f f e r ) { 


err  = 

SiriPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NULLPOINTERTOINPUTDATABUFFER; 
goto  error; 


if  ( ! I npu t S i g na t u r eBu f f e r ) { 


err  = 

SIHPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NULLPOINTERTOINPUTSIGBUFFER; 
goto  error; 


if  ( I npu t Da t aBuf f e r Len  ==  0)  { 
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n n e r r = 

n n SIHPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_INPUTDATABUFFERLENGTHISZERO; 

n n goto  error; 

n } 

n if  ( I npu t S i g na t u r eBu f f e r Le n ==  0)  { 
n n e r r = 

n n SIHPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_INPUTSIGBUFFERLENGTHISZERO; 

n n goto  error; 

n } 

n if  (!env  ||  !ringpooL)  { 
n □ e r r = 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NOTENOUGHHEMORYFORINPUTDATASTRUCTURE; 
n n goto  error; 

n } 

n /*  Open  keyring  and  get  ringset  */ 

n err  = s pg pO pe n R i ng f i L e s (env,  ringpooL,  P u b I i c Ke y R i n g Re f , NULL, 

n n Spfpub,  Srfpub,  Srspub,  NULL,  NULL,  NULL,  FALSE); 

a if  (err) 

n n goto  error; 

n /*  Setup  the  UI  callback  functions  & args  */ 

n spgpUISetup  C&ui,  &ui_arg); 

n ui_arg.env  = env;n  n n n /*  Environment  */ 

n ui _a rg . ri ngset  = rspub;nn  n /*  Keyring  */ 

n /*  Set  up  pipeline  */ 

n tail  = pgpSi gnatureVeri f yCreate  (8texthead,  Ssighead,  env,  NULL, 
n n n n NULL,  0,  0,  8ui,  8ui_arg); 

n if  ( ! t a i I ) { 

n n e r r = 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NOTENOUGHMEMORYFORINPUTDATASTRUCTURE; 
n n goto  error; 

a } 

n /*  Send  data  through  */ 

n err  = spgpHemPump  (sighead,  (byte  * ) I n pu t S i g na t u r e Bu f f e r , 
n n I npu t S i g na t u r eBu f f e r Le n , NULL,  NULL); 
n if  (err) 
n n goto  error; 

n err  = spgpHemPump  (texthead,  (byte  * ) I n pu t D a t a Bu f f e r , I n pu t D a t a Bu f f e r Le n , 

n n n n n n callBack,  c a I I Ba c k A r g ) ; 

n s i ghead->t ea rdown  (sighead); 

H texthead->teardown  (texthead); 

n sighead  = texthead  = NULL; 

n if  (err) 

n a goto  error; 

n /*  Set  signer  info  if  avail  */ 

n spgpS i gnS t a t u s (8ui_arg,  rspub,  S i g n a t u r e S t a t u s , 
n n SignerKeylD,  S i g n e r Key  I D Bu f Le n , Signer,  S i g n e r Bu f Le n , 
n n SignDate,  S i g n Da t e Bu f Le n ) ; 

□ 

n /*  Through  with  key  rings,  close  them  */ 
n spgpRingFileClose  (rfpub); 
n pgpFileClose  (pfpub); 
n rfpub  = NULL; 

n pfpub  = NULL; 
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n 

Q 

n 

o 

n 


if  ( u 1 _a rg . enc f a i L ||  u i _a rg . key f a i L ) { 
n err  = S I M P LE  PG  P_  D ET  A C H E D S I G N AT  U R EN  OT  F OU  N D ; 

> else  { 

n e r r = 0 ; 

> 


error: 

B if  (sighead) 

B B s i g h ea d-> t e a r d own  (sighead); 

B if  Ctexthead) 

B B t ex t h ea d-> t e a r do wn  (texthead); 
B if  (rfpub) 

B B s pg p R i ng F i L e C I o s e (rfpub); 

B if  (pfpub) 

B B pgpFiLeCLose  (pfpub); 

B spgpFinish  (env,  ringpooL,  err); 

B return  err; 

} 


i n t 

S i mp L ePGPVe r i f y De t a c beds  i gna t u r eBuf f e r (void  *handLe, 

B char  *I npu t Da t a Bu f f e r , size_t  I n pu t D a t a B u f f e r Le n , 

B char  *InputSi gnatureBuf f er,  size_t  I n pu t S i g n a t u r e Bu f f e r Le n , 

B int  *Si gnatureStatus,  char  *Signer,  size_t  S i g n e r Bu f Le n , 

B byte  *SignDate,  size_t  S i g n Da t eBuf Len, 

B char  * Pub L i c Key R i ng Na me ) 

( 

B PGPFiLeRefB  b n *refPubRing=NULL; 

B PGPErrorB  n n err; 

B if  ( Pub L i cKey R i ngName  &S  Pub L i c Key R i ng N a me C 0 D ) ( 

B B if  ( ! ( r e f Pu b R i ng  = pg pN e w F i L e Re f F r om F u L L Pa t h ( Pu b L i c Key R i ng Name )) ) ( 

n n n e r r = 

SIMPLEPGPVERIFYDETACHEDSIGNATUREBUFFER_NOTENOUGHnEMORYFORlNPUTDATASTRUCTURE; 
B B n gotoerror; 

B B } 

B > 


B err  = S i mp L e PG PVe r i f y De t a c h e d S i g na t u r e Bu f f e r X (handle,  I npu t Da t a Bu f f e r , 
B B InputDataBuf f erLen,  I n pu t S i g na t u r e Bu f f e r , I n pu t S i g n a t u r eBu f f e r Le n , 

B B Si gnatureStatus,  NULL,  0,  Signer,  S i g n e r Bu f Len , 

B H SignDate,  SignDateBufLen,  refPubRing,  NULL,  NULL); 


error: 


B if  (refPubRing) 

B B pgp F ree F i L e Ref  (refPubRing); 
B return  err; 

} 


/* 

★ 

* 

* 

* 

★ 


Local  Variables: 
tab-width:  4 
End  : 

vi : t s = 4 sw  = 4 
vim:  si 


*/ 
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* spgpVFiLe.c  — Simple  PGP  API  Verify  detached  signature  file 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  s pg p V F i L e . c , V 1.16.2.5  1997/06/07  09:51:52  mhw  Exp  $ 

*/ 

^include  <stdio.h> 

#incLude  <time.h> 

#incLude  "spgp.h" 

# include  "spgpint.h" 

i nt  SPGPExport 

S i mp L e PG P Ve r i f y D e t a c h e d S i g n a t u r e F i L e X (void  *handLe, 

n PGPFiLeRef  * I n pu t D a t a F i L e Re f , PGPFiLeRef  * I n p u t S i g na t u r e F i L e R e f , 
n int  *Si gnatureStatus,  byte  * S i g n e r Key  I D , size_t  S i g n e r Key  I D Bu f Le n , 
n char  *Signer,  size_t  S i g n e r Bu f Le n , byte  *SignDate,  size_t  S i g n D a t e Bu f Le n , 
n PGPFiLeRef  *PubLicKeyRingRef,  PGPFiLeOpenFLags  LocalEncode, 


n 

{ 

SPGPProgressCa  L LBack 

calLBack, 

void 

♦calLBackArg) 

n 

Pg  p E n V 

*env  ; 

/♦ 

PGP  Local  environment  ♦/ 

a 

RingPooL 

*ringpool; 

n / ♦ 

Key ri ng  poo  L ♦/ 

a 

R i n g F i L e 

*rfpub;n 

/♦ 

Public  keyring  file  ♦/ 

B 

Ri  ngSet  const 

*rspub;n 

/♦ 

Public  keyring  ringset  ♦/ 

B 

Pg  p F i L e 

*pfpub;n 

/♦ 

Public  keyring  file  handle  ♦/ 

B 

PgpFi LeRead 

*pfrdat,n 

/♦ 

Data  file  handle  ♦/ 

B 

*pfrsig;n 

/♦ 

Signature  file  handle  ♦/ 

B 

PgpPi pe  L i ne 

♦texthead. 

a / ♦ 

Pipeline  text  head  ♦/ 

B 

♦sighead, n 

/♦ 

Pipeline  signature  head  ♦/ 

B 

♦ t a i L ; 

/♦ 

Pipeline  tail  pointer  ♦/ 

B 

PgpUICb 

u i ; n n 

/♦ 

Callback  functions  ♦/ 

B 

SPgpSi mpUI 

u i _a  rg; 

/♦ 

Parameters  for  callbacks  ♦/ 

B 

i nt 

e r r ; a a 

/♦ 

Error  variable  ♦/ 

n pg pAs se r t ( ( L o ca L En code  & ~ ( kPG P F i L eO pe n Ha y be Lo c a L E n c od e | 
nnnnnnnn  k PG P F i L eOpe n F o r c e Lo c a L En c od e ) ) ==  0); 
n (void)handLe,- 

n /*  Initialize  some  null  pointers  to  simplify  error  cleanup  */ 
n rf pub  = NULL; 

n pfpub  = NULL; 

n env  = NULL; 

n texthead  = NULL; 

n sighead  = NULL; 

n /*  Create  global  structures  */ 

n spgpinit  C&env,  SringpooL); 

n if  (!env  ||  IringpooL)  { 

n n e r r = 

a SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHHEMORYFORINPUTDATASTRUCTURE; 
n n goto  error; 

n > 

o /*  Open  keyring  and  get  ringset  */ 

n err  = s pg pOp e n R i n g f i L e s (env,  ringpool,  Pu b L i c Key R i n g Re f , NULL, 
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n n apfpub,  Srfpub,  Srspub,  NULL,  NULL,  NULL,  FALSE); 
n if  (err) 

n n goto  error; 


n 

a 

n 

n 

D 

n 

□ 

n 

o 

□ 

n 

a 

n 

n 

Q 

Q 

D 

Q 

n 

n 

n 

n 

a 


/*  Setup  the  UI  callback  functions  S args  */ 
spgpUISetup  (&ui,  &ui_arg); 

ui_arg.env  = env;n  n n n /*  Environment  */ 

ui_arg.ringset  = rspub;nn  n /*  Keyring  */ 

/*  Open  data  input  file  */ 

pfrdat  = pg p F i I e Re f Rea d C r ea t e ( I n pu t Da t a F i I e R e f , 
n n ( kPGP F i I eOpenReadPe rm  | localEncode  | 
n n kPG P F i I eOpe n Lo c a I E n c od e H a s hOn  I y ) , 
n n NULL); 
if  (Ipfrdat)  { 

n err  = S I M PLE PG P V E R I F Y D ET A C H E D S I GN ATU R E F I LE_ I N PUT  0 AT A F I LE DO E S NOT E X I S T ; 
n goto  error; 

} 

pg p F i I e Re  a d S e t C a I I Ba c k ( pf r da t , callBack,  c a I I Ba c kA rg  ) ; 

/*  Open  signature  input  file  */ 

pfrsig  = pg p F i I e Re f Rea d C r e a t e ( I n pu t S i g na t u r e F i I e Re f , 
nnnnnnnn  kPG P F i I eO p e n Rea d Pe r m,  NULL); 
if  (Ipfrsig)  { 

n err  = S I H P L E PG P V E R I F Y D ET A C H E D S I G N ATU R E F I LE_ I N PUT S I G F I L E D 0 E S NOT E X I ST ; 
n goto  error; 

} 


□ 

a 

a 

a 

n 

□ 

D 

□ 


/*  Set  up  pipeline  */ 

tail  = pgpSi gnatureVeri f yCreate  C&texthead,  &sighead,  env,  NULL, 
n n n NULL,  0,  0,  &ui,  Sui_arg); 

if  (!tail)  { 
n e r r = 

SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHHEMORYFORINPUTDATASTRUCTURE; 
n goto  error; 

> 


n /*  Send  data  through  */ 

n err  = pgpFileReadPump  (pfrsig,  sighead); 
n pg p F i I eReadDes t roy  (pfrsig); 
n sighead->sizeAdvise  (sighead,  0); 
n if  (err) 

n n goto  error; 

n err  = pgpFileReadPump  (pfrdat,  texthead); 
n pg p F i I eRead Des t roy  (pfrdat); 
n t e X t h e a d->s i z e Ad V i s e (texthead,  0); 

n s i g hea d->t ea rdown  (sighead); 

n t ext head->tea rdown  (texthead); 

n sighead  = texthead  = NULL; 

a if  (err) 

n n goto  error; 

n /*  Set  signer  info  if  avail  */ 

n spgpSi gnStatus  (&ui_arg,  rspub,  S i gna t u r e S t a t u s , 
n n SignerKeylD,  S i g n e r Key  I DBu f Len , Signer,  S i gn e r Bu f Le n , 
n n SignDate,  S i g n Da t eBu f Le n ) ; 

□ 

n /*  Through  with  key  rings,  close  them  */ 
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n s pgpR i ng F i L eC L ose  (rfpub); 

n pgpFiLeCLose  (pfpub); 
n rfpub  = NULL; 

n pfpub  = NULL; 

n if  ( u i _a r g . e n c f a i L {{  u i _a r g . key f a i I ) { 
a n err  = S I M P L E PG P_ D ET A C H E D S I G N AT U R E N OT F OU N D ; 
a > e L s e { 

n n err=0; 

n } 

error: 

n if  (sighead) 

n n s i ghead-> t ea rdown  (sighead); 

n if  (texthead) 

n n texthead->teardown  (texthead); 

n if  (rfpub) 

n n spgpRingFiLeCLose  (rfpub); 

n if  (pfpub) 

n n pgpFiLeCLose  (pfpub); 

n spgpFinish  (env,  ringpooL,  err); 

n return  err; 

} 

i n t 

S i mp L ePGPVe r i f y De t a c hed S i g na t u r e F i L e (void  *handLe, 
n char  * I n pu t Da t a F i L e Na me , char  * I n p u t S i g na t u r e F i L e Na me , 
n int  *S i g n a t u r e S t a t u s , char  *Signer,  size_t  S i g n e r Bu f Le n , 
n byte  *SignDate,  size_t  S i g n D a t eBu f Le n , 
n char  *Pub L i c Key R i n g Na me ) 

{ 


Q 

PGPFi LeRef n 

n 

a 

*refData=NULL, 

n 

n n n 

n 

a 

*ref Si g=NULL, 

n 

a a a 

D 

a 

*refPubRi ng=NULL; 

Q 

PGPErrorn 

n 

a 

err; 

n 

n 

Q 

Q 

n 

n 

□ 

□ 

n 

□ 

□ 

n 

□ 

n 

Q 

Q 

D 

D 

Q 

Q 

□ 


/*  Some  pointer  checks  */ 
if  ( ! I n pu t Da t a F i L eNa me ) { 
n e r r = 

n SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOINPUTDATAFILENAHE; 
n goto  error; 

> 

if  ( ! I npu t S i g na t u r e F i L e Name ) { 
n e r r = 

n SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NULLPOINTERTOINPUTSIGFILENAHE; 

n goto  error; 

} 

if  ( * I np u t Da t a F i L e N a me  ==  '\0')  < 
n e r r = 

n SIMPLEPGPVERIFYDETACHEDSIGNATURE FI LE.EMPTYINPUTDATA FILENAMESTRING ; 

n goto  error; 

> 

if  ( * I n pu t S i g na t u r e F i L eN a me  ==  '\0')  { 
n e r r = 

n n SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_EHPTYINPUTSIG FILENAMESTRING ; 

n goto  error; 

} 
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n if  (ICrefData  = pg pN e w F i L e R e f F rom F u I L Pa t h ( I n pu t Da t a F i L e N ame ) ) ) { 
n n e r r = 

n SIMPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHMEHORYFORINPUTDATASTRUCTURE; 
n n goto  error; 

n } 

n if  (!(refSig  = pg pNe w F i I e R e f F r om F u L L Pa t h ( I n p u t S i g na t u r e F i L e Na me ) ) ) { 

□ Q e r r = 

n SIHPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHHEMORYFORINPUTDATASTRUCTURE; 
n n goto  error; 

a > 

n if  ( Pub L i cKey R i ngName  SS  Pu b L i c Key R i ng Na me C 0 D ) { 

n n if  ( ! ( r e f Pu b R i ng  = pg pN e w F i L e Re f F r om F u L L Pa t h ( Pu b L i c Key R i ng Na me ) ) ) { 
n n n e r r = 

n SIHPLEPGPVERIFYDETACHEDSIGNATUREFILE_NOTENOUGHMEMORYFORINPUTDATASTRUCTURE; 
n n n goto  error; 

□ □ > 

n } 


n err  = S i mp L e PG PVe r i f y De t a c h e d S i g na t u r e F i L e X (handle,  refData,  refSig, 
a n S i gna t u r e S t a t us , NULL,  0,  Signer,  S i g n e r Bu f Le n , 
n n SignDate,  S i g n Da t eBu f Le n , 

n n refPubRing,  kPG P F i L eOpe nMa y be Lo c a L E n c o d e , NULL,  NULL); 


error: 


□ 

a 

□ 

□ 

n 

□ 

n 

> 


if  (refData) 

n pg p F r ee F i L e R e f (refData); 

if  (refSig) 

n pgp F r ee F i L e Ref  (refSig); 
if  (refPubRing) 

a pgp F r ee F i L e Ref  (refPubRing); 
return  err; 


/* 

* Local  Variables: 

* tab-wi dth  : 4 

* End  : 

* V i : t s = 4 sw  = 4 

* vim:  si 
*/ 
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/* 

* spgpbuf.c  --  Simple  PGP  API  helper  Buffer  reading  and  writing 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights 

★ 

* $Id:  spgpbuf.c, V 1.5. 2.1  1997/06/07  09:51:52  mhw  Exp  $ 

*/ 


functions 

reserved. 


#if  HAVE_CONFIG_H 
#include  "config.h 
#endi  f 

#i  nc lude  <stdi o . h> 


^include  "spgp.h" 
#include  "spgpint.h 


/* 

* Pump  data  from  the  memory  buffer  at  InputBuffer,  of  size  I n pu t Bu f f e r Le n , 

* into  head.  Do  the  terminating  sizeAdvise  but  don't  do  the  teardown. 

*/ 

i nt 

spgpMemPump  (PgpPipeline  *head,  byte  * I n p u t Bu f f e r , size_t  I n pu t Bu f f e r Le n , 
n n n S PG PP r og r e s s C a I L Ba c k callBack,  void  * c a I I Ba c k A r g ) 

{ 


□ 

n 

□ 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

} 


size_t  totalSize  = InputBufferLen; 

int  err  = h e a d-> s i z e Ad v i s e (head,  InputBufferLen); 
while  (InputBufferLen  SS  !err)  { 
n size_t  written; 

n written  = head->write  (head,  InputBuffer,  InputBufferLen,  &err); 
n InputBuffer  +=  written; 

n InputBufferLen  -=  written; 

n if  (err) 

B B break; 

n if  (callBack  !=  NULL) 

a B err  = callBack  ( c a I L Ba c k A r g , totalSize  - InputBufferLen, 

B B B B B B totalSize); 

> 

head->sizeAdvise  (head,  0); 
return  err; 


/* 

* Set  *0u t pu t Bu f f e r Le n from  pipebuf,  using  defwrit  if  pipebuf  is  NULL 

* (which  can  happen  in  a multi  part  PGP  message;  we  may  have  closed 

* pipebuf  already  in  the  callback,  but  in  that  case  we  saved  the  size). 

* Return  0 if  OK  or  an  error  if  there  was  not  enough  room. 

*/ 

int 

s pg pH emOu t p u t (PgpPipeline  *pipebuf,  size_t  defwrit,  size_t  *0u t pu t Bu f f e r Len ) 


n size_t  written  = defwrit; 

n size_t  bufsize  = *OutputBufferLen; 

n if  (pipebuf) 

B B p i pebuf->a nno t a t e ( p i pebuf , NULL, 

B B B B PGPANN_HEM_BYTECOUNT,  (byte  *)awritten,  s i z e o f ( w r i t t e n ) ) ; 
B *0u t p u t Bu f f e r Le n = written; 
n if  (written  > bufsize) 
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n n return  S I M P LE PG PR E C E I V E BU F F E R_OUT PUTBU F F E RTOOSH A LL; 
n return  0; 

> 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spg pea L L ba c k . c --  Simple  PGP  API  helper  routines  to  deal  with  callbacks 

* from  pipeline  on  decryption 

* 

* Copyright  CO  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  s pg p c a I I ba c k . c , V 1.23.2.2  1 997/06/07  09:  51  : 53  mhw  Exp  $ 

*/ 


#include  "spgp.h" 
#include  "spgpint.h" 
#include  "pgpFileRef.h' 
^include  "pgpTypes.h" 
^include  "pgpDebug.h" 


/* 

* This  is  used  for  many  of  the  analyze  functions.  Once  we  get  our  answer, 

* we  return  the  INTERRUPTED  error  so  that  it  doesn't  grind  through  the 

* whole  message. 

*/ 

static  int 

spgpAnnotate  (void  *arg,  struct  PgpPipeline  *origin,  int  type, 
n byte  const  *string,  size_t  size) 

{ 

n SPgpSimpUI  *ui_arg,-  /*  Parameters  for  callbacks  */ 

n ui_arg  = (SPgpSimpUI  *)  arg; 

n (void)  origin; 

n (void)  string; 

n (void)  size; 


n if  ( u i _a r g ->a na I y z e < 0)  { 
n n switch  (type)  { 

n n case  PG P AN N_ PG PKE Y_B EG  I N : 

n n case  PG P AN N_ C I PH E R_B EG  I N : 

n B case  PG P AN N_ C OM PR E S S E D_B E G I N : 

B B case  PGPANN_CLEARSIG_BEGIN : 

B B case  PGPANN_SIGNED_SEP : 

B B B /*  Abort  once  we  have  our  answer  */ 

B B B u i _a r g->a n a I y z e = type; 

B B B return  PG P E R R_I NT E R RU PT E D ; 

B B /*  Signed  may  be  a detached  or  a regular  sig,  need  another  anno  */ 

B B /*B  B case  PGPANN_SIGNED_BEGIN : */ 

B B case  PGPANN_SIGNED_SIG : 

B B case  PGPANN_SIGNED_SIG2  : 

B B B u i _a r g->a n a I y z e = PG P AN N_ S I G N E D_B E G I N ; 

B B B return  PGPERR_INTERRUPTED; 

B B default: 

B B B return  PGPERR_0K; 

B B > 

B } else  if  ( u i _a r g->a na I y z e ) { 

B B return  PGPERR_INTERRUPTED; 

B } 

B /*  Detect  bad  parsing  situations  */ 

B if  (type  ==  PGPANN_ESK_TOO_BIG 
B B II  type  ==  PGPANN_SIGNATURE_TOO_BIG 

B B II  type  ==  PGPANN_PACKET_SHORT 
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n a II  type  ==  PG P AN N_ P A C KET_TR UN C AT E D 

n n II  type  ==  PG P AN N_ S C 0 PE_T RU N C AT E D ) { 

n n return  PG P E R R_ F I LE I 0_B A D PKT ; 
n } else  if  (type  ==  PGPANN_ARMOR_TOOLONG 
a n II  type  ==  PG P ANN_ ARMO R_B AD  LI N E 

n n II  type  ==  PG P ANN_ ARMO R_NO C R C 

a n II  type  ==  PG P ANN_ AR MOR_ C R C C ANT 

n a II  type  ==  PG P ANN_ ARHOR_ C R C B A D ) { 

n n return  PG P E R R_P A R S E A S C _B A D I N PUT ; 
n > 

n return  PGPERR_OK; 

> 


/* 

* Display  a message  as  appropriate. 

* Nothing  is  appropriate  for  us,  as  we  have  no  UI.  Assert  an  error 

* if  it  happens.  (Perhaps  better  simply  to  ignore  it.) 

*/ 

static  int 

s pgpS i mpMes sage  (void  *arg,  int  type,  int  msg,  unsigned  numargs,  ...) 

{ 

n SPgpSimpUI  *ui_arg;  /*  Parameters  for  callbacks  */ 

n ui_arg  = (SPgpSimpUI  *)  arg; 

n (void)type; 
n (void)msg; 
n (void)numargs; 
n return  0; 

/* 

* Say  what  to  do  when  we  unwrap  a layer. 

* We  will  always  fully  process  messages. 

*/ 

static  int 

spgpS i mpDoCommi t (void  *arg,  int  scope) 

{ 

n SPgpSimpUI  *ui_arg;  /*  Parameters  for  callbacks  */ 

n ui_arg  = (SPgpSimpUI  *)  arg; 

n (void)  scope; 

n /*  Now  do  all  analyze  actions  in  annotate  callback  so  we  can  abort  */ 
#if  0 

n if  ( u i _a rg->a na I y z e ) { 
n n if  ( u i _a r g ->a na  I y z e < 0) 

n n n u i _a r g ->a na I y z e = scope; 

n n else  if  (scope  ==  PG P AN N_ C LE ARS I G_B EG  I N ) 
n n n u i _a r g ->a na I y z e = scope; 

n n return  PG P AN N_P AR S E R_E AT  I T; 

n > 

#endi f 

, n return  PG P AN N_P A R S E R RECURSE; 

c ^ 


CECHK: ef 05e1 bd83f 9991 606edf eddf f 503244678a6d6ee42268980cb1 a90555040a4d0:: 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1795 


spgpcallback.c 


/*  Set  up  the  output  pipeline  as  appropriate  */ 
static  i nt 


spgpSn mpNewOutput  (void  *arg,  struct 


u 

char  const 

*suggested 

_name  ) 

Q 

SPgpSimpUI 

*u i _a  r g ; 

n 

Pg  p F i 1 e 

*pgpf;BB 

□ 

PGPFi  leRef B 

n 

□ 

* r e f ; B b 

n 

int 

nullflag, -B 

n 

PGPErrorB 

n 

a 

error; 

PgpPipeline  **output,  int  type, 

/*  Parameters  for  callbacks  */ 
/*  PgpFile  output  stream  */ 

/*  Ref  to  output  filename  */ 

/*  True  if  discarding  output  */ 


n ui_arg  = (SPgpSimpUI  *)  arg; 

n nullflag  = 0; 


n /*  Try  to  keep  output  open  if  we  have  multiple  key  packets  in  a row  */ 

n if  (*output  SS  u i _a rg->add key  &S  u i _a r g ->p i pe b u f && 

n n n u i _a r g->ou t r e f ==N U LL  SS  u i _a r g->ou t bu f ==N U LL)  { 

n n byte  enable; 

n n if  ( type==PGPANN_NONPGP_BEGIN ) { 

n B B / * 

n B B * Non-key  material  found  between  the  two  packets.  We  send  a 

B n B * disable  annotation  to  tell  the  pipebuf  module  to  discard  this 

B B B * intermediate  data. 

B B B * / 

B B B enable=0; 

B B B ( u i _a r g->p i pebuf ) ->a nno t a t e ( u i _a rg->p i pebu f , NULL, 

B B B B PGPANN_HEM_ENABLE,  Senable,  1 ) ; 

B B B returnO; 

B B } else  if  ( type  = = PGPANN_PGPKEY_BEGIN ) { 

B B B /* 

B B B * A second  or  later  key  packet  after  first.  We  may  have  disabled 

B B B * the  mem  buffer  if  there  was  nonkey  material,  so  re-enable  it 

B B B * now. 

B B B * / 

B B B enable=1; 

B B B ( u i _a rg->p i pebuf ) ->a nno t a t e C u i _a r g->p i pebuf , NULL, 

B B B B PGPANN_MEM_ENABLE,  Senable,  1 ) ; 

B B B return  0; 

B B } 

B > 


B /*  Ignore  non-PGP  portion  and  later  packets  */ 

B if  (type  ==  PGPANN_NONPGP_BEGIN  || 

B B ( u i _a r g->ou t r e f = = NU LL  &&  u i _a r g->o u t bu f = = N U LL ) ) { 
B B type  = PGP_LITERAL_TEXT,- 

B B nullflag  = 1; 

B > 


B /*  Discard  key  packets,  or  non-key  packets  if  we  are  adding  a key  */ 

B if  ((type  ==  PGPANN_PGPKEY_BEGIN)  !=  u i _a r g->a d d key ) { 

B B /*  No  longer  set  keyfail,  just  skip  unexpected  key  packets.  That 
B B * works  better  for  the  case  where  we  are  decrypting  an  incoming 

B B * message  which  starts  with  a key  packet. 

B B *B  i f ( ! u i _a r g ->a dd key ) 

B B *B  B + + ui _a rg->keyf a i I ; 

B B * / 

B B nullflag  = 1; 

B > 
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n /*  Detect  magic  filename  which  means  "for  your  eyes  only"  */ 
n ui_arg->fyeo  = s ug g e s t ed_na me  &S  0 = = strcmp  ( s ug g e s t e d_na me , "_C0NS0LE"); 


n /*  No  support  for  other  types  than  text  or  binary  now  */ 
n if  (type  !=  PG P_ LI T E R A L_T E XT ) 
n n type  = PG P_ LI T E R A L_B I N AR Y ; 


a 

n 

a 

□ 

Q 

□ 

n 

n 

a 

n 

D 

□ 


/*  Close  old  output  pipeline  */ 
if  ( *output  ) { 
n if  ( u i _a r g ->p i pe bu f ) ( 

n n ( u i _a r g->p i pebu f ) ->a nno t a t e ( u i _a r g->p i pebu f , NULL, 

n n n PG P AN N_M EM_B YT E C OU NT , (byte  * ) &u i _a r g ->o u t bu f s i z e , 

n n n si2eof(ui_arg->outbufsize)); 

n n u i _a r g->p i pebu f = 0; 
n } 

n ( *ou t pu t ) -> s i z e Ad V i s e (*output,  0); 
n (*output)->teardown  (*output); 
n *output  = NULL; 

} 


n /*  Handle  discarded  data  */ 

n if  (nullflag)  { 

D n pg p De vNu I I C r ea t e (output); 
n n return  0; 
n } 


n 

Q 

D 

□ 

□ 

n 

n 


if  (type==PGP_LITERAL_TEXT)  { 

n /*  Convert  to  local  line  endings  if  appropriate  */ 
n output  = pg pTex t F i I t C r ea t e (output, 

n pgpe  n vG  e t Po  i n t e r ( u i _a  rg->env,  PG  P E N\/_C  H A RH  A PTO  L AT  I N 1 , NULL, 

□ na  n a n NULL), 

n 0,  S i mp  I e PG PGe t Li ne EndTy pe ( ) ) ; 

} 


n 

□ 

□ 

□ 

n 

□ 

n 

n 


if  ( u i _a r g->ou t bu f ) { 

n u i _a r g->p i pe bu f = pg pH emMod C r ea t e (output,  (char  * ) u i _a r g->ou t bu f , 
n n u i _a r g ->ou t bu f s i z e ) ; 
a u i _a rg->ou t buf  = NULL; 
n if  ( ! u i _a r g->p i pebu f ) 
n n return  PGPERR_NOHEH; 
n return  0; 

> 


n /*  Only  use  output  name  ref  once,  discard  other  packets  */ 


n ref  = u i _a r g ->o u t r e f ; 
n u i _a r g->ou t r e f = NULL; 

n pg pAs s e r t ( ( u i _a r g-> I o ca I E n c od e & “ ( k PG P F i I eO pe nMa y b e Lo c a I E n c od e 

nnnnnnnnn  | kPG P F i I e 0 p e nN oHa c B i n C R C 0 ka y ) ) ==  0); 


n /*  Create  output  file  pipeline  */ 

n pgpf  = pg p F i I e Re f Open ( r e f , ( kPG P F i I eO pe n S t d W r i t e F I a g s | 
nnnnnnnn  u i _a r g-> I o c a I E n c od e ) , 

n n n n n n (type  ==  PG P_ LI T E R A L_T E XT  ? 
n n n n n n n kPG P F i I eTy pe D e c r y p t edT e x t : 

B n n n n B B k PG P F i I e Ty p e D e c r y p t e d B i n ) , Serror); 
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n if  (!pgpf) 

n n return  error; 

n if  ( ! pg p F i I eW r i t e C r ea t e (output,  pgpf,  1))  { 
n n return  PGPERR_NOMEM; 

B > 

n return  0; 

} 

/* 

* Look  for  input  file  when  we  find  a detached  signature. 

* We  can't  do  that. 

*/ 

static  int 

s pg p S i mp N e e d I n pu t (void  *arg,  struct  PgpPipeLine  *head) 

{ 

B SPgpSimpUI  *ui_arg;  /*  Parameters  for  callbacks  */ 

B ui_arg  = (SPgpSimpUI  *)  arg; 

B (void)head; 

B return  SIMPLEPGP_DETACHEDS1GNATURE FOUND; 

> 


/* 

* Given  the  signature  structure,  sig,  verify  it  against  the  hash 

* to  see  if  this  signature  is  valid.  This  requires  looking  up  the 

* public  key  in  the  keyring  and  validating  the  key. 

* 

* Returns  0 on  success  or  an  error  code. 

*/ 

static  int 

s pgpS i mpS i g Ve r i f y (void  *arg,  struct  PgpSig  const  *sig,  byte  const  *hash) 
{ 


n 

SPgpSimpUI 

*ui_arg; 

/* 

Parameters 

for  callbacks  */ 

Q 

RingObject 

*ringobj;B 

/* 

Public  key 

ring  object  */ 

Q 

PgpPubKey 

*pubkey;B 

/* 

Public  key 

for  verify  */ 

D 

byte  const 

*key i d ; B 

/* 

KeylD  from 

signature  */ 

D 

byte 

pka lg;B 

/* 

Public  key 

alg  from  signature  */ 

Q 

i nt 

e r r ; B b 

/* 

Error  from 

pgplib  */ 

Q 

ui_arg  = (SPgpSimpUI 

* ) arg; 

n 

keyid  = pgpSigId8  (sig); 

n 

pkalg  = pgpSigPKAlg 

(sig); 

u 

pubkey  = NULL; 

n 

ringobj  = NULL; 

n 

if  ( u i _a rg->a na 1 y z e 

< 0)  { 

□ 

n / * 

B B * Clearsign  messages  get  here  without  going  through  commit. 

B B * (Not  clear  if  this  is  necessary  any  more,  now  that  we  are  doing 

a a * analyze  in  annotate  callback.) 

n n */ 

B B u i _a r g->a na I y 2 e = PGPANN_CLEARSIG_BEGIN; 

B B return  0; 

B } 
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□ 

□ 

n 

n 

n 

D 

n 

□ 

□ 

□ 

□ 

n 

n 

n 

n 

a 

Q 

a 

n 

n 

n 

□ 

□ 

□ 

n 

□ 

D 

n 

□ 

□ 

□ 

D 

a 

D 


if  ( u i _a rg-> r i ng se t ) { 

a ringobj  = ringKeyByIdS  (ui_arg->ringset,  pkaLg,  keyid); 
n if  (ringobj)  { 

n n pubkey  = ringKeyPubKey  (ui_arg->ringset,  ringobj,  0); 

n > 

} 

if  (pubkey  &&  ! pu b key-> v e r i f y ) { 

n /*  Hake  sure  we  can  use  this  key  */ 
n pgpPubKeyDestroy  (pubkey); 
n pubkey  = NULL; 

} 

if  (!pubkey)  f 

n ui_arg->sigstatus  = S I G S T S_ NOT VE R I F I E D ; 
n r i ng 0 b j e c t R e L e a s e (ringobj); 

n return  0; 

} 

err  = pgpSigCheck  (sig,  pubkey,  hash); 
pgpPubKeyDestroy  (pubkey); 

if  (err  ==  1)  { 

n if  ( spg pKey OKToS i g n ( u i _a r g-> r i ng s e t , ringobj)) 
a a u i _a r g-> s i g s t a t u s = S I G STS_V E R I F I E D ; 
n else 

n n ui_arg->sigstatus  = S I G STS_V E R I F I E D_UNTRU ST E D ; 

> else  { 

n u i _a r g-> s i g s t a t u s = S I G ST S_B AD S I G ; 

} 

r i ng Ob j e c t R e L ea s e (ringobj); 
n 

u i _a rg->s i g t i meda t e = pg p S i gT i me s t amp  (sig); 

memcpy  (ui_arg->sigkeyid,  pgpSigIdS  (sig),  sizeof(ui_arg->sigkeyid)); 
u i _a r g -> s i g p ka L g = pgpSigPKALg  (sig); 


n return  0; 

> 


/* 

* given  a List  of  Encrypted  Session  Keys  (esklist),  try  to  decrypt 

* them  to  get  the  session  key.  Fills  in  keylen  with  the  Length  of 

* the  session  key  buffer. 

* 

* Returns  0 on  success  or  PG P AN N_P A R S E R_ E AT  I T on  failure. 

*/ 

static  int 

s pg p S i mp E s kDe c r y p t (void  *arg,  struct  PgpESK  const  *eskList,  byte  *key. 


n 

n size_t  *keylen 

n 

n int  (*tryKey) 

(void  *a  rg. 

byte 

const  *key 

, size_t  keylen). 

a 

f 

n void  *tryarg) 

\ 

n 

SPgpSimpUl 

*ui_arg; 

/* 

Parameters 

for 

callbacks  */ 

n 

PgpESK  const 

*e  s k; 

/* 

ESK  being 

tested  */ 

a 

RingObject 

*ringobj;n 

/* 

Secret  key 

r i ng 

object  */ 

a 

PgpSecKey 

*seckey;n 

/* 

Secret  key 

*/ 

□ 

byte  const 

*keyid;n 

/* 

Key  ID  from  ESK 

*/ 

H 

si z e_t 

passLen;n 

/* 

Length  of 

pass 

phase  from  UI 
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n byte 

n intnn  n n n 
n i n t 


p k a t g ; n 
success=0; 
e r r ; n n 


/*  Pubkey  algorithm  from  ESK  */ 

/*  True  if  had  a successful  decrypt  */ 
/*  Error  from  pgplib  */ 


n 

n 


n 

□ 


u i _a  r g 
pa  s s I e n 
s e c key 
r i n g 0 b j 


CSPgpSimpUI  *)  arg; 

strlen  ( u i _a r g->pa s s p h r a s e ) ; 
NULL; 

NULL; 


n 

u 

n 

□ 

□ 

□ 

n 

n 

n 

n 

□ 

Q 

n 

□ 

□ 

Q 

□ 

n 

□ 

n 

n 

□ 

n 

□ 


/*  Loop  over  all  ESK's  trying  to  find  one  we  can  decrypt  */ 
for  (esk  = esklist;  esk;  esk  = pgpEskNext  (esk))  { 
n switch  CpgpEskType  (esk))  { 

n case  PGP_ESKTYPE_PASSPHRASE  : 


n 

B 

/* 

Try  our  pass  phrase  */ 

B 

B 

i f 

(success)  (n  n n /*  If  already  succeeded,  s 

B 

B 

B 

u i _a r g->n pa s s +=  1; 

B 

B 

B 

break; 

B 

B 

} 

B 

n 

err 

= pg p E s kC on V D e c r y p t (esk,  ui_arg->env. 

B 

n 

B 

n n n u i _a r g ->pa s s ph r a s e , passLen,  key) 

B 

n 

*keyLen  = err; 

B 

n 

i f 

(err  >=  0)  { 

B 

B 

Q 

err  = tryKey  (tryarg,  key,  *keyLen); 

B 

B 

n 

if  (err)  { 

B 

B 

B 

n /*  Record  bad  passphrase  */ 

B 

B 

B 

n ++U i _a r g -> f a i L pa s s ; 

B 

B 

B 

> 

B 

B 

> 

B 

B 

i f 

( ! e r r ) ( 

B 

B 

n 

/*  Success  */ 

B 

B 

n 

success  = 1; 

B 

B 

> 

B 

B 

break; 

n n 

□ n 

□ n 

a n 

□ n 

n a 

c n 

n n 

n n 

n Q 

n n 

n D 

u B 

B B 

n □ 

B n 

□ n 

n n 

□ n 

B B 

□ B 

B B 

n B 

B B 


case  PGP_ESKTYPE_PUBKEY: 
a /*  Look  up  key  from  ESK  */ 
n keyid  = pgpEskIdS  (esk); 

n pkalg  = pgpEskPKAlg  (esk); 

n 

n /*  If  already  succeeded,  just  record  the  count  and  quit  */ 
n if  (success)  i 

n n if  (ui_arg->nesk  < S PG PU I _ E S KMAX ) i 

B B B memcpy  ( u i _a r g->o t h e r e s k E u i _a r g->n e s k3 , keyid,  8); 

B B B u i _a r g->o t h e r a I g C u i _a r g->ne s k3  = pkalg; 

n n > 

n n ui_arg->nesk  +=  1; 

n n brea  k; 

n > 

n 

n /*  seckey  !=  NULL  is  used  as  a flag  here  for  success  so  far  */ 
B seckey  = NULL; 
n if  ( u i _a  r g ->  r i ng  s e t ) -C 

n n ringobj  = ringKeyByIdS  ( u i _a r g-> r i ng s e t , pkalg,  keyid); 

B B i f ( ri  ngob  j ) -C 

B B B seckey  = r i ngSecSecKey  ( u i _a  r g-*>  r i ng  s e t , ringobj, 

nnnnnHnnn  PG P_PKU S E_ E N C R Y PT ) ; 
n n n r i ngOb j e c t R e I ea s e (ringobj); 

n n > 
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c 


c 


□ 

0 

0 

} 

□ 

0 

0 

/* 

See 

if  have  a good  decryption  key  */ 

Q 

0 

0 

i f 

(seckey  8&  ! seckey->decrypt ) { 

a 

0 

0 

0 

/* 

A matching  secret  key  of  a type  which  can't  decrypt?  */ 

n 

0 

0 

0 

pgpSecKeyDestroy  (seckey); 

n 

0 

0 

0 

seckey  = NULL; 

□ 

0 

0 

} 

n 

o 

0 

/* 

Unlock  decryption  key  */ 

n 

0 

0 

i f 

(seckey)  { 

n 

0 

0 

0 

err 

= pgpSecKeyUn lock  (seckey,  ui_arg->env. 

n 

0 

0 

0 

o 

nun  u i _a r g->pa s s p h r a s e , passlen); 

n 

0 

0 

0 

i f 

(err  <=  0)  { 

n 

0 

0 

0 

0 

/*  Pass  phrase  failed  to  unlock  */ 

n 

0 

0 

0 

0 

++ui_arg->fai lesk; 

Q 

0 

0 

0 

0 

pgpSecKeyDestroy  (seckey); 

n 

0 

0 

0 

0 

seckey  = NULL; 

n 

0 

0 

0 

} 

n 

0 

0 

} 

o 

0 

0 

/* 

T ry 

decrypting  the  ESK  */ 

n 

0 

0 

1 f 

( seckey)  ( 

□ 

0 

0 

0 

err 

= pgpEskPKdecrypt  (esk,  ui_arg->env,  seckey,  key); 

D 

0 

0 

0 

*keylen  = err; 

n 

0 

0 

0 

pgpSecKeyDestroy  (seckey); 

n 

0 

0 

0 

i f 

(err  <=  0)  ( 

0 

O 

0 

O 

o 

/*  Failed  to  decrypt  */ 

0 

0 

0 

0 

0 

seckey  = NULL; 

0 

0 

0 

0 

} 

0 

0 

0 

> 

0 

0 

0 

/* 

Now 

try  the  decrypted  ESK  against  the  rest  of  the  message  */ 

0 

0 

0 

if 

(seckey)  { 

0 

0 

0 

0 

err 

= tryKey  (tryarg,  key,  *keylen); 

0 

0 

0 

0 

i f 

(err)  { 

0 

0 

0 

0 

o 

/*  Failure  */ 

0 

0 

0 

0 

0 

seckey  = NULL; 

0 

0 

0 

0 

> 

0 

0 

0 

} 

0 

0 

0 

/* 

Did 

everything  work?  */ 

0 

0 

0 

i f 

(seckey)  f 

0 

0 

0 

0 

success  = 1; 

0 

0 

0 

> 

else 

( 

0 

0 

0 

0 

/* 

If  failed,  add  to  list  of  "other"  esk's  */ 

0 

0 

0 

0 

i f 

(ui_arg->nesk  < S PG PU I _ E S KM AX ) { 

0 

0 

0 

0 

0 

memcpy  ( u i _a rg->ot he r e s kC u i _a rg->ne s k: , keyid,  8); 

0 

0 

0 

0 

0 

ui_arg->otheralgCui_arg->nesk:  = pkalg; 

0 

0 

0 

0 

} 

0 

0 

0 

0 

u i _ 

,arg->nesk  +=  1; 

0 

0 

0 

0 

break; 

0 

0 

0 

} 

0 

O 

0 

break; 

0 

0 

default : 

0 

0 

0 

/* 

Unknown  ESK  type  */ 

0 

0 

0 

pgpAssert  (0); 
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n H n break; 

n n > 

n > 

n if  (success) 

n B return  0; 

B / * 

n * At  this  point,  none  of  the  PgpESKs  have  been  decrypted,  so  Let's 
n * inform  the  user  that  we  failed. 

B * / 

n u i _a r g->e n c f a i L = 1; 

n return  PG P E R R_I NT E RRU PT E D ; n /*  wiLL  be  PG P E R R_ C B_ I N V A LI D for  app  */ 

> 


/*  Set  up  the  UI  pointers  and  clear  the  ui_arg  */ 
void 

spgpUISetup  (PgpUICb  *ui,  SPgpSimpUI  *ui_arg) 

{ 


B 

B 

B 

B 

B 

B 

B 

B 

B 

} 


U 

u i 
u 


->message  = 

->doCommi t = 

->neuOutput 

->needlnput 

->sig\/erify 

->eskDecrypt 

->annotate  = 


spgpSimpMessage; 

spgpSimpDoCommi t; 

= spgpSimpNewOutput; 

= spgpSi  mpNeedInput; 

= spgpS  i mpS i g Ve r i f y ; 

= spgpSimpEskDecrypt; 
spgpAnnotate; 


memset  (ui_arg,  0,  sizeof  (*ui_arg)); 


/* 

* Local  Variables: 

* tab-wi dth : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

★ 

* 

* 

* 

* 

* 

*/ 


spgpdearmor.c  — Simple  PGP  API  helper 

Remove  ascii  armor  from  key  files  (or  mem  buffers) 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

$Id:  s pg pd e a r mo r . c , V 1.10.2.2  1997/06/07  09:51:54  mhw  Exp  $ 


#include  "spgp.h" 
^include  "spgpint.h 


/* 

★ 

* 

★ 

* 

* 

*/ 

static  int 

s pg p De a r mo r Key  (PgpEnv  *env,  int  fFilein,  PGPFileRef  *I n p u t F i I e R e f , 
n byte  * I n pu t Bu f f e r , size_t  I n p u t Bu f f e r Le n , 
n byte  **0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n ) 


Common  code  for  key  dearmoring  to  a dynamically  allocated  memory  buffer. 
Returns  *0u t pu t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 
passing  to  pgpMemFree.  *0 u t pu t Bu f f e r Len  holds  the  size  of  the  buffer. 
fFilein  determines  whether  we  take  the  key  data  from  I npu t F i I e Name  or 
from  I npu t Bu f f e r / I n pu t Bu f f e r Le n . 


n 

PgpPipeline 

*head,nn 

/* 

Pipeline  head  */ 

n 

* * t a i 1 ; 

/* 

Pipeline  tail  pointer  */ 

□ 

PgpFi leRead 

*pfrin;n 

/* 

Input  file  handle  */ 

n 

PgpUICb 

u i ; n n 

/* 

Callback  functions  */ 

u 

SPgpSi mpUI 

ui _a  rg; 

/* 

Parameters  for  callbacks  */ 

n 

byte 

*outbuf; 

/* 

Allocated  output  buffer  */ 

n 

si z e_t 

outbuf  len; 

/* 

Size  of  outbuf  */ 

n 

i nt 

e r r ; n n 

/* 

Error  variable  */ 

a 

byte 

dumi C 1 D ; 

/* 

Dummy  array  for  sizing  pass  */ 

D 

head  = NULL; 

n 

/*  Setup  the 

UI  callback  functions  */ 

n 

spgpUISetup  (&ui,  &ui_arg); 

n 

/*  Set  up  the 

Simple  UI  argument 

First  pass  will  just  get  length. 

n 

u i _a  rg . env  = 

env;n  n n n 

/* 

Environment  */ 

n 

ui_arg.addkey 

= 1 ; n n n n 

/* 

Request  key  addition  */ 

n 

ui _a  rg . outbuf 

= dumi ;n  n n 

/* 

Dummy  output  buffer  */ 

n 

u i _a r g . ou t bu f s i z e = 0; 

/* 

Will  get  length  afterwards  */ 

n 

/*  Set  up  pipeline  */ 

tt 

tail  = pg p D e c r y p t P i pe 1 i n e C r e a t e 

(Shead,  env,  NULL,  Sui,  &ui_arg); 

n 

/*  Send  data 

through  */ 

n 

if  (fFilein) 

{ 

*/ 


n 

□ 

a 

a 

□ 

n 

n 


/*  Open  input  file  */ 

pfrin  = pgpFi leRefReadCreateCInputFi  leRef,kPGPFi leOpenReadPerm,NULL); 
if  (Ipfrin)  { 

n err  = S I M PLE PG P A D D KE Y_ I N PUT F I LEN AM E DO E S NOT E X I ST ; 
n goto  error; 

> 

err  = pgp F i I eReadPump  (pfrin,  head); 
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□ 

a 

Q 

a 

a 

a 

Q 

a 

H 

n 

n 

□ 

□ 

n 

□ 

n 

Q 

n 

a 


n pgpFiLeReadDestroy  (pfrin); 
n head->sizeAdvise  (head,  0); 

> else  { 

n /*  Send  data  through  */ 

n err  = spgpMemPump  (head,  InputBuffer,  InputBufferLen,  NULL,  NULL); 

> 

if  (!err)  { 
n outbufLen  = 0; 

n (void)  spgpMemOutput  ( u i _a rg . p i pebu f , u i _a rg . ou t b u f s i z e , SoutbufLen); 
} 

head->tea rdown  (head); 
head  = NULL; 
u i _a rg . pi pebuf  = NULL; 
if  (err) 
n goto  error; 
if  (outbufLen  ==  0)  ( 

B err  = S I M PL E PG P_N0 PG PD AT A ; 

B goto  error; 

> 


B /*  Now  we  know  the  size  needed,  allocate  a buffer  to  hold  it  */ 
B outbuf  = (byte  * ) pg pMemA I L o c (outbufLen); 

B if  (!outbuf)  { 

B B err  = S I MP  LE  PG  P A D D KE  Y_N0T  E NOUG  HM  EMO  R Y F 0 R I N PUT  S TRU  C TU  R E ; 

B B goto  error; 

B } 

B ui _a rg . outbuf  = outbuf; 

B u i _a r g . ou t b u f s i z e = outbufLen; 


B /*  Send  data  through  again,  this  time  with  enough  room  */ 

B tail  = pgpDe c ry p t P i pe L i ne C r ea t e (&head,  env,  NULL,  &ui,  &ui_arg); 

B if  (fFiLein)  { 

B B pfrin  = pg p F i L e Re f R ea d C r ea t e ( I n pu t F i L e Re f , kPG P F i L eO pe n Rea d Pe rm, N U LL ) ; 
B B if  (Ipfrin)  ( 

BBS  err  = S I M P LE PG P A D DKE Y_I N PUT F I LE N AM E DO E S N OT E X I S T ; 

B B B gotoerror; 

B B } 

B B err  = pgpFiLeReadPump  (pfrin,  head); 

B B pgpFiLeReadDestroy  (pfrin); 

B B h e a d-> s i z e Ad V i s e (head,  0); 

B } e L s e { 

B B err  = spgpMemPump  (head,  InputBuffer,  InputBufferLen,  NULL,  NULL); 

B } 

B if  (!err)  { 

B B err  = spgpMemOutput  ( u i _a r g . p i pe bu f , u i _a r g . ou t b u f s i z e , 

B B B Soutbuf  Len) ; 

B > 

B head->tea rdown  (head); 

B head  = NULL; 

B if  (err)  { 

B B pgpMemFree  (outbuf); 

B B goto  error; 

B > 


B /*  Return  resulting  buffer  and  size  */ 
B *OutputBuffer  = outbuf; 

B *0u t pu t Bu f f e r Le n = outbufLen; 
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error: 

n if  (head) 

n n h ea d-> t ea r do wn  (head); 

n return  err; 

} 

/* 

* Dearmor  a key  from  a file  and  put  it  into  a dynamically  allocated  memory 

* buffer. 

* Returns  *0u t pu t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 

* passing  to  pgpHemFree.  *0u t p u t Bu f f e r Le n holds  the  size  of  the  buffer. 

*/ 

i n t 

spgpDea rmo rKey F i I e (PgpEnv  *env,  PGPFileRef  *I nput F i I eRef  , 
n byte  **0u t pu t Bu f f e r , si2e_t  *0 u t pu t Bu f f e r Le n ) 

{ 

n return  spg p D ea rmo r Key  (env,  TRUE,  I n pu t F i I e R e f , NULL,  (size_t)0, 
n n OutputBuffer,  OutputBufferLen); 

> 

/* 

* Dearmor  a key  from  a buffer  and  put  it  into  a dynamically  allocated  memory 

* buffer. 

* Returns  *0u t pu t Bu f f e r as  a buffer  holding  the  dearmored  key,  suitable  for 

* passing  to  pgpMemFree.  *0 u t pu t Bu f f e r Le n holds  the  size  of  the  buffer. 

*/ 

i n t 

s pg p D ea r mo r Key Bu f f e r (PgpEnv  *env,  byte  * I n p u t Bu f f e r , size_t  I n pu t Bu f f e r Len , 
n byte  **0u t pu t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n ) 

{ 

n return  s pg p D ea rmo r Key  (env,  FALSE,  NULL,  InputBuffer,  I n p u t Bu f f e r Le n , 
n n OutputBuffer,  OutputBufferLen); 

} 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi : t s = 4 sw  = 4 

* vim:  si 

*/ 


[CCHK:009ffa778f27d8dd31b44411cfa0f1a6e3888c63afd8d8c47b4:: 


Pretty  Oood  Privacy  5,0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1805 


spgpdecrypt.c 


/* 

* spgpdecrypt.c  --  Simple  PGP  API  helper  --  Return  status  of  decryption 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  s pg pd e c r y p t . c , V 1.3. 2.1  1997/06/07  09:51:54  mhw  Exp  $ 

*/ 


#if  HAVE_CONFIG_H 
#include  "config.h 
#endi  f 

#include  <stdio.h> 


#include  "spgp.h" 

#include  "spgpint.h" 

/*  Helper  routine  to  append  ( n o n-n u I I - 1 e r m i n a t e d ) strings  */ 
static  PGPError 

sappend  (byte  **ptr,  size_t  *ptrlen,  byte  const  *new,  size_t  newlen) 
{ 

n if  (pgpRealloc  ((void  **)ptr,  *ptrlen  + newlen  + 1)) 
n n return  PGPERR_NOMEM; 
n memcpy  (*ptr+*ptrlen,  new,  newlen); 
n *ptrlen  +=  newlen; 
n return  PGPERR_0K; 

} 


/* 

* Fill  in  pointer  fields  with  decryption  status  info,  set  return  value 

* appropriately  from  the  ui_arg  structure. 

*/ 

PGPError 

spgpDecryptStatus  (SPgpSimpUI  *ui_arg,  RingSet  const  *rspub,  char  *0therBuf, 
n size  t *0 t h e r Bu f Le n ) 


n 

PGPErrorn 

n 

n 

e r r ; 

n 

byten  a 

n 

n 

namebuf Cl  1 :;b  /*  Holds  0xXXXXXXXX  */ 

n 

by t en  a 

n 

*buf; 

□ 

size_ta  a 

n 

a 

bu  f 1 e n ; 

n 

i ntna  a 

n 

n 

i ; 

n if  ( u i _a rg->en c f a i I ) { 
n n if  ( u i _a r g-> f a i I e s k ) 

n n n err  = S I M PLE PG P_B A D KE Y P AS S PH R A S E ; 

n n else  if  ( u i _a r g->f a i I pa s s ) 

n n n err  = S I H PLE  PG  P_B  A D C ON  V E NT  I ON  A LP  A S S P H R A S E ; 

n n else 

nan  err  = S I M P LE PG P_N 0 N E X I ST E NT D E C R YPT I ON KE Y ; 
n > else  if  ( u i _a rg->keyf a i I ) ( 
n a err  = SIHPLEPGPRECEIVEBUFFER_ISKEY; 
n > else  if  ( u i _a r g->ou t r e f | | u i _a r g ->o u t bu f ) { 

an/*  These  are  set  to  NULL  by  callback  code  unless  we  got  no  PGP  data  */ 
a a err  = S I H P LE PG P_N 0 PG P D AT A ; 
a > e I s e { 

a a err=0; 

a a if  (OtherBuf  SS  OtherBufLen)  { 

a a a /*  Return  info  about  other  recipients  */ 
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n 

B 

B 

if 

(ui_ 

arg->nesk  ==  0 S8  u i _a r g->npa s s ==  0)  ( 

Q 

B 

B 

B 

/* 

No  other  recipients  */ 

n 

B 

B 

fl 

*0therBuf  = '\0'; 

n 

B 

B 

> 

else 

{ 

n 

B 

B 

B 

b u f 

= p g pHem A 1 1 0 c (1); 

Q 

B 

B 

fl 

i f 

( ! buf  ) 

B 

B 

B 

fl 

a 

return  PGPERR_N0MEM; 

B 

B 

B 

B 

*buf  = ■\0'; 

B 

B 

B 

fl 

buflen  = 0; 

B 

B 

B 

fl 

for 

(i=0;  i <mi n ( u i _a rg->nes k,  S PG PU I _ E S KM AX ) ; ++i ) ( 

B 

B 

B 

fl 

B 

char  const  *sname; 

B 

B 

B 

fl 

B 

s i ze_t  name  1 en; 

B 

B 

fl 

fl 

B 

sname  = spgpNameByID8  (rspub,  ui_arg->otheralgCi3, 

B 

B 

fl 

fl 

fl 

n n n n n u i _a r g->o t h e r e s k C i D , Rnamelen); 

B 

fl 

fl 

fl 

fl 

if  (! sname ) { 

B 

B 

fl 

B 

B 

n namebufC0D  = '0'; 

B 

B 

fl 

fl 

fl 

n namebuf  C 1 D = ' x ' ; 

B 

B 

B 

B 

B 

n s pg pKey I D T e X t 8 (namebuf+2,  u i _a r g->o t h e r e s k C i D ) ; 

B 

B 

fl 

B 

fl 

n sname  = (char  const  *)namebuf; 

B 

B 

fl 

fl 

B 

n name  1 en  = 10; 

B 

B 

fl 

B 

fl 

> 

B 

B 

fl 

B 

B 

if  ( i >0)  { 

B 

B 

fl 

B 

fl 

n if  (sappend  (&buf,  Sbuflen,  ",  ",  2))  ( 

B 

B 

B 

fl 

B 

n n pgpFree  (buf); 

B 

B 

fl 

fl 

B 

n n return  PGPERR_N0MEM; 

B 

B 

fl 

B 

B 

n } 

B 

B 

fl 

fl 

fl 

> 

B 

B 

B 

B 

B 

if  (sappend  (&buf,  Sbuflen,  sname,  namelen))  ( 

B 

B 

B 

B 

fl 

n pgpFree  (buf); 

B 

B 

B 

B 

B 

n return  PGPERR_N0MEM; 

B 

B 

B 

B 

fl 

> 

B 

B 

fl 

fl 

> 

B 

B 

B 

B 

i f 

(i  < u i _a r g->n e s k ) ( 

B 

B 

fl 

B 

fl 

byte  tmpbufC120D; 

B 

B 

B 

B 

B 

if  ( u i _a r g->npa s s ) ( 

B 

B 

fl 

B 

B 

n sprintf  (tmpbuf. 

B 

B 

B 

B 

B 

n ",  plus  %d  other  recipients  and  %d  pass  phrases.". 

B 

B 

fl 

B 

fl 

n ui_arg->nesk  - i,  ui_arg->npass); 

B 

B 

B 

B 

B 

> else  { 

B 

B 

fl 

fl 

B 

n sprintf  (tmpbuf,  ",  plus  %d  other  recipients.". 

B 

B 

B 

B 

fl 

n n n ui_arg->nesk  - i); 

B 

B 

B 

B 

B 

} 

B 

B 

fl 

B 

fl 

if  (sappend  (&buf,  Sbuflen,  tmpbuf,  s t r 1 e n ( t mpbu f ) ) ) ( 

B 

B 

fl 

fl 

B 

n pgpFree  (buf); 

B 

B 

fl 

fl 

B 

n return  PGPERR_N0MEM; 

B 

B 

fl 

B 

B 

> 

B 

B 

fl 

fl 

> 

B 

B 

fl 

B 

memcpy  (OtherBuf,  buf,  m i n ( *0 1 h e r Bu f Le n , buflen)); 

B 

B 

fl 

fl 

*0therBufLen  = buflen; 

B 

B 

fl 

fl 

pgpFree  (buf); 

B 

B 

fl 

> 

B 

B 

> 

B 

> 

B 

return 

err 

> 

/* 

* Local  Variables: 

CCCHK:  54f 670e0f c71  8f e897db98c0d994edd9071  cf 07acc5f 1 f 3cle10a71dd841e2ccef :: 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1807 


spgpdecrypt.c 


* tab-wi dth : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpinit.c  --  Simple  PGP  API  helper  --  Initialize  for  a SPGP  function. 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Based  on  PGP3  initapp.c  & appfile.c,  which  were 

* written  by:n  Derek  Atkins  <wa r I o r dSH I T . E D U> 

"k 

* $Id:  spgpinit.c, V 1.7. 2.1  1997/06/07  09:51:55  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#endi f 


^include  <stdarg.h> 
//include  <assert.h> 


//if  HAVE_STDLIB_H 
//include  <stdlib.h> 
//end i f 


//include 
//i  nc  lude 
//include 


pgpDebug . h 
spgp.h" 
spgpi nt . h" 


//include  "pgpKeyDB.h 


/* 

* Initialize  for  SPGP  functionality,  reading 

* setting  up  PGP  environment  based  on  config 
*/ 


envi ronment 

file. 


variables  and 


i nt 

spgpinit  (PgpEnv  **envp,  RingPool  **ringpoolp) 

{ 

n extern  PGPKDBExport  PgpEnv  *pgpEnv; 
n extern  PGPKDBExport  RingPool  *pg p R i ng Poo  I ; 
n PGPError  error; 

n error  = pg p L i b I n i t ( ) ; 
n if  (error) 

n n return  error; 

n *envp  = pgpEnv; 
n *ringpoolp  = pgpRingPool; 
n return  error; 

> 

void 

s pg p F i n i s h ( Pg p E n V *env0,  RingPool  *ringpool,  int  code) 
{ 

n (void)env0; 
n (void)ringpool; 

n pg p Ra nd Poo  I Key s t r o ke  (code); 

D pg  p L i b C I ea  n up  ( ) ; 

} 
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/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpint.h 


Simple  PGP  API  internal  header  file 


* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  spgpint.h, V 1.23.2.1  1997/06/07  09:51:55  mhw  Exp  $ 

*/ 


# i f nde  f 

SPGPINT.H 

#de  f i n e 

SPGPINT.H 

#if  HAVE 

.CONFIG. H 

^include 

"config.h" 

#endi f 

#i nc  lude 

<stdi 0 . h> 

#i f ndef 

PGPExport 

#def i ne 

PGPExport 

#e nd i f 

/*  PGP  1 

ibrary  */ 

# i n c 1 ud  e 

"pgpAnnotate.  h 

#i nc lude 

"pgpArmor.h" 

ttinclude 

"pgpConf.h" 

# i n c 1 ude 

"pgpConvKey. h" 

//include 

"pgpDecPipe.h" 

//include 

"pgpDevNull.h" 

//include 

"pgpEncPipe.h" 

//include 

"pgpEnv.h" 

//include 

"pgpErr.h" 

//include 

"pgpESK.h" 

//include 

"pgpFIFO.h" 

//include 

"pgpFi le.h" 

//include 

"pgpFi leRef.h" 

//include 

"pgpFi leHod.h" 

//include 

"pgpHem.h" 

//include 

"pgpMemMod.h" 

//include 

"pgpPipeline.h 

//include 

" pg  pPu  bKey . h " 

//include 

"pgpRndom. h" 

//include 

"pgpRndPool . h" 

//include 

"pgpRndSeed. h" 

//include 

"pgpRngPub. h" 

//i  nc  lude 

"pgpRngRead.h" 

//include 

"pgpSi g . h" 

//include 

"pgpSigPipe.h” 

//include 

"pgpSigSpec.h" 

//include 

"pgpTextFi  It.h 

//include 

"pgpTrstPkt.h" 

//include 

"pgpTrust.h" 

//include 

" pgpU I . h " 

//  i f d e f _ 

.cplusplus 

extern  " 

C"  { 

//endi  f 
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/* 

* Structs 
*/ 

/*  Number  of  keyid's  to  record  as  destinations  beside  this  one  */ 
#define  SPGPUI_ESKMAXn  3 

typedef  struct  SPgpSimpUI  { 


n 

PgpEnv 

*env;n  n n 

/* 

PGP  environment  vars  */ 

D 

RingSet 

const 

*ringset;n  n 

/* 

RingSet  to  seek  for  keys  */ 

n 

wo  r d 3 2 

sigtimedate;n 

/* 

Timestamp  of  sig  we  verified  */ 

u 

byte 

si gpka  Lg; 

/* 

PKALg  of  key  which  made  sig  */ 

n 

byte 

sigkeyid[I8D;n 

/* 

KeylD  of  key  which  made  sig  */ 

n 

char 

*passphrase;n 

/* 

Pass  phrase  to  unlock  key  */ 

Q 

PGPFi LeRef n 

n 

*outref;n  n 

/* 

Output  filename  ref  */ 

n 

byte 

*outbuf;n  n 

/* 

Output  buffer,  alt.  to  filename  */ 

□ 

si ze_t 

outbufsize;n 

/* 

I n i t i a 1 / f i n a 1 outbuf  count  */ 

n 

PgpPipeLine 

*pipebuf;n  n 

/* 

Output  buf  pipeline  pointer  */ 

Q 

i n t 

sigstatus;n 

/* 

Status  of  sig  verify  attempt  */ 

a 

int 

encfaiL;n  n 

/* 

True  if  decryption  failed  */ 

u 

i n t 

keyfaiL;n  n 

/* 

True  if  got  a key  packet  */ 

n 

int 

analyze; 

/* 

Nonzero  to  request  analysis  */ 

n 

i nt 

addkey;n  n 

/* 

Nonzero  to  request  keyadd  */ 

u 

i ntnn 

n 

n 

fyeo;nn  n 

/* 

Incoming  message  was  for  eyes  only  */ 

n 

PGPFi LeOpenFLags 

LocalEncode;n 

/* 

MacBinary  flags  for  receive  */ 

n 

i n t nn 

n 

n 

nesk;nn  n 

/* 

Number  of  other  esk's  encrypted  to  */ 

u 

by  ten 

n 

n 

othereskCSPGPUI 

_ESKHAXDC8D;n  /*  encrypted  to  others  */ 

n 

by  ten 

Q 

n 

othera  LgCSPGPUI 

_ESKnAX:;n  n /*  pkaLg's  ''  */ 

□ 

i ntnn 

n 

a 

npass;n  n 

/* 

U other  passwords  encrypted  to  */ 

n 

i n t nn 

n 

n 

fai Lpass;nn 

/* 

Count  of  conv  passphrases  failed  */ 

n 

i ntnn 

n 

n 

faiLesk;n  n 

/* 

Count  of  pubkey  passphrases  failed  */ 

y 

SPgpSimpUI 

/ 

/* 

* Prototypes 
*/ 

i nt 

spgpKeyOKToEncrypt  CRingSet  const  *set,  RingObject  *key,  int  UseUntrustedKeys); 
i nt 

s pg pKey 0 KTo S i g n (RingSet  const  *set,  RingObject  *key); 

PgpPubKey  * 

s pg pR e c i pTo Pu b key s (char  * Re c i p i e n t L i s t , RingSet  const  *rspub, 
n int  UseUntrustedKeys,  PgpEnv  *env,  int  *err); 

char  const  * 

s pg pN a me  By  I D8  (RingSet  const  *set,  byte  pkaLg,  byte  keyIDCS],  size_t  *nameLen); 
void 

spgpSi gnStatus  (SPgpSimpUI  *ui_arg,  RingSet  const  *rspub,  int  *psigstatus, 
n byte  *pkeyid,  size_t  keyidLen,  char  *psign,  size_t  signLen, 
n char  *pdate,  size_t  datelen); 

RingObject  * 

spgpGet S i gne rKey  (char  * S i g n e r Ke y I D , size_t  S i g n e r Bu f f e r Le n , PgpEnv  *env, 
C[CHK:3966e66c0336586a6c6eb9c363055e8fffe0bb9113cc13eea44e47aae6e78550cD: 
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n RingSet  const  *rset); 

PGPError 

spgpDecryptStatus  (SPgpSimpUI  *ui_arg,  RingSet  const  *rspub,  char  *0therBuf, 
n size_t  *0 1 h e r Bu f Le n ) ; 

i n t 

spgpHemPump  (PgpPipeLine  *head,  byte  * I npu t B u f f e r , size_t  I npu t Bu f f e r Le n , 
n S PG PP rog r e s s C a L L Ba c k caLLBack,  void  * c a L L Ba c k A rg ) ; 

i n t 

spgpMemOutput  (PgpPipeLine  *pipebuf,  size_t  written,  size_t  *OutputBufferLen); 
i n t 

spgpinit  (PgpEnv  **envp,  RingPooL  ** r i ng poo L p ) ; 
void 

spgpFinish(PgpEnv  *env0,  RingPooL  *ringpooL,  int  code); 
char  * 

s pg p F i L e NameBu i L d C c h a r const  *seg,  ...); 

char  * 

spgpFiLeNameExtend  (char  const  *base,  char  const  *ext); 
char  * 

s pg p F i L e N a me C o n t r a c t (char  const  *base); 
char  * 

s pg p F i L e NameNex t D i r e c t o r y (char  const  *path,  char  const  **rest); 
char  * 

spgpFi LeNameExtendPath  (char  const  *path,  char  const  *dir,  int  front); 
i nt 

s pg pOp en R i ng f i L e s (PgpEnv  *env,  RingPooL  *ringpooL, 
n PGPFiLeRef  *refPubRing,  PGPFiLeRef  * re f P r i vR i ng , 
n PgpFiLe  **pfpub,  RingFiLe  **rfpub,  RingSet  const  **rspub, 

n PgpFiLe  **pfsec,  RingFiLe  **rfsec,  RingSet  const  **rssec, 

n BooLean  uritabLe); 

i n t 

s pg p W r i t eou t S e t (PgpEnv  *env,  PGPFiLeRef  *fiLeref,  RingSet  *set, 
n RingFiLe  *oLdrfiLe,  PgpFiLe  *pfp,  BooLean  isPrivate); 

i nt 

spgpW r i t e A rmo r edS e t F i L e (FILE  *fp,  RingSet  const  *set,  PgpEnv  *env); 
int 

spgpWri teArmoredSetBuf f er  (byte  *buf,  size_t  *bufLen,  RingSet  const  *set, 
n PgpEnv  *env); 

void 

s pg p R i n g F i L e C L o s e (RingFiLe  *rfiLe); 
void 

s pg pKey I DTex t 8 (char  *out,  byte  *keyid); 
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void 

s pg p D a t eT e X t 1 0 (char  *out,  word32  date); 
void 

spgpExpTextS  (char  *out,  int  exp); 
void 

spgpUISetup  (PgpUICb  *ui,  SPgpSimpUI  *ui_arg); 
i n t 

s pg p D e a r mo r Key F i L e (PgpEnv  *env,  PGPFiLeRef  * I npu t F i L e R e f , 
a byte  **0u t p u t Bu f f e r , size_t  *0u t pu t Bu f f e r Le n ) ; 

int 

spg p Dea rmo rKeyBu f f e r (PgpEnv  *env,  byte  * I n pu t Bu f f e r , size 
a byte  **0u t p u t Bu f f e r , size_t  *0u t p u t Bu f f e r Le n ) ; 

PGPError 

spgpRngCheck  (void); 


#ifdef  __cpluspLus 

> 

#e  nd i f 

#endif  /*  SPGPINT  H */ 


/* 

* 

Lo  c a 

L 

Variables 

★ 

t a b- 

■w  i 

dth  : 4 

★ 

E n d : 

it 

V i : 

t s 

=4  su=4 

* 

vim: 

5 

i 

*/ 
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/* 

* spgpkcheck.c  — Simple  PGP  API  helper  — Check  key  validity 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgpkcheck. c,v  1.4. 2.1  1997/06/07  09:51:55  mhw  Exp  $ 

*/ 


#if  HAVE_CONFIG_H 
#include  "config.h" 

# e nd i f 

//include  <stdio.h> 

//include  "pgpDebug.h" 
//include  " pg  pT  i me  Da  t e . h ' 
#include  "pgpTypes.h" 
//include  "spgp.h" 
//include  "spgpint.h" 


/*  Return  1 if  key  is  OK  to  use,  else  0 */ 
i nt 

s pg pKey OKTo E n c r y p t (RingSet  const  *set,  RingObject  *key,  int  U s e U n t r u s t ed Key s ) 
{ 

*name ; 

* i t e r ; 
expi ration; 
trust; 
validity; 
pgptrustmodel; 


union  RingObject 
struct  Ringiterator 
PG  PT i me 
i n t 

wo  r d 1 6 

PgpT  rustMode I 


n pgptrustmodel  = pgpTrustMode I (ringSetPool  (set)); 

n if  ( ri ngKeyRevoked  (set,  key))  { 
n n return  0; 

n } 

n if  ( r i ngKey D i sa b I ed  (set,  key))  { 
n n return  0; 

n } 

n if  ((expiration  = r i ngKey Ex p i r a t i on  (set,  key))  > 0 &8 
n expiration  <=  pgpGetTi me ( ) ) { 

n n return0; 

n > 

n iter  = r i ng I t e r C r e a t e (set); 
n pg pAsse r t ( i t e r !=  NULL); 

n ringIterSeekTo  (iter,  key); 

a while  ( r i ng I t e r N ex t Ob j e c t (iter,  2)  > 0)  { 
n n name  = ringIterCurrentObject  (iter,  2); 

n n pgpAssert(name  !=  NULL); 

n n if  ( r i ngOb j e c t Ty pe  (name)  ==  R I NGT Y P E_N AH E ) { 

n n n r i ng I t e r D e s t r oy  (iter); 

n n n if  (pgptrustmodel  ==  PGPTRUST0)  { 

n n n n trust  = r i ng Na meT r u s t (set,  name); 

n n n n switch  (trust)  ( 

n n n n case  PG P_N AM ET R U ST_U N KNOWN : 

n n n n case  PGP_NAHETRUST_UNTRUSTED  : 
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n 

□ 

□ 

n 

□ 

□ 

Q 

n 

n 

n 

□ 

Q 

n 

n 

n 

n 

} 


n n n case  PG P_N AM ET R U ST_n ARG I N A L : 

n n n B return  U s e U n t r u s t e d Key s ; 

B B B default: 

B B B B return  1; 

B B B > 

B B > else  {b  B B /*  new  trust  model  */ 

B B B validity  = r i ng N a me Va I i d i t y (set,  name); 

B B B if  (validity  ==  0 | | ! r i ng T r u s t Va I i d (set, 

B B B B return  U s e U n t r u s t e dKey s ; 

B B B > 

B B B returni; 

B B > 

B } 

} 

/*  No  name  on  key  */ 
return  0; 


/*  Return  1 if  key  is  OK  to  use  for  sig  verification,  else 
i n t 

spgpKeyOKToS i gn  (RingSet  const  *set,  RingObject  *key) 

{ 

B /*  Same  test  as  above,  don't  allow  untrusted  keys  */ 

B return  s pg pKey OKTo E n c r y p t (set,  key,  0); 

} 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* s pg pname  i d8 . c — Simple  PGP  API  helper  — Name  from  key  ID 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  s pg pname i d 8 . c , V 1.4. 2.1  1997/06/07  09:51:55  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#include  "config.h" 

#endi  f 

^include  <stdio.h> 


^include  "spgp.h" 
//include  "spgpint.h" 


/* 

* Get  a name  associated  with  the  specified  key,  known  by  its  ID  and  alg. 

* Return  a pointer  to  the  name  and  set  its  length  in  *namelen.  Return 

* NULL  if  there  is  an  error. 

*/ 


char  const  * 

spgpNameByl  D8  (RingSet  const  *set,  byte  pkalg,  byte  keyID[!8],  size_t  *namelen) 
{ 


n 

Ri ngOb jectn  a 

*key; 

n 

Ringiteratorn 

*i ter; 

n 

RingObjectn  n 

*na  me , 

n 

n n n □ 

*bestname  = NULL; 

a 

unsignedQ  Q 

validity. 

n 

□ nan 

bestvalidity  = 0; 

n 

i ntnn  n n 

Level; 

n 

size_tn  n n 

L name; 

n 

Boo  1 ea  nnn  n 

firstpass  = 1; 

n 

char  constn  n 

* s n a m e ; 

n 

PgpTrustModeln 

pgpt  rustmode  L ; 

n 

pgptrust model  = 

pg pT r u s t Hod e L (ringSetPooL 

n 

if  ( name  1 en ) 

Q 

n *namelen  = 

0; 

n 

key  = ringKeyById8  (set,  pkalg,  keylD); 

n 

if  (!key) 

n 

a return  NULL 

r 

a 

iter  = r i ng I t e r C r e a t e (set); 

n 

if  ( ! set  ) 

Q 

n return  NULL 

r 

Q 

Level  = r i ng I t e r S e e kTo  (iter,  key); 

D 

if  (Level  <=  0) 

{ 

n 

a r i ng I t e r D e s t r oy  (iter); 

n 

n return  NULL 

/ 

n 

> 

n 

Level  +=  1; 

n 

/*  Select  most 

valid  name  */ 

(set)); 
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n 

wh 

1 L e 

(ringIterNextObject  (iter,  level)  > 0)  ( 

n 

B 

name  = r i ng I t e r C u r r e n t 0 b j e c t (iter,  level) 

n 

B 

i f 

(ringObjectType(name)  !=  RINGTYPE_NAME) 

u 

B 

B 

continue; 

n 

B 

i f 

(pgpt  rustmode  1 ==  PGPTRIIST0) 

Q 

B 

B 

validity  = r i ng N a meT r u s t (set,  name); 

a 

B 

e L 

s e 

n 

B 

B 

validity  = r i ng Na me Va 1 i d i t y (set,  name 

a 

B 

i f 

(validity  > bestvalidity  ||  firstpass) 

n 

B 

B 

if  (bestname) 

n 

B 

B 

n r i n g Ob j e c t Re  1 e a s e (bestname); 

□ 

B 

B 

bestvalidity  = validity; 

n 

B 

B 

bestname  = name; 

n 

B 

B 

ringObjectHold  (bestname); 

B 

B 

B 

firstpass  = 0; 

B 

B 

> 

B 

> 

B 

r i ng I t e r D e s t r oy  (iter); 

B 

s n a me 

= ringNameName  (set,  bestname,  Slname); 

B 

r i 

ngOb j e c t Re l ea s e (bestname); 

B 

i f 

( name  1 en ) 

B 

B 

*namelen  = Iname; 

B 

return 

sname; 

} 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpreclist.c  — Simple  PGP  API  helper  routines  to  deal  with  the 

* reci pi ent  list 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id;  spgprec I i st . c,v  1.4. 2. 2 1997/06/07  09:51:56  mhw  Exp  $ 

*/ 

#include  "spgp.h" 

//include  "spgpint.h" 

//include  "pgpCipher.h" 

struct  alginfo  { 


n 

i nt  n; n n n 

n 

n 

Q 

a 

/* 

Numbe  r 

of  algorithms  */ 

□ 

byte  *algok;n 

n 

D 

o 

a 

/* 

//  recips  who  can  accept  this  */ 

n 

short  *votes;n 

□ 

n 

a 

a 

/* 

Preference  voting,  lower=better  */ 

a 

>; 

int  counts; nn 

n 

n 

a 

a 

/* 

Numbe  r 

of  recips  * / 

/*  Init  the  structure  we  will  use  to  choose  the  conv  encryption  alg  */ 
static  void 

s pg p I n i t A I g I n f o (struct  alginfo  *alginfo) 
n unsigned  n; 


memset  (alginfo,  0,  sizeof  (*alginfo)); 

/*  Count  how  many  ciphers  we  know  about  */ 
for  (n=1;  pg p C i p h e r By N umbe r ( n ) ; ++n) 

n -=  1 ; 

alginfo->n  = n; 

a I g i nf o->a Igok  = pgpMemAlloc  (n); 
a I g i n f o-> VO t e s = pgpHemAlloc  C2*n); 
pgpAssert  ( a I g i n f o->a  I go k &&  a I g i n f o-> vo t e s ) ; 
memset  (a Igi nf o->a Igok,  0,  n); 
memset  ( a I g i n f o-> vo t e s , 0,  2*n); 


n 

Q 

n 

D 

n 
n 
n 
n 
n 
□ 
n 
> 
a 

/* 

* Add  info  for  the  preferred  algs  for  one  recipient. 

* are  acceptable  and  then  use  preference  voting. 

*/ 

static  void 

s pg p Re c o r d P r e f s (struct  alginfo  *alginfo,  byte  const  *prefs,  size_t  plen) 

{ 

n uns i gned  i ; 
n byte  alg; 


We  record  which  algs 


++alginfo->counts; 

for  (i=0;  i<plen;  ++i ) ( 


alg  = prefsCiD; 
if  (alg  > alginfo->n) 
n continue; 

a I g i n f o-> vo t e s C a I g-1 D +=  i;n  /*  Preference  voting,  lower  = better  */ 
++alginfo->algokCalg-1D; 
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> 

/*  Choose  the  most  popular  algorithm  of  those  which  were  acceptable  to  all  */ 
static  PGPError 

s pg p C h 00 s e A I g o r i t hm  (struct  alginfo  *alginfo,  PgpEnv  *env) 

{ 

n int  bestvote  = 0;n  n n n /*  Silence  warning  */ 

n int  bestalg  = 0; 


n 

1 n t 

i ; 

n 

for 

( i 

=0;  i <a 1 g i n f o->n ; ++i ) ( 

□ 

n 

i f 

( a 1 g i n f o->a 1 g 0 k C i 3 ==  a 1 g i n f o-> c ou n t s && 

n 

n 

□ 

(tbestalg  ||  a 1 g i n f o-> vo t e s C i ] < 

bestvote))  { 

n 

n 

D 

bestvote  = a 1 g i n f o-> vo t e s C i ] ; 

□ 

□ 

□ 

bestalg  = i+1; 

Q 

n 

> 

s 

> 

Q 

i f 

(tbestalg)  { 

n 

n 

/* 

This  means  there  was  no  algorithm 

which  all  cou 

n n return  SIHPLEPGP_INCONSISTENTRECIPIENTSET; 
a } 

n pgpenvSetInt  (env,  PG P E N V_ C I PH E R , bestalg,  PG P E N V_PR I _ F 0 R C E ) ; 
n return  PGPERR_OK; 

} 

□ 

static  void 

s pg pC I ea n up A I g I n f o (struct  alginfo  *alginfo) 

{ 

n pgpFree  ( a I g i n f o-> vo t e s ) ; 
n pgpFree  (alginfo->algok); 

} 

/* 

* Return  a list  of  PubKeys  corresponding  to  the  recipient  list,  or  NULL 

* on  error,  setting  *error  if  so.  rspub  is  the  ringset  to  look  in. 

*/ 

PgpPubKey  * 

spgpReci pToPubkeys  (char  * Re c i p i e n t Li s t , RingSet  const  *rspub. 


n 

r 

int  UseUnt rustedKeys,  PgpEnv  *env 

, int  *err) 

\ 

n 

R i ng S e t 

*rsuser;n 

/* 

Ringset  holding  keys  for  userid  */ 

□ 

Ringiterator 

*riuser;n 

/* 

Iterate  over  rsuser 

*/ 

□ 

PgpPubKey 

*pkuser,n 

/* 

Public  key  for  one 

recipient  */ 

Et 

♦pubkeys; 

/* 

All  public  keys  for 

recips  */ 

n 

RingObject 

*robuser;n 

/* 

RingObj  for  encryption  key  */ 

nby  t e 

includewhat 

;/* 

Code  for  what  is  in 

reci p list  */ 

□ 

byte  constn  n 

n *palgs;n 

/* 

Preferred  algorithm 

array  * / 

□ 

size_tn  n a 

n palglen;n 

/* 

Length  of  pa Ig  */ 

n 

struct  alginfon 

n alginfo;n 

/* 

Preferred  algorithm 

choice  */ 

n 


n pubkeys  = NULL; 
n if  ( ! Re c i pi en t Li s t ) i 

n n *err  = S I H P L E PG P R E A D R E C I P I E NT  LI ST_N U LLPO I NT E RO R EH PT Y L I ST ; 
n n return  NULL; 
n } 

n includewhat  = *(byte  *)RecipientList++; 
n if  (includewhat  !=  I N C LU D E_ON L Y U S E R I D S && 

a n includewhat  !=  I N C LU D E_ON L YKE Y I D S SS 
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u n 

includewhat  !=  INCLUDE_B0TH ) { 

n n 

*err  = SIHPLEPGPREADRECIPIENTLIST_LISTDOESNOTSTARTWITHGOODCODECHAR; 

s n 

return  NULL; 

n > 

n /*  Skip  name  in  recipient  List  if  have  names  & userids  */ 


n i f 

(includewhat  ==  I N C LU D E_B0T H ) { 

□ n 

char  *rLterm  = strchr  (RecipientList,  '\n'); 

n n 

if  (IrLterm)  { 

n n 

n *err  = S I H P LE PG PR E A D R E C I P I E NT L I ST_ L I S T DO E S N OT E N D W I T H N E W L I N E ; 

B B 

n return  NULL; 

B B 

> 

B B 

Re c i p i en t Li s t = rLterm  + 1; 

n } 

n s pg p I n i t A L g I n f o C&aLginfo); 


n /* 

Loop  for  each  name  or  keylD  in  R e c i p i e n t L i s t */ 

n do 

{ 

n n 

char  *rLterm  = strchr  ( R e c i p i e n t L i s t , '\n'); 

B B 

if  (IrLterm)  { 

B B 

n *err  = S I M P LE PG PR E A D R E C I P I E NT  LI ST_ LI  ST  DO E S NOT E N D W I T HN E W LI N E ; 

B B 

n goto  error; 

B B 

} 

B B 

*rLterm  = '\0'; 

B B 

rsuser  = ri ngSetCreate  (ringSetPooL  (rspub)); 

B B 

if  ( ! r i ng S e t F i 1 t e r S pe c (rspub,  rsuser.  Re c i p i e n t L i s t , 

B B 

n n n n n n PG P_PKU S E_ EN C R Y PT  ) ) C 

B B 

n *rLterm  = '\n'; 

B B 

n *err  = KE RN E L_N0N E X I ST_KE Y_ E R RO R ; 

B fl 

n r i ng S e t D e s t r oy  (rsuser); 

B B 

n goto  error; 

B B 

} 

B B 

*rLterm  = '\n'; 

B B 

ringSetFreeze  (rsuser); 

B B 

riuser  = r i ng I t e r C r e a t e (rsuser); 

B B 

r i ng I t e r Nex t Ob j ec t (riuser,  1); 

B B 

robuser  = r i ng I t e r C u r r e n t 0 b j e c t (riuser,  1); 

B B 

if  ( ! spgpKeyOKToEncrypt  (rspub,  robuser,  U s eU n t r u s t e d Key s ) ) ( 

B B 

n r i n g Ob j e c t Re L ea s e (robuser); 

B B 

n ringIterDestroy  (riuser); 

B B 

n r i ng S e t D e s t r oy  (rsuser); 

B B 

n *err  = S I H PLE PG PR E A D R E C I PI  ENT  LI S T_ C AN NOTU S EU NT RU ST E DKE Y ; 

fl  B 

n goto  error; 

B fl 

} 

fl  B 

paLgs  = r i ng Key F i nd S u bpa c ke t (robuser,  rsuser,  S I G S UB_PR E F E R R E D_ A LG S , 

fl  fl 

n 0,  SpaLgLen,  NULL,  NULL,  NULL,  NULL,  err); 

B B 

if  (IpaLgs  &S  *err)  { 

fl  B 

n r i ng Ob j e c t R e L e a s e (robuser); 

fl  B 

n ringIterDestroy  (riuser); 

B fl 

n ringSetDestroy  (rsuser); 

B B 

n goto  error; 

B B 

> 

fl  B 

if  (IpaLgs)  { 

fl  fl 

n byte  aLg  = PG P_ C I PH E R_ I D E A ; 

B B 

n spgpRecordPrefs  (&aLginfo,  &aLg,  1); 

fl  fl 

> else  { 
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□ D 

n n 

c n 

n □ 

□ n 

n □ 

a □ 

□ Q 

n □ 

□ n 

□ □ 

n n 

□ □ 

Q n 

Q □ 

□ a 

Q n 

a c 

n a 

n n 

□ a 

n □ 

Q □ 

a □ 

n □ 

D □ 

n D 

n D 

n Q 

D n 

□ Q 

Q n 

□ □ 

a □ 

□ □ 

n > 


n spgpRecordPrefs  C&aLginfo,  paLgs,  paLgLen); 

> 

pkuser  = r i ng Key Pu b Key  (rsuser,  robuser,  PG P_ PKU S E_ E N C R Y PT ) ; 
r i ngOb j e c t Re L ea s e (robuser); 
if  (Ipkuser  | | ! pkuse r->enc rypt ) { 

n *err  = S I M P L E PG P_ R E C I P I E NT KE Y S I G N AT U R EO N L Y ; 
n if  (pkuser)  { 

n n /*  Key  with  no  encryption  part,  should  not  happen  */ 
n a pgpPubKeyDest roy  (pkuser); 

n > e L se  { 

n a /*  Problem  with  key  itself;  if  UNIHP,  use  high  level  error  */ 

a a PGPError  erri  = r i ng S e t E r r o r ( r s u s e r ) ->e r r o r ; 

a a if  (erri  !=  PG P E R R_PUBKE Y_U N I H P ) { 
n a a *err=err1; 

a a } 

n > 

n ringIterDestroy  (riuser); 
n r i ng S e t D e s t r oy  (rsuser); 

n goto  error; 

} 

pgpPubKeyNext  (pkuser)  = pubkeys; 
pubkeys  = pkuser; 
ringIterDestroy  (riuser); 
ringSetDestroy  (rsuser); 

Re c i p i e n t L i s t = rlterm  + 1; 
if  (includewhat  ==  I N C LU D E_B0T H ) { 
a rlterm  = strchr  (RecipientList,  '\n'); 
n if  (!rlterm)  { 

a a *err  = S I M P LE PG P R E A D R E C I PI E NT L 1 S T_ LI  ST D 0 E S NOT E N D W I T H N E W LI N E ; 
a a goto  error; 

n } 

n Re c i p i e n t L i s t = rlterm  + 1; 
n if  ( *Re c i p i en t L i s t ==  '\0') 
a a break; 

} 

while  (*RecipientList  !=  '\0'); 


/*  Choose  the  conventional  encryption  algorithm,  put  in  env  */ 
*err  = s pg p C h o o s e A I g o r i t h m (Salginfo,  env); 
if  (*err) 
a goto  error; 


n spgpCleanupAlglnfo  (Salginfo); 


n return  pubkeys; 


error: 

n while  (pubkeys)  { 

n a PgpPubKey  *pk1  = pgpPubKeyNext  (pubkeys); 
n a pg p Pu bKey D e s t r oy  (pubkeys); 

o a pubkeys  = pkl; 
a } 
a 

n spgpCleanupAlglnfo  (fialginfo); 

o return  NULL; 

} 
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/* 

* Local  Variables: 

* tab-width:  4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgpring.c  --  Simple  PGP  API  helper  --  Keyring  access  functions 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgpring.c, V 1.25.2.3  1997/06/07  09:51:56  mhw  Exp  $ 

*/ 


#if  HAVE_C0N FIG_H 
#include  "config.h 
#end  i f 

#include  <stdio.h> 


#ifdef  HAVE_UNISTD_H 

#include  <u n i s t d . h>n / * For  unlinkC)  */ 
#e n d i f 


#ifdef  HAVE_FCNTL_H 

^include  <fcntl.h>n  n /*  For  0_CREAT,  0_EXCL  */ 
#e n d i f 


1 ude 

"pgpDebug.h" 

1 ude 

"spgp  . h" 

1 ude 

"spgpint.h" 

1 ude 

" pg  pKey D B . h " 

1 ude 

"pgpFileNames.h 

1 ude 

"pgpFileRef.h" 

/* 

* Open  the  default  or  specified  keyring  fileCs). 

* If  only  want  one,  leave  pfXXX,  rfXXX  and  rsXXX  all  null. 

* If  filenames  are  null  or  empty  strings,  uses  default  from  env. 
*/ 

i nt 

spgpOpenRingfiles  (PgpEnv  *env,  RingPool  *ringpool, 
n PGPFileRef  * Pu b I i c Key R i n g Re f , PGPFileRef  *P r i va t e Ke y R i ng Re f , 
n PgpFile  **pfpub,  RingFile  **rfpub,  RingSet  const  **rspub, 

n PgpFile  **pfsec,  RingFile  **rfsec,  RingSet  const  **rssec. 


Q 

f 

Boolean  wri 

t a b (. 

e ) 

□ 

i n t nn  n 

n 

a 

err 

= 0; 

U 

PGPFi leRef 

*n 

n 

pubR 

i ng  R e f 

= NULL; 

a 

PGPFi leRef 

*n 

n 

s e c R 

i ng  Re  f 

= NULL; 

Q 

FILE  *n  n 

Q 

n 

pub  F 

i 1 e = 

NULL; 

n 

FILE  *n  n 

n 

n 

s e c F 

i 1 e = 

NULL; 

n 

PGPFi leOpenFlag 

sn 

open 

Flags; 

a 


a (void)env; 

n openFlags  = writable  ? kPG P F i I e Ope n Rea d W r i t e Pe r m : kPG P F i I e 0 pe n Re  a d Pe rm; 
□ 

n if  ( pg pG e t Key R i ng F i I e Re f s C &p u b R i ng Re f , SsecRingRef)  !=  PGPERR_0K) 
n n return  S I H P LE PG P_ E R ROR R E A D I N G PU BR I NG ; 

a i f (pf pub  ! = NULL) 
n { 
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n n 

*pfpub  = NULL; 

□ D 

*rfpub  = NULL; 

n n 

*rspub  = NULL; 

n > 

n i f (pf sec  ! = NULL) 


n { 

n n 

*pfsec  = NULL; 

a n 

*rfsec  = NULL; 

□ n 

*rssec  = NULL; 

n > 

Q 

n 1 f 

n { 

(pfpub  !=  NULL) 

□ n 

if  ( Pu b 1 i c Key R i ng Re f ) 

a n 

{ 

a Q 

n pg p F ree F i L eRe f ( pubR i ng Re f ) ; 

n n 

n pubRingRef  = pg p C opy F i L e R e f ( Pu b L i c Key R i ng R e f ) ; 

0 0 

n if  (pubRingRef  ==  NULL) 

0 0 

n { 

O 0 

n a err  = KE RN E L_0 UT_0 F_M EH ; 

0 0 

a n goto  error; 

0 0 

n > 

0 0 

> 

0 0 

pubFile  = pgpFi LeRef StdIOOpenCpubRi ngRef , openFLags, 

0 O 

n n n n n n n kPG P F i L eTy p e N on e , Serr); 

0 0 

if  (pubFiLe  ==  NULL) 

0 0 

{ 

0 0 

n if  (err  ==  PG P E R R_ F I L E_W R I T E LO C KE D ) 

O 0 

n { 

0 0 

n n err  = S I H PL E PG P_KE Y R I NG WR I T E LO C KE D ; 

0 0 

n n goto  error; 

0 0 

n > 

0 0 

a else  if  (err  ==  PG PE R R_ F I LE_PE RH I S S 1 0 N S ) 

0 0 

n { 

0 0 

n n err  = S I HPLE PG P_KE YR I NG P E RH I S S I 0 N S ; 

0 0 

n n goto  error; 

0 0 

n } 

0 0 

> 

0 0 

*pfpub  = pgpFi LeReadOpen  (pubFile,  NULL,  NULL); 

0 0 

if  (*pfpub  ==  NULL) 

0 0 

{ 

0 0 

n err  = S I HP LE PG P_E RROR R E A D I NG PUBR I N G ; 

0 0 

n goto  error; 

0 0 

> 

0 0 

*rfpub  = ringFileOpen  (ringpool,  *pfpub,  1,  &err); 

0 0 

if  (*rfpub  ==  NULL) 

0 0 

{ 

0 0 

n err  = S I H P LE PG P_E R RO R R E A D I NG PU BR I NG ; 

0 0 

n goto  error; 

0 0 

> 

0 0 

*rspub  = r i ng F i 1 e S e t ( * r f pu b ) ; 

n > 

0 if 

n -C 

(pf sec  ! = NULL) 

0 0 

if  ( P r i va t e Key R i ng R e f ) 

0 0 

{ 

0 0 

n pg  p F r e e F i L e Re  f ( s e c R i ng  Re  f ) ; 
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n 

B 

B 

i f 

(secRingRef  ==  NULL) 

n 

B 

B 

{ 

n 

B 

B 

n 

err  = KE RN E L_0 UT_0 F_H E M ; 

Q 

B 

B 

n 

goto  error; 

n 

B 

B 

> 

□ 

B 

> 

n 

B 

s e c F i L e 

= pg p F i L e Re f S t d I OOpen C s e c R i ng Ref  , open 

n 

B 

B 

B 

n n n a n k PG P F i L eTy p eNo ne  , 

n 

B 

1 f 

(secFiLe  ==  NULL) 

n 

B 

i 

□ 

B 

B 

i f 

(err  ==  PG P E R R_ F I L E_ W R I T E LO C KE D ) 

n 

B 

B 

{ 

n 

B 

B 

Q 

err  = S I M P L E PG P_KE Y R I NG W R I T E LO C KE D ; 

a 

B 

B 

D 

goto  error; 

n 

B 

B 

} 

n 

B 

B 

else  if  (err  ==  PG P E R R_ F I L E_ P E RM I S S I ON S ) 

n 

B 

B 

Q 

B 

B 

B 

err  = S I MP LE PG P_ KE Y R I N G P E RM I S S I ON S ; 

n 

B 

B 

B 

goto  error; 

n 

B 

B 

> 

□ 

B 

> 

□ 

B 

*pf sec 

= pg p F i L e R e a d 0 p e n (secFiLe,  NULL,  NULL) 

Q 

B 

i f 

(*pf 

sec  ==  NULL) 

B 

B 

{ 

B 

B 

□ 

err 

= SIMPLEPGP_ERRORREADINGSECRING; 

B 

B 

□ 

goto  error; 

B 

B 

> 

B 

B 

* r f s e c 

= ringFiLeOpen  (ringpooL,  *pfsec,  1,  8e 

B 

B 

i f 

(*rfsec  ==  NULL) 

B 

B 

{ 

B 

B 

□ 

err 

= SIHPLEPGP_ERRORREADINGSECRING; 

B 

B 

□ 

goto  error; 

B 

B 

> 

B 

B 

* r s s e c 

= ringFiLeSet(*rfsec); 

B 

> 

B 

err 

= 0 

r 

D 

error: 
a 
n 
□ 
n 
n 
n 
a 
□ 


i f (pf pub  1 = NULL) 

{ 

if  (*rfpub  !=  NULL) 
n s pgpR i ng F i L eC L ose ( * r f pub  ) ; 
if  C*pfpub  !=  NULL) 
n pgpFiLeCLose(*pfpub); 
if  (pubFiLe  !=  NULL) 
n pgpStdIOCLoseCpubFiLe); 
*rspub  = NULL; 

*rfpub  = NULL; 

*pfpub  = NULL; 


Q 
n 
n 
D 
D 
□ 

n D 

n n 

D n 

n } 

n if  (pfsec  !=  NULL) 
n { 

n n if  (*rfsec  !=  NULL) 

n n n spgpRingFiLeClose(*rfsec); 

n n if  (*pfsec  !=  NULL) 

n n n pgpFiLeCLose(*pfsec); 
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n 

n 

if  (secFile  !=  NULL) 

n 

n 

n pg p S t d 1 0 C 1 o s e ( s e c F i 1 e ) ; 

n 

n 

*rssec  = NULL; 

n 

n 

*rfsec  = NULL; 

u 

n 

*pfsec  = NULL; 

a 

> 

done 

n 

i f 

(pubRingRef  !=  NULL) 

n 

n 

pgpFreeFi leRef(pubRingRef) ; 

n 

if 

(secRingRef  !=  NULL) 

□ 

□ 

pgpFreeFi leRef(secRingRef); 

□ 

return  err; 

} 


/* 

* Create  a temp  key  file  which  is  not  used  by  anyone  else. 

* Return  a stream  pointer  to  the  file,  and  set  the  file  reference  in 

* * t mp F i I e Re f 1 . Base  the  file  reference  on  the  given  file. 

* The  returned  file  reference  needs  to  be  free'd  with  pg p F r ee F i I e Re f , and  of 

* course  the  returned  file  handle  needs  to  be  closed  too. 

* The  implementation  of  this  tends  to  be  OS  (and  possibly  file  system) 

* dependent . 

*/ 


static  FILE  * 

tmpkeyfile  (PGPFileRef  const  *fileRef,  PGPFileRef  ** t mp F i I e Re f 1 , 
n n n PG P F i I eOpe n F I a g s flags.  Boolean  isPrivate) 

{ 


char*nn  n n 

char*nn  n n 

char*nn  n n 

char*nn  n n 

PGPFi  leRef  *n  n 

FILE*nn  n n 


file  = NULL; 
tmp  = NULL; 
nf  i le  = NULL; 
nfilep  = NULL; 
tmpFileRef  = NULL; 
stdFile  = NULL; 


if  ((file  = pg pGe t F i I e Re f Na me ( f i I e R e f ) ) ==  NULL) 
n goto  error; 

if  ((tmp  = pg p F i I e Na me C on t r a c t ( f i I e ) ) ==  NULL) 
n goto  error; 

if  ((nfile  = pg p F i I e Na me  Ex t en d ( t mp , ".pg0"))  ==  NULL) 

n goto  error; 

nfilep  = nfile  + strlen(file)  - 1; 

if  ((tmpFileRef  = pg pCopy F i I e Re f ( f i I e R e f ) ) ==  NULL) 
a goto  error; 
for  ( ; ; ) { 

n if  ( ( pg p S e t F i I e Re f Na me ( & t mp F i I e R e f , nfile))  !=  PGPERR_0K) 
n goto  error; 

if  ((stdFile  = pg p F i I e R e f S t d I OOpe n ( t mp F i I e Re f , flags. 


□ □ 
n n 
break; 


if  ((*nfiLep)++  > 
n goto  error; 


isPrivate  ? kPG P F i I eTy pe P r i vR i n g 
n : kPGPFi  leTypePubRi ng,  NULL))  !=  NULL) 


) 


error: 

n pgpMemFree(file); 
n pgpHemFreeltmp); 
n pg pM em F r e e ( n f i I e ) ; 
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n if  (stdFiLe  !=  NULL) 
n B * t tup  F i L e R e f 1 = t mp  F i L e R e f ; 

n else  if  (tmpFiLeRef  !=  NULL) 
n B pgp F r ee F i L e Ref ( t mp F i L eRef ) ; 

B return  stdFiLe; 

> 

/* 

* This  writes  out  a RingSet  which  is  a replacement  for  a RingFile 

* which  is  open.  We  do  it  carefully  since  on  some  OS's  we  can't 

* rename  open  files.  This  closes  the  RingFile  and  the  RingSet 

* in  the  process,  so  the  RingSet  must  be  one  for 

* which  this  is  legal  (not  from  ringFileSet  for  example). 

* Renames  existing  file. ext  to  file.bak. 

*/ 

PGPError 

s pg p W r i t e o u t S e t (PgpEnv  *env,  PGPFileRef  *fileRef,  RingSet  *set, 

B RingFile  *oldrfile,  PgpFile  *pfp.  Boolean  isPrivate) 

{ 


n 

struct  PgpFile  *pfp2; 

n 

char  *tmp  = NULL,  *bak  = 

NULL; 

□ 

char  *fileName  = NULL; 

Q 

PGPFileRef  *tmpFileRef  = 

NULL; 

n 

PGPFileRef  *bakFileRef  = 

NULL; 

□ 

FILE  *fp2; 

n 

PGPError  result  = PGPERR_ 

OK; 

B Cvoid)env; 
n if  (fileRef) 

n B fileRef  = pgpCopyFileRef  (fileRef), -n/*  so  can  free  it  below  */ 
n else  if  ((result  = pg pG e t Key R i ng F i I e Re f s ( &f i I e Re f , NULL))  !=  PGPERR_0K) 
n B goto  error; 

B if  ((fileName  = pg pGe t F i I e Re f Na me ( f i I e Re f ) ) ==  NULL) 
n B goto  memError; 

B if  ((tmp  = pgp F i I eName Con t r a c t ( f i I eName ) ) ==  NULL) 
n B goto  memError; 

#if  MACINTOSH 

n if  ((bak  = pgpFileNameExtend(tmp,  " (backup)"))  ==  NULL) 

n B goto  memError; 

#e  I se 

n if  ((bak  = pgpFileNameExtend(tmp,  ".bak"))  ==  NULL) 
n n goto  memError; 

# end i f 

B pg pMem F r e e ( t mp ) ; 

n tmp  = NULL; 

n if  ((bakFileRef  = pg pCopy F i I e Re f ( f i I e Re f ) ) ==  NULL) 
n B goto  memError; 

n if  ((result  = pgpSetFileRefName(SbakFileRef,  bak))  !=  PGPERR_0K) 
n n goto  error; 

n fp2  = t mp key f i I e ( f i I e R e f , StmpFileRef,  kPG P F i I e Op en S t d W r i t e F I a g s , 

B B B B B a isPrivate); 

B if  (fp2  ==  NULL) 

B { 

B n result  = PGPERR_NO_FILE; 

B B goto  error; 

B } 
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n /*  Write  out  new  data  to  temp  file  */ 
n pfpZ  = pg p F i L e W r i t eOpen ( f p2 , NULL); 
n result  = r i ng S e t W r i t e C s e t , pfp2,  NULL, 
n n n PGPVERSI0N_3,  PGP_WRITETRUST_PUB); 

n pg p F i L e C L o s e ( p f p2 ) ; n / * closes  fp2  */ 

n r i n g S e t De s t r oy  C s e t ) ; 

n set  = NULL; 
n if  (result  !=  PGPERR_0K) 
a o goto  error; 


a 

□ 

n 

□ 

n 

n 

n 

Q 

D 

Q 

n 

□ 

□ 

□ 

n 

n 

n 

n 

n 

D 

n 


if  ((result  = r i ng F i I e C I o s e ( o I d r f i I e ) ) !=  PGPERR_0K) 

{ 

n /*  Have  a problem  here,  it  should  have  closed  */ 

n /*  Probably  due  to  a pesky  RingSet  leak!  */ 

n pgpAssert  (0); 
n goto  error; 

> 

/*  Close  the  PgpFile  */ 
if  ( pf  p ) 

{ 

n pgpFileClose(pfp); 
n pfp  = NULL; 

> 

/*  Now  rename  the  files  */ 
pgpDeleteFi le(bakFi leRef); 
pgpRenameFi  le(fi  leRef,  bakFi leRef); 
pgpDeleteFi  le(fi  leRef); 

if  ( pg p Re  name F i I e ( t mp F i I e Re f , fileRef)  !=  PGPERR_0K)  { 
n result  = PG P E R R_N0_ F I LE ; n /*  XXX  Correct  error  code?  */ 

n goto  error; 

> 


n result  = PGPERR_0K; 
n goto  done ; 
memE  r ro  r : 

n result  = PGPERR_NOMEM; 
error: 

n if  (set  1=  NULL) 

n n ringSetDestroy(set); 

n if  (pfp  1=  NULL) 

n n pgpFileClose(pfp); 

done  : 

n if  (tmpFileRef  !=  NULL) 

n { 

a a pgpDeleteFile(tmpFileRef); 

n a pg p F r e e F i I e Re f ( t mp  F i I e Re f ) ; 

n } 

n if  (bakFileRef  !=  NULL) 

a a pg p F r e e F i I e Re f ( ba  k F i I e R e f ) ; 

n if  (fileRef  !=  NULL) 
n a pgpFreeFileRef(fileRef); 

n pgpMemF ree ( ba k ) ; 

n pg pHem F r ee ( t mp ) ; 

n pgpHemF ree ( f i I eName ) ; 

n return  result; 


} 


/* 

* Write  out  the  specified  RingSet  in  ascii  armor  form  to  pipeline. 
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*/ 

static  int 

s pg p W r i t e A rmo r e d S e t P i pe  (PgpPipeLine  *ppipe,  RingSet  const  *set,  PgpEnv  *env) 
{ 

n PgpFile  *pfp; 

n int  rs  Lt; 


n 

n 

n 

n 

n 

Q 

n 

n 


/*  Convert  to  Local  Line  endings  */ 
if  ( ! pgpTex t F i L t C rea t e (&ppipe, 

H n pg pe n vG e t Po i n t e r (env,  PG P E N V_ C H A RH APTO L AT  I N 1 , NULL, 
n n nn  n n NULL), 
n n 0,  S i mp L e PG PG e t L i n e E ndTy p e ( ) ) ) < 

n ppipe->teardown(ppipe); 
n return  PGPERR_NOHEH; 

> 


n if  ( ! pgp A rmo rW r i t eC r ea t e ( &PP i pe , env,  8pg pBy t e F i f o D e s c , 
n n n n NULL,  PG P V E R S I ON_2_6 , PG P_ A RMO R_N 0 RH A L ) ) { 
n n pp  i pe-> t e a r d o wn C p p i pe  ) ; 

n n return  PGPERR_NOMEH; 

n > 

n pfp  = pg  p F i L e P i p e L i n e 0 pe  n C p p i pe  ) ; 

n if  (!pfp)  { 

n n ppipe->teardown(ppipe); 

n n return  PGPERR_NOMEM; 

n } 

n rsLt  = ringSetWrite  (set,  pfp,  NULL,  PG P V E R S I 0N_2 _6 , 0); 
n pgpFiLeCLose  (pfp); 
n return  rsLt; 

} 


/*  Write  out  the  specified  RingSet  in  ascii  armor  form  to  fp.  */ 
i nt 

s pg pW r i t e A rmo r ed S e t F i L e (FILE  *fp,  RingSet  const  *set,  PgpEnv  *env) 

{ 

n PgpFile  *pfp; 

n PgpPipeLine  *PpL  = NULL; 

Q 

n pfp  = pg p F i L e W r i t eOpe n ( f p , NULL); 
n if  (!pfp)  { 
n n pgpStdlOCLose(fp); 

n n return  PGPERR_NOMEM; 

n } 

n if  ( ! pg p F i L e W r i t e C r e a t e (&ppL,  pfp,  1))  f 
n n pg p F i L e C L o s e ( pf p ) ; 

n n return  PGPERR_NOHEM; 

n } 

n return  spgpWriteArmoredSetPipe  (ppL,  set,  env); 

} 

/* 

* Write  out  the  specified  RingSet  in  ascii  armor  form  to  buf. 

* Set  *bufLen  to  number  of  bytes  we  wrote  or  would  have  written. 

* Read  the  size  of  buf  from  *bufLen  on  entry. 

*/ 

i nt 

s pg p W r i t e A r mo r ed S e t Bu f f e r (byte  *buf,  size_t  *bufLen,  RingSet  const  *set, 
n PgpEnv  *env) 
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a 

PgpPi pe  l 

ine  *ppl.  = NULL, 

n 

*pipebuf; 

□ 

Pg  p F i 1 e 

*pf  p; 

n 

s i ze_t 

nbuf  = *buf  1 en. 

B 

written; 

B 

i n t 

r s 1 1 ; 

B 

pi p e bu  f 

= pg pHemMod C r ea t e (&ppl,  buf,  nbuf); 

B 

/* 

Convert  to  local  line  endings  */ 

B 

i f 

( ! pg pTe X t F i 1 1 C r ea t e (&ppl. 

B 

B 

B 

pgpenvGetPoi nter  (env,  PGPENV_ 

CHARMAPTOLATINI 

B 

B 

B 

n n n n NULL), 

B 

B 

B 

0,  S i mp 1 ePGPGe t Li ne EndTy pe ( ) ) ) 

{ 

B 

B 

pp  l- 

>teardoHn(ppl); 

B 

B 

return  PG PE R R_N0H EM ; 

B 

> 

B 

i f 

( ! pgpA rmo r W r i t e C rea t e ( &PP 1 , env,  &pg pBy t e F i f o D e s c , 

B 

B 

B 

a NULL,  PGPVERSI0N_2_6,  PGP_ 

ARM0R_N0RMAL) ) 

n pp L -> t ea rdo wn ( pp L ) ; 

n return  PGPERR_NOMEM; 

> 

pfp  = pgp F i I ePi pe L i neOpen ( pp L ) ; 
if  (!pfp)  { 

n pp  I -> t e a r d OH n ( p p L ) ; 

n return  PGPERR_NOMEM; 

} 

rsLt  = ringSetWrite  (set,  pfp,  NULL,  PG P V E R S I 0N_2_6 , 0); 
if  (!rsLt)  { 


/*  Figure  out  how  many  bytes  would  be  written  */ 
ppL->si zeAdvi se  (ppL,  0); 

pi pebuf->annotate  (pipebuf,  NULL,  PG P AN N_H EH_B YT E C OU NT, 
n (byte  *)&Hritten,  sizeof  (written)); 

*bufLen  = written; 


pgpFiLeCLose  (pfp); 
return  rsLt; 


/* 

* Close  the  specified  ringfile,  raising  an  assertion  if  it  doesn't 

* want  to  close.  That  is  a sign  that  we  have  a "ringset  leak"  and 

* this  will  eventually  lead  to  running  out  of  ringsets  (we  only  can 

* have  16  at  a time). 

*/ 

void 

s pg pR i ng F i I e C I o s e (RingFile  *rfile) 

< 

n pgpAssert  (IringFileCheckClose  (rfile)); 
n r i ng F i I e C I o s e (rfile); 

> 


* Local  Variables: 
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* tab-width:  4 

* End: 


* vi:  ts=4  sw=4 


* vim:  si 
*/ 
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/* 

* spgpsigner.c  --  Simple  PGP  API  helper 

* Routines  related  to  signatures  and  signature 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights 

* 

* $Id:  spgpsi gner . c,v  1.8. 2.1  1997/06/07  09:51:56  mhu  Exp  $ 

*/ 


checki ng 
reserved. 


#if  HAVE_CONFIG_H 
^include  "config.h 
#end i f 

^include  <stdio.h> 


^include 

^include 

//include 


s pg  p . h " 

spgpint.h" 

pgpTimeDate.h 


/*  Fill  in  pointer  fields  with  signature  status  info  */ 
void 

s pg p S i g n S t a t u s CSPgpSimpUI  *ui_arg,  RingSet  const  *rspub,  int  *psigstatus, 
n byte  *pkeyid,  size_t  keyidlen,  char  *psign,  size_t  signlen, 
n char  *pdate,  size_t  datelen) 

{ 


□ 

□ 

n 

□ 

D 

Q 

n 

a 

n 

D 

□ 

n 

□ 

n 

a 

□ 

n 

□ 

n 

□ 

□ 

a 

n 

n 

n 

n 

n 

n 

a 

n 

D 

a 


if  (psigstatus)  { 
n if  ( ! u i _a r g-> s i g s t a t u s ) 

n n u i _a r g->s i gs t a t u s = S I G ST S_N0T S I G N E D ; 
n *psigstatus  = u i _a r g-> s i g s t a t u s ; 

> 

/*  Set  other  fields  only  if  we  have  reasonably  non-bogus  data  */ 
if  ( u i _a rg->s i g s t a t us  = = S IGSTS_VERI F I ED  || 
n ui_arg->sigstatus==SIGSTS_VERIFIED_UNTRUSTED  || 
n u i _a rg->s i g s t a t us==S IGSTS_BADSI G ) { 
n if  (pkeyid)  { 

n n pgpAssert  (keyidlen  ==  8); 

a n pgpAssertAddrVa  I i d (pkeyid,  char); 

n n pg p C opy M emo r y ( u i _a r g->s i g key i d , pkeyid,  keyidlen); 

H > 

n if  (psign)  ( 
n n char  const  *sname; 

n n size_t  namelen; 

a a sname  = s pg pNa meBy I D8  (rspub,  u i _a r g->s i g p ka  I g , u i _a r g-> s i g key i d , 
n n n n n n n Snatnelen); 

n n if  (!snane)  ( 

n n n if  (psigstatus) 

n n n n *psigstatus  = SIGSTS_BADSIG; 
n n }else{ 

n n n namelen  = min  (namelen,  signlen-1); 

nun  pg p C opy Memo ry  (sname,  psign,  namelen); 
a a n p s i g n C na me  I e n D = '\0'; 

n n } 

n > 

n if  (pdate)  ( 

n n char  *sctime  = pg p C T i me ( ( PG PT i me  * ) &u i _a r g -> s i g t i me  da t e ) ; 
n n size_t  timelen  = strlen  (sctime)  - 1;  /*  strip  newline  at  end  */ 

n n timelen  = min  (timelen,  datelen-1); 
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nun  pgpCopyMemo ry  (sctime,  pdate,  timeLen); 

n n n pdateCtimeLen]  = *\0*; 

n n > 
n > 

> 


/* 

* This  returns  a signing  key.  If  no  keyid  is  specified,  we  will  use  a 

* default  according  to  our  rules.  We  will  fill  in  the  SignerKeylD  buffer 

* with  the  key  ID  we  chose  if  its  first  char  is  null  and  it  is  big  enough. 

* If  we  can*t  find  an  appropriate  key  we  return  null. 

*/ 

Ri ngOb j ect  * 

s pg pG e t S i g n e r Key  (char  *S i gne r Key I D,  size_t  S i g n e r Bu f f e r Le n , PgpEnv  *env, 
a RingSet  const  *rset) 

{ 

n char  *ssign;n  /*Signingkeystring*/ 

n RingObjectn  n n *skey;n  /*  Signing  key  object  */ 


n 

n 

n 

n 

n 

Q 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

n 

n 

a 

D 

n 

Q 

a 

n 

n 

n 

n 

Q 

D 

n 

n 

n 

Q 

n 

u 

n 

o 

n 

a 

n 


/* 

* Note  that  we  differ  from  the  original  simple  pgp  api  in  our 

* handling  of  an  empty  string  for  SignerKeylD.  We  require  a 

* default  userid  key  to  have  been  specified  in  the  preferences, 

* otherwise  we  return  an  error. 

*/ 

skey  = NULL; 

ssign  = SignerKeylD; 

if  (!ssign  ||  !*ssign)  { 

n ssign  = (char  * ) pg pe n vG e t S t r i ng  ( e n v , PG P E N V_H Y N AM E , N U LL, NU LL ) ; 

> 


i f 
o 
> 
n 
n 
n 
n 
n 
n 
n 
a 
□ 

□ 

n 

n 

a 

a 

n 

n 

tt 

n 

n 

a 


(ssign  &&  *ssign)  i 

skey  = ri ngLatestSecret  (rset,  ssign,  pgpGetTi me ( ) , PG P_PKU S E_ S I GN ) 
else  -C 

/*  No  default,  see  if  there  is  a single  secret  key  */ 

Ringiterator  *iter  = r i ng I t e r C r e a t e (rset); 
if  (liter) 
n return  NULL; 

while  ( r i ng 1 1 e r Nex t Ob j e c t (iter,  1)  > 0)  T 

n RingObject  *keyobj  = ringIterCurrentObject  (iter,  1); 
n pgpa(pgpaAssert(ringObjectType(keyobj)  ==  RINGTYPE_KEY)); 
n if  ( ri ngKeylsSec  (rset,  keyobj)  && 

n n ( r i ng Key U s e ( r s e t , keyobj)  & PGP_PKUS E_S IGN ) ! =0  ) t 

n n if  (skey)  I /*  already  found  one  */ 

n n n r i ng Ob j e c t Re  I e a s e (keyobj); 

n n n skey  = NULL; 

n n n brea  k; 

a n > e L se  { 

a n n skey  = keyobj;  /*  found  first  one*/ 

□ D > 

n > 

> 

r i ng  1 1 e r D e s t r oy  (iter); 
r i n g Ob j e c t H o I d (skey); 


> 


if  (Iskey)  i 
n return  NULL; 


> 

if  (SignerKeylD  &&  *S  i gne  r Key  I D = = * \0  * &&  S i g n e r Bu  f f e r Le  n >=  11)  ■( 
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Q 

a 

/*  Return  selected  key  ID  */ 

n 

□ 

byte  keyidC8],  pkalg; 

n 

Q 

ringKeyID8  (rset,  skey,  Spkalg, 

k e y i d ) ; 

Ef 

n 

S i gn e r Key  I D C 0 D = '0'; 

n 

n 

S i g ne r Key I D C 1 D = 'x'; 

n 

n 

n 

spgpKey I DTex 1 8 ( S i g n e r Key  I D + 2 , 

key i d ) ; 

n 

return  skey; 

/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* spgptext.c  --  Simple  PGP  API  helper  --  Text  conversions 

•k 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  spgptext.c, V 1.5. 2.1  1997/06/07  09:51:57  mhw  Exp  $ 

*/ 

#if  HAVE_C0N FIG_H 
#include  "config.h" 

#end  i f 

#include  <stdio.h> 

#include  "spgp.h" 

^include  "spgpint.h" 

Sinclude  " pg pT i me  Da t e . h " 

static  PGPLi neEndTypen  s PG P L i n e E ndTy pe 
#if  d e f i ned ( M S DO S ) | | d e f i n e d ( W I N 32  ) 

n n = kPGPLineEndCRLF; 

#elif  MACINTOSH 
n n = kPGPLineEndCR; 

#e  I s e 

n n = kPGPLi neEndLF; 

#end i f 


/*  Create  an  8 character  key  ID  string  */ 
void 

s pg p Key I DTex t 8 (char  *out,  byte  *keyid) 

{ 

n inti; 
n byte  c; 

n for  (i=0;  i<4;  i++)  { 

n n c = key i d C i +4] ; 

n n *out++  = "01  23456789abcdef " C c >>  4 3 ; 
n a *out++  = "01 23456789abcdef " C c & 0xf  3; 

H } 

n *out++  = '\0'; 

} 

/*  Create  a date  in  the  form  HM/DD/YYYY  */ 
void 

s pg p D a t e Tex t 1 0 (char  *out,  word32  date) 


□ 

struct  tm 

const 

*tm; 

n 

PG  PT i me 

d t i me ; 

Q 

1 n t 

m. 

n 

d. 

u 

y; 

n 

if  (!date) 

{ 

n 

n St  rcpy 

(out 

, " — / — 

n n return; 
n > 
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n dtime  = (PGPTime)  date; 

n tm  = pgpLocaLTime  (&dtime); 


Q 

1 f 

(tm)  { 

n 

n 

m = tm->tni 

l_ 

mon  + 

1 

/ 

n 

n 

*out++  = ' 

0 

* + m 

/ 

10; 

n 

□ 

*out++  = ' 

0 

* + m 

% 

10; 

n 

n 

*out++  = ' 

/ 

1 , 
r 

n 

n 

d = tm->tm 

_ 

m d a y ; 

a 

B 

*out++  = ' 

0 

* + d 

/ 

10; 

n 

B 

*out++  = ' 

0 

* + d 

% 

10; 

n 

B 

*out++  = ' 

/ 

1 . 
r 

n 

B 

y = tm->tm 

year  + 

1900; 

a 

B 

*out++  = ' 

0 

' + y 

/ 

1000; 

n 

B 

y %=  1000; 

n 

B 

*out++  = ' 

0 

■ + y 

/ 

1 00; 

D 

B 

y %=  100; 

n 

B 

*out++  = ' 

0 

■ + y 

/ 

10; 

n 

B 

*out++  = ' 

0 

■ + y 

% 

10; 

n 

B 

*out++  = ' 

\0-; 

n > 
} 


/*  Output  a 3 character  value,  an  expiration  interval  */ 
void 

spgpExpTextS  (char  *out,  int  exp) 

{ 


B 

if  (exp  > 

999) 

{ 

B 

n s t r c py 

(out 

XXX 

"); 

B 

n return 

B 

> 

B 

*out++  = ' 

0 ' + 

exp 

/ 

1 00; 

B 

exp  %=  10; 

B 

*out++  = ' 

0'  + 

exp 

/ 

10; 

B 

*out++  = ' 

0'  + 

exp 

% 

10; 

B 

*out++  = ' 

\0'; 

} 


n PG P L i ne EndTy p e 

S i mp I ePGPGe t Li ne EndTy pe  (void) 

{ 

n return  s PG P L i n e En dTy pe ; 

> 

n PG P L i n e E ndTy pe 

S i mp I e PG PS e t L i n e E n dTy pe  ( 


B 

{ 

PGPLineEndTypen 

lineEndType) 

B 

PGPLineEndTypen 

oldVal  = s PG P Li n e E ndTy pe ; 

B 

sPGPLi neEndType 

= lineEndType; 

B 

return  oldVal; 

> 


/* 
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* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* 

* 

* 

* 

* 

★ 

* 

*/ 


test.c  --  Test  driver  for  Simple  PGP  API 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc. 

gcc  -g  -I . . / . . /i nc Lude  -I../..  -DLOOP=0  -DDEBUG=1 
test.c  spgp*.o  -L..  -Lpgp  -Lbn  -Lm 


ALL  rights  reserved 
-DHAVE_C0NFIG_H=1  -o 


#if  HAVE_CONFIG_H 
#incLude  "config.h 
#e nd i f 


^include  <stdio.h> 
^include  <stdLib.h> 
SincLude  <sys/stat.h> 

#if  HAVE_UNISTD_H 
//include  <unistd.h> 

// end i f 


//include  <assert.h> 
//include  "spgp.h" 
#include  "pgpLeaks.h" 
#incLude  "pgpRngPub.h 


//ifdef  TESTCALLBACK 
//include  "pgpEnv.h" 
//endi  f 

enum  {false=0,  true>; 


/*  Print  an  error  message  and  exit  */ 
void 

error  (const  char  *s) 

{ 

a fputs  (s,  stderr); 

n fputc  ('\n',  stderr); 

n exit  (1); 

} 


//ifdef  TESTCALLBACK 
i nt 

progress  (size_t  numbytes) 

{ 

n static  size_t  totaL=0,- 

n printf  ("%3d,  %d\n",  numbytes,  totaL+=numbytes); 

if  (total  > 1 000000) 
return  -1; 
n return  0; 

} 

//endi  f 


byte  * 

fileread  (char  *filename,  size_t  *bufsize) 
{ 

n byte  *buf; 
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n struct  stat  statbuf; 
n FILE  *f; 

n if  (stat  (filename,  Sstatbuf)  < 0)  { 

n n perror  ("stat"); 

n n exit  (2); 

n > 

o *bufsize  = s t a t bu f . s t _ s i z e ; 
n buf  = (byte  *)maLLoc  ( s t a t bu f . s t _ s i z e ) ; 
n if  (!(f  = fopen  (filename,  "rb")))  { 

B n perror  ("fopen"); 

B B exit  (2); 

B } 

B if  (fread  (buf,  1,  s t a t b u f . s t _s i z e , f)  !=  s t a t b u f . s t _ s i z e ) f 
B B perror  ("fread"); 

B a exit  (2); 

B } 

B fclose  (f); 

B return  buf; 

} 

void 

filewrite  (char  *filename,  byte  *buf,  size_t  bufsize) 

{ 

B FILE  *f; 

B if  (!(f  = fopen  (filename,  "wb")))  { 

B B perror  ("fopen"); 

a B exit  (3); 

B } 

B if  (fwrite  (buf,  1,  bufsize,  f)  !=  bufsize)  { 

B B perror  ("fwrite"); 

B B exit  (3); 

B } 

B fclose  (f); 

> 


void 

list  keys 

B char 
B char 
B char 

B char 

B i n t 

B i nt 

B i nt 

B char 
B char 
B i nt 


( ) 

UserIDC256D; 

KeyIDCI 1 3; 
CreationDateCIID; 
Expi rationDateCIID; 
KeyLength; 
ValidityDays; 
KeyType; 
KeyTypeESC3D; 
KeyStateCAD; 
err; 


B 

B 

B 

B 

B 

B 

B 


err  = S i mp  I e PG PO p e n Pu b I i c Ke y R i ng  (NULL,  NULL); 
for  ( ; ; ) { 

B err  = S i mp I e PG PG e t N e x t Pu b I i c Key  (NULL,  UserlD,  KeylD, 

B B &KeyLength,  C r e a t i on  Da t e , Ex p i r a t i o n D a t e , 8 Va I i d i t y D a y s , 
B B SKeyType,  KeyTypeES,  KeyState); 

B if  (err) 

B B break; 
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n n printf  ("UserlD:  %s;  KeylD:  %s;  KeyLength:  %d;\n", 

n n n UserlD,  KeylD,  KeyLength); 

n n printf  ("  CreationDate:  %s;  ExpirationDate:  %s;\n", 

n n n CreationDate,  ExpirationDate); 

n n printf  ( 

n n n " Va L i d i t y Da y s : %d;  KeyType:  %d;  KeyTypeES:  %s;  KeyState:  %s\n", 

nan  Va L i d i t y D ay s , KeyType,  KeyTypeES,  KeyState); 
a } 

a err  = S i mp L e PG P C L o s e Pu b L i c Key R i ng  (NULL); 
a printf  ("\n"); 

a err  = S i mp L e PG PO pen P r i va t e Key R i n g (NULL,  NULL); 
a for(;;){ 

a a err  = S i mp L e PG PG e t N ex t P r i va t e Key  (NULL,  UserlD,  KeylD, 

a a a SKeyLength,  CreationDate,  ExpirationDate,  8Va L i d i t y Da y s , 

a a a SKeyType,  KeyTypeES,  KeyState); 

a a if  (err) 

a a n break; 

a a printf  ("UserlD:  %s;  KeylD;  %s;  KeyLength:  %d;\n", 

a a a UserlD,  KeylD,  KeyLength); 

a a printf  ("  CreationDate:  %s;  ExpirationDate:  Xs;\n", 

a a a CreationDate,  ExpirationDate); 

a a printf  ( 

a a n " Va L i d i t y Da y s : %d;  KeyType:  %d;  KeyTypeES:  %s;  KeyState:  %s\n", 

a a a VaLidityDays,  KeyType,  KeyTypeES,  KeyState); 

a } 

a err  = S i mp L e PG PC L o s e P r i va t e Key R i ng  (NULL); 

> 


void 

usage  (char  *pname) 

{ 

a fprintf  (stderr, 

"Usage:  /!s  C-mD  C-d  -c  <passphrase>  -u  -z  <passphrase>  |\n" 
"\tC-e  <username>  | -c  <passphrase>D  -s<signerid>  -a  -t  -u  \n" 
"\t  -z  <passphrase>!]  infile  outfileXn",  pname); 

a fprintf  (stderr,  "\tOne  of  -d,  -c,  or  -e  is  mandatory. \n"); 
} 


void 

userr  (char  *pname) 
{ 

a usage  (pname) ; 
a exit  (1); 

} 


/* 

* Options: 

* -da  n n a 

* -s<opt  name>Ba 

* -ba  n a a 

* -aa  n a a 

* -ta  n a a 

* -c  <passphrase>a 

* -ua  a a a 

* -z  <pa s s ph r a s e>a 

* -e  <username>a 

* -ma  n n a 


Decrypt 

Sign  it  with  default  or  specified  user  name 
Break  off  as  separate  signature 
Ascii  armor  the  output 
Treat  as  text  mode 

Use  pass  phrase  for  e n c r y p t i ng / d e c ry p t i ng 
Use  untrusted  keys 

Key  passphrase  for  s i g n i ng / d e c ry p t i ng 
One  encryption  target 

Use  memory  buffer  functions  rather  than  file 


functions 
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* - vn 

a 

n 

B Do  verify,  infiLe  is 

sig,  outfiLe 

is  text  (no 

output) 

* -y  B 

n 

a 

B AnaLYze  to  see  what 

the  f i Le  is. 

Output  file 

not  used 

* -Lb 

o 

n 

B List  keyring  contents.  Filenames 

not  used . 

* -k 

Add  keys  from  infiLe 

into  outfiLe 

* -X 

*/ 

Extract  key  ("infiLe 

" param)  to  outfiLe 

main  (int 

argc. 

char  *a  rg v[ 3 ) 

{ 

n i n t r s L t ; 

n char  *infiLe,  *outfiLe; 
n byte  *recipList; 

n char  *pname  = argvCOIl; 

n byte  fdecrypt=0,  farmor=0,  ftextmode=0,  f u n t r u s t ed=0 , fconf=0,  fkeypass=0, 

n n fsign=0,  fencrypt=0,  fwipe=0,  fconv=0,  fbreak=0,  fcLearsig=0, 

n a fmem=0,  fverify=0,  fanaLyze=0,  faddkey=0,  fListkeys=0,  fextkey=0; 
n char  *sconv=0,  *skeypass=0,  *ssignid=0,  * s e n c r y p t i d =0 ; 
n int  sencryptLen; 

n int  sstat; 

n char  signerC256]; 

n char  s i g n da t e C 40 D ; 

n int  c ; 

n byte  *inbuf,  *outbuf; 
n size_t  inbufsize,  outbufsize; 

n extern  char  *optarg; 

n extern  int  optind; 

a int  nsets,  nfiles; 

n extern  PGPKDBExport  RingPooL  *pgpRingPooL; 

#if  LOOP 


Q 

static 

char 

buf [2563; 

n 

char  *p 

r 

a 

static 

char 

*xargvC323; 

a 

extern 

char 

*strtok(); 

#endi  f 

f 

LOOP 

a 

for  ( ; 

; ) 

{ 

n n int  LastLen; 

n n f p u t s ( " C omma n d ->  ",  stdout); 

a n fgets  Cbuf,  sizeof(buf),  stdin); 

n n argc=1; 

B B p=buf; 

B B while  ( ( u n s i g n e d ) a r g c < s i zeof ( xa rg v ) / s i z eo f ( xa r g v C 0 ] ) 

B B S&  (xargvCargcD  = strtoklp,  " ")))  { 

B B B p = 0 ; 

B B B a r g C++ ; 

B B > 

B B a rgv  = xa  rg v; 

n B LastLen  = strLen  (argvCargc-1]); 

B B if  ( a r g V C a r g c - 1 D C I a s t L e n-1 !]  ==  '\n') 

B B B a r g V C a r g c - 1 D C L a s t L e n-1 ] = '\0'; 

B B if  (argc==2  KS  a r g v C 1 3 C 0 ] == ' \ 0 ' ) 

B B B break; 

B fdecrypt=0,  farmor=0,  ftextmode=0,  f un t r u s t ed=0 , fconf=0,  fkeypass=0, 

B B fsign=0,  fencrypt=0,  fuipe=0,  fconv=0,  fbreak=0,  fcLearsig=0, 

B B fmem=0,  fverify=0,  fanaLyze=0,  faddkey=0,  fListkeys=0,  fextkey=0; 
n sconv=0,  skeypass=0,  ssignid=0,  sencryptid=0; 

#end  i f 

CCCHK:7afdb44be05b4aed6ed13deae132423e3770cadc86bc064facd08eb72184fe7faD3 


1842 


Pretty  Good  Privacy  5.Cr“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


test.c 


#if  DEBUG 

n pgpLeaksBeginSession  ("main"); 

#end i f 

n sencryptid  = (char  *)malLoc(2); 
a sencryptid no:  = INCLUDE_ONLYUSERIDS; 

n s e n c r y p t i d C 1 D = '\0'; 

a sencryptLen  = 1; 


c 


n 

opt i nd  = 0 

n 

while  ((c 

= 

getopt  (argc,  argv,  " da y kx 1 s : : b t c : uz : e : mv " ) ) ! = 

□ 

n 

switch  (c) 

{ 

n 

□ 

case  ' 

d ' 

: n 

fdecrypt  = true;  break; 

n 

a 

case  ' 

a ' 

: n 

farmer  = true;  break; 

n 

n 

case  ' 

b ' 

: n 

fbreak  = true;  break; 

n 

n 

case  ' 

t ' 

: n 

ftextmode  = true;  break; 

n 

□ 

case  ' 

u ' 

: □ 

funtrusted  = true;  break; 

n 

n 

case  ' 

m ' 

: n 

fmem  = true;  break; 

n 

n 

case  ' 

c ' 

: n 

fconv  = true;  sconv  = optarg;  break; 

n 

a 

case  ' 

z ' 

: n 

fkeypass  = true;  skeypass  = optarg;  break; 

n 

n 

case  ' 

s ' 

: n 

fsign  = true;  ssignid  = optarg;  break; 

n 

n 

case  ' 

e ' 

: Q 

if  ( S i mp 1 e PG PC h e c kRe c i p i en t (NULL,  optarg. 

n 

Q 

a D 

n 

n fprintf  (stderr,  "Unable  to  find  a key 

n 

n 

n D 

n 

n n optarg); 

n 

n 

n □ 

n 

} else  { 

D 

tt 

a n 

n 

n int  newlen  = s t r 1 e n ( op t a r g ) ; 

n 

□ 

n n 

n 

n sencryptid  = realloc  (sencryptid. 

a 

□ 

D n 

n 

n n n n n s e n c r y p 1 1 e n + n e w 1 en  + 1 ) ; 

n 

n 

□ n 

D 

n strcpy  ( s e n c r y p t i d+s en c r y p t 1 e n , optarg) 

n 

n 

n n 

n 

n strcpy  ( s e n c r y p t i d+ s en c ry p t 1 en+ne w 1 e n , 

Q 

n 

□ n 

n 

n sencryptlen  +=  newlen  + 1; 

Q 

n 

n n 

n 

n fencrypt  = true; 

n 

n 

n D 

□ 

} 

s 

n 

n D 

D 

break; 

n 

n 

case  ' 

V ' 

: a 

fverify  = true;  break; 

n 

n 

case  ' 

y' 

: n 

fanalyze  = true;  break; 

D 

D 

case  ' 

1 ' 

: Q 

flistkeys  = true;  break; 

n 

n 

case  ' 

k' 

: n 

faddkey  = true;  break; 

n 

□ 

case  ' 

X ' 

: Q 

fextkey  = true;  break; 

D 

n 

case  ' 

. 1 

: 

n 

n 

case  ' 

? * 

: n 

userr  (pname) ; 

D 

Q 

default: 

n 

userr  ( pname ) ; 

n 

n 

} 

Q 

> 

s 

1 f 

(flistkeys) 

{ 

n 

n 

listkeys(); 

DEBUG 

n 

n 

p r i n t f 

( 

"(Checking  for  leaks. ..)\n"); 

n 

n 

pg p Lea ks E nd S e s s i on  (); 

#e  nd i f 

n 

D 

exit  (0) 

r 

n 

n 

> 

n 

i f 

(fdecrypt 

+ 

fencrypt  + fconv  + fverify  + fanalyze 

□ 

Q 

+ faddkey  + 

fextkey  > 1 ) 

n 

n 

userr 

( pname ) ; 

' \ n " ) ; 


CCCHK:  1 a1  33a6d001  5514c3f 4343ce7721  a0aa9df 3d98af 83dee01 el d06bb60386b056a:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1843 


test.c 


n if  (fdecrypt  + fencrypt  + fconv  + fverify  + fsign 


n n 

+ fanalyze  + faddkey  + fextkey  < 1) 

u n 

userr  (pname); 

n if  ((fdecrypt  | | fverify  | | fanalyze  | | faddkey  | | fextkey) 


n n 

n SS  (farmer  | | ftextmode  | | fsign)) 

n n 

userr  ( pname ) ; 

n i f 

(!(infiLe  = a r g v C op t i nd++ ] ) ) 

n n 

userr  (pname); 

n i f 

( ! f ana  Lyze)  ( 

a n 

if  (!(outfiLe  = a r g v C op t i n d + + D ) ) 

□ n 

n userr  (pname) ; 

n > 

n if 

(argvCoptind++]) 

n n 

userr  (pname); 

n if 

(fencrypt  | | fconv)  { 

n a 

recipList  = (byte  * ) s e n c r y p t i d ; 

□ n 

if  (fconv) 

n n 

a recipListC0!l  = 0; 

#ifdef 

TESTCALLBACK 

n n 

{ extern  PGPKDBExport  PgpEnv  *pgpEnv; 

n n 

pgpLibInit(); 

Q n 

pg  p e n V S e t Po  i n t e r (pgpEnv,  PG  P E N\/_  E N C R Y PT I ON  C A L LB  A C K,  Sprogress, 

□ n 

n n n n n sizeof  ( &p r og r e s s ) ) ; 

Ct  B 

} 

#endi  f 

B B 

if  (fmem)  { 

B B 

n inbuf  = fileread  (infile,  Sinbufsize); 

B B 

n outbufsize  = inbufsize  * 2; 

B B 

n outbuf  = (byte  *)maLLoc  (outbufsize); 

B B 

n rsLt  = S i mp L e PG P E n c r y p t Bu f f e r (NULL,  inbuf,  inbufsize,  "test". 

B B 

n n outbuf,  Soutbufsize, 

B B 

n n fsign. 

B B 

n n farmer,  ftextmode,  fconv,  funtrusted,  recipList, 

fl  B 

n a (ssignid?ssignid:""),  0,  (skeypass?skeypass:""),  0, 

B B 

n n (sconv?sconv:""),  0, 

B B 

n n " pubring. pkr",  "secring. skr"); 

B B 

n if  (!rsLt) 

B B 

n n filewrite  (outfile,  outbuf,  outbufsize); 

B B 

> else  { 

B B 

n rsLt  = S i mp L e PG P E n c r y p t F i L e (NULL,  infile,  outfile. 

B B 

n n fsign,  fwipe. 

B B 

n n farmer,  ftextmode,  fconv,  funtrusted,  recipList, 

B B 

n n (ssignid?ssignid:""),  0,  (skeypass?skeypass:""),  0, 

B B 

n n (sconv?sconv:""),  0,  NULL,  NULL); 

B B 

> 

# i f d e f 

TESTCALLBACK 

fl  B 

{ extern  PGPKDBExport  PgpEnv  *pgpEnv; 

fl  fl 

pgpenvSetPoi nter  (pgpEnv,  PG P E N V_EN C R Y PT I ON C A LLB A C K,  NULL,  0); 

B fl 

pgpLibCLeanup(); 

B fl 

} 

#end i f 

n > else  if  (fsign)  { 


B B 

if  (fbreak  SS  farmer  &&  ftextmode)  { 

fl  B 

n fbreak  = false; 

B B 

n fcLearsig  = true; 
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n 

□ 

n 

Q 

n 

n 

n 

n 

n 

a 

D 

n 

n 

n 

n 

u 

n 

n 

□ 

n 

n 

n 

s 

□ 

Q 

n 

□ 

n 

s 

n 

u 

s 

n 

n 

o 

Q 

n 

Q 

Q 

n 

n 

n 

Q 

n 

Q 

n 

n 


n 

n 

n 

n 

n 

n 

n 

n 

Q 

n 

n 

□ 

B 

B 

B 

B 

B 

> 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 


} 

i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

> 

B 

B 

B 

> 


( f mem ) { 

inbuf  = fiLeread  (infiLe,  Sinbufsize); 

outbufsize  = inbufsize  * 2; 

outbuf  = (byte  *)maLLoc  (outbufsize); 

rsLt  = S i mp I ePGPS i gnBuf f e r (NULL,  inbuf,  inbufsize. 


'test' 


n outbuf,  Soutbufsize, 

n farmor,  ftextmode, 

n fbreak,  fcLearsig,  (ssignid?ssignid:""),  0, 

n (skeypass?skeypass:""),  0,  " secring. skr"); 

if  (!rsLt) 

n fiLewrite  (outfiLe,  outbuf,  outbufsize); 
else  { 

rsLt  = S i mp L e PG PS i g n F i L e (NULL,  infiLe,  outfiLe,  farmor,  ftextmode, 
n fbreak,  fcLearsig,  (ssignid?ssignid:""),  0, 

n ( s key pa s s ? s key pa s s : " " ) , 0,  NULL); 


eLse  if  (fdecrypt  ||  fverify)  i 
if  (fverify)  i 
n char  *sigfiLe  = infiLe; 

char  *datafiLe  = outfiLe; 
byte  *sigbuf,  *databuf; 
size_t  sigbufsize,  databufsize; 
if  ( f mem ) i 

sigbuf  = fiLeread  (sigfiLe,  &sigbufsize); 
databuf  = fiLeread  (datafiLe,  &d a t a bu f s i z e ) ; 
rsLt  = S i mp L e PG PVe r i f y D e t a c h ed S i g n a t u r e Bu f f e r (NULL, 
n databuf,  databufsize,  sigbuf,  sigbufsize. 


B 

B 

B 

B 

B 

B 

> 

B 

B 

B 

B 

> 

eLse 
i f 

B 

B 

B 

B 

B 

B 

B 

B 

B 


B 

B 

eLse  { 
rsLt 

B 

B 

B 


&sstat,  signer,  s i zeof ( s i g ne r ) , 
signdate,  sizeof(signdate),  NULL); 

= S i mp L e PG PVe r i f y D e t a c h e d S i g na t u r e F i L e (NULL, 

datafiLe,  sigfiLe, 

fisstat,  signer,  s i z eo f ( s i g n e r ) , 

signdate,  sizeof(signdate),  " pubring. pkr"); 


B 

B 

B 

B 

> 

if 

B 


( f mem ) f 

inbuf  = fiLeread  (infiLe,  &inbufsize); 

outbufsize  = inbufsize  * 10; 

outbuf  = (byte  *)maLLoc  (outbufsize); 

rsLt  = S i mp L ePGPRe ce i veBuf f e r (NULL,  inbuf,  inbufsize,  "test", 
n B outbuf,  &outbufsize,  (skeypass?skeypass:""),  0, 

B B &sstat,  signer,  s i z e o f ( s i g ne r ) , 

n B signdate,  s i z eof ( s i g n da t e ) , 

n B NULL,  NULL); 

if  (!rsLt) 

n fiLewrite  (outfiLe,  outbuf,  outbufsize); 
eLse  -C 

rsLt  = S i mp L e PG PRe c e i V e F i L e (NULL,  infiLe,  outfiLe, 
n B ( s keypa s s ? s keypa s s : " " ) , 0, 

B B &sstat,  signer,  s i z eof ( s i g n e r ) , 

n B signdate,  s i z e o f ( s i g nda t e ) , 

n B NULL,  NULL); 


( ! rsLt)  i 

printf  ("Signature  status:  0x%x\n' 


s s t a t ) ; 


CCCHK: f 688704c731  a992b51  f 7df 581  f66b91  36853ec15ea744e4  708cc55161e34760c9:: 


Pretty  Good  Privacy  5.0^'^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1845 


test.c 


n 

D 

H 

a 

n 

n 

Q 

□ 

n 

a 

n 

□ 

a 

□ 

n 

Q 

n 

□ 

□ 

□ 

n 

□ 

n 

□ 

n 

D 

n 

□ 

n 

□ 

□ 

□ 

n 

Q 

#i  f 


B B printf  ("Signer:  %s\n",  signer); 

B B printf  ("Signature  timestamp:  %s\n",  signdate); 

B } 

> else  if  (fanaLyze)  { 

B i f ( f mem)  { 

B B inbuf  = fiLeread  (infile,  Sinbufsize); 

B B rsLt  = SimpLePGPAnaLyzeBuffer  (inbuf,  inbufsize); 

B } e L s e { 

B B rsLt  = SimpLePGPAnalyzeFiLe  (infile); 

B } 

} else  if  (faddkey)  { 

B char  *keyfiLe  = outfiLe; 

B if  (fmem)  { 

B B inbuf  = fiLeread  (infile,  Sinbufsize); 

B B rsLt  = S i mp L e PG PAddKeyBuf f e r (NULL,  inbuf,  inbufsize,  keyfile); 
B > e I se  { 

B B rsLt  = S i mp L ePGPAddKey  (NULL,  infile,  keyfiLe); 

B } 

} else  if  (fextkey)  { 

B char  *userid  = infile; 

B if  (fmem)  { 

B B outbufsize  = 1; 

B B outbuf  = (byte  *)maLLoc(outbufsize); 

B B rsLt  = S i mp L e PG P E X t r a c t Key Bu f f e r (NULL,  userid,  (char  *)outbuf, 
B B B Soutbufsize,  NULL); 

B B outbuf  = (byte  * ) ma L L o c ( o u t bu f s i z e ) ; 

B B rsLt  = S i mp L ePGPEx t r a c t KeyBu f f e r (NULL,  userid,  outbuf, 

B □ B Soutbufsize,  NULL); 

B B if  (!rsLt) 

B n B filewrite  (outfiLe,  outbuf,  outbufsize); 

B } e I se  { 

B B rsLt  = S i mp L e PG P Ex t r a c t Key  (NULL,  userid,  outfiLe,  NULL); 

B } 

} 

DEBUG 


B printf  ("(Checking  for  Leaks. ..)\n"); 

B pgpLeaksEndSessi on  (); 

# e n d i f 

B printf  ("Finished,  result  = %d\n",  rsLt); 

#if  def i ned ( WI N32 ) &S  ! def i ned ( D EBUG ) 

B /*  Only  in  Win32  non-debug  mode  is  the  ringpooL  kept  open  */ 
B ringPooLConsistent  (pgpRingPooL,  Snsets,  SnfiLes); 

B assert  (nsets==0); 

B assert  (nfiLes==1);  /*  HEHRING  */ 

#e nd i f 


ttii  LOOP 

B } 


#end i f 

B exit  (rsLt); 
} 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
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n 

ft  L i b / 1 1 y u i / Ha  ke f i L e . i n 
U 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

U $Id:  Makef i le. in,v  1.19.2.3  1997/06/07  09:51:59  mhw  Exp  $ 
ft 

0BJS=n  pgpUserlO.o  pgpKBUnix.o  pgpScrUnix.o  pgpRingUI.o  pgpMoreMod.o 
SHAREDHDRS=  pgpUserlO.h  pgpRingUI.h 

INSTALLLIBS=  $(TTYUI) 

LIBTARGET=$(TTYUI ) 

LIBTDEPS=DONE 

all::  $(TTYUI  ) 

ve  ry-c  Lean:  : 

n $(RH)  ../$(TTYUI)  $(TTYUI) 
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makefile. msc 


It 

U L i b / 1 1 y u i /ma  ke  f 1 L e . ms  c 
# 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

tt  $Id:  ma  ke  f i L e . ms  c , V 1.4. 2. 2 1 997/06/07  09:51:59  mhw  Exp  $ 

# 

PGPLIB=n. .\pgptty. Lib 
TTYUI=n  DONE 

CFLAGS  = -I . . \ . -I . . \ . . \i nc Lude  - 1 . . \ . . \ i n c L u d e \ p g p - D H A V E_ C 0 N F I G_ H = 1 $(DEBUG) 
aLL::n  a Lib 

headers:n  incL 

!incLude  "makefiLe.in" 


i n c L : 

n i f 

n □ 

not 

"$(SHAREDHDRS)"==""  \ 

for  %f  in  ( $(SHAREDHDRS) 

) do  copy  %f 

. .\. .\incLude 

n i f 

n n 

not 

"SCPRIVHDRS )"==""  \ 

for  %f  in  ( SCPRIVHDRS)  ) 

do  copy  %f  .. 

.\incLude 

D0S0BJSX=n 

DOSOB J S = n 

$(0BJS: .o=.obj ) 

$(D0S0BJSX:Unix=MSD0S) 

Lib:n  $(D0S0BJS) 

. c . ob  j : 

a $(CC)  $(CFLAGS)  -Z7  -c  $< 

Lib  /out:$CPGPLIB)  $(PGPLIB)  $*.obj 


c L ea  n : 

a deL*.obj 

DONE  : 

n if  exist  $(PGPLIB)  L i b / o u t : $ ( PG P LI B ) $(PGPLIB)  $(DOSOBJS) 

n if  not  exist  $(PGPLIB)  L i b / ou t : $ ( PG P LI B ) $(D0S0BJS) 
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/* 

* pgpKB.h  — interface  for  keyboard  I/O 

* The  implementation  is  in  pgpKBUnix.c,  pg pKBM S D 0 S . c , 

* kbvms . c , etc. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpKB.h, V 1.2. 2. 2 1997/06/07  09:51:59  mhw  Exp  $ 

*/ 

#ifdef  cpLuspLus 

extern  "C"  { 

# e n d i f 

int  kbO pe nKbd ( i n t flags); 

int  kb C I o s eKbd ( i n t fd); 

void  kb C b r ea k ( VO i d ) , kbNo rm ( vo i d ) ; 

int  kbGet(void); 

void  kbFlushCint  thorough); 

#ifdef  __cplusplus 
} 

#e nd i f 
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/* 

* pgpKBMSDOS.c  — MS-DOS  non-echoing  keyboard  routines. 

* 

* Copyright  (C)  1993-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  pgpKBMSDOS . c,v  1.2. 2.1  1997/06/07  09:52:00  mhw  Exp  $ 

*/ 


#i  nc  Lude 

<conio.h>n 

/* 

/tincLude 

<signaL.h>n 

/* 

#ifdef 

HSC_VER 

#incLude 

#e  L se 

<t i me . h>n 

/* 

#incLude 

#endi  f 

<dos . h>n 

/* 

#if  HAVE 

_C0NFIG_H 

#incLude 

# e n d i f 

"config.h" 

# i n c L ude 

"pgpKB. h" 

#i nc  Lude 

"pgpRndPooL . h' 

' n / * 

/*  These  are  pretty  boring 
void  k b C b r ea k ( VO i d ) { > 
void  kb No r m ( VO i d ) { > 


For 

g e t c h ( ) 

and  kbhit() 

For 

r a i s e ( ) 

*/ 

For 

c L 0 c k ( ) 

*/ 

For 

s Leep( ) 

*/ 

For  pg p Ra nd Poo L Key s t r o ke ( ) */ 
*/ 


int  kbGet(void) 

{ 

n i n t c ; 

n c=getch(); 

n if(c==0) 

n n c = 0x100  + getchC); 

n / * 

n * BorLand  C's  getchC)  uses  int  0x21  function  0x7, 

n * which  does  not  detect  break.  So  we  do  it  expLicitLy. 

n * / 

n if  (c  ==  3) 

n n rai se(SIGINT); 

n pgpRa ndPoo L Key s t r o ke ( c ) ; 

n returnc; 

> 

#ifdef  _MSC_VER 
/* 

* Microsoft  Visual  C 1.5  (at  Least)  does  not  have  sLeep()  in  the 

* Library.  So  we  use  this  crude  approximation.  ("crude"  because, 

* assuming  C LO C KS_P E R_S E C is  18.2,  it  rounds  to  18  to  avoid  fLoating 

* point  math.) 

*/ 

#ifndef  C LOC KS _ P E R_S E C 
#define  CLOCKS_PER_SEC  CLK_TCK 
#endi f 

static  unsigned 
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sLeepC unsigned  t) 

{ 

n cLock_t  target; 

n target  = clockC)  + t * ( un s i g ne d ) C LO C KS _ P E R_ S E C ; 

n while  (cLockC)  < target) 

n n 

n return0; 

} 

#endi f 


void 

f 

kbFLushCint 

thorough) 

V 

n 

do  -C 

n 

n 

whi Le(kbhit()) 

Q 

n 

n (void)getch(); 

n 

n 

if  (Ithorough) 

Q 

Q 

n break; 

n 

Q 

/*  Extra  thorough:  wait  for  one  second  of  quiet 

□ 

n 

sLeepCI ); 

n 

> while 

(kbhitO); 

> 

*/ 
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pgpKBMac.c 


/* 

* pgpKBMac.c  - Mac  stdio  keyboard  input  routines. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpKBMac.c, V 1.1. 2.1  1997/06/07  09:52:00  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 

#if  HAVE_UNISTD_H 
#incLude  <unistd.h> 

#e nd i f 

#i nc  Lude  <stdi o . h> 

#incLude  "pgpKB.h" 

SincLude  "pgpRndPooL.h" 

#ifndef  STDIN_FILENO 
^define  ST D I N_ F I LE N On  0 
#define  ST D 0UT_ F I LE N On  1 
#end  i f 

static  int  kbFd  = ST D I N_ F I LE N 0 ; 
void 

kbCbreak(void) 

{ 

} 

voi  d 

kbNormCvoi d) 

{ 

} 

i n t 

kbGe t (void) 

{ 

n int  resuLt; 

n chare; 

n resuLt  = getcharC); 

n if  (resuLt  ==  EOF) 

n n return  -1; 

a c=resuLt; 

n pg p Ra nd Poo L Key s t r o ke ( c ) ; 

n return  (unsigned  char)c; 

} 

/* 

* FLush  any  pending  input.  If  "thorough"  is  set,  tries  to  be  more 

* thorough  about  it.  IdeaLLy,  wait  for  1 second  of  quiet,  but  we 

* may  do  something  more  primitive. 

* 

* kbCbreakO  has  the  side  effect  of  flushing  the  inout  queue,  so  this 
[CCHK:64220e7bd001199cc33bb8b5337763477b54110d4600c220c255b56db6e5a61ad55 
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* is  not  too  critical. 

*/ 

void 

kbFLushCint  thorough) 

{ 

n /*  XXX:  Not  implemented  on  Mac  */ 

n ( VO i d ) t h o r o ug h ; nn  /*  Avoid  warning  */ 

> 
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/* 

* pgpKBUnix.c  - Unix  keyboard  input  routines. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  p g pKBU n i X . c , V 1.1. 2. 2 1 997/06/07  09:52:00  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#incLude  "config.h" 

#end  i f 


/* 

* Define  NOTERMIO  if  you  don't  have  the  termios  stuff 
*/ 


#ifdef  HAVE  FCNTL_H 


# i n c L ud  e 
# e nd i f 
#i  nc  Lude 
#incLude 
#i nc  Lude 


<fcntL.h> 

<signaL.h> 
<s  t d i o . h> 
<sys/types 


h> 


/*  How  to  get  cbreak  mode  */ 


#if  def ined(NOTERMIO) 

#incLude  <sgtty.h>n  /*  No  termio:  Use  ioctLC)  TIOCGETP  and  TIOCSETP  */ 

#eLif  d e f i n e d ( S V R 2 ) 

#incLude  <termio.h>n  /*  SVR2:  Use  ioctLO  TCGETA  and  TCSETAF  */ 

#eLse  /*  UsuaL  case  */ 

#incLude  <termios.h>n  /*  Posix:  use  t c g e t a t t r / t c s e t a t t r */ 

#end  i f 


#ifdef  sun  /*  incLuding  ioctL.h  and  termios. h gives  a Lot  of  warnings  on  sun  */ 
#incLude  <sys / f i L i o . h> 

#e  L s e 

#incLude  <s y s / i o c t L . h>n  n /*  for  FIONREAD  */ 

#endif  /*  sun  */ 


#ifndef  FIONREAD 

#def inenFIONREADn  TIOCINQ 

#end  i f 

#incLude  "pgpPOSIX.h"n  /*  For  readC),  sLeepC)  */ 


#incLude  "pgpKB.h" 

#if  UNITTESTn  /*  Dummy  out  some  functions  for  unit  testing  */ 

#define  r a n d E v e n t ( c ) n (void)c 

#e  L s e 

#incLude  " pgpRnd Poo L . h " 

#e nd i f 

#ifndef  STDIN_FILENO 
^define  STD  I N_ F I LENOn  0 
#define  STD0UT_ F I LE NOn  1 
#end  i f 

/*  The  structure  to  hoLd  the  keyuboard's  state  */ 
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tfii  def  1 ned(NOTERMIO) 

static  struct  sgttyb  kbStateO,  kbStatel; 


# i f n d e f 

CBREAK 

# d e f i n e 

CBREAK 

RAW 

# e nd i f 

#def i ne 

KB_GET_ 

STATE ( fd, s ) 

ioctLCfd,  TIOCGETP, 

s ) 

#def i ne 

KB_ALTER_STATE(s) 

C C s ) ->s g _f L a g s |=  CBREAK 

/tdef  i ne 

KB_SET_ 

STATE(fd,s) 

ioctLCfd,  TIOCSETP, 

s ) 

■ECHO) 


Uelii  def i ned ( SVR2 ) 

static  struct  termio  kbStateO,  kbStatel; 

^define  KB_G ET_ ST AT E C f d , s ) ioctLCfd,  TCGETA,  s) 

^define  KB_ALTER_STATE ( s ) \ 

n ( (s)->c_ccCVMIN:  = 1 , (s)->c_ccCVTIME:  = 0,  (s)->c_LfLag  &=  ‘ ( E C H 0 | I C AN  0 N ) ) 

^define  KB_S ET_ ST AT E ( f d , s ) ioctLCfd,  TCSETA,  s) 


# e L s e 
static 
#d  e f i ne 
#d  e f i ne 
n 

#def i ne 


struct  termios  kbStateO,  kbStatel; 
KB_GET_STATE(fd,s)  t c g e t a t t r ( f d , s) 
KB_ALTER_STATE(s)  \ 

( ( s )->c_ccCvmin:=i , (s)->c_cc:vtihe:=0,  Cs) 
KB_SET_STATE(fd,s)  t c s e t a t t r ( f d , TCSAFLUSH, 


->c_LfLag  &=  " ( ECHO | I C ANON  ) ) 
s ) 


#end i f 


static  int  kbS t a t e F e t c h ed  = 0; 

/*  The  basic  task  of  getting  the  terminal  into  CBREAK  mode.  */ 
static  void 

kb  I n t e r na L C b r ea k ( i n t fd) 

{ 


n 

if 

C ! kbS t a t e Fe t c hed  ) f 

Q 

a 

if  CKB_GET_STATECf d,  &kbState0)  < 

0) 

Q 

a 

n return ;n/*  Trouble  - what 

t 0 

n 

n 

kbStatel  = kbState0; 

n 

n 

KB_ALTER_STATEC&kbState1); 

n 

n 

kbStateFetched  = 1; 

Q 

> 

n 

KB_ 

SET_STATECfd,  SkbStatel); 

} 


/*  Restore  the  terminal  to  normal  operation  */ 
static  void 

kb  I n t e r na L No r m ( i n t fd) 

C 

n if  ( kb S t a t e F e t c h ed  ) 

n n KB_SET_STATE(fd,  &kbState0); 

> 


/*  State  variables  */ 

static  volatile  int  kbCbreakFlag  = 0; 
static  int  kbFd  = -1; 


#ifdef  SVR2 

static  int  ( * s a ve s i g ) ( i n t ) ; 
#e  L se 

static  void  ( * s a ve s i g ) ( i n t ) ; 
# e n d i f 
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to  restore  the  terminal  modes.  */ 


signal  */ 


static  void 
kbAddSigs(void); 

/*  Resume  cbreak  after  SIGCONT  */ 
static  void 
kbSig2(int  sig) 

{ 

n (void)sig; 

n if  ( kb C b r ea k F I a g ) 

n n kb  I n t e r na  I C b r e a k ( kb  F d ) ; 

a else 

n n kbAddSigsC); 

} 


/*  A wrapper  around  SIGINT  and  SIGCONT 
static  void 
kbSigICint  sig) 
i 


n 

if 

(kbCbreakFlag) 

□ 

□ 

kblnternalNorm(kbFd); 

n 

i f 

(sig  ==  SIGINT) 

n 

n 

signal(sig. 

saves i g ) ; 

n 

e L 

se 

n 

n 

signal(sig. 

SIG_DFL); 

n 

ra 

ise(sig);n  /* 

Re-send  the 

} 


static  voi d 
kbAddSigs(void) 
{ 


n savesig  = signal 

#ifdefn  SIGTSTP 
n signal  (SIGCONT, 

n signal  (SIGTSTP, 

#e nd i f 


(SIGINT,  kbSigI); 

kbSig2); 
k b S i g 1 ) ; 


> 


static  void 
kbRemoveSigs(void) 

{ 

n signal  (SIGINT,  savesig); 

#ifdefn  SIGTSTP 

n signal  (SIGCONT,  SIG_DFL); 

n signal  (SIGTSTP,  SIG_DFL); 

#endi f 

> 


/*  Now,  at  last,  the  externally  callable  functions  */ 
int  kbOpenKbd ( i nt  flags)  f 
int  IkbFD  = -1; 

if((lkbFD  = open(" /dev/tty",  flags))  < 0)  ( 

H IkbFD  = STDIN_FILENO; 

} 


return! IkbFD); 
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} 


int  kbC L os eKbd ( i n t fd)  { 
int  ReturnCode  = 0; 

ifCfd  !=  S T D I N_ F I LE NO ) /*We  don't  actually  want  to  close  STDIN*/ 
n ReturnCode  = close(fd); 

return(ReturnCode); 

> 


void 

kbCbreak(void) 

{ 

if CkbFd  < 0)  { 

n kbFd  = kbOpenKbd ( 0_RDWR ) ; 

> 

kbAddS i gs ( ) ; 
kbCbreakFlag  = 1; 
kblnternalCbreak(kbFd); 

> 


void 

kbNorm(void) 


{ 


n kblnternalNormCkbFd); 

n kbCbreakFlag  = 0; 

n kbRemoveSigsC); 


> 


int 

kbGet (void) 


{ 


n i n t i ; 

n chare; 


n i = readCkbFd,  &c,  1); 

n i f (i  < 1 ) 

n B return  -1; 

n pg p Ra nd Poo  I Key s t r o ke ( c ) ; 

n return  (unsigned  char)c; 

} 


/* 

* Flush  any  pending  input.  If  "thorough"  is  set,  tries  to  be  more 

* thorough  about  it.  Ideally,  wait  for  1 second  of  quiet,  but  we 

* may  do  something  more  primitive. 

* 

* kbCbreak()  has  the  side  effect  of  flushing  the  inout  queue,  so  this 

* is  not  too  critical. 

*/ 

void 

kbFlush(int  thorough) 

{ 

n if  (thorough) 

n B sleepd); 

#if  def ined(TCIFLUSH) 
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a t cf Lush ( kbFd,  TCIFLUSH); 

#eLif  def i ned (TIOC FLUSH ) 

#ifndef  FREAD 

#define  FREAD  In/*  The  usual  value  */ 
#endi f 

n ioctlCkbFd,  TIOCFLUSH,  FREAD); 

#endi  f 

> 


#if  UNITTESTn  /*  Self-contained  test  driver  */ 
SincLude  <ctype.h> 
i nt 

ma i n ( voi d ) 

{ 


n 

i n t c ; 

□ 

put  s ( " 

Going  to  cbreak 

mode  . . . 

"); 

D 

kbCbreakC  ) ; 

□ 

pu  t s ( " 

In  cbreak  mode. 

Please 

type . " ) ; 

n 

for  ( ; 

;)  { 

B 

B 

c = kbGetC); 

B 

B 

if  (c  ==  '\n' 

1 1 c = = 

' \r  ' ) 

B 

fl 

n break; 

B 

B 

printf("c  = %d 

II 

o 

\n",  c , c); 

B 

B 

kbFLushCisupperCc)); 

n } 

n pu t s ( " Re t u r n i ng  to  normal  mode..."); 

n kbNormC ) ; 

n puts("Done."); 

n returnO; 

} 

#endif  /*  UNITTEST  */ 
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/* 

* pgpMoreMod.c  --  A pipeline  module  to  output  text  a page  at  a time. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pg pHo r eMod . c , V 1.3. 2.1  1997/06/07  09:52:01  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0NFIG_H 

^include 

# e nd i f 

"config.h" 

//include 

<stdio. h> 

//include 

<ctype . h> 

//include 

" pgpDebug . h " 

//include 

"pgpAnnotate.  h 

//i  nc  lude 

" pgpMem . h " 

//include 

"pgpPipeline.h 

#i nc lude 

"pgpKB. h" 

//include 

"pgpScreen.h" 

//include 

"pgpMoreMod.h" 

#def i ne 

MOREMAGICn  0xa5f91780 

#d  e f i n e 

TABSTOPnn  8 

struct 

MoreModContext  { 

n 

i nt  n rows ; n n 

/* 

Number 

of  rows  on  screen,  minus 

1 */ 

n 

i nt  row; n n 

/* 

Next  row  of  output,  0 

based  * / 

n 

int  ncols;n  n 

/* 

Number 

of  columns  on  screen  */ 

n 

intcol;n  n 

/* 

Next  column  of  output. 

0 based 

*/ 

Q 

long  nbytes;n  n 

/* 

Size  of 

message,  if  given  */ 

n 

long  byt;n  n 

/* 

Number 

of  bytes  we  have  output 

*/ 

D 

char  *rowbuf;n  n 

/* 

Buffer 

holding  row  to 

be  output 

*/ 

n 

byte  flushing;n  n 

/* 

True  if 

discarding  all 

i nput  */ 

n 

byte  aftercr;n  n 

/* 

Saw  a cr,  eat  next  If 

if  any  * / 

D 

byte  quitting;n  n 

/* 

Have  printed  quitting 

message  * 

/ 

tt 

int  s c ope_d ep t h ; n 

/* 

Nesti ng 

scope  depth  */ 

D 

FILE*fp;n  n 

/* 

Output 

file  descriptor 

, must  be 

console 

>; 

static  void 

mo r e f I u s h r o w ( s t r u c t MoreModContext  *context) 


Q 

i f 

(context -> col)  { 

n 

n 

fputs  ( c on t ex t -> r o wb u f , context 

n 

Q 

fputcC'Xn',  con t e X t -> f p ) ; 

n 

D 

context->col  = 0; 

Q 

> 

> 

static  void 

mo  r e e r a s e I i ne ( s t r u c t MoreModContext  *context) 
{ 


n 

int  i ; 

n 

int  nco 1 s 

= c on t ex t ->n c o 1 s ; 

a 

FILE  *fp  = 

context->fp; 
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/*  Blank  out  prompt  */ 
for  (i  = 0;  i < ncoLs;  i++) 


n 

n 

fputc  ('  ',  fp); 

n 

f put  c C * 

\r'. 

f p)  ; 

Q 

} 

fflushCfp); 

static 

void 

morenewLineCstruct 

/ 

Ho r eMod C 0 n t e X t *context) 

n 

i n t c ; 

n 

morefLushrou(context); 

n 

context 

->row  +=  1 ; 

n 

if  (context 

->row  ==  cont ext->n rows  ) ( 

Q 

□ 

i f 

( con t ex t->nby t e s ) ( 

n 

□ 

B 

fprintf  ( context->f p,  "\ 

More  - 

- %d%%  -- 

Hi  t 

space  for  next  screen.  Enter  for  new  line\ 

, -Q' 

to  quit  - 

- \ r " 

, (int)((100  * cont ext->by t ) / c on t e x t ->n by t e s ) ) ; 

n 

n 

> else  { 

n 

n 

B 

fputs  ("\ 

More  - 

- Hit  space  for  next  screen.  Enter  for  new  Line,  'Q'  to  quit  - 

n 

n 

B 

context->fp); 

u 

Q 

> 

n 

n 

fflush  ( c on t e X t -> f p ) ; 

Q 

Q 

for 

( ; ; ) { 

u 

□ 

B 

kbCbreakC ); 

n 

n 

B 

c = kbGet(); 

n 

B 

B 

kbNormC  ) ; 

n 

B 

B 

moreeraseLine(context); 

n 

B 

B 

c = toupper(c); 

Q 

B 

B 

if  (c  ==  'Q'  ) { 

n 

B 

B 

n c on t ex t ->f L u s h i n g = 1; 

Q 

B 

B 

H break; 

n 

B 

B 

> else  if  (c  ==  ' \r ' | | c ==  ' \n ' ) { 

s 

B 

B 

n context->row  -=  1; 

n 

B 

B 

n break; 

n 

B 

B 

> else  if  (c  ==  ' ' ) { 

n 

B 

B 

n context -> row  = 0; 

n 

B 

B 

n break; 

n 

B 

B 

> else  { 

n 

B 

B 

n fprintf  ( con t ex t -> f p , "\b"); 

n 

B 

B 

> 

n 

B 

> 

o 

> 

> 

static 

void 

moreoutcharCstruct 

T 

Mo r eHod C 0 n t e X t *context,  char  c) 

n 

int  aftercr 

= context->af tercr; 

n 

context 

->aftercr  = 0; 

n 

if  C c = = 

' \n  ' 

) { 

n 

B 

i f 

(aftercr) 

o 

B 

a 

return; 

n 

B 

morenewLine(context); 
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□ 

□ 

D 

n 

D 

n 

□ 

Q 

D 

n 

□ 

□ 

n 

D 

Q 

□ 

n 

n 

□ 

□ 

Q 

Q 

> 


} else  if  (c=='\r')  { 
n context->af terc r = 1; 

n mo r en e w L i n e ( c o n t ex t ) ; 

> else  if  (c=='\t')  { 

n int  addspaces  = TABSTOP  - (context->coL  % TABSTOP); 

n while  (addspaces--)  { 

n n if  ( c on t e X t -> CO L ==  c o n t ex t ->n c o L s ) ( 

n n n con t ex t -> r o w bu f C c on t ex t -> c o L 3 = '\0' 

n n n return; 

n n } 

n n c on  t ex  t ->  r o wbu  f C c o n t e X t ->  c o L ++ 3 = ' 

n 3 

n context ->roubufCcontext->col3  = '\0'; 

>eLse  if  (c<  ' ')  { 

n return;nn 

} else  { 


/*  Eat  non-printing  characters  */ 


/*  Eat  characters  beyond  right  column  */ 
if  ( c on t ex t -> c o I ==  con t ex t -> n c o I s ) 
n return; 

con t ex t-> rowbu f C con t ex t ->co L++3  = c; 
c on t e X t -> r o wbu f [ c on t ex t -> c o I 3 = '\0'; 


static  size_t 

Write  (struct  PgpPipeline  *myself,  byte  const  *buf,  size_t  size,  int  *error) 
{ 


n 

struct 

MoreModContext  *context; 

□ 

int  s z 

= size; 

Q 

int  c ; 

n 

pgpAssert(myself); 

o 

pg p A s s e r t ( my s e 1 f ->ma g i c ==  HOREMAGIC); 

Q 

context 

= (struct  MoreModContext  *)myself 

n 

pgpAssert  (context); 

n 

pgpAssert(error); 

D 

♦error 

= 0; 

n 

while  ( 

! con t e X t ->f  l u s h i ng  8S  sz  — ) { 

n 

□ 

c = *(char  *)buf++; 

□ 

D 

mo r eou t c ha r ( con t e X t , (char)c); 

n 

n 

++context->byt; 

□ 

} 

□ 

return 

size; 

static  int 

Flush  (struct  PgpPipeline  *myself) 
n pg p A s s e r t ( my  s e I f ) ; 

n pg p A s s e r t ( my s e I f ->ma g i c ==  MOREHAGIC); 

n /*  To  shut  up  compiler  warnings  */ 

n (void)myself; 
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n returnO; 

} 

static  int 

Annotate  (struct  PgpPipeLine  *myseLf,  struct  PgpPipeLine  *origin,  int  type. 


□ 

byte  const  *string,  size_t  size) 

n 

struct  Ho r eHod C on t e X t *context; 

□ 

/*  To  shut  up  compiLer  warnings  */ 

B 

(void)origin; 

B 

(void)string; 

B 

(void)size; 

B 

pgpAssert(myseLf) ; 

B 

pgp As se r t ( my s e L f ->ma g i c ==  HOREMAGIC); 

B 

context  = (struct  Mo reHodCont ext  * ) my s e L f ->p r i v ; 

B 

pgpAssert  (context); 

B 

/*  CurrentLy  the  annotation  reader  does  not  pass  us  any  annotations  */ 

B 

PGP_SCOPE_DEPTH_UPDATE(context->scope_depth,  type); 

B 

pgpAssert  ( c on t e x t -> s c o pe_d e p t h !=  -1); 

B 

return  0; 

> 

Static 

int 

SizeAdvise  (struct  PgpPipeLine  *myseLf,  unsigned  Long  bytes) 


B 

struct  MoreHodContext  *context; 

B 

pgpAssert  (myseLf); 

B 

pgpAssert  ( my s e L f ->ma g i c ==  HOREMAGIC); 

B 

context  = (struct  MoreHodContext  * ) my s e L f ->p r i v ; 

B 

pgpAssert  (context); 

B 

if  ( by t es ) 

B 

n context->nbytes  = bytes; 

B 

if  (bytes  ||  con t ex t ->s cope_dep t h ) 

B 

n returnO; 

B 

/*  XXX 

B 

* End  of  "more"  output.  Note  that  scope_depth  is  not  correct 

B 

* currentLy  because  annotation  reader  doesn't  teLL  us  scope. 

B 

* Not  cLear  if  this  is  a bug... 

B 

*/ 

B 

if  ( ! cont ext->qu i 1 1 i ng  ) { 

B 

n fputs  ( "\nDone  . . . hi t any  key\n",  c on t e x t ->f p ) ; 

B 

Q kbCb  rea  k ( ) ; 

B 

n kbGet(); 

B 

n kbNorm(); 

B 

n fputs  ("\n",  context->f p); 

B 

n con t ex t->qu i t t i ng  = 1; 

B 

} 
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n return0; 

> 

static  void 

Teardown  (struct  PgpPipeLine  *myseLf) 
n struct  Mo r eMod Con t ex t *context; 

n pg p As s e r t ( my s e L f ) ; 

n pg p As s e r t ( my s e L f ->ma g i c ==  HOREHAGIC); 

n context  = (struct  Mo r eMod C on t ex t * ) my s e L f ->p r i v; 

n pgpAssert  (context); 

n memset  ( c o n t ex t -> r o wbu f , 0,  c on t ex t -> n c o L s + 1); 

n pgpMemFree  ( c on t e x t -> r oh bu f ) ; 

n memset  (context,  0,  sizeof  (*context)); 

n pgpMemFree  (context); 

n memset  (myself,  0,  sizeof  (*myseLf)); 

n pgpMemFree  (myself); 

} 

struct  PgpPipeline  * 

pgpMo r eModC r ea t e (struct  PgpPipeline  **head) 

{ 

n struct  PgpPipeline  *mod; 

n struct  MoreModContext  *context; 

n unsigned  nrows,  ncols; 

n i f ( ! head ) 

n n return  NULL; 

o context  = (struct  MoreModContext  *)pgpMemAlloc  (sizeof(*context)); 

n if  (Icontext) 

n n returnNULL; 

n memse t ( con t ex t , 0,  s i z eo f ( * c on t ex t ) ) ; 

n mod  = (struct  PgpPipeline  * ) pg pM em A I I o c ( s i zeof ( *mod ) ) ; 

a i f ( ! mod ) { 

n n pgpMemFree(context); 

n n return  NULL; 

n } 

□ s c r e e n S i z eG e t (Snrows,  Sncols); 

n c on t e X t -> r owbu f = (char  * ) pg pMemA I I o c (ncols  + 1); 

n if  ( ! CO n t e X t -> r owbu f ) { 

n n pg pMem F r ee ( con t e X t ) ; 

n n pgpHemFree(mod); 

n n return  NULL; 

n > 

n c on t e X t ->n r OH s = nrons  - 1; 

n c on t e X t ->n c o I s = ncols; 

n context ->fp  = stdout; 

n mod->magic  = MOREMAGIC; 

n mod->Hrite  = Write; 
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n mod->fLush  = Flush; 

n mo d-> s i z e Ad V i s e = SizeAdvise; 

n mod->annotate  = Annotate; 

n mod->t ea rdown  = Teardown; 

n mod->name  = "More"; 

n mod->priv  = context; 

n *head=mod; 

a return  *head; 

} 
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/* 

* pgpMoreMod.h  --  I n t e r f a c e- s p e c i f i c pipeline  module  to 

* display  files  on  console 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpHo r eMod . h , V 1.3. 2.1  1 997/06/07  09:52:01  mhw  Exp  $ 

*/ 


#ifndef  PGPMOREMOD_H 
^define  PGPMOREMOD.H 

^include  "pgpUsuals.h" 

#ifdef  __cplusplus 
extern  "C"  { 

#e  nd i f 

struct  PgpPipeline; 

#ifndef  T YPE.PG P P I P E LI N E 
//define  T YPE.PG  P P I P E LI  N E 1 
typedef  struct  PgpPipeline  PgpPipeline; 
//end  i f 


/* 

* Create  a module 

* output . 

*/ 

struct  PgpPipeline 


//i  f def 
} 

//endi  f 


cplusplus 


to  write  to  the  console,  pausing  after  each  page  of 


*pgpMoreModCreate  (struct  PgpPipeline  **head); 


//endif  /*  PGPMOREMOD  H */ 
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/* 

* pgpPOSIX.h 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* This  fiLe  incLudes  <unistd.h>,  if  it's  avaiLabLe,  and 

* decLares  a bunch  of  functions  with  "traditionaL"  vaLues  if  not. 

* The  GNU  Libc  ManuaL  (node  "Version  Supported")  says  this  is  impossibLe; 

* I wonder  what  they  think  of  this. 

* 

* $Id:  pgpPOSIX.h, V 1.2. 2.1  1 997/06/07  09:52:01  mhw  Exp  $ 

*/ 

#incLude  <Limits.h> 

/* 

* See  if  this  is  a POSIX  <Lirnits.h>.  A POSIX  system  *may*  define 

* a macro  for  ARG_HAX,  but  it  may  instead  defined  _SC_ARG_MAX 

* in  <unistd.h>  and  require  you  yo  use  sysconfC)  to  get  the  vaLue. 

* However,  a POSIX  system  is  supposed  to  defined  _POSIX_ARG_MAX 

* in  <Limits.h>  with  the  vaLue  of  4096,  the  PO S I X-ma nd a t ed  Lower 

* bound  on  ARG_MAX  or  sy s c on f ( _S C _ A RG_H AX  ) . 

* A POSIX  system  is  supposed  to  define  most  of  these,  so  checking  for 

* them  *aLL*  is  overkiLL,  but  it's  easy  enough... 

*/ 

#ifndef  H AVE_UNI STD_H 

#ifdef  __P0SIX n /*  Defined  by  GCC  on  POSIX  systems  */ 

^define  H A V E_U N I ST D_H  1 

#eLif  def i nedC_POSIX_ARG_HAX)  ||  d e f i n ed ( _P0 S I X_ C H I LD_n AX ) 

#define  H AV E_U N I ST D_H  1 

#eLif  def i ned(_POSIX_LINK_HAX)  ||  d e f i n ed ( _ PO S I X_H AX_ C AN  ON  ) 

#define  HAVE_UNISTD_H  1 

#eLif  def ined(_POSIX_HAX_INPUT)  ||  d e f i ne d ( _P0 S I X_N AM E_H AX ) 

^define  HAVE_UNISTD_H  1 

#eLif  def i ned(_POSIX_NGROUPS_MAX)  ||  d e f i n ed ( _ POS I X_0 P E N_M A X ) 

^define  H A V E_U N I ST D_H  1 

#eLif  def ined(_POSIX_PATH_MAX)  ||  de f i n ed ( _P0S I X_P I P E_BU F ) 

^define  HAVE_UNI STD_H  1 

#eLif  def ined(_POSIX_RE_DUP_MAX)  ||  d e f i ned ( _P0 S I X_S S I Z E_M AX ) 

#define  HAVE_UNISTD_H  1 

#eLif  def i ned(_POSIX_STREAM_MAX)  ||  defined  ( _P0 S I X_T Z N AH E_H A X ) 

^define  HAVE_UNISTD_H  1 
#end i f 
#end i f 

#ifdef  __cpLuspLus 
extern  "C"  { 

# e nd i f 

#if  HAVE_UNISTD_H 
#incLude  <unistd.h> 

#eLif  de f i n ed ( H S DO S ) 

#incLude  <io.h>n/*  Where  HSDOS  keeps  such  things  */ 

# e L s e 

/*  Not  POSIX  - declare  the  portions  of  <unistd.h>  we  need  manuaLLy.  */ 
int  ioctLCint  fd,  int  request,  void  *arg); 
int  isattyCint  fd); 

int  readCint  fd,  void  *buf,  int  nbytes); 
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unsigned  sLeepCunsigned  seconds); 
#end i f 

#ifdef  cplusplus 

> 

#end  1 f 
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/* 

* pgpRingUI.c  --  Various  u s e r- i n t e r f a c e helpers  for  working  with  keyrings 

* on  a simple  stdio  tty  interface. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by  Colin  Plumb. 

★ 

* $Id:  pgpRi ngUI . c, V 1.6. 2. 2 1997/06/07  09:52:02  mhw  Exp  $ 

*/ 

#if  HAVE_C0N FIG_H 
#include  "config.h" 

#e n d i f 


//include 

<ctype . h> 

#i nc  lude 

<stdio.h> 

#include 

<stdlib.h> 

/* 

for 

strtolC)  */ 

# i n c 1 ude 

<string.h>n 

/* 

for 

strchrC)  */ 

#include 

<t i me  . h> 

/* 

for 

time  ()  */ 

//include 

"pgpDebug.h" 

//i  nc  lude 

"pgpErr.h" 

Sinclude 

" pgpT  i me  Da  t e . h ' 

n 

/*  for  pg p D a t e S t r i ng 

#i nc lude 

"pgpUserlO.h" 

#i nc  1 ude 

"pgpRingUI.h" 

//include 

"pgpT  rstPkt . h" 

//include 

"pgpTrust.h" 

//include 

"pgpRngPub. h" 

#include 

"pgpRngRead.h" 

//include 

" pgpPubKey . h " 

//include 

"pgpSigSpec.h" 

//include 

"pgpTimeDate.h' 

#include 

"pgpEnv. h" 

/* 

* The  old  PGP  format... 

Type  Date  keyID/bits  User  ID 

PUB  1996-03-30  58B96505/2048  F0  4A  30  95  20  17  29  E0  DC  A3  3F  FB  C6  5B  79  3F 
f 00 

sig!  1996-03-30  58B96505  foo 

PUB  1996-03-30  E9D1 E021 /4096  1A  E2  EF  AA  FC  CB  59  AC  D4  2A  1A  90  E3  DD  4F  45 
bar 

sig!  1996-03-30  E9D1E021  bar 

2 key(s)  examined 
*/ 

static  char  const  hexcharC16D  = { 

n '0','1','2','3','4','5','6','7', 

n '8','9','A','B','C','D','E','F' 

>; 

/* 

* Pretty-print  a 128-bit  key  fingerprint  into  the  supplied  buffer, 

* in  varius  forms,  depending  on  the  "len"  argument: 

* 1111111111222222222233333333334444444444555 

* 01234567890123456789012345678901234567890123456789012 

* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF/1024  (53  chars) 
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* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF/1024 

* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF/1024 

* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF/1024 

* 01234567  89ABCDEF  01234567  89 ABC D E F / 1 0 2 4 

* 01234567  89ABCDEF  01234567  89 AB C D E F / 1 02 4 

* 01 23456789ABCDEF  0 1 2 34 5 6789 AB C D E F / 1 024 

* 0123456789ABCDEF0123456789ABCDEF/1024 

* 01 23456789 ABCDEF0123456789ABCDE/1024 

* 0123456789ABCDEF0123456789ABCD/1024 

* 01 23456789ABCDEF01 23456789ABC/1024  (etc.,  truncating 

* 

* /1024 

* /102 
* /10 

* /I 

* / 

★ 

* Returns  the  number  of  characters  actually  used,  guaranteed  to 

* be  <=  the  given  len. 

* Does  NOT  n u I I - 1 e r m i na t e the  array. 

*/ 

s i ze_t 

r i n g T t y F o r ma t F i ng e r p r i n t 1 6 ( s t r u c t RingSet  const  *set,  union  RingObject  *key, 
n n n char  *buf,  size_t  len) 

{ 

n static  signed  char  const  limitsC16]  = { 


a 

n 

-1,  46,  38,  46,  34,  46,  38,  46, 

n 

a 

32,  46,  38,  46,  34,  46,  38,  46  >; 

n 

char 

* p = b u f ; 

s 

byte 

hash:i6:; 

s 

char 

bitsC7:;n  /*  '/'  + 65535  max  length 

+ 

■\0'  */ 

n 

i nt 

i ; 

o 

i nt 

h 1 e n ; 

Q 

unsigned  keylen; 

n 

keylen  = r i ngKeyBi t s ( s e t , key);n/*  Length 

of 

key  in 

bits  */ 

n 

spr  i 

ntf(bits,  "/%u",  keylen);n  /*  Length 

of 

decimal 

length 

Q 

keylen  = ( uns i gned  ) s t r 1 en ( bi t s ) ; 

n 

if  (keylen  >=  len)  { 

n 

n 

memcpy(buf,  bits,  len); 

n 

n 

return  len; 

a 

> 

a 

Len 

-=  key  len; 

a 

h L en 

= r i ng Key F i nge r p r i n t 1 6 ( se t , key,  hash); 

a 

for 

(i  = 0;  i < hlen  S&  ( s i ze_t ) ( p-buf ) ! 

= len;  i++) 

{ 

o 

n 

/*  Print  each  space  iff  it's  okay 

t 0 

*/ 

a 

n 

if  (len  > ( u n s i g ned  ) ( i n t ) 1 i mi t s C i ] ) 

o 

Q 

n *p++  = ' '; 

n 

n 

/*  Double  space  in  the  middle  if 

appropriate 

*/ 

n 

n 

if  (i  ==  8 &&  len  >=  36  &S  len  != 

39 

&S  len 

!=  47) 

n 

Q 

n *p++  = ' '; 

n 

□ 

*p  + + = h ex c h a r E h a s h [ i !]  >>  4 & 15D 

/ 

n 

n 

if  (( s i ze_t )( p-buf ) ==  len) 

n 

n 

n break; 

n 

n 

*p++  = h ex c h a r C ha s h C i ] & 15D; 

n > 
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(38  chars) 
(37  chars) 


as  needed) 
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n memcpyCp,  bits,  keyLen); 

n return  p+ key L e n-bu f ; 

} 


/* 

* 

* 

★ 

* 

★ 

* 

★ 

* 

★ 

* 

* 

•k 

•k 

★ 


Pretty-print  a 160-bit  key  fingerprint  into  the  supplied  buffer, 
in  varius  forms,  depending  on  the  "Len"  argument: 

Version  a: 

11111111112222222222333333333344444444 
012345678901234567890123456789012345678901234567 
01234  56789  ABCDE  F0123  45678  9ABCD  EF012  34567  (48 

01234  56789  ABCDE  F0123  45678  9ABCD  EF012  34567  (47 


0123456789  ABCDEF0123  456789ABCD  EF01234567  (44 

0123456789  ABCDEF0123  456789ABCD  EF01234567  (43 

01 23456789ABCDEF01 23  4 5 6789 ABC D E F 0 1 2 34 5 67  (41 

01  23456789ABCDEF01  23456789ABCDEF01  234567  (40 

01 23456789ABCDEF0123456789ABCDEF01 23456 
01 23456789ABCDEF01 2345678 9ABCDEF01 2345 

01  23456789ABCDEF01  23456789ABCDEF01  234  (etc.,  truncating  as  needed) 


chars) 

chars) 

chars) 

chars) 

chars) 

chars) 


* Version  b: 

* 1111111111222222222233333333334444444444 

* 01234567890123456789012345678901234567890123456789 

* 0123  4567  89ab  cdef  0123  4567  89ab  cdef  0123  4567  (50  chars) 

* 0123  4567  89ab  cdef  0123  4567  89ab  cdef  0123  4567  (49  chars) 

* 01234567  89abcdef  01234567  89abcdef  01234567  (44  chars) 

* 01 23456789abcdef 01 23  4 5 6789a b c d e f 0 1 2 34 5 67  (41  chars) 

* 01  23456789ABCDEF01  23456789ABCDEF01  234567  (40  chars) 

* 0123456789ABCDEF0123456789ABCDEF0123456 

* 0123456789ABCDEF0123456789ABCDEF012345 

* 0 1 2 34 5 6789 AB C D E F 0 1 234 56789 AB C D E F 0 1 2 34  (etc.,  truncating  as  needed) 
*/ 


s i ze_t 

r i ngT t y Fo rma t F i nge r p r i n t 20 ( s t r u c t RingSet  const  *set,  union  RingObject  *key, 
n n n char  *buf,  size_t  Len) 

{ 


□ 

□ 

n 

□ 

n 

a 

n 

□ 

a 

Q 


static  signed  char  const  LimitsaC40D 
n (-1,  46,  42,  46,  40,  46,  42, 

static  signed  char  const  limitsbC10D 
n {-1,  48,  43,  48,  43,  48,  43, 

signed  char  const  *limits  = limitsb; 
int  period  = 4;nn  /*  Use  5 for 

char  *p  = buf; 
byte  hash[20]; 
int  i ; 
int  hlen; 


46>; 

48,  43,  48>; 

/*  Choose  B */ 
A,  4 for  B */ 


n hlen  = ringKeyFingerprint20(set,  key,  hash); 

n if(hlen<0) 

n n returnhlen; 


n hLen*=2; 


/*  Unlike  the  16  byte  version,  this  Loops  per  character  */ 
for  (i  = 0;  i < hlen  S&  ( s i z e_ t ) ( p-bu f ) !=  Len;  i++)  { 

n /*  Print  each  space  iff  it's  okay  to  */ 

n if(i/£period==0) 

n n if  (Len  > ( u n s i g n e d ) ( i n t ) L i m i t s C i / pe r i o d 3 ) 


[[CHK:f233e669900cac34b5ae4b33552ca3cc8ff263c8b58407760aa221d9584e7302f:: 
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□ 

□ 
n 
n 
n 
n 
□ 

D 

a 
□ 

□ 

> 

i nt 

r i ngT t y Pu t F i nge rp r i n 1 1 6 ( F I LE  *f , struct  RingSet  const  *set, 
n union  RingObject  *key,  unsigned  wid) 

{ 

n char  bufC54Il;n  n /*  Incestuous  knowledge  */ 

a if  (wid  > sizeofCbuf)) 

n n wid  = sizeofCbuf); 

n wid  = ( un s i g ned ) r i ngT t y Fo rma t F i ng e r p r i n 1 1 6 ( s e t , key,  buf,  ( s i z e_t ) w i d ) ; 

n return  fwriteCbuf,  1,  wid,  f); 

} 

i nt 

r i ngT t y Pu t F i ng e r p r i n t 2 0 ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *key,  unsigned  wid) 

{ 

n char  bufC50D;n  n /*  Incestuous  knowledge  */ 

n if  (wid  > sizeof(buf)) 

n n wid  = sizeofCbuf); 

n wid  = (unsigned)ringTtyForniatFingerprint20(set,  key,  buf,  (size_t)wid); 

n return  fwriteCbuf,  1,  wid,  f); 

> 

i nt 

r i ngTt y Pu t Key I D ( F I LE  *f,  struct  RingSet  const  *set,  union  RingObject  *key) 

{ 
a 
a 

n 
n 
n 
□ 

□ 
n 
> 

i n t 

r i ngTt y Pu t S i g I D ( F I LE  *f,  struct  RingSet  const  *set,  union  RingObject  *sig) 

{ 

n byte  bufC8D; 

n i n t i ; 

a r i ng S i g I D 8 ( s e t , sig,  NULL,  buf); 

CCCHK: c800638b0c8f f eel  a33eb7477d56a88f dd844cdc1  99a4bad2eedbce55540d44ed:: 


byte  buf  C8!] ; 
i n t i ; 

ringKeyI08(set,  key,  NULL,  buf); 
for  (i  = 4;  i < 8;  i++)  { 

n pu t c ( h ex c h a r C bu f C i D >>  4 & 153,  f); 

n pu t c ( hexcha r Cbu f C i 3 S 153,  f); 

> 

return  8; 


n 

n 

n 

*p++  = ■ ■; 

n 

/* 

Double  space 

in  the  middle  if 

appropri ate  */ 

n 

if 

(i  = 

= 20  S& 

len  >=  ( u n s i g n e d ) ( 1 i m i t s == 1 i m i t s a 

n 

1 e n 

!=  47) 

D 

o 

*p  + + = 

1 1 . 

f 

Q 

i f 

(i  S 

1 ) 

□ 

Q 

*p  + + = 

hexcharChashCi /23 

S 153; 

n 

e L 

se 

Q 

\ 

Q 

*p  + + = 

hexcharChashCi /23 

>>  4 & 153; 

j 

return 

p-buf ; 
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n 

□ 

Q 

n 

n 

> 


for  (i  = 4;  i < 8;  i++)  { 

n p u t c ( h e X c h a r C bu f C i H >>  4 & 153,  f); 

n putc(hexcharCbufCi3  & 153,  f); 

> 

return  8; 


/* 

* Write  out  the  given  string  with  aLL  funny  characters  \-escaped  in 

* the  manner  of  C strings,  up  to  "maxLen"  characters.  Returns  the 

* actual  number  of  characters  printed,  which  will  always  be  <=  maxlen. 

* If  f is  NULL,  prints  nothing.  (May  be  useful  for  justification 

* computations.)  The  string  is  surrounded  by  quotes  q1  and  q2 

* (if  not  '\0').  q2  is  also  \-escaped  if  it  appears  in  the  string. 

*/ 

unsigned 

r i ngT t y Pu t S t r i ng ( c ha r const  *str,  size_t  len,  unsigned  maxlen,  FILE  *f, 
char  q1,  char  q2) 


n 

i n t 

C 

= 0; 

n 

si z e_t 

t; 

n 

char  const 

*p; 

n 

unsigned  remaining  = maxlen; 

n 

static 

char 

const  escapesC3  = "\a\b\f\n\r\t\v"; 

Q 

static 

char 

const  lettersC3  = {'a','b',' 

f','n','r','t','v'} 

n 

/* 

Opening 

quote  */ 

n 

1 f 

(q1 

SS  remaining)  { 

n 

B 

i f 

(f  ) 

n 

B 

Q 

putc(q1,  f); 

□ 

B 

rema ini ng--; 

□ 

> 

n 

for 

(; 

;)  { 

n 

D 

/* 

Printing  can  only  expand  the 

string,  so  truncate 

n 

n 

i f 

(len  > remaining) 

□ 

□ 

n 

len  = remaining; 

n 

B 

/* 

Find  a directly  printable  substring  */ 

a 

B 

P = 

str;n  /*  Remember  start  of  substring  */ 

a 

B 

while  (len)  { 

n 

B 

n 

c = (unsigned  char)*str; 

a 

B 

n 

if  (!isprint(c)  ||  c == 

' \\ ' II  c ==  q2) 

B 

B 

n 

n break; 

B 

B 

n 

s t r + + ; 

B 

B 

B 

1 en  — ; 

B 

B 

y 

B 

B 

/* 

Print  from  p up  to  str  */ 

n 

B 

t = 

(size_t)(str  - p); 

B 

B 

i f 

(t)  { 

B 

B 

n 

if  ( f ) 

B 

B 

□ 

n fwrite(p,  1,  t. 

f ); 

B 

B 

n 

rema ining  -=  t; 

n n } 


CCCHK:2b41488884c3f61e18ca656ada883b5af115e7772b0a23b3ff2b87fcaa13d373133 
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n 

0 

/* 

Done  with  the  string?  */ 

n 

0 

i f 

C ! Len) 

n 

0 

n 

break; 

o 

0 

/* 

Note  that  remaining  >=  Len  > 0,  so  remaining  > 0.  */ 

D 

0 

/* 

Q 

0 

★ 

c is  a character  to  print  that  needs  escaping. 

S 

o 

★ 

Now  we're  going  to  print  it,  so  remove  it  from  the  string 

a 

0 

*/ 

n 

0 

L en--; 

a 

0 

s t 

r + +; 

0 

0 

/* 

Start  with  the  obligatory  backslash  */ 

0 

0 

i f 

(f  ) 

o 

0 

0 

putcCW,  f); 

0 

0 

i f 

( !--remaining) 

0 

0 

0 

break; 

0 

0 

/* 

Simple  case  1:  escaping  printable  characters  */ 

0 

o 

i f 

(isprint(c))  { 

0 

0 

0 

if  (f) 

0 

0 

0 

n putc((char)c,  f); 

0 

0 

0 

--remaining; 

0 

0 

0 

conti nue; 

0 

0 

> 

0 

0 

/* 

Simple  case  2:  standard  C escape  */ 

0 

0 

P 

= s t r c h r ( e s c a p e s , c); 

0 

0 

i f 

(p  &&  c)  { 

0 

0 

0 

if  (f) 

0 

0 

0 

n putcCLettersCp-escapesD,  f); 

0 

0 

0 

--remaining; 

0 

0 

0 

cent i nue; 

0 

0 

> 

0 

0 

/* 

General  octal  escapes  */ 

0 

0 

/* 

If  next  char  makes  it  ambiguous,  force  3-char  escape  */ 

0 

0 

i f 

(len  &&  i sd i g i t ( *s t r ) ) /*  Force  on  8 and  9,  too!  */ 

0 

0 

0 

c +=  256; 

0 

0 

i f 

(c  > 077)  { 

0 

0 

0 

if  (f) 

0 

0 

o 

a putc('0'  + (c>>6  8 3),  f); 

0 

0 

0 

if  (!--remaining) 

0 

0 

0 

n break; 

0 

0 

> 

O 

0 

i f 

(c  > 07)  { 

0 

0 

0 

if  (f) 

O 

0 

0 

n putc('0'  + (c>>3  & 7),  f); 

0 

0 

0 

if  (!  — remaining) 

o 

0 

0 

n break; 

o 

0 

> 

0 

0 

i f 

(f  ) 

0 

0 

0 

putcC '0'  + (c  & 7),  f ); 

0 

0 

— 

rema i n i ng; 

0 

> 

0 

/* 

Closing 

quote  (if  string  ended)  */ 

0 

1 f 

(q2  && 

rema i ni ng  ) { 

:i:CHK:3f7bba760cbb45a65583fd20ffdb3e663dd0d0dcl2eff72  30cd639d33fb4  213ba2:] 
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n 

n 

if  (f  ) 

a 

□ 

n putc(q2,  f); 

n 

n 

rema i n i ng--; 

u 

y 

n 

return 

maxLen  - remaining; 

/* 

* Print  info  about  a key,  in  the  format 

* 

* 1024  bits.  Key  ID  FBBB8AB1,  created  1984-12-25 

★ 

* The  ",  created"  part  is  omitted  if  the  creation  timestamp  is  0. 

*/ 

void 

r i ngT t y Pu t Key  I n f o C F I LE  *f,  struct  RingSet  const  *set,  union  RingObject  *obj) 
{ 
n 

Q 

□ 

D 

□ 
a 
□ 
n 
a 
a 

n 

#if  0 
□ 
n 
□ 

#endi f 

> 

void 

r i ngKey I Dp r i n t ( F I LE  *f,  char  const  *prompt,  byte  const  keyIDC85) 

{ 

n char  bufC18D; 


n 

char  * 

p = buf 

r 

n 

i n t i ; 

a 

for  ( i 

= 0;  i 

< 4;  i++)  { 

a 

□ 

*p  + + 

= hex c ha r C key  I D C i 3 

>> 

43; 

n 

□ 

*p  + + 

= h e X c h a r C key  I D C i 3 

& 

153; 

n 

I 

n 

*p  + + = 

1 1 . 
r 

n 

for  ( i 

= 4;  i 

A 

00 

> ■ 

+ 

+ 

n 

a 

*p  + + 

= h ex c h a r C key  I D C i 3 

>> 

43; 

n 

□ 

*p  + + 

= h ex c h a r C key  I D C i 3 

& 

153; 

n 

} 

a 

*P  = ’ 

\n'; 

char  buf :pGPDATESTRINGLEN+1 D; 
word32  tstamp; 

fprintfCf,  "%6u  bits.  Key  ID  ",  ( un s i g n e d ) r i ng Key B i t s C s e t , obj)); 

r i ngT t y Pu t Key  I D ( f , set,  obj); 

tstamp  = r i ng Key C r ea t i o n ( s e t , obj); 
if  (tstamp)  { 

n fputsC",  created  ",  f); 

n pgpDateStringCtstamp,  buf); 

a fputsCbuf,  f); 

} 

putc('\n',  f); 


if  (trust  & PGP_KEYTRUSTF_REVOKED) 

n fprintf(f,  "%sThis  key  has  been  revoked  by  its  ownerVn", 

n prefix); 
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n fputsCprompt,  f); 

n fwriteCbuf,  18,  f); 

> 


void 

r i ngKey Pr i n t ( F I LE  *f,  struct  RingSet  const  *set,  union  RingObject  *obj, 
n intLeveL) 

{ 

n struct  Ringiterator  *iter; 

n char  const  *name; 

n size_t  ten; 

a i n t i ; 


□ 

a 

D 

n 

n 

a 

D 

a 

□ 

a 

D 

a 

□ 

a 

□ 

D 

n 

a 

> 


ringTtyPutKeyInfo(f,  set,  obj); 
iter  = r i n g 1 1 e r C r e a t e ( s e t ) ; 
if  (iter)  { 

a i = r i n g I t e r S e e kTo ( i t e r , obj); 

a while  ( r i ng I t e r Ne x t Ob j e c t ( i t e r , i+1)  > 0)  { 

a n obj  = ringIterCurrentObjectCiter,  i+1); 

a a pg p A s s e r t ( o b j ) ; 

a n if  ( r i n g Ob j e c t Ty pe ( ob j ) !=  R I NGT Y P E_N AH E ) 

a a n continue; 

a a name  = ringNameNameCset,  obj,  SLen); 

a a fprintf(f,  "%*s",  LeveL+2,  ""); 

a a ( VO i d ) r i ngT t y Pu t S t r i ng ( name,  Len,  -1u,  f, 

a a a a 

a a putc('\n',f); 

a a /*a  break;*/ 

a } 

a r i ng 1 1 e r De s t r oy ( i t e r ) ; 

> 


pgpRingUl.c 


void 

ringObjPrint(FILE  *f,  struct  RingSet  const  *set,  union  RingObject  *obj. 


a 

i 

n 

i nt 

int  Level) 

i = ringObjectType(obj); 

a 

i nt 

err; 

n 

char 

const  *name; 

n 

size 

_ t L e n ; 

n 

char 

bufCPGPDATESTRINGLEN+ID; 

n 

switch  (i)  { 

n 

case 

RINGTYPE_KEY: 

n 

n 

err  = r i ng Key E r r o r ( s e t , obj); 

n 

n 

fprintf(f,  "%*sKey:  error=%d  ",  Level 

, " " , e r r ) ; 

n 

n 

r i ng T t y Pu t Key  I n f 0 ( f , set,  obj); 

n 

n 

fprintf(f,  "%*s  fingerprint16=". 

level,  ""); 

n 

D 

r i ngT t y Pu t F i nge r p r i nt 1 6 ( f , set,  obj. 

100); 

Q 

□ 

putc('\n',  f); 

D 

n 

fprintf(f,  "%*s  fingerprint20=". 

Level,  " " ) ; 

n 

□ 

r i n g T t y Pu t F i ng e r p r i n t 20 ( f , set,  obj. 

100); 

o 

n 

putc('\n',  f); 

Q 

□ 

break; 

n 

case 

RINGTYPE  SEC: 

a a fprintfCf,  "%*sSecret:  (not  much  to  say)\n".  Level,  ""); 

CCCHK:61221cff6eA7710c45631bcf204512011141ad633433f803af2ff409b2f7ef5e7:: 
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n 

Q 

□ 

n 

n 

n 

n 

n 

n 

n 

tt 

n 

Et 

n 

Q 


n break; 

case  RINGTYPE_NAME : 

n name  = r i ng Na me N a me ( s e t , obj,  &Len); 

n fprintfCf,  "%*sName:  ",  level, 

a (void)ringTtyPutString(name,  len,  -1u,  f,  *"*); 

n putc(*\n*,  f); 

n brea  k; 

case  RINGTYPE_SIG : 

n err  = r i ng S i g E r r o r ( s e t , obj); 

n fprintfCf,  "%*sSig:  error=%d  ",  level,  err); 

n ringTtyPutSigID(f,  set,  obj); 

n putc(* 

n pg p Da t e S t r i ng ( r 1 n g S 1 gT 1 me s t a mp ( s e t , obj),  buf); 

n fputsCbuf,  f); 

n fprintfCf,  ",  type=%x",  ringSigTypeCset,  obj)); 


D 

Q 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

> 


n 

obj  = 

r i ng S i gHa ke r ( s e t , obj,  set); 

Q 

if  ( ! ob j ) { 

n 

□ 

putcC'Xn',  f); 

n 

> else 

{ 

□ 

n 

fputsC"  made  by:\n",  f); 

□ 

n 

ringKeyPrintCf,  set,  obj.  Level); 

n 

o 

ringObjectReleaseCobj); 

n 

> 

n 

break; 

default; 

n 

fprintfCf,  "%*sUUU  Unknown  object:  type  %d\n". 

n 

break; 

> 


T ) ; 


static  void 

r i ngOb j Pr i n t A I L ( F I LE  *f,  struct  RingSet  const  *set,  union  RingObject  *obj. 


s 

r 

Q 

int  Level) 

\ 

n 

struct 

Ringiterator  *iter; 

n 

i n t i , 

j ; 

n 

iter  = 

ringIterCreateCset); 

s 

if  (iter)  { 

n 

n 

i = r i ng I t e r S e e kTo ( i t e r , obj); 

n 

n 

for  (j  = 1;  j < i;  j++)  ( 

n 

n 

n obj  = ri ngIterCurrentOb j ect ( i ter,  j) 

n 

n 

n r i ngOb j P r i n t ( f , set,  obj,  LeveL+2*(j 

n 

a 

} 

n 

n 

ringIterDestroyCiter); 

n 

> else 

{ 

o 

Q 

r i ng Ob j P r i n t ( f , set,  obj.  Level); 

n 

> 

> 


#if  0 

* - PGPERR_KEYIO_READING 

* - PGPERR_KEYIO_EOF 
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* - PGPERR_KEYIO_BADPKT 

* - PGPERR_NOHEH 
*/ 

#define  PGPERR_TROUBLE_BADTRUSTn  -320 
PGPERR  ( PGPERR_TROUBLE_BADTRUST,n 
^define  PGPERR_TROUBLE_UNKPKTBYTE  -321 
PGPERR  (PGPERR_TROUBLE_UNKPKTBYTE,n 
#define  PGPERR_TROUBLE_UNXNAMEn  -322 
PGPERR  (PGPERR_TROUBLE_UNXNAHE,nn 
#define  PG P E RR_T ROU B LE_UNX S I Gn  -323 
PGPERR  ( PGPERR_TROUBLE_UNXSIG,n  n 
//define  PGPERR_TROUBLE_UNXTRUSTn-324 
PGPERR  (PGPERR_TROUBLE_UNXTRUST,n 
//define  PG  PE  R R_T  RO  UB  L E_KE  Y2B I Gn  -325 
PGPERR  (PGPERR_TROUBLE_KEY2BIG,nn 
//define  PGPERR_TR0UBLE_NAHE2BIGn-326 
PGPERR  (PGPERR_TROUBLE_NAME2BIG,n 
//define  PG  PE  RR_T  ROUB  LE_  S I G2  B I Gn  -327 
PGPERR  ( PGPERR_TROUBLE_SIG2BIG,nn 
//define  PGPERR_TR0UBLE_DUPKEYIDn-328 
PGPERR  (PGPERR_TROUBLE_DUPKEYID,  n 
//define  PGPERR_TROUBLE_DUPKE  Yn  -329 
PGPERR  (PGPERR_TROUBLE_DUPKEY,n  n 
^define  PGPERR_TROUBLE_DUPNAMEn  -330 
PGPERR  (PGPERR_TROUBLE_DUPNAHE,nn 
#define  PG P E RR_T ROU B LE_ D U PS  I Gn  -331 
PGPERR  ( PGPERR_TROUBLE_DUPSIG,n  n 
//define  PGPERR_TROUBLE_BAREKE Yn  -332 
PGPERR  ( PGPERR_TROUBLE_BAREKEY,nn 
//define  PGPERR_TROUBLE_VERSION_BUG_PREVn- 
PGPERR  (PGPERR_TR0UBLE_VERS10N_BUG_PREV, 
//define  PGPERR_TROUBLE_VERSION_BUG_CURn  - 
PGPERR  (PGPERR_TR0UBLE_VERS10N_BUG_CUR,n" 
//endi  f 
/* 


Trust  packet  malformed") 

Unknown  packet  byte  in  keyring") 
Unexpected  name  (before  key)") 
Unexpected  sig  (before  key)") 
Unexpected  trust  packet") 

Key  too  damn  big") 

Name  too  damn  big") 

Sig  too  damn  big") 

Duplicate  KeylD,  different  keys") 
Duplicate  key  (within  keyring)") 
Duplicate  name  (in  same  keyring)") 
Duplicate  signature") 

Key  found  with  no  names") 

333 

"Bug  introduced  by  legal_kludge") 

334 

Bug  introduced  by  legal_kludge") 


* Print  a single  trouble  message 

* A message  with  extra  lines  of  information  (such  as  a key)  is  followed 

* by  a blank  line.  This  is  a feature,  for  clarity,  not  an  accident  of 

* the  way  it  is  implemented. 

*/ 


//if  0 

struct  RingTrouble  const  *next; 

union  RingObject  *obj;n  /*  The  pertinent  object,  if  applicable  */ 
word32  num;n  /*  An  integer  parameter,  if  applicable  */ 

word32  fpos;n  /*  File  position  related  to  the  error  */ 

int  type;n  /*  PGPERR_  code  from  pgpErr.h  */ 

//endi  f 
static  void 

r i ng Top D o P r i n t T r ou b I e ( F I LE  *f,  struct  RingFile  *file, 
n n struct  RingTrouble  const  *t) 

{ 

n fprintf(f,  "%7lu:  ",  (unsigned  long)t->fpos); 


n s wi t c h ( t ->t y pe  ) { 

a a /*  Non-fatal  errors  */ 

n case  PGPERR_TROUBLE_BADTRUST : /*  Trust  packet  malformed  */ 

n n fprintf(f,  "Trust  packet  too  long:  %lu  bytes  long", 

nan  (unsigned  I o ng ) t ->n urn ) ; 
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n 

n 

n 

u 

n 

n 

n 

n 

□ 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


n break; 

case  PGPERR_TROUBLE_UNKPKTBYTE : a/*  Unknown  packet  byte  */ 


fprintfCf, 

break; 


'Unknown  packet  byte:  %02X",  (unsigned)t->num); 


case  PGPERR_TROUBLE_UNXNAME : /*  Unexpected  Name  (before  key)  */ 


fprintfCf, 

break; 


'Unexpected  name,  not  attached  to  any  key\n"); 


case  PG P E R R_T ROU B LE _ U N X S I G : /*  Unexpected  sig  (before  key)  */ 

a fprintfCf,  "Unexpected  signature,  not  attached  to  anything"), 

a break; 

case  PGPERR_TROUBLE_UNXTRUST : /*  Unexpected  trust  */ 


fprintfCf, 

a "Unexpected  trust  packet,  not  attached  to  anything"), 

break; 


case  PGPERR_TR0UBLE_KEY2BIG : /*  Key  too  damn  big  */ 


fprintfCf,  "Key  grossly  oversized:  %lu  bytes  Long' 

a (unsigned  L on g ) t ->n urn ) ; 

break; 


B 

a 

B 

case  PGPERR_TR0UBLE_NAME2BIG : /*  Uid  too  damn  big  */ 

a fprintfCf,  "User  ID  too  long:  %lu  bytes  long' 

a B (unsigned  L ong ) t ->n urn ) ; 

a break; 

case  PGPERR_TR0UBLE_SIG2BIG : /*  Sig  too  damn  big  */ 


fprintfCf,  "Signature  grossly  oversized: 

a (unsigned  I ong ) t ->n urn ) ; 

break; 


% I u by t es  Long' 


case  PGPERR_TROUBLE_DUPKEYID:  /*  Duplicate  KeylD,  different  keys  */ 


"Duplicate  keylD  found, 
but  they  are  different. 


fprintfCf, 

Two  keys  have  the  same  keyID,\n\ 

This  is  highly  suspicious.  The  first  key  is:"); 


a 

B 

B 

B 

B 

a 

B 

B 

B 

B 

B 

B 

B 

B 

B 

#if  0 

B 

B 

B 

B 

B 

a 

B 

B 

B 

B 

B 

B 


a r i ng Key P r i n t ( f , r i ng F i I e S e t ( f i I e ) , t->obj,  2); 

a break; 

case  PGPERR_TROUBLE_DUPKEY:  /*  Duplicate  key  (within  keyring)  */ 
a fprintfCf,  "A  key  was  found  twice  in  one  keyring  file.  " 

a a "It  is  a duplicate  of:\n"); 

a r i ng Key P r i n t C f , r i n g F i L e S e t C f i I e ) , t->obj,  2); 

a break; 

case  PGPERR_TROUBLE_DUPNAHE : /*  Duplicate  name  (within  keyring)  */ 

a fprintfCf,  "A  name  was  found  twice  in  one  keyring  file.  " 

a a "It  is  a duplicateof:\n"); 

a r i ng Ob j P r i n t A I I C f , r i ng F i I e S e t C f i I e ) , t->obj,  2); 

a break; 

case  PG PE R R_TR0U B LE_ D U P S I G : /*  Duplicate  sig  (within  keyring)  */ 

fprintfCf,  "A  signature  was  found  twice  in  one  keyring  file, 
a "It  is  a duplicate  of:\n"); 


if  ( t ->  i n f o . s i g ->  f L a g s & SIGF_KEY)  -C 


B 

B 

B 

B 

B 

a 

B 

B 

> else 

B 

B 


uidPrintCring,  t->info.sig-->up.key, 

(struct  RingUid  *)0,  ( r i n gma s k ) “ ( r i n gma s k ) 0 ^ 
userOutFile,  -1u,  " ",  0); 

if  ( t “> i n f o . s i g->u p - key->u i d s ) 
a uidPrintCring,  (struct  RingKey  *)0, 

a a t -> i n f o . s i g ->up . key->u i d s , 

B ( r i ng ma s k ) ~ ( r i n gma s k ) 0 , userOutFile^ 

a -1u,  "",0); 

r 

UidPrintCring,  t->info.sig->up.uid->up, 

t->info.sig->up.uid,  (ringmask)~(ringmask)0^ 
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D 

□ 

□ 

#endi  f 
□ 
n 
n 
n 
a 
n 
n 
□ 


userOutFiLe,  -1u, 


0); 


s i g P r i n t ( r i ng , t->info.sig,  userOutFiLe,  -1u, 


n break; 

case  PG P E R R_T ROUBL E_B A R E KE Y : /*  Duplicate  key  (within  keyring) 

n fprintfCf,  "A  key  was  found  twice  in  one  keyring  file, 

n n "ItisadupLicateof:\n"); 

n r i ngKey P r i n t ( f , r i n g F i L e S e t ( f i I e ) , t->obj,  2); 

n break; 

case  PGPERR_TROUBLE_VERSION_BUG_CUR:  /*  LegaL_kludge  bug  */ 
n f pu  t s ( 

"This  private  key's  version  number  appears  to  be  incorrect. \n\ 

PGP  version  2.6  had  a bug  wherein  it  would  improperly  change  the\n\ 
version  number  of  a private  key  generated  by  older  versions  of  PGP\n\ 
when  it  was  edited.  The  private  key  in  this  key  file  has  a version\n\ 
byte  that  is  different  from  a copy  in  another  key  file,  and  appears\n\ 
to  be  improper.  PGP  will  fix  this  by  changing  the  version  byte  in\n\ 


*/ 


the 

private 

key  to  the  previous 

value. 

The  key  with  the  problem  is:\n". 

n 

n 

f ); 

Q 

n 

/*  Obj  is  "sec" 

*/ 

n 

s 

ringKeyPrintCf, 

r i ng F i L e S e t ( f i L e ) , t->obj,  2); 

n 

n 

break; 

n 

case 

PGPERR_TROUBLE_VERSION_BUG_ 

PREV:  /*  legaL_kLudge 

bug  */ 

a 

n 

f put  s ( 

n 

"A  previously  seen 

private 

key's  version  number 

appears  to  be\n\ 

incorrect.  PGP  version 

2.6  had 

a bug  wherein  it  would 

improperLy\n\ 

change  the  version  byte  of  a private  key  generated  by  older  versions\n\ 
of  PGP  when  it  was  edited.  The  public  key  in  this  key  file  has\n\ 
a version  byte  that  is  different  from  a private  key  e L s e w h e r e , \ n \ 
which  appears  to  be  improper.  PGP  will  fix  this  by  changing  the\n\ 
version  byte  in  the  private  key  to  the  previous  value.  The  key\n\ 
with  the  problem  is:\n", 
n f ) ; 

n r i ngKey Pr i nt ( f , r i n g F i L e S e t ( f i L e ) , t->obj,  2); 

n break; 


n 

n 

n 

n 

n 

D 

n 

□ 

n 

□ 

n 

□ 

D 

D 

n 

n 

n 

□ 

n 

n 

n 


n /*  Fatal  errors  */ 

case  PGPERR_KEYIO_READING : /*  Read  error  */ 

n fprintf(f,  "I/O  error  reading  file:  %s", 

n s t r e r r o r C C i n t ) t ->n  urn ) ) ; 

n break; 

case  PGPERR_KEYIO_FTELL:  /*  Read  error  */ 

n fprintf(f,  "I/O  error  during  call  to  ftelLC):  %s", 

n s t r e r r o r ( ( i n t ) t ->n  urn ) ) ; 

n break; 

case  PGPERR_KEYIO_EOF : n /*  EOF  in  unexpected  place  */ 

n fputs("End  of  file  encountered  in  the  middle  of  a packet.",  f); 

n break; 

case  PGPERR_KEYIO_BADPKT : /*  Non-packet  encountered  */ 

n fputsC" Invalid  data  encountered.  " 

n "Read  halted;  file  may  be  corrupt.",  f); 

n break; 

case  PGPERR_NOHEH : 

n fputsC"***  Out  of  memory!  ***",  f); 

n break; 

default  : 

n fprintfCf,  "Unknown  error  %d  encountered",  t->type); 
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n 

n 

i f 

(t->obj)  { 

n 

a 

□ 

fputsC"  in  connection  with:\n",  f); 

c 

n 

n 

ringObjPrintAllCf,  ringFi  leSetCfi  le). 

□ 

Q 

Q 

break; 

Et 

u 

> 

n 

B 

break; 

n 

n 

> 

pu  t c ( * \ n 

} 


t ->o  b j , 


2); 


/* 

* List  any  trouble  spots  encountered  opening  a file. 

* Ask  the  user  if  they  wish  to  continue.  If  not, 

* return  an  error  code  <0. 

* 

* Prints  nothing  if  there  is  no  trouble. 

*/ 
i n t 

r i ngTo p L i s t T r o u b I e ( F I LE  *f,  struct  RingFile  *file,  int  writeflag) 

{ 

n struct  RingTrouble  const  *trouble; 

n unsignedu=0; 

n (void)  writeflag; 

B trouble  = r i ng F i I eTroub  I e ( f i I e ) ; 

B if  (Itrouble) 

B B return0; 

n / * 

B * Special  case:  if  first  packet  in  the  file  isn't  a packet, 

B * it's  unconditionally  an  error, 

n */ 

B if  ( t r oub  I e-> f po s ==  0 t roub I e->type  ==  PG P E R R_KE Y 1 0_B A D PKT ) ( 

B B fputs("File  is  not  a PGP  key  file.  Aborting. \n",  f); 

B B r i ng F i I e Pu r g eT r oub  I e ( f i I e ) ; 

B n return  PG P E RR_KE Y I 0_B A D PKT ; 

B > 

B f puts( 

"The  following  problems  were  encountered  while  reading  the  keyring:\n 
B "Offset  DescriptionXn",  f); 


O 

do 

{ 

n 

n 

U + + } 

n 

Q 

ringTopDoPrintTrouble(f,  file,  trouble); 

n 

> 

while 

((trouble  = trouble->next)  !=  NULL); 

n 

i f 

(u  > 

20) 

D 

□ 

fputsC  Offset  DescriptionXn",  f); 

#if  1 

□ 

u 

= 1; 

#e  L s e 

n 

i f 

(writeflag)  { 

n 

n 

u = userAsk("XnX 

If  you  continue,  PGP  will  ignore  the  errors  and  remove  the\n\ 
offending  data  from  the  key  file.  Do  you  want  to  continue  with\n\ 
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\"%s\"",  'y',  ring->ringCbitIl.Logname); 

B > e L s e { 

B B u=userAsk("\n\ 

If  you  continue,  PGP  will  ignore  the  errors.  Do  you  want  to  continue  with\n\ 
\"%s\"",  'y',  r i ng -> r i ng C b i t ] . L og na me ) ; 

B > 

#endi f 

#if  0 

n / * 

B * KLUDGE  Version  bug  kludge:  if  told  to  correct,  flags  the 

B * offending  keys  appropriately, 

n * / 

B i f ( u ) { 


n 

n 

trouble 

= 

ringFi leTrouble(fi le); 

a 

Q 

do  -C 

u 

Q 

0 

i f 

(trouble->type  ==  T RO UB LE_ V E R S I 0N_BUG_ 

SEC 

1 1 

n 

□ 

0 

trouble->type  ==  T RO UB LE_ V E R S I 0N_BUG_ 

PUB) 

{ 

n 

n 

0 

0 

trouble ->obj->g. flags  |=  SECF_VERSI0N 

_BUG 

n 

□ 

0 

0 

ringPoolHarkDi rty(ring. 

n 

a 

0 

0 

t roub  1 e->ob  j ->g 

.mask); 

n 

a 

0 

> 

D 

0 

> while 

( ( t r oub l e = t r ou b 1 e->n e X t ) !=  NULL); 

B > 

# e nd i f 


B r i ng F i I e Pu r g eT r oub I e ( f i I e ) ; 

B returnu?0:-1; 

> 


/*  Functions  for  displaying  keys  */ 


const  int  name_indent  = 30; 
const  int  sig_indent  = 32; 


/*  Given  a key  object,  return  the  first  Name  object  attached  to  it.  */ 


static  union  RingObject  * 
getFirstName  (struct  RingSet  const 
{ 

B i ntB  B n n 

B struct  R i n g I t e r a t o r B n 

B union  RingObjectB  n 


*set,  union  RingObject  *key) 
status; 

*iter  = ringIterCreate  (set); 
♦object; 


B pgpAssert  ( r i ngO b j e c t Ty pe  (key)  ==  R I NGT YP E_KE Y ) ; 


D 

Q 

Q 

n 

a 

D 

n 

n 


r i ng I t e r S e e kTo  (iter,  key); 

while  ((status  = r i ng I t e r N e x t Ob j e c t (iter,  2))  > 0)  { 

B object  = r i ng I t e r C u r r en t Ob j e c t (iter,  2); 

B pgpAssert  (object  !=  NULL); 

B if  ( r i ngOb j e c t Ty pe  (object)  ==  R I NGT YP E_ N AM E ) f 

B B r i ng I t e r D e s t r oy  (iter); 

B B returnobject; 

B } 
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a } 

n r i ng I t e r D e s t roy  (iter); 

a return  NULL; 

> 


/*  Passed  the  keyi d 
determine  if  the 


of  a signature,  its  Level, 
signature  has  been  retired 


and 

*/ 


its  parent  object. 


static  int 

sigRetired  (struct  RingSet  const  *set,  union  RingObject  *sig) 
{ 


struct  Ringiterator 
union  RingObjectn 
i ntn  n n 

i ntn  a a 


*iter  = r i n g 1 1 e r C r e a t e (set); 
*object; 
status; 

Level; 


Level  = ringIterSeekTo  (iter,  sig); 
if  (Level  < 0) 
return  Level; 

r i ng  1 1 e r R e w i nd ( i t e r , Level); 


while  ((status  = r i n g I t e r N e x t Ob j e c t (iter.  Level))  > 0)  { 
object  = ringIterCurrentObject  (iter,  level); 
pgpAssert  (object  !=  NULL); 

if  ( r i ngOb j e c t Type  (object)  ==  R I N GT Y P E_ S I G ) { 
if  ( r i ng S i g E r ro r (set,  object)  ==  0 SS 
n ringSigType  (set,  object)  ==  PG P_S I GT Y P E_KE Y_U I D_R E VOKE  S& 

n r i ng S i g C he c ked  (set,  object)  S& 

n ringSigHaker  (set,  object,  set)  ==  ringSigHaker  (set,  sig,  set))  { 

a r i n g I t e r De s t r oy  (iter); 

a returni; 

> 

} 

} 

r i ng I t e r D e s t r oy  (iter); 
return  0; 

} 


/*  List  of  algorithms  indexed  by  the  pkalg  byte.  Each  entry  contains 
the  name  of  the  algorithm  and  what  it  can  be  used  for.  */ 

static  const  char  *p ka L g _ L i s t C D = 

(NULL,  "RSA",  "RSA",  "RSA",  NULL,  NULL,  NULL,  NULL,  NULL,  NULL, 
n NULL,  NULL,  NULL,  NULL,  NULL,  NULL,  " D i f f i e - H e I I ma n " , "DSS">; 

static  const  char  * 

getKeyAlg  (union  RingObject  *key,  struct  RingSet  const  *set) 

{ 

n byte  pkalg; 


a ringKeyIDS  (set,  key,  Spkalg,  NULL); 

n return  p ka I g_ I i s t C p ka  I g D ; 

} 

static  const  char  * key u s e_ I i s t C D = 

{NULL,  "Sign  only",  "Encrypt  only",  "Sign  and  Encrypt"}; 
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static  const  char  * 

getKeyUse  (union  RingObject  *key,  struct  RingSet  const  *set) 

{ 

n if  ( r i ngKey S ub key ( se t , key)) 

n n return  key u s e_ L i s t C PG P_ PKU S E_ S I G N 3 ; 

n return  k ey u s e_ L i s t C r i ng Key U s e (set,  key)  & PG P_PKU S E_S I G N_E N C R Y PT 3 ; 

} 


static  char  s t a t eme n t C 1 1 3 ; 
static  char  * 

g e t T r u s t S t a t erne n t (word16  trust) 

{ 

n int  d = trust  - PG P_T R U S T_ D E C A D E - PG P_T RU ST_0 CT A V E ; 

n inti; 

n unsigned  Long  L; 

n intwid=9; 

n char  numberC103; 


n if  (trust  ==  PGP  TRUST  INFINITE) 


n 

n 

strcpy  (statement,  " maximum  " 

>; 

n 

else 

if  (trust  ==  0) 

Q 

n 

strcpy  (statement,  " none  " 

); 

n 

else 

{ 

Q 

n 

i f 

(d  < 0) 

n 

n 

a 

d = 0; 

n 

o 

/* 

□ 

n 

* 

Note:  The  following  was  taken  from  Colin's 

n 

n 

★ 

prettyprint  routine. 

D 

n 

*/ 

Q 

n 

d - 

= d % PGP_TRUST_DECADE; 

n 

n 

i = 

d / PGP_TRUST_DECADE; 

n 

Q 

L = 

r i n gT r u s t To  I n t ( t r u s t - d); 

n 

n 

i f 

(i  ) 

o 

n 

D 

wid  -=  s p r i n t f ( numbe r , 

"%Lu%0*u  ",  L,  i 

n 

n 

else 

n 

n 

n 

wid  -=  s p r i n t f ( numb e r , 

"%Lu  ",  L); 

n 

n 

sprintf  (statement,  "%*s%s'',  wi 

d,  number); 

n } 

n return  statement; 


> 


0); 


/*  This  function  displays  a single  signature.  */ 
int 

ringTtyShowSig(union  RingObject  *sig,  struct  RingSet  const  *set, 
n FILE  *fp,  int  check) 

{ 


Q 

union  RingObjectn 

*sigkey,  *signame 

n 

word32n  n 

n 

creation; 

Q 

cha  rn  n 

n 

datestringC113; 

Q 

char  const  n 

n 

*namestring; 

a 

s i z e_t n n 

n 

ten; 

n 

byten  n 

Q 

trust; 

n 

sigkey  = ringSi 

gMa  ke  r 

(set,  sig,  set); 
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n /*  Output  "sig"  followed  by  key  bits  and  key  id.  */ 


n 

B 

B 

□ 

trust  = 

ringSigTrust  (set,  sig); 

Q 

if  (ringSigType  (set,  sig)  ==  PG P_ S I G T Y P E _K E Y_ U I D_R E VOKE ) 

n 

B 

fputs  ("ret",  fp); 

n 

else 

n 

B 

fputs  ("sig",  fp); 

Q 

if  ( r i n g S i g E r r 0 r (set,  sig)  < 0) 

Q 

B 

putc  ('%',  fp); 

D 

else  if 

( ! s i g key ) 

n 

B 

putc  ('?',  fp); 

tt 

else  if 

(check  SS  ( r i ng S i g C h e c ked ( se t , sig))) 

n 

B 

putc  ('!',  fp); 

Q 

else  if 

(check  &&  ( ri ngSi gTri ed(set,  sig))) 

n 

B 

putc  ('*',  fp); 

B 

else 

B 

B 

putc  ('  ',  fp); 

B 

fputs  ( ' 

' " , f P ) ; 

B 

r i ngTt y Pu t S i g I D (fp,  set,  sig); 

B 

putc  ( ' 

fp); 

n /*  Signature  date  */ 


n creation  = r i n g S i gT i me s t a mp  (set,  sig); 

n if(creation>0){ 

n pg p Da t e S t r i ng  (creation,  datestring); 

n n fputs  (datestring,  fp); 

n } 

n else 

a fputs  (" ",  fp); 


a 

o 

□ 

n 

n 

a 

n 

B 

B 

B 

B 

B 


i f 

B 

B 

B 

B 

B 

B 

B 

B 

} 


(sigkey)  ( 

signame  = getFirstName  (set,  sigkey); 
if  (signame)  { 
n fputs("  ",fp); 

B namestring  = ringNameName  (set,  signame,  &len); 

B r i n g T t y Pu t S t r i ng  (namestring,  len, 

B B B (unsigned)len,fp,0,0); 

} 

putc  ('\n',  fp); 


else 

B fputs  ("  (Unknown  signator,  can't  be  checked)\n",  fp); 


B r i ngOb j e c t Re  I ea s e (sigkey); 

B return0; 

} 


/*  This  function  displays  a set  of  signatures  attached  to  a name.  */ 
i n t 

r i n g T t y S h ow S i g s (void  *arg,  union  RingObject  *name, 

B B struct  RingSet  const  *set,  int  mode) 

{ 
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n 

n 

n 

□ 

a 

n 


struct  PgpTtyUI  n 
struct  R i ng I t e r a t o r n 
i ntn  n 

union  RingObjectn 
FILEn  n n 

into  n n 


*ui  = (struct  PgpTtyUI  *)  arg; 
*iter  = ringIterCreate  (set); 

status; 

* s i g ; 

*fp  = ui->fp; 
check; 


□ 

o 

n 


Q 


pgpAsse  rt 
pgpAsse  rt 
pgpAssert 
pgpAssert 


(name  !=  NULL); 

(arg  !=  NULL); 

(set  !=  NULL); 

( r i ng Ob j e c t Ty pe  (name) 


RINGTYPE_NAHE  ) ; 


n check  = (mode  ==  3 | | mode  ==  4); 


n /*  Display  sigs  attached  to  the  Name  */ 


n r i ng I t e r S e e kTo  (iter,  name); 


a 

while 

((status  = r i n g I t e r N e X t Ob j e c t 

(iter. 

3))  > 0)  { 

n 

Q 

sig  = r i ng I t e r Cu r r en t Ob j e c t 

(iter. 

3); 

□ 

n 

pgpAssert  (sig  !=  NULL); 

n 

n 

r i ngTt y shows i g ( s i g , set,  fp. 

check) 

n 

> 

n r i ng I t e r D e s t r oy  (iter); 

n returnO; 

> 


i nt 

r i ngT t y C he c kS i g s (void  *arg,  union  RingObject  *name, 
a n struct  RingSet  const  *set,  int  mode) 

{ 


D 

n 

Q 

n 

a 

□ 

n 

n 

□ 

n 

□ 


struct  PgpTtyUI  n 
struct  R i ng I t e ra t o rn 
i ntn  a a 

union  Ri ngOb j ectn 


*ui  = (struct  PgpTtyUI  * 
*iter  = ringIterCreate  ( 
status; 

*sig,  *sigkey,  *signame; 


s i ze_tn  n 
FILEn  n 
char  const 
char  constn 
byten  n 
unsigned 
PgpT rustMode  L 


L e n ; 

n *fp=ui->fp; 

♦output; 

n *namestring; 

n sigtrust; 

conf i dence ; 
pgptrustmodel; 


) a r g ; 
set  ) ; 


D 

□ 

D 

n 

n 


pgpAssert 

pgpAssert 

pgpAssert 

pgpAssert 

pgpAssert 


(name  !=  NULL); 

(arg  !=  NULL); 

(set  !=  NULL); 

(mode  ==  4 I I mode  ==  5); 

( r i ngOb j e c t Ty p e (name)  ==  R I NGT Y PE_N AH E ) ; 


n pgptrustmodel  = pgpTrustHodel  (ringSetPool  (set)); 

n /*  Display  sigs  attached  to  the  Name  */ 


n r i ng I t e r S e e kTo  (iter,  name); 
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n 

Q 

Q 

a 

n 

n 

n 

n 

n 

n 

s 

n 

n 

u 

a 

□ 

n 

□ 

n 

□ 

n 

n 

□ 

□ 

a 

B 

B 

B 

B 

B 

B 

B 

B 


while  ((status  = r i n g I t e r N e x t 0 b j e c t (iter,  3))  > 0)  { 


n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

n 


sig  = r i ng I t e r C u r r e n t 0 b j e c t (iter,  3); 
pgpAssert  (sig  !=  NULL); 

if  (ringSigType  (set,  sig)  ==  PGP_SIGTYPE_KEY_UID, REVOKE) 
n cont i nue ; 

sigkey  = ringSigMaker  (set,  sig,  set); 
fprintf  (fp,  "%*s",  11,  ""); 
if  ( pg p t r u s t mod e L ==  PGPTRUST0)  i 
if  (!sigkey  ||  sigkey  == 

n n r i ngIterCur rentOb j ect  (iter,  1)) 

n si gt rust  = PGP_SIGTRUST_NOKEY; 

else  if  (sigRetired  (set,  sig)) 
n sigtrust  = PG P_S I GT RU ST_ R ET  I R E 0 ; 

else  if  ( r i ngKeyRevoked  (set,  sigkey)) 
n sigtrust  = PG P_SIGTRUST_ REVOKED; 

else 

n sigtrust  = ringSigTrust  (set,  sig); 

output  = ke yT r u s t Ta b L e C s i g t r u s t D ; 
fprintf  (fp,  "%-10s%*s",  output,  12,  ""); 


e L se  {n  n 

if  (Isigkey 
n 
n 

else  if 
n 

else  if 
n 

else  -C 
n 

D 

> 

fprintf 


/*  new  trust  model  */ 


I I 


(iter,  1)) 


n D 

sigkey  == 
n r i ng  1 1 e r C u r r e n 1 0 b j e c t 

output  = " "; 

(sigRetired  (set,  sig)) 
n output  = "retired  "; 

( r i n g Key Re VO ked  (set,  sigkey)) 
n output  = "revoked  "; 


confidence  = r i ng S i g C on f i d e n c e (set,  sig); 
output  = g e t T r u s t S t a t erne n t (confidence); 

(fp,  "%10s%*s",  output,  12,  ""); 


Q 

B 

B 

B 

B 

B 

B 

B 

B 

n 

Q 

n 

B 

B 

B 

B 


B 

B 

B 

B 

□ 

B 

B 

B 

B 

a 

n 

n 

n 

□ 

□ 

> 


i f 

n 

n 

D 

n 

B 

B 


(sigkey)  { 

signame  = getFirstName  (set,  sigkey); 
if  (signame)  { 

n namestring  = ringNameName  (set,  signame, 

n r i ngT t y Pu t S t r i ng  (namestring,  len, 

n n n (unsigned)  len,  fp,  0, 

> 


n putc  (*\n*,  fp); 

> 


else  i 

n fputs("  (KeylD:",  fp); 
n r i n gT t y Pu t S i g I D (fp,  set,  sig); 
n fputs  (")\n”,  fp); 


> 


&len); 

0); 


r i ng Ob j e c t Re  I ea s e (sigkey); 


n r i ng I t e r De s t r oy  (iter); 

n return0; 

> 


/*  This  function  displays  a key  in  -kv,  -kvv,  -kvc,  or  the  first  section 
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of  a -kc  format.  */ 


1 nt 


r i ng T t y S howKey  (void  *arg,  union  RingObject  *key,  struct  RingSet  const  *set. 


i nt  mode ) 


n 

□ 

D 

n 

n 

n 

□ 

n 

n 

□ 


struct  PgpTtyUI  n 
struct  R i n g I t e r a t o r n 
union  RingObjectn 
union  RingObjectn 


tn 


s n ze^ 
into  n 
filed  j 

word32n  n 
charn  n 

char  const 


L e n ; 


*ui  = (struct  PgpTtyUI 
*iter  = r i n g I t e r C r ea t e 
*name; 

*subkey  = NULL; 


* ) a r g ; 
( s e t ) ; 


n status; 

*fp  = ui->fp; 
creation,  expiration; 
n datestringCII]; 

n *namestring; 


n pgpAssert  (key  !=  NULL); 
n pgpAssert  (arg  !=  NULL); 
n pgpAssert  (set  !=  NULL); 
n pgpAssert  (mode  <=  5); 

n pgpAssert  ( r i ng Ob j e c t Ty pe  (key)  ==  RI NGTYPE_KEY) ; 


D 

if  ( r i ng Key  I s S e c (set,  key)) 

n 

n 

fputs  ("sec",  fp); 

n 

else 

n 

D 

fputs  ("pub",  fp); 

a 

if  ( r i n g Key E r r 0 r (set,  key)  !=  0) 

< 

a 

a 

/*  return,  otherwise  some 

strange 

a 

a 

fputs  ("?  ",  fp); 

a 

a 

putc  ('\n',  fp); 

a 

a 

return  0; 

a 

y 

Q 

else  if 

( r i n g Key D i sa b L ed ( s e t , key)) 

a 

n 

fputs  ("a  ",  fp); 

n 

else 

a 

n 

fputs  ("  ",  fp); 

a 

f p r i n t f 

(fp,  "%4u  ",  (unsigned)  ringKeyBi 

a 

ringTtyPutKeylD  (fp,  set,  key); 

a 

put  c ( ' 

-fp); 

D 

creation 

= r i ngKey C rea t i on  (set. 

key); 

n 

if  (creation  > 0)  f 

n 

n 

pgpDa t e S t r i ng  (creation. 

datestrii 

a 

n 

fputs  (datestring,  fp); 

n 

n 

putc  ('  ',  fp); 

n 

> 

n 

else 

n 

Q 

fputs  (" ",  fp) 

/ 

□ 

if  ( r i ng Key R e VO ked  (set,  key)) 

a 

else  { 
n 
n 
a 


fputs  ("*REV0KED*  ",  fp); 

expiration  = ringKeyExpiration  (set,  key); 
if  (expiration  > 0)  { 

n pg p D a t e S t r i ng  (expiration,  datestring); 
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n 

n 

n 

n 

n 

n 


a 

n 

Q 

□ 

n 

} 


n fputs  (datestring,  fp); 

H putc('  ',fp); 

> 

else 

n fputs  (" ",  fp); 


fprintf  (fp,  "%-8s  %-15s\n",  getKeyALg  (key,  set), 

a getKeyUse  (key,  set)); 


□ 

□ 

n 

n 

D 

n 

□ 

□ 

a 

n 

Q 

n 

n 


i f 

n 

□ 

n 

n 

n 

□ 

□ 

□ 

□ 

n 

n 


( mode  ==  2 ) { 

byte  pkalg; 

ringKeyIDS  (set,  key,  Spkalg,  NULL); 
if  (pkaLg  > PGP_PKALG_RSA_ENC ) { 
n fprintf  (fp,  " Fingerprint20 

n r i ngT t y Pu t F i nge r p r i n t 20  (fp,  set, 

n putc  ('\n',  fp); 

> else  { 

n fprintf  (fp,  " Fingerprint16 

n r i ngT t y Pu t F i nge r p r i n t 1 6 (fp,  set, 

n putc  ('\n',  fp); 

} 


"); 

key,  50); 


"); 

key,  48 ) ; 


} 


if  ( ( sub key= r i ngKey S ub key ( se t , key))  !=  NULL)  { 


/*  Print  out  its  status  */ 
fprintf  (fp,  " sub  "); 

fprintf  (fp,  "%4u  ",  (unsigned)  ringKeyBits  (set,  subkey)); 
r i ngT t y Pu t Key  I D (fp,  set,  subkey); 
putc  ('  ',  fp); 

creation  = r i n g Key C r e a t i o n (set,  subkey); 
if  (creation  > 0)  { 


n 

o 

n 

pgpDateString 

(creation,  datestring); 

n 

Q 

D 

fputs 

(datestring,  fp); 

Q 

n 

n 

putc  ( 

' fp) 

/ 

n 

Q 

} 

n 

U 

else 

n 

u 

n 

fputs 

(" 

"y  fp); 

n 

Q 

/*  If 

super  key 

revoked 

, don't  print  expiration  */ 

n 

n 

if  ( r i ng Key R e VO ked  (set,  key)) 

n 

n 

n 

fputs 

( " 

" y f P ) ; 

n 

n 

else 

{ 

n 

o 

n 

expiration  = r i ng Key  Exp i r a t i o n (set,  subkey); 

n 

o 

Q 

if  (expiration 

> 0)  { 

a 

n 

Q 

n 

pgpDateString  (expiration,  datestring) 

a 

n 

n 

n 

fputs 

(datestring,  fp); 

n 

D 

n 

n 

putc  ( 

' '/  fp); 

Q 

n 

n 

y 

n 

n 

□ 

else 

n 

n 

n 

n 

fputs 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

N 

■o 

Si 

n 

n 

> 

n 

n 

fprintf  (fp,  " 

%-8s  %- 

15s\n",  getKeyALg  (subkey,  set). 

n getKeyUse  (subkey,  set)); 

if  (mode  ==  2)  { 

n fprintf  (fp,  " Fingerprint20  = "); 

n r i n g T t y Pu t F i ng e r p r i n t 2 0 (fp,  set,  subkey,  50); 

n putc  ('\n',  fp); 
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fprintf  (fp,  name_indent, 


if  ((name  = getFirstName  (set,  key))  !=  NULL) 

n r i n g I t e r S e e kTo  (iter,  name); 

else 

n fputs  ("***  This  key  is  unnamed  ***\n",  fp); 


□ 

while 

( name 

! = NULL)  { 

a 

Q 

namestring  = ringNameName  (set,  name,  8Len); 

n 

n 

ri ngTtyPutStri ng 

(namestring,  len,  (unsigned)  len,  fp,  0,  0) 

n 

Q 

put  c 

( ■ \n  ' , f p)  ; 

Q 

n 

if  ( mode  > 0 ) 

n 

n 

□ 

r i ng T t y S h 0 w S i g s (arg,  name,  set,  mode); 

n 

n 

name 

= NULL; 

s 

n 

do  -C 

n 

□ 

n 

status  = 

ringIterNextObject  (iter,  2); 

n 

□ 

la 

if  (status  > 0)  { 

n 

n 

a 

n 

name  = r i ng 1 1 e r C u r ren t Ob j e c t (iter,  2); 

n 

Q 

n 

n 

pgpAssert  (name  !=  NULL); 

n 

n 

n 

n 

if  ( ri ngOb j ectType  (name)  !=  R I NGT YPE_N AM E ) 

n 

n 

n 

D 

n name=NULL; 

n 

n 

n 

D 

else 

D 

n 

n 

a 

n fprintf  (fp,  "%*s",  name_indent,  "") 

Q 

a 

n 

> 

Q 

Q 

> while  (status 

> 0 88  name  ==  NULL); 

n 

> /* 

end  w h i 

le  */ 

r i ng I t e r D e s t roy  (iter); 
return  0; 


i n t 

r i ngT t y C hec kKey  (void  *arg,  union  RingObject  *key, 
n n struct  RingSet  const  *set,  int  mode) 


n struct  PgpTtyUI 

n struct  Ringiterator 

n union  RingObject 

a s i ze_t 

n int 

n FILE 

n char  const 

n unsigned 

n unsigned 

n int 

n PgpTrustModeL 


*ui  = (struct  PgpTtyUI  *)  arg; 
*iter  = ringIterCreate  (set); 
*name ; 

Len; 

status; 

*fp  = ui->fp; 

*namestring; 
confidence; 
validity; 
name_Leader  = 0; 
pgpt  rustmode  L ; 


n 


□ 

n 

n 

□ 


pgpAssert 

pgpAssert 

pgpAssert 

pgpAssert 

pgpAssert 


(key  !=  NULL); 

(arg  !=  NULL); 

(set  !=  NULL); 

(mode  ==  4 I I mode  = = 
( r i ng Ob j e c t Ty pe  (key) 


5); 

==  RINGTYPE_KEY) ; 
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n p g p t r u s t mod e L = pg pT r u s t Mode L (ringSetPooL  (set)); 


□ 

n 

D 

n 

n 

□ 


if  ( r i ng Key E r r o r (set,  key)  !=  0)  ( 

n /*  return,  otherwise  some  strange  behaviour  occurs  */ 

n fputs  ("?  ",  fp); 

a putc  ('\n',  fp); 

a returnO; 

> 


a if  ( r i ng Key R e VO ked  (set,  key)) 

a a fputs("#",fp); 

a else  if  ( r i ng Key Ax i oma t i c ( s e t , key)) 

a a fputs("*",fp); 

a else 

a a fputs("  ",fp); 


a ringTtyPutKeylD  (fp,  set,  key); 

a if  ( pg p t r u s t mod e L == PG PT RU ST0 ) { 

a n fprintf  (fp,  " %-10s",  keyTrustTableCringKeyTrust  (set,  key)D); 

a } 


if  ((name  = getFirstName  (set,  key))  !=  NULL) 

a ringIterSeekTo  (iter,  name); 

else 

a fputs  ("  ***  This  key  is  unnamed  ***\n", 

a f p ) ; 


a while  (name  !=  NULL)  { 


□ 

a 

1 f 

(pgptrustmodel==PGPTRUST0) 

{ 

Q 

n 

n 

if  (name_leader) 

n 

n 

n 

a fprintf  (fp. 

"%*s",  name_indent 

- 9,  ""); 

n 

Q 

□ 

name_Leader  = 1; 

n 

n 

□ 

fprintf  (fp,  "%-10s". 

□ 

u 

□ 

a u i d Va L i d i t y Ta b L e C r i ng N ameT r u s t 

(set,  name)]); 

a 

n 

> 

else  { 

n 

Q 

□ 

if  ( name_  Leader) 

a 

n 

n 

a fprintf  (fp. 

"/i*s",  name_indent 

- 20,  ""); 

a 

□ 

Q 

name_Leader  = 1; 

a 

n 

n 

confidence  = (unsigned)  ri ngNameConf i dence  (set,  name); 

a 

D 

s 

validity  = (unsigned) 

ringNameValidity 

(set,  name); 

n 

n 

n 

fprintf  (fp,  " %10s". 

getT  rustStatement 

(confidence)  ); 

a 

n 

n 

fprintf  (fp,  "%10s". 

getT  rustStatement 

(validity)); 

an} 


□ Q 

n D 

a n 


namestring  = ringNameName  (set,  name,  &Len); 

ringTtyPutString  (name  string,  Len,  (unsigned)  Len,  fp,  0,  0); 
putc  ('\n',  fp); 


□ 


□ 


ringTtyCheckSigs  (arg,  name,  set,  mode); 


D 

a 

a 


a 

a 


a name=NULL; 

a do  { 

a n status  = r i ng I t e r N e x t Ob j e c t (iter,  2); 

a n if(status>0){ 

n a n name=ringIterCurrentObject(iter,  2); 
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□ 

n 

Q 

Q 

n 

□ 

n 

a 

> 


n □ 

B 

Q n 

B 

n B 

B 

B B 

> 

B > w h I L e 

> 

(status 

ringIterOestroy 

return  0; 

(iter); 

pgpAssert  (name  !=  NULL); 
if  ( r i ng Ob j e c t Ty pe  (name) 
n name  = NULL; 

> 0 &&  name  ==  NULL); 


RINGTYPE_NAME) 


/*  Note:  No  mode  5 for  the  moment  */ 
i n t 

r i ng T t y Key C h e c k (void  *arg,  struct  RingSet  const  *viewkeys. 


B 

i 

n struct  RingSet 

const 

*aLLkeys,  int 

mode  ) 

B 

struct  Ringiterator  *i 

ter; 

fl 

union  Ri ngOb j ectn 

*key; 

B 

char  header0CD  = ' 

' \ n \ n 

KeylD 

Trust 

Validity 

User 

ID\n"; 

B 

char  headerICD  = ' 

' \ n \ n 

KeylD 

Confidence 

Validity 

User 

I D \ n " ; 

B 

struct  PgpTtyUI  n 

*u  i = 

(struct  PgpTtyUI  *)  arg 

/ 

B 

i ntn  n n 

status; 

B 

FILE  n n n 

*f  p = 

u i ->f  p ; 

n Pg pT r u s t Mod e L pg p t r u s t mode L ; 

n pgpAssert  (aLLkeys  !=  NULL); 

n pgpt rustmode L = pg pT r u s t Hod e L (ringSetPooL  (aLLkeys)); 

n if  (vieukeys  ==  NULL) 

n Q viewkeys  = aLLkeys; 

n if  ( pg p t r u s t mod e L ==  PGPTRUST0)  ( 

n n fputs  (header0,  fp); 

n > e L se  { 

n n fputs  (header!,  fp); 

n } 

n iter  = r i ng I t e r C r e a t e (viewkeys); 

a whiLe  ((status  = r i ng I t e r N e x t Ob j e c t (iter,  1))  > 0)  ( 

n n key  = ringIterCurrentObject  (iter,  1); 

n n r i ngT t y C h e c kKey  (arg,  key,  aLLkeys,  mode); 

n } 

a r i ng I t e r D e s t r oy  (iter); 

n return0; 

> 


/*  Modes : 


0 

List 

keys. 

but 

no  fingerprints 

or  signatures  (-kv) 

1 

List 

keys 

with 

si gnatures,  but 

no  fingerprints  (-kvv) 

2 

List 

keys 

with 

f i ngerpri nts  and 

signatures  (-kvc) 

3 

List 

keys 

with 

signature  status 

info  (-ka) 

4 

List 

keys 

with 

signature  status 

info,  pLus  trust  info 

5 

same 

as  4 , 

but 

do  not  output  numeric  trust  info 
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(not  implemented  yet) 
*/ 


i nt 

r i n g T t y Key V i e w (void  *arg,  struct  RingSet  const  *viewkeys, 

n n struct  RingSet  const  *aLLkeys,  char  const  *keyring,  int  mode) 

{ 


□ 

Q 

n 

Q 

n 

n 

Q 

□ 


struct  Ringiterator  *iter; 


union 

RingObjectn 

cha  rn 

n □ 

□ 

"Type  Bits 

into 

□ n 

struct 

PgpT  tyUI  a 

i ntn 

a a 

FILE  n 

a u 

*key; 

headerCD  = 
KeylD  Created 
count  = 0; 
*ui  = (struct 
status; 

*fp  = ui->fp; 


Expires  Algorithm  Use\n"; 
PgpTtyUI  *)  arg; 


B pgpAssert  (mode  <=  5); 

n pgpAssert  (allkeys  !=  NULL); 


a 

i f 

( vi ewkeys  ==  NULL) 

a 

n 

viewkeys  = allkeys; 

a 

if 

(keyring) 

□ 

n 

fprintf  (fp,  "Key  ring:  \'%s\'\n". 

keyring); 

□ 

fputs  (header,  fp); 

n 

iter  = r i n g I t e r C r e a t e (viewkeys); 

o 

w h 

ile  ((status  = r i n g I t e r N ex t 0 b j e c t (iter. 

1 ) ) > 0)  { 

a 

□ 

count++; 

n 

n 

key  = ri ngIterCurrentOb j ect  (iter. 

1); 

n 

n 

r i ng T t y S h 0 wKey  (arg,  key,  allkeys. 

mode)  ; 

n 

> 

n 

r i 

ngIterDestroy  (iter); 

□ 

i f (mode 

< 4)  { 

□ 

a 

if  (count  ==  1) 

n 

n 

a fputs  ( 

Et 

a 

else 

n 

n 

n fprintf 

Q 

} 

n 

else 

□ 

a 

ringTtyKeyCheck 

Q 

return  0 

/ 

> 


1 matching  key  foundXn",  fp); 
(fp,  "%d  matching  keys  foundXn", 

(arg,  vieukeys,  allkeys,  mode); 


count ) ; 


/*  Key  selected  for  encryption.  Determine  is  the  user  really  wants  to 
use  it.  If  'batchmode'  is  set,  we  fail  rather  than  ask.  */ 

i n t 

r i ngT t y KeyOKToEn c r y p t (void  *arg,  struct  RingSet  const  *set, 
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a a union  RingObject  *key) 

{ 

n Struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)  arg; 

n FILE  *fp  = ui->fp; 

n int  batchmode  = pgpenvGetInt  (ui->env,  PG PEN V_B AT C HMD D E , NULL,  NULL); 

n union  RingObject  *name; 

a char  const  *na me s t r i n g ; 

n size_t  Len; 

n struct  Ringiterator  *iter; 

n time_t  expiration; 

n char  datestringCIID; 

n inttrust; 

n unsigned  validity; 

n Pg pT r u s t Mod e L pg p t r u s t mod e L ; 

n pgptrustmodeL  = pgpTrustModeL  (ringSetPooL  (set)); 

n fputc  ('\n',  fp); 

a ringKeyPrint  (fp,  set,  key,  1); 

n if  ( r i ng Ke y Re VO ked  (set,  key))  { 

n n fprintf(fp,  "\n\ 

WARNING:  The  above  key  has  been  revoked  by  its  owner, \n\ 
possibly  because  the  private  key  was  comp r om i s e d . \ n \ 

You  cannot  use  a revoked  key  for  e n c r y p t i on . \ n " ) ; 
n n returnO; 

n > 

a if  ( r i ng Key D i s a b I e d (set,  key))  { 

n fprintf(fp,  "\n\ 

WARNING:  You  have  disabled  the  above  key.Xn"); 

Q 

n 
n 

Do  you 
n 

D 

n 

a 
□ 

□ 

□ 

WARNING:  This  key  is  not  valid  for  use  after  %s.\n",  datestring); 


□ 

Q 

if  (batchmode) 

a 

n 

return  0; 

n 

□ 

fprintf  (fp,  "\n\ 

Do  you 

still 

want  to  use  it?  Cy/N]  "); 

a 

D 

if  ( ! pg pT t y Ge t Boo  1 (0,  stderr)) 

n 

n 

return  0; 

n 

> 

a 

iter 

= ringIterCreate  (set); 

a 

pg p As s e r t ( i t e r !=  NULL); 

n 

r i ng I t e r S e e kTo  (iter,  key); 

a 

while 

( r i ng 1 1 e r Nex t Ob j e c t (iter,  2)  > 0)  { 

o 

a 

name  = r i ng I t e r C u r r en t Ob j e c t (iter. 

n 

a 

pg p A s s e r t ( na me  !=  NULL); 
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n n if  ( r i ng Ob j e c t Ty p e (name)  ==  R I N GT Y P E_N AM E ) { 

n n n intwarn=0; 


if  ( pg p t r u s t mod e I ==  PGPTRUST0)  { 
n switch  (trust  = r i ng N a meT r u s t 

n case  PGP_NAMETRUST_UNKNOWN : 

n a fprintf(fp,  "\n\ 


WARNING:  Because  the  foLLouing  name  has  not  been  certified\n\ 
by  a trusted  signature,  it  is  not  known  with  a high\n\ 
degree  of  confidence  that  the  above  key  belongs  to:\n"); 
n n n n n warn=1; 

a B B B B break; 

B B B B case  PGP  NAMETRUST  UNTRUSTED: 


(set,  name))  { 


tt 

B 

B 

B 

B 

fprintf  (fp,  "\n\ 

WARNING 

The 

above 

key 

i s 

not 

trusted 

to  belong  to:\n"); 

n 

B 

B 

B 

B 

warn  = 1 ; 

Q 

B 

fl 

fl 

fl 

break; 

□ 

B 

B 

B 

case 

PGP_NAMETRUST_MARGINAL: 

n 

B 

B 

B 

fl 

fprintf  (fp,  "\n\ 

WARNING : 

Because  the  following 

name  i 

s not  certified  with  s u f f i c i e n t \ n \ 

trusted 

signatures. 

i t 

i s 

not 

known  with  high  confidence  that  the\n\ 

above  key 

actually 

belongs 

1 0 : 

\ n " ) ; 

Q 

B 

fl 

B 

fl 

warn  = 1 ; 

Q 

B 

fl 

B 

fl 

break; 

n 

B 

B 

fl 

> 

n 

B 

fl 

> 

else 

{n 

n n /*  new  trust  model  */ 

B 

B 

B 

B 

validity  = r i ng Na me Va 1 i d i t y (set,  name); 

B 

B 

fl 

fl 

if  (validity  ==  0)  { 

B 

B 

fl 

B 

B 

fprintf  (fp,  "\n\ 

WARNING : 

The 

above 

key 

i S 

not 

trusted 

to  belong  to:\n"); 

fl 

B 

fl 

B 

B 

warn  = 1 ; 

B 

fl 

fl 

B 

> 

B 

B 

B 

B 

else 

if  ( ! ri ngTrustVa  1 i d (set,  validity))  { 

B 

fl 

fl 

fl 

B 

fprintf  (fp,  "\n\ 

WARNING ; 

Because  the  following 

name  i 

s not  certified  with  su f f i c i en t \n \ 

trusted 

signatures. 

there 

is  an  estimated  1/%-ld  probability  that\n\ 

the  above 

key 

may  not  belong  to:\n". 

B 

fl 

B 

B 

fl 

n strtol  ( g e t T r u s t S t a t erne n t 

B 

B 

B 

fl 

B 

n n B (validity). 

B 

B 

fl 

n 

B 

n n NULL,  10)); 

B 

B 

B 

fl 

B 

warn  = 1 ; 

B 

fl 

fl 

fl 

> 

B 

B 

B 

> 

B 

fl 

fl 

1 f 

( wa 

r n ) { 

B 

fl 

fl 

fl 

namestring  = ringNameName  (set,  name,  8len); 

B 

fl 

fl 

fl 

r i ngT t y Pu t S t r i ng  (namestring,  len. 

B 

B 

fl 

fl 

fl 

n (unsigned)  len,  fp,  0,  0); 

B 

B 

B 

fl 

f put  c 

( ' \ n ' , f p ) ; 

B 

fl 

B 

fl 

if  ( r i ng Na me Wa r non  1 y (set,  name)) 

B 

fl 

B 

fl 

B 

f puts  ( 

B 

"But 

you 

previously  approved  using  the  key  with  this  name.Xn", 

B 

fl 

B 

B 

□ 

f p)  ; 

B 

B 

B 

B 

else 

{ 

B 

B 

B 

fl 

if  (batchmode) 

B 

fl 

fl 

B 

fl 

return  0; 

B 

fl 

fl 

fl 

fl 

f puts  ( 

B 

fl 

B 

"Do  you  want 

to  use  the  key  with  this  name?  Cy/N3  ", 

B 

fl 

B 

fl 

fl 

B f p ) ; 
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n 

n 

□ 

n 

n 

if  ( pgpT t y Ge t Boo  1 (0, 

n 

n 

n 

n 

n 

n ringNameSetWai 

n 

n 

n 

n 

n 

n n D 

n 

n 

n 

n 

n 

else 

n 

n 

El 

n 

n 

a return0; 

□ 

□ 

n 

n 

> 

n 

n 

Q 

n 

put  c 

(■\n',  fp); 

n 

n 

n 

} 

n 

n 

> 

n 

> 

n 

return  1; 

> 

void 

ringTtyKeyOKToSign 

(void  *arg. 

struct 

RingSet  const  *set. 

n 

n 

union  RingObject 

*key ) 

i 

struct  PgpTtyUI  *ui  = 

(struct 

PgpTtyUI  *)  arg; 

n 

FILE 

*fp  = 

ui ->f p; 

a 

struct  Ringiterator  *i 

ter; 

n 

union 

RingObject  *name 

r 

n 

s i z e _ 

t 1 e n ; 

Q 

char 

const 

*namestr; 

n 

i nt  warn  = 

0; 

o 

t i me_ 

t expiration; 

n 

char 

datestringCIID; 

Q 

byte 

trust; 

name ) ; 


n unsigned  validity; 

n PgpT ru s t Mod e I pg p t r u s t mod e L ; 


pg p t ru s t mode L = pg pT r u s t Hod e L (ringSetPooL  (set)); 


n if  ( r i ng Key  Re VO ked  (set,  key))  { 

n n fprintf(fp, 

WARNING:  The  signing  key  has  been  revoked  by  its  owner, \n\ 
possibly  because  the  private  key  was  compromi sed . \n\ 

A signature  made  by  this  key  should  not  be  t r u s t ed . \ n " ) ; 
n n return; 

n > 

n if  ( ri ngKeyDi sabled  (set,  key)) 

n fprintf(fp,  "\ 

WARNING:  You  have  disabled  the  signing  key\n"); 


n if  ((expiration  = r i ng Key Ex p i r a t i o n (set,  key))  > 0 && 

n expiration  <=  time  ((time_t  *)  0))  { 

n pgpDateString  (expiration,  datestring); 

D fprintf(fp,  "\ 

WARNING:  This  key  is  not  valid  for  use  after  %s.\n",  datestring); 

n > 

n iter  = r i n g 1 1 e r C r ea t e (set); 

n pg p As s e r t ( i t e r !=  NULL); 

n ringIterSeekTo  (iter,  key); 

n while  ( r i ng 1 1 e r Nex t Ob j e c t (iter,  2)  > 0)  { 

n n name  = r i ng I t e r C u r r e n t Ob j e c t (iter, 

n n if  (name  S&  r i ng Ob j e c t Ty pe  (name)  = 

n n n warn=0; 

CCCHK:65e5f29fc76ff95f135bee0ad77dbb559b66e4951bb390a7dd53381ac843bdf83:: 


2); 

= RINGTYPE_NAME)  { 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1897 


pgpRingUl.c 


if  ( pg p t r u s t mod e L ==  PGPTRUST0)  { 
n trust  = r i n g N a meT r u s t (set,  name); 

n switch  (trust  = r i ng N a meT r u s t (set,  name))  { 

n case  PGP_NAnETRUST_UNKNOWN : 

n n fprintf(fp,  "\n\ 


WARNING:  Because  the  following  name  has  not  been  certified\n\ 
by  a trusted  signature,  it  is  not  known  with  a high\n\ 
degree  of  confidence  that  the  signing  key  belongs  to:\n"); 


n 

n 

a 

□ 

WARNING 

n 

□ 


H warn=1; 

33  break; 

case  PGP_NAMETRUST_UNTRUSTED : 
n fprintf  (fp,  "\n\ 


The  signing  key  is  not  trusted  to  belong  to:\n"); 


a a a a warn=1; 

a a a a break; 

a a a a case  PG P_N AM E T RU S T_M A RG I N A L : 

a a a a a fprintf(fp,  "\n\ 

WARNING:  Because  the  following  name  is  not  certified  with  s u f f i c i e n t \ n \ 
trusted  signatures,  it  is  not  known  with  high  confidence  that  the\n\ 


signing 

key 

actual  Ly 

be  longs  to 

: \n"); 

a 

n 

n 

n 

B 

warn  = 1 ; 

n 

n 

a 

n 

B 

break; 

n 

n 

n 

□ 

> 

n 

o 

n 

> else 

in 

a a /*  new  trust  model 

Q 

Q 

n 

B 

validity  = ringNameValidity  (set,  name); 

n 

n 

n 

B 

if  (validity  ==  0)  { 

n 

n 

n 

B 

B 

fprintf  (fp,  "\n\ 

WARNING : 

: The  signing 

key 

is  not 

trusted 

to  belong  to:\n"); 

n 

u 

n 

B 

B 

warn  = 1 ; 

n 

n 

a 

B 

> 

u 

□ 

n 

B 

else  if 

( ! r i ngT r u s t Va  1 i d (set,  validity)) 

n 

Q 

□ 

B 

B 

fprintf  (fp,  "\n\ 

WARNING : 

Because  the 

following 

name  is 

not  certified  with  suf f i ci ent\n\ 

t rusted 

signatures. 

there  is  an 

estimated  1/%-ld  probability  that\n\ 

the  signing 

key  may 

not 

belong 

1 0 : \ n " , 

n 

n 

□ 

B 

B 

a strtol  ( ge t T r u s t S t a t emen t 

n 

a 

n 

B 

B 

a a a (validity) 

n 

n 

Q 

B 

B 

a a NULL,  10)); 

□ 

n 

n 

B 

B 

warn  = 1 ; 

n 

n 

n 

B 

> 

n 

n 

Q 

> 

n 

n 

Q 

if  (warn)  { 

n 

n 

□ 

B 

na me  s t r 

= ringNameName  (set,  name,  &len); 

n 

□ 

n 

B 

r i ngT t y Pu t S t r i ng  (namestr,  len,  (unsigned) 

n 

□ 

n 

B 

B 

a fp,0,0); 

n 

n 

n 

B 

f putc  ( 

■\n',  fp); 

□ 

a 

n 

> 

a 

a 

> 

D 

} 

□ 

i f 

(warn) 

□ 

u 

f pu  t c ( ' 

\ n ' , f p ) ; 
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/* 

* pgpRingUI.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

★ 

* $Id:  pgpRi ngUI . h,v  1.3. 2.1  1997/06/07  09:52:02  mhw  Exp  $ 

*/ 

#ifndef  PGPRINGUI.H 
^define  PGPRINGUI.H 

(/include  <stdio.h> 

#incLude  "pgpUsuals.h" 

//ifdef cpLuspLus 

extern  "C"  { 

//end  i f 

struct  RingFile; 

//ifndef  T Y P E.R  I NG  F I LE 

//define  T YPE.R  I NG  F I LE  1 

typedef  struct  RingFiLe  RingFiLe; 

//endi  f 

union  RingObject; 

//ifndef  TYPE.RINGOBJ  ECT 

#define  T YPE.R I NGOB J E CT  1 

typedef  union  RingObject  RingObject; 

//end i f 

struct  RingSet; 

//ifndef  TYPE. RINGSET 

//define  TYPE. RINGSET  1 

typedef  struct  RingSet  RingSet; 

//endi  f 

size.t  PGPTTYExport  r i ngT t y F o r ma t F i ng e r p r i n t 1 6 ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  char  *buf,  size.t  Len); 

size.t  PGPTTYExport  r i n gT t y F o r ma t F i ng e r p r i n t 2 0 ( s t r u c t RingSet  const  *set, 
n union  RingObject  *key,  char  *buf,  size.t  Len); 

int  PGPTTYExport  r i ng T t y Pu t F i ng e r p r i n 1 1 6 ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *key,  unsigned  wid); 

int  PGPTTYExport  r i ng T t y Pu t F i ng e r p r i n t 20 ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *key,  unsigned  wid); 

int  PGPTTYExport  r i ng T t y Pu t Key  I D ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *key); 

int  PGPTTYExport  r i ng T t y Pu t S i g I D ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *sig); 

unsigned  PGPTTYExport  r i ngT t y Pu t S t r i ng ( c h a r const  *str,  size.t  len, 
n unsigned  maxLen,  FILE  *f,  char  q1,  char  q2); 

void  PGPTTYExport  r i ng T t y Pu t Ke y I n f o ( F I L E *f,  struct  RingSet  const  *set, 
n union  RingObject  *obj); 

void  PGPTTYExport  r i ng Key I D p r i n t ( F I LE  *f,  char  const  *prompt, 
n byte  const  keyIDC83); 

void  PGPTTYExport  r i ng Key P r i n t ( F I LE  *f,  struct  RingSet  const  *set, 
n union  RingObject  *obj,  int  Level); 
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void  PGPTTYExport 

ringObjPrint(FILE  *f,  struct  RingSet  const  *set,  union  RingObject  *obj, 
n int  level); 

int  PGPTTYExport  r i ngTo p L i s t T r o u b I e C F I LE  *f,  struct  RingFile  *file, 
n int  writeflag); 


int  PGPTTYExport 

r i ngT t y Key V i ew  (void  *arg,  struct  RingSet  const  *viewkeys, 
o struct  RingSet  const  *allkeys, 

n char  const  *keyring,  int  mode); 

/*o  Display  second  segment  of  -kc  output  (trust  info)  only.  */ 

n D n □ 

int  PGPTTYExport 

r i ngT t y Ke y C h e c k (void  *arg,  struct  RingSet  const  *viewkeys, 
n n struct  RingSet  const  *allkeys,  int  mode); 

n n 

a a 

a a 

/*n  Show  a single  key  in  appropriate  key  view  format, 

n Associated  names  are  also  displayed.  */ 

D Q □ n 

int  PGPTTYExport 

ri ngTtyShowKey  (void  *arg,  union  RingObject  *key,  struct  RingSet  const  *set, 
a a a a int  mode); 

n Q a □ 

/*n  Show  second  segment  of  -kc  output  for  designated  key.  */ 

int  PGPTTYExport 

r i ngT t y C h e c kKey  (void  *arg,  union  RingObject  *key, 
n n struct  RingSet  const  *set,  int  mode); 


/*n  Show  signatures  in  appropriate  key  view  format.  Similar  concept  to 

D pgpTtyShowKey . The  object  for  the  name  with  which  the  signatures  are 

n associated  should  be  passed.  */ 


n 

n 

a n 

i nt 

PGPTTYExport 

ringTtyShowSigs 

(void  *a  rg. 

union  RingObject  *name,  struct  RingSet 

const 

n 

a 

a H 

int  mode); 

D 

n 

a 

/*a 

S e r V i c e 

routine  for 

ringTtyShowSigs,  to  show  a single  sig. 

Check 

o 

means  to 

i ndi cate  si 

gnature  check  status.  */ 

i nt 

PGPTTYExport 

r i ng T t y S h o wS i g ( u n i o n RingObject  *sig,  struct  RingSet  const  *set, 
D FILE*fp,intcheck); 


/*n  Show  second  segment  of  -kc  output  (trust  info)  for  signatures 

n attached  to  designated  name.  */aa  n 

□ n □ n 

int  PGPTTYExport 

r i ngT t y C he c kS i g s (void  *arg,  union  RingObject  *name, 
n n struct  RingSet  const  *set,  int  mode); 
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/*  Return  whether  key  can  be  used  for  encryption  */ 
int  PGPTTYExport 

r i n g T t y Key OKTo E n c r y p t (void  *arg,  struct  RingSet  const  *set, 
n union  RingObject  *key); 

void  PGPTTYExport 

r i ngT ty Key OKTo S i gn  (void  *arg,  struct  RingSet  const  *set, 
a union  RingObject  *key); 

Sifdef  cpLuspLus 

> 

#end i f 

#endif  /*  PGPRINGUI_H  */ 
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pgpScrMSDOS.c 


/* 

* 

* 

* 

* 

* 

* 

*/ 


pgpScrMSDOS.c  --  Get  the  screen  size,  and  clear  it  (MS-DOS  version). 

Not  much,  but  there  are  so  *many*  wonderful  ways  to  do 

Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

$Id:  pgpScrMSDOS . c,v  1.2. 2.1  1 997/06/07  09:52:03  mhw  Exp  $ 


i t . 


#include  <stdio.h> 

^include  <stdlib.h> 

//include  <string.h> 

#if  BORLANDC 

/*  Borland  C 3.1's  <dos.h>  won't  compile  in  ANSI  mode  without  this...  */ 

#define  far far 

//end  i f 

#ifndef  __G032__  &S  ! de f i n e d ( _ W I N3 2 ) 

#include  <dos.h>n  /*  For  int86  and  union  REGS  */ 

// e nd i f 

/* 

* Some  DOS  Compilers  are  reluctant  to  define  MK_FP  in  ANSI  mode,  as  if 

* it  were  not  in  the  namespace  reserved  by  ANSI  for  the  <dos.h>  header 

* file.  <dos.h>  is  not  defined  by  ANSI,  so  obviously  this  is  a 

* hallucination  due  to  drinking  too  much  Jolt.  Go  figure. 

*/ 

//ifndef  MK_FP 
//ifndef  _MK_FP 

/*  Create  using  Borland  C extensions.  */ 

#define  _MK_ F P C s eg , o f f ) ((void  __seg  *)(seg)  + (void near  *)(off)) 

#endif  /*  !_MK_FP  */ 

//define  MK_FP  _HK_FP 
//endif  /*  !MK_FP  */ 

/* 

* Return  the  screen  size 

* 

* The  number  of  columns  is  returned  from  int  0x10,  ah  = 0xF,  in  ah. 

* The  low  7 bits  of  al  are  the  screen  mode.  If  it  is  80  column  mono 

* or  colour,  then  try  int  0x10,  ah  = 0x12,  bl  = 0x10  (Get  Information) 

* and  have  a look  at  bl.  If  it  has  changed  (the  allowed  return  values 

* are  0,  1,  2,  and  3),  we  have  a modern  video  BIOS,  which  stores  the 

* number  of  display  rows  at  0040:0084.  I wish  I had  a PC  BIOS  reference 

* to  see  if  there  are  simpler  ways  to  get  the  data.  In  particular, 

* how  reliable  are  the  BIOS  data  fields  at  0040:004A  (columns  per 

* line  in  current  video  mode)  and  0040:0084  (rows-1)?  The  latter 

* is  apparently  only  used  on  video  adapters  with  their  own  BIOS, 

* EGA  and  up . 

* 

* This  technique  is  primarily  based  on  code  in  the  Borland  C 3.1 

* run-time  library,  backed  with  information  from  Frank  van  Gilluwe's 

* The  Undocumented  PC  and  the  Programmer's  Guide  to  the  AMIBIOS. 

*/ 

void 

s c r e en S i z eG e t ( u n s i g n e d *rowsp,  unsigned  *colsp)n/*  Rot  bilong  kargo  */ 

{ 

#ifdef  _WIN32 
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n 

/* 

No  DOS  tricks  */ 

n 

*rowsp  = 25; 

a 

*colsp  = 80; 

#e  L se 

n 

char  const  *env; 

n 

long  t ; 

B 

union  REGS  regs; 

B 

*rowsp  = *colsp  = 0; 

B 

/* 

LINES  & COLUMNS  environment  variables 

override  everything  else 

B 

env 

= getenv(" LINES"); 

B 

if 

(env  !=  NULL  S&  (t  = atol(env))  > 0 ) 

B 

B 

*rowsp  = (unsigned)t; 

B 

env 

= g e t e n V ( " C 0 LUMN S " ) ; 

B 

if 

(env  !=  NULL  SS  (t  = atol(env))  > 0 ) 

B 

B 

*colsp  = (unsigned)t; 

B 

if 

(*rowsp  SS  *colsp) 

B 

B 

return; 

B 

/* 

Otherwise,  figure  it  out  the  hard  way 

. */ 

B 

regs. h. ah  = 0xF;n  /*  Read  current 

video  mode  */ 

B 

int86(0x10,  Sregs,  &regs); 

B 

i f 

(!*colsp)  { 

B 

B 

*colsp  = regs. h. ah; 

B 

B 

if  (*rowsp) 

B 

B 

n return; 

B 

> 

B 

*rowsp  = 25;n  /*  DOS  default  */ 

B 

/* 

If  Colour  or  BSW  80-column  mode,  it's 

safe  to  ask  about  EGA  */ 

B 

i f 

((regs.h.al  S 0x7E)  ==  2)  { 

B 

B 

regs. h. ah  = 0x12; 

B 

B 

regs.h.bl  = 0x10; 

B 

B 

int86(0x10,  Sregs,  Sregs); 

B 

B 

if  (regs.h.bl  !=  0x10)n  /*  EGA  installed  - read  BIOS  */ 

B 

B 

n *rowsp  = *(unsigned  char 

const  *)MK_FP(0x40,  0x84) 

B 

> 

#endi f 

} 

/* 

* Clear  the  screen  and  home  the  cursor. 

* The  only  way  to  do  this  reliably  under  MS-DOS  is  via  the  BIOS. 

* This  involves  finding  the  screen  size  (using  the  above  function), 

* finding  the  active  video  page  (int  0x10,  ah  = 0xF,  returned  in  bh), 

* finding  the  attribute  to  clear  with  (taken  from  the  current  cursor 

* position,  int  0x10,  ah  = 8,  bh  = current  page,  attribute  returned 

* in  ah),  using  the  "scroll  window"  command  to  clear  the  active  page 

* screen  (int  0x10,  ah  = 6,  al  = 0 for  clear  screen,  (cl,ch)  the  top 

* left,  (dl,dh)  the  bottom  right  of  the  window  (zero-based  (x,y)), 

* and  bh  the  attribute  to  clear  with),  and  then  finally  resetting  the 

* cursor  to  (0,0)  with  int  0x10,  ah  =2.  bh  = current  page,  (dl,dh) 

* is  the  position  to  set  it  to. 

*/ 

void 
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s c ree n C L ea r ( F I LE  *f) 

#ifdef  _WIN32 

n /*  Not  sure  how  to  do  it  */ 

Seise 

n unsigned  rows,  cols; 

n union  REGS  regs; 

n unsigned  char  page; 

n (void)f; 

n s c r e e n S i z e G e t ( & r o w s , &coLs); 


□ 

reg  s . h . a h = 

0xF;n  /* 

n 

i nt86(0x1 0, 

&regs,  &regs); 

n 

page  = regs 

. h . b h ; n / * 

□ 

regs. h. ah  = 

8 ; n n / * 

a 

/*  bh  is  already  set  */ 

n 

int86(0x10. 

Sregs,  &regs); 

n 

regs.h.bh  = 

regs.h.ah;n  /* 

n 

regs. X. ax  = 

0x600; n /* 

n 

regs.x.cx  = 

0 ; n n / * 

n 

regs . h . d 1 = 

cols-1 ; 

n 

regs.h.dh  = 

rows-1 ; n /* 

Q 

int86(0x10. 

Sregs,  Sregs); 

□ 

regs. h. ah  = 

2;  /* 

u 

regs.h.bh  = 

page; 

Q 

regs.x.dx  = 

0 ; n n / * 

n 

int86(0x10. 

Sregs,  Sregs); 

Sendi f 


Read  current  video  mode  */ 


Active  page  */ 
Get  attribute  */ 


Attribute  for  screen  clear  */ 
ah=6,  scroll  up,  ah=0,  clear  */ 
Start  at  (0,0)  */ 

End  at  (cols-1,  rows-1  ) */ 

Home  the  cursor  */ 

Go  to  (0,0)  */ 
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/* 

* pgpScrMac.c  --  get  the  screen  size,  and  clear  it  (Mac  version). 

* Not  much,  but  there  are  so  *many*  wonderful  ways  to  do  it. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pg p S c r Ma c . c , V 1.2. 2.1  1 997/06/07  09:52:03  mhw  Exp  $ 

*/ 

#if  HAVE_CONFIG_H 
#include  "config.h" 

#end i f 


#i nc  lude 
^include 
/^include 


<s  t d i o . h> 

<stdlib.h> 

<string.h> 


^include  "pgpUsuals.h 
^include  "pgpScreen.h 


/* 

* Get  the  screen  size  for  'more'. 

* The  environment  variables  SLINES  and  SCOLUMNS  will  be  used  if  they  exist. 

* If  not,  then  the  TIOCGWINSZ  call  to  ioctlC)  is  used  (if  it  is  defined). 

* If  not,  then  the  TIOCGSIZE  call  to  ioctlC)  is  used  (if  it  is  defined). 

* If  not,  then  the  WIOCGETD  call  to  ioctK)  is  used  (if  it  is  defined). 

* If  not,  then  get  the  info  from  t e r mi n f o / 1 e r me  a p (if  it  is  there). 

* Otherwise,  assume  the  following:  we  have  a 24x80  vt100  or  similar. 

*/ 

^define  D E F AU LT_R0 W S n 24 
^define  D E F AU LT_C 0 LS n 80 


/*  Return  the  screen  size  */ 
void 

screenSi zeGet Cunsi gned  *rowsp,  unsigned  *colsp)n/*  Rot  bilong  kargo  */ 
{ 

n *rowsp  = DEFAULT_ROUS; 

n *colsp  = DEFAULT_COLS; 

> 

/* 

* Clear  the  screen  and  home  the  cursor. 

* Uses  a near-universal  ANSI  sequence,  followed  by  an  attempt  to 

* erase  the  mess  it  would  make  if  it  didn't  work. 

*/ 

void 

s c r e en C I ea r ( F I LE  *f) 

{ 

n fputsC”\33:2J\33CH\r  \r",  f ) ; 

> 


i:[:CHK:6f21c297d  5225977  fbbafd795be7633f8aa4c888fa698b1  91  575bdef:] 


Pretty  Good  Privacy  5.0^“  - — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1905 


pgpScrUnix.c 


/* 

* pgpScrUnix.c  --  Get  the  screen  size,  and  clear  it  (UNIX  version). 

* Not  much,  but  there  are  so  *many*  wonderful  ways  to  do  it. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpS c r Un i X . c , V 1.2. 2.1  1 997/06/07  09:52:03  mhw  Exp  $ 

*/ 

#if  HAVE_C0N FIG_H 
#include  "config.h" 

#e n d i f 


^include 
# i nc I ude 
//include 


<s  t d i o . h> 
<s  t d I i b . h> 
<string.h> 


#include  " pg p POS I X . h " n /*  For  ioctlC)  */ 
#if  HAVE_SYS_IOCTL_H 
//include  <sy  s / i o c t I . h> 

//endi  f 


#include  < s y s / t y pe s . h> 
//ifdef  SCO 

//include  <s  y s / s t r earn  . h> 
#include  <sys/ptem.h> 

#e n d i f 


#ifdef  SVR2n  /*  SVR2  has  wierd  headers  */ 


//ifndef  NOTERHIO 

#include  <termio.h>n  /*  TIOCGWINSZ  should  be  here  */ 

#endi f 

//elsen  /*  Normal  system:  look  in  <termios.h>,  < sy  s / i o c t I . h>  and  <sgtty.h>  */ 
//ifndef  NOTERMIO 

//include  <termios.h>n  /*  TIOCGWINSZ  should  be  here  */ 

#endi f 

#if  !def ined(TIOCGWINSZ)  S&  ! d e f i n e d ( T 1 0 CG S I Z E ) SS  ! de f i ne d ( W 1 0 C G ET D ) 

^include  <sy s / i oc t I . h>n  /*  TIOCG...  should  be  here  */ 

// e nd i f 

//if  !def  ined(TIOCGWINSZ)  SS  ! d e f i n ed  ( T 1 0 C G S I Z E ) SS  ! d e f i n ed  ( W 1 0 CG  ET  D ) 

//include  <sgtty.h>n  /*  WIOCGETD  should  be  in  here  */ 

//end  i f 

//endif  /*  not  S\/R2  */ 

#include  "pgpUsuals.h" 

#include  "pgpScreen.h" 

/* 


* 

Get 

the 

screen  s 

ize  for  'more'. 

* 

The 

e n V i 

ronment 

variables 

$LINES  and  SCOLUHNS  will 

be 

used 

if  they  exi st 

★ 

If 

not , 

then 

the 

TIOCGWINSZ  call  to  ioctl()  is  used 

( i 

f i t 

is  defined). 

* 

If 

not , 

then 

the 

TIOCGSIZE 

call  to  ioctlC)  is  used 

( i f 

i t 

is  defined). 

★ 

If 

not , 

then 

the 

WIOCGETD 

call  to  ioctlC)  is  used  ( 

i f 

i t i 

s defined). 

* 

If 

not , 

then 

get 

the  info 

from  t e r m i n f 0 / 1 e r me  a p (if 

i t 

i s 

there)  . 
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* Otherwise,  assume  the  foLLowing:  we  have  a 24x80  vt100  or  similar. 

*/ 

#define  DEFAULT_ROWSn  24 
#define  DEFAULT_COLSn  80 

/* 

* Try  to  access  terminfo  through  the  t e r me  a p- i n t e r f a c e in  the  curses 

* Library  (which  requires  Linking  with  -Lcurses)  or  use  termcap  directly 

* (which  requires  Linking  with  -Ltermcap) 

*/ 

#if  ! def ined(USE_TERHCAP)  88  ( d e f i ned ( U S E_T E RM I N F 0 ) ||  d e f i n ed ( U S E_C U R S E S ) ) 

//define  USE_TERHCAP  1 
// e nd i f 

//ifdef  USE_TERMCAP 
//define  TERHBUFSIZ  1024 
//define  UNKNOWN_TERH  "unknown" 

//define  DUHB_TERMBUF  " d umb  : c o//80  : h c : " 

extern  int  tgetent(),  tgetnum(); 

//end  i f 

/*  Return  the  screen  size  */ 
void 

screenSi zeGet (unsi gned  *rowsp,  unsigned  *coLsp)n/*  Rot  biLong  kargo  */ 

{ 

n char  const  *env; 

n L o n g t ; 

//if  def  i ned(TlOCGWINSZ) 
n struct  winsize  windowinfo; 

//elif  def  i ned(TIOCGSIZE) 
n struct  ttysize  windowinfo; 

//eLif  def  i ned(WIOCGETD) 
n struct  uwdata  windowinfo; 

// end i f 


a 

/* 

Make  sure  that  we're  outputting 

to  a terminal  */ 

n 

if 

( ! i sa 1 1 y ( f i L eno ( s t de r r ) ) ) ( 

D 

n 

*rowsp  = DEFAULT_R0US; 

n 

Q 

*coLsp  = DEFAULT_C0LS; 

n 

n 

return; 

n 

} 

a 

*rowsp  = *coLsp  = 0; 

n 

/* 

LINES  8 COLUMNS  environment  variables  override  everything 

n 

env 

= getenv(  "LINES"); 

n 

i f 

(env  !=  NULL  88  (t  = atoL(env)) 

> 0 ) 

n 

n 

*rowsp  = (unsigned)t; 

s 

env 

= getenvC'COLUMNS"); 

n 

i f 

(env  !=  NULL  88  (t  = atoL(env)) 

> 0 ) 

n 

n 

*coLsp  = (unsigned)t; 

□ 

i f 

(*rowsp  88  *coLsp) 

n 

B 

return; 

ECCHK:58abb162c07cddf32338770d676bb350b8677e4f12dd55414ccaf33cff194aa67:: 


Pretty  Good  Privacy  5.0^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1907 


pgpScrUnix.c 


n /*  See  what  ioctLC)  has  to  say  (overrides  terminfo  S termcap)  */ 

#if  def ined(TIOCGWINSZ) 

n if  ( i oc t L ( f i L eno ( s t de r r ) , TIOCGWINSZ,  Swindowlnfo)  !=  -1)  { 


Q 

n 

i f 

(!*rowsp  SS 

H i n do w I n f 0 . w s _ r 0 w !=  0) 

□ 

□ 

B 

* r 0 w s p 

= (unsigned)windowlnfo. 

H s_  r 0 w ; 

□ 

B 

i f 

(!*coLsp  SS 

w i ndoH I n f 0 . H s _ c 0 L !=  0 

) 

n 

B 

B 

* c 0 L s p 

= ( u n s i g n e d ) H i ndo w I n f 0 . 

H s _ c 0 L ; 

□ 

B 

i f 

(*rowsp  SS  * 

C 0 1 s p ) 

□ 

B 

B 

return; 

Q 

} 

#eLif  def ined(TIOCGSIZE) 

n if  ( i o c t L ( f i I e n o ( s t d e r r ) , TIOCGSIZE,  Swindowlnfo)  !=  -1)  { 


B 

B 

i f 

( ! *roHsp  SS 

H i n d OH  I n f 0 . t s_ L i n e s !=  0) 

B 

B 

B 

* r 0 w s p 

= ( u n s i g n ed ) H i n do w I n f o . t s _ 

Lines; 

B 

B 

i f 

(!*coLsp  SS 

w i ndoH I n f 0 . t s _ c o L s !=  0) 

B 

B 

B 

*co  L sp 

= ( uns i gned ) w i ndowl n f 0 . t s_ 

CO  L s; 

B 

B 

i f 

(*roHsp  SS  * 

CO  L sp ) 

B 

B 

B 

return; 

#eLif  def ined(WIOCGETD) 

n if  ( i o c t L ( f i L e n o ( s t d e r r ) , WIOCGETD,  &windowInfo) 

D a 


!=  -1)  { 

if  (!*rowsp  &&  w i ndo w I n f o . u w_h e i g h t !=  0) 

n *rowsp  = w i ndo w I n f o . u w_ h e i g h t / w i n d o w I n f o . u w_v s ; 


#end  i f 


if  (!*coLsp  SS  w i n d ou I n f o . u w_w i d t h !=  0) 

n *coLsp  = w i n d OH  I n f o . u w_w i d t h / w i n do w I n f o . u w_h s ; 

if  (*roHsp  &S  *coLsp) 
a return; 

/*  You  are  in  a twisty  Little  maze  of  standards,  aLL  different  */ 


J 


#ifdef  USE_TERMCAP 

n /*  See  what  t e r m i n f o / t e r m c a p has  to  say  */ 

n if  (!*roHsp  ||  !*coLsp)  { 

n n char  t e r mBu f f e r C T E RMBU F S I Z ] , *termInfo; 


if  ((terminfo  = g e t en v ( " T E RM " ) ) ==  (char  *)NULL) 
n terminfo  = UNKNOWN_TERM; 


if  ( ( t g e t e n t ( t e r mBu f f e r , terminfo)  <=  0)) 
n strcpy(termBuffer,  DUMB_TERMBUF); 


if  (!*roHsp  SS  (t  = tgetnum("Li"))  > 0) 
n n *roHsp  = (unsigned)t; 


if  (!*coLsp  SS  (t  = tgetnum( "co" ) ) > 0) 
n n *coLsp  = (unsigned)t; 


□ 

n 

n 

#endi  f 


if  (*rowsp  SS  *coLsp) 
n return; 


o 
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n 


i f (*rowsp 


sp  ==  0)n  n 

*roHsp  = DEFAULT.ROWS; 
s p ==  0 ) 

*coLsp  = DEFAULT_COLS; 


/*  nothing  worked,  use  defaults  */ 


o 


a 


n 


if  (*coLsp 


c 


a 


a 


} 


/* 

* Clear  the  screen  and  home  the  cursor. 

* Uses  a near-universal  ANSI  sequence,  followed  by  an  attempt  to 

* erase  the  mess  it  would  make  if  it  didn't  work. 

*/ 

void 

s c r ee n C I ea r ( F I L E *f) 

{ 

n fputs("\33:2J\33CH\r  \r",  f); 


> 


c 


c 
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/* 

* pgpScreen.h 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpScreen  . h,v  1.2. 2.1  1 997/06/07  09:52:04  mhw  Exp  $ 

*/ 

#ifdef  __cplusplus 
extern  "C"  { 

#endi  f 

void  screenSizeGetCunsigned  *rowsp,  unsigned  *colsp); 
void  screenClearCFILE  *f); 

#ifdef  __cplusplus 
} 

#e n d i f 
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/* 

* pgpUserlO.c  --  PGP  TTY  user  10  interfaces 

* 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  < wa r L o r dSH I T . E D U>  and  CoLin  PLumb 

* Modified  by  Brett  A.  Thomas  <qua r kSba z . com>  to  use  /dev/random 

•k 

* $Id:  pgpUse r 1 0 . c , V 1.5. 2. 9 1 997/06/09  23:46:40  quark  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


#incLude 

"config.h" 

# e nd i f 

#i nc  Lude 

<ctype . h> 

^include 

<stdio.h> 

(tine  Lude 

<string.h> 

Uii  HAVE, 

,SYS_TIHE_H 

#incLude 

<sys/time.h> 

#if  !TIME 

:_WITH_S YS_TIHE 

#incLude 

<t i me . h> 

# e n d i f 

#end i f 

SincLude 

<sys/types.h> 

#incLude 

<sys/ioctL.h> 

#incLude 

<f ent  L . h> 

#if  HAVE, 

UNISTD_H 

#incLude 

<unistd.h> 

# e nd i f 

#if  HAVE, 

STDARG_H 

#incLude 

<stdarg . h> 

# e nd i f 

#if  HAVE, 

,SYS_STAT_H 

ttincLude 

<sys/stat.h>  /*for 

# e nd i f 

#i nc  Lude 

"pgpDebug.h" 

/tincLude 

"pgpFi LeRef.h" 

/ti  nc  Lude 

"pgpAnnotate.h" 

#incLude 

"pgpESK. h" 

#i nc  Lude 

" pgp  F i L eHod . h " 

/tincLude 

"pgpFixedKey.h" 

ttincLude 

" pgpMem . h " 

^incLude 

"pgpPassCach.h" 

^incLude 

"pgpErr.h" 

ttincLude 

" pgp  F i L e . h " 

#incLude 

"pgpMsg  . h" 

#incLude 

"pgpUI . h" 

^incLude 

"pgpPipeLine.h" 

/tincLude 

"pgpPubKey. h" 

#i nc  Lude 

"pgpRndPooL  .h" 

#incLude 

"pgpRngPub. h" 

^incLude 

"pgpRngRead.h" 

state) 


to  check  for  / d e v / r a ndom* / 
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#incLude 
^include 
# i n c L u d e 
#i nc  Lude 
#incLude 
#i nc  L ude 
^include 
#incLude 
#i nc  Lude 


pgpSi g . h" 
pgpTimeDate.h 
pgpUsuals.h" 
pgpEnv. h" 
pgpKB. h" 
pgpUserlO. h" 
pgpRingUI.h" 
pgpMoreMod. h" 
pgpTypes . h" 


/*  Filename  for  dumping  data  we  don't  want  to  keep  */ 

#ifdef  MSDOS 

#define  NULLNAME  "NUL" 

# e L s e 

#define  NULLNAME  "/dev/nuLL" 

#end  i f 


static  unsigned 

pg p D e V Ra ndom A c c urn ( i n t fd,  unsigned  count); 
static  Boo  Lean 

C h e c k D e V Ra ndom ( c h a r **Ra n dom D e v i c e , PgpTtyUI  *ui); 
static  Boolean 

VerifyRandomDevOSVersionCvoid); 

/* 

* Get  a string  from  the  keyboard  into  the  supplied  buffer. 

* If  echo  is  non-NULL,  echoes  the  typed  input  to  that  FILE  *. 

* Otherwise  prints  nothing  (and  beeps  go  to  stderr). 

* Returns  the  number  of  characters  read  (always  <=  len-1). 

*/ 

i nt 

pgpT t yGe t S t r i ng ( c ha r *buf,  int  Len,  FILE  *echo) 

{ 

a i nt  c ; 

n intn=0; 


n kbCbreak(); 

#ifdef  MACINTOSH 


n echo  = NULL;n  /*  XXX:  For  now,  the  Mac  version  echoes  by  itself 

Send  i f 


n 

for 

(;;)  { 

n 

B 

i f 

(echo) 

n 

B 

B 

fflush(echo); 

n 

B 

C = 

kbGet(); 

Q 

B 

1 f 

(c  ==  '\r'  II 

c ==  ' \n  ' ) { 

n 

B 

B 

c = '\n' 

r 

n 

B 

B 

break; 

B 

B 

> e 

Ise  if  (c  == 

' \b ' II  c ==  7 

II  c ==  127)  { 

B 

B 

B 

if  ( n > 

0)  { 

B 

B 

B 

D 

n — ; 

B 

B 

B 

Q 

if  (echo) 

B 

fl 

B 

n 

n f pu  t s ( ' 

'\b  \b",  echo); 

B 

B 

B 

} else 

B 

B 

B 

n 

fputc('\a',  echo  ? echo  : stderr); 

*/ 
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n 

n 

> 

else 

o 

A 

o 

> 

256)  { 

n 

n 

□ 

fputc('\a',  echo 

7 

echo  : 

stderr); 

n 

□ 

> 

else 

if  (n  + 1 >=  len) 

n 

□ 

n 

f putc( ' \a ' , echo 

7 

echo  : 

stderr); 

n 

n 

D 

kbFlush(0); 

n 

n 

> 

else 

{ 

Q 

n 

Q 

if  (echo) 

n 

Q 

n 

n fputc(c. 

echo); 

n 

Q 

n 

bufCn++D  = (char)c 

r 

n 

n 

> 

n 

> 

n 

if  (echo) 

{ 

a 

D 

f pu  t c ( ' 

'\n',  echo); 

n 

□ 

fflush(echo); 

Q 

} 

n 

bu f C n ] = 

1 

' \0  ' ; 

n 

kbNorm( ) 

/ 

o 

return  n 

/ 

> 

/* 

* Prompts  the  user  for  Y or  N (case  insensitive),  and  returns 

* the  appropriate  boolean  value.  If  nothing  is  entered,  <def> 

* is  returned.  This  assumes  that  a prompt  has  already  been  printed. 
*/ 

i n t 

pg pT t y G e t Boo  I ( i n t def,  FILE  *echo) 

{ 


n 

char 

buf C2: 

n 

□ 

for 

(;;)  { 

Q 

B 

i f 

(pgpTtyGetString(buf 

, si zeof 

(buf ) , echo) 

Q 

B 

Q 

return 

def; 

□ 

B 

swi tch  (buf C0D ) 

{ 

n 

B 

B 

case  ' y 

1 . 

Q 

B 

B 

case  ' Y 

1 . 

□ 

B 

B 

n 

return 

1; 

□ 

B 

B 

case  ' n 

I . 

n 

B 

fl 

case  ' N 

' : 

n 

B 

B 

□ 

return 

0; 

B 

B 

fl 

default 

: 

B 

fl 

fl 

Q 

break; 

B 

B 

> 

B 

B 

fprintf  (echo. 

■■ 

Invalid  response. 

Please  enter  Y or  N 

[default 

Xc2:  ", 

B 

B 

B 

def  ? ■ 

Y ' : ' N ' 

); 

B 

> 

} 

static  void 

pg  pT  t y Pu  t Key  I D (struct  PgpTtylll  *ui,  byte  const  *keyid) 

{ 

n fprintf  (ui->fp,  " 0x X 2 . 2 X% 2 . 2 X% 2 . 2 X% 2 . 2 X \ n " , 

n n keyidCAD,  keyidCSD,  keyidC6D,  keyidC7D); 

} 

/* 
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* Ask  the  user  for  a filename.  arg  is  the  FILE*  to  use  for  output, 

* string  is  the  default  print  string  that  should  be  used,  filename  is 

* the  default  that  will  be  used.  buffer  is  of  size  buflen,  and  is 

* used  to  store  the  new  filename. 

* 

* returns  the  length  of  the  contents  of  buffer,  which  must  be  a real 

* filename  (trailing  white  space  must  be  stripped)  */ 
static  int 

pg pT t y Need F i I e (void  *arg,  char  const  *string,  char  const  *filename, 
n n char  *buffer,  int  buflen) 

{ 

o struct  PgpTtyUI  *ui  = (struct  PgpTtylll  *)arg; 

n cha  r *p; 

n fprintf  (ui->fp,  string,  (filename  ? filename  : " " ) ) ; 

n fflush  (ui->fp); 

n *buffer='\0'; 

n pgpTtyGetString  (buffer,  buflen,  ui->fp); 

n p = buffer  + strlen(buffer)  - 1; 

n while  (p  >=  buffer  SS  isspace  (*p)) 

n n *p  — = '\  0'; 

n return  (strlen  (buffer)); 

} 


static  void 

pg pT t y S i g Re s u I t (void  *arg,  union  RingObject  *key,  word32  timestamp, 
n n int  status,  char  const  *err) 

{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)  arg; 

n struct  RingSet  const  *set  = ui->ringset; 

n char  t i med a t e C 2 1 D ; 


n pgpTi meSt ri ng  (timestamp,  timedate); 


n /*  Status  tells  us  whether  the  sig  is  good  or  bad.  Must  also  determine 

n if  the  signing  key  is  valid.  */ 


a 

n 

D 

Q 

□ 

n 

Q 

n 

n 

a 

n 

D 

} 


if  (status  > 0)  { 

n fprintf  (ui->fp,  "Good  signature  made  %s  by  key:\n",  timedate); 

n ringKeyPrint  (ui->fp,  set,  key,  1); 

n ringTtyKeyOKToSign  (arg,  set,  key); 

} 

else  if  (status  ==  0)  { 

fprintf  (ui->fp,  "BAD  signature  made  %s  by  key:\n",  timedate); 
n ringKeyPrint  (ui->fp,  set,  key,  1); 

} 

else 

n fprintf  (ui->fp,  "Error  %d  checking  signature:  %s\n", 

n status, err); 


i n t 

pgpT t yGe t Pa s s (void  *arg,  char  *buffer,  int  buflen) 

{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 


CCCHK:7a78818ab3b5228775bb3d6651  1 72 f b 1 da  a 5 5 2 2 2 446636 c f bd83e e0 f 62 d 349988 : D 


1914 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpUserlO.c 


n inti; 

n fprintf  (ui->fp,  "Enter  pass  phrase:  "); 

n fflush  Cui->fp); 

n i = pgpTtyGetString  (buffer,  buflen,  ui->showpass  ? ui->fp  : NULL); 

a fprintf  (ui->fp,  "\n"); 

n fflush  (ui->fp); 

n returni; 

} 


1 n t 


pgpTty DebugCommi t (void  *arg,  int  scope) 
r 

n 

struct 

PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 

a 

char  bufL10D; 

n 

(void)scope; 

n 

fprintf  Cui->fp,  "I  received  a commit  for  a %s  packet.. 

. \ n " , 

n 

□ 

pgpScopeName  (scope)); 

n 

fprintf  (ui->fp,  "Should  I CEDat  it,  CCDontinue 

wi thout 

process 

n 

Q 

"CPDrocess  it,  or  CRDecursively  process 

i t ? \ n> 

"); 

n 

fflush 

(ui->fp); 

n 

if  ( ! pgpTtyGetSt ri ng ( buf , sizeof  (buf),  ui->fp)) 

n 

□ 

return  PG P AN N_ P A R S E R_R EC U RS E ; 

n 

switch 

(*buf)  { 

n 

case  * 

c ' : 

n 

case  ' 

C ' : 

n 

n 

return  PGPANN_PARSER_PASSTHROUGH; 

n 

case  ' 

e ' : 

n 

case  * 

E ' : 

n 

Q 

return  PG P AN N_P AR S E R_E AT  I T ; 

n 

case  ' 

P ' : 

□ 

case  ' 

P ' : 

n 

n 

return  PG P ANN_P A R S E R_PR0 C E S S ; 

n 

default : 

s 

n 

fprintf  (ui->fp,  "Recursively  processing 

. . . \ n") 

r 

n 

n 

/*  PASSTHROUGH  */ 

n 

case  ' 

r ■ : 

Q 

case  ' 

R ' : 

n 

n 

return  PG P AN N_ P A R S E R_REC U R S E ; 

n 

> 

> 

/* 

* 

Responds  to 

a commit  request  depending  on  the  TTY  UI 

membe  r 

"commi ts 

★ 

If  commi ts 

>=  0,  then  it  will  process  that  many  levels  of  scopes. 

★ 

i f commi t s 

< 0,  it  will  always  recurse. 

*/ 

1 n t 

pgpTty DoCommi t (void  *arg,  int  scope) 
{ 


n 

struct 

PgpTtyUI  * 

n 

(void) 

scope; 

Q 

if  (!ui-> commits) 

n n return  PGPANN_PARSER_PASSTHROUGH; 
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n u i -> c ommi t s 

n return  PG P ANN_P A RS E R_R E C U R S E ; 

> 


/* 

* Performs  an  accumulation  of  random  bits.  As  Long  as  there  are 

* fewer  bits  in  the  buffer  than  are  needed,  prompt  for  more. 

* (kbGet  is  known  to  call  pg p Ra n d Poo L Key s t r o ke ( ) which  increments 

* t rueRandBi ts . ) 

*/ 

void 

pgpTtyRandAccum  (void  *arg,  unsigned  count) 

/*  Get  this  many  random  bits  ready  */ 

{ 

a struct  PgpTtylll  *ui  = (struct  PgpTtyUI  *)arg; 

word32  randbits  = pgpRandPoolEntropy  (); 
n Boolean  HasDevRandom  = FALSE,  UseDevRandom  = TRUE; 

a char  *R a n d omD e v i c e = NULL; 

a int  fdDevRandom  = -1,  fdKB  = -1,  LargestFD  = -1,  SelectReturn  = 0; 

a fd_set  A I L D e V i c e s S e t ; 

if  (count  > ( un s i g ned ) pgpRa nd Poo L S i ze  ()) 
count  = pgpRandPoo L S i ze  (); 

if  (randbits  >=  count) 
return; 

a /*0pen  the  keyboard  so  that  we  can  do  a select  on  it:*/ 

a fdKB  = kb0penKbd(0_RD0NLY);  /*Can't  fail*/ 

a FD_SET(fdKB,  SALLDevicesSet); 

a LargestFD  = fdKB; 


Q 

a 

a 

□ 

a 

n 

□ 

a 

a 

Q 

a 

a 

a 


i f ( ( Ha s De V Ra ndom  = C h e c kDe vRa nd om ( S Ra ndom D e v i c e , ui)))  f 
/* 

*XXX  Need  to  add  support  for  F o r c e R a ndomD e v i c e to  pgp.cfg. 
*/ 

i f ( Ve r i f y Ra n domD e vO S Ve r s i on ( ) ) { 
a i f ( ( f d De vRa ndom  = open ( Ra ndomDe v i c e , 0_RD0NLY))  >=  0)  { 

a F D_S ET ( f d D e V Ra ndom,  & A L I De v i c e s S e t ) ; 

a i f ( f dDevRa ndom  > LargestFD) 

a a LargestFD  = fdDevRandom; 

a HasDevRandom  = TRUE; 

a } 

a else 

a HasDevRandom  = FALSE; 


} 

else  { 

a UseDevRandom  = FALSE; 

} 

> 


a i f ( Ha s De vRandom)  { 

a i f ( U s e D e V Ra nd om ) { 

a a fprintf  (ui->fp,  "\n\ 

We  need  to  generate  Zu  random  bits.  This  is  done  by  reading\n\ 

Zs.  Depending  on  your  system,  you  may  be  abLe\n\ 

to  speed  this  process  by  typing  on  your  keyboard  and/or  moving  your  mouse. \n", 
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nun  count  - Crandbits),  Ra n d omDe v i c e ) ; 

n > 

n e L se  { 

n n f p r i n t f ( u i ->f p,  "\n\ 

/dev/random  detected;  however,  on  Linux  kernel  versions  < 1.3.33,  it  is  not\n\ 
cryptographically  usable.  If  you  wish  to  use  / d e v / r a nd om  as  an  entropy\n\ 
source,  it  is  recommended  that  you  upgrade  your  kernel  version.  If  you  feel\n\ 
that  you  received  this  message  in  error,  add  F o r c e Ra ndomD e v i c e=1  to  your\n\ 
pgp.cfg  file,  but  be  warned  that  by  doing  so  without  know  what  you  are\n\ 
doing,  you  could  compromise  the  security  of  your  key.\n"); 
n > 

n } 

n 

n i f ( ! H a s D e vRa n d om  ||  ! U s e D e v Ra ndom ) { 

n fprintf  (ui->fp,  "\n\ 

We  need  to  generate  %u  random  bits.  This  is  done  by  measuring  the\n\ 
time  intervals  between  your  keystrokes.  Please  enter  some  random  text\n\ 
on  your  keyboard  until  you  hear  the  beep:\n",  count  - (randbits)); 


kbCbreak  (); 
do  { 

/*  display  counter  to  show  progress  */ 

fprintf  (ui->fp,  "\r%4u  ",  count-(unsigned)(randbits)); 
fflush  (ui->fp);  /*  ensure  screen  update  */ 

FD_ZER0(8AllDevicesSet); 

FD_SET(fdKB,  SAllDevicesSet); 

i f C H a s D e V Ra nd om  S&  UseDevRandom  &&  fdDevRandom  >=  0)  { 
n F D_ S ET ( f d D e V Ra n d om,  8 A I I D e v i c e s S e t ) ; 

> 


D 


kbFlush  (0);  /*  Typeahead  is  illegal  */ 


n SelectReturn= 

n n s e I e c t C La r g e s t F D + 1,  8 A I I D e v i c e s S e t , NULL,  NULL,  NULL); 


□ 

n 

n 

n 

0 

0 

0 

0 

o 

0 

0 

0 


/*If  the  waiting  input  is  on  stdin,  or  there  was  some  kind  of 
*error,  grab  input  from  the  keyboard: 

*/ 

i f ( S e I e c t R e t u r n < 0 | | 

( Se  I e c t Re t u rn  >=  0 88  F D_ I S S ET ( f d KB , 8 A I I D e v i c e s S e t ) ) ) { 

0 (void)kbGet  ();  /*  Wait  for  next  char  */ 

o > 

else  { /*The  waiting  data  is  in  / d e v / r a nd om* / 

0 pg p D e V Ra n dom A c c urn ( f d D e vRa n d om,  1); 

} 

fputc  ( pg p Ra nd Poo  I En t r o py  ()  ==  randbits  ? '?'  : ui->fp); 

randbits  = pgpRandPoolEntropy  (); 


> while  (randbits  < count); 


/*  Do  final  display  update  */ 
fputs  ("\r  0 *",  ui->fp); 

fputs  ("\a  -Enough,  thank  you.\n",  ui->fp); 
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/*  Do  an  extra-thorough  flush  to  absorb  extra  typing.  */ 
kbFlush  (1); 

kbNo  rm  ( ) ; 

n if(RandomDevice)  -C 

Q pgpFree(RandomDevice); 

n > 

n i f ( f dDevRandom  >=  0)  { 

n c L o s e ( f d D e vRa n d om ) ; 

n > 


n kb C L o s e Kbd ( f d KB ) ; /*Doesn't  close  if  we're  on  stdin*/ 

> 


i nt 

pgpTtyDebugAnnotate  (void  *arg,  struct  PgpPipeline  *origin,  int  type. 


Q 

u 

byte  const 

*string,  size.t  size) 

n 

struct 

PgpT  tyUI 

*ui  = (struct  PgpTtyUI  *)arg; 

n 

int  i ; 

Q 

char  bufC30!l; 

n 

memset 

( buf , 0, 

sizeof(buf)); 

n 

0 

memc  py 

(buf,  string,  min 

(size,  s i zeof ( buf  ) -1  ) ) ; 

n 

for  ( i 

= 0 ; i < 

(int)min(size,  sizeof(buf)-l);  i++) 

n 

n 

if  ( I i sp r i n t ( bu f C i ] & 255  )) 

s 

n 

n 

bufCi:  = 

1 1 . 

• f 

n 

if  (PGP 

_IS_SC0PE 

.MARKER 

( type  ) ) { 

n 

n 

if  (PGP. 

IS.BEGIN 

.SCOPE  (type)) 

n 

n 

n 

fprintf 

( u i ->f  p. 

n 

n 

o 

" Be g i n 

%s  scope  from  module  %p  (%s)\n\n". 

n 

n 

n 

a 

pgpScopeName  (type),  type,  (void  *)origin. 

n 

n 

Q 

a 

0 r i g i n->name ) ; 

n 

Q 

else 

n 

n 

n 

fprintf 

(ui ->f p. 

u 

n 

n 

n 

"End  %s  scope  (%#x)  from  module  %p  (%s)\n\n". 

u 

n 

n 

Q 

pgpScopeName  (type-1),  type. 

n 

Q 

Q 

□ 

(void  *)origin,  o r i g i n->name ) ; 

Q 

> else 

n 

n 

fprintf 

( u i ->f  p , 

n 

n 

n 

"Received  annotation  type  %#x,  size  %d,  \"%s\"\n". 

n 

n 

n 

type,  size,  buf); 

n 

n 

f pri ntf 

(ui->fp. 

a 

n 

n 

"from  module  %p  (%s)\n\n”,  (void  *)origin. 

n n n o r i g i n->nane ) ; 

n > 


n 

n 

a 

n 

□ 

n 

Q 


switch  (type)  { 

case  PGPANN_NONPACKET_BEGIN  : 

n fprintf  (ui->fp,  "This  is  not  a packet!"); 

n if(size) 

n n fprintf  (ui->fp,  " \"%s\"",  buf); 

n fprintf  (ui->fp,  "\n"); 

n break; 
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case  PGPANN_UNKNOWN_BEGIN  : 

n fprintf  (ui->fp,  "Unknown  Packet  Type"); 

a i f ( s i z e ) 

n n fprintf  (ui->fp,  " *string); 

n fprintf  (ui->fp,  "\n"); 

n break; 

case  PGPANN_SIGNED_SIG : 

n fprintf  (ui->fp,  "This  is  a signed  me s s a g e . \ n " ) ; 

a break; 

case  PGPANN_SKCIPHER_ESK: 

case  PGPANN  PKCIPHER  ESK: 


a 

n 

fprintf  (ui->fp. 

"This 

message 

is  encrypted. 

\ n " ) ; 

u 

D 

break; 

n 

case 

PGPANN_HASH_VALUE : 

#if  0 

n 

n 

fprintf  (ui->fp. 

"Got  a 

hash;") 

r 

u 

n 

if  (size)  { 

n 

n 

n f 0 r ( i = 

0 ; i < 

size;  i 

++) 

n 

n 

D □ 

fprintf 

( u i ->f  p 

, " %02x",  stringC 

i]); 

n 

n 

n fprintf 

( u i ->f  p 

, "\n"); 

n 

n 

} else 

n 

n 

n fprintf 

( u i ->f  p 

, "Null? 

huh?\n"); 

#endi f 

n 

n 

break; 

a 

case 

PGPANN_LITERAL_TYPE 

: 

n 

n 

if  (Isize) 

u 

n 

n fprintf 

( u i ->  f p 

, "Got  a 

type  wi thout 

any 

data 

n 

n 

break; 

n 

case 

PGPANN_LITERAL_NAHE 

; 

n 

B 

if  (Isize) 

s 

B 

n fprintf 

( u i ->f  p 

, "Got  a 

name  without 

any 

data 

o 

B 

break; 

return  0; 


i nt 

pg pT t y N e ed I n pu t (void  *arg,  struct  PgpPipeline  *head) 

{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)  arg; 

n struct  PgpFiLeRead  *fiLeread; 

n FILE  *f i Le  = NULL; 

n unsigned  i,  err; 

n char  namebufn2563,  suggested_nameC256]; 


if  (pgpenvGetInt  (ui->env,  PG P E N V_B AT C H HO D E , NULL,  NULL))  ( 
n if  (ui->outname  S& 

n (file  = fopen  ( u i ->ou t na me , "rb"))  !=  NULL)  ( 

n n ui->outname=NULL; 

n > e L se  { 

n n fprintf  (ui->fp, 

n n n "Cannot  request  input  file  in  ba t c h mod e \ n " ) ; 

n n return  PGPERR_NO_FILE; 

n } 

} else  ( 

n if  ( u i ->ou t n a me ) ( 
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n 

B 

B 

strncpy  ( s ug g e s t e d_n a me , ui->outname. 

n 

B 

B 

B 

si zeof(suggested_name) ) ; 

a 

fl 

> 

else  -C 

n 

B 

B 

s ug g e s t ed_n a me C 0 5 = '\0'; 

n 

B 

> 

n 

B 

for  (;;)  { 

u 

B 

B 

i = 

: pgpT t y Need F i L e (arg. 

n 

B 

B 

B 

"File  to  check  signature  against  C%sD: 

/ 

B 

B 

B 

B 

s ug g e s t ed_na me , namebuf,  si zeof (namebuf  ) ) 

B 

B 

B 

i f 

( ! i ) { 

B 

B 

B 

fl 

if  ( s ug g e s t e d _n ame C 0 3 ) 

B 

B 

B 

B 

a strcpy  (namebuf,  s ug g e s t e d_n a me ) ; 

B 

B 

B 

B 

else 

B 

B 

B 

fl 

n return  PG P E R R_N 0_ F I LE ; 

B 

B 

B 

> 

B 

B 

B 

file  = fopen  (namebuf,  "rb"); 

B 

B 

B 

i f 

( f i 1 e ) 

B 

B 

B 

fl 

break; 

B 

B 

B 

fprintf  (ui->fp,  "Unable  to  open  file  \"%s\"\n". 

B 

B 

B 

B 

namebuf); 

B 

B 

B 

suggested_name[!0]  = 0; 

B 

B 

> 

B 

B 

/* 

Only  use 

ui->outname  once  */ 

B 

B 

i f 

( s t r c mp 

(namebuf,  ui->outname)  ==  0) 

B 

B 

fl 

u i - 

>outname  = NULL; 

B 

> 

c 

n 

n 

□ 

□ 

Q 


fiLeread  = pgpFiLeReadCreate  (file,  1); 
if  C!fileread)  { 

n fprintf  (ui->fp,  "Unable  to  create  file  read  mod u L e . \ n " ) ; 

n fcLose(fiLe); 

n return  PGPERR_NOMEH; 

> 


n err  = pgpFiLeReadPump  (fiLeread,  head); 

n pgpFiLeReadDestroy  (fiLeread); 

n return  err; 

} 


struct 

o 

n 

a 

n 

>; 


CLoseUI  t 

struct  PgpTtyUI  *ui; 

struct  PgpPipeLine  **output;  /*  No  Longer  used  */ 
int  cLosing;n  n /*  No  Longer  used  */ 

PGPFiLeRef  *tmpFiLeRef; 


static  int 

Do C L o s e Ke yAd d (FILE  *file,  void  *arg) 

{ 

a struct  CLoseUI  *ui  = (struct  CLoseUI  *)arg; 

n intcode=0; 


n if  (fcLose  (file)  !=  0)  ■( 

a a /*  Error  closing  file  */ 

n n perror  ("closing  temp  keyring  file"); 

n } else  if  ( u i -> t mp F i L e Re f !=  NULL)  ( 

n n char  *fiLename  = pg pG e t F i L e Re f N a me  ( u i -> t mp F i L e R e f ) ; 
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n 

n 

n 

Q 

n 

□ 

n 


□ 

n 

n 

□ 

Q 

a 

> 


if  (filename  ==  NULL)  { 
n code  = PG PE R R_N0M E M ; 

> else  { 

n code  = u i ->u i ->a d dKey s (ui->ui,  filename); 

n pgpFree  (filename); 

> 


n if  ( u i -> t mp F i I e Re f !=  NULL)  { 

n n pg p D e I e t e F i I e ( u i ->  t mp  F i I e Re  f ) ; 

n n pg p F re e F i I e R e f ( u i -> t mp F i L e R e f ) ; 

n } 

n pgpHemFree  (ui); 

n return  code; 

} 


#ifndef  N0_P0PEN 


static  int 

DoClose  (FILE  *file,  void  *arg) 

{ 

n struct  CloseUI  *ui  = (struct  CloseUI  *)arg; 

n intcode; 

n code  = pclose  (file); 

n fputs  ( " \ nDone . . . h i t any  key\n",  ui->ui->fp); 

n kbCbreak(); 

n kbGet ( ) ; 

n kbNorm(); 

a fputs  ("\n",  ui->ui->fp); 

n /*  XXX:  Ask  to  save  the  file  (if  possible)??  How?  */ 


n i f ( ! code  ) { 

n n pgpHemFree  (ui); 

n } 


a return  code; 

} 


#endif  /*  ifndef  N0_P0PEN  */ 


#ifndef  NO.POPEN 
static  FILE  * 

openPager  (struct  PgpTtyUI  const  *ui) 

{ 

n char  const  *pager  = "more"; 

n if  (ui->pager) 

a n pager  = ui->pager; 

n return  popen  (pager,  "w"); 

} 

#endif  /*  ifndef  N0_P0PEN  */ 


CCCHK:d654b75581bc024477b57fdd99fecb12223332aafffcc7ad8828893322d2f9d72:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1921 


pgpUserlO.c 


i nt 

pgpTtyNewOutput  (void  *arg,  struct  PgpPipeLine  **output,  int  type, 
n ° char  const  * s u g g e s t e d_ na me ) 

{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 

n struct  PgpFiLe  *pgpf; 

n struct  CLoseUI  *cui; 

n char  const  *name; 

n char  bufferC64Il; 

n int  Len,  morefLag  = 0,  use_stdout  = 0,  nuLLfLag  = 0; 

a FILE  *fp  = NULL;n  /*  Initialized  to  shut  up  the  compiler  */ 

n 


n if  (loutput) 

n n return  PG P E R R_B A D P A R AM ; 


n name  = u i ->ou t na me ; n /*  assume  the  name  passed  in  */ 


a 

a 

n 

□ 

n 

□ 

n 

Q 

n 


/*  Send  non-pgp  portion  to  the  bit  bucket,  for  compat  with  old. 

* this  will  get  overridden  below  if  we  are  in  filter  mode, 

* e.g.  ui ->protect_name  ==  -1. 

*/ 

if  (type  ==  PGPANN_NONPGP_BEGIN)  C 
n name  = NULLNAME; 

n type  = PG P_ LI T E R A L_T E XT ; 

n nullflag=1; 

> 


Q 

D 

□ 

#if  0 

Q 

B 

B 

B 

#endi f 


if  ( type  < 0 ) 
n fprintf  (stderr, 

“ n "pgpTtyNewOutput:  uninitialized  type\n"); 

/*  For  debugging,  describe  what  scope  we  are  in  */ 
if  (type  > 255  S&  type  !=  PG P ANN_ PG PKE Y_B EG  I N ) 

n fprintf  (stderr,  "pgpTtyNewOutput:  type  is  scope:  %d  (%s)\n", 

n B type,  pgpScopeName  (type)); 


n if  (type  >=  0 S&  type  < 256  S&  type  !=  PG P_ L I T E R A L_T EXT  S& 

n type  !=  PG P_ LI T E R A L_B I N A R Y ) 

n B fprintf  (stderr, 

"pgpTtyNewOutput:  type  is  a literal  type,  but  not  \'t\'  or  \'b\':  %c  (%d)\n", 
B B B (byte)type,type),- 


/*  if  we  want  to  use  the  name  from  the  literal  packet...  */ 
if  ( ui ->protect_name  > 0 88  s u g g e s t e d_na me  88 
strcmp  ( sugges t ed_name , "stdin")) 
n name  = s ug g e s t e d_n a me ; 


/*  Filter  Mode  */ 
if  ( ui ->protect_name  < 0)  { 
n name  = "stdout"; 

n use_stdout++; 

> 


/*  Check  for  "for  your  eyes  only"  mode  */ 
if  (/*type  ==  PGP_LITERAL_TEXT  88  */ 

((suggested_name  88  Istrcmp  (suggested_name,  "_C0NS0LE")) 
I I ui->moreflag)){ 
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n n /*  output  to  pager  */ 

n n name  = "_C0NS0LE"; 

n H mo  r e f I a g + + ; 

n > 

a /*  XXX:  If  suggested_name  is  _C0NS0LE,  ask  the  user  whether  to  show  */ 


□ 

n 

u 

n 

u 

n 

a 

n 

n 

n 


i f 

n 

n 

n 

n 

n 

n 

Q 

Q 


(type  ==  PGPANN_PGPKEY_BE6IN  &&  ui->addKeys)  -C 
/*  we  have  a means  to  add  keys..  Use  it  */ 
if  ( ! u i ->  c omm  i t s ) ■( 

n /*  Just  dearmor  key  file  */ 

n type  = PG P_ LI T E R A L_B I N A R Y ; 

> else  -C 

n name  = "Temporary  PGP  KeyfiLe";/*  won't  be  used  */ 

n moref  Lag  + +; 

> 


> 


n 

□ 

n 

Q 

□ 

n 

D 

n 

n 

D 

Q 

D 

n 

Q 

n 


/* 


wh 

n 


a 

a 

a 

n 

□ 

n 

n 

□ 

Q 


If  all  else  fails,  ask  the  user  where  to  store  the  file. 

If  batchmode,  use  the  suggested  name  if  available,  else 
give  up.  */ 

le  Clname  ||  (Imoreflag  &&  !use_stdout  &&  Inullflag  && 
n pg pT t y C h e c kO ve r w r i t e ( a r g , name)))  { 

if  (pgpenvGetInt  (ui->env,  PGPENV.BATCHMODE,  NULL,  NULL))  i 
if  ( s ug g e s t ed_name ) 
n I e n = 0 ; 

n else 

n return  PGPERR_NO_FILE; 

> 

else 

len  = pgpT t y Need F i I e (arg, 

n n "Where  should  I save  this  file?  C%s]  ", 

n n suggested_name,  buffer,  sizeof  (buffer)); 


n 

a 

i f 

(Len) 

o 

a 

a 

name  = buffer; 

n 

a 

else 

n 

a 

a 

name  = s ug g e s t ed_na me ; 

n 

u 

> 

n 

i f 

(ImorefLag  &&  !use_stdout  S8  JnuLLfLag)  { 

a 

a 

/* 

Don't  print  this  out  if  we're  using  the 

pager  or  stdout  */ 

n 

a 

if 

( ! type ) { 

n 

a 

a 

fprintf  (ui->fp. 

Q 

a 

a 

"Unknown  file  type  (cLearsigned?) 

Assuming  textVn"); 

n 

a 

a 

type  = PGP_LITERAL_TEXT; 

a 

a 

> 

a 

a 

fprintf  (ui->fp. 

a 

a 

a 

"Opening  file  \"%s\"  type  %s.\n". 

name. 

a 

a 

a 

type  ==  PGP_LITERAL_TEXT  ? "text" 

: "binary"); 

a 

a 

> 

a 

i f 

(!  *output  1 1 morefLag  | | use_stdout)  t 

a 

a 

i f 

(Imoreflag)  { 

a 

a 

a 

i f (use_stdout ) 

a 

a 

a 

n fp=stdout; 

a 

a 

a 

else  { 

a 

a 

a 

fp  = fopen  (name,  type  ==  PGP_ 

LITERAL_TEXT  ? 

a 

a 

a 

n n "w"  : "wb"); 
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n 

B 

B 

n 

B 

B 

□ 

B 

B 

n 

B 

B 

n 

B 

B 

a 

B 

B 

n 

B 

B 

a 

B 

B 

n 

B 

} 

n 

B 

n 

B 

i f 

n 

B 

B 

n 

B 

B 

o 

B 

B 

a 

B 

B 

a 

B 

B 

a 

B 

B 

a 

B 

B 

a 

B 

B 

n 

B 

B 

a 

B 

> 

n 

B 

i f 

a 

B 

B 

n 

B 

B 

□ 

B 

B 

n 

B 

B 

Q 

B 

B 

a 

B 

B 

a 

B 

B 

a 

B 

B 

n 

B 

B 

n 

B 

> e 

# i f d e f 

N0_P0PEN 

n 

B 

B 

n 

B 

B 

Q 

B 

B 

n 

B 

B 

n 

B 

B 

tfei.se 

n 

B 

B 

n 

B 

B 

n 

B 

B 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

# e n d i f 

B 

B 

> e 

/*  Only  use  name  from  UI  once  */ 
if  (name  ==  ui->outname) 
ui->outname  = NULL; 


if  ( ! f p)  { 

n /*  XXX:  Try  to  re-open  file?  */ 

a return  PGPERR_NO_FILE; 

> 


i n t r e t ; 

ret  = (*output)->sizeAdvise  (*output,  0); 
if  (ret) 

n fprintf  (stderr, 

n n "Error  closing  old  file:  %d\n",  ret); 

/*  *output  can  be  reset  from  under  us  in  cLose()  */ 
if  (*output) 

n ( *ou t pu t ) -> t ea rdown  (*output); 

♦output  = NULL; 


if  (type  ==  PGPANN_PGPKEY_BEGIN  &&  ui->addKeys)  { 

PGPError  ret; 

cui  = (struct  CLoseUI  * ) pg pHem A L L o c (sizeof  (*cui)); 
if  ( ! c u i ) 

n return  PGPERR_NOHEM; 

cui->ui  = ui; 

fp  = pgpS t d I OOpenTemp F i I e ( 8cu i -> t mp F i L eRef , &ret); 
if  ( ! f p ) 

n return  ret; 

pgpf  = pgp F i L eP ro c W r i t eOpen  (fp,  DoC L oseKeyAdd,  cui); 

} else  if  (moreflag)  { 

if  ( ! pg pMo r eModC r ea t e ( ou t pu t ) ) { 
a return  PG P E R R_N OM EH ; 

> 

fputs  ( " \ n P L a i n t e X t message  f o L I ows . . . \ n \ 

\n\n",  ui->fp); 

return  0; 


cui  = (struct  CLoseUI  * ) pgpHemA L I oc  (sizeof  (*cui)); 
if  ( ! c u i ) 

n return  PGPERR_NOHEH; 

cui->ui  = ui; 
cui->tmpFiLeRef  = NULL; 

pgpf  = pg p F i L e P r o c W r i t eOp e n (openPager  (ui),  DoCLose, 
n n n c u i ) ; 

if  ( pgpf ) 

n fputs  ( " \ n P L a i n t e X t message  f o L L o w s . . . \ n \ 

\n\n",  ui->fp); 
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pgpf  = pg p F i L e W r i t e Op en  (fp,  NULL); 


n 

n 

n 

if  (!pgpf  &S  ! 

use_stdout ) 

n 

a 

n 

n f c L ose 

(fp); 

n 

tt 

> 

n 

a 

1 f 

( ! pgpf ) 

n 

n 

n 

return  PGPERR_ 

NOMEM; 

n 

n 

i f 

( ! pgp F i L e W r i t e C r ea t e (output,  pgpf. 

Q 

n 

n 

□ □ 

(use_stdout  &&  ImorefLag)  ? 0 

Q 

n 

n 

return  PGPERR_ 

NOMEM; 

n 

□ 

> 

n 

n 

return 

0; 

n 

n 

/* 

XXX  : 

How  do  we  save 

the  data  in 

case  the  user  wants 

n 

n 

★ 

save 

it  to  a file  and  moreflag  i 

s set  and  the  name 

n 

n 

* 

i s n ' 

t _C0NS0LE? 

n 

Q 

★ 

/ 

a 

> else 

{ 

n 

n 

/* 

Only 

use  name  f rom 

UI  once  */ 

n 

n 

i f 

(name  ==  ui->outname) 

n 

□ 

□ 

ui->outname  = 

NULL; 

Q 

□ 

return 

(*output )->annotate  (*output 

, *output. 

□ 

Q 

n 

n n 

PGPANN_ 

NEWFILE_START, 

n 

a 

□ 

n n 

(byte  const  *)name. 

Q 

n 

n 

n B 

s t r L e n 

(name)); 

1 n t 

pgpT t yMe s sageO L d (void  *arg,  int  type,  int  msg,  unsigned  numargs, 
{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 

n struct  PgpUICbArg  const  *msgarg; 

va_List  ap; 


if  (type  > ui->verbose) 
n returnO; 


B 

put  c ( 

' ' , ui 

->f p) ; 

B 

va_start  (ap. 

numa  rg  s ) ; 

B 

while 

(numargs — ) ( 

B 

B 

msgarg  = va_arg 

(ap,  struct  PgpUICbArg  const  *); 

B 

B 

switch  (msgarg- 

>type)  { 

B 

B 

case 

PGP_UI_ARG 

_INT  : 

B 

B 

B 

f pri ntf 

( u i ->f p. 

"%d",  msga rg->va L . i ) ; 

B 

B 

B 

break; 

B 

B 

case 

PGP_UI_ARG 

_UNSIGNED 

B 

B 

B 

f p r i n t f 

( ui ->f p. 

"%u",  msga rg->va L . u ) ; 

B 

B 

B 

break; 

B 

B 

case 

PGP_UI_ARG 

_W0RD32 : 

B 

B 

B 

f p r i n t f 

( u i ->f  p. 

"%  Lu", 

B 

B 

B 

D 

□ 

(unsigned  L ong ) ms ga r g->va L 

B 

B 

B 

break; 

B 

B 

case 

PGP_UI_ARG 

.STRING : 

B 

B 

B 

f pri ntf 

(ui ->f p. 

"\"%s\"",  msgarg->vaL.s); 

B 

B 

B 

break; 

B 

B 

case 

PGP_UI_ARG 

.BUFFER: 
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n 

n 

n 

fprintf 

(ui->fp,  "\"%.*s\"",  ( i n t ) msga rg->va 1 . bu f . L en , 

□ 

n 

n 

□ 

msgarg->vaL.buf.buf); 

n 

□ 

n 

break; 

n n > 

n > 

n fprintf  (ui->fp,  "\n"); 

n returnO; 

} 

/*  Assumes  the  message  string  is  in  printf  format  */ 
i nt 

pg pT t y M e s s a g e (void  *arg,  int  type,  int  msg,  unsigned  numargs,  ...) 
{ 


n 

struct 

PgpTtyUI  *ui  = (struct  PgpTtylll  *)arg; 

a 

struct 

PgpUICbArg  const  *msgarg; 

□ 

char  const  *string,  *ptr; 

va_ 

list  a p ; 

Q 

i f 

(type  > ui- 

>ve  rbose ) 

n 

B 

return 

0; 

n 

string 

= pgpmsgString  (msg); 

n 

va_ 

start  (ap. 

numargs); 

n 

while 

( ( pt  r = 

s t r c h r ( s t r i ng , '%'))  !=  NULL)  { 

n 

B 

/*  Print  part  of  string  leading  up  to  % */ 

n 

B 

f w r i t e 

(string,  1,  ptr-string,  ui->fp); 

n 

B 

if  (*++ptr  ==  '%')  { 

D 

B 

B 

putc  ('%',  ui->fp); 

n 

B 

fl 

string  = ptr+1; 

n 

B 

fl 

continue; 

a 

B 

> 

Q 

B 

pgpAssert  (numargs — ); 

n 

B 

msga  rg 

= va_arg  (ap,  struct  PgpUICbArg  const  *); 

n 

B 

swi tch 

( *pt  r + + ) { 

□ 

fl 

case  ' 

d ' : /*  int  */ 

n 

B 

fl 

pgpAssert  (msgarg->type  ==  PGP_UI_ARG_INT); 

n 

B 

fl 

fprintf  (ui->fp,  "%d",  msga rg->va  1 . i ) ; 

n 

B 

n 

break; 

o 

fl 

case  * 

1':  /*  unsigned  long  (word32)  */ 

n 

fl 

fl 

pg p As s e r t ( * p t r ==  'u'); 

n 

fl 

fl 

ptr++; 

n 

fl 

fl 

pgpAssert  (msgarg->type  ==  PGP_UI_ARG_W0RD32); 

Q 

fl 

fl 

fprintf  (ui->fp,  "%lu". 

Q 

fl 

□ 

n n (unsigned  1 ong ) msg a r g-> va 1 . w32 ) ; 

D 

B 

fl 

break; 

S 

fl 

case  * 

u':  /*  unsigned  */ 

n 

B 

fl 

pgpAssert  (msgarg->type  ==  PGP_UI_ARG_UNSIGNED); 

n 

fl 

fl 

fprintf  (ui->fp,  "%u",  msga rg->va 1 . u ) ; 

n 

B 

fl 

break; 

n 

B 

case  * 

s':  /*  string  */ 

n 

fl 

n 

pgpAssert  (msga rg->type  ==  PG P_U I _ A RG_S T R I N G ) ; 

n 

fl 

fl 

fprintf  (ui->fp,  "%s",  msga rg->va  1 . s ) ; 

B 

fl 

fl 

break; 

B 

fl 

case  * 

. ' : /*  buffer  (%.*s)  */ 

n 

fl 

fl 

pgpAssert  (*ptr  ==  '*'  SS  ptrCi:  ==  's'); 
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□ 

n 

n 

n 

n 

n 

a 

n 

n 

n 

n 

n 

n 

a 


n n ptr  +=  2; 

n n pgpAssert  (msgarg->type  ==  PGP_UI_ARG_BUFFER); 

n n fprintf  (ui->fp, 

n n n C i n t ) msg a rg -> va L . bu f . L e n , 

nan  msga rg->va L . buf . buf  ) ; 

n n break; 

n default: 

n n pgpAssert(0); 

n } 

n string=ptr; 

> 

/*  Print  trailing  segment  of  string  */ 
fputs  (string,  ui->fp); 
putc('\n',  ui->fp); 


n return0; 

>n 


I* 

* Given  the  signature  structure,  sig,  verify  it  against  the  hash 

* to  see  if  this  signature  is  valid.  This  requires  looking  up  the 

* public  key  in  the  keyring  and  validating  the  key. 

* 

* Returns  0 on  success  or  an  error  code. 

*/ 
i n t 


pgpTtySigVerify 

r 

(void  *arg,  struct  PgpSig  const  *sig,  byte  const 

* h a s h ) 

n 

struct 

PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 

n 

union  RingObject  *ringobj  = NULL;  /*  shut  up  the  compiler 

*/ 

n 

struct 

PgpPubKey  *pubkey; 

n 

wo  rd32 

timestamp  = pg p S i gT i me s t amp  (sig); 

n 

byte  pka Ig; 

n 

byte  const  *keyid; 

n 

i n t err 

/ 

n 

n 

key i d = 

pgpSigId8  (sig); 

n 

pka  Ig  = 

pgpSigPKAlg  (sig); 

n 

pubkey 

= NULL; 

#if  0 

/*0bsolete  - BAT  19970609*/ 

n 

if  (Imemcmp  (keyid,  fixedKeylD,  8)  &&  pkalg  ==  PGP_PKALG_ 

RSA) 

D 

n 

pubkey  = fixedKeyPub  (); 

n 

else 

#endi f 

n 

if 

(ui->ringset)  { 

□ 

n 

ringobj  = ringKeyById8  ( u i -> r i ng s e t , pkalg,  keyid); 

□ 

Q 

if  (ringobj)  { 

a 

a 

pubkey  = r i ng Key Pu bKey  ( u i -> r i ng s e t , ringobj. 

0); 

n 

n 

r i ng Ob j e c t R e 1 ea s e (ringobj); 

Q 

n 

} 

n 

y 

n 

n 

n 

n 


n 


if  (pubkey  SS  ! pub key-> v e r i f y ) < 
n /*  Make  sure  we  can  use  this  key  */ 

n pgpPubKeyDestroy  (pubkey); 

n pubkey  = NULL; 

} 
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□ 

n 

n 

a 

a 

n 

n 

□ 

n 

n 

n 

n 

n 

□ 

n 

□ 

n 

> 


if  ( ! pubkey ) { 

n fprintf  (ui->fp,  "Signature  by  unknown  keyid: 

n pgpTtyPut Key  I D (ui,  keyid); 

a return  PG P E R R_ S I G_N 0 KE Y ; 

} 

err  = pgpSigCheck  (sig,  pubkey,  hash); 
if  (err  >=  0) 

pgpTtySigResuLt  (arg,  ringobj,  timestamp,  err,  NULL); 
else 

pg pT t y S i g Re s u L t (arg,  ringobj,  timestamp,  err, 
n o pgperrString  (err)); 

pgpPubKeyDestroy  (pubkey); 
return  0; 


1 n t 

pg pT t y Un L o c k S e c k ey  (void  *arg,  union  RingObject  *key, 
n struct  PgpSecKey  *seckey,  char  const  *prompt) 

{ 

a struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)arg; 


n 

i n t 

i = 3; 

□ 

i n t 

err; 

□ 

i f 

( ! seckey) 

□ 

n 

return  -1; 

n 

i f 

( ! pg p S e c Key  I s L 0 c ke d (seckey)) 

n 

Q 

return  0; 

n 

i f 

(ui->passcache)  { 

n 

n 

err  = pg pPa s s C a c h e T r y Key  ( u i -> pa s s c a c h e 

, seckey) ; 

n 

Q 

if  (err  > 0) 

□ 

n 

n return0; 

□ 

> 

Q 

i f 

( pgpenvGet I nt  (ui->env,  PG P E N V_B AT C H MO D E , NULL,  NULL))  { 

Q 

fprintf  (ui ->f p. 

□ 

n 

n "Use  -z  to  supply  passphrase  i 

n batchmodeXn 

n 

return  -1; 

n 

> 

n 

i f 

(prompt) 

tt 

□ 

f put s ( p romp t , ui->fp); 

n 

fprintf  (ui->fp,  "Need  a pass  phrase  to 

dec  rypt 

private  key: 

a 

ringKeyPrint  (ui->fp,  ui->ringset,  key. 

1); 

n 

while  ( i--)  { 

n 

n 

char  pass[I2563; 

u 

n 

i n t 1 e n ; 

n 

n 

len  = pgpT t yGe t Pa s s (arg,  pass. 

s i z e 0 f 

(pass)); 

n 

n 

if  ( ! 1 en ) 

n 

u 

n break; 

□ 

n 

err  = pg p S e c Key U n 1 o c k (seckey. 

ui->env. 

pass,  len); 
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n 

B 

if 

(err 

< 0)  { 

n 

B 

B 

fprintf 

(ui->fp,  "Key  Corrupted  (%d): 

%s\n". 

n 

B 

B 

n 

pgperrString  (err)); 

s 

B 

B 

mems  e t 

(pass,  0,  sizeof  (pass)); 

n 

B 

B 

break; 

s 

B 

> 

n 

B 

if 

(err 

) { 

B 

B 

B 

fprintf 

(ui->fp,  "Pass  phrase  is  good. 

\ n " ) ; 

B 

B 

B 

if  ( u i - 

>passcache) 

B 

B 

B 

n 

p g p Pa s s Ca c h e Ad d ( u i ->pa s s c a c h e 

, pass. 

B 

B 

B 

mems  e t 

(pass,  0,  sizeof  (pass)); 

B 

B 

B 

return 

0; 

B 

B 

> 

B 

B 

mems  e t 

(pass,  0 

, sizeof  (pass)); 

B 

B 

■f  P 

r i n t f 

( u i ->  f p 

, "Error:  Bad  pass  phrase. \n\n" 

B 

> 

B 

return 

-1; 

err. 


L e n ) ; 


> 


/* 

* given  a List  of  Encrypted  Session  Keys  (eskList),  try  to  decrypt 

* them  to  get  the  session  key.  Fills  in  keylen  with  the  Length  of 

* the  session  key  buffer. 

"k 

* Returns  0 on  success  or  PG P AN N_P ARS E R_ E AT  I T on  failure. 

*/ 

i nt 

pg pT t y E s k D e c r y p t (void  *arg,  struct  PgpESK  const  *eskList,  byte  *key. 


B 

B 

size 

_t  *key Len, 

B 

B 

i n t 

(*tryKey)  (void  *arg,  byte  const  *key,  size_t  keylen). 

B 

B 

void 

*t  rya  rg  ) 

{ 

n struct  PgpTtylll  *ui  = (struct  PgpTtyUI  *)arg; 

n struct  PgpESK  const  *esk; 

n union  RingObject  *ringobj  = NULL;  /*  shut  up  the  compiler  */ 

n struct  PgpSecKey  *seckey; 

n char  pass[256]; 

n inti,  err,  Len; 

n byte  pka  Lg; 

n byte  const  *keyid; 

a fprintf  (ui->fp,  "This  message  is  encrypted. \n"); 


B 

for 

( e s k = 

esklist; 

esk;  esk  = pgpEskNext 

(esk))  { 

B 

B 

sw  i 

tch  (pgpEskType 

(esk) ) { 

B 

B 

case  PGP_ESKTYPE_PASSPHRASE : 

B 

B 

B 

i f 

(ui->passcache)  { 

B 

B 

B 

B 

err 

= pg p Pa s s C a c h eT r y E s k ( u i ->pa s s c a c h e , 

B 

B 

B 

B 

B 

n n 

esk,  tryKey,  tryarg. 

B 

B 

B 

B 

B 

n □ 

key,  keylen); 

B 

B 

B 

B 

i f 

(err  > 0 ) 

B 

B 

B 

B 

B 

return  0; 

/*  success  */ 

fl 

B 

B 

B 

/* 

Ignore  errors. 

err  < 0 */ 

B 

B 

B 

> 

B 

B 

B 

i f 

( pgpe n vGe t I n t (ui->env. 

PGPENV_BATCHMODE, 

B 

B 

B 

B 

B 

NULL,  NULL))  ( 
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n 

fl 

fl 

fprintf  (ui->fp. 

n 

B 

"Use 

-z  to  provide 

passphrase  in  batchmode\n"); 

n 

fl 

fl 

return  -1; 

n 

B 

fl 

> 

n 

fl 

□ 

i = 3; 

n 

B 

fl 

while 

( 1--) 

1 

n 

fl 

n 

fl 

1 e n 

= pg pT t yGe t Pa s s (arg,  pass,  sizeof  (pass)) 

u 

B 

fl 

fl 

err 

= pgpE s kCon V De c ry p t (esk,  ui->env. 

n 

B 

fl 

B 

n 

n n pass, Len, key); 

n 

B 

fl 

fl 

*keylen  = err; 

a 

B 

□ 

fl 

Q 

B 

□ 

□ 

i f 

(err  >=  0 ) 

n 

fl 

n 

fl 

B 

err  = tryKey  (tryarg,  key,  *keyLen); 

B 

fl 

fl 

fl 

if 

( ! e r r ) { 

B 

B 

fl 

n 

fl 

if  ( u i ->pa s s c a c h e ) 

B 

fl 

n 

fl 

fl 

n pgpPassCacheAdd  ( u i ->pa s s c a c h e 

fl 

B 

fl 

□ 

B 

n n n pass, Len); 

B 

B 

□ 

B 

fl 

memset  (pass,  0,  sizeof  (pass)); 

B 

fl 

B 

fl 

fl 

return  0; 

B 

B 

B 

fl 

> 

B 

B 

fl 

□ 

memset  (pass,  0,  sizeof  (pass)); 

B 

fl 

B 

fl 

fprintf  (ui->fp,  "Password  Incorrect."); 

B 

B 

fl 

□ 

i f 

( i ) 

B 

fl 

B 

fl 

B 

fprintf  (ui->fp,  " Try  Again."); 

B 

B 

fl 

fl 

fprintf  (ui->fp,  "\n"); 

fl 

B 

fl 

> 

fl 

fl 

B 

break; 

n n case  PGP_ESKT YPE_PUBKEY : 


fl 

S 

fl 

keyid  = pgpEskld8  (esk); 

fl 

fl 

□ 

pkaLg  = pgpEskPKAlg  (esk); 

#if  0 

/*0bsoLete  - 

BAT  19970609*/ 

n 

fl 

fl 

i f 

(Imemcmp  (keyid,  fixedKeylD,  8)) 

fl 

B 

fl 

B 

seckey  = fixedKeySec  (); 

fl 

fl 

fl 

else 

#endi f 

fl 

B 

□ 

if  (ui->ringset)  { 

fl 

B 

B 

fl 

ringobj  = ringKeyById8  ( u i -> r i ng s e t , 

fl 

fl 

□ 

fl 

n n n pkaLg, 

fl 

fl 

fl 

fl 

key i d ) ; 

fl 

□ 

B 

fl 

if  (Iringobj) 

fl 

□ 

fl 

fl 

break; 

fl 

fl 

fl 

B 

seckey  = r i n g S e c S e c Key  ( u i -> r i ng s e t , 

fl 

fl 

fl 

fl 

n n n ringobj. 

fl 

B 

fl 

fl 

a n n PG  P_  PKU  S E_  E N C R YPT  ) 

H 

fl 

□ 

fl 

ri  ngObj ectRe Lease  (ringobj); 

fl 

fl 

fl 

I 

□ 

□ 

fl 

e L s e 

fl 

fl 

fl 

fl 

break; 

fl 

□ 

fl 

i f 

( ! seckey) 

fl 

fl 

fl 

break; 

fl 

fl 

fl 

fl 

fl 

□ 

i f 

(!  s e c ke y->d e c r y p t ) { 

fl 

□ 

fl 

n 

/*  Can't  decrypt  with  this  key  */ 
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Q 

D 

n 

n 

pgpSecKeyDest  roy 

(seckey); 

Q 

n 

n 

n 

break; 

Q 

a 

Q 

> 

n 

n 

n 

/* 

XXX  need  to  make  sure 

seckey  is  unlocked  */ 

n 

n 

n 

err 

= pg pT t y U n L 0 c kS e c key 

(arg,  ringobj,  seckey,  NULL) 

n 

n 

□ 

if 

(err)  { 

n 

n 

Q 

n 

pgpSecKeyDestroy 

(seckey); 

□ 

□ 

n 

n 

break; 

n 

n 

D 

> 

n 

□ 

n 

err 

= pg p Es kPKdec ry p t (esk,  ui->env,  seckey,  key); 

*keyLen  = err; 
pgpSecKeyDestroy  (seckey); 


if  (err  <=  0) 
n break; 


err  = tryKey  (tryarg,  key,  *keyLen); 
if  ( ! e r r ) 
n return  0; 


Q 

n 

n break; 

n 

Q 

default: 

a 

n 

n fprintf 

(ui->fp,  "Unknown  ESK 

n 

a 

n □ 

pgpEskType  (esk)); 

n 

n 

n break; 

n > 

> 

/* 

* At  this  point,  none  of  the  PgpESKs  have  been  decrypted,  so  Let's 

* inform  the  user  that  we  failed. 

*/ 


□ 

n 

n 

n 

n 

n 

n 

n 

□ 

n 

n 

n 

s 

n 

n 

D 

n 

n 

Q 

n 

n 

s 

n 


f pr i ntf 
n 

for  ( e s k 

H 

n 

n 

n 

n 

a 

n 

n 

n 

n 

n 

n 

n 

o 

a 

n 

n 

n 

u 

n 


( u i “>f  p, 

"Cannot  decrypt  message.  It  can  only  be  decrypted  by;\n"); 
= esklist;  esk;  esk  = pgpEskNext  Cesk))  -C 
switch  (pgpEskType  (esk))  { 
case  PGP_ESKTYPE_PASSPHRASE: 

n fprintf  (ui->fp,  " A Pass  PhraseXn"); 

n break; 


case  PGP_ESKTYPE_PUBKEY: 


n 

D 

Q 

O 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

Q 


keyid  = pgpEskIdS  (esk); 
pkalg  = pgpEskPKAlg  (esk); 
if  (ui->ringset)  i 

n ringobj  = ringKeyByIdS  ( u i -> r i ng s e t , pkalg, 

n n n n key i d ) ; 

n i f ( r i ngob j ) i 

n n r i ng Key P r i n t ( u i -> f p , ui->ringset, 

n u n ringobj, 1); 

n n ringObjectRelease  (ringobj); 

n > e L s e { 

n n pg pT t y Pu t Key I D (ui,  keyid); 

n > 

> else  -C 

n fprintf  (ui->fp,  " Key  ID  "); 

n pgpTtyPutKeylD  (ui,  keyid); 
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n n n > 

n n > 

n > 

n fprintf  (ui->fp,  "\n"); 

n return  PG P AN N_P A R S E R_ E AT  I T ; 

} 

/*  Check  if  file  already  exists,  and  whether  it  is  OK  to  overwrite  it. 

If  +force,  no  check  is  made  and  any  existing  file  will  be  overwritten. 
If  +batchmode  (but  not  +force),  the  default  answer  is  always  do  not 
overwrite.  */ 


i n t 

pg pT t y C h e c kO ve r w r i t e (void  *arg,  char  const  *name) 

{ 

struct  PgpTtyUI  *ui  = (struct  PgpTtylll  *)  arg; 
FILE  *fp; 

n intstatus=0; 


n if  ( ! pgpenvGet  Int  (ui->env,  PG P E N V_ F 0 R C E , NULL,  NULL))  { 

° fp=fopen(name,  "r"); 


Q 

n 

if  ( f p ) 

{ 

n 

n 

fclose  (fp); 

n 

n 

Q 

i f 

(pgpenvGetInt  (ui->env,  PG P E N V_B AT C HHO D E 

n 

n 

□ 

n 

n NULL,  NULL))  { 

□ 

□ 

n 

fprintf  (stderr. 

"In 

bat  chmode 

, use  +f orce 

to  allow  overwriting  of  output  files\n") 

n 

D 

□ 

status  = PGPERR_NO_FILE; 

□ 

n 

□ 

} 

□ 

n 

□ 

else  { 

n 

n 

fi 

fprintf  (stderr. 

n 

u 

n 

"File  \"%s\"  already  exists.  Overwrite? 

D 

n 

n 

n 

n n a m e ) ; 

n 

n 

□ 

Q 

if  ( ! pgpTtyGetBoo  1 (0,  stderr)) 

□ 

n 

n 

n 

status  = PGPERR_NO_FILE; 

n 

n 

n 

> 

□ 

n 

> 

n 

> 

n 

if  (status) 

a 

fprintf 

(stderr,  "Unable  to  overwrite  file  \"%s\"\n 

n 

n 

□ 

name) ; 

u 

return 

status; 

/*This  checks  for  existence  of  /dev/random  (or  whatever  is  configured  in  the 
♦appropriate  PGP  variable).  We  place  the  name  of  the  device  we  checked  in 
*in  RandomDevice  (allocating,  first);  the  caller  is  responsible  for 
♦deallocation  with  pgpFree().  Returns  TRUE  if  /dev/random  is  there,  FALSE 
♦if  it  is  not.  RandomDevice  may  be  NULL  if  you  don't  care  what  the  device 
♦is,  only  if  it  exists.  Note  also  that  this  function  will  alert  the  user  if 
♦the  requested  device  is  world-writable. 

♦/ 

static  Boolean  C h e c k D e v Ra ndom ( c h a r ♦♦RandomDevice,  PgpTtyUI  ♦ui) 

{ 

char  ♦DeviceToUse,  ♦prefDevRandom; 

Boolean  HasDevRandom  = TRUE; 
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FILE  *fDev  = NULL; 

#ifdef  HAVE_SYS_STAT_H 

/*This  is  the  preferred  method,  but  it  may  not  be  universally  portable, 
*so  I've  implemented  a I e s s - 1 h a n-de s i r a b I e check  below  using  definitely 
*available  functions. 

*/ 

struct  stat  stat_buf; 

# e nd i f 

p ref DevRandom  = (char  *) 

n pg p e n V G e t S t r i n g ( u i — > e n V , PG P E N V_ R AN  DOM D E V I C E , NULL,  NULL); 

pgpAssertCprefDevRandom); 

i f C s t r cmp ( p r e f D e V Ra ndom,  " / d e v / r a ndom" ) !=  0)  ( 

n fprintf(ui->fp, 

n n " \ 

Warning!  Random  device  is  something  other  than  / d e v / r a ndom ! \ n \ 

This  MAY  be  a security  hole.Xn"); 

} 

i f ( Ra nd omD e V i c e ) { 

n *RandomDevice  = pgpAlloc(sizeof(char)  * (strlen(prefDevRandom)  + 1)); 

n s t r c py ( * Ra nd om D e V i c e , pref DevRandom)  ; 

} 

i f ( RandomDevi ce 
n Devi ceToUse 

} 

else  { 

n Devi ceToUse 

> 

#ifdef  HAVE_SYS_STAT_H 

i f ( s t a t ( D e V i c eTo U s e , &stat_buf)  ==  0)  { 
n /*Check  for  world-writable  /dev/random  and  warn  the  user:*/ 

n if  (((stat_buf. St.mode  S.  S.IRWXO)  ==  S.IRWXO)  || 

n ( ( s t a t _bu f . s t _mod e & S.IRUXG)  ==  S.IRWXG))  { 

n fprintf(ui->fp,  "\n\ 

Warning!  %s  is  writable  by  users  other  than  root!\n\ 

This  is  probably  OK,  but  you  should  have  your  sysadmin  fix  it.\n\ 

Proceeding. \n",  DeviceToUse); 
n } 

} 

else  { 

n HasDevRandom  = FALSE; 

> 

#end i f 

/*People  who  don't  have  sys/stat.h  miss  out  on  the  check  of  permissions, 
*above.  People  who  do  have  sys/stat.h  still  execute  this  code,  to  make 
*sure  we  can  actually  READ  the  random  device.  sys/stat.h  people  who 
*have  random  devices  they  can't  read  get  a warning. 

* 

♦People  who  don't  have  sys/stat.h  are  just  generally  in  trouble. 

*/ 

i f ( H a s De V Ra ndom ) { 

a if((fDev  = fopen(DeviceToUse,  "r")))  { 

:CCHK:eda999455b5500f97f844b80ccde69611116fc63114f8176689e1b837ff47e767]: 


SS  *Ra n dom D e V i c e ) ( 

= * Ra ndomD e V i c e ; 

= (char  *)  p r e f D e vRa ndom; 
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n fcLose(fDev); 

n HasDevRandom  = TRUE; 

n > 

n e L s e { 

#ifdef  HAVE_S YS_STAT_H 
n f p r i n t f ( u 1 -> f p , "\ 

Warning!  Random  device  %s  found,  but  you  can't  read  it!\n", 
n n DeviceToUse); 

#end  i f 

a HasDevRandom  = FALSE; 

a > 

> 


} 


return(HasDevRandom); 


/*  /dev/random  did  basically  what  /dev/urandom  does  now  in  Linux 
*kernels  < 1.3.33.  My  best  research  to  date  indicates  that  the 
♦modern  /dev/random,  with  no  bugs  large  enough  to  limit  its 
♦cryptographic  utility,  cames  to  be  in  this  kernel  version.  Note 
♦that  I haven't  examined  every  patch  from  1.3.33  - 1.2.0,  but 
♦this  is  my  current  information  (and  I'd  love  to  hear  about  it 
♦if  I'm  incorrect). 

"k 

♦Basically,  what  we  want  to  do  is  check  what  Linux  version  we're 
♦running  (from  / p r o c / v e r s i on ) . I'm  sure  there  is  some  more  Linux- 
♦specific  way  to  do  this,  but  checking  / p r o c / v e r s i on  will  work  on 
♦systems  that  aren't  Linux  (since  the  check  will  just  fail). 

* 

♦/ 

static  Boolean 

VerifyRandomDevOSVersion(void) 

{ 

FILE  ♦inf; 

Boolean  VersionIsOK  = TRUE; 
char  Ve r s i o nBu f C 2 5 6 D , ♦p; 

unsigned  short  major  = 0,  minor  = 0,  release  = 0; 


if((inf  = fopen("/proc/version",  "r")))  { 
n fgets(VersionBuf,  sizeoflVersionBuf),  inf); 

n /♦This  string  is  of  the  form  "Linux  version  Ha j o r . H i no r . R e I e a s e . ♦ / 

n if(strncasecmp(VersionBuf,  "Linux  version  ",  14)  ==  0)  { 


D 

D 

□ 

n 

B 

B 


p = VersionBuf; 

/♦Skip  the  leading  text:*/ 
while(^p  &&  I i s d i g i t ( ♦p ) ) 

B + + p; 

major  = atoi(p); 


B 

B 

B 

B 

B 

n 

B 

B 


/♦If  major  >=  2,  we  know  we're  OK,  if  it's  0,  we  know  we're  not.^/ 
if( major  ==  1)  { 

n /♦Skip  the  major  number  and  dot:^/ 

n while(^p  &&  isdigit(^p)) 

B + + p; 

n if(^p)  { 

B + + p; 
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n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

c 

n 

n 

n 

n 

n 

n 

n 


> 


□ 


minor  = atoi(p); 


u 

u 

n 

n 

n 

n 

□ 

o 

o 

n 

n 

n 

n 

B 

B 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


/*If  here,  we  know  it*s  1.x. y.  If  x < 3,  we  know  it's 
*bad;  if  > 3,  we  know  it's  good.*/ 
if(minor  ==  3)  i 

/*0k,  it's  1.3.y,  so  we  have  to  actually  find  out  the 
*minor  version  to  see  if  it's  OK.*/ 

/*Skip  the  minor  number  and  dot:*/ 

whiLe(*p  &&  isdigit(*p))  -C 

+ + p; 

> 

if(*p)  { 

release  = atoi(p); 

} 


ifCmajor  <=  1 &&  minor  <=  3 &&  release  <-  32)  { 
n VersionIsOK  = FALSE; 

> 

> 


return(VersionlsOK); 


/*This  adds  count  bytes  from  RandomDevice  (usually  " /de v / r a ndom" ) to  the 
*random  pool. 

*/ 

static  unsigned 

pgpOevRandomAccumC i nt  fd,  unsigned  count) 

char  RandBuf ; 
unsigned  short  i = 0; 

pgpAssert(out); 
pgpAssert(fd  >=  0); 

forCi  = 0;  i <=  count;  ++i)  { 
n RandBuf  = readCfd,  &RandBuf,  count); 

n pgpRandomAddBytesC&pgpRandomPool,  (byte  *)&RandBuf,  sizeof(RandBuf)); 

n pg pRa nd Poo  I Add En t r opy ( 2 5 6 ) ; 

> 

return(i  ); 

> 
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/* 

* pgpUserlO.h  --  PGP  TTY  User  10  Interfaces 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Derek  Atkins  <ua r L o r d SM I T . E D U> 

★ 

* This  is  a PubLic  API  Function  Header. 

* 

* $Id:  pgpUserlO. h,v  1.4. 2.1  1 997/06/07  09:52:06  mhw  Exp  $ 

*/ 

#ifndef  PGPUSERI0_H 
#define  PGPUSERIO_H 

#incLude  <stdarg.h> 

#incLude  <stdio.h> 

SincLude  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 

struct  PgpPipeLine; 

#ifndef  T Y P E_PG PP I P E LI N E 

#define  TYPE_PGPPIPELINE  1 

typedef  struct  PgpPipeLine  PgpPipeLine; 

# end i f 

struct  PgpSecKey; 

#ifndef  T Y P E_PG P S E C KE Y 

#define  T YP E_ PG P S E C KE Y 1 

typedef  struct  PgpSecKey  PgpSecKey; 

# e nd i f 

struct  RingSet; 

#ifndef  TYPE_RINGSET 

#define  TYPE_RINGSET  1 

typedef  struct  RingSet  RingSet; 

#e n d i f 

struct  PgpSig; 

#ifndef  TYPE_PGPSIG 

#define  TYPE_PGPSIG  1 

typedef  struct  PgpSig  PgpSig; 

#end i f 

struct  PgpESK; 

#ifndef  TYPE_PGPESK 

#define  TYPE_PGPESK  1 

typedef  struct  PgpESK  PgpESK; 

#endi  f 

struct  Pg p Pa s s C a c h e ; 

#ifndef  TYPE_PGPPASSCACHE 

#define  TYPE_PGPPASSCACHE  1 

typedef  struct  PgpPassCache  PgpPassCache; 

i:CCHK:62cccba75466f66c4477c2bb0d6311236b33a8e122d97abbfd4c661634d830c6c]] 


1936 


Pretty  Good  Privacy  5.0’^*'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpUserlO.h 


#endi f 


struct 


□ 

Q 

a 

Q 

n 

a 

a 

□ 

n 


PgpTtyUI  { 

Hnt  verbose; 
int  shoupass; 
int  moreflag; 
i nt  protect_name; 
int  comm i t s ; 

FILE  *-fp; 

char  const  *outname; 

char  const  *pager; 

struct  RingSet  const  *ringset; 

struct  PgpPassCache  *passcache; 

struct  PgpEnv  const  *env; 

int  (*addKeys)  (void  *arg,  char 


>; 

#ifndef  T Y P E_PG PTT YU  I 
#define  T YPE_PG PTT YU  I 1 
typedef  struct  PgpTtyUI  PgpTtyUI; 
#endi  f 


const 


*fi Lename); 


/* 

* Get  a string  from  the  keyboard  into  the  supplied  buffer. 

* If  echo  is  non-NULL,  echoes  the  typed  input  to  that  FILE  *. 

* Otherwise  prints  nothing  (and  beeps  go  to  stderr). 

* Returns  the  number  of  characters  read  (always  <=  len-1). 

*/ 

int  PGPTTYExport  pgpTtyGetString(char  *buf,  int  len,  FILE  *echo); 


/* 

* Prompts  the  user  for  Y or  N (case  insensitive),  and  returns 

* the  appropriate  boolean  value.  If  nothing  is  entered,  <def> 

* is  returned.  This  assumes  that  a prompt  has  already  been  printed. 
*/ 

int  PGPTTYExport 

pg pT t y G e t Boo  I ( i n t def,  FILE  *echo); 


/* 

* Get  a passphrase  from  the  user.  arg  is  the  FILE*  to  print  to  the 

* user,  string  is  an  informational  string,  buffer  is  space  to  store 

* the  passphrase,  and  buflen  is  the  size  of  buffer. 

* 

* Fill  in  buffer  with  the  passphrase.  line  endings  must  be  stripped 

* from  the  string.  returns  the  length  of  the  passphrase. 

*/ 

int  PGPTTYExport  pg pT t y Ge t Pa s s (void  *arg,  char  *buffer,  int  buflen); 


/* 

* A debugging  committal  callback.  Returns  one  of: 

* n ANN_PARSER_PASSTHROUGH 

*n  ANN_PARSER_EATIT 

* n ANN_PARSER_PROCESS 

*n  ANN_PARSER_RECURSE 

*/ 

int  PGPTTYExport  pg pT t y De bug C omm i t (void  *arg,  int  scope); 

/* 

* Will  process  commit  requests  silently,  based  upon  the  value  of  arg->commits 
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* 

* If  commits  > 0,  it  will  recursively  process  that  many  scopes, 

* changing  the  value  of  commits  each  time  through. 

* If  commits  ==  0,  it  will  passthrough  the  ciphertext. 

* If  commits  < 0,  it  will  recursively  process  the  whole  message. 

*/ 

int  PGPTTYExport  pgpTtyDoCommit  (void  *arg,  int  scope); 

/* 

* Accumulate  count  bits  of  random  data  from  the  user  utilizing  keystroke 

* timings. 

*/ 

void  PGPTTYExport  pgpTtyRandAccum  (void  *arg,  unsigned  count); 

int  PGPTTYExport  pg pT t y D e b ug A n n o t a t e (void  *arg,  struct  PgpPipeline  *origin, 
° ° ° int  type,  byte  const  *string,  size_t  size); 

int  PGPTTYExport  pgpTtyNeedInput  (void  *arg,  struct  PgpPipeline  *head); 

int  PGPTTYExport  pg pT t y N e w Ou t p u t (void  *arg,  struct  PgpPipeline  **output, 
n int  type,  char  const  *suggested_name); 

int  PGPTTYExport  pg pT t y M e s s a g eO  I d (void  *arg,  int  type,  int  msg, 
n unsigned  numargs,  ...); 

int  PGPTTYExport  pg pT t y He s s a g e (void  *arg,  int  type,  int  msg, 
n unsigned  numargs,  ...); 

int  PGPTTYExport  pg pT t y U n I o c k S e c ke y (void  *arg,  union  RingObject  *key, 

° ° struct  PgpSecKey  *seckey,  char  const  *prompt); 

int  PGPTTYExport  pg pT t y S i gVe r i f y (void  *arg,  struct  PgpSig  const  *sig, 
n byte  const  *hash); 

int  PGPTTYExport  pg pT t y E s kDe c r y p t (void  *arg,  struct  PgpESK  const  *esklist, 
n byte  *key,  size_t  *keylen, 

n int  ( * t ryKey ) ( VO i d *arg,  byte  const  *key,  size_t  keylen), 

n void  *tryarg); 

int  PGPTTYExport  pgpTtyCheckOverwrite  (void  *arg,  char  const  *name); 

#ifdef  __cplusplus 
} 

# e n d i f 

#endif  /*  PGPUSERIO  H */ 
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UNIX  README 

Bugs  should  be  reported  to  pg p 5 0bug s-un i xBpg p . c om . 

Before  reporting  any  bugs,  please  check  TODO  to  make  sure  it  isn't 
already  known. 

A word  of  warning:  The  command  line  has  changed  _ s ub s t a n t i a I I y _ since 
2.6.2.  Make  sure  your  favorite  command  does  what  you  think  it  does 
before  you  execute  it. 

Also,  to  head  off  a FAQ  - this  is  the  product  formerly  known  as  "PGP 
3.0."  Due  to  a story  too  long  to  go  into  here,  it's  ended  up  as  PGP  5.0. 

--Bui  Iding 
Generally: 

chmod  755  configure  c on f i g / i n s t a I I -s h 

./configure 

make 

make  install 

You  probably  want  to  "make  install"  as  root. 

Under  Unix,  there  are  multiple  build  options  for  various  RSA 
possibilities.  The  large  number  of  options  are  n e c c e s s i t a t ed  by  our 
inability  to  release  certain  versions  in  source  form  due  to 
contractual  limitations  of  our  contract  with  PKP. 

The  "internal"  PGP  RSA  support  is  in  two  files: 

lib/pgp/pubkey/pgpRSAGluel . c (Encryption/Signing) 
lib/pgp/pubkey/pgpRSAGlue2.c  (Verifying/Decrypting) 

Additionally,  RSA  key  generation  is  in: 

lib/pgp/pubkey/pgpRSAKeyGen.c 

Furthermore,  RSAREF  support  is  in: 

li b/pgp/pubkey/pgpAltRSAGlue . c 

And  general  R S A- c o nn e c t i on  routines  are  in: 

lib/pgp/pubkey/pgpRSAKey. c 

Configure  will  attempt  to  determine  what  version  you're  building  based 
upon  what  files  are  present.  The  determination  works  like  this: 

1)  If  all  files  above  are  present,  a full  internal  RSA  version  is  built. 

2)  If  pgpRS AG  I ue 1 . c is  missing,  but  pgp A 1 1 R S AG  I u e . c and 

. . / r sa r e f / i n s t a I I / u n i X / r s a r e f . a are  present,  an  RSAREF  version  is 
b u i It. 

3)  If  2 fails,  but  pgpRS AG  I ue2 . c is  available,  a "legacy-mode" 

( d e c r y p t / ve r i f y only)  version  is  built. 

4)  If  3 fails,  no  RSA  support  is  included. 

Additionally,  if  pg p R S AKey Ge n . c is  missing  from  any  of  these,  no  RSA 
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key  generation  support  is  included. 

If  you  have  all  of  the  source,  and  wish  to  build  a particular  version, 
the  following  flags  are  defined  in  config.h: 

USE_RSAREF_FULL  (If  1,  a full  RSAREF  version  is  built) 

U S E_ R S A_LE G AC Y (If  1,  a d e c r y p t / v e r i f y only  version  is  built) 

N0_RSA  (If  1,  no  RSA  support  is  included;  overrides  all  other  RSA  flags) 
N0_R S A_KE YG E N (If  1,  RSA  key  generation  is  removed) 

USE_MPI_LIB  (If  using  RSAREF,  assumes  the  RSAREF  has  been  modified  (as 
in  2.6.2)  to  use  PGP's  internal,  faster,  MPI  routines.  If  using 
vanilla  RSAREF,  set  this  to  0). 


We've  had  a lot  of  fun,  writing  this,  and  hope  you  enjoy  using  it. 
PGP  has  gotten  faster,  more  stable,  and  has  better  features.  Happy 
encrypting! 

Brett  A.  Thomas 
batalpgp.com,  quarkabaz.com 

PS:  The  coolest  new  feature  is  keyserver  support.  The  way  it  works 

in  this  release  is: 

To  send : 

pgpk  -X  quarkabaz.com  -o  h kp : / / key s . pg p . c om 

To  add  a key  to  your  keyring  from  the  server: 

pgpk  -a  h kp : / / key s . pg p . c om / q ua r kaba z . c om 

HKP  is  the  Horowitz  Key  Protocol.  Its  default  port  is  11371. 

We  also  support  http  and  finger,  but  for  gets  only.  For  example,  to 
add  my  key  to  your  keyring,  you  can  do: 

pgpk  -a  http://www.baz.com/quark/pgp.html 


OR 


pgpk  -a  f i ng e r : / / ba z . c om/ q u a r k 

This  is  interesting  because  it  means  small  organizations  can 
effectively  do  key  distribution  this  way  - set  up  a page  that  is  the 
keyring  for  your  department,  and  have  a cron  job  that  updates  it  every 
night.  Talk  about  a shared-read  only  keyring! 

PPS:  While  the  libraries  are  very  stable  at  this  time,  remember  - 

this  is  beta  software!  BACK  UP  YOUR  KEYRINGS,  FIRST! 


[[CHK:8e09d744cbb777898275c4504c18049e647123e3448151d2457e02ddd]D 


1940 


Pretty  Good  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


TODO 


List  of  things  to  do. 

Beta  testers  are  not  expected  to  implment  any  of  this;  in  fact,  you're 
expected  not  to,  because  it  will  probably  be  a waste  of  time,  since 
that's  what  we'LL  be  working  on  full  time. 

Beta  testers  ARE  expected  to  Look  at  this  file  before  reporting  a bug 
to  insure  that  it  isn't  something  already  known. 

* pgp_ol-d  is  completely  u n i mp  I erne  n t e d 

* -o  in  all  cases  probably  doesn't  work  very  well,  especially  when 
dealing  with  mutipLe  input  files 

* -u  doesn't  check  for  multiple  signing  keys  specified 

* error  codes  need  to  be  more  rigorous  to  enable  reasonable  scripting 

* batch  mode  is  utterly  u n i mp L erne n t e d (and  a major  goal) 

* running  programs  with  no  arguments  should  probably  give  a usage  List 

* pgpk's  command  Line  needs  to  be  reviewed 

* pgpk's  help  also  needs  to  be  reviewed 

* keyserver  support  should  be  a Little  more  informative  when  you  enter 
a protocol  it  doesn't  support.  Also,  I need  to  port  all  of  the 
connections  error  messages  from  the  Windoze  version;  right  now,  if 
(i.e.)  you  enter  a nonexistant  hostname,  you  don't  get  a warning 
message. 

* gotos  are  EVIL,  and  yet  there  are  still  a bunch  in  pgpk  and  pgp. 

This  should  be  fixed. 

* url.c  needs  to  be  rewritten  to  handle  dynamic  allocation  for  URL 
parsing  instead  of  using  static  buffers 

* No  documentation 

* The  PAGER  directive  in  config.txt  doesn't  work. 

* We're  probably  not  handling  DSS/RSA  warning  issues  (signing  and 
encrypting  with  multiple  keys)  very  well  at  this  time. 

* No  UI  support  for  "encrypt  also  to  this  key" 

* No  UI  support  for  preferred-algorithm  functionality 
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Pretty  Good  Privacy  5.0''“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1941 


build.bat 


REM  $Id:  build. bat, V 1.1. 2. 2 1997/06/12  02:41:13  mhw  Exp  $ 

REM 

REM  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved, 
aecho  off 

if  "%1"==""  goto  DONE 
echo  % 1 

echo  %1  >>  buiLd.txt 

if  "%3"==""  goto  NORMAL 
: SPECIAL 

echo  NMAKE  /f  "%1.mak  CFG="%2  - Win32  %3" 

NMAKE  /f  "%1.mak"  CFG="%2  - Win32  %3"  >>  buiLd.txt 
goto  DONE 

: NORMAL 

echo  NMAKE  /f  "%1.mak  CFG="%1  - Win32  %2" 

NMAKE  /f  "%1.mak"  CFG="%1  - Win32  %2"  >>  buiLd.txt 

: DONE 


:i:CHK:e044397fff0558d1f33548973d6]: 
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REM  $Id:  clean. bat, V 1.1. 2. 2 1 997/06/1  2 02:41:1  4 uihw  Exp  $ 

REM 

REM  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved, 
aecho  off 

if  "%1"==""  goto  DONE 

del  %1\%2\*.obj 
del  %1\%2\*.Lib 
del  %1\%2\*.dLL 
del  %1\%2\*.exe 


: DONE 
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mkhdrs.bat 


copy  c o n f i g _ w i n 32 . h config.h 

if  not  exist  include  mkdir  include 

if  not  exist  libXinclude  mkdir  libXinclude 

copy  lib\bn\bn.h  include 

copy  I i b \ bn \ b n p r i me . h include 

copy  I i b \ bn \ bn g e r ma i n . h include 

copy  I i b \pgp \ c i ph e r \pg pC FB . h include 

copy  I i b \ pg p \ c i p h e r \ pg p C i p h e r . h include 

copy  I i b \ pg p \ c omp r e s s \ pg p C omp r e s s . h include 

copy  I i b \ pgp \ comp  res s \ pgpZ I n f I a t e . h lib\include 

copy  I i b \ pg p \ h a s h \ pg p H a s h . h include 

copy  I i b\ pgp \ he  I pe r \ pg p F I FO . h include 

copy  I i b \ pg p \ h e I pe r \ pg p Pa s s C a c h . h include 

copy  I i b \ pg p \ h e I pe r \ pg p F i I e . h include 

copy  I i b \ pg p \ h e I pe r \ pg p S t r 2 Ke y . h include 

copy  I i b \ pg p \ h e I pe r \pgpT i me  Da t e . h include 

copy  I i b \ pg p \ h e I p e r \ pg pM em . h include 

copy  I i b\ pgp\ he  I pe r \ pg pDebug . h include 

copy  I i b \ pg p \ h e I pe r \ pg p Le a k s . h include 

copy  I i b \ pgp \ h e I pe r \ pgpTy pe s . h include 

copy  I i b \ pg p \ h e I p e r \ pg p F i I e N ame s . h include 

copy  I i b \ pg p \ h e I p e r \ pg p F i I e R e f . h include 

copy  I i b \pgp \ he  I pe r \ pg pBy t e F I FO . h libXinclude 

copy  I i b \ pgp \ he  I pe r \ pg pC ha r Ha p . h libXinclude 

copy  I i b X pg p X i n c I ud e X pg p An  no t a t e . h include 

copy  I i b X pg p X i n c I ud e X pg p C on V Key . h include 

copy  I i b X pg p X i nc I ude XpgpE r r . h include 

copy  I i b X pg p X i n c I ud e X pg pH s g . h include 

copy  I i b X pgpX i n c I ude XpgpU I . h include 

copy  I i bX  pgpX  i n c I ude  X pgpll  sua  I s . h include 

copy  I i b X pg p X i n c I ude X pg pK I udg e . h libXinclude 

copy  I i b X pgp X i n c I ude X pgpPk t By t e . h libXinclude 

copy  I i b X pg p X key d b X pg pKey DB . h include 

copy  I i bX pgpX key db X pg pP ref Un  i X . h include 

copy  I i b X pg p X ke y d b X pg pKD B i n t . h libXinclude 

copy  I i bXpgpXkeydbXpgpPref Sint . h libXinclude 

copy  I i bXpgpXkeysXpgpRngHnt . h include 

copy  libXpgpXkeysXpgpRngPub.h  include 

copy  I i b X pg p X key s X pg pR ng Re  a d . h include 

copy  I i b X pg p X key s X pg pT r u s t . h include 

copy  I i bXpgpXkeysXpgpTrstPkt . h include 

copy  I i b X pgp X key s X pg p Rng P r i V . h libXinclude 

copy  I i bXpgpXkeysXpgpRngPkt . h libXinclude 

copy  I i b X pg p X key s X pg p Rng Pa r s . h libXinclude 

copy  I i b X pg p X key s X pg pMemPoo I . h libXinclude 

copy  I i b Xpgp Xp i pe X c ry pt X pgpC i ph r Mod . h include 

copy  I i b X pgp X pi pe X c ry p t X pgpCon vHod . h include 

copy  I i b Xpgp Xpi pe X c ry p t X pgpPKEMod . h include 

copy  I i b X pgp Xpi pe X f i I e Xpgp A rmo r . h include 

copy  I i b X pg p X p i pe X f i I e X pg p A r m r F i I . h include 

copy  I i b X pg p X p i pe X f i I e X pg p F i I e Mod . h include 

copy  I i bXpgpX p i pe X f i I e X pg pH eade r . h include 

copy  libXpgpXpipeXfileXpgpPrsAsc.h  include 

copy  I i bXpgpXpi peXpa rserXpgpPrsBi n . h include 

copy  I i b X pg p X p i p e X pa r s e r X pg pRea d An n . h include 

copy  libXpgpXpipeXparserXpgpVerifyRa.h  include 

copy  I i b X pgpX p i pe X s i g X pgpHa s hMod . h include 

copy  I i bXpgpXpi peXsi gXpgpSi gHod . h include 

Ci;CHK:6ebfcc496eaeb3f0b39b2840795466ce70e6bd3efbbf81285a155b8b29a0ec283]] 
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mkhdrs.bat 


copy 

li 

copy 

li 

copy 

li 

copy 

1 i 

copy 

1 i 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

1 i 

copy 

1 i 

copy 

1 i 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

1 i 

copy 

1 i 

copy 

1 i 

copy 

li 

copy 

1 i 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

copy 

li 

b\pgp\pipe\text\pgpCompHod.h  include 
b\pgp\pipe\text\pgpLiteraL.h  include 
b\pgp\pipe\text\pgpTextFi It.h  include 
b\pgp\pipe\uti IsXpgpBufMod.h  include 
b\pgp\pipe\uti IsXpgpDevNull.h  include 
bXpgpXpipeXuti IsXpgpJoin.h  include 
bXpgpXpipeXuti IsXpgpHemMod.h  include 
bXpgpXpipeXuti IsXpgpPipeline.h  include 
bXpgpXpipeXuti IsXpgpSplit.h  include 
bXpgpXpipeXuti IsXpgpAddHdr.h  libXinclude 
bXpgpXpipeXuti IsXpgpCopyHod.h  libXinclude 
bXpgpXpubkeyXpgpESK. h include 
bXpgpXpubkeyXpgpFixedKey.h  include 
b X pg p X pu b ke y X pg pPubKey . h include 
b X pg p X pu b key  X pg p S i g . h include 
bXpgpXpubkeyXpgpKeySpec.h  include 
bXpgpXpubkeyXpgpRSAKey.h  libXinclude 
bXpgpXpubkeyXpgpMakeSig.h  libXinclude 
bXpgpXpubkeyXpgpElGKey.h  libXinclude 
bXpgpXpubkeyXpgpDSAKey.h  libXinclude 
bXpgpXpubkeyXpgpKeyMisc.h  libXinclude 
bXpgpXrandomXpgpRndom. h include 
bXpgpXrandomXpgpRndPool.h  include 
bXpgpXrandomXpgpRndSeed.h  include 
b X pg p X u t i I s X pg p C on f . h include 
b XpgpX u t i I s X pgp Dec P i pe . h include 
bXpgpXu t i I s X pgp EncPi pe . h include 
bXpgpXuti IsXpgpFi leType.h  include 
bXpgp Xu t i I s Xpgp En V . h include 
bXpgp Xu t i I s XpgpS i gPi pe . h include 
bXpgp Xu t i I s XpgpS i gSpe c . h include 
bX s i mp I e X spgp . h include 
b X t tyu i X pgpU s e r 1 0 . h include 
b X t t y u i X pg p R i n g U I . h include 
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release.bat 


Secho  off 

REM  release  install  builder 

REM  $Id:  re  lease  . bat,  V 1.1. 2. 2 1 997/06/1  2 02:41:1  4 mhw  Exp  $ 


mkd i r . 
copy  I i 
copy  I i 
copy  I i 
copy  I i 
copy  I i 
copy  I i 
copy  I i 
copy  I i 


.\win32\lib 

b \ b n \ % 1 \ b n . I i b ..\win32\lib 
b \ pg p \ % 1 \ pg p . I i b ..\win32\lib 
b\pgp\keydb\%1 \keydb. lib  . . \ win32\lib 
b\simple\%1 \simple. lib  . . \ win32\lib 
b\bn\%1\bn.dll  ..\uin32\lib 
b\pgp\%1\pgp.dll  ..\win32\lib 
b\pgp\keydb\%1\keydb.dll  . .\win32\lib 
b\simple\%1\simple.dll  . .\win32\lib 


[CCHK:6d779617d6714bf4dcdd:: 
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make-mkhdrs.pl 


#!/usr/bin/perL 

U 

# make-mkhdrs  - Creates  a batch  file  from  the  Makefile. in  files  which 
n sets  up  the  header  file  directories  for  Windows  95. 

U 

ft  Copyright  (C)  1 997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 
ft 

ft  $Id:  make-mkhdrs. pi, V 1 . 1 . 2. 2 1 997/06/1  2 01  : 22  : 37  mhw  Exp  $ 
ft 

openCOUT,  " >m k h d r s . ba t " ) | | die; 

print  OUT  <<'END'; 

copy  c on f i g_ w i n 32 . h config.h 

if  not  exist  include  mkdir  include 

if  not  exist  lib\include  mkdir  libXinclude 

END 


open  (FILELIST,  "find  . -name  Makefile. in  -print  |")  ||  die; 

while  ($file  = <FILELIST>) 

{ 

chop  Sfile; 

$dir  = Sfile; 

Sdi  r =“  s I /:''/]H-$  I I ; 

Sdi  r =-  s r\  . / I I ; 

Sdir  =“  s|/|\\|g; 

$f i les  = 

open  (FILE,  "<$file")  ||  die; 

while  (<FILE>) 

{ 

n chop; 

n if  (/^(SHARED  I PRIV)HDRS\s*  = \s*( .*)$/) 

n { 

n Sdest  = ($1  eq  "SHARED")  ? "include"  : "lib\\include"; 

n $f i les  = $2; 

n while  (Sfiles  =“  s/\\$//  &&  ($_  = <FILE>)) 

n { 

n n chop; 

a a Sfiles. ; 

n } 

n Sf i les  =■  s I / I \\ I g; 

n foreach  ( s p I i t ( / \ s-t  / , Sfiles)) 

n { 

a a nextif/*S/; 

n n print  OUT  "copy  Sdir\\S_  SdestXn"; 

n > 

n > 


close  (FILE); 


close  ( FILELIST)  | | di e; 
close  (OUT)  II  die; 
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libbuild.bat 


REM  $Id:  L i bbui  Ld  . bat,v  1.1. 2. 2 1 997/06/1  2 02:41:1  4 tnhw  Exp  $ 

REM 

REM  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved, 
aecho  off 

attrib  -r  buiLd.txt 

rem  if  exists  \msdev\bin\vcvars32.bat  caLL  \msdev\bin\vcvars32.bat  x86 

if  "%1"==""  goto  USAGE 

if  " % 1 " = = " d e bug  " goto  DEBUG 

if  " % 1 " == " r e L e a s e " goto  RELEASE 

if  "%1 "=="DEBUG"  goto  DEBUG 

if  "%1 "=="RELEASE"  goto  RELEASE 

if  " % 1 " = = " c L ea n " goto  CLEAN 

goto  USAGE 

: DEBUG 

SET  PGPBui Ld=Debug 
goto  BUILD 


: RELEASE 

SET  PGPBui Ld=ReLease 
goto  BUILD 


: CLEAN 


for 

%%i 

i n 

C L i b \ b n 

L i b\pgp) 

d 0 

caLL 

cLean.bat 

%%i 

debug 

for 

%%i 

i n 

( L i b \ pg p \ key d b LibXsimpLe) 

do 

caLL 

cLean.bat 

%%i 

debug 

for 

%%i 

i n 

( L i b \ b n 

L i b\pgp ) 

do 

caLL 

cLean.bat 

%%i 

r e L ea  s e 

for 

%%i 

i n 

( L i b \ pg p \ key d b LibXsimpLe) 

d 0 

caLL 

cLean.bat 

%%i 

r e L ea  s e 

goto  DONE 


: BUI  LD 

echo  > buiLd.txt 


i f " 

%2' 

1 __  1. 

c L ea  n " 

do 

caLL 

c L ea  n . 

.bat 

if  " 

%2' 

c L e a n " 

do 

caLL 

c L ea  n . 

.bat 

i f " 

%2' 

c L e a n " 

do 

caLL 

c L e a n . 

.bat 

if  " 

%2' 

c L e a n " 

d 0 

caLL 

c L ea  n . 

.bat 

c d L 

i b \ b n 

caLL 

. . 

. \ . . 

\ bu i L d . 

.bat 

bn 

%PGPBui 

i Ld% 

c d . 

. \ . 

. . \ L 

i b \ pg  p 

caLL 

. . 

. \.  . 

\ b u i L d . 

.bat 

pgp 

%PGPBui Ld% 

cd  keydb 
c a L L . . \ . . \ 
cd  ..\..\simpLe 
caLL  .. \..\buiLd.bat 
cd  . . \ . . 

goto  DONE 


Lib\bn\bn  %PGPBuiLd% 
Lib\pgp\pgp  %PGPBuiLd% 

L i b \ pg p \ key d b \ key d b %PGPBuiLd% 
L i b \ s i mp L e \ s i mp L e %PGPBuiLd% 


\buiLd.bat  keydb  %PGPBuiLd% 
simpLe  %PGPBuiLd% 


: USAGE 

echo  "Usage:  pgpbuiLd  DEBUG  | RELEASE 
: DONE 


C:CHK:1bdda00f81c6f0ff62bbbfa6699c4c226a8354f47baedb55111220b35df55:: 
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Makefile. in 


# 

tt  Top  Level  Ma  ke  f i L e . i n 

n 

ft  Copyright  CC)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

# $Id:  Ma ke f i L e . i n , V 1.11.2.3  1997/06/09  23:46:16  quark  Exp  $ 

U 


POSTSUBDI RS= L i b apps 


. i n c s : 


n 

touch  . 

i n c s 

n 

-mkd i r 

include 

n 

SCHAKE) 

SCMFLAGS) 

headers 

i n c s : . 

i n c s 

all::  i n c s 

headers 

: : i n c s 

world: : 

n 

$(MAKE) 

$(MFLAGS) 

headers 

n 

$(HAKE) 

SCMFLAGS) 

depend 

n 

SCHAKE) 

SCHFLAGS) 

a L L 

clean:  : 


n 

$(RM) 

. i n c s 

ve  r y- 

n 

clean:  : 

$(RM) 

c 0 n f i g 

n 

$(RM) 

c 0 n f i g 

n 

$(RM) 

conf i g 

n 

$(RM) 

c 0 n f i g 

h 

Log 

cache 

status 
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aclocal.m4 


d n L 

dnL  Local  autoconf  configuration  macros  for  PGP  3 
d n L 

dnL  Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
dnL 

dnL  $Id:  acLocaL.m4,v  1.4. 2. 2 1 997/06/09  23:46:1  7 quark  Exp  $ 
dnL 

dnL 

dnL  The  big  finish. 

dnL  Produce  c on f i g . s t a t u s , config.h,  and  Links,  and  configure  subdirs. 
dnL  PGP_AC_OUTPUT(CFILE. . . ] [,  PRE.IN]  C,  POST. IN]  C,  EXTRA-CHDS: 
dnL  a [,  INIT-CMDS]) 
define(PGP_AC_OUTPUT, 

[trap  ' ■ 1 2 15 

AC_CACHE_SAVE 

trap  'rm  -fr  conftest*  confdefs*  core  core.*  *.core  $ac_cLean_fiLes;  exit  1'  \ 

n 12  15 

test  "xSprefix"  = xNONE  SS  prefix=$ac_defauLt_prefix 

# Let  make  expand  exec_prefix. 

test  " x$ ex e c _p r e f i X " = xNONE  &&  ex e c_p r e f i x = ' $ { p r e f i x } ' 

# Any  assignment  to  VPATH  causes  Sun  make  to  only  execute 

# the  first  set  of  doubLe-coLon  rules,  so  remove  it  if  not  needed. 

# If  there  is  a colon  in  the  path,  we  need  to  keep  it. 
if  test  "xSsrcdir"  = x.;  then 

c h a n g eq uo t e ( , )dnL 

a c_ vp s u b=  ' / * C a D*VPATHC  a D * = C : D *$ / d ' 

c ha n g e q u o t e ( [ , ])dnL 
f i 

trap  'rm  -f  $ C ON F I G_ S T AT U S conftest*;  exit  1'  1 2 15 

ifdef(:AC_LIST_HEADER:,  :DEFS=-DHAVE_C0NFIG_H],  CAC_OUTPUT_nAKE_DEFSO:) 

it  Without  the  "./",  some  shells  Look  in  PATH  for  config. status. 

: ${CONFIG_STATUS=./ config. status! 

echo  creating  $ C 0 N F I G_ST ATU S 
rm  -f  $CONFIG_STATUS 
cat  > $CONFIG_STATUS  <<EOF 
#!  /bin/sh 

U Generated  automatically  by  configure. 

U Run  this  file  to  recreate  the  current  configuration. 

# This  directory  was  configured  as  follows, 

dnL  hostname  on  some  systems  (SVR3.2,  Linux)  returns  a bogus  exit  status, 
dnL  so  uname  gets  run  too. 

a on  host  '(hostname  ||  uname  -n)  2>/dev/nuLL  | sed  1q': 

U 

Lttl  C$]0  C $ D a c_  c on  f i g u r e_a  r g s 

n 

it  Compiler  output  produced  by  configure,  useful  for  debugging 
U configure,  is  in  ./config. Log  if  it  exists. 

c ha ng equot e ( , )dnL 

ac_cs_usage  = "Llsage  : $ CON  F I G_  ST  ATU  S [--recheck!  [--version]  [ — help]" 
c h a n g e q uo t e ( [ , ])dnL 

[[CHK:d6b01bdd3e134847300ee11139eb1399ccaaedd64c5832e0a129b44b4e552ce3c:: 
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for  ac_option 
d o 

case  " C \ $ 3 a c_op t i on " in 

-recheck  | --recheck  | --rechec  | — reche  | --rech  | — rec  | — re  | — r) 
echo  "running  C \ $ 3 { C ON F I G_ S H E LL- / b i n / s h } C$30  C $ 3 a c_ c on f i g u r e_a r g s " \ 
n n " — no-create  --no- r e c u r s i on " 

exec  C \ $ 3 { C ON F I G_ S H E LL- / b i n / s h > C$30  C $ 3 a c_ c on f i g u r e_a r g s — no-create  \ 
n n --no-recursion;; 

-version  | --version  | — versio  | --versi  | — vers  | --ver  | — ve  | — v) 
echo  " $ C ON F I G_ST AT U S generated  by  autoconf  version  A C _ A C V E R S I ON " 
exit  0 ; ; 

-help  I — help  | — hel  | --he  | --h) 
echo  "C\$3ac_cs_usage";  exit  0 ;; 

*)  echo  "C\$3ac_cs_usage";  exit  1 ;; 
e s a c 
done 

ac_given_srcdi r=$srcdi r 

ifdefCCAC_PR0VIDE_AC_PR0G_INSTALL3,  Cac_given_INSTALL="$INSTALL" 

3 ) d n L 

c h a n g eq uo t e ( <<,  >>)dnL 
ifdef(<<AC_LIST_HEADER>>, 

<<trap  ' rm  -fr  'echo  "$1  A C_ LI ST_H E AD E R " 1 sed  "s/:C*  3*//g"'  conftest*;  \ 

n exit1'121 5>>, 

<<trap  ' rm  -fr  'echo  "$1"  | sed  "s/:C^  3*//g"'  conftest*;  exit  1'  1 2 15>>) 
c ha ngequo t e C C , 3)dnL 

PGP_AC_0UTPUT_FILES($1,  $2,  $3) 

ifdef(CAC_LIST_HEADER3,  CAC_0UTPUT_HEADER(AC_LIST_HEADER)3)dnL 
ifdef(CAC_LIST_LINKS3,  CAC_OUTPUT_LINKS(AC_LIST_FILES,  AC_LIST_LINKS)3)dnL 
ifeLse(C$53,  , , 

CEOF 

cat  >>  $CONFIG_STATUS  <<E0F 

$5 

EOF 

cat  >>  $CONFIG_STATUS  <<\E0F3) 

$4 

exit  0 
EOF 

chmod  +x  $CONFIG_STATUS 

rm  -fr  confdefs*  $a c_ c L ea n_f i L e s 

test  "$no_create"  = yes  ||  ${CONFIG_SHELL-/bi n/shl  $ C ON F I G_ST AT U S ||  exit  1 
dnL  conf i g . s t a t us  should  not  do  recursion. 

ifdef(CAC_LIST_SUBDIRS3,  CAC_0UTPUT_SUBDIRS(AC_LIST_SUBDIRS)3)dnL 
3)dnL 

dnL  This  is  a subroutine  of  PGP_AC_OUTPUT . It  is  called  inside  an  unquoted 
dnl  here  document  whose  contents  are  going  into  c on f i g . s t a t u s . 
dnl  PGP_AC_OUTPUT_FILES ( FI LE . . . , PRE.IN,  POST. IN) 
define (PGP_AC_OUTPUT_FILES, 

C#  Protect  against  being  on  the  right  side  of  a sed  subst  in  c on f i g . s t a t u s . 
changequote  ( , )dnL 

sed  's/%a/aa/;  s/a%/aa/;  s/%g$/ag/;  /ag$/s/C\\\\&%3/\\\\&/g; 

s/aa/xa/;  s/aa/a%/;  s/ag$/%g/'  > conf test . subs  <<\CEOF 
c h a ng e q u o t e ( C , 3)dnl 

dnl  These  here  document  variables  are  unquoted  when  configure  runs 
dnl  but  quoted  when  c on f i g . s t a t u s runs,  so  variables  are  expanded  once. 
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$a  c_vpsub 

dnL  Shell  code  in  configure. in  might  set  extrasub. 

Sextrasub 

dnl  Insert  the  sed  substitutions  of  variables, 
undive rt(AC_DIVERSION_SED) 

CEOF 

EOF 

cat  >>  $CONFIG_STATUS  <<E0F 

C0NFIG_FILES=\${C0NFIG_FILES-"$1"> 

C0NFIG_PRE=\${C0NFIG_PRE-"$2"> 

CONFIG_POST=\${CONFIG_POST-"$3"> 

EOF 

cat  >>  $C0N FIG_STATUS  <<\E0F 

dnl  Check  for  the  existence  of  the  pre  and  post  files  _FIRST_ 

# test  for  pre  and  post  files,  to  make  sure  they  exist 
if  test  -r  ''$ac_given_srcdir/$CONFIG_PRE'';  then 
ac_config_pre="$ac_given_srcdir/$CONFIG_PRE" 
echo  "Using  $ac_config_pre  for  pre-makefile" 
else 

ac_config_pre="" 
echo  "No  file  $CONFIG_PRE" 
f i 

if  test  -r  "$ac_given_srcdir/$CONFIG_POST";  then 
ac_config_post="$ac_given_srcdir/$CONFIG_POST" 
echo  "Using  $ac_config_post  for  post-makefile" 
else 

ac_config_post="" 
echo  "No  file  $ C ON F I G_ PO ST " 
f i 

for  ac_file  in  ..  $CONFIG_FILES;  do  if  test  "x$ac_file"  !=  x..;  then 
dnl  Specifying  an  input  file  breaks  the  trap  to  clean  up  on  interrupt, 
dnl  but  that's  not  a huge  problem. 

# Support  "outfile[:infile]",  defaulting  infile="outfile.in". 
case  "$ac_file"  in 

*:*)  ac_file_in='echo  "$ac_file"|sed  'sZ. *:%%'' 
ac_file='echo  "$ac_file"|sed  's%:.*%%''  ;; 

*)  ac_file_in="${ac_file>.in"  ;; 
esac 

# Adjust  relative  srcdir,  etc.  for  subdirectories. 

tt  Remove  last  slash  and  all  that  follows  it.  Not  all  systems  have  dirname. 
c h a ng eq uo t e ( , )dnl 

ac_dir='echo  $ac_file|sed  ' s % / C * / D C * / D *$% % ' ' 
c h a n g e q uo t e ( C , ])dnl 

if  test  "$ac_dir"  !=  "$ac_file"  &S  test  "$ac_dir"  !=  .;  then 
M The  file  is  in  a subdirectory, 
test  ! -d  "$ac_dir"  &&  mkdir  "$ac_dir" 
ac_dir_suffix="/'echo  $ac_dir|sed  's%*\./%Z''" 
it  A for  each  directory  in  $ac_dir_suffix. 

changequoteC,  )dnl 

a c_do t s= ' e c ho  $a c_d i r _s u f f i x | s ed  ' sZ / C ^ /]*%../ Z g ' ' 
c h a n g eq uo t e ( C , D)dnl 
else 

a c _d i r _ s u f f i x=  ac_dots= 
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f i 

case  "$ac_given_srcdir"  in 
.)  srcdir=. 

if  test  -z  "$ac_dots";  then  top_srcdir=. 

else  top_srcdir='echo  $ac_dots|sed  's%/$%%'';  fi  ;; 

/*)  srcdi r="$ac_given_srcdi r$ac_di r_suffix" 
top_srcdi r="$ac_given_srcdi r"  ;; 

*)  # Relative  path. 

srcdi r="$ac_dots$ac_given_srcdi r$ac_di r_suffix" 
top_srcdi r="$ac_dots$ac_given_srcdi r"  ;; 
e s a c 

ifdef(:AC_PROVIDE_AC_PROG_INSTALL:, 

L case  "$ac_given_INSTALL"  in 
cha ng equo t e ( , )dnL 

:/$:*)  INSTALL="$ac_gi ven_INSTALL"  ;; 
changequoteC  C,  Il)dnL 

*)  INSTALL="$ac_dots$ac_gi ven_INSTALL"  ; ; 
e s a c 
3 ) d n L 

echo  creating  "$ac_fiLe" 
rm  -f  "$ac_fiLe" 

conf_in_file="'echo  $ac_fiLe_in|sed  's%. */%%''" 

configure_input=" Generated  automatically  from  $conf_in_file  by  configure, 
case  "$ac_file"  in 
*Makefile*)  ac_comsub="1i\\ 

# $configure_input"  ;; 

*)  ac_comsub=  ;; 
esac 

sed  -e  "$ac_comsub 

sZaconfigure_inputa%$configure_input%g 
sZasrcdi ra%$srcdi r%g 
sZatop_srcdi ra%$top_srcdi rZg 
s%atop_bui  Iddi raZ$ac_dots.%g 
sZadi r_suffixaZ$ac_di r_suffixZg 

ifdef(:AC_PROVIDE_AC_PROG_INSTALL:,  CsZaiNSTALLaZSINSTALLZg 
:)dnl 

" -f  conftest.subs  $ac_config_pre  $ac_given_srcdir/$ac_file_in  \ 
n n $a c_conf i g_post  > $ac_file 

f i ; done 

rm  -f  conftest.subs 
3 ) 

dnl  Checks  for  raw  existance  of  a file, 
def i ne(PGP_TEST_EXlST, 

[trap  ' ' 1 2 15 
if  test  "$1"  = yes;  then 
AC_MSG_RESULT(yes) 
else 

AC_MSG_RESULT(no) 
f i 
3) 
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/* 

* config.h.in  --  Configuration  for  PGPLib.  This  file  contains 

* the  configuration  information  for  PGP,  and  it  should  be 

* included  in  all  PGP  source  files. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

"k 

* $Id:  c on f i g . h . i n , V 1.12.2.4  1997/06/09  23:46:17  quark  Exp  $ 

*/ 

/*  Define  to  empty  if  the  compiler  does  not  support  'const'  variables.  */ 
#undef  const 


/*  Define  to  'long'  if  <sys / types . h>  doesn't  define.  */ 
#undef  off_t 

/*  Define  to  'unsigned'  if  <sy s / t y pe s . h>  doesn't  define.  */ 
#undef  si ze_t 


/*  Define  if  you  have  the  ANSI  C header  files.  */ 
#define  STDC_HEADERS  0 

/*  Checks  for  various  specific  header  files  */ 

#define  HAVE_FCNTL_H  0 

//define  H A V E_ LI H I T S_ H 0 

//define  H AVE_STDARG_H  0 

#define  H A V E_ ST D L I B_H  0 

//define  H A V E_U N I S T D_H  0 

//define  HAVE_S YS_I0CTL_H  0 

#define  H A V E_ S Y S_T I M E_H  0 

//define  HAVE_S  YS_TIMEB_H  0 

//define  H A V E_  S Y S_P  A R AM_  H 0 

//define  H A V E_  S Y S_  ST  AT_H  0 

//define  H A V E_ A R P A_ I N ET_ H 0 


/*  Check  if  <sys/time.h>  is  broken  and  //includes  <time.h>  wrong  */ 
^define  T I M E_W I TH_ S YS_T I M E 0 


/*  Checks  for  various  functions  */ 
^define  HAVE_GETHRTIME  0 
#define  HAVE_CLOCK_GETTIHE  0 
#define  H AVE_C LOCK_GETRES  0 
//define  H A V E_G  ETT I H EO  F D A Y 0 
^define  H A V E_G ET I T I M E R 0 
//define  H AV  E_  S ET  I T I M E R 0 
//define  HAVE_FTIHE  0 
//define  HAVE.MKSTEMP  0 


/*  Checks  for  our  style 
//define  HAVE_UCHAR  0 
#define  HAVE_USHORT  0 
//define  HAVE_UINT  0 
//define  HAVE_ULONG  0 


of  unsigned  typedefs  */ 


#define  U S E_R S A R E F _ F U LL  0 
//define  U S E_R  S A_  L EG  A C Y 0 
//def  i ne  N0_RSA  0 
#define  N 0_R S A_KE YG E N 0 
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#define  USE_MPI_LIB  1 

/*  Define  "UNIX"  if  we  are  on  UNIX  and  "UNIX"  is  not  already  defined  */ 
#if  d e f i ned ( un i X ) ||  d e f i n ed ( __u n i x ) ||  defined  ( unix ) 


# i f nd  e f 

UNIX 

#d  e f i n e 

#e n d i f 

#end i f 

UNIX  1 

/ * Tags 

#def  i ne 

#d  e f i n e 

#def i ne 

#d  e f i n e 

for  exported  functions,  needed  for  dynamic  Linking  on  some  platforms  */ 

PGPExport 

PGPTTYExport 

PGPKDBExport 

SPGPExport 

C[CHK:66144eb0012408cf48183]: 
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/* 

* c on f i g _u i n3 2 . h — Configuration  for  PGPLib.  This  file  contains 

* the  configuration  information  for  PGP,  and  it  should  be 

* included  in  all  PGP  source  files. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  c o n f i g _ w i n 32 . h , V 1.6. 2. 2 1 997/06/1  1 22:29:44  mhw  Exp  $ 

*/ 


/* 

Define 

t 0 

empty  i f 

the  compiler  does  not  support  ' 

const'  variables 

/* 

# u n d e f 

const  * / 

/* 

Define 

t 0 

'long'  if 

< s y s / t y p e s . h>  doesn't  define. 

*/ 

/* 

#u  n d e f 

off 

_t  */ 

/* 

Define 

t 0 

'unsigned'  if  < s y s / t y p e s . h>  doesn't  defi 

n e . * / 

/* 

//undef 

s i ze_t  */ 

/* 

Define 

i f 

you  have 

the  ANSI  C header  files.  */ 

//define  STDC_ 

HEADERS  1 

/* 

Checks 

for 

various 

specific  header  files  */ 

#define  HAVE_FCNTL_H  1 
^define  H A V E_ L I M I T S_H  1 
#define  H A V E_ ST D A R G_ H 1 
Sdefine  H A V E_ ST D L I B_ H 1 
#undef  HAVE_UNISTD_H 
#undef  HAVE_SYS_IOCTL_H 
#undef  HAVE_SYS_TIHE_H 
#define  H A V E_ S Y S_T I M E B_ H 1 
#undef  HAVE_SYS_PARAM_H 

/*  Check  if  <sys/time.h>  is  broken  and  //includes  <time.h>  wrong  */ 
//undef  TIME_WITH_SYS_TIME 

/*  Checks  for  various  functions  */ 

#define  H A V E_G ETH RT I M E 0 
//define  H A V E_ C LO C K_G ETT I M E 0 
//define  H A V E_  C LO  C K_G  ET  R E S 0 
//define  H A V E_G  ETT  I M E 0 F D A Y 0 
//define  H A V E_G  ET  I T I M E R 0 
#define  H A V E_ S ET I T I H E R 0 
//define  HAVE_FTIME  1 

/*  Define  "UNIX"  if  we  are  on  UNIX  and  "UNIX"  is  not  already  defined  */ 
//if  d e f i n ed  ( u n i X ) ||  d e f i n e d ( __un  i x ) ||  defined  C__unix__) 

//ifndef  UNIX 
//define  UNIX  1 
# e n d i f 
//end  i f 


//if  (_MSC_VER>  = 1 000)  &&  def  i ned(_WIN32) 

#define  _P0SIX_  1 

#define  pclose  _pclose 

//define  popen  _popen 

#define  strcasecmp  stricmp 

#define  strncasecmp  strnicmp 
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#end i f 

/*  Tags  for  exported  functions  */ 

#if  d e f i n e d ( _ W I N 32 ) &S  ! d e f i n ed ( N 0 D L L) 

It  if  d e f i n e d ( PG  P LI  B ) 

It  define  PGPExport declspecC  dLLexport  ) 

U else 

# define  PGPExport  declspecC  dlLimport  ) 

U e n d i f 

U if  def ined(PGPTTYLIB) 

It  define  PGPTTYExport  __decLspec(  dLLexport  ) 
It  else 

# define  PGPTTYExport  declspecC  dlLimport  ) 

It  e nd i f 

n if  def inedCPGPKDBLIB) 

# define  PGPKDBExport  declspecC  dLLexport  ) 

U else 

H define  PGPKDBExport  __decLspecC  dlLimport  ) 
H end  i f 

It  if  d e f i n ed  C S PG  P L I B ) 

U define  SPGPExport  declspecC  dLLexport  ) 

It  else 

# define  SPGPExport  declspecC  dlLimport  ) 

It  en d i f 

#e  L s e 

It  define  PGPExport 

# define  PGPTTYExport 

# define  PGPKDBExport 
It  define  SPGPExport 
#endi  f 
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Dn  L 

dnl  $ I d : c o n f i g u r e . i n , v 1.36.2.7  1 997/06/1  2 03  : 49:  26  mhw  Exp  $ 
d n I 

dnl  This  file  in  input  to  autoconf.  It  consists  of  a series  of  m4 
dnl  macros  which  expand  to  produce  the  shell  script  "configure", 
dnl  Anything  which  is  not  an  m4  macro  is  copied  directly  to  the  output, 
dnl 

dnl  Start  things  up.  If  the  specified  file  doesn't  exist,  configure 
dnl  will  complain. 

AC_INITClib/pgp/pipe/utils/pgpPipeline.h) 

dnl  The  following  tests  need  to  know  that  we  intend  to  produce  a config.h 
dnl  file,  even  though  this  won't  expand  to  any  shell  script  code  until 
dnl  AC_0UTPUT  time. 

AC_CONFIG_HEADER(config.h) 

dnl  The  following  directory  is  where  we  will  find  the  ancillary  scripts, 
dnl  like  install-sh,  config.sub,  and  c o n f i g . g ue s s . 
AC_CONFIG_AUX_DIR(config) 

dnl  Checks  for  programs. 
ft  Find  a compiler  to  use. 

# Check  1)  The  $CC  environment  varaible,  2)  gcc,  3)  acc,  and  4)  cc. 
dnl  This  used  to  be  just  A C-C H E C K-PROG S ( C C , gcc  acc,  cc),  but... 
ft  This  deals  with  brain-damaged  Sun  systems  that  place  a bogus  cc  or 
tf  acc  executable  in  the  $PATH,  which  just  prints  an  error  and  exit. 
ft  We  deal  with  this  by  actually  trying  to  compile  a trivial  test  program, 
if  eval  "test  \"'e.cho  '$''{' a c_  cv_p  r og  _C  C ' + s e t >'' \ " = set";  then 
A C_M S G_C H E C KI N G C F o r C compiler  (cached)) 

CC="$ac_cv_prog_CC" 

AC_MSG_RESULT($CC) 
elif  test  -n  "$CC";  then 

ac_cv_prog_CC  = "$CC"  ft  Let  the  user  override  the  test. 

AC_MSG_CHECKING( For  C compiler) 

AC_HSG_RESULT($CC) 

else 

IFS  = "${IFS  = n a c_s a v e_ i f s = " $ I F S " ; I F S = " $ { I F S > : " 

echo  'main(){return  0;>'  > conftest.$ac_ext 
for  ac_prog  in  gcc  acc  cc;  do 

ft  Extract  the  first  word  of  "$ac_prog",  so  it  can  be  a program  name  with 
set  dummy  $ac_prog;  ac_word=$2 
AC_MSG_CHECKING(f or  $ac_word) 
for  ac_dir  in  $PATH;  do 

test  -z  "$ac_dir"  SS  ac_dir=. 
if  test  -r  "$ac_dir/$ac_word";  then 
CC="$ac_prog" 
if  eval  $ac_compile;  then 
ac_cv_prog_CC="$ac_prog" 
f i 

break 
f i 
done 

CC="$ac_cv_prog_CC" 
if  test  -n  "$CC";  then 

AC_MSG_RESULTC$ac_dir/$CC) 
break; 
f i 

AC_MSG_RESULT(no) 

[CCHK:73eae3e525393a5505ee6e44882563cf07367f5a64a514376ad1dafa055b4d197:: 
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done 

if  test  ! -n  "$CC";  then 

AC_MSG_ERROR ( no  C compiler  found) 
f i 

IFS="$ac_save_ifs" 
rm  -f  conftest* 
f i 

AC_SUBST(CC) 

A C _C A C H E_C H E C K ( w h e t h e r we  are  using  GNU  CC,  a c _ c v_p r og _g c c , 

CdnL  The  semicolon  is  to  pacify  NeXT's  s y n t a x- c h e c k i ng  cpp. 
cat  > conftest. c <<E0F 

#ifdef  GNUC 

yes; 

#end i f 
EOF 

if  ${CC-cc}  -E  conftest. c 2>8AC_FD_CC  | egrep  yes  >/dev/null  2>&1;  then 
ac_cv_prog_gcc=yes 
else 

ac_cv_prog_gcc=no 
f i : ) 

if  test  $a c_c v_p rog_g c c = yes;  then 
if  test  "${CFLAGS+set>"  !=  set;  then 
A C _C AC H E_C H E C K ( wh e t h e r ${CC-cc>  accepts  -g,  a c _ c v_p r og _g c c _g , 

[echo  'void  f(){>'  > conftest. c 

if  test  -z  "'${CC-cc>  -g  -c  conftest. c 2>&1'";  then 
ac_cv_prog_gcc_g=yes 
else 

ac_cv_prog_gcc_g=no 
f i 

rm  -f  conftest* 

:) 

f i 
f i 

# Now,  figure  out  what  CFLAGS  we  want.  If  the  user  didn't  ask  specifically, 
ft  we're  going  to  use  some  ideas  of  our  own. 
if  test  "${CFLAGS+set>"  !=  set;  then 

ft  Prefer  optimizing,  with  debugging  a second 
if  test  $ac_cv_prog_gcc$ac_cv_prog_gcc_g  = yesyes;  then 
CFLAGS="-0  -g" 
else 

C FLAGS=-0 
f i 

dnl  This  ugly  hack  is  to  get  warnings  enabled  where  possible. 

A C_HSG_C H E C KI NG ( f o r useful  warning  options  (\$WARN)) 
if  test  "${WARN+set>"  !=  set;  then 
if  test  $a c_c v_p rog_g c c = yes;  then 

WARN  = "-Wall  -W  -Wshadow  - Wpo  i n t e r-a r i t h - Wm i s s i ng-p r o t o t y pe s \ 

-Wwrite-strings" 

elif  $CC  -flags  2>81  | grep  SunSoft  >/dev/null  2>81  | | 

n $CC  -flags  2>81  | grep  SunPro  >/dev/null  2>81 ; then 

if  $CC  -flags  2>81  | grep  'checking'  | grep  '*-vc'  > /dev/null  2>81 ; then 

WARN=-vc 

elif  $CC  -flags  2>81  | grep  'checking'  | grep  '^-v  ' > /dev/null  2>81;  then 
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WARN=-v 
f i 

if  $CC  -flags  2>&1  | grep  ' '' -x  s t r c o n s t ' > /dev/nuLL  2>&1  ; then 

WARN="${WARN>${WARN+  }-xstrconst" 
f i 
f i 

tt  Any  other  compiler's  warning  flags? 
f i 

AC_MSG_RESULT(${WARN-none}) 

AC_SUBST(WARN) 

f i 

# end  of  CFLAGS  inference  section 

AC_CHECK_LIB(socket,  socket) 

AC_CHECK_LIB(ns I,  g e t h o s t by na me  ) 

AC_CHECK_LIB(m,  exp) 

#All  of  this  is  to  deal  with  the  RSA  legal  issues.  Basically,  what 
#we  do  is  look  for  I i b / pg p / p u b ke y / pg p R S AG  I u e 1 . c . If  we  find  it,  we 
#use  PGP's  custom  RSA  routines.  If  we  don't,  we  look  for 

# I i b / pgp / pub  key / pgp A 1 1 RS AG  I u . c . If  we  find  it,  we  look  for 

# . . / r s a r e f / i n s t a I I / u n i X / r s a r e f . a . If  we  find  it,  we  use  RSAREF.  We 
#then  also  look  for  I i b / pg p / p u b key / pg p R S AKey G e n . c . If  we  find  it,  we 
Sallow  RSA  key g e n e r a t i o n . If  we  didn't  find  RSAREF,  we  look  for 

# I i b /pgp / pub  key / pg pRS AG  I ue2 . c , which  contains  decrypt 

Sand  verify  functionality.  If  we  find  it,  we  again  look  for 
S I i b/pgp/pubkey /pgpRSAKeyGen . c to  see  if  we  can  generate  keys. 

SIf  we  didn't  find  the  legacy-mode  pg p R S AG  I u e 2 . c , we  build  a version 
Swith  no  RSA  support  whatsoever.  The  removal  of  the  two  relevant 
Ssource  files  ( pg p R S AG  I u e C 1 2 ] . c , pg p R S AKey G e n . c and  pgpA  1 1 RSAG I u . c ) 

Sis  handled  with  the  make  distribution-*  flags. 

A C _M S G_ C H E C KI N G ( f o r internal  RSA  encrypt/sign  support) 

RSALIB=" " 

RSAINCS="" 

RSAKEYGEN  = " " 

RSAKEY="pgpRSAKey.o" 

HAVE_RSAREF=0 

if  test  -f  "lib/pgp/pubkey/pgpRSAGluel.c";  then 
AC_HSG_RESULT(yes) 

RSAGLUE="pgpRSAGlue1 .o  pgpRSAGlue2.o" 

AC_HSG_CHECKINGCfor  lib/pgp/pubkey/pgpRSAKeyGen. c) 
if  test  -f  " I i b / pg p / p u b key / pg p R S AKe y Ge n . c " ; then 
AC_HSG_RESULT(yes) 

RSAKEYGEN=" pgpRSAKeyGen. o" 
else 

AC_HSG_RESULT(no) 

AC_DEFINE(NO_RSA_KEYGEN,  1) 
f i 

else 

AC_MSG_RESULT(no) 

AC_HSG_CHECKING(for  lib/pgp/pubkey/pgpAltRSAGlu.c) 
if  test  -f  "lib/pgp/pubkey/pgpAltRSAGlu.c";  then 
AC_nSG_RESULT(yes) 

AC_HSG_CHECKING C f or  RSAREF  in  . . / r s a r e f / i n s t a I I / u n i x ) 
if  test  -f  "../rsaref/install/unix/rsaref.a";  then 
HAVE_RSARE  F = 1 
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AC_MSG_RESULT(yes ) 

AC_DEFINE(USE_RSAREF_FULL,  1) 

RSAGLUE="pgpALtRSAGLu.o" 

RSALIB="\$(top_buiLddir)/../rsaref/instaLL/unix/rsaref.a" 

RSAINCS="-I  \$(top_bui Lddir)/. ./rsaref/test" 

RSAINCS  = "$RSAINCS  -I  \ $ ( t op_bu i L dd i r ) / . . / r s a r e f / s ou r c e " 
AC_MSG_CHECKING(for  Lib/pgp/pubkey/pgpRSAKeyGen.c) 
if  test  -f  "Lib/pgp/pubkey/pgpRSAKeyGen.c";  then 
AC_MSG_RESULT(yes) 

RSAKEYGEN="pgpRSAKeyGen.o" 

else 

AC_HSG_RESULT(no) 

AC_DEFINE(NO_RSA_KEYGEN,  1) 
f i 
else 

AC_HSG_RESULT(no) 
f i 
else 

AC_MSG_RESULT(no) 
f i 

if  test  "x$HAVE_RSAREF"  = "x0";  then 

A C_M S G_ C H E C KI N G ( f o r internal  RSA  d e c ry p t / v e r i f y (Legacy  mode)  support) 
if  test  -f  "Lib/pgp/pubkey/pgpRSAGLue2.c";  then 
AC_MSG_RESULT(yes) 

AC_DEFINE(USE_RSA_LEGACY,  1) 

RSAGLUE="pgpRSAGLue2.o" 

AC_MSG_CHECKING(for  Lib/pgp/pubkey/pgpRSAKeyGen.c) 
if  test  -f  "Lib/pgp/pubkey/pgpRSAKeyGen.c";  then 
AC_HSG_RESULT(yes) 

RSAKEYGEN="pgpRSAKeyGen.o" 

else 

AC_MSG_RESULT(no) 

AC_DEFINE(NO_RSA_KEYGEN,  1) 
f i 
else 

AC_MSG_RESULT(no) 

echo  No  RSA  support  included  in  this  version. 

AC_DEFINE(NO_RSA,  1) 

RSAGLUE=" " 

RSAKEY=" " 

AC_DEFINE(NO_RSA_KEYGEN,  1) 
f i 
f i 
f i 

AC_SUBST( RSAGLUE  ) 

AC_SUBST(RSAINCS) 

AC_SUBST(RSAKEYGEN) 

AC_SUBST(RSAKEY) 

AC_REaUIRE_CPP 

# Finally,  figure  out  the  command  to  generate  dependencies. 

AC_CACHE_CHECK( how  to  make  dependencies,  a c_ c v_p r og_D E P EN D , 

[if  test  -n  "SDEPEND";  then 
ac_cv_prog_DEPEND="$DEPEND" 
else 

IFS  = "${IFS  = n }";  a c _ s a v e _ i f s = " $ I F S " ; I F S = " $ { I F S } : " 

echo  '#incLude  "confdefs.h"'  > conftest.c 

for  ac_prog  in  "$CPP  -M"  "$CC  -xM"  "$CC  -M";  do 
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echo  $ac_prog  $CPPFLAGS  conftest.c  1>&AC_FD_CC; 
if  $ac_prog  SCPPFLAGS  conftest.c  2>&AC_FD_CC  \ 

I egrep  "conftest\.o"  >/dev/nuLL  2>81;  then 
ac_cv_prog_DEPEND="$ac_prog  SCPPFLAGS" 
break 
f i 
done 

if  test  ! -n  "$ac_cv_prog_DEPEND";  then 
ac_cv_prog_DEPEND=: 
f i 

IFS="$ac_save_i fs" 
rm  -f  conftest* 
fi:) 

DEPEND="$ac_cv_prog_DEPEND" 

AC_SUBST(DEPEND) 

# Find  a BS D- c ompa t i b i L e install  program,  with  install-sh  as  a fallback. 
AC_PROG_INSTALL 

# Find  "ranlib".  Sone  systems  don't  have  or  need  ranlib.  If  so, 

ft  (do  nothing)  is  used  instead. 

AC_PROG_RANLIB 

# Use  symlinks  (In  -s)  if  possible.  If  not,  use  hard  links  (In). 
AC_PROG_LN_S 

# Figure  out  how  to  test  for  symlinks...  Check  'test  -L'  and  then  'test  -h' 
A C_C A C H E _ C H E C K ( h o w to  test  for  symlinks,  a c_ c v_p r og_T E ST_ L, 

Crm  -f  conftest 

$a c _ c v_p r og_ LN_S  foo  conftest 

IFS  = "${IFS  = n a c_ sa v e_ i f s = " $ I F S " ; I F S = " $ { I F S > : " 

if  ( test  -L  conftest  );  then 
ac_cv_prog_TEST_L="test  -L" 
elif  ( test  -h  conftest  );  then 
ac_cv_prog_TEST_L="test  -h" 
else 

a c_ c v_ p r og_T E ST_ L= " t e s t ! -f" 
f i 

IFS="$ac_save_ifs" 
rm  -f  conftest*]) 

TEST_L="$ac_cv_prog_TEST_L" 

AC_SUBST (TEST_L) 

dnl  Checks  for  libraries, 
dnl  (we  don't  have  any) 

dnl  Checks  for  header  files. 

# Check  that  this  system  has  a set  of  properly  working  ANSI  C header  files. 

U In  particular,  check  for  the  existence  of  <stdlib.h>,  <stdarg.h>, 

tt  <string.h>  and  <float.h>.  Also  check  that  <string.h>  declares  mem*, 
ft  that  <stdlib.h>  declares  free,  and  that  the  <ctype.h>  macros  work 
tt  with  values  >=  128. 

AC_HEADER_STDC 

tt  Check  that  we  have  <fcntl.h>,  <limits.h>,  <stdarg.h>  and  <stdlib.h> 
tt  individually. 

A C _ C H E C K_ H E A D E R S ( f c n t I . h limits. h stdarg.h  stdlib.h  unistd.h  \ 
n sys/ioctl.h  sys/time.h  sys/timeb.h  sys/param.h  arpa/inet.h  \ 
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n sys/stat.h) 

AC_HEADER_TIME 

dnL  Checks  for  typedefs,  structures,  and  compiler  characteristics. 

# Verify  that  the  compiler  supports  const,  and  that  it  works. 

ft  A lot  of  compilers  sort  of  support  const,  but  they  have  bugs 
If  that  will  prevent  valid  programs  from  compiling. 

AC_C_C0NST 

# See  if  we  have  off_t  in  <sy s / t y p e s . h>  or  <stdlib.h>. 

U If  not,  define  it  as  "long". 

AC_TYPE_OFF_T 

# See  if  we  have  size_t  similarly.  If  not,  define  it  as  unsigned. 
AC_TYPE_SIZE_T 

# Check  for  our  style  of  unsigned  typedefs  in  sys/types.h 

AC_EGREP_HEADER(:[*a-zA-Z0-9_:ucharC^a-zA-Z0-9_:D,  sys/types.h, 
n n AC_DEFINE(HAVE_UCHAR)  ) 

AC_EGREP_HEADER(CC*a-zA-Z0-9_:ushort:''a-zA-Z0-9_::,  sys/types.h, 
n n AC_DEFINE(HAVE_USHORT) ) 

AC_EGREP_HEADER(C[''a-zA-Z0-9_]uint:^a-zA-Z0-9_]:,  sys/types.h, 
n n AC_DEFINE(HAVE_UINT)  ) 

AC_EGREP_HEADER(C[*a-zA-Z0-9_:ulongC^a-zA-Z0-9_::,  sys/types.h, 
n n AC  DEFINE(HAVE_ULONG) ) 


dnl  Checks  for  library  functions. 

AC_C H ECK_ FUNCS ( ge t h r t i me  c I o c k_g e t t i me  clock_getres  gettimeofday  \ 
n getitimer  setitimer  ftime  mkstemp) 


#We  have  to  do  this  after  everything  else,  otherwise  the  variable  in 
#the  libs  path  with  blow  up  checking  for  other  functions. 

#This  sets  the  RSALIB  (i.e.,  RSAREF)  if  any  onto  the  end  of  the  lib 
tfpath : 


LIBS="$LIBS  SRSALIB 


# The  big  bang!  Produce  the  output  files.  This  is  c on f i g . c a c h e , and 
M confi g . status,  which  builds  the  config.h  file  and  a long  list  of 

# Makefiles. 

dnl  The  value  specified  to  AC _C 0 N F I G_ H E A D E R at  the  top  if  the  file  is 
dnl  used  here. 

PGP_AC_OUTPUT( Ma kef i I e lib/Hakefile  I i b / bn / H a ke f i I e I i b / pg p / Ma ke f i I e 
a I i b / pgp / i n c I ude /Ma kef i I e I i b / pg p / h e I pe r / Ma ke f i I e 

n I i b / pg p / c omp r e s s / Ma ke f i I e I i b / pg p / ha s h / Ma ke f i I e 

n I i b /pgp / c i phe r /Ma ke f i I e I i b / pg p / r a nd om / Ma ke f i I e 

n I i b / pg p / pu b key / Ma ke f i I e I i b / pg p / p i pe / Ma ke f i I e 

n I i b / pg p / p i p e / u t i I s / Ma  ke f i I e I i b / pg  p / p i p e / f i I e / Ma  ke f i I e 

n I i b / pg p / p i p e / s i g /Ma  ke f i I e I i b / pg p / p i pe  / c r y p t / Ma  ke  f i I e 

n I i b / pg p / p i p e / 1 ex t / Ma ke f i I e I i b / pg p / p i pe / pa r s e r / Ma ke f i I e 

n I i b / pg p / u t i I s / Ma ke f i I e I i b / pg p / key s / Ma ke f i I e I i b / pg p / ke y db / Ma ke f i I e 

n I i b/ 1 1 y u i / Ma kef i I e I i b / s i mp I e / Ma ke f i I e a pps / Ma ke f i I e 

n apps/common/Makef i le  a pp s / pg p / Ma ke f i I e a pp s / pg p k / Ma ke f i I e 

n a pps / pg p k . o I d / Ma ke f i I e , c on f i g / p r e . i n , c on f i g / po s t . i n ) 


CIICHK: 3eec1  6988ad55cbb96cd5831  993d00f 0dddd059f 65298b8d9527953d8d67:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1963 


makefile. msc 


n 


U Top  Level  ma ke f i L e . ms c 

n 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

U Flags  are  set  in  L i b / ma ke f i L e . ms c as  weLL  as  here 
U 

ti  $Id:  ma  ke  f i L e . m s c , V 1.4. 2. 2 1 997/06/07  09:49:01  mhw  Exp  $ 
ft 

aLL:n  i n c I ud e \ pg pU s u a L s . h 
n for  %d  in  ( Lib  apps  ) do  \ 

a cd  %d  S&  $(MAKE)  /$( HAKE F LAG S ) \ 

n "DEBUG=-DDEBUG=0  - D PG PT R U S T MO D E L=0  -DNODLL"  \ 

n n /f  makefile. msc  $3  &&  cd  .. 


clean: 


□ 


for  %d  in  ( Lib  apps  ) do  \ 


n 


D 


cd  %d  &&  $(MAKE)  /$( MAKE F LAG S ) /f  makefile. msc  $3  S&  cd  .. 


a 


□ 


a 


n 


headers 


incLude\pgp\usuaLs.h: 

copy  c o n f i g _w i n 32  . h config.h 

-mkdir  include 

-del/q  incLudeX*.* 

-mkdir  libXincLude 

cd  Lib  &&  $(MAKE)  /$( MAKE F LAG S ) /f  makefile. msc  headers  &&  cd  .. 
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# ! /bi n/sh 
# 

# $Id:  conf  i g . guess, V 1.4. 2.1  1 997/06/07  09:49:20  mhw  Exp  $ 

n 

# Attempt  to  guess  a canonical  system  name. 

# Copyright  (C)  1992,  93,  94,  95,  1996  Free  Software  Foundation,  Inc. 

U 

U This  file  is  free  software;  you  can  redistribute  it  and/or  modify  it 
U under  the  terms  of  the  GNU  General  Public  License  as  published  by 
ft  the  Free  Software  Foundation;  either  version  2 of  the  License,  or 
ft  (at  your  option)  any  later  version. 
ft 

ft  This  program  is  distributed  in  the  hope  that  it  will  be  useful,  but 
It  WITHOUT  ANY  WARRANTY;  without  even  the  implied  warranty  of 

# MERCHANTABILITY  or  FITNESS  FOR  A PARTICULAR  PURPOSE.  See  the  GNU 
tt  General  Public  License  for  more  details. 

tt 

ft  You  should  have  received  a copy  of  the  GNU  General  Public  License 

tt  along  with  this  program;  if  not,  write  to  the  Free  Software 

tt  Foundation,  Inc.,  59  Temple  Place  - Suite  330,  Boston,  MA  02111-1307,  USA. 
tt 

# As  a special  exception  to  the  GNU  General  Public  License,  if  you 
tt  distribute  this  file  as  part  of  a program  that  contains  a 

tt  configuration  script  generated  by  Autoconf,  you  may  include  it  under 
tt  the  same  distribution  terms  that  you  use  for  the  rest  of  that  program. 

tt  Written  by  Per  Bothner  <bo  t h n e r a c y g n u s . c om>  . 

tt  The  master  version  of  this  file  is  at  the  FSF  in  / h ome  / g d / g n u / I i b . 

tt 

tt  This  script  attempts  to  guess  a canonical  system  name  similar  to 
tt  config. sub.  If  it  succeeds,  it  prints  the  system  name  on  stdout,  and 
tt  exits  with  0.  Otherwise,  it  exits  with  1. 
tt 

tt  The  plan  is  that  this  can  be  called  by  configure  scripts  if  you 
tt  don't  specify  an  explicit  system  type  (host/target  name). 
tt 

tt  Only  a few  systems  have  been  added  to  this  list;  please  add  others 
tt  (but  try  to  keep  the  structure  clean). 
tt 

tt  This  is  needed  to  find  uname  on  a Pyramid  OSx  when  run  in  the  BSD  universe. 
tt  (ghazianoc.rutgers.edu  8/24/94.) 

if  (test  -f  /.attbin/uname)  >/dev/null  2>&1  ; then 

n PATH=$PATH:/.attbin  ; export  PATH 

f i 

U N AM E_M AC H I N E = ' ( u na me  -m)  2>/dev/null'  | | U N AM E_H A C H I N E=un kno wn 
U N AM E_R E LE A S E = ' ( u na me  -r)  2>/dev/null'  | | UN AH E_ R E L E A S E=u n kno wn 
UNAME_SYSTEM= '( uname  -s)  2>/dev/null'  ||  U N AH E_S Y S T EH=un kno wn 
UNAME_VERSION=' (uname  -v)  2>/dev/null'  ||  UN AH E_ V E R S 1 0 N = u n kno wn 

trap  ' rm  -f  dummy. c dummy. o dummy;  exit  1'  1 215 

tt  Note:  order  is  significant  - the  case  branches  are  not  exclusive. 

case  "$(UNAME_MACHINE>:${UNAME_SYSTEH>:${UNAME_RELEASE>:${UNAHE_VERSION}"  in 
alpha:0SF1:CVX]*:*) 

n tt  After  1.2,  0SF1  uses  "VI. 3"  for  uname  -r. 
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n ft  After  4.x,  0SF1  uses  "X4.x"  for  uname  -r. 

n echo  a L p h a -d e c-o s f ' e c h o $ { U N AM E_R E L E A S E > | sed  -e  ' s / '^  CVX D / / ' ' 

n exit0;; 

alpha :0SF1;*:*) 

n ft  1.2  uses  "1.2"  for  uname  -r. 

n echo  a L pha -d e c -o s f $ { U N AM E _ R E LE AS E > 

exit  0 ; ; 

21064:Windows_NT :50:3) 
n echo  a L p h a -d e c - w i nn 1 3 . 5 

n exit0;; 

Amiga*:UNIX_System_V:4.0:*) 
n echo  m68 k- c bm- s y s v4 

n e X i t 0 ; ; 

amigarNetBSD:*;*) 

echo  m68k-cbm-netbsd${UNAME_RELEASE> 

exit  0 ; ; 

amigaiOpenBSD:*:*) 

echo  m68k-cbm-openbsd${UNAME_RELEASE} 

exit  0 ; ; 

arm:RISC*:1.C012]*:*|arm:riscix:1.C012]*:*) 
n echo  a rm-a c o r n- r i s c i x $ { U N AM E_R E LE A S E > 

n e X i t 0 ; ; 

Pyramid*:OSx*:*:*) 

n if  test  "'(/bin/universe)  2>/dev/nuLL'"  = att  ; then 


a 

Q 

echo 

pyramid-pyramid-sysv3 

□ 

else 

n 

n 

echo 

pyramid-pyramid-bsd 

Q 

f i 

n 

exit  0 

r r 

sun4*:SunOS:5.*:*) 

n echo  s pa r c- s un- s o L a r i s 2 ' e c h o $ { UN AM E_ R E LE A S E > | s e d -e  's/C*. 3*//'' 

n exit0;; 

i 86pc : SunOS : 5 . * : *) 

n echo  i 386-u n kno wn- s o L a r i s 2 ' e c ho  $ { UN  AM E_R E LE A S E > | s ed  -e  's/C*. 3*//'' 

n e X i t 0 ; ; 

sun4*:SunOS:6*:*) 

n ft  According  to  config. sub,  this  is  the  proper  way  to  canonicalize 

n ft  SunOS6.  Hard  to  guess  exactly  what  SunOS6  will  be  like,  but 

n U it's  likely  to  be  more  like  Solaris  than  SunOS4. 

n echo  s pa r c -s un-s o I a r i s 3 ' e c h o ${UNAME_RELEASE> | sed  -e  's/C*.D*//'' 

n e X i t 0 ; ; 

sun4*:SunOS:*:*) 

n case  "'/usr/bin/arch  -k'"  in 

n Series*|S4*) 

n n UNAME_RELEASE= ' uname  -v ' 

n n ;; 

Q esa  c 

n ft  Japanese  Language  versions  have  a version  number  like  '4.1.3-JL'. 

n echo  s pa r c- s un- s uno s ' e c h o $ { U N AM E_R E LE A S E > | s ed  -e  's/-/_/'' 

n exit0;; 

sun3*:SunOS:*:*) 

n echo  m68 k- s u n-s u no s ${ U N AM E_ R E LE A S E > 

n e X i t 0 ; ; 

atari*:NetBSD:*:*) 

n echo  m68 k-a t a r i -n e t bs d $ C U N AM E_R E L E A S E > 

n exit0;; 

sun3* : Net  BSD : * : * ) 

n echo  m68 k- s u n-n e t b sd$ C U N AM E_ R E LE A S E > 
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□ 

Q 

Q 

a 

□ 

a 

n 

□ 

n 

n 

□ 

a 

n 

D 

n 

□ 

D 

o 

n 

D 

n 

n 

□ 

□ 

n 


n 

D 

n 

D 

D 

a 


Q 


exit  0 ; ; 

mac68k:NetBSD:*:*) 

echo  m68k-appLe-netbsd${UNAME_RELEASE> 

exit  0 ; ; 

atari*:OpenBSD:*:*) 

echo  m68k-atari-openbsd${LINAME_RELEASE> 

exit  0 ; ; 

sun3*:0penBSD:*:*) 

echo  m68k-sun-openbsd${UNAME_RELEASE> 

exit  0 ; ; 

mac68k:0penBSD:*:*) 

echo  ni68k-appLe-openbsd${UNAME_RELEASE> 

exit  0 ;; 

RISC* : ULTRIX : * : *) 

echo  mi ps-dec-u  Ltri x${UNAME_RELEASE> 
exit  0 ; ; 

VAX* : ULTRIX* : * : *) 

echo  vax-dec-uLtrix${UNAME_RELEASE> 
exit  0 ; ; 
mips:*:4*:UMIPS) 

echo  m i p s-m i p s - r i s c o s 4 s y s V 
exit  0 ; ; 
mips:*:5*:RISCos) 

echo  mips-mips-riscos${UNAHE_RELEASE} 

exit  0 ; ; 

Night_Hawk:Power_UNIX:*:*) 

echo  poue r p c-h a r r i s - po we r u n i X 
exit  0 ; ; 
m88k : CX/UX : 7* : *) 

echo  m88 k-h a r r i s- c XU x7 
exit  0 ; ; 
m88k:*:4*:R4*) 

echo  m88 k-mo t o ro I a- sy s v4 
exit  0 ; ; 
n88k:*:3*:R3*) 

echo  m88 k-mot o r o L a-sy s v3 

exit  0 ; ; 

AViiONidgux:*:*) 

ft  DG/UX  returns  AViiON  for  all  architectures 
UNAHE_PROCESSOR= ' uname  -p ' 

if  C $UNAHE_PROCESSOR  = mc88100  -o  $U N AH E_ PRO C E S SO R = mc88100  1 ; 
if  C ${TARGET_BINARY_INTERFACE>x  = mSSkdguxeLfx  \ 

-o  ${TARGET_BINARY_INTERFACE>x  = x 3 ; then 
n echo  m88 k-d g-dg u x $ { U N AM E_ R E LE A S E > 

else 

n echo  m88 k-dg-d g uxb c s $ < U N AM E_ R E LE A S E > 

f i 

else  echo  i 5 86-dg-d  g ux  $ { U N AM  E_  R E LE  A S E > 
f i 

exit  0 ; ; 

M88*  : Do L p h i nO S : * : * ) n#  DoLphinOS  (SVR3) 
echo  m88 k-do I ph i n-sy s v3 
exit  0 ; ; 

M88*:*:R3*:*) 

# Delta  88k  system  running  SVR3 
echo  m88 k-mo t o ro L a-sy sv3 
exit  0 ; ; 

XD88*:*:*:*)  U Tektronix  XD88  system  running  UTekV  (SVR3) 
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echo  ni88k-tekt  roni  x-sysv3 

exit  0 ; ; 

T e k43 C 0-9 D C 0-9 ] : UTe k : * : * ) # Tektronix  4300  system  running  UTek  (BSD) 
echo  m68 k- t e k t r on i x-b s d 
exit  0 ; ; 

*: IRIX*:*:*) 

echo  mi ps-sgi -i ri X ' echo  $ ( U N AM E_ R E LE A S E } | s ed  -e  's/-/_/g'' 
exit  0 ; ; 

????????: AIX? : [1 2] . 1 : 2)  U AIX  2.2.1  or  AIX  2.1.1  is  RT/PC  AIX. 

echo  romp-ibm-aix  ft  uname  -m  gives  an  8 hex-code  CPU  id 

exit  0 ;;  ft  Note  that:  echo  "''uname  -s''"  gives  'AIX  ' 

i C34:86:AIX:*:*) 

echo  i386-ibm-aix 
exit  0 ; ; 

*: AIX:2:3) 

if  grep  bos325  / u s r / i n c L u d e / s t d i o . h >/dev/nuLL  2>81 ; then 
a sed  's/*n  n //'  <<  EOF  >dummy.c 

n ^include  < s y s / s y s t em c f g . h> 


main!) 


n 

B 

n { 

n 

B 

a if  ( ! __powe r_pc ( ) ) 

n 

B 

a n exit(l); 

n 

B 

n pu t s ( " poue r p c - i bm-a i x3 

n 

B 

n exit(0); 

n 

EOF 

B 

n } 

□ 

B 

${CC-cc}  dummy. c -o  dummy  \ 

n 

B 

n 8&  ./dummy  8S  rm  dummy 

n 

B 

Q &&  exi t 0 

n 

B 

rm  -f  dummy. c dummy 

Q 

B 

echo  r s6000- i bm-a i x3 . 2 . 5 

n 

e L i f 

grep  bos324  / us r / i n c L u d e / s t d i o . h 

B 

B 

echo  r s6000- i bm-a i X 3 . 2 . 4 

B 

else 

B 

B 

echo  rs6000-i bm-a i x3 . 2 

B 

f i 

B 

exit 

0 ;; 

*:AIX:*: 

4) 

B 

if  / us r / sbi n / L sa t t r -EHL  proc0  | grep 

B 

a 

IBM_ARCH=rs6000 

fl 

else 

B 

a 

IBM_ARCH=powerpc 

B 

f i 

B 

if  C 

-x  / u s r / b i n / os L e ve L ] ; then 

B 

n 

IBM_REV=' /usr/bin/osLeveL ' 

B 

else 

B 

n 

IBH_REV=4.${UNAHE_RELEASE} 

B 

f i 

B 

echo 

${IBM_ARCH}-ibm-aix${IBH_REV} 

B 

exit 

0 ;; 

* : AIX : * : 

*) 

B 

echo 

rs6000-i bm-ai x 

B 

exit 

0 ;; 

i bmrt : 4 . 

4BSD:*| romp-ibm:BSD:*) 

B 

echo 

romp-ibm-bsd4.4 

B 

exit 

0 ;; 

i bm  r t : *B  S D : * I r omp- i bm  : BS  D : * ) ft  covers  RT/PC  N e t BS  D / Op  e nB  S D and 

CCCHK:b56ba393cf8d24eec993c71ce48965a637cf4113a9059395aa46ae98b632981d4:: 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1969 


config. guess 


n echo  romp- i bm-b s d $ { U N AM E_ R E L E A S E > M 4.3  with  uname  added  to 

n exit  0 ;;  # report:  romp-ibm  BSD  4.3 

*:B0SX:*:*) 

n echo  r s 6000-b u L L -bo s x 

a e X i t 0 ; ; 

DPX/2?00:B.O.S.:*:*) 
n echo  m68 k-b u L L - s y s v3 

a exi t 0 ; ; 

9000/:343?? : 4 . 3bsd : 1 . * : *) 
n echo  m68k-hp-bsd 

n exit0;; 

hp300 : 4 . 4BSD : * : * | 9000 / C 34 : ? ? : 4 . 3 b s d : 2 . * : * ) 
n echo  m68 k- h p-b s d4 . 4 

n e X i t 0 ; ; 

9000/[3478:??:HP-UX:*:*) 
n case  " $ { U N AM E_H A C H I N E > " in 

n 9000/31  ? ) HP_ARCH  = m68000  ; ; 

n 9000/:34]??)  HP_ARCH=m68k;; 

n 9000/7??  I 9000/8?[679:  ) H P_ A R C H = h p pa  1 . 1 ;; 

n 9000/8??  ) HP_ARCH  = hppa1  . 0 ; ; 


Q 

Q 

□ 

n 


□ 

□ 

n 

a 

□ 

n 

n 

□ 

n 

D 

n 

n 

a 

n 

□ 

n 

□ 

n 

a 

c 

Q 

n 

□ 

□ 

EOF 

□ 

□ 

□ 

a 


a 


Q 


e s a c 

HPUX_REV= ' echo  $ { U N AM E_ R E L E A S E > | s ed  -e  ' s / [ ^ . ] * . C 0B D * / / ' ' 
echo  ${HP_ARCH>-hp-hpux${HPUX_REV> 
exit  0 ; ; 

3050* : HI-UX : * : *) 

sed  's/^n  //'  <<  EOF  >dummy.c 

^include  <unistd.h> 
i nt 

main  ( ) 

{ 

Long  cpu  = sysconf  ( _S C _ C PU_ V E R S I ON  ) ; 

/*  The  order  matters,  because  C PU_ I S_ H P_M C 68K  erroneously  returns 
true  for  C PU_P A_ R I S Cl _0 . C PU_ I S_ P A_ R I S C returns  correct 
results,  however.  */ 
if  ( CPU_IS_PA_RISC  (cpu)) 

{ 


swi tch  (cpu) 


n 

D 

{ 

case 

CPU_ 

PA_ 

RISC1 

_0: 

puts 

( " 

hppal  .0-hitachi-hiuxwe2' 

break; 

n 

case 

CPU_ 

PA- 

RISC1 

_1  : 

puts 

( " 

hppal .1-hitachi-hiuxwe2' 

break; 

D 

case 

CPU_ 

PA. 

RISC2 

_0: 

puts 

( " 

hppa2.0-hitachi-hiuxwe2' 

break; 

Q 

n 

} 

default: 

puts  ("hppa 

-hi tachi 

-hiuxwe2");  break; 

} 

else  if  (CPU_IS_HP_MC68K  (cpu)) 
puts  ("m68k-hitachi-hiuxwe2"); 
else  puts  ("unknown-hitachi-hiuxwe2"); 
exit  (0); 

} 

${CC-cc}  dummy. c -o  dummy  &S  ./dummy  S&  rm  dummy. c dummy  SS  exit  0 

rm  -f  dummy. c dummy 

echo  u n kn o wn- h i t a c h i -h i u X we 2 

exit  0 ; ; 

9000/7??:4.3bsd:*:*  | 90 00 / 8 ? C 79 : : 4 . 3b s d : * : * ) 
echo  h ppa 1 . 1 - h p-b s d 
exit  0 ; ; 

9000/8?? : 4 . 3bsd : * : *) 
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n 

D 

□ 

n 


Q 


n 


□ 


n 


n 

□ 

a 


D 


n 


□ 


□ 


n 

n 

□ 

D 

□ 


n 


D 


n 


n 


a 

Q 

D 

n 

n 

n 


echo  hppal  . 0-hp-bsd 

exit  0 ; ; 

hp7??:0SF1  :*:*  | h p8 ? C 79 : : 0 S F 1 : * : * ) 
echo  h p p a 1 . 1 -h p-o s f 
exit  0 ; ; 

hp8??:0SF1:*:*) 

echo  hppal . 0-hp-osf 

exit  0 ; ; 

parisc*:Lites*:*:*) 

echo  h ppa 1 . 1 -hp- L i t e s 

exit  0 ;; 

C 1 * : C on V exO S : * : * | c on ve x : C o n v e xO S : C 1 * : * ) 

echo  c 1 - c 0 n V ex-b s d 
exit  0 ; ; 

C 2 * : C on vexO S : * : * | c on v e x : C on v e xO S : C 2 * : * ) 

if  getsysinfo  -f  scaLar_acc 
then  echo  c32-convex-bsd 
else  echo  c2-convex-bsd 
f i 

exit  0 ;; 

C34* : ConvexOS : * : * | c o n vex : C on vex  0 S : C 34* : * ) 
echo  c34- c o n V e x-b s d 
exit  0 ; ; 

C38* : ConvexOS : * : * | convex : Con vexOS : C38* :* ) 
echo  c38-convex-bsd 
exit  0 ;; 

C4* : ConvexOS :*: * | c o n ve x : C o n v e xO S : C 4 * : * ) 
echo  c4-convex-bsd 
exit  0 ; ; 

CRAY*X-HP; * : * : *) 

echo  xmp- c r a y-un i c o s 
exit  0 ; ; 

CRAY*Y-HP:*:*:*) 

echo  ymp-cray-uni  cos${UNAf1E_RELEASE> 
exit  0 ; ; 

CRAY*C90:*:*:*) 

echo  c90-cray-uni cos${UNAME_RELEASE} 

exit  0 ; ; 

CRAY-2:*:*:*) 

echo  c ra y 2- c ra y-un i c o s 
exit  0 ; ; 

hp3C0-9D:05::NetBSD:*:*) 

echo  m68k-hp-netbsd${UNAnE_RELEASE> 

exit  0 ;; 

hp3C0-9::05: : OpenBSD:*:*) 

echo  ni68k-hp-openbsd${UNAME_RELEASE} 

exit  0 ; ; 

iC34]86:BSD/386:*:*  | * : BS D / 0 S : * : * ) 

echo  ${UNAME_HACHINE>-unknown-bsdi${UNAME_RELEASE> 
exit  0 ; ; 

*: FreeBSD:*:*) 

echo  ${ UN AM E_M AC H I N E > -u n kno wn-f r e e b s d ' e c h o \ 

n n n $ { U N A M E _ R E L E A S E } | s e d -e  's/E-C.*//'' 

exit  0 ; ; 

*:NetBSD:*:*) 

echo  ${UNAME_MACHINE>-unknown-netbsd ' echo  \ 

n n n $ { U N AM E_ R E LE A S E > | s ed  -e  ' s / L- _1 . * / \ ' 

exit  0 ; ; 
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* : OpenBSD : * : *) 

n echo  $ { U N AM E_M A C H I N E > - u n kno wn-o pe n b s d ' e c h o \ 

n n n n $ { U N AH E_ R E LE A S E > | s e d -e  ' s / C \ ' 

a exit0;; 

i * : CYGWIN* : *) 

n echo  i 3 86-u n kno wn- c y g w i n3 2 

o exitO;; 

p*:CYGWIN*:*) 

n echo  po we r p c L e-u n kn o wn- cy g w i n 32 

0 exitO;; 

* : GNU : * : * ) 

n echo  'echo  $ { U N AM E_M A C H I N E > | s ed  -e  ' s -u n kn own-g n u ' e c h o \ 

n n n n n $ { U N A M E _ R E L E A S E > | s e d -e  ' s, ' 

B e X i t 0 ; ; 

*:Linux:*:*) 

n # The  BED  Linker  knows  what  the  default  object  file  format  is,  so 

n ft  first  see  if  it  will  teLL  us. 

B L d_ h e L p_ s t r i ng = ' L d — help  2>&1 ' 

n if  echo  " $ L d_ h e I p_ s t r i n g " | grep  >/dev/null  2>&1  \ 

n n n n "supported  emulations:  e L f _ i C 34 5 ] 8 6 " ; then 

n echo  " $ { U N AM E_M A C H I N E } -u n kn o wn- L i n u x " ; exit  0 

B elif  echo  "$ld_heLp_string"  | grep  >/dev/nuLl  2>81  \ 

n n D n "supported  emulations:  i C 3 4 5 II 8 6 L i n ux  " ; then 

n echo  " $ f U N AM E _M A C H I N E > -u n kno wn- L i n ux a o u t " ; exit  0 

n elif  echo  "$Ld_heLp_string"  | grep  >/dev/nuLL  2>&1  \ 

n n n n "supported  emulations:  iC345I186coff";  then 

n echo  "${UNAME_MACHINE>-unknown-linuxcoff"  ; exit  0 

B elif  echo  " $ I d_h e L p_ s t r i n g " | grep  >/dev/nuLL  2>&1  \ 

n n n n "supported  emulations:  m68keLf";  then 

n echo  "${UNAME_MACHINE>-unknown-Linux"  ; exit  0 

n elif  echo  "$Ld_heLp_string"  | grep  >/dev/nuLL  2>&1  \ 

B n n n "supported  emulations:  m68klinux";  then 

B echo  "${UNAME_HACHINE>-unknown-linuxaout"  ; exit  0 

n elif  test  " $ { U N AM E_M A C H I N E } " = "alpha"  ; then 

n echo  a L pha-un known- L i nux  ; exit  0 

n else 

n # Either  a pre-BFD  a. out  linker  (linuxoLdld) 

B K or  one  that  does  not  give  us  useful  --help. 

n It  Gcc  wants  to  distinguish  between  linuxoldld  and  linuxaout. 

n test  ! -d  /usr/ L i b/ Ldscri pts/ . \ 

B &S  echo  " $ { UN AH E_H A C H I N E > -un kno wn- L i nuxo L d L d " S&  exit  0 

B U Determine  whether  the  default  compiler  is  a. out  or  elf 

B cat  >dummy.c  <<E0F 

mainCargc,  argv) 

1 n t a r g c ; 
char  *argvCI]; 

{ 

#ifdef  __ELF 

printf  ("%s-unknown-Linux\n",  argvCIIl); 

# e L s e 

printf  ("%s-unknown-Linuxaout\n",  argvCID); 

#e  nd  i f 

return  0; 

> 

EOF 

n ${CC-cc}  dummy. c -o  dummy  2>/dev/nuLL  \ 

n n &&  ./dummy  " $ { U N AM E_M A C H I N E > " \ 

n a 8&  rm  dummy. c dummy  \ 
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□ n SSexit0 

n rm  -f  dummy. c dummy 

n -f  i ;; 

ft  ptx  4.0  does  uname  -s  correctly,  with  DYNIX/ptx  in  there.  earlier  versions 
# are  messed  up  and  put  the  nodename  in  both  sysname  and  nodename. 

iC34:86:DYNIX/ptx:4*:*) 
n echo  i 386- s eq u e n t - sy s v4 

a exit0;; 

i [34386 : * : 4 . * : * | i [ 34 3 86 : S Y ST EH_ V : 4 . * : * ) 
n if  grep  Novell  / u s r / i n c I u d e / I i n k . h >/dev/null  2>/dev/null;  then 

n a 

n else 

n a 

n f i 

n e X i t 0 ; ; 

i [34386:*:3.2:*) 

n if  test  -f  / u s r / op t i on s / c b . n a me ; then 

n n UNAHE_REL= ' sed  -n  's/.*Version  //p'  < / u s r / o p t i o n s / c b . na me  ' 

n n echo  $ { UN AM E_H A C H I N E }-u n kn o wn- i s c $ U N AH E_ R E L 

n elif  /bin/uname  -X  2>/dev/null  >/dev/null  ; then 

a n U N AM E_ R E L= ' ( / b i n / u na me  -X|egrep  Release|sed  -e  's/.*=  //')' 

(/bin/uname  -X|egrep  i80486  >/dev/null)  &&  U N AM E_M A C H I N E = i 486 
(/bin/uname  -X|egrep  ' *Ma c h i ne . *Pen t i urn ' >/dev/null)  \ 
n &S  UNAME_HACHINE=i 586 

echo  SfUNAHE  H A C H I N E >-un kno w n- s c o$U N AM E REL 


echo  ${UNAME_MACHlNE}-univel-sysv${UNAHE_RELEASE> 
echo  ${UNAME_MACHINE}-unknown-sysv${UNAME_RE LEASE} 


□ 

n 

n 

□ 

else 

a 

f i 

exit 


echo  ${UNAME_HACHINE}-unknown-sysv32 


0 


Intel: Ha ch:3*:*) 

echo  i 386-u n known-ma c h 3 
exit  0 ; ; 
paragon:*:*:*) 

echo  i 860- i n t e l-os f 1 
exit  0 ; ; 

i860:*:4.*:*)  # i860-SVR4 


n if  grep  Stardent  / u s r / i n c I u d e / sy s / ua dm i n . h >/dev/null  2>&1  ; then 

n echo  i 860-s t a r de n t -s y s v$ { U N AH E_R E LE AS E } U Stardent  Vistra  i860-SVR4 

n else  It  Add  other  i 860-SVR4  vendors  below  as  they  are  discovered, 

n echo  i 860-u  n kno  wn-sy  s v$  { U N AH  E_  R E L E A S E } it  Unknown  i 860-SVR4 

n f i 

n e X i t 0 ; ; 

mini*:CTIX:SYS*5:*) 
n # "miniframe" 

n echo  m680 1 0- c on ve r g en t - s y s v 

n exit0;; 

H680:23430:*:R3VC5673*:*) 


n test  -r  /sysV68  S&  echo  ' m68 k-mo t o r o I a - sy s v ' S&  exit  0 ;; 

3C343??:*:4. 0:3.0  | 3 C 34 3 ? ? , * : * : 4 . 0 : 3 . 0 ) 

uname  -p  2>/dev/null  | grep  86  >/dev/null  \ 

&S  echo  i486-ncr-sysv4.3  &&  exit  0 ;; 

3:343??:*:4.0:*  | 3 C 34 3 ? ? , * : * : 4 . 0 : * ) 

uname  -p  2>/dev/null  | grep  86  >/dev/null  \ 

88  echo  i 486-n c r- s y s v4  88  exit  0 ;; 
m680C23430:LynxOS:2.C233*:*) 
n echo  m68 k- I y n x- I y nxo s $ < U N AH E_R E L E A S E > 

n exit0;; 

mc68030:UNIX_System_V:4.*:*) 
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n echo  m68 k-a t a r i - sy s v4 

o e X i t 0 ; ; 

i :34]86  : LynxOS  : 2.Z2Z1*:*') 
n echo  i 386- L y n x- L y n xo s $ { U N AH E_ R E L E A S E } 

n ex i t 0 ; ; 

TSUNAMI:LynxOS:2.n23:*:*) 
n echo  s pa  r c - L y n x - L y nx  o s $ { U N AH  E_R  E L E A S E > 

n e X i t 0 ; ; 

rs6000:LynxOS:2. C233*:*) 
n echo  r s 6000- L y n x- L y nxo s $ t U N AH E_R E LE A S E } 

n e X i t 0 ; ; 

RH* : SINIX-* : * : *) 


n 

echo  m i p s - s n i - s y s v4 

n 

exit  0 ; 

f 

* : SINIX-* : * : 

*) 

n 

if  uname 

-p  2>/dev/null  >/dev/null  ; then 

n 

□ 

UN AHE_H AC H I N E= ' ( uname  -p)  2>/dev/null' 

n 

n 

echo  ${UNAHE_HACHINE>-sni-sysv4 

□ 

else 

□ 

n 

echo  ns32k-sni -sysv 

n 

f i 

Q 

exit  0 ; 

/ 

mc68*  : A/UX : * 

: *) 

n 

echo  m68k-apple-aux${UNAHE_RELEASE} 

Q 

exit  0 ; 

r 

R3000 : *Syst em_V* : * : *) 

□ 

n 

1 

Q. 

/usr/nec  3;  then 

□ 

echo  mi ps-nec-sysv${UNAHE_RELEASE> 

□ 

else 

n echo  m i p s -u n kno wn- sy s v$ { U N AH E_R E L E A S E > 

n f i 

exit  0 ; ; 

e s a c 

#echo  '(No  uname  command  or  uname  output  not  recognized.)'  1>82 

#echo  "${UNAHE_HACHINE> : ${UNAHE_SYSTEH> : ${UNAHE_RELEASE> :${UNAHE_VERSION} 

cat  >dummy.c  <<E0F 
#ifdef  _SEQUENT_ 

# include  < sy s / t y pe s . h> 

U include  <sy s / u t s na me . h> 

#e nd i f 
main  ( ) 

{ 

#if  defined  (sony) 

#if  defined  (HIPSEB) 

/*  BED  wants  "bsd"  instead  of  "newsos".  Perhaps  BED  should  be  changed, 
I don't  know ...  . */ 

printf  ( " m i p s - sony-b s d \ n " ) ; exit  (0); 

#e  I s e 

Sinclude  <sy s / pa r a m . h > 

printf  ("m68k-sony-newsos%s\n", 

#ifdef  NEWS0S4 

# e I s e 

n " " 

# e nd i f 

);  exit  (0); 
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#end 1 f 
#endi f 


#if  defined  (__arm)  &&  defined  (__acorn)  S&  defined  (__unix) 
printf  ( " a rm-a c o r n- r i s c i X " ) ; exit  (0); 

# e n d i f 

#if  defined  (hp300)  SS  Idefined  Chpux) 
printf  ("ni68k-hp-bsd\n");  exit  (0); 

#end i f 

#if  defined  (NeXT) 

#if  Idefined  ( ARCHITECTURE ) 

^define  __ AR C H I T E C TU R E "m68k" 

#endi f 

int  version; 

ve r s i o n= ' ( h o s t i n f o | sed  -n  's/.*NeXT  Mach  \ ( C 0-9 D * \ ) . * / \ 1 / p ' ) 2> / d e v / n u I L ' ; 

printf  ( " % s -n e X t -n e X t s t e p% s \ n " , ARC H I T E C T U R E__ , version  = = 2 ? "2"  : "3"); 

exit  (0); 

#endi f 


#if  defined  (HULTIMAX)  ||  defined  (n16) 

#if  defined  (UMAXV) 

printf  ("ns32k-encore-sysv\n");  exit  (0); 

# e L s e 

#if  defined  (CMU) 

printf  ("ns32k-encore-mach\n");  exit  (0); 

# e L s e 

printf  ("ns32k-encore-bsd\n");  exit  (0); 
Send i f 
Send i f 
Send i f 


Sif  defined  (__386BSD__) 

printf  ("i386-unknown-bsd\n");  exit  (0); 
Send i f 

Sif  defined  (sequent) 

Sif  defined  (i386) 

printf  ("i386-sequent-dynix\n");  exit  (0); 
Send i f 

Sif  defined  (ns32000) 

printf  ("ns32k-sequent-dynix\n");  exit  (0); 
Sendi f 
Se  nd i f 

Sif  defined  (.SEQUENT.) 
struct  utsname  un; 


a 


n 


uname(8un) ; 


if  (strncmp(un. version,  "V2",  2) 
printf  ( " i 386-sequen t -p t x2 \n ' 

\ 

■); 

0)  { 

exit 

(0); 

J 

if  (strncmp(un. version,  "VI",  2) 

== 

0)  { 

/*  XXX 

printf  ( " i 386-s equen t -p t X 1 \ n ' 

1 

exit 

(0); 

printf  ("  i 386-s equen t-pt X \ n ") ; exit 

(0); 

correct?  */ 
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#end  i f 

#if  defined  (vax) 

#if  [defined  (uLtrix) 

printf  ("vax-dec-bsd\n");  exit  (0); 

# e L s e 

printf  ("vax-dec-uLtrix\n");  exit  (0); 

# e n d i f 
#end  i f 

#if  defined  (aLLiant)  &&  defined  Ci860) 
printf  ("i860-aLLiant-bsd\n");  exit  (0); 
#end  i f 

exit  ( 1 ) ; 

> 

EOF 


${CC-cc>  dummy. c -o  dummy  2>/dev/nuLL  SS  ./dummy  SS  rm  dummy. c dummy  &S  exit  0 
rm  -f  dummy. c dummy 

# ApoLLos  put  the  system  type  in  the  environment. 


test  -d  /usr/apoLLo  &&  { echo  $ { I S P >-a po L L o-$ f S Y S T Y P E > ; exit  0;  > 
It  Convex  versions  that  predate  uname  can  use  g e t sy  s i n f o ( 1 ) 


if  C -X  / u s r / c on vex /ge t sy s i nf o D 
then 

case  'getsysinfo  -f  cpu_type'  in 
cl  *) 

n echo  c 1 - c o n ve x-b s d 

n exit0;; 

c2*) 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


if  getsysinfo  -f  scaLar_acc 
then  echo  c32-convex-bsd 
else  echo  c2-convex-bsd 
f i 

exit  0 ; ; 
c34*) 

echo  c 34- c o n V e x-b s d 
exit  0 ; ; 
c38*) 

echo  c38-convex-bsd 
exit  0 ; ; 

c4*) 

echo  c4-convex-bsd 
exit  0 ; ; 

e s a c 


f i 


#echo  '(Unable  to  guess  system  type)'  1>&2 
exit  1 
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#!  /bin/sh 
U 

ft  $Id:  config.sub,v  1.4. 2.1  1 997/06/07  09:49:20  mhw  Exp  $ 

# 

ft  Configuration  validation  subroutine  script,  version  1.1. 

ft  Copyright  (C)  1 991  , 1 992,  1 993,  1 994,  1 995  Free  Software  Foundation,  Inc. 
ft  This  file  is  (in  principle)  common  to  ALL  GNU  software. 

ft  The  presence  of  a machine  in  this  file  suggests  that  SOME  GNU  software 

# can  handle  that  machine.  It  does  not  imply  ALL  GNU  software  can. 

# 

ft  This  file  is  free  software;  you  can  redistribute  it  and/or  modify 
ft  it  under  the  terms  of  the  GNU  General  Public  License  as  published  by 
ft  the  Free  Software  Foundation;  either  version  2 of  the  License,  or 
ft  (at  your  option)  any  later  version. 
ft 

ft  This  program  is  distributed  in  the  hope  that  it  will  be  useful, 
ft  but  WITHOUT  ANY  WARRANTY;  without  even  the  implied  warranty  of 
ft  MERCHANTABILITY  or  FITNESS  FOR  A PARTICULAR  PURPOSE.  See  the 
tf  GNU  General  Public  License  for  more  details. 

U 

ft  You  should  have  received  a copy  of  the  GNU  General  Public  License 
ft  along  with  this  program;  if  not,  write  to  the  Free  Software 
ft  Foundation,  Inc.,  59  Temple  Place  - Suite  330, 
ft  Boston,  MA  021  1 1 -1307,  USA. 

# As  a special  exception  to  the  GNU  General  Public  License,  if  you 
ft  distribute  this  file  as  part  of  a program  that  contains  a 
ft  configuration  script  generated  by  Autoconf,  you  may  include  it  under 
ft  the  same  distribution  terms  that  you  use  for  the  rest  of  that  program. 

tf  Configuration  subroutine  to  validate  and  canonicalize  a configuration  type. 
ft  Supply  the  specified  configuration  type  as  an  argument. 

tt  If  it  is  invalid,  we  print  an  error  message  on  stderr  and  exit  with  code  1. 
tf  Otherwise,  we  print  the  canonical  config  type  on  stdout  and  succeed. 

tt  This  file  is  supposed  to  be  the  same  for  all  GNU  packages 
tt  and  recognize  all  the  CPU  types,  system  types  and  aliases 
tt  that  are  meaningful  with  *any*  GNU  software. 

tt  Each  package  is  responsible  for  reporting  which  valid  configurations 
tt  it  does  not  support.  The  user  should  be  able  to  distinguish 
tt  a failure  to  support  a valid  configuration  from  a meaningless 
tt  configuration. 

tt  The  goal  of  this  file  is  to  map  all  the  various  variations  of  a given 
tt  machine  specification  into  a single  specification  in  the  form: 
tta  CPU_TYPE-HANUFACTURER-OPERATING_SYSTEM 

tf  It  is  wrong  to  echo  any  other  type  of  specification. 


if  : x$i  = X : 


then 

n 

n 

n 

n 

D 


echo  Configuration  name  missing.  1>&2 
echo  "Usage:  $0  C PU-M F R-OPS Y S " 1>&2 
echo  "or  $0  ALIAS"  1>&2 

echo  where  ALIAS  is  a recognized  configuration  type.  1>&2 
exit  1 


f i 


tt  First 


pass  through  any  local  machine  types.' 
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config.sub 


case  $1  in 


n 

n 

Q 

Q 

a 

□ 

esa  c 


*LocaL*) 
n echo  $1 

n exi t 0 

*) 


# Separate  what  the  user  gave  into  CPU-COHPANY  and  OS  (if  any). 

ba s i c_ma ch i ne= ' e c ho  $1  | sed  ' s / - C 3 *$ / / ' ' 

if  C $ba s i c _ma c h i n e !=  $1  1 

then  os='echo  $1  | sed  ' s/ ' 

else  os=;  fi 


###  Let's  recognize  common  machines  as  not  being  operating  systems  so 
###  that  things  Like  config.sub  d e c s t a t i o n-3 1 00  work.  We  also 
###  recognize  some  manufacturers  as  not  being  operating  systems,  so  we 
###  can  provide  default  operating  systems  below, 
case  $os  in 


□ 

□ 

n 

n 

a 

a 

n 

a 

n 

n 

n 

n 

Q 

Q 

Q 

n 

n 

□ 

n 

n 

a 

n 

n 

Q 

a 

n 

n 

Q 

Q 

a 

□ 

□ 

□ 

s 

□ 

Q 

a 


-sun*os*) 

o tt  Prevent  following  clause  from  handling  this  invalid  input. 

® r r 

-dec*  I -mips*  | -sequent*  | -encore*  | -pc532*  | -sgi*  | -sony*  | \ 

-att*  I -7300*  I -3300*  I -delta*  | -motorola*  | -sunC2343*  | \ 

-Unicom*  | -ibm*  | -next  | -hp  | -isi*  | -apoLLo  | -altos*  | \ 

-convergent*  | -ncr*  | -news  | -32*  | -3600*  | -3100*  | -hitachi*  |\ 
-cC123]*  I -convex*  | -sun  | -crds  | -omron*  | -dg  | -ultra  | -tti*  | \ 
-harris  | -dolphin  | -highlevel  | -gouLd  | -cbm  | -ns  | -masscomp  ) 

a os  = 

n ba s i c_ma c h i n e = $ 1 

“ ;; 

-h i ux* ) 

n os=-h i uxwe2 

- s c o4 ) 

n os=-sco3 . 2v4 

n basi c_machi ne= ' echo  $1  | sed  -e  ' s / 86- .*/ 86-u n known /'  ' 

° ;; 

-sco3.2.n4-9]*) 

n os='echo  $os  | sed  -e  ' s / s c o3 . 2 . / s c o3 . 2 v / ' ' 

n ba s i c_ma c h i ne= ' e c ho  $1  | sed  -e  ' s / 86- . * / 86-u n kn o wn / ' ' 

“ ;; 

-sco3 . 2v:4-9:*) 


-s  CO* ) 


- i s c ) 
n 
n 
a 

-cLix*) 

□ 

□ 


# Don't  forget  version  if  it  is  3.2v4  or  newer. 

basi c_machi ne= ' echo  $1  | sed  -e  ' s / 86- .*/ 86-u n known /'  ' 


os=-sco3 . 2v2 

ba s i c _ma c h i n e = ' e c h o $1  | sed  -e  ' s / 86- .*/ 86-u n known /'  ' 


os=-isc2.2 

ba s i c_ma c h i n e = ' e c h o $1  | sed  -e  ' s / 86- . * / 86-u n kn o wn / ' ' 


basi c_machi ne  = c L i pper-i ntergraph 
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n - i s c * ) 

n n ba s i c_ma c h i n e = ' e c h o $1  | sed  -e  ' s / 86- . * / 86-u n kn o wn / ' 

n Q ■ • 

n -lynx*) 

n n os=-Lynxos 

n n 

n -ptx*) 

n n ba s i c_ma c h i n e = ' e c h o $1  | sed  -e  ' s / 86- . * / 86- s e q u e n t / ' 

n Et 

K M ^ ^ 

n -windousnt*) 

a n os='echo  $os  | sed  -e  ' s / w i nd o w s n t / w i n n t / ' ' 

n n 

esac 


U Decode  aliases  for  certain  CPU-COMPANY  combinations, 
case  $ba s i c_ma c h i ne  in 

n # Recognize  the  basic  CPU  types  without  company  name. 

# Some  are  omitted  here  because  they  have  special  meanings  below. 


Q 

n 

n 

n 

a 

n 

n 

n 

n 

□ 

n 

n 

a 

n 

machine 

c 

n 

n 

n 

n 

n 

n 

n 

n 

n 

Q 

n 

o 


tahoe  I in345I]86  | i 860  | m68k  | m68000  | m88k  | ns32k  | arm  \ 

n I armeClbD  | pyramid  \ 

n I tron  | a29k  I 580  | i960  | h8300  | hppa1.0  | hppal.1 

n I alpha  | we32k  | ns16k  | clipper  | sparclite  | i370  | 

Q I powerpc  I powerpcle  | sparc64  | 

n I mi ps64  { mi pse  I \ 

n I pdpll  I mips64el  | mips64orion 

n I s pa  r c ) 

basic  ma c h i n e =$ba s i c machine-unknown 


\ 

s h 


1 750a  I dspi 6xx  \ 
I mips64orionel  \ 


n 

# Object  if  more  than  one  company  name  word. 

*_*_* ) 

n echo  Invalid  configuration  \ 

\ ' $ba s i c_ma c h i ne \ ' not  recognized  1>&2 
a exi t 1 

H Recognize  the  basic  CPU  types  with  company  name. 


va  X 


_* 


tahoe-*  I iC345D86-*  | i860-*  | m68k-*  | m68000-*  | m88k- 

sparc-*  I ns32k-*  | fx80-*  | arm-*  | cC123D*  \ 

mips-*  I pyramid-*  | tron-*  | a29k-*  | romp-*  \ 


rs6000-* 


powe  r- 


none-*  | 580-*  | cray2-*  | h8300-*  | i960-*  1 xmp-*  | ymp-*  \ 


hppa1.0-*  I hppal.1-*  | alpha-*  | we32k-*  | cydra- 


ns16k-*  \ 


I npl-*  I xps100-*  I clipper-*  | orion-*  | sparclite- 


pn- 

pdpll-*  I sh-*  I powerpc-*  | powerpcle-*  | sparc64- 
mips64-*  I mipsel-*  \ 

mips64el-*  | mi ps64ori on-*  | m i p s 64o r i o n e I -* ) 


\ 


# Recognize  the  various  machine  names  and  aliases  which  stand 

# for  a CPU  type  and  a company  and  sometimes  even  an  OS. 

3b1  I 7300  I 7300-att  | att-7300  | pc7300  | safari  | unixpc) 
n ba s i c_ma c h i n e =m68000-a t t 

“ ;; 

3b*) 

n ba s i c_ma c h i ne=w e32 k-a t t 

“ ;; 

a l l i ant  | f x80 ) 

n ba s i c_ma c h i ne  = f x80-a I I i a n t 

“ ; ; 

altos  I a ltos3068) 
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□ 

□ 

basi c_machine=m68k-aLtos 

n 

n 

/ r 

n 

am2  9 k ) 

n 

n 

basi c_machi ne=a29k-none 

□ 

Q 

os=-bsd 

u 

□ 

r f 

u 

amda  hi) 

n 

n 

basi c^machi ne  = 580-amdah  L 

n 

n 

o s =- s y s V 

Q 

n 

n 

a m i g a | 

amiga-*) 

Q 

n 

basi  c_machi  ne  = m68k-cbni 

□ 

□ 

r / 

n 

amigados) 

□ 

n 

basi  c_machine  = m68k-cbtn 

n 

Q 

os=-amigados 

Q 

n 

r r 

n 

amigaunix  | amix) 

n 

Q 

basic_machine=m68k-cbm 

Q 

n 

os=-sysv4 

□ 

u 

f r 

□ 

apoL  Lo68} 

n 

n 

basi c_machi ne  = m68k-apoL  Lo 

□ 

n 

os=-sysv 

a 

n 

/ A 

n 

balance) 

n 

n 

basic_machine=ns32k-sequent 

n 

n 

os=-dyn i x 

n 

□ 

A A 

n 

convex- 

cl  ) 

n 

n 

basic_machine=c1-convex 

n 

n 

os=-bsd 

n 

tt 

A A 

o 

convex- 

c2) 

n 

n 

basi c_machine=c2-convex 

□ 

Q 

os=-bsd 

n 

n 

A A 

□ 

convex- 

c32) 

n 

□ 

basi c_machine=c32-convex 

□ 

n 

o s = -b  s d 

n 

Q 

A A 

a 

convex- 

c34) 

n 

n 

basic_machine=c34-convex 

Q 

tt 

os=-bsd 

a 

a 

A A 

n 

convex- 

c38) 

n 

n 

basic_machine=c38-convex 

n 

Q 

os=-bsd 

□ 

B 

A A 

n 

Cray  | 

ymp  ) 

n 

B 

basic_niachine  = ymp-cray 

la 

B 

os=-uni cos 

n 

B 

A A 

n 

c ray2 ) 

a 

B 

basi c_machi ne=cray2-cray 

n 

B 

os=-uni cos 

D 

B 

A A 

o 

c r d s 1 

u n o s ) 
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n 

n 

basi c_machine=m68k-crds 

n 

Q 

r r 

D 

da30  1 da30-*) 

D 

n 

basi c_machine=m68k-da30 

n 

a 

n 

decstat i 

on  I d e c s t a t i on-3 1 00  | pmax  | 

n 

dec31 00 

1 decstatn) 

n 

□ 

basi  c_machine  = niips-dec 

Q 

n 

r r 

n 

delta  I 

3300  1 mo t 0 r 0 L a -3300  | motoroL 

n 

I 

3300-mo t o ro L a | delta-motorola 

n 

n 

basic_machine=m68k-motorola 

n 

□ 

/ / 

n 

de  L ta88 ) 

a 

n 

basi c_machine=m88k-motorola 

n 

n 

os=-sysv3 

Q 

n 

□ 

dpx20  I 

dpx20-* ) 

Q 

n 

basi c_machine=rs6000-bul 1 

n 

H 

os=-bosx 

D 

a 

r r 

□ 

dpx2*  I 

dpx2*-bu  1 1 ) 

□ 

□ 

basi c_machi ne  = m68k-bul  1 

n 

a 

os=-sy s v3 

Q 

□ 

r r 

Q 

ebmon29k) 

n 

□ 

basic_machine=a29k-amd 

o 

n 

os=-ebmon 

n 

a 

0 0 

n 

e L X s i ) 

n 

a 

basic_machine=elxsi-elxsi 

n 

a 

os=-bsd 

o 

a 

0 0 

n 

encore  | 

Umax  1 mma  x ) 

n 

a 

basic_machine=ns32k-encore 

n 

a 

0 0 

s 

f x2800) 

a 

a 

basi c_machi ne=i 860-a 1 1 i ant 

a 

a 

0 0 

D 

g e n i X ) 

n 

a 

basic_machine=ns32k-ns 

Q 

a 

0 0 

n 

gmi c ro ) 

a 

a 

basi c_machine=tron-gmi cro 

a 

a 

os=-sy sv 

o 

a 

0 0 

a 

h3050r* 

1 h i ux* ) 

a 

a 

basic_machine=hppa1 .1-hitachi 

a 

a 

os=-hi uxwe2 

a 

a 

0 0 

a 

h8300hms ) 

a 

a 

basic_machine=h8300-hitachi 

n 

a 

os=-hms 

s 

a 

0 0 

n 

Harris) 

n 

a 

basic_machine=m88k-harris 

□ 

a 

os=-sysv3 

n 

a 

0 0 

\ 
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n 

h p300-* 

) 

n 

n 

bast  c_machi ne  = m68k-hp 

n 

B 

A / 

n 

hp300bsd ) 

□ 

B 

bast  c_machine  = m68k-hp 

□ 

B 

os=-bsd 

a 

B 

A A 

n 

hp300hpux) 

n 

B 

basi c_machi ne=m68k-hp 

Q 

B 

os=-hpux 

Q 

B 

A A 

n 

hp9k2[0 

-9]i;0-9]  1 hp9k3i:0-9]) 

Q 

n 

basi c_machi ne=m68000-hp 

n 

B 

A A 

o 

hp9k3[:2 

-9:[0-9:) 

n 

n 

basi  c_machi  ne  = ni68k-hp 

n 

n 

A A 

n 

hp9k7C0 

-9]i;0-9]  1 hp7:0-9:i:0-9: 

1 hp9k8:0 

n 

n 

basic_machine=hppa1 .1-hp 

n 

B 

A A 

n 

hp9k8:0 

-9:[0-9:  1 hp8[:0-9:[0-9:) 

n 

B 

basic_machine=hppa1 .0-hp 

n 

B 

A A 

a 

i370-ibm*  | ibm*) 

u 

n 

basi c_machi ne=i370-ibm 

n 

n 

0 s = -mv  s 

□ 

n 

A A 

# I ' 

' m not  sure 

what  "Sysv32"  means.  Should 

this 

a 

i :345:86v32) 

n 

Q 

ba s i c_ma c h i n e= ' e c h 0 $1  | 

s ed 

-e  ' 

n 

n 

os=-sysv32 

a 

B 

A A 

a 

i :345:86v4*) 

a 

□ 

ba  s i c_ma  c h i n e = ' e c h o $1  | 

sed 

-e  ■ 

a 

n 

os=-sy s v4 

n 

□ 

A A 

B 

i C345]86v) 

B 

n 

ba s i c _ma c h i n e= * e c h 0 $1  | 

s e d 

-e  ' 

B 

n 

os=“Sysv 

□ 

n 

A A 

B 

i C345]86soL2) 

B 

n 

ba s i c_ma c h i n e= ' e c h 0 $1  | 

sed 

-e  ' 

B 

B 

os=-soLari s2 

B 

B 

A A 

B 

iris  1 

i r i s 4d  ) 

B 

□ 

basi c_machine=mips-sgi 

B 

n 

case  $os  in 

B 

B 

- i r i X * ) 

B 

B 

B 

B 

*) 

B 

B 

n os=-irix4 

B 

B 

B ^ ^ 

B 

B 

esac 

B 

B 

A A 

B 

i s i 68  1 

i s i ) 

B 

B 

basi c_machi ne=m68k-i si 

B 

B 

os=-sy s V 

B 

B 

A A 

nCCHK:7c545b28263aaff67d69f8fa978b3c896ae45760417be0f7568e93c4f282ad709:: 
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config.sub 


n 

m88k-otnron*) 

n 

n 

basic_machine=m88k-omron 

n 

n 

/ r 

n 

magnum 

1 m3230) 

a 

n 

basi c_machi ne=mi ps-mi ps 

n 

n 

os=-sys V 

n 

n 

r r 

n 

merlin) 

o 

n 

basic_machine=ns32k-utek 

n 

n 

os=-sys V 

n 

D 

r r 

n 

miniframe) 

n 

n 

basi c_machi ne=m68000-convergent 

n 

n 

/ / 

□ 

mi ps3*- 

*) 

n 

n 

ba s i c _ma c h i n e= ' e c h o $ba s i c_ma c h i n e | sed  -e  ' s / m i p s3 /m i p s 64 / ' ' 

□ 

n 

r r 

n 

m i p s 3* ) 

D 

n 

basi c_machi ne= ' echo  $ba s i c _ma c h i n e \ 

D 

n 

n n n 1 sed  -e  ' s / m i p s 3 / m i p s 64 / ' ' -u n kn o wn 

n 

n 

/ / 

n 

ncr3000) 

□ 

n 

basic_machine=i486-ncr 

D 

n 

os=-sy sv4 

n 

n 

n 

news  1 

news700  | news800  | news900) 

n 

n 

basic_machine=m68k-sony 

n 

n 

os=-newsos 

D 

n 

/ / 

n 

news1000) 

n 

n 

basi c_machine=m68030-sony 

n 

n 

os=-newsos 

n 

n 

/ / 

o 

news-3600  | rise-news) 

o 

n 

basic_machine=mips-sony 

n 

o 

os=-newsos 

n 

Q 

r r 

n 

next  I 

m*-next  ) 

n 

D 

basi c_machine=m68k-next 

n 

n 

case  Sos  in 

n 

Q 

-nextstep*  ) 

n 

n 

“ ; ; 

n 

n 

-n  s 2 * ) 

□ 

n 

os=-nextstep2 

D 

n 

n 

n 

*) 

n 

n 

os  = -next  s t ep3 

n 

n 

n 

Q 

esac 

D 

Q 

g r 

n 

nh3000 ) 

a 

n 

basi c_machi ne=m68k-harri s 

a 

n 

0 S =- C X U X 

n 

n 

/ / 

n 

nhC45:000) 

n 

n 

basic_machine=m88k-harris 

n 

n 

os=-cxux 

n 

n 

r r 

CCCHK: 
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1983 


config.sub 

n 

nindy960) 

n 

B 

basic_mach-ine  = i960-intel 

n 

B 

os=-n i ndy 

Q 

B 

r f 

n 

n p 1 ) 

□ 

fl 

basic_machine=np1-gouLd 

B 

B 

B 

pa-hitachi  ) 

B 

fl 

basic_machine=hppa1 .1-hitachi 

B 

B 

os=-hi uxwe2 

B 

B 

/ / 

B 

paragon) 

B 

fl 

basic_machine=i860-inteL 

B 

B 

0 s =-o  s f 

B 

B 

f / 

fl 

pbd  ) 

B 

fl 

basi c_machine=sparc-tti 

B 

B 

B 

pbb ) 

B 

B 

basi c_machine=m68k-tti 

B 

B 

r r 

pc532  1 

pc532-*) 

B 

fl 

basi c_machi ne=ns32k-pc532 

B 

B 

r / 

B 

pent! um 

1 P5  1 p6) 

B 

fl 

U We  don't  have  specific  support  for  the 

B 

B 

U Intel  Pentium  (p6)  foLLowon  yet,  so  just 

call  i 

B 

fl 

basic_machine=i586-inteL 

B 

fl 

/ / 

B 

pent i um- 

-*  1 p5-*  1 p6-*) 

B 

B 

ft  We  don't  have  specific  support  for  the 

B 

B 

ft  Intel  Pentium  (p6)  followon  yet,  so  just 

call  i 

B 

B 

ba s i c _ma c h i n e= i 5 86- ' e c h 0 $ba s i c_ma c h i n e | 

s e d ' s / 

B 

B 

/ f 

B 

k5) 

fl 

B 

ft  We  don't  have  specific  support  for  AMD's 

K5  yet 

B 

B 

ft  so  just  call  it  a Pentium 

fl 

B 

basi c_machi ne=i 586-amd 

fl 

B 

f r 

fl 

n e X e n ) 

B 

B 

ft  We  don't  have  specific  support  for  Nexgen  yet. 

fl 

B 

ft  so  just  call  it  a Pentium 

fl 

B 

basi c_machi ne=i 586-nexgen 

B 

B 

f r 

fl 

p n ) 

B 

B 

basi c_machine=pn-gould 

B 

B 

r r 

B 

po  w e r ) n 

basi c_machi ne=rs6000-i bm 

B 

B 

^ r 

fl 

p p c ) n 

basi c_machine=powerpc-unknown 

fl 

ppc-* ) n 

r r 

basic_machine=powerpc-'echo  $basic_machine 

1 sed 

fl 

B 

/ f 

fl 

pp  c L e 1 

powerpc  1 i tt  le  | ppc-le  | poue rpc- 1 i 1 1 1 e ) 

fl 

B 

basi c_machi ne=pouerpc le-unknown 

B 

p p c L e-* 

f r 

1 powe r p c l i t t l e-* ) 

B 

B 

basic_machine=powerpcle-'echo  $basic_machi 

n e \ 

CCCHK:207dc500ab636f0ad9bc047ef915a9337b8a445efa5413ea2a0db42bfb48db9e0]D 


urn 


urn 

I I 


-II" 
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config.sub 


n 

B 

B fl  fl  fl 

o 

fl 

F / 

□ 

ps2 ) 

n 

B 

basi c_machT  ne  = i 386-i bm 

n 

B 

f / 

n 

rni[46]00) 

tt 

B 

basic_machine  = rriips-siemens 

u 

fl 

f f 

n 

rtpc  1 rtpc-*) 

s 

B 

basic_machine=romp-ibm 

n 

fl 

/ / 

n 

sequent ) 

n 

fl 

basi c_machine=i386-sequent 

n 

B 

r r 

n 

s h ) 

n 

fl 

basi c_machi ne=sh-hi tachi 

n 

fl 

0 s = -h  ms 

Q 

B 

f r 

n 

sps7 ) 

n 

fl 

basi c_machine  = m68k-buL  L 

Q 

B 

os=-sy sv2 

O 

B 

/ / 

n 

spur) 

n 

B 

basic_machine=spur-unknown 

n 

fl 

f r 

n 

sun2) 

n 

B 

basic_machine=m68000-sun 

n 

fl 

/ r 

Q 

sun2os3) 

n 

fl 

basic_machine=m68000-sun 

n 

fl 

os=-sunos3 

D 

fl 

/ r 

n 

sun2os4 ) 

n 

fl 

basic_machine=m68000-sun 

n 

fl 

os=-sunos4 

n 

fl 

/ / 

n 

sun3os3 ) 

n 

B 

basic_nachine=m68k-sun 

n 

fl 

os=-sunos3 

n 

B 

f r 

n 

sun3os4 ) 

Q 

B 

basic_machine=m68k-sun 

n 

fl 

os=-sunos4 

n 

fl 

r r 

n 

sun4os3 ) 

B 

B 

basi c_machine=sparc-sun 

B 

B 

os=-sunos3 

B 

n 

r r 

B 

sun4os4 ) 

fl 

fl 

basi c_machine=sparc-sun 

B 

fl 

os=-sunos4 

B 

fl 

r r 

B 

sun4so  L 2 ) 

B 

fl 

basi c_machine=sparc-sun 

B 

B 

os=-soLaris2 

fl 

fl 

r r 

fl 

sun3  1 sun3-*) 

B 

B 

basic  ma c h i n e=m6 8 k-s un 

I sed  ' s/*C^-:*-// ■ ' 
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1985 


config.sub 

a 

B 

r r 

n 

s u n 4 ) 

a 

B 

basi c_machine=sparc-sun 

n 

B 

/ / 

u 

sun386 

1 sun386i  | roadrunner) 

u 

B 

basi c_machi ne=i 386-sun 

n 

fl 

Q 

symmetry) 

n 

fl 

basi c_ma  chi ne  = i 386-sequent 

□ 

fl 

os=-dyni x 

□ 

B 

r r 

n 

tower  1 

towe  r-32 ) 

n 

B 

basic_machine=m68k-ncr 

n 

fl 

r r 

Q 

udi 29k) 

a 

B 

basi c_machi ne=a29k-amd 

n 

B 

o s = -ud i 

n 

fl 

a 

u 1 1 r a 3 ) 

o 

fl 

basi c_machi ne=a29k-nyu 

n 

B 

os=-sym1 

n 

fl 

r r 

n 

vaxv ) 

n 

fl 

basic_machine=vax-dec 

n 

B 

os=-sysv 

Q 

fl 

X / 

a 

vms  ) 

n 

fl 

basi c_machi ne=vax-dec 

n 

B 

os=-vms 

D 

fl 

X X 

O 

vxworks960) 

a 

B 

basi c_machi ne=i 960-wrs 

o 

B 

os=-vxworks 

a 

B 

X X 

n 

vxworks68) 

B 

B 

basic_machine=m68k-wrs 

B 

fl 

0 s =-vxwo  r ks 

B 

fl 

X X 

B 

vxworks29k) 

B 

B 

basi c_machi ne=a29k-wrs 

B 

B 

os=-vxworks 

B 

fl 

X X 

B 

xmp ) 

B 

B 

basic_machine=xmp-cray 

B 

fl 

os=-uni cos 

B 

fl 

X X 

xps  1 xpsi 00) 

B 

B 

basic_machine=xps100-honeywell 

fl 

fl 

X X 

B 

none ) 

B 

fl 

basi c_machi ne=none-none 

B 

B 

os=-none 

B 

fl 

X X 

It  Here  we  handle  the  default  manufacturer  of  certain  CPU  types.  It  is  in 
U some  cases  the  only  manufacturer,  in  others,  it  is  the  most  popular, 
n mips) 

n n ba s i c _ma c h i n e = m i p s -m i p s 


i:i:CHK;9ed048281  6ec18e34e1e871  77353834c1  94501  bb583866dc535d335f60c5332f6:] 
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config.sub 


□ 

B 

n 

romp ) 

B 

B 

basic_machine=romp-ibm 

B 

B 

/ r 

B 

rs6000) 

B 

B 

basic_machine=rs6000-ibm 

B 

B 

r r 

B 

vax ) 

B 

B 

basic_machine=vax-dec 

B 

B 

r f 

B 

pdpll  ) 

B 

B 

basi c_machine=pdp))-dec 

B 

B 

r r 

B 

we32k) 

B 

B 

basic_machine=we32k-att 

B 

B 

r r 

B 

spare) 

B 

B 

basic_machine=sparc-sun 

B 

B 

r r 

cyd  r a ) 

B 

B 

basi c_machine=cydra-cydrome 

B 

B 

/ / 

B 

0 r i on ) 

B 

B 

basi c_machine=orion-highlevel 

B 

B 

B 

orion105) 

B 

B 

basi c_machine=clipper-highlevel 

B 

B 

B 

*) 

B 

B 

echo  Invalid  configuration  \'$)\': 

\ 

ma  c h i 

ne  \ ’ $basi c 

_machine\'  not  recognized  )>&2 

B 

B 

exit  ) 

B 

B 

r / 

e s a c 

# Here  we  canoni 

calize  certain  aliases  for  manufacturers. 

case 

$ ba s i c_ma c h i ne  in 

B 

♦-digital*) 

B 

B 

basic_machine='echo  $basic_machine 

1 sed  ' s / d i g i t a 1 . * / d e c / ' ' 

B 

B 

/ r 

B 

♦-commodore*) 

B 

B 

basic_machine='echo  $basic_machine 

1 sed  ' s / c ommod 0 r e . * / c bm/ 

B 

B 

9 / 

B 

*) 

B 

B 

r 9 

esac 

U Decode  manufacturer-specific  aliases  for  certain 

operating  systems. 

if  [ 

X " $0 s " ! = X 

""  3 

then 

case 

$os  in 

B 

# -Solaris*  is  a basic  system  type,  with  this  one  exception. 

B 

-Solaris)  | -Solaris).*) 

B 

B 

os='echo  $os  1 sed  -e  ' s | so  1 a r i s)  | sunos4  | ' ' 

B 

B 

9 9 

B 

-Solaris) 

B 

B 

os=-solari s2 

CCCHK 
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1987 


^nfig.sub 


Q 

□ 

n 

Q 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

□ 

n 

□ 

n 

a 

n 

n 

n 

n 

n 

□ 

n 

□ 

n 

Q 

□ 

n 

n 

n 

□ 

n 

a 

□ 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


-UnixWare*  | svr4*) 

B os=-sysv4 

-gnu/Linux*) 

B os=*echo  $os  I sed  -e  * s | g n u / I i n u x | L i n u x | * * 

« ;; 

# First  accept  the  basic  system  types. 
ft  The  portable  systems  comes  first. 

ft  Each  alternative  MUST  END  IN  A *,  to  match  a version  number. 

# -sysv*  is  not  here  because  it  comes  later,  after  sysvr4. 


-gnu^ 


-bsd*  I -ma  c h* 


I -genix*  | -ultrix*  | -irix*  \ 


-vms*  I -SCO*  I -esix*  | -isc*  | -aix*  \ 

-sunos  I -sunosn345D*  \ 

-hpux*  I -unos*  I -osf*  | -luna*  | -dgux*  | -Solaris*  | -sym*  \ 
-amigados*  | -msdos*  | -newsos*  | -unicos*  | -aos*  \ 

-nindy*  | -vxworks*  | -ebmon*  | -hms*  | -mvs*  | -clix*  \ 


■ r 1 s c 0 s ’ 


•linux*  I -uniplus*  | -iris^ 


■rtu*  I -Xenix*  \ 


-hiux*  I -386bsd*  | -netbsd*  | -freebsd*  | -openbsd*  \ 

-riscix*  I -lynxos*  | -bosx*  | -nextstep*  | -cxux*  | -aout*  \ 
-elf*  I -ptx*  I -coff*  I -ecoff*  | -winnt*  | -domain*  \ 

-vsta*  I -udi*  I -eabi*  | -Lites*  ) 
ft  Remember,  each  alternative  MUST  END  IN  *,  to  match  a version  number. 
° ;; 

-sunosS*) 

n os=*echo  $os  | sed  -e  * s | s u no s 5 | s o L a r i s 2 | * * 

° ;; 

-sunos6*) 

n os=*echo  $os  | sed  -e  * s | s uno s 6 | s o I a r i s 3 | * 

-osfrose*) 


os  = -osf  rose 


-osf*) 

n os=-osf 

° ;; 

-u  t e k*  ) 

n os=-bsd 

-dyni x*) 
n os=~bsd 

-a  c i s*  ) 

n os=-aos 

° ;; 

-ctix*  I -uts*) 

B os=-sysv 

° ;; 

# Preserve  the  version  number  of  sinixS. 
-sinixS.*) 

n os=*echo  $os  | sed  -e  * s | s i n i x | s y s v | * * 

° ;; 

-sinix*) 

B os=-sysv4 

a 

-triton*) 

B os=-sysv3 


[CCHK:7cc47241856b7b0346e6581eafc9395cbc71d8fbb5f30b62911e24cf6a3c6a794]] 


1988 


Pretty  Good  Privacy  5.0™  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


config.sub 


□ 

-OSS*) 

n 

a 

os=-sysv3 

n 

a 

/ f 

□ 

-s V r4 ) 

n 

a 

os=-sys v4 

Q 

a 

r r 

□ 

-s V r3 ) 

□ 

a 

os=-sysv3 

n 

a 

r r 

a 

-sysvr4) 

n 

a 

os=-sy s v4 

Q 

a 

r r 

D 

U This 

must  come  afte 

a 

-sysv*) 

n 

a 

/ r 

n 

-xe n i X ) 

o 

a 

os=-xeni x 

o 

a 

r r 

o 

-none ) 

□ 

a 

r r 

n 

*) 

o 

a 

ft  Get  rid  of 

a 

a 

os='echo  $os 

a 

a 

echo  Invalid  < 

system 

\ *$os\ * 

not  recognized 

a 

a 

exit  1 

a 

a 

r r 

e s a c 

else 

I sed  's/C*-:*-//' 


# Here  we  handle  the  default  operating  systems  that  come  with  various  machines. 

# The  value  should  be  what  the  vendor  currently  ships  out  the  door  with  their 
ft  machine  or  put  another  way,  the  most  popular  os  provided  with  the  machine. 

# Note  that  if  you're  going  to  try  to  match  "-MANUFACTURER"  here  (say, 
ft  "-sun"),  then  you  have  to  tell  the  case  statement  up  towards  the  top 
ft  that  MANUFACTURER  isn't  an  operating  system.  Otherwise,  code  above 

ft  will  signal  an  error  saying  that  MANUFACTURER  isn't  an  operating 
ft  system,  and  we'll  never  get  to  this  point. 


case  Sbasic  machine  in 


*-acorn) 


os=-riscix1.2 


r r 

a rm*-semi  ) 


os=-aout 


pdpi 1-*) 


n os=-none 

° ;; 

*-de  c I va  X-* ) 
n os=-ultrix4.2 

° ; ; 
m68*-a po I I o ) 
n os=-doma i n 

n ; ; 

i 386-sun  ) 

n os=-sunos4 .0.2 
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1989 


config.sub 


n 

n 

f r 

Q 

m68000-sun ) 

u 

Q 

os=-sunos3 

u 

n 

ft  This  also  exists  in  the  configure  program,  but  was  not  the 

u 

n 

ft  default. 

n 

Q 

ft  os  = -sunos4 

n 

n 

n 

*-tti  )n 

ft  must  be  before 

spare  entry  or  we  get 

the  wrong  os. 

Q 

n 

os=-sy s v3 

n 

n 

f r 

□ 

spare-* 

1 *- s u n ) 

n 

Q 

os  = -sunos4.1  .1 

n 

n 

n 

*- i bm ) 

la 

n 

0 s = -a 1 X 

□ 

□ 

f r 

n 

*-hp) 

n 

n 

os=-hpux 

n 

Q 

n 

*-hitachi ) 

n 

n 

os=-hi ux 

n 

n 

r r 

n 

i860-*  1 

*-att  1 *-ncr  | 

*-aLtos  1 *-motoroLa  | 

*-convergent ) 

a 

n 

os=-sy sv 

a 

n 

r / 

u 

*- c bm ) 

□ 

n 

os=-amigados 

□ 

n 

r r 

n 

*-dg ) 

n 

n 

os=-dgux 

n 

n 

/ f 

£t 

*-do 1 ph i n ) 

n 

n 

os=-sy s v3 

n 

n 

r f 

□ 

m68k-ccur) 

n 

n 

0 s = - r t u 

n 

□ 

/ r 

u 

m88k-omron*) 

a 

Q 

os  = - L una 

n 

n 

r r 

n 

*-sequent ) 

Q 

n 

O S =-p  t X 

n 

□ 

r f 

□ 

*-c  rds ) 

□ 

a 

os=-unos 

n 

n 

n 

*-n  s ) 

n 

Q 

os=-gen i x 

n 

n 

r r 

n 

i370-*) 

n 

a 

o s = -mv  s 

n 

n 

r r 

n 

*-next ) 

n 

n 

os=-nextstep3 

n 

□ 

r r 

*-gou 1 d ) 

□ 

Q 

os=-sysv 

Q 

n 

/ r 

CCCHK; 
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config.sub 


*-hi gh  Leve  L ) 
n n os=-bsd 


a n 

n *- 

n n 

r r 

encore) 

os  = - 

bsd 

□ n 

*- 

Q n 

f r 

sg  i ) 

0 s =- 

i r i X 

□ n 

•k  _ 

Q D 

/ / 

siemens) 

o s = - 

sy  sv4 

n n 

n *- 

n □ 

r / 

ma  s s comp ) 

os  = - 

r t u 

n n 

n * ) 

n n 

0 r 

os  = - 

none 

n □ 

e s a c 

f 1 

U Here  we 

handle  the 

case  where 

we  know  the  os,  and 

it  manufacturer.  We 

pick  the  Logical  manufacturer. 

vendor=unknown 

case  $ba s i c_ma c h 1 n e 

i n 

n *- 

n □ 

unknown ) 

case 

$o  s in 

c n 

□ 

-riscix*) 

n Q 

n 

n 

vendor=acorn 

n □ 

□ 

n 

/ / 

n n 

n 

-sunos*) 

n n 

B 

B 

vendor=sun 

n n 

B 

B 

/ r 

n a 

B 

- Lynxos* 

) 

B B 

□ 

B 

vendor=Lynx 

B B 

n 

B 

/ f 

B B 

D 

-aix*) 

B n 

a 

n 

vendor=i bm 

n n 

n 

n 

/ f 

n n 

n 

-hpux*  ) 

n B 

□ 

n 

vendor=hp 

B B 

n 

n 

r r 

B B 

n 

-hi ux*) 

n B 

n 

n 

vendor=hi tachi 

B B 

a 

n 

F r 

□ n 

n 

-unos* ) 

□ n 

n 

n 

vendor=crds 

n n 

n 

Q 

n n 

□ 

-dgux* ) 

n n 

n 

n 

vendor=dg 

n B 

n 

Q 

/ / 

□ n 

n 

-Luna*) 

n n 

B 

n 

vendor=omron 

B B 

B 

□ 

/ f 

n n 

B 

-g  e n i X * ) 

B B 

B 

n 

vendor=ns 

n n 

B 

n 

f r 

B n 

B 

-mv  s * ) 

the  CPU  type. 


but  not  the 
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config.sub 


n 

n 

u 

D 

vendor=i bm 

a 

n 

s 

n 

r / 

□ 

n 

tt 

-ptx*) 

n 

n 

n 

B 

vendor=sequent 

n 

n 

a 

B 

r r 

n 

□ 

n 

-vxworks*) 

n 

n 

n 

B 

vendor=Hrs 

Q 

a 

n 

B 

r r 

a 

□ 

esac 

n 

Q 

ba  s i c_ 

ma  c h i n e= ' 

'echo  $basi  c_nia  c h 

n 

a 

r r 

e s a c 

echo 

$ba  s i c. 

_niachine$os 

sed  " s / u n kn o w n / $ ve n do r / " ' 
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#!  /bin/sh 

n 

U $Id:  instaLL-sh,v  1.3  1996/11/12  01:42:33  mhw  Exp  $ 

# 

It  install  - install  a program,  script,  or  datafile 

# This  comes  from  X11R5. 

# 

# Calling  this  script  install-sh  is  preferred  over  install. sh,  to  prevent 

# 'make'  implicit  rules  from  creating  a file  called  install  from  it 

# when  there  is  no  Makefile. 

# 

U This  script  is  compatible  with  the  BSD  install  script,  but  was  written 
tt  from  scratch. 

U 


# set  DOITPROG  to  echo  to  test  this  script 

# Don't  use  :-  since  4.3BSD  and  earlier  shells  don't  like  it. 
doi t="${D0ITPR0G->" 


# put  in  absolute  paths  if  you  don't  have  them  in  your  path;  or  use  env.  vars. 


mvprog="${MVPROG-mv>" 

cpprog="${CPPROG-cp>" 

chmodprog="${CHMODPROG-chmod>" 

chownprog="${CHOWNPROG-chown>" 

chgrpprog="${CHGRPPROG-chgrp>" 

stripprog="${STRIPPROG-strip>" 

rmprog="${RHPROG-rm>" 

mkdi rprog="${HKDIRPROG-mkdi r>" 


transformbasename="" 

transform_arg="" 

instcmd="$mvprog" 

chmodcmd="$chmodprog  0755 

chowncmd="" 

chgrpcmd="" 

stripcmd="" 

rmcmd="$rmprog  -f" 

mvcmd="$mvprog" 

src="" 

d s t = " " 

di r_arg="" 


wh  i 

a 

n 

n 


le  C x"$1"  !=  X ];  do 

case  $1  in 

-c)  instcmd="$cpprog 
shift 

cont i nue;  ; 


-d)  dir_arg=true 
shift 

continue;; 


-m)  chmodcmd="$chmodprog  $2' 
shift 


C[CHK:a27bfdb9375fbd0f6f50aeff07a38f81124010fdbb10337eb0aa8a665b59a910i:: 


Pretty  Good  Privacy  5.0'"'  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


1993 
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Q 

shift 

n 

continue;; 

n 

-o)  c h 0 wn cmd = " $ c h 0 wn p r og 

$2" 

D 

shift 

n 

shift 

a 

continue;; 

n 

-g)  c h g r p cmd = " $ c h g r p p r 0 g 

$2" 

□ 

shift 

□ 

shift 

n 

continue;; 

n 

-s)  s t r i pcmd=" $ s t r i pp rog " 

n 

shift 

Q 

conti nue;; 

n 

-t=*)  t r a n s f 0 rma rg = ' e c h 0 

$1  1 sed  's/-t=//'' 

Q 

shift 

□ 

continue;; 

a 

-b  = *)  t r a n s f 0 rmba s e n a me = ' 

echo  $1  1 sed  's/-b=// 

1 1 

n 

shift 

□ 

continue;; 

Q 

*)  if  C x"$src"  = X 3 

n 

then 

n 

n src=$1 

□ 

else 

n 

n # this  colon  is  to  work  around  a 386BSD 

/bi n/sh 

n 

n : 

n 

a dst=$1 

n 

f i 

n 

shift 

n 

continue;; 

esac 

done 

if  C 

x"$src"  = X ] 

then 

□ 

echo  "instalL:n  no  input 

file  specified" 

n 

exit  1 

else 

D 

true 

f i 

if  C 

x"$dir_arg"  !=  x ];  then 

n 

dst=$src 

n 

s r c = " " 

n 

n 

if  C -d  $dst  D;  then 

Q 

n instcmd=: 

n 

else 

n 

n instcmd=mkdir 

a 

f i 

else 

ft  Waiting  for  this  to  be  detected 

by  the  "Sinstcmd  $src 

$d  s 1 1 mp ' 
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u 

might  cause 

directories  to  be 

created,  which 

would  be 

u 

if  $src  (and 

thus 

Sdsttmp)  contains  '*'. 

n 

if  C - 

f $ s r c 

-0  -d  $src 

n 

then 

n 

n 

true 

B 

else 

B 

□ 

echo 

"install: 

$src  does  not 

exist" 

B 

n 

exit 

1 

B 

f i 

B 

B 

i f : X 

" $d  s t " 

= X ] 

B 

then 

B 

n 

echo 

"install:n 

no  destination 

specified 

B 

a 

exit 

1 

B 

else 

B 

□ 

true 

B 

f i 

# If  destination  is  a directory,  append  the  input  filename;  if  your  system 


n 

does 

not  like 

double  slashes  i 

n filenames,  you  may  need 

B 

if  C -d 

$dst  3 

B 

then 

B 

n 

dst="$dst"/'basename  $src' 

B 

else 

B 

n 

true 

B 

f i 

f i 

## 

this 

sed  command  emulates  the 

di rname  command 

d s t d i r = 

'echo  $dst  1 sed  -e  's,C* 

/3*$,,;s,/$,,;s,‘'$,.,'  ' 

U 

Hake 

sure  that 

the  destination 

directory  exists. 

n 

this 

part  is 

taken  from  Noah 

Friedman's  m k i n s t a 1 1 d i r s 

n 

Skip 

lots  of  stat  calls  in  the 

usual  case . 

i f 

C ! 

-d  "Sdstdir"  3;  then 

defauLtIFS='n 

I 

IFS="${IFS-${defauLtIFS}}" 

ol  FS  = "${I FS>" 

U Some  sh's  can't  handle  IFS=/  for  some  reason. 

IFS='X' 

set  - 'echo  $<dstdir>  | sed  -e  'sa/aZag'  -e  'sa*%a/a'' 
IFS="${oIFS}" 

pathcomp=' ' 

while  C $#  -ne  0 D ; do 
n pa t h c omp  = " $ { pa t h c omp > $ { 1 } " 

n shift 


if  C ! -d  "${pathcomp>"  D ; 
then 

n Smkdirprog  " $ { pa t h c omp } " 

else 
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H n true 

n f i 

n pathcomp="${pathcomp>/ 

done 
f i 

if  [ x"$dir_arg"  !=  x ] 
then 

n $doit  Sinstcmd  $dst  S8 


n 

i f 

: 

X 

'Schowncmd" 

! = X 

then 

$doi  t 

Schowncmd 

Sdst;  else 

true  ; 

f i 

SS 

n 

i f 

[ 

X 

’Schgrpcmd" 

! = X 

then 

$do i t 

Schgrpcmd 

Sdst;  else 

true  ; 

f i 

SS 

u 

i f 

c 

X 

'$st  ri pcmd" 

! = X 

then 

$do i t 

Sstripcmd 

Sdst;  else 

true  ; 

f i 

SS 

a 

i f 

[ 

X 

'Schmodcmd" 

! = X 

then 

$ d 0 i t 

Schmodcmd 

Sdst;  else 

true  ; 

f i 

else 


# If  we're  going  to  rename  the  final  executable,  determine  the  name  now. 

n if  C x"$transformarg''  = x 3 

n then 

n n d s t f i I e= ' ba s ena me  $dst' 

n else 

n n d s t f i I e = ' ba s e na me  $dst  $ t r a n s f o r mba s e n a me  | 

n n n sed  $ t r a n s f o rma r g ' $ t r a n s f o r mba s e n a me 

n f i 

# don't  allow  the  sed  command  to  completely  eliminate  the  filename 


Q 

if  C X ' 

'Sdstfile"  = X 3 

Q 

then 

Q 

□ 

d s t f i 1 e= ' ba s e name  Sdst 

n 

else 

o 

□ 

true 

n 

f i 

# Hake  a temp  file  name  in  the  proper  directory, 

n dsttmp=$dstdi r/#i nst . $$# 

# Hove  or  copy  the  file  name  to  the  temp  name 

n $doit  Sinstcmd  $src  Sdsttmp  && 

n trap  "rm  -f  ${dsttmp>"  0 SS 

M and  set  any  options;  do  chmod  last  to  preserve  setuid  bits 

tt  If  any  of  these  fail,  we  abort  the  whole  thing.  If  we  want  to 

# ignore  errors  from  any  of  these,  just  make  sure  not  to  ignore 


n 

errors  f rom 

the  above 

'$doi t 

Sinstcmc 

S s r c 

Sdsttmp" 

command. 

n 

i f 

C 

x" Schowncmd' 

! = X 

3 ; then 

Sd 0 i t 

Schowncmd 

Sdsttmp;  else 

t rue; f i 

SS 

n 

i f 

i; 

x"Schgrpcmd' 

! = X 

3 ; then 

Sdoi  t 

Schgrpcmd 

Sdsttmp;  else 

t rue; f i 

SS 

n 

i f 

: 

x"  Sstripcmd' 

! = X 

3 ; then 

Sdo i t 

Sst  ri pcmd 

Sdsttmp;  else 

t r ue ; f i 

SS 

n 

i f 

c 

x" Schmodcmd' 

! = X 

3 ; then 

Sdoi  t 

Schmodcmd 

Sdsttmp;  else 

t r u e ; f i 

SS 

tt  Now  rename  the  file  to  the  real  destination. 
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D 


□ 


$doit  Srmcmd  -f  $d s t d i r / $d s t f i L e SS 
$doit  Smvcmd  Sdsttmp  $d s t d i r / $d s t f i L e 


fi  && 


exit  0 
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post,  in 


U 

tf  config/post.in 

n 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
# 

U Written  by:n  Derek  Atkins  < wa  r L o r dalM  I T . E D Ll>  and  CoLin  Plumb 

n 

U $Id:  post. in, V 1.35.2.3  1997/06/09  23:46:20  quark  Exp  $ 

U 

# Recursively  perform  operations  on  all  POSTSUBDIRS 
all  check  clean  depend  headers  install  very-clean:: 


□ 

a i f 

test  ’xSCPOSTSUBDIRS) ' !=  x; 

then  \ 

XX 

Q 

for  1 i 

n SCPOSTSUBDIRS) ' 

' do  \ 

n 

n 

n 

echo  Making  $3  i 

n $(SUB)$$i  ; \ 

a 

XX 

XX 

(cd  $$i;  $(MAKE) 

$(MFLAGS)  SUB  = $CSUB)$$i  / 

Q 

XX 

n 

n n 

II  exit  1 ; \ 

XX 

XX 

done  \ 

XX 

else 

\ 

XX 

f i 

# Install  all  SHAREDHDRS  into  the  public  header  directory,  PRIVHDRS  into 

# the  private  interface  directory 
headers: : 


B 

ai  f 

test  ' x$ ( SHAREDHDRS  ) ' !=  x ; then  \ 

B 

B 

echo 

Linking  SCSHAREDHDRS)  to  public 

include 

B 

B 

for  i 

in  $(SHAREDHDRS)'';  do  \ 

B 

B 

B 

if  $(TEST_L)  $(bui ldinc)/$$i  ; 

then 

\ 

B 

B 

B 

n $(RH)  $(bui Idi nc ) /$$i 

; \ 

B 

B 

B 

else  : ; \ 

B 

B 

B 

f i ; \ 

B 

B 

B 

if  test  ! -f  $ ( bu i 1 d i n c ) / $$ i ; 

then 

\ 

B 

B 

B 

a $(LN_S)  \ 

. .$(di r_suffix)/$(top_srcdi r)$(di r_suffix)/$$i  \ 


B 

SCbuildinc)  ; 

\ 

B 

B 

B 

else 

■ r 

\ 

B 

B 

B 

f i \ 

B 

B 

done 

\ 

B 

else 

\ 

B 

f i 

B 

a i f 

test  ' x$ ( PRIVHDRS  ) ' 

!=  x; 

then  \ 

B 

B 

echo 

Linking 

$(PRIVHDRS)  to  private  include  ; \ 

B 

B 

if  test 

! -d 

. . 

/include;  then  mkdir  ../include;  fi;  \ 

B 

B 

for  i 

i 

n $(PRIVHDRS)' 

';  do  \ 

B 

B 

B 

if  $(TEST_L) 

. . / i n c 1 ud e / $$ i S&  test  \ 

B 

B 

B 

B 

' (cd 

../include;  pwd)'  !=  \ 

B 

B 

B 

B 

' (cd 

$(top_srcdir)$(dir_suffix);  pwd)';  then  \ 

B 

B 

B 

B 

$(RM) 

../include/$$i  ; \ 

B 

B 

B 

else 

• / 

\ 

E 

B 

B 

■f  T ; 

\ 

B 

B 

B 

if  test 

! -f 

../include/$$i;  then  \ 

B 

B 

B 

B 

$(LN_ 

S)  $ ( t op_ s r c d i r ) $ ( d i r _ s u f f i x ) / $$ i \ 

B 

B 

B 

B 

n 

../include  ; \ 

B 

B 

B 

else 

• r 

\ 

B 

B 

B 

fi  \ 

B 

B 

done 

\ 

B 

else 

\ 

n f i 
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ft  InstaLL  PUBHDRS,  INSTALLLIBS,  and  INSTALLPROGS  into  the  appropriate 

ft  Locations 

install:: 

n if  test  ' x$ ( PUBHDRS ) ' !=  x;  then  \ 

n n if  test  ! -d  $ ( D E S T D I R ) $ ( i n c L ud e d i r ) ; then  \ 

n n n nikdir-p$(DESTDIR)$(incLudedir);\ 


n 

n 

f i ; \ 

n 

n 

for  i i 

n $(PUBHDRS) ' ' ; do  \ 

n 

n 

a 

SCINSTALL)  -m  644  $ ( s r c d i r ) / $$ i \ 

n 

n 

n 

a a $(DESTDIR)$(incLudedir); 

n 

n 

done  \ 

d 

else  : ; 

\ 

Q 

f i 

n 

i f test 

■xSCINSTALLLIBS) ' !=  x;  then  \ 

n 

n 

if  test 

! -d  $(DESTDIR)$(Libdir);  then  \ 

u 

□ 

a 

mkdir  -p  $ ( D E ST D I R ) $ ( L i bd i r ) ; \ 

n 

n 

f i ; \ 

n 

□ 

for  i i 

n $(INSTALLLIBS) ' ' ; do  \ 

n 

a 

a 

SCINSTALL)  -m  644  $$i  $ ( D E ST D I R ) $ ( L i b d i r ) ; 

Q 

□ 

done  \ 

□ 

else  : ; 

\ 

n 

f i 

n 

if  test 

' x$(INSTALLPROGS)  ' !=  x;  then  \ 

n 

s 

if  test 

! -d  $(DESTDIR)${bindi r);  then  \ 

n 

n 

□ 

mkdir  -p  $ ( D E ST D I R ) $ C b i nd i r ) ; \ 

n 

n 

f i ; \ 

n 

D 

for  i i 

n $( INSTALLPROGS ; do  \ 

n 

n 

□ 

SCINSTALL)  -m  755  $$i  $(DESTDIR)$(bindir); 

n 

n 

done  \ 

n 

else  : ; 

\ 

u 

f i 

n 

Remove  appropriate  things 

c 

Lean  do-c  Lean : 

: 

D 

$(RM)  * 

. 0 * ■ * . 

bak  core  DONE  LIBDONE 

ft  Remove  clean  and  PROG  as  well 
very-clean::  do-clean 
n SCRH)  $(PROG) 

n $ ( RH  ) Makefile 


depend : : 

n aif  test  'x$(SRCS)'  !=  x;  then  \ 

a a sed  -e  '/''tttttttt  DO  NOT  DELETE  this  Line$$/,$$d'  Makefile  > \ 

n n n a Makefile. new  ; \ 

n n echo  "tttttftt  DO  NOT  DELETE  this  Line"  >>  Makefile. new  ; \ 

B B SCDEPEND)  $(CFLAGS)  $(SRCS)  >>  Makefile. new  ; \ 

B a $CMV)  Makefile. new  Makefile  ; \ 

a e L s e : ; \ 

a f i 


ft  Compile  Library  objects,  OBJS.  Requires  OBJS  and  "all::  DONE" 
DONE : : $ ( OB J S ) 

a aif  test  x'SCOBJS)'  = x 88  test  -r  $a;  then  :;  \ 

a e L s e \ 

B D (set  -x;  echo  $(0BJS)  > $a)  \ 

a f i 
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# Compile  subdirectories  files,  $(LIBD0NE)  into  LIBDONE. 
n LIBDONE  and  "all::  LIBDONE" 

LIBDONE:  SCLIBDONE) 


n 

$(RM) 

$3 

n 

for  i 

in  SCLIBDONE);  do  \ 

n 

n 

j = 'echo  SSi  | sed  -e  's;/[I*/!]*SS;;''  ; \ 

n 

n 

sed  -e  "s;*\C[*  ]\);SSj/\l;"  -e  "s;  XCC* 

n 

n 

< SSi  >>  S3;  \ 

n 

done 

Requi res 


:\);  $$j/\1;g 


\ 


ft  Compile  program,  PROG 

$(PR0G):  $(0BJS)  $(DEPLIBS)  $ ( LO C A LD E P L I B S ) 

n $(CC)  $(LDFLAGS)  -o  $3  SCOBJS)  $(LIBS)  $(LOCALLIBS) 

ft  Build  a library,  LIBTARGET,  based  on  LIBTDEPS.  Requires  LIBTDEPS  be 
ft  either  DONE  or  LIBDONE 
$( LIBTARGET) : n SCLIBTDEPS) 
n $(RM)  $a 

n $(AR)  cru  $3  'cat  SCLIBTDEPS)' 

n SCRANLIB)  $3 

n SCRM)  . . /$3 

n $(LN_S)  . . $ ( d i r _ s u f f i X ) / $ 3 ../ 


ft  GNU  make  feature:  If  there's  an  error  building  a target,  remove  it 
■DELETE  ON  ERROR: 
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pre.in 


U 

# config/pre.in 
ft 

ft  Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

ft  Written  by:n  Derek  Atkins  <wa  r L o r d SM I T . E D Ll>  and  CoLin  PLumb 
ft 

U $Id:  pre.in,v  1.34.2.8  ^ 9971716199  23:46:21  quark  Exp  $ 
ft 

SHELL=/bin/sh 

.SUFFIXES: 

.SUFFIXES:  .c  .h  .o 

prefix  = Sprefix6S 
exec_prefix=aexec_prefixa 

incLudedi r=$(prefix)/incLude 
tnandir  = $(prefix)/man 
bindi r=$(exec_prefix)/bin 
Libdi r=$(exec_prefix)/Lib 

VPATH=asrcdi ra 
srcdi r=asrcdi ra 
top_srcdi r=atop_srcdi ra 
top_bui Lddi r=atop_bui Lddi ra 
bui Ldinc=$(top_bui Lddir)/incLude 
bui LdLib=$(top_bui Lddi r)/Lib 
dir_suffix=adi r_suffixa 
DESTDIR= 

LN_S=aLN_Sa 

INSTALL=aiNSTALLa 

RANLIB^aRANLIBa 

TEST_L=aTEST_La 

cc=acca 

RH  = rtn  - f 
f1V  = mv  -f 
OPT=  aCFLAGSa 
0SDEF=-DUNIX=1 
CC0PTS= 

DEFINES=-DPGPTRUSTHODEL=0  -DDEBUG=0  - D U N F I N I S H E D_C 0 D E_ A LLO W E D=0 
LOCALDEFINES= 

CFLAGS=n$(OPT)  SCOSDEF)  aCPPFLAGSa  aWARNa  aOEFSa  SCDEFINES)  $ ( LOC A LD E F I N E S ) \ 
n -I  $ ( t op_bu i L dd i r ) -ISCbui  Ldi nc)  -I../incLude  -I$(srcdir)  \ 

n $(LOCALINCLUDES)  SCCCOPTS)  aRSAINCSa 

LDFLAGS=aLDFLAGSa  -L$ ( b u i L d L i b ) 

LIBPRE  = n L i b 
LIBEXT=na 

ft 

ft  due  to  how  post. in  works,  some  systems.  Like  AIX,  require  PROG 
ft  to  be  set  to  something  reaL.  This  is  here  in  case  it  isn't  set 
ft  in  the  HakefiLe.in,  so  make  wont  compLain! 

PROG=aix-and-pains 

LIBTARGET=aix-and-pains2 

[:CHK:316c4fc1aac933f99aa7773bcaff5cca45bf52e75033be144788538d39251e9ai:] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2001 


pre.in 


DEPEND=aDEPENDa 
SRCS  = ${OBJ  S : . 0=  . c> 

TTYUI=H  $(LIBPRE)pgptty.$(LIBEXT) 

LIBTTYUI=  -Lpgptty 

DEPTTYUI=  $C build M b) /SCTTYUI) 

PGPLIB=n$(LIBPRE)pgp.$(LIBEXT) 

LIBPGP=  -Ipgp 

DEPLIBPGP=  $(bui LdLib)/$CPGPLIB) 

BNLIB=n  $(LIBPRE)bn.$(LIBEXT) 

LIBBN=n  -Lbn 

DEPLIBBN=  $( bun  Id  I i b) /$(BNLIB) 

SIHPLE=n$(LIBPRE)simpLe.$(LIBEXT) 

LIBSIMPLE=n  -LsimpLe 

DEPLIBSIHPLE=n  $(bui Id Lib)/$( SIMPLE) 

LIBS=n  SCLIBTTYUI)  $(LIBPGP)  $(LIBBN)  $(LIBSIHPLE)  aLIBSa 
DEPLIBS=  SCDEPTTYUI)  SCDEPLIBPGP)  SCDEPLIBBN)  $ ( D E P LI BS I H P L E ) 


all:: 

# Recursively  perform  operations  on  all  SUBDIRS 
all  check  clean  depend  headers  install  very-clean:: 
n aif  test  ' X $ ( S UBD I R S ) ' !=  x;  then  \ 


n 

u 

for  i 

in  SCSUBDIRS)'';  do  \ 

□ 

a 

□ 

echo  Making  $a  in  $(SUB)$$i  ; \ 

n 

n 

n 

(cd  $$i;  SCMAKE)  SCMFLAGS)  S U B=$ ( S U B ) $$ i / $a) 

a 

n 

D 

a n ||exit1;\ 

n 

n 

done 

\ 

a 

else 

\ 

n 

f i 
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common/ 


src/ apps/ common/ 
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# 

# a p p s / c ommo n / M a ke f i L e . i n 

n 

tt  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

# $Id:  Makef i Le. in,v  1.7. 2. 2 1 997/06/07  09:49:03  mhw  Exp  $ 

tt 

OBJS  = pgpAppFiLe.o  pgpExit.o  pg p Key R i n g s . o pgpInitApp.o  pgpOpt.o 

LOCALINCLUDES  = - I $../../ i n c L u d e 
LOCALDEFINES  = - D PG P S Y S D I R= \ " $ ( L i bd i r ) / pg p \ " 

a L L : : DONE 
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makefile. msc 


# 


# a pp s / c ommo n / ma ke f i L e . ms c 

n 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
It 

# $Id:  ma k e f i L e . ms c , V 1.4. 2.1  1 997/06/07  09:49:03  mhw  Exp  $ 

# 

a L L : : n Lib 

MncLude  " ma  ke  f i L e . i n " 

DOBJ  S=  $(0BJ  S : . 0= . ob j ) 

L i b : n $( DOBJ  S ) 


. c . ob  j : 


n 


$(CC)  $(CFLAGS)  SCDEBUG)  -Z7  - I . . \ . . \ i n c L u d e -I..\..  \ 


□ 


n 


-DHAVE_CONFIG_H  -c  $< 


□ 


Lib  / ou t : . . \ c om L i b . L i b *.obj 


c L ea  n : 


□ 


de  L * . ob j 


DONE  : 
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/* 

* pgpAppFiLe.c  --  Functions  to  handle  filenames 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Written  by:n  Colin  Plumb  and  Derek  Atkins  <wa r I o r d SM I T . E D U> 

* 

* $Id:  pg p Ap p F i I e . c , V 1.3. 2.1  1 997/06/07  09:49:03  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#end i f 


#i nc I ude 
^include 
^include 


<stdarg.h> 
<stdi o . h> 
<string.h> 


# i nc I ude 
^include 
Sinclude 


pgpDebug . h " 
pgpHem.h" 
pgpAppFi le.h 


/* 

* DIRSEPS  is  a string  of  possible  directory-separation  characters 

* The  first  one  is  the  preferred  one,  which  goes  in  between 

* PGPPATH  and  the  file  name  if  PGPPATH  is  not  terminated  with  a 

* directory  separator. 

•k 

* PATHSEP  is  a the  directory  separator  within  a PATH  of  directories. 

* Only  one  character  per  platform,  please 
*/ 


#if  de f i ned ( MS  DOS ) ||  def i ned ( ATARI ) ||  d e f i n ed ( _W I N32  ) 

static  char  const  DIRSEPSCD  = "\\/:"; 

#define  PATHSEP 
^define  SINGLE_EXT  1 

#elif  de  f i ned  ( 1)  N I X ) 

static  char  const  DIRSEPSCH  = "/"; 

#def i ne  PATHSEP  ' : ' 

#elif  de f i ned ( AH  I G A ) 

static  char  const  DIRSEPSCD  = "/:"; 

^define  PATHSEP  ' ; ' 

#elif  defined(VMS) 

static  char  const  DIRSEPSC]  = "D:";n  /*  Any  more?  */ 

#define  PATHSEP  ' ; ' 

^define  SINGLE_EXT  1 

#elif  d e f i ned ( M A C I NTOS H ) 
static  char  const  DIRSEPSC3  = 

^define  PATHSEP  ' ; ' 

#e  I se 

#error  Unknown  operating  system  - need  one  of\ 

UNIX,  HSDOS,  AHIGA,  ATARI,  VMS,  or  MACINTOSH. 

# e nd i f 
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pgpAppFile.c 


/* 

* Build  a path  name  out  of  a number  of  segments. 

* Each  segment  is  separated  from  the  next  with  DIRSEPSC0]  if 

* it  does  not  end  in  a directory  separator  already. 

* 

* A first  pass  over  the  argument  list  adds  up  the  length  of  the  result, 

* then  space  is  allocated  for  it,  then  a second  pass  copies  the  result 

* to  the  allocated  space. 

* 

* The  first  pass  records  in  "flag"  whether  the  previous  segment  did  NOT  end 

* in  a directory  separator  and,  if  the  current  segment  exists,  adds  space 

* for  a separator  if  flag  is  true. 

* 

* Then,  if  there  was  only  one  segment  of  note,  that  is  returned  directly. 

* Otherwise,  space  is  allocated  in  the  MiscPool. 

* Finally,  the  loop  is  repeated,  copying  to  the  allocated  space  and  inserting 

* directory  separators  as  needed. 

* 

* This  function  always  returns  a newly  allocated  buffer.  It  is  the 

* responsibility  of  the  caller  to  free  it  when  finished. 

*/ 

char  * 

fileNameBuildCchar  const  *seg,  ...) 

{ 

n va_list  ap; 

n unsigned  seglen,  len,  flag; 

n char  const  *curseg,  *prevseg; 

n char*p,  *ret; 


n 

n 

□ 

o 

Q 

□ 

□ 

n 

□ 

□ 

n 

c 

n 

n 


/*  Start  by  counting  the  length  of  the  result  */ 
va_start  Cap,  seg); 
prevseg  = 0; 

len  = seglen  = flag  = 0; 

for  (curseg  = seg;  curseg;  curseg  = va_arg(ap,  char  const  *))  { 
n seglen  = strlen  (curseg); 

n if  (Iseglen) 

n n continue; 

n prevseg  = curseg; 

n len  +=  seglen  + flag; 

n /*  Does  curseg  need  a directory  separator  added?  */ 

a flag  = ( s t r c h r ( D I R S E PS , c u r s e g C s eg L e n- 1 D ) ==  0); 

> 

va_end  (ap); 


n /*  Allocate  space  for  the  combined  string  */ 

a p = (char  * ) pg pHem A I I o c (len  + 1);n  /*  +1  for  trailing  null  */ 

n i f ( ! p) 

a n return0; 

a r e t = p ; 


a /*  Combine  the  elements  together  */ 

a va_start  (ap,  seg); 

a flag=0; 

a for  (curseg  = seg;  curseg;  curseg  = va_arg  (ap,  char  const  *))  { 

a n seglen  = strlen  (curseg); 

a n if(!seglen) 

a n n continue; 
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n 

n 

if  (flag) 

n 

Q 

n *p++  = 

DIRSEPS:0]; 

□ 

n 

memcpy  (p,  curseg,  segLen); 

n 

n 

p +=  seg  Len; 

n 

n 

/*  Does  curseg 

need  a directory  separator  added?  */ 

n 

n 

flag  = (strchr 

(DIRSEPS,  cursegCsegLen-ID)  ==  0); 

Et 

> 

n 

va 

_end(ap)  ; 

□ 

*P 

='\0';n  /*NuLL 

-terminate  the  string  */ 

Q 

return  ret; 

> 

char  * 

f i L e Na me  Ex t end  (char  const  *base,  char  const  *ext) 

{ 

a char  *name  = (char  * ) pgpMemA L L oc  (strLen  (base)  + strLen  (ext)  + 1); 

n nf(!name) 


n 

a 

return 

NULL; 

n 

st  rcpy 

(name. 

base)  ; 

n 

s t r c a t 

(name. 

ext); 

□ 

return 

name; 

> 


char  * 

f i L eNameCon t ra c t (char  const  *base) 


n 

char  *name  = 

n 

char  * p ; 

a 

if  ( ! name ) 

n 

n r e t u 

a 

strcpy  (name 

n 

/*  remove  an 

n 

p = strrchr 

n 

if  ( p ) 

n 

n *P  = 

n 

return  name; 

\0’; 


(base)  + 1); 


char  * 

fi LeNameNextDi rectory  (char  const  *path,  char  const  **rest) 
{ 

n char  const  *d; 

n char  *name ; 

n unsigned  Len; 

n 


□ 

d = strchr  (path,  PATHSEP); 

n 

if  (d) 

{ 

n 

n 

Len  = d - path; 

n 

o 

d + + ; 

n 

> else 

n 

n 

Len  = StrLen  (path) 
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n if(rest) 

n n *rest=d; 

n name  = (char  * ) pg pM em A I I o c (Len  + 1); 

a if(!name) 

a a returnNULL; 


a memcpy  (name,  path,  Len); 

a nameCLen!]  = '\0'; 

a return  name; 

} 


char  * 

f i L e N a me  Ex t e nd Pa t h (char  const  *path,  char  const  *dir,  int  front) 
{ 


n 

c h a 

r *p,  *t; 

n 

pgpAssert  (dir) 

r 

□ 

P = 

(char  * ) pgpMemA L L 0 c ((path  ? strLen  (path) 

n 

n 

n 

XX 

+ 2); 

n 

i f 

Q. 

n 

d 

t = p; 

n 

□ 

if  (front) 

{ 

n 

n 

n 

memcpy  (t,  dir,  strLen  (dir)); 

n 

n 

□ 

t + 

= StrLen  (dir); 

□ 

n 

□ 

i f 

(path)  { 

n 

n 

n 

□ 

*(t++)  = PATHSEP; 

n 

a 

n 

□ 

memcpy  (t,  path,  strLen 

n 

n 

n 

n 

t +=  StrLen  (path); 

n 

n 

Q 

> 

n 

□ 

D 

*t 

= ’\0'; 

a 

n 

> else 

Q 

n 

n 

i f 

(path)  { 

Q 

a 

n 

□ 

memcpy  (t,  path,  strLen 

n 

n 

Q 

Q 

t +=  StrLen  (path); 

n 

n 

n 

n 

*(t++)  = PATHSEP; 

n 

Q 

D 

> 

□ 

n 

n 

memcpy  (t,  dir,  strLen  (dir)); 

n 

n 

D 

t + 

= StrLen  (dir); 

Q 

u 

n 

*t 

= '\0'; 

n 

□ 

> 

Q 

> 

0)  + strLen 


(path)); 


(path)); 


(dir) 


a returnp; 

} 
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/* 

* pgpAppFile.h  --  build  filenames  for  PGP  applications 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  By:n  Derek  Atkins  < wa r I o r dSH I T . E D U> 

★ 

* $Id:  pg p Ap p F i I e . h , V 1.3. 2.1  1997/06/07  09:49:04  mhw  Exp  $ 

*/ 

#ifdef  cplusplus 

extern  "C"  { 

# e nd i f 

char  *fileNameBuild  (char  const  *seg,  ...); 

char  *f  i I e N ame Ex t end  (char  const  *base,  char  const  *ext); 

char  *f  i leNameCont ract  (char  const  *base); 

char  *f  i I e Na meN ex t D i r e c t o ry  (char  const  *path,  char  const  **rest); 
char  * f i I e Na me E X t e nd Pa t h (char  const  *path,  char  const  *dir,  int  front); 

#ifdef  __cplusplus 

> 

#endi f 
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/* 

* pgpExit.c  --  This  code  is  for  a runtime  app.  It  is  *N0T*  threaded, 

* in  any  sense  of  the  word.  It  stores  state  in  static  variables 

* and  wipes  system  stack  and  heap  when  exiting  from  the  application. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  by:n  Colin  Plumb  and  Derek  Atkins  < wa r I o r dSM I T . E D U> 

* 

* $Id:  pgpExit.c, V 1.4. 2. 3 1997/06/07  09:49:04  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 
#e  n d i f 


#include  <signal.h> 

#include  <string.h>n  n /*  For  memsetC)  */ 

#include  <stdio.h> 

#ifdef  HAVE_STDARG_H 
#include  <stdarg.h> 

#end i f 

#ifdef  HAVE_STDLIB_H 

#include  <stdlib.h>n  n /*  for  getenvC)  */ 

# e nd i f 


#ifdef  UNIX 

^include  <sy s / t y p e s . h>n  n 
#elif  d e f i n ed ( MS D 0 S ) 

#include  <malloc.h>B  n 

#if  MSC_VER  >=  800 
/* 

* See  flame  elsewhere  about 

* that  are  reserved  by  ANSI 

* include  an  undefined  header 
*/ 

//define  alloca  _alloca 
//define  stackavail  stackavail 


/*  For  sbrkO  */ 


/*  For  s t a c ka va i I ( ) , allocaC)  */ 


Microsoft's  stupid  ideas  about  the  name  spaces 
C if  you  do  something  undefined  by  ANSI  like 
(like  <malloc.h>). 


// e nd i f 

/* 

MSC_VER  >= 

800  */ 

// e nd i f 

/* 

MSDOS  */ 

//include  ' 

pgpExit.h" 

//include  " 

pgpKeyRings 

. h" 

//include  " 

pgpEnv . h " 

//include  " 

pgpRndPoo  1 . 

h" 

//include  " 

pgpRndSeed . 

h" 

//include  " 

pgpT i meDate 

. h" 

static 

voi d *stack0  = 

NULL, 

static 

struct  PgpEnv 

*env0 

static 

i n t 

program_name  = 0 

static 

i n t 

newve  rs i on 

= 0; 

Q 

n 

D 

/*  whether  keyrings  should  be  rewritten  as 

latest  version  (1)  or  original  version  (0)  */ 


/*  Expiry  date  in  days  - defined  for  beta  versions  */ 
#define  EXPIRY_DATE  pgpDa t e F romYMD ( 1 997,  7,  1) 


/* 

* This  usually  returns,  but  will  exit  if  this  is  an  old  beta  version  that 
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* shouldn't  be  in  use  any  more. 

*/ 

void 

ex i t Exp i ry C h e c k (struct  PgpEnv  *env) 

{ 

#ifdef  EXPIRY_DATE 

n int  tzFix  = pgpenvGetInt  (env,  PG P E N V_T Z F I X,  NULL,  NULL); 

unsigned  today  = ( un s i g n ed ) ( pg pT i me S t a mp  ( t z F i x ) /86400 ) ; 
unsigned  expires  = EXPIRY_DATE; 

if  (expires  >=  today)  ( 

expires  -=  today; 
if  (expires  < 30) 

n n n fprintf  (stderr, 

"This  experimental  version  of  PGP  will  expire  in  %u  days\n",  expires); 
return; 

n } 

n fputs  ("\aThis  experimental  version  of  PGP  has  expired. \n",  stderr); 

if  (Igetenv  ( " 0 V E R R I D E_PG P_T I H EBOMB " ) ) 
exitCleanup(PGPEXIT_VERSION); 

Send i f 
} 


void 

exitUsage  (int  code) 

{ 

n switch  ( p r og r am_na me ) { 

n case  EXIT_PROG_PGPE : 

n n fputs("\n\ 

pgpe  CC-r  <recip1>  -r  <recip2>]  C-s  C-u  <myid>D!]  | C-cD3  C-afqtvz3\n\ 
<file1>  E-o  outfilelD  <file2>  C-o  <ou t f i I e 2> 3 \ n \ 

\n\ 


PGP  Encrypt  file(s)\n\ 
\n\ 


-a 
- c 

-f 

-o  <output  f i le> 

-q 

-r  <userid> 

-s 


ASCII  armoring\n\ 

Conventional  Encryption  (IDEA  only;  is  mutually  exclusive\n\ 
with  -s,  -u  and  -r)\n\ 

Filter  Mode;  Read  from  stdin  to  stdout\n\ 

Output  file  for  most  recent  input  file\n\ 
aui et  mode\n\ 

UserlD  to  encrypt  to.  May  be  specified  multiple  times. \n\ 
Sign,  as  well  as  encrypt  (use  pgps  to  just  sign).  If  no\n\ 
userid  is  specified  with  -u,  the  default  userid  is  used.\n\ 
Text  mode\n\ 

UserlD  of  the  key  you  wish  to  sign  with.  Hay  only  be\n\ 
specified  once.\n\ 

Verbose\n\ 

Batch  mode  (assumes  no  user  interaction;  not  yet\n\ 
implemented. \n\n\ 

Other  programs  in  this  suite  include  pgps  to  sign,  pgpv  to  d e c r y p t / ve r i f y , \ n \ 
and  pgpk  for  key  management. \n",  stderr); 
n n break; 


-t 

-u 


- V 

-z 


<use  r i d> 


n case  EX  I T_ P ROG_ PG PS : 

a a fputs("\n\ 

pgps  C-u  userid]  C-bafqtvz]  <file1>  C-o  <outfile>  file2  C-o  <ou t f i I e2> ] ] \ n \ 
\n\ 

PGP  Sign  file(s)\n\ 
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\ n \ 

-a 

-b 

-f 

-o  <output  f i I 

-q 

-t 

-u  <userid> 


-V 

- z 

Other  programs 
decrypt/veri fy 
□ n 


ASCII  armoring\n\ 

Detached  signature\n\ 

Filter  Mode;  Read  from  stdin  to  stdout\n\ 
e>  Output  file  for  most  recent  input  fiLe\n\ 

Quiet  mode\n\ 

Text  mode \n  \ 

UserlD  of  the  key  you  wish  to  sign  with.  May  only  be\n\ 
specified  once.  If  not  specified,  your  default  signing\n\ 
key  will  be  used . \n\ 

Verbose\n\ 

Batch  mode  (assumes  no  user  interaction;  not  yet\n\ 
implemented. )\n\n\ 

in  this  suite  include  pgpe  to  encrypt,  pgpv  to\n\ 

, and  pgpk  for  key  management. \n",  stderr); 
break; 


n case  E X I T_P R0G_ PG P V : 

a n fputsC"\n\ 

pgpv  C-dfKmqvz]  <file1>  C-o  <outfile>  file2  -o  <ou t f i I e 2> D \ n \ 
\ n \ 

De c ry p t / Ve r i f y PGP  encrypted  and/or  signed  file(s)\n\ 

\n\ 


-d 

-f 

-K 

-m 

-o  <output  file> 

-q 

- V 

-z 

other  programs  i 
and  pgpk  for  key 

D □ 


Leave  signature  intact;  just  verify  (don't  save)\n\ 

Filter  Mode;  Read  from  stdin  to  stdout\n\ 

Do  not  process  any  keys  that  are  present  (normally  pgpv\n\ 
will  add  keys  to  your  keyring  if  found  in  an  input  file)\n\ 
More  Mode;  display  using  pager  rather  than  saving\n\ 

Output  file  for  most  recent  input  file\n\ 

Quiet  mode\n\ 

Verbose\n\ 

Batch  mode  (assumes  no  user  interaction;  not  yet\n\ 
implemented) . \n\n\ 

n this  suite  include  pgpe  to  encrypt,  pgps  to  sign,\n\ 
ma na g erne n t . \ n " , stderr); 
break; 


n case  E X I T_PR0G_ PG PO : 

a n fputs("\n\ 

pgp_old  C-dfKmqvz]  <file1>  C-o  <outfile>  file2  -o  <ou t f i I e 2> D \ n \ 
\n\ 

Old-style  PGP  2.6.2  emulation  c omma nd- I i n e \ n \ 

\n\ 

Sadly,  this  isn't  implemented  yet.Nn",  stderr); 
n n break; 


/*XXX  Rewrite  this  to  be  more  Unix-like*/ 
n case  E X I T_ PR0G_PG PK : 

n a fputs("\n"\ 

"Usage  summary:  (for  full  details,  see  the  User's  guide)\n"\ 

"\n"\ 

"To  generate  your  own  unique  public/private  key  pair:\n"\ 

" pgpk  -g  C<userid>  DSS|RSA  <keysize>  <userid>  <validity>  <passphrase>D\n"\ 
"To  add  a key  file's  contents  to  your  public  or  private  key  ring:\n"\ 

" pgpk  -a  keyfile  Ckeyfile  ...!)\n"\ 

"To  remove  a key  from  your  public  and  private  key  ring:\n"\ 

" pgpk  -r  userid  (or  pgpk  -rk  userid)\n"\ 

"To  remove  a user  ID  from  your  public  and  private  key  ring:\n"\ 
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" pgpk  -ru  userid\n"\ 

"To  remove  a signature  from  your  public  key  ring:\n”\ 

" pgpk  -rs  userid\n"\ 

"To  edit  your  user  ID  or  pass  phrase:\n"\ 

" pgpk  -e  your_userid\n"\ 

"To  edit  the  confidence  you  have  in  a person  as  an  introducer:\n"\ 

" pgpk  -e  h e r _u s e r i d \ n " \ 

"To  extract  (copy)  a key  from  your  public  key  ring:\n"\ 

" pgpk  -X  userid  -o  keyfile\n"\ 

"To  extract  (copy)  a key  from  your  public  key  ring  in  ascii  form:\n"\ 

" pgpk  -xa  userid  -o  keyfile\n"\ 

"To  list  the  contents  of  your  key  rings:\n"\ 

" pgpk  -ICl]  Cuserid!]\n"\ 

"To  check  signatures  on  your  public  key  ring:\n"\ 

" pgpk  -c  CuseridD\n"\ 

"To  sign  someone  else's  public  key  on  your  public  key  ring:\n"\ 

" pgpk  -s  her_userid  C-u  y o u r _u s e r i d ] \ n " \ 

"To  disable  or  re-enable  some  else's  public  key  on  your  public  key  ring:\n"\ 

" pgpk  -d  h e r_u s e r i d \ n " \ 

"To  permanently  revoke  your  own  key  on  your  public  and  private  key  rings:\n"\ 

" pgpk  -k  your_userid\n"\ 

"To  revoke  a signature  you  made  on  someone  else's  key  on  your  pub  key  ring:\n"\ 
" pgpk  -ks  your_userid\n"\ 
stderr); 

n n break; 

n default: 

n n fputs("\n\ 

Usage  summary  unavailable  for  this  program. \n\ 

\n",  stderr); 
n n break; 

n } 

n exitCleanup(code); 

} 

void 

exitArgError  (char  const  *fmt,  ...) 

{ 

n va_list  ap; 

n fputs  ("Invalid  arguments:  ",  stderr); 

n va_start  (ap,  fmt); 

n vfprintf  (stderr,  fmt,  ap); 

n va_end  (ap); 

n fputc  ('\n',  stderr); 

a exitCleanup  ( PG P E X I T_ A RG S ) ; 

> 

/*  attribute(x)  expands  to  nothing  unless  GNUC__  is  defined.  */ 

static  void  exitWipe(int  code)  a 1 1 r i b u t e ( ( no r e t u r n ) ) ; 

static  void  ex i t W i pe 1 ( i n t code,  void  *base)  a 1 1 r i bu t e ( ( no r e t u r n ) ) ; 

#ifdef  HSDOS 

^include  <dos.h>n  /*  FOR  MK.FP,  FP_SEG  and  FP_0FF  */ 

#include  <malloc.h>n  /*  for  alloca(),  s t a c ka v a i I ( ) , _heapwalk()  */ 

/* 

* Now,  Microsoft  has  recently  developed  a habit  of  prepending  an  underscore 
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* to  the  beginning  of  everything.  They  wave  their  arms  and  mutter  about  ANSI. 

* If  they  have  a really  broken  linker  then  I can  see  how  they  might  not  be 

* able  to  deal  with  user  code  declaring  functions  that  are  also  supplied  in 

* the  library,  so  they  need  to  put  the  functions  in  a name  space  that  user 

* code  can't  declare  in,  BUT  THIS  SURE  DOESN'T  APPLY  TO  MACROS.  For  any 

* header  *not*  defined  by  ANSI  (such  as,  say,  <dos.h>,  <conio.h>,  <io.h>, 

* <unistd.h>,  <sys/types . h>,  etc.),  any  structures,  unions,  macros,  enums, 

* and  so  on  - anything  not  visible  to  the  linker  - can  be  defined  any 

* way  you  like. 

* 

* So  I don't  understand  Microsoft.  Defining  prefix-prepended  aliases 

* for  I i b r a r y- i n t e r na I calls  is  fine  (so  my  extern  variable  "write" 

* won't  get  called  when  I call  printf()),  but  to  get  rid  of  more  convenient 

* names  if  I *do*  include  the  relevant  file?  Wierd. 

*/ 

#ifndef  MK_FP 
#ifdef  _MK_FP 
#define  MK_FP  _MK_FP 
#e  I se 

#define  M K_ F P ( s e g , o f f ) ((void  __far  *)((seg)<<16  | (off))) 

# e nd i f 

#endif  /*  !MK_FP  */ 

#ifndef  FP_SEG 
#ifdef  _FP_SEG 
^define  FP_SEG  _FP_SEG 

# e I s e 

#define  FP_SEG(ptr)  ( ( u n s i g n ed ) ( ( un s i g n ed  long)(ptr)  >>  16)) 

# e nd i f 

#endi f /*  ! FP_SEG  */ 

#ifndef  FP_0FF 
#ifdef  _FP_0FF 
^define  FP_0FF  _FP_0FF 
#e  I s e 

Sdefine  FP_0FF(ptr)  ( ( uns i gned ) ( pt r ) ) 

#end i f 

#endif  /*  !FP_0FF  */ 

#if  MSC_VER  >=  800 

#define  alloca  _alloca 

#define  stackavail  _stackavail 

# e n d i f 


static  void 

ex i t W i pe 1 ( i n t code,  void  *base) 
{ 


□ 

i n t 

status; 

n 

/* 

Wipe  the  stack  */ 

H 

i f 

( s t a c k0 ) 

n 

a 

memset(base,  0,  (char  * ) ( s t a c k0 ) - ( c h a r *)base); 

# 1 f d e f 

UNIX 

n 

/* 

ACHTUNG!  This  code  might  be  dangerous  */ 

n 

{ 

n 

n 

struct  _heapinfo  info; 

□ 

c 

/*  Wipe  the  heap  */ 
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n 

n 

/*  First  pass  - 

initial  wipe  with  0xff  */ 

n 

D 

_heapset(0xff); 

n 

Q 

info. 

_pent  ry  = 0 

r 

D 

n 

whi  Le 

( _h e a pwa 1 k ( & i n f 0 ) = 

= _HEAP0K)  C 

n 

n 

Q 

if  (info 

._useflag 

==  _USEDENTRY)  { 

n 

n 

n 

D 

mems e t ( i n f 0 . _ p e n t r y , 0xff,  i 

n 

n 

n 

n 

free(info 

._pentry); 

n 

n 

n 

Q 

/*  free() 

mucks  up  _heapwalk 

a 

a 

n 

n 

info._pentry  = 0; 

n 

n 

n 

> 

n 

□ 

> 

n 

Q 

/*  Second  pass  - 

wipe  all 

free  areas  */ 

n 

n 

_heapset(0) ; 

n 

> 

#endif  /*  UNIX  */ 
n exit(code); 

> 

#if  BORLANDC 

ttii BORLANDC  <=  0x0400 

unsigned  _stkLen  = 16384; 

# e L s e 

unsigned  const  _stkLen  = 16384; 
#end i f 
Send i f 


size); 

restart 


*/ 


static  void 
exitWipeCint  code) 

{ 

a e X i t W i p e 1 ( c od e , a L L o ca ( s t a c ka va i L C ) -5 00  ) ) ; 

} 


#e  1 sen 

/* 

!MSD0S  */ 

static 

void 

exituipe1( 

int  code,  void  *base) 

n 

/* 

Wipe  the  stack  */ 

n 

i f 

(stack0) 

D 

□ 

memset(base,  0, 

# i f 0n 

/* 

Disabled  until  stdio 

n 

/* 

Wipe  the  heap  */ 

n 

i f 

(heap0)  { 

n 

n 

base  = sbrk(0); 

D 

n 

memset ( heap0,  0 

n 

} 

Uendi f 

((char  * ) ( s t a c k0 ) - ( c h a r *)base)); 
problems  can  be  resolved  */ 

(char  *)base-(char  *)heap0); 


Sifdef  VMS  /*  On  VMS,  the  bottom  3 bits  are  a severity  */ 
n code  = (1<<28)  | (code  <<  3)  | (1  + (code  !=  0)); 
Sendi f 

n exit(code); 


} 


/* 

* This  recursively  calls  itself  until  it  has  eaten  enough  stack, 

* then  wipes  it. 

* ASSUMPTIONS:  it  assumes  that  the  stack  is  contiguous  and  grows  downwards. 
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* (This  is  reasonably  portable  in  practice, 

* even  though  counterexamples  exist.) 

* If  these  are  violated,  who  knows  what  will  happen! 

*/ 

static  void 
exitWipeCint  code) 

{ 

n char  bufC1024Il; 

n if  (stack0  SS  (char  *)stack0  - buf  < 16384) 

n n ex i t W i p e ( c od e ) ; n / * Recursive  call  to  fill  stack  */ 

a exitWipe1(code,  buf); 

} 

Sendifa  /*  IMSDOS  */ 


void 

ex i t C I e a n u p ( i n t code) 

{ 

a FILE  *rs; 

a char  const  *fn; 

a /*  close  everything  */ 


a ma i n C I o s e Key r i ng s (1,  newversion); 

n 


Q 

i f 

( env0 ) { 

n 

a 

pgpRandPoolKeystroke 

(code);  /*  Maybe  it's  an 

interrupt?  */ 

n 

n 

f n 

= pg pe n vG e t S t r i n g 

(env0,  PGPENV_RANDSEED, 

NULL,  NULL); 

n 

n 

rs 

= fopen  (fn,  "wb") 

r 

n 

n 

i f 

( rs)  { 

□ 

n 

n 

pg p Ra nd S e e d W r i t e (rs,  NULL,  NULL); 

□ 

□ 

B 

fclose  (rs); 

□ 

n 

> 

□ 

B 

pgpenvDestroy  (env0); 

a } 


a fclose(stdin); 

a fclose(stdout); 

a fclose(stderr); 

a exitWipe(code); 

} 


#ifdef  HSDOS 
/* 

* DOS  Error  codes  from  0x13  to  0x27  are  reported  as  critical 

* But  they  are  mapped  to  0..0x14  before  being  passed  in  di. 

* fancy  extensions  (like  networks)  can  create  more. 

* Actually,  0x 
*/ 


static  char  const  * const  doserrsCD  = { 
a "Write  protect  error$", 

a "Unknown  units ", 

a "Drive  not  readyS", 

a "Unknown  commands", 

a "Data  error  (bad  CRC)S", 

a "Bad  request  structure  lengths", 

a "Write  protect  errorS", 


errors. 

Some 
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n 

u 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

□ 

n 

n 

>; 


Seek  errors ", 

Unknown  media  typeS", 

Sector  not  founds ", 

Printer  out  of  paperS", 

Write  faults". 

Read  faults". 

General  failure" 

Sharing  violations". 

Lock  violations". 

Invalid  disk  changeS", 

FCD  unavailableS", 

System  resource  exhaustedS", 

Code  page  mismatchS", 

Out  of  inputs". 

Insufficient  disk  spaceS", 

Unknown  errorS"n  n /*  Catch-all  */ 


static  char  const  * const  readwriteCD  = { 
a "Reading",  "Writing" 

>; 


static  char  const  * const  areaC]  = < 

n "DOS  area",  "file  allocation  table",  "disk  directory",  "file  area 

>; 


#ifndef  80RLANDC 

/* 


* Microsoft  Visual  C somehow  distinguishes  between  "const  void  far  *" 

* (which  works)  and  "void  const  __far  *"  and  "void far  const  *" 

* (which  don't).  I have  no  idea  why.  If  you  move  the  const  after  the  void, 

* trying  to  pass  a "char  const  *"  (or  a "const  char  *")  produces  a warning. 

* Ugh!  (It  also  blows  up  if  the  " far"  comes  before  the  "void".  Huh?) 

*/ 

i nt 

bdosptr(int  code,  const  void  __far  *ptr,  int  subcode) 

{ 


n union  _REGS  regs; 

n struct  _SREGS  segregs; 

n 

n regs . h . ah  = code; 

n regs.h.al  = subcode; 

n regs.x.dx  = _ F P_0 F F ( p t r ) ; 

B segregs. ds  = _ F P_S E G ( p t r ) ; 

B _intdosx(&regs,  Sregs,  Ssegregs); 

B return  regs.x.cflag  ? -1  : regs. x. ax; 

} 

#endif  /*  ! BORLANDC */ 


/* 

* The  registers  are  passed  in  the  following  order. 

* If  ax  bit  15  (ah  bit  7)  is  CLEAR,  it's  a disk  error. 

* ah  bit  0 is  1 if  a write  error;  0 if  a read  error. 

* ah  bits  1 and  2 identify  the  area  of  the  disk  with  the  error: 

* 0 (00)  for  DOS  area 

* 1 (01)  for  FAT 

* 2 (10)  for  disk  directory 
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3 (11)  for  files  area 
al  gives  the  drive  code  (0 


b : , etc.) 


If  ax  bit  15  (ah  bit  7)  is  SET,  it's  a non-disk  error. 

Either  a character  device  error  or  a corrupted  in-memory  FAT. 

In  this  case,  the  rest  of  ax  is  meaningless. 

In  either  case,  the  bottom  half  of  di  gives  the  driver  error  code. 
bp:si  point  to  the  device  driver  header  responsible 

If  a character  device,  examine  the  device  attribute  word  at  bp:si+4. 
If  bit  15  is  set  (character  device),  you  can  use  the  name  field. 
Device  driver  header: 

Offset  Len  Purpose 

0 4 Next  device  link  (-1  if  no  others) 

4 2 Device  flags 

6 2 Strategy  function 

8 2 Interrupt  function 

10  8 Device  name  ( s pa c e- pa d d e d ) 


Flag  bits: 

0 - standard  input  device 

1 - standard  output  device 

2 - Null  devoce 

3 - Clock  devi ce 

4 - Sepcial 

5-10  Reserved,  HBZ 

11  - Device  supports  removable  media 

12  - Reserved,  HBZ 

13  - Non-IBM  format 

14  - lOCTL 

15  - Character  device 


A DOS  CRITICAL  ERROR  HANDLER  MAY  ONLY  USE  DOS  FUNCTIONS  0-12! 
Return  code  is:  0 = _H A R D E RR_ I G N 0 R E , 1 = _H A R D E R R_ R ET R Y , 

2 = _HARDERR_ABORT  (int  23),  3 = _ H A R D E RR_ F A I L (DOS  3+). 

*/ 

void  far 

h a r d E r r Ha n d I e r ( u n s i g n e d di,  unsigned  ax,  unsigned 
{ 

n char  bufC64D; 

a i n t i ; 


far  *devhdr) 


di  8=  0xff; 

sprintf(buf,  "\r\nDos  error  %d:  $",  di); 
bdosptr(9,  buf,  0); 

if  (di  >=  s i z eo f ( do s e r r s ) / s i z eo f ( *do s e r r s ) ) 
n di  = s i zeof ( dos e r r s ) / s i zeof ( *dose r r s ) 

bdosptr(9,  d o s e r r s C d i 3 , 0); 
bdosptr(9,  "\r\n$",  0); 


1; 


if  (ax  8 0x8000)  tn 


/*  Disk  error  */ 


n 

D 

C 

> else 

n 

a 


sprintf(buf,  "%s  %s  of  drive  %c:\r\n$", 
n readwri teCax>>8  8 13,  areaCax>>9  8 33, 

bdosptr(9,  buf,  0); 

r 

if  ( FP_SEG(devhdr)+1  88  F P_0 F F ( d e v h d r ) + 1 
88  (devhdrC23  8 0x8000))  ( 


+ ax  8 255); 


[CCHK:b4645d268f9f63c24fd4b90f7209f195185c19290aafd51e0ee956c2c6a29215133 


2020 


Pretty  Good  Privacy  5.0^^*  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpExit.c 


n 

n 

n 

/*  Character  device  */ 

D 

□ 

n 

i = 8; 

□ 

n 

n 

while  (((char  __far  * ) d e v h d r ) C 1 0 + -- i ] &&  i) 

n 

n 

n 

n 

n 

n 

sprintf(buf,  "Accessing 

device  \"%.*s\"\r\n$". 

n 

n 

n 

i,  ((char  __far 

*)devhdr)+10); 

D 

□ 

n 

bdosptr(9,  buf,  0); 

n 

n 

> else 

{ 

n 

n 

n 

/*  Error  with  in-memory 

FAT  */ 

n 

n 

n 

bdosptr(9,  "Accessing  in 

-memo  ry " \ 

" file  aLLocation  table. \r\n$",  0); 
n n > 

n } 

n _hardresume(_HARDERR_FAIL); 

> 


#endif  /*  HSDOS  */ 


static  int  ex i t S i g p i p e C ou n t = 0; 

static  void 
exitBreak  (int  sig) 

{ 

n int  code  = PG P E X I T_S I GN A L; 


#ifdef  SIGPIPE 
□ 


if  (sig  ==  SIGPIPE  &&  ++e x i t S i g p i pe C o u n t < 5)  { 
n (void)signaL  (sig,  exitBreak); 

n return; 

} 


#e  nd 1 f 

# i f d e f 

SIGINT 

n 

if  (sig 

==  SIGINT)  { 

n 

D 

fputs  ("\nStopped  at  user  request. \n 

n 

a 

code  = PGPEXIT_BREAK; 

Q 

} else 

#endi f 

# i f de  f 

SIGABRT 

□ 

if  (sig 

==  SIGABRT)  { 

n 

a 

fputs  ("\nlnternal  error. \n",  stderr 

n 

n 

code  = PGPEXIT_INTERNAL; 

n 

} else 

#end  1 f 

n 

n 

fprintf  (stderr,  "\nReceived  signal 

n 

> 

exitCleanup  (code); 

/*  The 

signals 

to  trap  */ 

static  int  const 
sigTableCD  = { 
#ifndef  EXPIRY_DATEn 
#ifdef  SIGABRT 
n SIGABRT, 

# e nd i f 
#endi f 

#ifdef  SIGALRM 
n SIGALRM, 

#e nd i f 

#ifdef  SIGBUS 


/*  Do  NOT  trap  on  beta  versions  */ 
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n 

# en d i f 

SIGBUS, 

#i f def 

SIGEMT 

□ 

/tend  i f 

SIGEMT, 

#i f def 

SIGFPE 

n 

//endi  f 

SIGFPE, 

//  i f d e f 

SIGHUP 

□ 

//endi  f 

SIGHUP, 

# i f d e f 

SIGILL 

□ 

#end  i f 

SIGILL, 

//i  f def 

SIGINT 

n 

SIGINT, 

# en d i f 

#if  def i ned(SIGIOT)  &&  SIGIOT  !=  SIGABRT 
n SIGIOT, 


//endi  f 

# i f d e f 

SIGPIPE 

D 

#endi f 

SIGPIPE, 

#i f def 

SIGQUIT 

Q 

//endi  f 

SIGQUIT, 

//  i f d e f 

SIGSEGV 

□ 

//end  i f 

SIGSEGV, 

# i f d e f 

SIGSYS 

□ 

//end  i f 

SIGSYS, 

# i f d e f 

SIGTERM 

n 

//endi  f 

SIGTERM, 

#i f def 

SIGTRAP 

D 

//endi  f 

SIGTRAP, 

//i  f def 

SIGXCPU 

a 

# e nd i f 

SIGXCPU, 

// i f de f 

SIGXFSZ 

n 

//end  i f 

SIGXFSZ, 

n 

>; 

-In  /*  Terminate  List  */ 

void 

exitSetup  (struct  PgpEnv  *env,  void  *stacktop,  void  *heaptop,  int  prog. 


n 

{ 

int  newve  rs ) 

n 

int  i ; 

n 

n 

n 

n 

for  (i  = 0;  sigTabLeCiD  >=  0;  i++)  { 

n if  (signal  ( s i g T a b L e C i T , SIG_IGN)  !=  SIG_IGN) 

n n (void)signaL  (sigTabLeCiD,  exitBreak); 

> 
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n program_name  = prog; 

n env0  = env; 

n stackO  = stacktop; 

n newversion  = newvers; 

de f i ned ( U N I X ) | | d e f i n e d ( __B0 R LAN D C ) 

n heap0  = heaptop; 

#endi f 

#ifdef  HSDOS 

n _ha  rd e r r ( h a r d E r r Ha nd  L e r ) ; 

# e nd 1 f 

> 
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/* 

* pgpExit.h  --  Header  file  for  Exit  routines 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpExit.h, V 1.2. 2. 2 1997/06/07  09:49:04  mhw  Exp  $ 

*/ 


#ifndef  attribute 
#if  GNUC 

#define  attribute(x)  __a t t r i b u t e__ ( x ) 
#e  L se 

#define  attributeCx)  /*nothing*/ 

#endi  f 
#e nd i f 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 


struct  PgpEnv; 

void  exitCLeanup  (int  code); 

void  exitSetup  (struct  PgpEnv  *env,  void  *stacktop,  void  *heaptop,  int  prog, 

n n intnewver); 

void  exitExpiryCheck  (struct  PgpEnv  *env); 

void  exitArgError  (char  const  *fmt,  ...); 

void  exitUsage  (int  code); 

#ifdef  __cpluspLus 
} 

#endi  f 


/ * These 

are  de f 

i n e d to 

b e 

#def i ne 

PGPEXIT_ 

OKn 

D 

#def i ne 

PGPEXIT_ 

ARGSn 

a 

//define 

PGPEXIT_ 

VERSIONnn 

//define 

PGPEXIT_ 

BREAKn 

□ 

//define 

PGPEXIT_ 

SIGNALn 

n 

#def i ne 

PGPEXIT_ 

NOHEHn 

n 

//d e f i n e 

PGPEXIT_ 

INTERNALn 

//define 

EXIT_PROG_PGPEn 

1 

#def i ne 

EXIT_PR0G_PGPS 

2 

//d e f i n e 

EXIT_PR0G_PGPV 

4 

//define 

EXIT_PR0G_PGP0 

8 

#def i ne 

EXIT_PROG_PGPKn 

1 6 

equivalent  to  Colin's  original 
0 
7 
9 

1 5 
16 
1 7 
18 


code  */ 
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/* 

* p g p 1 n n t App  . c initialize  a PGP  application. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc. 

* 

* Written  By : n Derek  Atkins  <wa r I o r d 3M I T . E DU> 

* 

* Added  support  for  creation  of  "/.pgp  if  it  doesn't  exist  - BAT 

* 

* $Id:  pg p I n i t Ap p . c , V 1.6. 2. 4 1 997/06/07  09:49:05  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# end i f 

#include  <stdio.h> 
#include  <string.h> 

#ifdef  HAVE_STDLIB_H 
^include  <stdlib.h> 

# e nd i f 

#ifdef  HAVE  UNISTD  H 


^include 

<unistd.h>n  n 

#end  i f 

//include 

"pgpDebug.h" 

//include 

"pgpMem. h" 

Mine lude 

"pgpLeaks.h" 

//include 

"pgpConf . h" 

//i  nc  lude 

" pgpEn V . h " 

//include 

"pgpErr.h" 

//include 

"pgpFi  leNatnes.h" 

//include 

"pgpRndSeed.h" 

//include 

"pgpUserlO. h" 

//include 

"pgpExit.h" 

//include 

"pgpAppFi le.h" 

//include 

"pgpini tApp. h" 

//ifdef  UNIX 

#i nc lude 

"pgpPrefUnix.h" 

//end  i f 

i n t 

pgpInitApp  (struct  PgpEnv 

n 

struct  PgpUICb 

n 

int  newvers) 

{ 

n 

struct  PgpEnv  *env 

n 

void  *heaptop; 

□ 

FILE  *rs,  *sc; 

/*  for  sbrkC)  */ 


n char  *fn,  *confdir,  *upath  = NULL; 

n char  const  *pc,  *pgppath; 

#if  def i ned(UNIX)  ||  definedC BORLANDC ) 

n /*  Find  the  top  of  the  heap  */ 

n heaptop  = (void  *)  sbrk(0); 
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#e  L se 

n 

heaptop  = NULL; 

#endi  f 

n 

pgpAssert  (envp); 

n 

env  = *envp  = pgpenvCreate  (); 

a 

if  ( ! env ) 

n 

n exitCLeanup  (PGPEXIT_N0MEM); 

□ 

/*  setup  the  exit  routines  */ 

c 

exitSetup  (env,  stacktop,  heaptop,  exit_prog,  newvers); 

n 

/*  Default  verbosity  Level  */ 

n 

pgpenvSetIntCenv,  PGPENV_VERBOSE,  1,  PGPENV_PRI_PRIVDE FAULT); 

□ 

/*  Try  to  find  the  PGPPATH  */ 

D 

if  ((pc  = getenv  ("PGPPATH"))  !=  NULL) 

□ 

n pgpen vSe t S t r i ng  (env,  PG PE N V_ PG PP AT H , pc. 

B 

n n n PG P E N V_ P R I _PUB D E F AU LT  ) ; 

f def 

UNIX 

B 

else  if  ((pc  = getenv  ("HOME"))  !=  NULL)  { 

B 

fn  = fileNameBuild  (pc,  ".pgp",  NULL); 

B 

CheckAndCreatePGPDi r(fn); 

B 

pg  pe  n V S e t S t r i ng  (env,  PG  P E N\/_  PG  PP  AT  H , fn. 

B 

n n PGPENV_PRI_PUBDEFAULT); 

B 

pgpMemFree  (fn); 

B 

> 

#endi f 

B 

pgppath  = pg pe n vG e t S t r i n g (env,  PG P E NV_ PG PP AT H , NULL,  NULL); 

B 

/*  Ok,  PGPPATH  is  a PATH  of  directories.  Find  the  first  one..  */ 

B 

confdir  = f i L e Na meN ex t D i r e c t o r y (pgppath,  NULL); 

B 

pgpAssert  (confdir); 

B 

fn  = fileNameBuild  (confdir,  " pubring. pkr",  NULL); 

B 

pgpenvSetString  (env,  PG P E N V_PUBR I N G , fn,  PG PE N V_ PR  I _PR I V D E F A U LT ) ; 

B 

pgpMemFree  (fn); 

B 

fn  = fileNameBuild  (confdir,  " secring. skr",  NULL); 

B 

pgpenvSetString  (env,  PGPENV_SECRING,  fn,  PGPENV_PRI_PRIVDE FAULT ); 

B 

pgpMemFree  (fn); 

B 

fn  = fileNameBuild  (confdir,  "randseed.bin",  NULL); 

B 

pgpenvSetString  (env,  PGPENV_RANDSEED,  fn,  PGPENV_PRI_PRIVDE FAULT ); 

B 

/*  Read  in  the  randseed  file  */ 

B 

rs  = fopen  (fn,  "rb"); 

B 

if  ( r s ) { 

B 

n pg p Ra nd S ee d Rea d (rs,  NULL); 

B 

n fclose  (rs); 

B 

} else 

B 

n fprintf  (stderr,  "No  randseed  file  found. \n"); 

B 

pgpMemFree  (fn); 

B 

B 

pgpenvSetString  (env,  PGPEN\/_TMP, 

#i f def 

VMS 

B 

n a getenv  ( " S Y S $ S C R AT C H " ) , 
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#e  L s e 

n n n getenv("TMP"), 

#end-i  f 

n n n PG P E NV_ PR  I _ PUB  DEFAULT); 


n upath  = getenv  ("PGPUPATH"); 

#ifdef  PGPSYSDIR 


n 

□ 

n 

Q 

n 

□ 

n 

Q 

Q 

D 

# end i f 
n 
n 
□ 
n 
□ 
n 
n 
a 
□ 
n 

Q 

n 


/*  Read  the  system  config  file  */ 

fn  = fileNameBuild  (PGPSYSDIR,  "config.txt",  NULL); 

/*  No  error  if  doesn't  exist  */ 
sc  = fopen  (fn,  "r"); 
if  (sc)  { 

n fcLose(sc); 

n pg p C on f i g F i L e P r o c e s s (ui,  ui_arg,  env,  fn,  PG PE N V_PR I _ S Y S C 0 N F ) ; 

> 

pgpMemF  ree  ( f n ) ; 

upath  = f i I eNameEx t end  Pa t h (upath,  PGPSYSDIR,  0); 

/* 

* If  PGPSYSDIR  is  defined  in  the  environment,  read  config.txt 

* from  that  directory. 

*/ 

pc  = getenv  ("PGPSYSDIR"); 
if  (pc)  { 

n fn  = fileNameBuild  (pc,  "config.txt",  NULL); 

n pg p C on f i g F i I e P r o c e s s (ui,  ui_arg,  env,  fn, 

n n n PG P E N V_P R I _ S Y S CON F + 1 ) ; 

n pgpHemFree  (fn); 

n upath  = f i I e Na me E X t e nd Pa t h (upath,  pc,  0); 

} 


n /*  Now  set  the  Untrusted  Path  in  the  environment  */ 

a pgpenvSetString  (env,  PGPENV_UPATH,  upath,  PGPENV_PRI_PUBDE FAULT); 


/*  Read  the  user's  config  file  */ 

fn  = fileNameBuild  (confdir,  "config.txt",  NULL); 

pgpCon f i g F i I e P r o c e s s (ui,  ui_arg,  env,  fn,  PG P EN V_ P R I _C ON F I G ) ; 

pgpMemFree  (fn); 


n pgpMemFree  (confdir); 

n return0; 

} 


#ifdef  MACINTOSH 


i nt 

ma i n ( ) 

{ 

n static  char  bufC256D; 

n static  char  *argvC32D; 

n intargc=0; 

n int  result; 

n char*p; 

□ 

#if  DEBUG 

n pgpLeaksBeginSession("main"); 

#if  MACINTOSH 

n atexit(pgpLeaksEndSession); 
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#end i f 
#end i f 
□ 

□ 

n 

Q 

Q 

n 

□ 

a 

n 

a 

a 

n 

> 


fputsC" Command  ->  ",  stdout); 
pg pT t y G e t S t r i n g ( b u f , sizeof(buf),  NULL); 
a r g c = 0 ; 
p = bu  f ; 

while  Cargo  < sizeofCargv)  / s i z e o f ( a rg v C 0 D ) 
&&  CargvCargc!]  = strtokCp,  " ")))  { 
a P = 0; 

n a rgc  + + ; 

} 

result  = appMainCargc,  argv); 

exitCleanupCresult); 

return  result; 


# e I s e 


i n t 

mainCint  argc,  char  *argvC!]) 

{ 

n int  result; 

D 

#if  DEBUG 

n pgpLeaksBeginSessionC'main"); 

#if  MACINTOSH 

n atexit(pgpLeaksEndSession); 

# e nd i f 
#endi  f 

n result  = a p pHa i n ( a r g c , argv); 

n exitCleanupCresult); 

n return  result; 

} 


# e n d i f 
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/* 

* pgpInitApp.h  --  InitaLize  a PGP  Application  from  config  files,  etc. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* Written  By:n  Derek  Atkins  < wa  r I o r dSH  I T . E D ll> 

* 

* $Id:  pg p I n i t Ap p . h , V 1.3. 2.1  1 997/06/07  09:49:05  mhw  Exp  $ 

*/ 

#ifndef  PGPINITAPP.H 
#define  PGPINITAPP.H 

#ifdef  cplusplus 

extern  "C"  f 
# e nd i f 

struct  PgpEnv; 
struct  PgpUICb; 

/* 

* envp  must  be  a valid  pointer, 

* stacktop  should  be  the  top  of  the  stack  (&argc) 

* ui  and  ui.arg  should  be  filled  in. 

* 

* This  function  must  be  called  before  any  allocations  take  place. 

* so,  it  should  probably  be  the  first  (or  close  to  the  first)  thing 

* that  takes  place. 

*/ 

int  pgpInitApp  (struct  PgpEnv  **envp,  void  *stacktop, 

n n struct  PgpUICb  const  *ui,  void  *ui.arg,  int  exit.prog, 

n n intnewver); 

/* 

* This  routine  must  be  defined  for  each  application.  It  works  just  like 

* main.  pgpInitApp. c contains  the  real  main(),  which  calls  appMain(). 

* This  is  because  on  the  Macintosh,  main  gets  called  without  parameters, 

* so  we  need  to  read  the  arguments  from  the  command  line  from  within  main(). 
*/ 

int  appHain  (int  argc,  char  *argvC]); 

#ifdef  cplusplus 

> 

#e  nd i f 

#endif  /*  PGPINITAPP.H  */ 
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/* 

* pgpKeyRings.c  --  opens  aLL  the  known  keyrings 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  By:n  Derek  Atkins  < wa r L o r da M I T . E D U> 

•k 

* $Id:  pg pKey R i n g s . c , V 1.5. 2. 2 1997/06/07  09:49:05  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e n d i f 

#incLude  <stdio.h> 

#ifdef  HAVE_UNISTD_H 

#incLude  <unistd.h>n  n /*  For  unLink  */ 

#end i f 


#ifdef  HAVE_FCNTL_H 
#incLude  <fcntL.h>n  n 

# e nd i f 


#incLude 
#incLude 
#i nc  Lude 
#incLude 
^incLude 
#incLude 
#incLude 


pgpDebug  . h" 
pgpMem. h" 
pgpErr.h" 
pgpEnv. h" 
pgpFi Le.h" 
pgpRngPub. h" 
pgpRngRead.h 


#incLude  " pg p A p p F i L e . h " 
#incLude  " pg pKey R i n g s . h 


/*  For  0_CREAT,  0_EXCL  */ 


/*  Maintain  Linked  List  of  open  keyrings  and  keyfiLes  so  they  can  be 
rewritten  if  required.  */ 


static  struct  OpenFi 
struct  OpenFi Le 
struct  PgpFi Le 
struct  RingFiLe 
struct  RingSet 
i n t 
i n t 
char 

} openfiLes  = {NULL, 


Le  { 

*n e X t ; 

*pf  p; 

*ringfi Le; 

*newset ; 
trusted; 
f L a g s ; 

fiLenameCID; 

NULL,  NULL,  0,  0}; 


/* 

* Create  a temp  key  fiLe  which  is  not  used  by  anyone  eLse. 

* Return  a stream  pointer  to  the  fiLe,  and  set  the  fiLe  name  in 

* *pnfiLe.  Base  the  fiLe  name  on  the  given  fiLe. 

* The  returned  fiLe  name  needs  to  be  free'd  with  pgpMemFree,  and  of 

* course  the  returned  fiLe  handLe  needs  to  be  cLosed  with  fcLose. 

* The  i mp L erne n t a t i on  of  this  tends  to  be  OS  (and  possibLy  fiLe  system) 

* dependent. 

*/ 

static  FILE  * 
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tmpkeyfiLe  (char  const  *fiLe,  char  **pnfiLe,  char  const  *mode) 
{ 

n char  *tmp  = f i I e Na me C on t r a c t ( f i L e ) ; 

n char  *nfiLe  = f i I eName Ex t e nd ( t mp , ".pg0"); 

n char  *nfiLep  = nfile  + strLenCfiLe)  - 1; 

FILE  *stdFUe; 
i nt  f d; 


pgpAssert  (file  S&  pnfiLe  &&  mode); 
pgpMemFree(tmp); 


n 

for  ( 

; ; ) 

{ 

#if 

n 

MACINTOSH 

B 

i f 

((stdFile  = fopen(nf 

B 

B 

B 

break; 

# e L s e 

B B 

i f 

((fd  = open(nfile,  0 

B 

B 

B 

break; 

#end 

B 

i f 

B 

i f 

((*nfilep)++  > 'z') 

B 

B 

B 

return  NULL; 

B 

> 

defi ned(_ 

WIN32) 

1 1 def ined(MSDOS) 

.setmode  (fd,  _0_BINARY); 


n 

#e  n d i f 

n *pnf iLe  = nfile; 

#if  IMACINTOSH 

n stdFile  = fdopen  (fd,  mode); 

#endi f 

n return  stdFile; 

> 


/* 

* This  writes  out  a RingSet  which  is  a replacement  for  a RingFile 

* which  is  open.  We  do  it  carefully  since  on  some  OS's  we  can't 

* rename  open  files.  This  closes  the  RingFile  and  the  RingSet 

* in  the  process,  so  the  RingSet  must  be  one  for 

* which  this  is  legal  (not  from  ringFileSet  for  example). 

* Renames  existing  file. ext  to  file.bak. 

*/ 

static  i nt 

ma i n W r i t eou t S e t (char  const  *file,  int  flags,  struct  RingSet  *set. 


struct  RingFile  *oldrfile,  PgpVersion  version, 
struct  PgpFile  *pfp) 


struct  PgpFile  *pfp2; 
char  *tmp,  *tmp2,  *bak; 
FILE  *fp2; 
int  error  = 0; 


tmp  = f i I e N ame C on t r a c t (file); 

bak  = f i I e Na me  Ex t e nd  (tmp,  ".bak"); 

pgpMemFree(tmp); 

fp2  = tmpkeyfile  (file,  Stmp2,  "wb"); 
if  ( ! fp2)  { 

n pgpMemFree(bak); 

n return  PG PE R R_N 0_ F I L E ; 

} 

/*  Write  out  new  data  to  tmp2  file  */ 
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n 

n 

Q 

Q 

□ 

n 

n 

□ 

Q 

□ 

a 

□ 

□ 

n 

□ 

/*n 

□ 

n 

a 

□ 

a 

n 

a 

n 

D 

n 

n 

□ 

n 

□ 

n 

> 


pfp2  = pg p F i L e W r i t e 0 pe n (fp2,  NULL); 
error  = ringSetWrite  (set,  pfp2,  NULL, 
n n version,  flags); 

pg p F i L eC L o s e C pf p2 ) ; H /*  closes  fp2  */ 

ringSetDestroy(set); 
if  (error)  { 
n unlink  (tmp2); 

n p g pH e m F r e e ( t mp 2 ) ; 

n pgpHemFree(bak); 

n return  error; 

} 

if  ( r i n g F i I e C I o s e (oldrfile)  !=  0)  ( 

n /*  Have  a problem  here,  it  should  have  closed  */ 

B /*  Probably  due  to  a pesky  RingSet  leak!  */ 

B /*  Actually  happens  a lot  with  pgp3,  it  doesn't  care  */ 

B fprintf  (stderr,  "Warning:  %s  didn't  close!\n",  file);  */ 

} 

/*  Close  the  PgpFile  regardless  */ 
if  ( p f p ) 

B pgpFileClose  (pfp); 

/*  Now  rename  the  files  */ 
unlink  (bak); 
rename  (file,  bak); 
unlink  (file); 

if  (rename  (tmp2,  file)  < 0)  { 

B fprintf  (stderr,  "Failed  to  rename  %s  to  Zs\n",  tmp2,  file); 

B perror  ("rename"); 

} 

pgpHemFree  (tmp2); 
pgpMemFree  (bak); 
return  0; 


static  int 

u pd a t e R i ng f i I e (struct  OpenFile  *openfile,  int  update,  int  force. 


n 

B int  newvers) 

int  error; 

Q 

int  r c ; 

n 

PgpVersion  version  = 

PGPVERSI0N_3; 

n 

/*  If  caller  has  not 

asked 

for  the 

rings 

to  be 

written  out 

n 

a new  version,  get 

the 

original 

version  of 

the  ringfile 

n 

Otherwise,  we  writeout 

in  PGP  3 

format 

with 

add i t i ona 1 

B trust  bytes  (if  PG PT RU S THO D E L>0 ) */ 


if  (Inewvers  &S  op e n f i I e-> r i ng f i I e ) 

version  = r i n g F i I e Ve r s i o n ( o pe n f i I e-> r i ng f i I e ) ; 


if  ( o pe n f i L e-> n e w s e t ) f 


/*  Have  a replacement  for  the  RingFile  */ 
error  = ma i n W r i t eou t S e t ( ope n f i I e-> f i I e na me , 

B o p e n f i I e->f  I a g s , openf i I e->newset , 

B o p e n f i I e-> r i ng f i I e , version, 

B openf i le->pf p)  ; 

return  error; 


i:[CHK:58738903c88c08046c1312aba3b6863ffa3e86bdd47b22688c9bc71622cd6fafi:: 


2032 


Pretty  Good  Privacy  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpKeyRings.c 


n 

Q 

n 

□ 

n 

Q 

n 

n 

n 

n 

n 


/* 

* Here  we  are  just  closing  the  same  as  the  ringFile  we 

* opened.  See  if  it  needs  to  be  written. 

*/ 

if  (update  SS  openfi Le->t rusted  SB 

( r i n g F i L e I s D i r t y ( o p e n f i L e-> r i ng f i L e ) || 

r i ng F i I e I sT r us t C ha ng ed  ( ope n f i I e-> r i n g f i L e ) ) ) { 
return  ma i n W r i t e ou t S e t ( ope n f i L e-> f i L e na me , 
n n openfi Le->f Lags, 

n ringSetCopy  CringFileSet  ( o pe n f i L e-> r i ng f i L e ) ) , 

n n op e n f i L e-> r i ng f i L e , version,  ope n f i L e ->pf p ) ; 

} 


/*  Close  if  we  can,  or  if  the  force  flag  is  set.  If  file  cannot 

be  closed  (because  it  is  the  Last  'home'  of  one  or  more  objects), 
mark  it  as  pending  by  setting  the  filename  to  zero  Length,  and 
setting  the  trust  flag  to  untrusted.  This  will  ensure  no  attempt 
will  be  made  to  rewrite  it  Later.  */ 


n 

n 

a 

/* 

n 

□ 

* 

a 

n 

a 

n 

c 

n 

□ 

n 

> 


if  ((rc  = r i ng F i L e C L o s e ( o p e n f i L e-> r i ng f i L e ) ) ==  0) 
pgpFileCLose  ( op e n f i L e->p f p ) ; 

else  { 


n fprintf  (stderr,  "Error,  file  %s  did  not  cLose!\n", 

n n ope n f i L e-> f i L e na me  ) ; 


□ 

□ 

n 

Q 

□ 

n 

} 


if  (force)  ( 

pgpFileClose  (openfi le->pfp); 

> else  { 

ope n f i I e->f i L ename C 0 D = '\0'; 
a ope n f i L e-> t r u s t ed  = 0; 

> 


return  rc; 


i n t 

ma  i nRi ngNewSet  (char  const  *fiLename,  int  flags,  struct  RingSet  *set) 
{ 

struct  OpenFile  *openfiLe; 


n 

□ 

D 

D 

n 

n 

D 

n 

a 

D 

Q 

n 

n 

n 

D 

Q 

n 


openfile  = openfi Les . next; 
while  (openfile  !=  NULL  SB 

strcmp  (openfi Le->fiLename,  filename)  !=  0)  ( 
n openfile  = openf i L e->next ; 

} 

if  (lopenfile)  ( 

n openfile  = (struct  OpenFile  * ) pg pMem A I L o c ( 

n n n sizeof  (struct  OpenFile)  + strlen  (filename)); 

n i f ( ! openf i L e ) 

n n return  PGPERR_NOnEM; 

n strcpy  ( ope n f i L e-> f i L e na me , filename); 

n op e n f i L e-> r i ng f i L e = NULL; 

n op e n f i L e->p f p = NULL; 

n op e n f i L e-> t r u s t e d = 0; 

n op e n f i L e->ne w s e t = NULL; 

n openfi Le-> next  = openfiles.next; 

n openfiles.next  = openfile; 
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n > 

n if  ( op e n f i L e-> n e u s e t ) { 

n n r i n g S e t D e s t roy C o p e n f i L e-> n e w s e t ) ; 

n > 

n o p e n f i L e->n e w s e t = set; 

n o p e n f i L e -> f L a g s = flags; 

n return0; 

> 


/*  Close  all  ringfiles  on  the  linked  list,  updating  them  if  requested 
and  required.  */ 

voi  d 


ma  i 

f 

nC  loseKeyri ngs  (int  update. 

int  newvers) 

\ 

struct 

OpenFile  *openfile; 

n 

int  error; 

n 

Openf 1 

le  = openfiles.next; 

n 

while 

(openfile)  { 

n 

error  = u pda t e R i n g f i 1 e (openfile,  update,  1,  neuvers); 

n 

n 

if  (error  < 0) 

{ 

n 

□ 

n if  (error  ==-1){ 

n 

n 

□ n 

/* 

n 

n 

tt  n 

* This  is  the  unable  to  close  keyring  error. 

n 

n 

□ n 

* which  is  all  too  common  and  so  we  won't 

n 

□ 

a n 

* print  anything. 

n 

n 

□ Q 

*/ 

n 

n 

n > e 1 se 

{ 

n 

Q 

n n 

fprintf  (stderr. 

n 

n 

Q □ 

n "ERROR:  %s\n",  pgperrString  (error)) 

□ 

□ 

n > 

n 

n 

> 

n 

n 

openfi Les.next 

= openf i 1 e->next  ; 

Q 

n 

pgpHemFree  (openfile); 

s 

□ 

openfile  = openfiles.next; 

n 

> 

> 

n 

n 

n D 

s n n 

n 

Q 

n 

struct  RingSet 

★ 

mainOpenRingfi 

Le  (struct  PgpEnv 

const  *env,  struct  RingPooL  *ringpooL, 

n 

n 

char  const  *filename,  char  const  *ringtype,  int  trusted) 

n 

Struct 

PgpFile  *pfp; 

n 

struct 

RingFile  *ring; 

n 

FILE  *fp; 

n 

struct 

OpenFile  *openfi 

le; 

n 

int  error  = 0; 

int  verbose  = pgpenvGetInt  (env,  PG P E NV_ V E RBO S E , NULL,  NULL); 

/*  Check  if  file  already  open  */ 

for  (openfile  = ope n f i I e s . n ex t ; openfile;  openfile  = ope n f i I e->n ex t ) { 
if  Cstrcmp  (filename,  openf i I e->f i I ename ) ==  0) 
n return  (ringSetCopy  (ringFileSet  (openfile ->ringfile))); 
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n 

> 

u 

■f  p 

= fopen  (fil  ename 

n 

pfp 

= pgpFileReadOpe 

n 

i f 

(pfp)  { 

Q 

n 

if  (verbose 

n 

n 

n f p r i 

n 

n 

Q n 

Q 

□ 

ring  = ringF 

n 

n 

if  (error  &8 

n 

a 

n f p r i 

u 

n 

□ D 

n 

n 

if  (ring)  { 

' r b " ) ; 


/*  chain  errors  */ 


> else  if 

a ip 

n □ 

> 


> PGPERR_VERB0SE_1 ) 

itf  (stderr,  "Reading  %s  keyring  \"%s\"\n", 
ringtype,  filename); 

ileOpen  (ringpooL,  pfp,  trusted,  Serror); 
verbose  > PG P E R R_V E RBO S E_0 ) 

itf  (stderr,  "Error  on  keyring  \"%s\":  %s\n", 
filename,  pgperrString  (error)); 

if  (!(openfile  = (struct  OpenFile  * ) p g pMem A I I o c ( 

sizeof  (struct  OpenFile)  + strlen  (filename)))) 
return  NULL; 

op e n f i I e -> r i ng f i I e = ring; 
openf i I e->pf p = pfp; 
openfile-> trusted  = trusted; 
open f i I e-> f I a g s = 0; 
openfile->newset  = NULL; 

if  (strcmp  (ringtype,  "public")  ==  0 &&  trusted) 
openf i le->f lags  = PG P_W R I T ET R U ST_PU B ; 
strcpy  ( ope n f i I e-> f i I ena me , filename); 
openf i I e->next  = openf i I es . next ; 
ope n f i I e s . nex t = openfile; 
return  ringSetCopy  (ringFileSet  (ring)); 

(verbose  > PG P E R R_ V E RBOS E_0 ) { 

rintf  (stderr,  "Cannot  open  %s  keyring  \"%s\"\n", 
ringtype,  filename); 


return  NULL; 


/* 

* Open  up  the  keyrings,  as  given  by  the  environment,  and  then 

* set  the  UI  Argument  to  the  new  ringpool. 

*/ 

i nt 

ma i nO pe n Key r i n g s (struct  PgpEnv  const  *env,  struct  RingPool  *ringpool, 

D 
{ 
n 
□ 

D 


n int  t rusted_on  ly,  struct  RingSet  **ringsetp) 

struct  RingSet  *ringset  = NULL,  *tempset  = NULL; 
char  const  *filename,  *path,  *temppath; 
char  *dir,  *fn; 


if  ( ! r i ngpoo I 
return  -1; 


! ringsetp) 


/*  Open  Secret  Keyring  */ 

filename  = pg pen vGe t S t r i n g (env,  PG PE N V_ S E C R I NG , NULL,  NULL); 
if  (filename  &&  *filename) 

n ringset  = ma i nO pe n R i n g f i I e (env,  ringpool,  filename, 

□ one 


"secret",  0); 

n /*  Open  Public  Keyring  */ 
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n 

filename  = 

pg p e n vG e t S t r i n g (env,  PG P E N V_ PU B R I N G , NULL,  NULL); 

n 

i f 

(filename  88 

*f i 1 ename ) 

n 

Q 

tempset 

= ma i nOp e n R i n g f i 1 e (env,  ringpool,  filename. 

D 

Q 

n 

n n "public", 1); 

□ 

1 f 

(tempset)  { 

la 

n 

i f 

(ringset)  { 

n 

n 

n 

struct  RingSet  *tset; 

□ 

Q 

n 

tset  = ringSetUnion  (ringset,  tempset); 

tt 

□ 

n 

ringSetDestroy(tempset); 

n 

n 

Q 

ri ngSetOest  roy( ri ngset ) ; 

n 

n 

n 

ringset  = tset; 

n 

n 

> 

else 

n 

n 

n 

ringset  = tempset; 

n /*  Now,  open  all  the  keyrings  in  my  PGPPATH  and  PGPUPATH  */ 

a path  = p g p en vG e t S t r i ng  Cenv,  PG P E N V_ PG PP AT H , NULL,  NULL); 

n pgpAssert  (path); 


while  CCdir  = f i L e N a me N e x t D i r e c t o ry  (path,  Stemppath))  !=  NULL)  { 


n 

□ 

tempset  = NULL; 

n/*  Don't  re-open  the  same  pubring  */ 

n 

n 

f n 

= fileNameBuild  (dir,  " p u b r i ng . p k r " , NULL); 

n 

□ 

i f 

(strcmp  (fn. 

filename)  !=  0)  { 

n 

□ 

B 

FILE  *fp  = fopen  (fn,  "rb"); 

n 

n 

B 

if  (fp) 

{ 

Q 

n 

B 

B 

fclose(fp); 

n 

n 

B 

B 

tempset  = mai nOpenRi ngf i le  (env,  ringpool 

n 

n 

B 

B 

a n n "public",!); 

Q 

n 

B 

> 

n 

B 

> 

n 

B 

pgpMemFree  (fn) 

n 

B 

i f 

(tempset)  { 

a 

B 

B 

if  (ringset)  { 

n 

B 

B 

B 

struct  RingSet  *tset; 

n 

B 

B 

B 

tset  = ringSetUnion  (ringset,  tempset); 

a 

B 

B 

B 

ringSetDestroy(tempset); 

a 

B 

B 

B 

ringSetDestroy(ringset); 

n 

B 

B 

B 

ringset  = tset; 

n 

B 

B 

> else 

n 

B 

B 

B 

ringset  = tempset; 

Q 

B 

> 

Q 

B 

path  = temppath 

□ 

B 

i f 

( ! pa  t h ) 

break; 


path  = pg p en vGe t S t r i n g (env,  PG P E N V_U P AT H , NULL,  NULL); 
if  (path  S8  ! t r u s t ed_o n L y ) 


while  ((dir  = f i I e Na meNe x t D i r e c t o r y (path,  Stemppath))  != 

NULL)  { 

n FILE*fp; 

n tempset  = NULL; 

n fn  = fileNameBuild  (dir,  "pubring. pkr",  NULL); 

n fp  = fopen  (fn,  "rb"); 

n if(fp){ 

n n fclose(fp); 

n n tempset  = ma i n Ope n R i n g f i I e (env,  ringpool,  fn, 

n n n n "untrustedpublic",0); 
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n 

n 

□ 

> 

n 

n 

□ 

pgpMemFree  (fn) 

f 

n 

n 

n 

if  (tempset)  ( 

Q 

n 

□ 

a 

if  (ringset)  < 

Q 

o 

n 

n 

n 

struct  RingSet  *tset; 

n 

□ 

□ 

u 

u 

tset  = ringSetUnion  (rii 

n 

n 

n 

n 

a 

ringSetDestroy(tempset) 

n 

n 

Q 

n 

n 

ringSetDestroy(ringset) 

n 

n 

D 

n 

n 

ringset  = tset; 

n 

Q 

n 

o 

> else 

D 

□ 

n 

n 

n 

ringset  = tempset; 

n 

n 

n 

> 

n 

n 

Q 

path 

= temppath 

n 

n 

o 

if  ( ! 

! pa  t h ) 

n 

n 

o 

□ 

break; 

Q 

n 

> 

n 

a 

*ringsetp  = 

ringset; 

Q 

return 

0; 

> 


tempset); 
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/* 

* pgpKeyRings.h  --  Interface  to  open  all  the  known  keyrings. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  By:n  Derek  Atkins  < wa r L o r d BH I T . E D U> 

★ 

* $Id:  pg pKey R i ng s . h , V 1.3. 2.1  1 997/06/07  09:49:05  mhw  Exp  $ 

*/ 


#ifndef  PGPKEYRINGS.H 
#define  PGPKEYRINGS.H 


#ifdef cpLuspLus 

extern  "C"  f 
#endi f 

struct  RingPooL; 
struct  RingSet; 

void 

mainCLoseKeyrings  (int  update,  int  newversion); 


struct  RingSet  * 

ma  i nOpe n R i ng f i L e (struct  PgpEnv  const  *env,  struct  RingPooL  *ringpooL, 
n n char  const  *fiLename,  char  const  *ringtype,  int  trusted); 


i nt 

ma i nO p e n Key r i ng s (struct  PgpEnv  const  *env,  struct  RingPooL  *ringpooL, 
n n int  trusted. onLy,  struct  RingSet  **ringsetp); 


int 

mainRingNewSet  (char  const  *fiLename,  int  fLags,  struct  RingSet  *set); 

#ifdef cpLuspLus 

} 

#endi  f 


#endif  /*  PGPKEYRINGS.H  */ 
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/* 

* pgpOpt.c  — a different  sort  of  getoptC) 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Written  by:n  Colin  Plumb  and  Derek  Atkins  <warlord0MIT.EDll> 

* 

* Added  support  for  creation  of  “/.pgp  if  it  doesn't  exist  - BAT 

* 

* $Id:  pgpOpt.c, V 1.2. 2. 2 1997/06/07  09:49:06  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
#include  "config.h" 

# e nd i f 

^include  <stdio.h> 


^include  "pgpOpt.h 


void 

pgpOptStart  (struct  Pg pOp t C o n t e x t *opt,  int  argc,  char  **argv) 


n opt->opta  rg  = 0; 

n opt->optargv  = argv; 

n opt->optargc  = argc; 

n opt -> state  =0; 

} 


/* 

* Returns  the  option  character  of  the  next  option,  or  0 if  there 

* is  none,  or  EOF  on  the  end  of  the  command  line. 

* opt->optarg  is  the  flag's  argument  (this  may  be  NULL  at  the 

* end  of  the  command  line).  To  "claim"  it,  assign  zero  to  the 

* field  in  the  OptContext  structure. 

* 

* If  0 is  returned,  you  do  not  need  to  explicitly  claim  the  optarg 

* pointer;  that  is  assumed.  (Although  it's  harmless  to  do  so.) 

* 

* is  not  returned;  it  turns  off  option  recognition  from  there  forward. 

* (opt->state  is  set  to  -2) 

*/ 

int 

pgpOptNext  (struct  PgpOptContext  *opt) 

{ 

n char  c; 


n 

a 

□ 

n 

n 

n 

□ 

□ 

□ 

n 

n 


/* 

* if  state  < 0 or  the  argument  was  claimed,  get  a new  one 
*/ 

if  (opt->state  < 0 | 1 !opt->optarg  | | 

(opt->state  > 0 &8  ! *op t ->op t a r g ) ) { 
a if  ( — opt->optargc  <=  0) 

n n returnEOF; 

n opt->optarg  = *++op t ->op t a r g v ; 

n if  (opt->state  ==  -2) 

n n return0; 

n opt->state  = 0; 
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n 

n 

Q 

n 

n 

n 

□ 

n 

n 

n 

n 

Q 

n 

□ 

□ 

a 

□ 

n 

n 

n 

□ 

n 

□ 

n 

n 

o 

n 

n 

n 

□ 

n 

n 

n 

n 

> 


> 


/* 

* Check  to  see  if  this  is  the  start  of  a flag  word  or 

* "boring"  argument.  Anything  not  beginning  with 

* boring.  by  itself  is  considered  boring.  -j 

* a special  case  that  results  in  everything  following 

* bring  considered  boring. 

*/ 


i f 

n 

n 

n 

n 

n 

tt 

Q 

□ 

n 

u 

n 

a 

n 

u 

> 


(opt->state  ==  0)  {n  /*  Beginning  a new  word  */ 
opt -> state  = -1; 

/*  Check  for  not  or  lonely  */ 

if  ( op t->op t a r g [0 ] !=  ||  o p t ->op t a r g C1  ] = = 

n return0; 

/*  Check  for  — */ 

if  ( op t->op t a r g C 1 H ==  *-*  &&  op t ->o p t a r g C 2 U == 
n if  ( — opt->optargc  <=  0) 

n n returnEOF; 

n opt->optarg  = *++op t ->op t a r g v ; 

n opt->state=-2; 

n return0; 

> 

op t->op t a r g++; n /*  Skip  leading  - */ 
opt->state  = 1;n/*  We*re  parsing  flags  */ 


/*  Now  opt“>state  = 1 and  we  have  an  optarg  pointer  */ 


c = *op t ->op t a r g++ ; 
if  ( ! *opt->opta rg ) { 


n 

i f ( 

--op t ->op t a rg c <= 

n 

□ 

opt->optarg  = 

n 

else 

Q 

□ 

opt->optarg  = 

□ 

opt- 

>state  = 0; 

> 

return  (unsigned  char)c;n 


0) 

0; 

*++opt->optargv; 

/*  Always  return  > 0 */ 
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* \0*  ) 

* \0  * ) { 
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/* 

* pgpOpt.h  --  A different  sort  of  getoptC) 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpOpt.h, V 1.2. 2.1  1997/06/07  09:49:06  mhw  Exp  $ 

★ 

* CaLL  pgpOpt S t a r t ( op t , argc,  argv)  and  then  pgpOpt Next ( opt ) untiL  it  returns 

* EOF.  pgpOptNextL)  returns  either  a fLag  character  or  0 if  there  is 

* no  fLag.  opt->optarg  is  the  string  argument.  This  is  the  argument 

* itseLf  if  pgpOptNext  returns  0,  or  the  foLLowing  string  ("foo"  in  "-xfoo" 

* or  "-X  foo")  if  pgpOptNext  returns  a character  (e.g.  'x'). 

* 

* If  pgpOptNext  returns  a character,  the  caLLer  must  set  optarg  to  0 

* to  indicate  that  the  argument  in  opt->optarg  has  been  claimed. 

* Otherwise,  opt->optarg  wiLL  be  parsed  by  pgpOptNext  the  next  time 

* it  is  caLLed.  It  wiLL  be  parsed  either  as  a fLag  (if  the  first 

* caLL  got  "-xfoo",  the  next  caLL  wiLL  return  the  fLag  'f'  with 

* optarg  ==  "oo"),  or  as  an  argument  (if  the  first  caLL  got  "-x  foo", 

* the  next  caLL  wiLL  return  0 with  optarg  ==  "foo"). 

* 

* A "boring"  argument  is  one  without  a For  exampLe  "foo"  is 

* boring,  but  "-foo"  is  not. 

* 

* State  is  a private  variabLe  with  the  foLLowing  possibLe  vaLues: 

* -2  - ALL  further  arguments  are  "boring";  get  a new  one  and  return  it. 

* (This  is  entered  if  the  option  is  seen.) 

* -1  - Last  argument  was  "boring";  get  a new  one  and  check  for  fLags. 

* 0 - Last  argument  was  a fLag  that  ended  a string  (-o  foo).  If  opt->optarg 

* is  non-zero,  examine  "foo"  as  the  next  argument.  If  it  is  zero, 

* "foo"  was  claimed,  so  get  a new  one. 

* 1 - Last  argument  was  a fLag  that  did  not  end  the  string.  (-ofoo). 

* If  opt->optarg  is  non-zero,  examine  the  taiL  "foo"  for  more  fLags. 

* If  it  is  zero,  get  a new  argument. 

* 

* You  may  parse  muLti-Letter  options  by  examining  opt->state,  and  if  it 

* is  greater  than  0,  opt->optarg  foLLows  with  no  intervening  space. 

* (This  Lets  you  distinguish  -abc  C1D  from  -a  be  C0D.) 

* 

* You  may  then  steaL  Letters  from  the  beginning  of  opt->optarg  as  needed. 

* Just  perform  " op t ->op t a r g + + " to  steaL  them.  If  you  want  to  steaL  aLL 

* of  opt->optarg,  set  opt->optarg  = 0; 

*/ 


#ifdef 

__cpLuspLus 

extern 

"C"  { 

#encl  i f 

struct 

PgpOptContext  ( 

n 

char  *optarg; 

n 

char  **optargv 

n 

int  optarge; 

D 

int  state; 

>; 

void  pgpOptStart  (struct  Pg pOp t C o n t ex t *opt,  int  argc,  char  **argv); 
int  pgpOptNext  (struct  Pg pOp t C on t e x t *opt); 


CCCHK:6494bd7597281  1 338c 39 c251acf1ba6bc5f0de3565aab666  50279448ff 74 1 5752:: 


Pretty  Ciood  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2041 


pgpOpt.h 


#ifdef  __cpLuspLus 

> 

# e n d i f 
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Makefile. in 


# 

If  a pp  s /Ma  kef  i L e . i n 

n 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
U 

tt  $ld:  Hakef  i Le . i n,v  1.10.2.2  1 997/06/07  09:49:02  mhw  Exp  $ 

U 

S UBD I R S= common  pgp  pgpk  pgpk.oLd 
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makefile. msc 


U 

U a pps /ma kef i L e . ms c 
U 

It  Copyright  (C)  1 996,1  997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

# $Id:  ma ke f i L e . m s c , V 1.4. 2.1  1 997/06/07  09:49:02  mhw  Exp  $ 

U 

lincLude  "makefiLe.in" 

aLL  check  cLean  depend  headers  instaLL  very-cLean:: 
n for  %d  in  ( SCSUBDIRS)  ) do  \ 

Q n cd  %d  &&  $(HAKE)  /$( MAKE F LAGS ) /f  makefiLe.msc  $3  SS  cd  .. 

c L e a n : : 

n de  L * . L i b 
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U 

# apps/pgp/MakefiLe.in 

# 

# Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  AIL  rights  reserved. 

n 

ft  $Id:  Ma  ke  f i L e . i n , V 1.1. 2. 4 1 997/06/07  09:49:07  mhw  Exp  $ 

U 

PROG  = pgp 

INSTALLPROGS  = $(PR0G) 


C0MM0N= . . / common 

LOCALINCLUDES  = -ISCCOHMON)  - 1 $ ( s r c d i r ) / $ ( C OMMON ) 

LOCALOBJS=  $( COMMON )/ pg pApp F i L e . o $( C OMMON )/ pg p E x i t . o $ ( C OMM 0 N ) / pg p Key R i n g s . o \ 
n $( COMMON ) /pgplni tApp . o $( C OMMON )/ pg pOp t . o 

OBJS  = SCLOCALOBJS)  pgp.o  parsearg.o 

a L L : : $(PR0G) 


install::  $(PR0G) 


n 

( n n 

n n 

n 

n 

\ 

n 

$(INSTALL) 

-m  755  pgp  $ ( D E ST D I R ) $ ( b i nd i r ) ; n 

\ 

a 

cd  $ ( DESTDIR  )$( bi ndi r ) ;n 

n 

n 

\ 

n 

$(RM)  pgpe 

pgps  pgpv  pgp_ 

0 L d ; n 

n 

\ 

n 

$(LN_S) 

pgp 

pgpe;n  n 

n 

n 

\ 

n 

$(LN_S) 

pgp 

pgps;n  n 

Q 

D 

\ 

n 

$CLN_S) 

pgp 

pgpv;n  n 

n 

n 

\ 

c 

$(LN_S) 

pgp 

pgp_o  L dnn 

D 

a 

\ 

n ) 
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/* 

* parsearg.c 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  parsearg.c, V 1.1. 2. 2 1 997/06/07  09:49:07  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0NFIG_H 

//include 

// e nd i f 

"config.h" 

Mine  lude 

<stdi 0 . h> 

//include 

"pgpUsuals.h" 

//include 

"pgpExit.h" 

//include 

"pgpUI . h" 

//include 

"pgpOpt . h" 

//include 

"pgpConf.h" 

//include 

"pgpEnv. h" 

#i  nc  lude 

"pgpUserlO. h" 

# i n c 1 ud  e 

"pgpPassCach.h 

//include 

"parsearg.h" 

//i  nc  lude 

" pa  s s . h " 

#ifdef  ORIGINAL_50_COMMANDLINE 
/* 

* read  the  arguments  passed  to  the  function.  Set  the  flags  according 

* to  the  arguments  received.  Put  encryption  recipients  into  the 

* flags,  leave  files  to  be  processed  in  argv,  and  set  argc  to  the 

* number  of  files  left  in  argv. 

* 

* If  there  is  an  error  processing  the  arguments,  print  an  error  message 

* and  exit. 

*/ 


void 

mainParseArgsCstruct 

PgpUICb  *ui. 

n 

n 

struct 

UIArg  *ui_arg 

n 

n 

struct 

PgpEnv  *env. 

n 

n 

int  *argcp. 

n 

n 

char  *argvC3, 

n 

r 

n 

struct 

Flags  *flags) 

V 

Struct 

PgpOptContext 

opt; 

i n t c , 

argc  = *argcp; 

pgpOptStart  (&opt,  argc,  argv); 
argc  = 0 ; 


n 

n 

n 

n 

n 

Q 

D 

D 


while  ((c  = pgpOptNext  (&opt))  !=  EOF)  { 

switch  Cc)  { 
case  0 : 


n 

□ 

n 

□ 

n 

n 


if  C op t . op t a rg C 0 1 !=  '+'  ||  op t . o p t a r g C 1 ] 
if  ( f I a g s-> e n c r y p t ) 

n flags->recipsCfLags->numrecips++D 

n opt.optarg; 

else 

n argvCargc++D  = opt.optarg; 


' \0  ' ) { 
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> else 

if  (pgpConfigLineProcess  (ui. 


n 

n 

n 

n n 

u n _a  rg , 

n 

n 

n 

n n 

env. 

n 

n 

n 

n n 

opt . optarg  + 1 , 

n 

n 

n 

n n 

PGPENV_PRI_CHDLINE)) 

n 

n 

n 

exitArgError  ( 

"Unrecognized  option  %s". 

n 

n 

n 

o 

opt.optarg); 

n 

n 

break; 

n 

n 

n 

case  * - * : 

n 

n 

/*  Thi 

s accepts  --foo 

*/ 

n 

n 

/*  __ 

i s speci a L-cased 

, so  foo"  won't  do.  */ 

if  ( pg p C 0 n f i g L i ne P r 0 c e s s ( u i , ui_arg,  env,  opt.optarg, 
nun  PGPENV_PRI_CMDLINE) ) 

e X i t A r g E r r o r ( " U n r e c og n i z e d option  -Xs" , 
n n opt.optarg-1); 

opt.optarg  = NULL; 
n n break; 

n n 

* ' a * : 


n 

n 

n 

n 

n 

n 


n fLags->doarmor  = 2; 


n 

pgpenvSetInt 

(env,  PGPENV_ARM0R,  2, 

n 

n 

PGPENV_PRI_CMDLINE) ; 

n 

break; 

n 

case  ' b ' ; 

□ 

Q 

n 

n 

n 

n 

n 

n 

n 

□ 

n 

n 

D 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

n 


n f L a g s-> s e p s i g = 2; 

n brea  k; 

□ 

case  ' c * : 

n f L ag s->conven t i ona L = 2; 

n break; 

n 

case  * d * : 

n flags -> decrypt  = 2; 

n break; 

n 

case  * e * : 

n if  Clopt.optarg) 

n exitArgErrorC 

a n "-e  option  requires  a recipient  name  argument 

n f L a g S“> r e c i p s C f I a g s->num r e c i p S + + D = opt.optarg; 

n opt.optarg  = NULL; 

n break; 

n 

case  * E * : 

n f L a g s “>6 n c r yp t = 2; 

n break; 

n 

case  * f * : 

a f L a g s->f i L t e r mode  = 2; 

n break; 

n 

case  * h * : 

n exitUsage  (PGPEXIT^OK); 

n /*NOTREACHED*/ 

Q 
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Q 

n 

n 

n 

n 

n 

n 

a 

n 

n 

n 

□ 

n 

Q 

n 

n 

n 

n 


case  * m * : 

n f L a g s ->mo r e f I a g = 2; 

n break; 

n 

case  * o * : 

n if  (lopt.optarg) 

n exitArgError  ( 

n n "-0  option  requires  an  output  file  name  argument"); 

n f L a g s->o u t f i L e = opt.optarg; 

n opt.optarg  = NULL; 

n break; 

n 

case  * q * : 

n u i _a r g->a r g . ve r bo s e = 0; 

n pgpenvSet Int C env,  PGPENV_VERBOSE, 

n n 0,  PGPENV_PRI_CMDLINE ) ; 

n break; 

n 


n 

n 

n 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


case  * s * : 


B 

fLags->sign 

= 2; 

B 

jj 

break; 

case  ' t ' : 

B 

pgpenvSetInt 

(env,  PGPENV_TEXTMODE,  2, 

B 

□ 

PGPENV_PRI_CMDLINE); 

B 

0 

break; 

case  ' u ' : 

B 

/*  XXX  Check 

for  duplicate  args  */ 

B 

if  (lopt.optarg) 

B 

exitArgError  ( 

B 

B "-U 

option  requires  a userid  argument"); 

B 

pg pe n V S e t S t r i ng  (env,  PG P E N V_M YN AM E , opt.optarg. 

B 

D a 

PGPENV_PRI_CMDLINE); 

B 

opt.optarg  = 

0; 

B 

break; 

B 

B 

B 

B 

B 

B 


case  * V * : 

n pg p e n V S e t I n t ( en V , PGPENV_VERBOSE, 

B B ++u i _a r g->a r g , ve r bose , PG PE N V_P R I _C H D LI N E ) ; 

n break; 

B 


#ifdef 

B 

B 

B 

#endi f 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


WIPE_SUPPORTED 
case  ' w ' : 

n fLags->wipe=2; 

n break; 

B 

case  * z * : 


B 

if 

C lopt.optarg) 

B 

exitArgError  C 

B 

B 

"-Z  option  requires 

a pass  phrase  argument 

B 

pg p Pa s s C a c h e Ad d (passcache. 

opt.optarg. 

B 

B 

n St  r len  (opt 

.optarg)); 

B 

/* 

Record  passphrase  for  -c 

*/ 

B 

s t r n c py ( ph r a se , opt.optarg. 

sizeof(phrase)); 

B 

opt 

.optarg  = 0; 

B 

break; 

); 
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a □ 

n default: 

n n exitArgError  ("Unrecognized  option  -%c",  c); 

n n 

n > 

> 

*argcp  = argc; 
return; 

> 

#end  i f 


void 

ma i n Pa r se E n c ry p t A rg s ( s t r u c t PgpUICb  *ui. 

n 

n 

n 

struct  UIArg  *ui_arg. 

u 

n 

D 

struct  PgpEnv  *env. 

n 

n 

n 

int  *argcp. 

n 

□ 

n 

char  *argvCD, 

a 

n 

□ 

struct  Flags  *flags) 

{ 

struct  Pg pO p t C o n t e X t opt; 
int  c,  argc  = *argcp; 

pgpOptStart  (&opt,  argc,  argv); 
argc  = 0; 

while  ((c  = pgpOptNext  (Sopt))  !=  EOF)  { 
n switch(c){ 

n ca  se  0 : 

n n if  ( op t . o p t a r g C 0 ] !=  ' + ' ||  op t . o p t a r g C 1 D ==  '\0')  { 

n n if  ( f I a g s-> e n c r y p t ) 


n 

0 

0 

flags->recips[flags- 

>nunireci  p s + + ] 

= 

n 

0 

0 

opt. optarg; 

n 

0 

else 

n 

0 

0 

argvCargc++]  = opt. optarg; 

n 

0 

> e 

L s e 

n 

0 

i f 

CpgpConfigLineProcess 

( u i , 

n 

0 

0 

0 0 

ui _a  rg. 

Q 

0 

0 

0 0 

env. 

n 

0 

o 

0 0 

opt . opta  rg 

+ 1, 

□ 

0 

0 

0 o 

PGPENV_PRI_ 

CHDLINE ) ) 

n 

0 

0 

exitArgError  ("Unrecognized  option  %s' 

n 

0 

0 

n opt. optarg); 

n 

0 

break; 

n 

0 

a 

case  ' - 

1 , 

u 

0 

/* 

T h i 

s accepts  --foo  */ 

n 

0 

/* 

— 

is  special-cased,  so  " 

--  foo"  won  * t 

do  . 

*/ 

n 

0 

i f 

(pgpConfigLineProcessCui, 

ui _a  rg,  env. 

opt  . 

.optarg 

0 

0 

n 

n n PGPENV_PRI_CMDLINE) ) 

0 

0 

exitArgErrorC" Unrecognized  option  -%s 

/ 

0 

0 

□ 

n opt . opta  rg 

- 1); 

0 

0 

opt 

•optarg  = NULL; 

0 

0 

□ 

n break; 

0 

0 

D 

n 

0 

case  'a 

1 . 

0 

0 

flags- 

>doarnior  = 2; 

n n pgpenvSetInt  (env,  PGPEN\/_ARMOR,  2, 

n n n PG P E N V_PR I _ C M D L I N E ) ; 

n n break; 
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Q 

n 

n 

n 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

D 

n 

n 

n 

n 

El 

n 

El 

n 

El 

n 

El 

D 

n 

n 

o 

D 

n 

D 

n 

□ 

B 


B 

case  * c * : 

n f L a g s->con ven t i ona L = 2; 

n break; 

B 

case  * f ' : 

n f L a g s->f i I t e rmod e = 2; 

n break; 

B 

case  * h * : 

n exitUsage  ( PG PE X I T_0K ) ; 

n /*NOTREACHED*/ 

B 

case  'o': 

n /*  XXX  This  doesn't  do  multiple  output  files,  right  now.*/ 

n i f ( ! opt . opta  rg ) 

n exitArgError  C 

B B "-0  option  requires  an  output  file  name  argument"); 

n f lags->outf i le  = opt.optarg; 

n opt.optarg  = NULL; 

n break; 

B 

case  * q ' : 

n u i _a r g->a r g . ve r bo s e = 0; 

n pgpenvSetInt(env,  PGPENV_VERBOSE, 

B B 0,  PGPENV_PRI_CMDLINE ) ; 

n break; 

B 

case  ' r ' : 

n if  (!  opt . opta  rg ) 

n exi t ArgError ( 

B B "-r  option  requires  a recipient  name  argument"); 

n flags->recipsCflags->numrecips  + + I]  = opt.optarg; 

n opt.optarg  = NULL; 

n break; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


case  's': 

n flags->sign  = 2; 

n break; 

B 

case  * t ' : 

n pgpenvSetInt  (env,  PGPEN\/_TEXTMODE,  2, 

B B PGPENV_PRI_CMDLINE); 

n break; 

B 

case  ' u ' : 

El  /*  XXX  Check  for  duplicate  args  */ 

n if  (!  opt.optarg) 

El  exi  tArgEr  ror  ( 

B B "“U  option  requires  a userid  argument"); 

n pg pe nvS e t S t r i ng  (env,  PGPENV_MYNAME,  opt.optarg, 

B B B PGPENV_PRI_CMDLINE); 

n opt.optarg  =0; 

n brea  k; 

B 

case  * V * : 

n pgpenvSetIntCenv,  PGPENV_VERBOSE, 

B B + + U i _a r g->a r g . V e r bo s e , PG P E N V_PR I _ C M D L I N E ) ; 
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n n break; 

Q n 


#ifdef  WIPE_SUPPORTED 
n c a s e * w * : 


n 


n 


n n 

# e n d 1 f 
n D 

n 

□ □ 


n 

n 

Q 

n 

n 

n 

Q 

B 

n 

B 

B 

B 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


f Lags->wi pe  = 2; 
break; 

case  * z ' : 

if  ( ! opt  . opta  rg ) 

exitArgError  ( 

n "-Z  option  requires  a pass  phrase  argument 

pg p Pa s s C a c h e Add  (passcache^  opt.optarg^ 
n B strLen  (opt.optarg)); 

/*  Record  passphrase  for  -c  */ 

strncpyCphrase,  opt.optarg,  sizeofCphrase)); 

opt.optarg  = 0; 

break; 

default: 

exitArgError  ("Unrecognized  option  “%c",  c); 


); 


> 

*argcp  = argc; 


i f ( ! f Lags->numreci  ps  ) -C 
n fprintfCstderr, 

n B "You  must  specify  at  Least  one  recipient  for  encryption!\n"); 

n exitCLeanup  (PGPEXIT^ARGS); 

> 

return; 

> 


VO  i 

d ma i nPa r se S i g n A rg s ( s t ru c t PgpUICb  *ui. 

B 

B 

struct  UIArg  *ui_arg. 

B 

B 

struct  PgpEnv  *env. 

B 

B 

int  *argcp. 

B 

B 

char  *argvC3, 

B 

{ 

B 

struct  Flags  *fLags) 

struct 

Pg pOp t C 0 n t e X t opt; 

i nt  c. 

argc 

= 

* a r g c p ; 

f Lags- 

>s  i gn 

= 

2; 

B 

fl 

pgpOptStart 

(Sopt,  argc,  argv); 

argc  = 

0; 

while 

(Cc  = 

pgpOptNext  C&opt))  !=  EOF)  { 

B 

swi tch  ( 

c ) 

{ 

B 

case 

0 

: 

B 

B 

i f 

( opt . opta rg C03  !=  '+'  ||  opt. opta 

r g C 1 D 

B 

B 

if  ( f Lags->enc rypt ) 

B 

B 

B 

f Lags->rec i psCf  Lags->numreci 

ps  + +] 

B 

B 

B 

opt.optarg; 

B 

B 

else 

B 

B 

B 

argvllargc++!]  = opt.optarg; 
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Q 

n 

n 

n 

n 

n 

n 

u 

n 

s 

n 

□ 

n 

n 

n 

n 

n 

Q 

Q 

□ 

n 

Q 

n 

Q 

a 

D 

Q 

n 

n 

a 

a 

o 

n 

n 

n 

n 

Q 


Q 

} else 

n 

i f 

(pgpConf i gLi neProcess  (ui. 

n 

n 

Q Q 

Li  “i  _a  f'Q  r 

a 

□ 

D n 

env. 

n 

n 

D n 

opt.optarg  + 1, 

n 

n 

n n 

PGPENV_PRI_CHDLINE)) 

□ 

n 

exitArgError 

("Unrecognized  option  %s". 

Q 

n 

n 

break; 

n 

opt.optarg); 

□ 


n /*  This  accepts  --foo  */ 

n /*  --  is  s p e c i a L “ c a s ed , so  foo"  won’t  do.  */ 

n if  ( pg p C on f i g L i n e P r o c e s s ( u i , ui_arg,  env,  opt.optarg, 

n n n n PG P E N V_P R I _ C M D L I N E ) ) 

n e X i t A r g E r r 0 r ( " U n r e c og n i z e d option  -%s", 

H n n opt.optarg  - 1); 

n opt.optarg  = NULL; 

n n n break; 

n Q n 

case  * a * : 

n fLags->doarmor  = 2; 

« pgpenvSetInt  Cenv,  PGPENV_ARMOR,  2, 

n a PGPENV_PRI_CMDLINE); 

a break; 

n 

case  * b * : 

n flags ->sepsig  = 2; 

n break; 

n 

case  ' f * : 

n f L a g s ->f i L t e rmod e = 2; 

n break; 

n 

case  * h * : 

n exitUsage  ( PGPEXIT.OK) ; 

n /*NOTREACHED*/ 


n 

n 

□ 

a 

n 

Q 

D 

n 

n 

Q 

n 

n 

n 

n 

n 

Q 

n 

n 

s 

n 

n 


n 

case  * o * : 

n i f ( ! opt . opta  rg  ) 

n exi t ArgEr ror  ( 

n n "-0  option  requires  an  output  file  name  argument"); 

n f Lags->outf i Le  = opt.optarg; 


o 

opt  . optarg  = 

NULL; 

a 

break; 

case  ' q ' : 

n 

u i _a  rg->a  rg . 

verbose  = 0; 

n 

pgpenvSetInt (env,  PGPENV_VERBOSE, 

Q 

□ 

0,  PGPENV_PRI_CnDLINE); 

n 

break; 

case  ' t ' : 

n 

pgpenvSetInt 

(env,  PGPENV_TEXTHODE,  2, 

B 

a 

PGPENV_PRI_CHDLINE); 

B 

break; 

case  ' u ' : 
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□ 

a 

□ 

□ 

□ 

n 

Q 

n 

a 

□ 

□ 

c 

s 

□ 


n /*  XXX  Check  for  duplicate  args  */ 

n if  (lopt.optarg) 

n exitArgErrorC 

n n "-U  option  requires  a userid  argument"); 

a pg pen vS e t S t r i ng  (env,  PG P E N V_M Y N AM E , opt.optarg, 

n n n PGPENV_PRI_CHDLINE); 

n opt.optarg  = 0; 

n break; 

D 

case  ' V ' : 

n pg pe n V S e t I n t ( e n V , PG P E N V_ V E RBO S E , 

n n + + U i _a  r g ->a  r g . V e r bo  s e , PG  PEN\/_  P R I _C  M D LI  N E ) ; 

n break; 

□ 


# i f d e f 

WIPE 

.SUPPORTED 

□ 

case  ' w ' : 

□ 

n 

flags->wipe 

n 

n 

break; 

# e n d i f 

2; 


□ 

n 

if  (lopt.optarg) 

a 

n 

exitArgError  ( 

u 

D 

n "-Z  option  requires 

a pass  phrase  argument"); 

u 

n 

pg p Pa s s C a c h e Ad d (passcache. 

opt .optarg. 

u 

n 

n n strlenCopt 

.optarg)); 

n 

n 

/*  Record  passphrase  for  -c 

*/ 

n 

n 

St rncpy (phrase,  opt.optarg. 

sizeof(phrase)); 

Q 

n 

opt.optarg  = 0; 

n 

□ 

break; 

□ 

n 

n 

default  : 

□ 

n 

exitArgError  ("Unrecognized 

option  -%c",  c); 

□ 

□ 

n 

> 

*argcp  = argc; 
return; 


void  ma i n Pa r s eV e r i f y A r g s ( s t r u c t PgpUICb  *ui. 


n 

n 

□ 

struct  UIArg  *ui_arg 

D 

n 

n 

struct  PgpEnv  *env. 

n 

Q 

n 

int  *argcp. 

n 

n 

n 

char  *argvC], 

n 

{ 

n 

n 

struct  Flags  *flags) 

struct 

PgpOptContext 

opt; 

i n t c , 

argc  = *argcp; 

pgpOptStart  (&opt,  argc,  argv); 
argc  = 0 ; 

while  ((c  = pgpOptNext  (&opt))  !=  EOF)  { 

o switch  (c){ 

n case  0 : 

n n if  ( opt . opta rgC0]  !=  '+'  ||  op t . op t a r g C 1 ] ==  '\0')  { 

a a if  ( f I a g s->en c r y p t ) 
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□ 

n 

n 

fLags->recipsCfLag 

s ->n urn r e c i p S++ ] = 

n 

Q 

n 

opt.optarg; 

n 

n 

else 

n 

n 

n 

argvCargc  + +Il  = opt 

. 0 p t a r g ; 

a 

a 

> 

else 

n 

Q 

if  ( pg p C 0 n f i g L i n e P ro c e s s Cui, 

n 

n 

n 

n n 

ui _a  rg. 

n 

n 

n 

n □ 

e n V , 

n 

n 

n 

n a 

opt.optarg  + 1 , 

n 

n 

D 

n n 

PGPENV  PRI  CMDLINE)) 

n 

n 

break; 


exitArgError  ("Unrecognized  option  %s' 
n opt.optarg); 


case  * - ' : 

/*  This  accepts  --foo  */ 

/*  --  is  s pe c i a I - c a s ed , so  foo"  won*t  do.  */ 

if  (pgpConfigLineProcess(ui,  ui_arg,  env,  opt.optarg, 
n n n PG P E N V_ P R I _ C M D L I N E ) ) 

e X i t A r g E r r o r ( " U n r e c og  n i z e d option  -•%s", 

n n opt.optarg-1); 

opt.optarg  = NULL; 
n n break; 

n n 

case  * d * : 


n 

n 

n 

D 

n 

n 

□ 

□ 

n 

n 


n fLags->decrypt  = 2; 

n break; 

n 

case  * f * : 

n f L a g s->f i L t e r mod e = 2; 

n break; 

n 

case  * h * : 

n exitUsage  ( PGPEXIT_OK) ; 

n /*NOTREACHED*/ 


n 

n 

a 

n 

n 

Q 

n 

n 

□ 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 

n 


n 

case  * m * : 

a f Lags->moref Lag  = 2; 

n break; 

n 

case  * o * : 

n if  (iopt.optarg) 

n exitArgErrorC 

n n "-0  option  requires  an  output  file  name  argument"); 

n f Lags->outf i Le  = opt.optarg; 

n opt.optarg  = NULL; 

n break; 

n 

case  * q * : 

n u i _a r g->a r g . ve r bo s e = 0; 

n pg p e n vS e t I n t ( e n V , PGPENV_VERBOSE, 

n n 0,  PGPENV_PRI_CMDLINE); 

n break; 

n 

case  * V * : 

n pg pe n vS e t I n t ( e n V , PGPEN V_ V E RBO S E , 

n n ++U i _a r g->a r g . V e r bo s e , PG P E N V_ P R I _C M D LI N E ) ; 

n break; 
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n 


n 


#ifdef  WIPE  SUPPORTED 


B 

case  * w ' : 

B 

fl 

flags -> wipe 

fl 

#end  i f 

B 

break; 

B 

B 

B 

case  * z * : 

2; 


n 

n 

n 

□ 

n 

□ 

n 

a 

n 


n 

n 

n 

n 

o 

Q 

n 

Q 

n 


if  ( ! opt . opt  a rg ) 

exitArgError  ( 

n "-Z  option  requires  a pass  phrase  argument 

pgpPassCacheAdd  (passcache,  opt.optarg, 
n n strLen  (opt.optarg)); 

/*  Record  passphrase  for  -c  */ 

s t r n c py ( p h r a s e , opt.optarg,  s i z e o f ( p h r a s e ) ) ; 

opt . opta  rg  = 0; 

break; 


); 


n 


n 


n 

Q 

B 

B 


> 


def au  L t : 

n exitArgError  ("Unrecognized  option  -%c",  c); 

B 

> 

> 

*argcp  = argc; 
return; 


/*XXX  This  should  probably  be  a separate  app  so  that  people  can  rename  it 
*PGP  if  they  need  to. 

*/ 


void  ma i n Pa r s e 2 62 A r g s ( s t r u c t PgpUICb  *ui. 


B 

fl 

struct 

UI  Arg 

*u i _a  rg 

fl 

B 

struct 

PgpEnv 

*env. 

B 

B 

i nt  *a  rgcp. 

B 

B 

char  *a 

rgvC], 

fl 

/ 

B 

struct 

Flags 

* f L a g s ) 

V 

struct 

PgpOptContext  opt; 

i n t c , 

argc 

= *argcp; 

pgpOptStart 

(&opt,  argc. 

a rg V ) ; 

argc  = 0 ; 


B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 


while  ((c  = pgpOptNext  (&opt))  !=  EOF)  i 

switch  (c)  i 
case  0 : 


B 

B 

B 

B 

B 

B 

B 

n 

B 

B 

B 

B 


if  (opt . opta rgC0D  !=  *+*  ||  op t . o p t a r g C 1 D ==  *\0*) 

if  ( f I a g s “>en c ry p t ) 

n f I a g s “> r e c i p s C f I a g s “>num r e c i p S + + D = 

n opt.optarg; 

else 

n argvEargc++D  = opt.optarg; 

> else 

if  ( pg p C o n f i g L i n e P r o c e s s (ui. 


B 

B 

B 

U i _a  rg  , 

B 

B 

B 

env. 

B 

B 

B 

opt . opta  rg  + 1 , 

B 

fl 

fl 

PGPENV  PRI  CMDLINE)) 
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n 

Q 

n 

n 

Q 

n 

n 

□ 

□ 

n 

D 

n 

n 

□ 

□ 

n 

n 

D 

Q 

u 

n 

n 

n 

n 

o 

□ 

n 

n 

n 

n 

n 

n 

D 

n 

D 

Q 

n 

o 

n 

D 

n 

D 

n 

□ 

n 

n 

n 

o 

n 

n 

n 

□ 

n 

a 

D 

o 

□ 

□ 


n n exitArgError  ("Unrecognized  option  %s", 

n n n opt.optarg); 

n break; 

n 

case  * - * : 

n /*  This  accepts  --foo  */ 

n /*  --  is  s pe c i a L - c a s e d , so  foo"  won*t  do.  */ 

n if  (pgpConfigLineProcess(ui,  ui_arg,  env,  opt.optarg, 

n n n n P G P E N V _ P R I _ C M D L I N E ) ) 

n ex i t A r g E r r o r ( " U n r e c og n i z e d option  “%s", 

n n n opt.optarg-1); 

n opt.optarg  = NULL; 

n n n break; 

□ n n 

case  * a * : 

n f I a g s->d oa r mo r = 2; 

n pgpenvSetInt  (env,  PGPENV_ARMOR,  2, 

n n PGPENV_PRI_CMDLINE); 

n break; 

n 

case  * b * : 

n f L a g s->s e ps i g = 2; 

n break; 

o 

case  * c ’ : 

n f L a g s-> c o nve n t i ona L = 2; 

n break; 

□ 

case  * d * : 

n f L a g S“>d e c r y p t = 2; 

n break; 

n 

case  * e * : 

n if  (! opt.optarg) 

n exitArgError( 

n n "-e  option  requires  a recipient  name  argument"); 

n f L a g S“> r e c i p s C f I a g S“>n urn r e c i p S + + D = opt.optarg; 

n opt.optarg  = NULL; 

n brea  k; 

n 

case  * E * : 

n f L a g s->e n c r y p t = 2; 

n break; 

n 

case  * f * : 

n f L a g s-> f i I t e r mod e = 2; 

H break; 

n 

case  * h * : 

n exitUsage  ( PGPEXIT.OK) ; 

n /*NOTREACHED*/ 

u 

case  * m * : 

n f Lags->moref Lag  = 2; 

n break; 

□ 

case  * o * ; 

n if  (lopt.optarg) 
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n 

n 

n 

a 

n 

a 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 


B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 


#ifdef  WIPE. 

B 

B B 

fl  B 

# e n d 1 f 

B fl 


exitArgError  ( 

B "-0  option  requires  an  output  file  name  argument"); 

f L a g s->ou t f i L e = opt.optarg; 
opt.optarg  = NULL; 
break; 


u i _a rg ->a r g . ve r bo s e = 0; 
pgpenvSetIntCenv,  PGPENV_\/ERBOSE, 

B 0,  PGPENV_PRI_CMDLINE); 

break; 

case  * t * : 

pgpenvSetInt  Cenv,  PGPENV_TEXTMODE,  2, 

B PGPENV_PRI_CMDLINE); 

break; 

case  * u * : 

/*  XXX  Check  for  duplicate  args  */ 
if  ( ! opt . opta  rg ) 

exitArgError  ( 

B "-U  option  requires  a userid  argument"); 

pgpenvSetSt r i ng  (env,  PGPENV_MYNAME,  opt.optarg, 

B B PGPENV_PRI_CHDLINE); 

opt.optarg  = 0; 

break; 

case  * V * : 

pgpenvSetInt (env,  PGPENV_VERBOSE, 

B + + U i _a r g->a r g . ve r bo s e , PG P EN V_ P R I _C M D LI N E ) ; 

break; 

.SUPPORTED 
case  ' w ' : 


flags -> wipe  = 2; 
break; 


case  * z * : 

if  ( ! opt . opta  rg ) 

exitArgError  ( 

B "-Z  option  requires  a pass  phrase  argument"); 

pgpPassCacheAdd  (passcache,  opt.optarg, 

B B strlen  (opt.optarg)); 

/*  Record  passphrase  for  -c  */ 

s t r n c py ( p h r a s e , opt.optarg,  s i z eo f ( p h ra s e ) ) ; 

opt . opta  rg  = 0; 

break; 

default: 

exitArgError  ("Unrecognized  option  “%c",  c); 


*argcp  = argc; 
return; 
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/* 

* parsearg.h 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  parsearg.h, V 1.1. 2. 2 1997/06/07  09:49:07  mhw  Exp  $ 

*/ 


struct 

F L a g s 

{ 

a 

char 

const  *outfiLe; 

□ 

char 

**recips; 

n 

i n t 

numrec i ps; 

n 

byte 

conventional; 

n 

byte 

decrypt; 

n 

byte 

doa  rmo  r ; 

n 

byte 

encrypt; 

n 

byte 

fi Ltermode; 

□ 

byte 

moref  Lag; 

n 

byte 

sepsig; 

a 

byte 

s i g n ,■ 

n 

byte 

w i p e ; 

>; 

struct 

UIArg 

c 

struct  PgpTtyUInarg; 

>; 

void 

ma i n Pa r s e En c r y p t A r g s (struct  PgpUICb  *ui. 

n 

n 

n 

struct  UIArg  *ui_arg 

n 

a 

n 

struct  PgpEnv  *env. 

n 

n 

Q 

int  *argcp. 

n 

n 

n 

char  *argvC], 

Q 

n 

o 

struct  FLags  *fLags) 

void 

mainParseSignArgs 

(struct  PgpUICb  *ui. 

n 

n 

□ 

struct  UIArg  *ui_arg. 

n 

□ 

a 

struct  PgpEnv  *env. 

n 

n 

n 

i nt  *argcp. 

n 

n 

a 

char  *argvC3, 

n 

n 

n 

struct  FLags  *fLags); 

void 

ma i n Pa r s e Ve r i f y A r g s (struct  PgpUICb  *ui. 

n 

D 

n 

struct  UIArg  *ui_arg. 

n 

n 

n 

struct  PgpEnv  *env. 

n 

a 

Q 

int  *argcp. 

n 

n 

□ 

char  *argvC3, 

D 

n 

n 

struct  FLags  *fLags); 

void 

mainParse262Args 

(struct  PgpUICb  *ui. 

n 

Q 

struct  UIArg  *ui_arg. 

n 

Q 

struct  PgpEnv  *env. 

n 

D 

int  *a  rg  cp. 

n 

n 

char  *a  rgvC  2 , 

n 

D 

struct  FLags  *fLags); 
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/* 

* pass.h 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pass.h,v  1.1. 2. 2 1 997/06/07  09:49:08  mhw  Exp  $ 

*/ 


#ifdef  PGP_MAIN 
#define  EXTERN 

#define  G LOB A L_ AS S I G N ( x ) = x; 

#e  L se 

#define  EXTERN  extern 
#define  G LOB A L_ AS S I G N ( x ) 

#end i f 

#define  PASSLEN  256 

EXTERN  char  p h r a s e C P A S S LE N ] G LOB A L_ A S S I G N ( " \ 0 " ) ; 

EXTERN  struct  PgpPassCache  *passcache  G LOB A L_ A S S I G N ( N U L L)  ; 

#undef  EXTERN 
#undef  GLOBAL  ASSIGN 
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/* 

* pgp.c  - PGP  Main  routine 

★ 

* Copyright  (C)  1995-1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

•k 

* Written  by:n  Derek  Atkins  <ua r L o r d SM I T . E D U> 

* 

* ExtensiveLy  rewritten  by:  Brett  A.  Thomas  (batapgp.com,  quarkabaz.com) 

* 

* Others  invoLved  incLude  HaL  Finney,  CoLin  PLumb  and  Mark  Weaver. 

* 

* $Id:  pgp.c, V 1.1. 2. 3 1997/06/07  09:49:08  mhu  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h" 

# e nd i f 


#incLude 
#i nc  Lude 
#incLude 


<stdio.h> 
<string.h> 
<t i me . h> 


#ifdef  HAVE_S YS_PARAM_H 
#incLude  <sy s / pa r a m . h> 
#endi f 

#ifdef  HAVE_STDLIB_H 
#incLude  <stdLib.h> 

# e nd i f 


#ifdef  HAVE_UNISTD_H 

#incLude  <unistd.h>nn  /*  for  sbrkC)  */ 
#endi f 


#ifdef  UNIX 

#incLude  < s y s / s t a t . h>n  n /*  for  umaskC)  */ 
#end i f 


ftii  _MSC_VER>  = 1 000 


#i nc  L ude 

< L i mi t s . h>nn  /* 

#end i f 

#incLude 

<ctype  . h> 

#incLude 

"pgpDebug.h" 

Uthc Lude 

"pgpArmrFiL.h" 

# i nc  L ude 

"pgpBufMod. h" 

ttincLude 

"pgpCipher. h" 

#i nc  Lude 

" pgpConvKey . h " 

ttincLude 

"pgpDecPipe.h" 

ftinc  Lude 

"pgpEncPipe.h" 

ttincLude 

"pgpFIFO.h" 

# i nc  L ude 

"pgpFi LeMod.h" 

ttincLude 

"pgpFi LeNames.h" 

#i nc  Lude 

"pgpFiLeType.h" 

#i nc  Lude 

"pgpHash.h" 

#incLude 

"pgpMem. h" 

ttincLude 

"pgpPassCach . h" 

#incLude 

"pgpPipeLine.h" 

#i nc  Lude 

"pgpConf . h" 

#i nc  Lude 

"pgpEnv. h" 

#incLude 

"pgpErr.h" 

#incLude 

"pgpFi Le.h" 

PATH  MAX  */ 
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^include 

"pgpUI  . h" 

#i nc  Lude 

"pgpPubKey. h" 

#include 

"pgpRndom. h" 

# i n c L ud e 

"pgpRngPub.h" 

# i n c L u d e 

"pgpRngRead.h" 

^include 

"pgpSigSpec.h" 

#i  nc  Lude 

"pgpUserlO.h" 

#incLude 

"pgpRingUI.h" 

#include 

"pgpUsuaLs.h" 

#i  nc  Lude 

"pgpTrstPkt.h" 

#incLude 

"pgpTrust.h" 

# i n c L u d e 

"pgpExit.h" 

#i  nc  Lude 

"pgpAppFi Le.h" 

#incLude 

"pgpKeyRings.h" 

#incLude 

"pgpini tApp. h" 

#incLude 

"pgpOpt.h" 

//define 

PGP_MAIN  /*So  gLobaLs 

//incLude 

"parsearg.h" 

//i  nc  Lude 

" p a s s . h " 

assigned*/ 


typedef  enum  _ PG P I n vo kedTy p e { 
Unknown  = 0, 

PGPencrypt, 

PGPsign, 

PGPveri iy , 

PGPo  Ld, 

PG  P ra  u , 

PGPkey s 

>PGPInvokedType; 


static  PG P I n VO ke dTy pe  g e t I n vo kedTy pe C c h a r *Argv0); 
static  void  e x i 1 1 n vo ked Ra w ( vo i d ) ; 


static 

static 

static 

static 

static 


struct  PgpPipeLine  *head  = NULL; 
struct  Pg  p Ra  ndotnC  on  t ex  t *rng  = NULL; 
struct  PgpSecKey  *secretKey  = NULL; 
struct  PgpPubKey  *pubLicKey  = NULL; 
struct  RingPooL  *ringpooL  = NULL; 


static  struct  PgpFiLe  * 

openFiLe  (void  *arg,  void  const  *base,  unsigned  num) 
{ 


n FILE  *fp; 

n char  fiLenameCPATH_MAX+1]; 

n char  nC203; 


n 

memcpy  (fiLename,  base,  strLen  ((char  *)base)+1); 

#i f def 

HSDOS 

n 

i f 

(num  > 1 ) { 

Q 

Et 

char  *name  = f i L e Na me C on t r a c t ( f i L e na me ) ; 

n 

n 

strcpy  (fiLename,  name); 

n 

n 

pgpHemFree(name) ; 

n 

Q 

if  (num  < 10) 

n 

n 

n sprintf  (n,  ".as%d". 

n u m ) ; 

n 

n 

e L se  if  ( num  < 100) 

n 

n 

n sprintf  (n,  ".a%d". 

num); 
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n 

n 

else  { 

n 

s 

n pgpAssert  (num  < 1000); 

fi 

n 

n sprintf  (n,  ".%d",  num); 

n 

□ 

} 

n 

n 

strcat  (filename,  n); 

n } 

#e  1 se 

a i f 

(num)  { 

n 

n 

sprintf  (n,  ".%d",  num); 

n 

n 

strcat  (filename,  n); 

n > 

#end i f 

n /*  Do  check  for  overwrite  on  single  part  file,  or  first  part  of 
n multi-part  file  only.  */ 

n if  (num  <=  1 &8  pg pT t y C h e c kO ve r w r i t e (arg,  filename)) 
n returnNULL; 

n fprintf  (stderr,  "Creating  output  file  %s\n",  filename); 
n fp  = fopen  (filename,  "wb"); 

n if  ( ! f p ) 

n n return  NULL; 

n return  pg p F i I e W r i t eOpe n (fp,  NULL); 

> 


/*  Call  pgpk  to  add  keys  */ 
static  int 

mainAddKeys  (void  *arg,  char  const  *filename) 
{ 

static  char  const  *prefix  = "pgpk  -a  "; 


struct  PgpTtyUI  *ui_arg  = (struct  PgpTtyUI  *)arg; 
struct  RingSet  *tset; 
char  *buf; 
int  err; 


(void)arg; 


buf  = pg pMemA I I o c ( s t r I e n ( p r e f i X ) + st r I en ( f i I ename  ) + 1); 
if  ( ! buf  ) 

n return  PGPERR_NOMEM; 


/* 

* 

* 

* 

* 

* 

* 

*/ 


Run  pgpk  with  keyrings  closed.  This  is  for  two  reasons. 
First,  some  OS's  won't  allow  renaming  and  such  of  open  files 
(e.g.  MSDOS)  and  so  we  must  close  ours  so  pgpk  can  add  keys. 
Second,  this  way  when  we  re-open  our  keyrings  we  will  get 
the  new  ones  with  the  keys  added,  which  may  help  in  further 
processing  the  input. 


ma i n C I os eKey r i n g s (1,  0); 


n fprintf  (stderr, 
"Copying  key  file  to  \"%s\' 
n strcpy(buf,  prefix); 

n strcat(buf,  filename); 

err  = system(buf); 
n pg pMem F r ee ( bu f ) ; 


running  pgpk  to  process  it...\n\n",  filename); 


/*  Re-open  keyrings  */ 

(void)mainOpenKeyrings  (ui_arg->env,  ringpool,  0,  &tset); 
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n u i _a rg-> r 1 ng s e t = tset; 
n if  (err) 

n n return  PGPERR_GENERIC; 

n return  0; 

> 


static  size_t 

mainGetPass  (char  *passp,  struct  UIArg  *ui_arg) 

{ 

a char  pa s s C P A S S L E N D ; 
n char  pa s s 2 C P AS S L E N D ; 

B 

n fprintf  (stderr,  "You  need  a pass  phrase  to  encrypt  the  fiLe\n"); 
n if  (pgpenvGetInt  ( u i _a r g->a r g . e n v , PG P E N V_B AT C H MO D E , NULL,  NULL)) 
a returnO; 

B do  { 

n B memset  (pass,  0,  sizeof  (pass)); 
n B memset  (pass2,  0,  sizeof  (pass2)); 

n B pgpTt y Ge t Pa s s (ui_arg,  pass,  s i z eo f ( pa s s ) ) ; 

a a fprintf  (stderr,  "Enter  same  pass  phrase  againXn"); 

n B pgpTtyGetPass  (ui_arg,  pass2,  sizeof(pass2)); 

n n if  (Istrcmp  (pass,  pass2)) 

B B B break; 

B B fprintf  (stderr, 

n B B "Error:  Pass  phrases  were  different.  Try  again. \n"); 
n > while  (1); 

n if  (Istrlen  (pass))  { 

n B fprintf  (stderr,  "Encryption  errorVn"); 

B B return  0; 

n } 

a memcpy  (passp,  pass,  sizeof  (pass)); 


D memset  (pass2,  0,  sizeof  (pass2)); 
n memset  (pass,  0,  s i z eo f ( pa s s ) ) ; 

n return  strlen  ((char  *)passp); 

> 


/* 

* Setup  a pipeline  based  upon  the  arguments  in  the  flags 
*/ 

static  struct  PgpPipeline  ** 

ma  i n S e t u p P i pe I i n e (struct  PgpPipeline  **pipehead, 
n B struct  PgpEnv  *env,  struct  Flags  *flags, 

n B struct  PgpRandomContext  *rng_p,  char  const  *in_name, 

n B struct  PgpFileRead  *readhead,  struct  UIArg  *ui_arg) 

{ 

n struct  PgpPipeline  *mod  = NULL,  **tail  = 8mod; 
n struct  PgpConvKey  convkey,  *convkeys  = NULL; 
n struct  PgpSigSpec  *sigspec  = NULL; 

n struct  Pgp Li t e ra I Pa r ams  IP,  * I i t e ra I Pa  rams  = SIP; 
n byte  const  *ptr; 
n size_t  len; 
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n if  ( f I ag s->mo ref L ag ) 
a o I i t e ra L Pa r ams->f i L ena me 
n else 

n n 1 1 1 e ra L Pa rams->f i L ename 


".CONSOLE"; 
i n _ n a m e ; 


n if  ( f I a g s-> c o n V e n t i ona L ) { 
n n size.t  passLen; 


a o /*  Use  passphrase  given  with  -z,  else  ask  for  one  */ 

a n if  (phraseC0]) 

n n n passLen  = s t r I en ( p h r a s e ) ; 

n n else 

n H n passLen  = mainGetPass  (phrase,  ui.arg); 


n n if  (IpassLen) 

a n n exitCLeanup  (-1); 


n n convkey.next  = NULL; 

n n c on V ke y . s t r i n gToKey  = 0; 

n n convkey.pass  = phrase; 

n n c on V key . pa s s L e n = passLen; 

n n convkeys  = Sconvkey; 

n > 


n / * 

n * Check  the  fiLe  to  see  if  this  is  text  or  binary  fiLe.  If 

n * it  binary,  then  force  binary  mode  and  check  for 

n * c omp r e s s i b i L i t y . If  it  is  not  comp r e s s i b L e , turn  off 

n * compression,  too. 

n * 

n * If  it  is  a PGP  fiLe,  ask  the  user  if  it  shouLd  be  treated 

n * as  a PGP  fiLe.  If  it  shouLd,  then  ignore  the  Literal  packet 

n * type . 

n * / 

n ptr  = pgp F i L eReadPee k (readhead,  8Len); 
n pg p Ra ndom AddBy t e s (rng_p,  ptr,  Len); 


n if  ( pgp F i L eTy peB i na ry  ( pg pe n vG e t S t r i ng  (env,  PG P E N V_ LAN G U AG E , 
n n n n n n NULL,  NULL), 

n n n ptr,Len)){ 

n n struct  PgpFiLeType  const  *ft; 

n n pgpenvSetInt  (env,  PG P EN V_T EXTHO D E , 0,  PG P E N V_PR I _ F 0 R C E ) ; 

n n ft  = pgpFiLeType  (ptr,  Len); 

n n if  (ft  &&  ! f t -> c omp r e s s i b L e ) 

n n n pgpenvSetInt  (env,  PG P EN V.COHPR E S S , 0, 

n n n n PGPENV_PRI_FORCE); 

n n if  ( pg p F i L eTy pePGP  (ptr,  Len))  { 

if  ( ! pg p e n vG e t I n t ( u i _a r g->a r g . en v , PG PEN V_B AT C H MO D E , 
n n NULL,  NULL))  { 

fprintf  (stderr, 

"This  is  a PGP  FiLe.  Treat  it  as  such?  Cy/N]\n"); 
n if  ( pgpTtyGetBoo L (0,  stderr)) 

n /*  No  LiteraL  if  this  is  a PGP  msg  */ 
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□ 

B 

B 

B 

LiteraLParams  = NULL; 

n 

n 

B 

> 

n 

□ 

> 

n 

> 

n 

i f 

(flags- 

> s i g n ) { 

a 

B 

un i on 

RingObject  *ringobj; 

n 

B 

char  const  *myname  = pg  p e n vG  e t S t r i n g (env,  PG  P E N\/_M  Y N AM  E , 

□ 

B 

B 

B 

n n NULL,  NULL); 

a 

B 

i nt 

err,  arg; 

a 

B 

i f 

(IsecretKey)  { 

a 

B 

B 

r i 

ngobj  = r i n g La t e s t S e c r e t ( u i _a r g->a r g . r i ng s e t , 

n 

B 

B 

B 

n n myname,  time(NULL), 

o 

B 

B 

fl 

n n PGP_PKUSE_SIGN)  ; 

a 

B 

B 

i f 

(Iringobj)  { 

n 

B 

B 

B 

fprintf  (stderr. 

B 

B 

B 

fl 

n n "Cannot  find  a private  key  for  signing: 

B 

B 

B 

B 

n n myname); 

B 

B 

B 

B 

exitCLeanup  (-1); 

B 

n 

B 

> 

B 

B 

B 

secretKey  = r i n g S e c S e c Key  ( u i _a r g ->a r g . r i n g s e t , 

B 

B 

B 

fl 

a n ringobj,  PG P_ PKU S E_ S I G N ) ; 

B 

B 

B 

r i 

n g Ob j e c t Re L ea s e (ringobj); 

B 

B 

fl 

i f 

([secretKey)  { 

B 

B 

B 

B 

fprintf  (stderr. 

B 

n 

B 

fl 

n "Cannot  convert  to  private  key\n"); 

B 

B 

B 

B 

exitCLeanup  (-1); 

B 

B 

fl 

> 

B 

B 

B 

i f 

( ! s e c r e t Key-> s i g n ) ( 

B 

B 

B 

fl 

fprintf  (stderr. 

B 

B 

B 

B 

n "Private  Key  cannot  signXn"); 

B 

B 

fl 

B 

exitCLeanup  (-1); 

B 

B 

B 

> 

B 

B 

B 

err  = pg pT t y U n L o c kS e c key  C &u i _a r g->a r g , ringobj. 

B 

B 

B 

fl 

n n secretKey, 

B 

B 

B 

" 

A private  key  is  required  to  make  a signature.Xn"); 

B 

B 

fl 

if 

(err)  ( 

B 

B 

fl 

fl 

fprintf  (stderr, "Cannot  unLock  private  key\n"); 

B 

B 

B 

B 

exitCLeanup  (err); 

B 

B 

fl 

> 

B 

B 

> 

% s \ n 


a a arg  = pgpenvGetInt  (env,  PG PE N V_T E XTMO D E , NULL,  NULL); 

n n arg  = arg  ? PG P_S I GT Y P E_T E XT  : PG P_ S I GT Y P E_B I N A R Y ; 


n n sigspec  = pgpSigSpecCreate  (env,  secretKey,  arg); 
n } 


Q 

El 

D 

n 

D 

□ 


/*  This  wiLL  find  *ALL*  keys  that  match  *ALL*  recipients  */ 
if  ( f L a g s ->n urn r e c i p s ) f 

n struct  RingPooL  *pooL  = ringSetPooL  { u i _a r g ->a r g . r i ng s e t ) ; 
n int  i = f L a g s->n um r e c i p s ; 
a i nt  e; 

n struct  RingSet  *ringset; 
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n n struct  Ringlterator  *ringiter; 
n n union  RingObject  *ringobj; 

n n struct  PgpPubKey  *temp; 

o a if  (!pooL)  { 

n a a fprintf  (stderr,  "No  keyrings  to  use\n"); 
n n n exitUsage  (-1); 

n n > 


a a if  (!  pubLicKey)  { 
n n n char  const  *companyKey; 


ringset  = r i ng S e t C r e a t e (pool); 
if  (!ringset) 

n exitUsage  ( r i n g Poo  I E r r o r ( poo L ) ->e r r o r ) ; 
while  ( i — ) { 

n e = r i ngSe t F i L t e r Spe c ( u i _a r g ->a r g . r i ng s e t , 
n n ringset, 

n n fLags->recipsCi!], 

n n PGP_PKUSE_ENCRYPT)  ; 

if  ( e==0 ) { 
n fprintfCstderr, 

n n n "No  encryption  keys  found  for:  %s\n", 

n n n flags ->recipsCiD); 

a e X i t C I e a nup ( -1  ) ; 

> 

if  (e  <=  0) 
n exitUsage(e); 


D 
□ 
n 
n 
□ 

□ 

□ 

Q 
□ 

Q 
Q 
} 

if  (pgpenvGetInt  (env,  PG P E N V_ E N C R Y PTTO S E L F , 
n n NULL,  NULL))  { 

n char  const  *myname  = 

n n pg pe n vG e t S t r i ng  (env,  PG P E N V_H YN AM E , 
n n n n NULL,  NULL); 

n /*  Add  myself  to  the  list  of  recipients  */ 


□ 

n 

n 

Q 

D 

□ 

D 

□ 

Q 

n 

n 

n 

o 

n 

} 

/* 

* 

* 

* 

* 

* 

* 


ringobj  = r i ng La t e s t S e c r e t 
n ( u i _a r g->a r g . r i ng s e t , myname, 
n time (NULL),  PGP_PKUSE_ENCRYPT); 
if  (Iringobj)  ( 

□ 
n 
□ 
n 
> 


fprintf  (stderr, 
n "Cannot  find  key:  %s\n' 

n myname ) ; 

exitCleanup  (-1); 


if  ( r i ng S e t AddOb j e c t (ringset,  ringobj))  { 


fprintf  (stderr, 

n "Cannot  add  my  key  to  set\n"); 
exitCleanup  (-1); 


This  is  our  version  of  "Commercial  Key  Escrow". 

A company  can  set  the  CompanyKey  in  the  site-wide 
configuration  file  and  it  will  be  added  to  the 
recipient  list  for  all  encrypted  messages.  Then 
again,  the  user  can  override  the  setting  in  their 
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□ n 

□ n 

□ n 

D □ 

Q □ 

Q D 

n n 

n n 

□ n 

□ n 

a a 

n n 

n n 

□ a 

a n 

□ D 

n n 


n * own  config.txt  or  on  the  command  Line, 
n * / 

n companyKey  = pg pe n vG e t S t r i ng  (env,  PG P E N V_ C OH P AN YKE Y , 
n n n n NULL,  NULL); 

n if  (companyKey  SS  *companyKey)  { 

an/*  Add  the  company  key  to  the  recipient  List  */ 
n n e = r i ng  S e t F i L t e r S p e c ( u i _a  r g ->a  r g . r i ng  s e t , 

a n n n ringset, 

n n n n companyKey, 

n n n n PGP_PKUSE_ENCRYPT); 

n a if(e<=0) 

n n n exitUsage(e); 

n > 

n r i ng S e t F r e e z e (ringset); 
n ringiter  = r i n g I t e r C r e a t e (ringset); 
n if  (Iringiter) 

n n exitUsage  ( r i ng Poo L E r ro r ( poo L ) ->e r ro r ) ; 


n n n 

□ □ □ 

n n o 

□ n n 

□ n □ 

□ □ □ 

□ n n 

□ as 

a a a 

ana 
ana 
ana 
ana 
a a a 

a a a 

a a a 

nan 
ana 
ana 
nan 
a a a 

ana 
ana 
ana 
any 
a } 


whiLe  ((e  = r i n g I t e r N e x t Ob j e c t (ringiter,  1))  > 0)  { 
ringobj  = r i ng I t e r C u r r e n t 0 b j e c t ( r i ng i t e r , 1); 
if  ( r i n g 0 b j e c t Ty pe  (ringobj)  !=  R I NGT Y P E_KE Y ) ( 
fprintf  (stderr, 

n "Got  a ring  object  of  type  %d\n", 

n r i n g 0 b j e c t Ty pe  (ringobj)); 

continue; 

} 

/*  Determine  whether  this  key  is  OK  to  use 
for  encryption  */ 

if  ( r i ngT t y KeyOKToEn c ry p t ( &u i _a r g->a r g , ringset, 
n n n ri ngob j ) ) { 

temp  = ri ngKeyPubKey  (ringset,  ringobj, 
a n n PGP_PKUSE_ENCRYPT); 

if  (temp)  { 

temp->next  = pubLicKey; 
pubLicKey  = temp; 

> 

} 

} 

r i n g I t e r D e s t r oy  (ringiter); 
r i n g S e t D e s t r oy  (ringset); 
if  ( e < 0 ) 

exitUsage(e); 


n / * 

n * Don't  proceed  if  couLdn't  encrypt  for  anyone,  otherwise  we  send 
n * out  pLaintext. 

n * / 

n if  ( f L a g s->num r e c i p s &&  !pubLicKey)  { 
n n fprintf  (stderr, 

n n n n "No  vaLid  keys  found  for  any  recipients,  exiting. ..\n"); 
n n exitCLeanup  (-1); 

n > 


n taiL  = pg p E n c r y p t P i pe L i n e C r e a t e (taiL, 
n n n n n n n n n env, 
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Et 

B 

B 

B 

B 

B 

B 

B 

B 

NULL, 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

rng_p. 

B 

B 

B 

B 

B 

B 

B 

B 

B 

convkeys. 

B 

B 

B 

B 

B 

B 

B 

B 

B 

publicKey, 

B 

B 

B 

B 

B 

B 

B 

B 

B 

si gspec. 

B 

B 

B 

B 

B 

B 

B 

B 

B 

literalParams, 

B 

B 

B 

B 

B 

B 

B 

B 

B 

flags->sepsig); 

n if  (tail) 

n n *pipehead  = mod; 

n return  tail; 

> 

/* 

* Process  the  flags  that  were  set.  This  builds  the  appropriate 

* pipelines  and  processes  the  input  files. 

*/ 

static  int 

ma i nProcess F lags  (struct  PgpUICb  *ui,  struct  UIArg  *ui_arg, 
n n struct  PgpEnv  *env,  int  argc,  char  *argvCD, 

n n struct  Flags  *flags) 

{ 


n struct  PgpPipeline  mod; 

n struct  PgpPipeline  **tail  = NULL; 

n struct  PgpEnv  *tempenv  = NULL; 
n int  retval  = PGPERR_OK,  err; 
n int  encrypting; 

n int  armoring; 

n int  filter  = f I a g s-> f i 1 1 e r mod e ; n / * Assign  to  0 or  2 */ 
n 

a if  ( f I a g s-> c o n V e n t i ona  I S&  f I a g s ->n urn r e c i p s ) 
n n exitArgError  ("Cannot  combine  -c  and  -e  arguments"); 


if  (large)  { 
n f i 1 1 e r + + ; 

n fprintf  (stderr,  "No  files  to  use.  Using  stdin\n\n"); 
n argc=-1; 

> 


n memset  (&mod,  0,  sizeof  (mod)); 
n mod. name  = "PGP  Application"; 


n rng  = pgpRandomCreate  (); 
n if  ( ! rng  ) 

n n exitUsage  ( PGPERR_NOMEM ) ; 

n encrypting  = ( f I a g s ->n urn r e c i p s | | f I a g s -> c on v en t i ona  I | | 
n n ( f I a g s->doa rmo r 8S  ! f I a g s->d e c r y p t ) || 

n n f I a g s-> s i g n ) ; /*  Encryption  */ 

n armoring  = pgpenvGetInt  (env,  PGPENV_ARMOR,  NULL,  NULL); 


n /* 

n * Loop  through  input  files, 

n * / 

n for  (;  arge;  arge — , argv++)  { 
n n FILE  *input; 

n n struct  PgpFileRead  *context 

a n char  na  me  C P AT  H _M  AX  + 1 II  ; 


NULL; 
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n n char  *fn  = NULL; 

n n char  const  *outfiLe  = NULL; 


n 

n 

i f 

(argc  < 0)  { 

n 

n 

n 

pgpAssert  (filter  & 1); 

n 

n 

o 

argc  = 1 ; 

n 

□ 

n 

input  = stdin; 

n 

n 

> 

else  ( 

n 

n 

□ 

input  = fopen  (argvC0],  "rb"); 

n 

n 

B 

if  ( ! i nput ) { 

n 

n 

B 

n fprintf  (stderr,  "Cannot  open  i 

n 

n 

B 

a a argvC0]); 

n 

□ 

fl 

a continue; 

tt 

D 

B 

> 

n 

n 

> 

u 

n 

i f 

( ! tempenv) 

n 

n 

B 

tempenv  = pgpenvCopy  (env); 

n 

n 

i f 

(ttempenv)  { 

Q 

n 

B 

retval  = PGPERR_N0HEH; 

Q 

□ 

B 

break; 

a 

a 

>n 

a a 

n 

a 

context  = pgp F i 1 e Rea dC r ea t e (input,  ((f 

n 

u 

i f 

( ! cont  ext ) ( 

□ 

a 

B 

fprintf  (stderr,  "pgpFiLeReadCreate 

Q 

a 

B 

fcLose  (input); 

n 

a 

B 

retval  = PG P E R R_N OH E M ; 

n 

n 

B 

break; 

n 

a 

> 

Q 

a 

i f 

( f 1 ag s->dec ry p t ) ( 

n 

n 

B 

if  ( f 1 a g s->doa r mo r ) { 

□ 

a 

B 

a /*  Want  to  just  strip  off  ascii 

□ 

a 

B 

a u i _a r g->a r g . c omm i t s = 0; 

□ 

a 

E 

> else  { 

n 

n 

B 

a /*  Unwind  just  one  layer  of  PGP 

n 

D 

B 

a ui _arg->arg . commi ts  = 1; 

n 

n 

B 

} 

n 

n 

> 

else  { 

n 

n 

B 

/*  Unwind  all  layers  if  decrypting  ' 

□ 

Q 

B 

u i _a r g->a r g . c ommi  t s = -1; 

Q 

n 

> 

n 

n 

i f 

(encrypting)  { 

n 

n 

B 

char  const  *in_name; 

n 

n 

B 

if  (filter  & 1) 

£t 

n 

B 

a in_name  = "stdin"; 

n 

D 

B 

else 

D 

D 

B 

a in_name  = argvC0D; 

Q 

n 

B 

n 

n 

fl 

if  ( f 1 a g s->ou t f i 1 e ) 

a 

D 

B 

a outfile  = flags->outfile; 

n 

□ 

fl 

else  if  (filter)  { 

n 

□ 

fl 

a outfile  = NULL; 

n 

a 

fl 

} else  { 

u 

□ 

fl 

a char  *outname  = argvC0!]; 

1)); 
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#ifdef  MSDOS 


Q 

B 

B 

fl 

outname  = fiLeNameContract(outname); 

# e nd i f 

□ 

B 

B 

fl 

f n 

= f i 1 eName Ex t end  (outname. 

Q 

B 

B 

fl 

n 

n (armoring  ? ".asc"  : 

n 

B 

B 

fl 

fl 

n (f lags->si gn  &S 

n 

B 

B 

fl 

fl 

n f 1 a g s-> s e p s i g ) ? ".sig 

D 

fl 

B 

B 

fl 

n : ".pgp”)); 

n 

B 

fl 

fl 

strncpy  (name,  fn,  sizeof  (name)); 

n 

B 

B 

fl 

pgpHemFree  (fn); 

n 

B 

fl 

fl 

outfiLe  = name; 

n 

B 

fl 

> 

□ 

B 

fl 

tail  = 

ma i n S e t u p P i p e 1 i n e (Shead,  tempenv. 

n 

B 

B 

fl 

fl 

n flags,  rng,  in_name. 

n 

B 

B 

B 

fl 

n context,  ui_arg); 

n 

B 

> 

else 

{fl 

/*  Decryption  */ 

n 

B 

fl 

/* 

Choose  an  output  name  */ 

n 

fl 

B 

i f 

( ! ui 

_a r g->a r g . p r 0 1 e c t _n a me ) { 

□ 

fl 

fl 

fl 

/* 

Allow  -0  to  override  -f  */ 

Q 

B 

□ 

fl 

1 f 

( f 1 ag  s->ou t file)  { 

n 

fl 

fl 

fl 

n 

u i _a rg->a rg . out  name  = flags->outf 

n 

fl 

fl 

n 

> else  if  (filter)  { 

Q 

fl 

fl 

fl 

fl 

/*  use  stdout  */ 

n 

B 

fl 

fl 

fl 

u i _a r g->a r g . p r 0 t e c t _na me  = -1; 

Q 

fl 

B 

B 

> else  { 

n 

fl 

fl 

fl 

fl 

fn  = f i 1 e Na me C on t r a c t (argvC03); 

□ 

fl 

fl 

fl 

fl 

strncpy  (name,  fn,  sizeof  (name)) 

□ 

fl 

fl 

B 

fl 

pgpMemFree  (fn); 

n 

B 

□ 

Q 

fl 

u i _a rg->a rg . out  name  = name; 

n 

fl 

fl 

fl 

> 

u 

B 

B 

> 

n 

fl 

fl 

if 

(!head)  { 

n 

B 

fl 

fl 

tail  = Shead; 

n 

B 

fl 

fl 

i f 

(filter  S 2)n/*  if  -f  is  used  */ 

n 

B 

fl 

fl 

B 

tail  = pg pBu f f e r Hod C r e a t e ( 

n 

fl 

fl 

B 

fl 

n tail,  SpgpFlexFifoDesc); 

n 

B 

fl 

□ 

t a i 

1 = pg pDe c r y p t P i pe 1 i ne C r ea t e (tail 

n 

fl 

fl 

B 

B 

n n n NULL,  u i , 

n 

B 

fl 

fl 

fl 

n n n ui_arg); 

n 

B 

B 

B 

B 

B 

fl 

fl 

i f 

( ! head) 

B 

B 

B 

B 

fl 

exit  Cleanup  (PGPERR_NOHEH); 

B 

B 

fl 

> 

B 

fl 

} 

B 

fl 

if 

( ! t a i L ) 

{ 

B 

B 

fl 

f p r i n t f 

(stderr,  "Cannot  Setup  Processing 

B 

fl 

n 

exitCLeanup  (-1); 

B 

fl 

} 

B 

fl 

if 

(encrypting)  t 

B 

fl 

fl 

i f 

(toutfile)  { 

B 

fl 

fl 

B 

pgpAssert  (filter); 

B 

fl 

fl 

fl 

i f 

( ! pg p F i 1 e W r i t e C r e a t e (tail. 

B 

B 

fl 

fl 

fl 

n n pg p F i 1 eW r i t eOpen 

B 

B 

B 

fl 

fl 

n n (stdout,  NULL),  0))  { 

B 

fl 

□ 

B 

fl 

fprintf  (stderr. 

le; 


t empen V, 


PipeLineXn"); 
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n 

n 

n 

□ 

n B "pgpFiLeWrite  faiLedXn"); 

□ 

n 

Q 

□ 

n head->teardown  (head); 

n 

n 

n 

n 

n head  = NULL; 

n 

□ 

n 

n 

n continue; 

n 

n 

n 

n 

} 

Q 

Q 

a 

> eL 

s e { 

n 

n 

n 

n 

if  ( ! pg p A r mo r F i L e W r i t e C r e a t e (taiL 

, open  F i L e 

D 

n 

n 

n 

(void  *)  &u i _a rg->a rg , outfiLe))  { 

n 

Q 

n 

Q 

n fprintf  (stderr. 

n 

n 

u 

n 

n " pg p A r mo r F i L e W r i t e C r e a t e faiLed\n"); 

n 

□ 

u 

n 

n h e a d-> t e a r do wn  (head); 

s 

n 

n 

Q 

n head  = NULL; 

□ 

n 

n 

n 

n continue; 

□ 

n 

n 

□ 

} 

n 

Q 

Q 

> 

n 

n 

> 

n 

Q 

retva  L = 

pgpFiLeReadPump  (context,  head); 

n 

Q 

i f 

( ret va  L ) 

n 

n 

n 

fprintf  (stderr,  "%s\n",  pgperrString 

(retvaL)); 

n 

n 

i f 

(retvaL)  { 

□ 

□ 

n 

err 

= pgp F i L e Rea dC L os e (context,  head) 

/ 

n 

n 

Q 

if  (err)  { 

□ 

n 

n 

n 

fprintf  (stderr,  "%s\n",  pgperrString  (err)) 

n 

n 

n 

> 

n 

n 

> 

n 

n 

pg p F i L e R ea d D e s t roy  (context); 

□ 

n 

i f 

(encrypting)  { 

□ 

Q 

n 

if  ( 

! ret va  L ) { 

o 

n 

n 

a 

retvaL  = h e a d-> s i z e Ad v i s e (head,  0); 

n 

□ 

a 

n 

if  (retvaL) 

n 

n 

Q 

n 

n fprintf  (stderr,  "%s\n". 

n 

n 

n 

n 

B B pgperrString  (retvaL)); 

n 

n 

D 

> 

n 

n 

n 

head 

->teardown  (head); 

n 

a 

n 

head 

= NULL; 

n 

n 

> 

n 

a 

i f 

(retvaL) 

n 

a 

n 

break; 

n 

> 

Q 

i f 

( [ ret va  L 

&S  head)  L 

n 

n 

r e t va  L = 

h e a d-> s i z e Ad V i s e (head,  0); 

Q 

n 

i f 

(retvaL) 

tt 

n 

n 

fprintf  (stderr,  "%s\n",  pgperrString 

(retvaL)); 

n if  (head) 

n n h ea d-> t e a r do wn  (head); 

n head  = NULL; 

n if  ( rng  ) 

n n pg p Ra n domD e s t roy  (rng); 

n rng  = NULL; 

n i f ( t empenv ) 

n B pg pe n V D e s t r oy  (tempenv); 
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n tempenv  = NULL; 

n return  retval; 

> 

/*  Clean  up  allocated  space  (like  the  pipeline  and  the  rng)  on  exit  */ 
static  void 
mainExit  (void) 

{ 

n if  (head) 

n n head->teardown  (head); 

n head  = NULL; 

n if  ( rng  ) 

D n pgpRandomDestroy  (rng); 

n rng  = NULL; 

n if  (secretKey) 

n n pgpSecKeyDestroy  (secretKey); 

n secretKey  = NULL; 

n while  (publicKey)  { 

a n struct  PgpPubKey  *tenip  = p u b I i c Key->  n ex  t ; 
a n pgpPubKeyDestroy  (publicKey); 

n n publicKey  = temp; 

n } 

n if  (ringpool) 

n n r i ng Poo  I D e s t r oy  (ringpool); 

n ringpool  = NULL; 

n if  (passcache) 

n n pgpPassCacheDestroy  (passcache); 

n passcache  = NULL; 

n memset  (phrase,  0,  sizeof  (phrase)); 

> 

i nt 

appMain  (int  argc,  char  *argvC3) 

{ 

n struct  PgpUlCb  ui; 

n struct  UIArg  ui_arg; 

n struct  Flags  flags; 

n struct  PgpEnv  *env; 

n struct  RingSet  *tset; 

n char  const  *p; 

n int  retval,  prog_code  = 0; 

n PG P I n VO ke dTy p e i n vo ked_t y pe ; 

n /*  Setup  my  exit  function  to  clean  myself  up  */ 
n atexit  (mainExit); 

n /*  Setup  the  UI  callback  functions  */ 
n ui. message  = pgpT t y Mes sa ge ; 
n ui.doCommit  = pgpTty DoCommi t ; 
n ui.newOutput  = pg pT t y N e wOu t p u t ; 

n ui.needinput  = pgpTtyNeedInput; 
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n ui.sigVerify  = pgpTtySigVerify; 

n ui.eskDecrypt  = pgpTtyEskDecrypt; 

n ui. annotate  = NULL; 

n /*  Setup  the  TTY  UI  argument  */ 

n u i _a r g . a rg . ve r bo s e = 1; 

n u i _a r g . a rg . f p = stderr; 

n ui_arg.arg.ringset  = NULL; 

n u i _a  rg  . a r g . s h o wpa  s s = 0; 
n ui_arg.arg. commits  = -1; 

n ui_arg.arg.addKeys  = mainAddKeys; 

n u i _a rg  . a rg . p r o t e c t _name  = 0; 

n /*  Initialize  the  application  from  config  files,  etc.  */ 
a invoked_type  = getInvokedType(argvC0Il); 
n s w i t c h ( i n V o ke d_ t y pe  ) { 

n n case  PGPencrypt: 


n 

n 

Q 

prog_code  = EXIT_PR0G 

_PGPE; 

n 

Q 

Q 

break; 

□ 

□ 

n 

n 

a 

case 

PG P s i g n : 

a 

n 

n 

prog_code  = EXIT_PR0G 

_PGPS; 

n 

Q 

n 

break; 

s 

n 

case 

PGPveri fy: 

n 

Q 

D 

prog_code  = EXIT_PR0G 

_PGPV; 

D 

a 

n 

break; 

o 

n 

case 

PGPold: 

n 

Q 

Q 

prog_code  = EXIT_PR0G 

_PGP0; 

n 

n 

n 

break; 

n 

case 

PGPkeys : 

□ 

□ 

n 

/*  XXX  This  shouldn't 

call  exi t ArgError*/ 

n 

□ 

n 

ex  i t A rg E r ro r ( " pgpk  is 

a separate  program,  not  a symlink  to  pgp!"); 

n 

□ 

n 

/*N0T  EXECUTED*/ 

a 

n 

n 

break; 

n 

case 

PGPraw : 

a 

n 

a 

exi t InvokedRaw(  ) ; 

n 

u 

a 

/*N0T  EXECUTED*/ 

u 

□ 

a 

break; 

n 

default: 

a 

n 

a 

/*  XXX  This  shouldn't 

call  ex i t A r g E r r 0 r * / 

n 

Q 

a 

exitArgError(" Unknown 

symlink."); 

□ 

n 

a 

/*N0T  EXECUTED*/ 

n 

n 

a 

break; 

n 

> 

n retval  = pgpInitApp  (Senv,  Sargc,  &ui,  &ui_arg,  prog_code,  0); 
n if  (retval)  { 

a n fprintf  (stderr,  "pgpInitApp  failed:  %d\n",  retval); 
n n goto  error; 
n } 

n /*  Now  initialize  the  values  that  need  initialization  */ 
n u i _a r g . a r g . e n V = env; 
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B u i _a r g . a rg . pa s s c a c h e = passcache  = pgpPassCacheCreate  (env); 

B u i _a rg . a rg . ve rbo s e = pg p e n vG e t I n t ( en v,  PG P E N V_V E RBO S E , NULL,  NULL); 

B /*  Check  the  exiration  date  on  the  application  */ 

B e X i t Ex p i r y C h e c k (env); 

#if  d e f i n ed ( U N I X ) ||  definedCVHS) 

B umask(077);  /*  Make  files  default  to  private  */ 

# end i f 


B /*  Grab  the  pass  phrase  from  the  PGPPASS  Env  Var  */ 
B p = getenv  ("PGPPASS"); 

B if  ( p ) 

B B pgpPassCacheAdd  (passcache,  p,  strlen  (p)); 

B /*  XXX  add  PGPPASSFD  here?  */ 


B memset  (Sflags,  0,  sizeof  (flags)); 

B /*  XXX  This  is  never  freed  */ 

B flags. recips  = (char  **)malloc  (argc  * sizeof  ( * ( f I a g s . r e c i p s ) ) ) ; 


n 

n 

□ 

□ 

n 

n 

□ 

□ 

n 

□ 

n 

□ 

n 

n 

□ 

n 

Q 

n 

n 

n 

□ 

n 

□ 

n 


/* 

Now, 

read  the  argument  list  */ 

s w i 

t c h ( i n VO ke d_ t y pe ) { 

case 

PGPencrypt : 

n 

D 

ma i nPa r se En c ryp t A rg s ( &u i , &ui_arg,  env,  &argc,  argv. 

Sflags); 

Q 

n 

break; 

case 

PGPsi gn : 

n 

n 

ma i n Pa r s e S i g n A r g s ( &u i , &ui_arg,  env,  Sargc,  argv,  Sflags); 

n 

s 

break; 

case 

PGPveri fy: 

n 

Q 

ma i nPa r se Ve r i f yA rg s ( &u i , &ui_arg,  env,  Sargc,  argv. 

Sflags); 

u 

n 

break; 

case 

PGPold : 

n 

n 

/*XXX  this  probably  needs  to  be  a separate  exe,  but 

I'm  not 

n 

n 

*100%  sure  what  to  do  about  this,  now.  -BAT 

n 

n 

*/ 

n 

n 

mainParse262Args(&ui,  &ui_arg,  env,  Sargc,  argv,  Sflags); 

n 

n 

break; 

□ 

case 

Unknown: 

n 

case 

PGPraw : 

n 

case 

PGPkeys : 

o 

n 

/*GCC's  overly  zealous  preparser  warns  us  of  these. 

even  though*/ 

n 

Q 

/*we  can't  get  here...*/ 

n 

n 

break; 

} 


B ui_arg.arg.showpass  = pgpenvGetInt  (env,  PGPENV_SHOWPASS,  NULL,  NULL); 
B ui_arg.arg.moreflag  = flags. moreflag; 

B u i _a r g . a r g . pa g e r = getenv  ("PAGER"); 


B if  (!ringpool) 

B n ringpool  = r i ng Poo  I C r e a t e ( e n v ) ; 

B if  (Iringpool)  ( 

B B fprintf  (stderr,  "Cannot  create  RingPool\n"); 
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a n retvaL  = PG P E R R_N OH E M ; 
n n goto  error; 

n > 

a retvaL  = ma i n 0 pe n Key r i ng s (env,  ringpooL,  0,  Stset); 
n u i _a r g . a r g . r i n g s e t = tset; 
n if  (retvaL) 
n n goto  error; 

n /*  Now  process  the  fLags  */ 

n retvaL  = mainProcessFLags  (&ui,  &ui_arg,  env,  argc,  argv,  SfLags); 
a 

n exitCLeanup  (retvaL); 
error: 

n return  (retvaL); 

} 

static  PG P I n VO ke d Ty pe  g e t I n vo ke dTy p e ( c h a r *Argv0) 

{ 

char  *p  = NULL; 

PG P I n VO ke dTy p e invoked_type  = Unknown; 


/♦First  of  aLL,  strip  off  any  Leading  path  info.  We  don't  care  WHERE  we 
♦are,  just  WHAT  we  are: 

♦/ 

n invoked_type  = PGPencrypt; 
n if((p  = pg p F i L e Na meTa i L ( A r g v0  ) ) ) { 


n 

n 

i 

f(strncasecmp(p,  "pgp". 

3)  ==  0)  { 

□ 

□ 

Q 

P + 

= 3; 

n 

□ 

n 

□ 

n 

n 

s w i 

tch(toLower(^p)) 

{ 

□ 

n 

n 

0 

case 

1 e < : 

o 

□ 

n 

0 

0 

i nvoked_type 

= PGPencrypt; 

n 

a 

□ 

0 

0 

break; 

n 

a 

n 

0 

0 

n 

n 

n 

0 

case 

's': 

n 

a 

n 

0 

0 

invoked_type 

= PGPsign; 

□ 

a 

o 

0 

o 

break; 

n 

Q 

n 

0 

n 

n 

n 

0 

case 

' V ' : 

n 

D 

n 

0 

o 

invoked_type 

= PGPverify; 

□ 

a 

n 

0 

o 

break; 

□ 

a 

0 

0 

0 

n 

n 

0 

o 

case 

1 1 . 

D 

a 

0 

0 

0 

i f ( s t r n ca s e c mp ( p , "_oLd",  4) 

n 

a 

0 

o 

0 

n i nvoked_ 

type  = PGPoLd; 

□ 

n 

0 

o 

0 

e L s e 

a 

n 

0 

0 

0 

n i nvoked_ 

type  = Unknown; 

n 

n 

0 

0 

0 

break; 

a 

o 

0 

0 

0 

□ 

n 

o 

0 

case 

' k ' : 

□ 

n 

o 

0 

0 

/♦Huh?  They 

ran  us  as  keys! 

□ 

n 

0 

0 

0 

i nvoked_type 

= PGPkeys; 

□ 

a 

0 

0 

0 

break; 

D 

D 

0 

0 

0 

n 

n 

0 

o 

case 

' \0'  : 

□ 

n 

0 

0 

0 

invoked_type 

= PGPraw; 
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c 


break; 


def au  Lt : 

n invoked_type 


Unknown; 


return(invoked_type); 


static  void  e x i t I n vo ked Ra w ( vo i d ) t 
fprintfCstderr, 

n n n "PGP  is  now  invoked  from  different  executables  for  different 

'operations:\n\n"); 

'pgpe  Encrypt  (including  Encrypt/Sign)\n"); 

'pgps  Sign\n"); 

'pgpv  V e r i f y / De c r y p t \ n " ) ; 

'pgpk  Key  managementXn"); 

'P9P_old  PGP  2.6.2  command-line  s i mu  I a t o r \ n \ n " ) ; 


fprintfCstderr, 
fprintfCstderr, 
fpri ntfCstderr, 
fpri ntfCstderr, 
fpri ntfCstderr, 
fprintfCstderr, 


fprintfCstderr, 

n n n "See  each  application's  respective  man  page  or  the  general  PGP"); 
n fprintfCstderr,  " documentationXnfor  more  information. \n"); 
exitCleanup(PGPEXIT_ARGS); 


/* 

* Local  Variables: 

* tab-width:  4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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# 

# apps / pgp k/Ma ke f i L e . i n 

# 

# Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
ft 

ft  $Id:  Ma  ke  f i L e . i n , V 1.5. 2. 2 1 997/06/07  09:49:09  mhw  Exp  $ 
ft 

PROG  = pgpk 

INSTALLPROGS  = $(PR0G) 


C0MM0N=. . / common 

LOCALINCLUDES  = -I$(COMMON)  - 1 $ C s r c d i r ) / $ ( C OMMO N ) 
LOCALOBJS=  $( COMMON) /pgpOpt  . o 


OBJS 

= $(L0CAL0BJS)\ 

n 

keyserver.oX 

Q 

pgpk. o\ 

n 

pgpkUl.oN 

n 

pgpkInit.oX 

n 

pgpkExit.oX 

n 

pgpkKeyGen.o\ 

n 

u r L . 0 

a L L : : $( PROG) 
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/* 

* keyserver.c 

★ 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  key s e r V e r . c , V 1.1. 2. 3 1997/06/07  09:49:09  mhw  Exp  $ 

*/ 


# i n c L ude 

"config.h" 

#incLude 

<assert . h> 

#incLude 

<ctype.h> 

#incLude 

<s  t d i 0 . h> 

#incLude 

<string.h> 

#if  HAVE. 

,S YS.TYPES.H 

# i n c L u d e 

<sys/types. 

h> 

# e nd i f 

#incLude 

<unistd.h> 

#incLude 

<sys/ socket 

. h> 

# i n c L ud e 

<netinet/in 

. h> 

#if  HAVE. 

ARPA.INET.H 

#incLude 

<arpa/inet. 

h> 

#endi f 

#incLude 

<netdb. h> 

# i n c L ud e 

" pgpKey DB . h 

" 

#i nc  Lude 

"pgpMem. h" 

#incLude 

"pgpUserlO. 

h" 

#i nc  Lude 

"keyserver . 

h" 

struct  e 

rror  tabLe 

{ 

const  char  * S e r ve r Me s s a g e ; 
const  char  *0 u t pu t Me s s a g e ; 
BooLean  IsError; 
>ErrorTabLeCD  = 


{"Key  bLock  corrupt:  pubkey  decode  faiLed", 

"Key  bLock  invaLid  at  server. \n",  TRUE>, 

{"Key  bLock  added  to  key  server  database. \n  New  pubLic  keys  added:  ", 
"%i  pubLic  key(s)  added. \n",  FALSE>, 

{"Key  bLock  in  add  request  contained  no  new\n\ 
keys,  userid's,  or  signatures.", 

"The  keyserver  aLready  contained  aLL  the  keys,  userids  and  signatures, 
FALSE}, 

{"\0",  0,  0} 

>; 


struct  _e r r o r _ s t r i n g _ t a b L e { 
unsigned  Long  RawCode; 
unsigned  Long  StringID; 

> E r r ToS t r i ngTa b L e C } = 

{ 

#if  0 

/*The  commented  out  errors  are  internaL  errors  or  probLems  we  shouLdn't  see 
*(ie,  if  I D S _E R R_U N AB L E_T0_ LO A D_ LI B R A R Y happened,  we  wouLdn't  be  Loaded  to 


CCCHK:646ed500eeb9c88c7aa1a12cbff7100558972d8a14df63b83332870c7b70936a2:: 
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*dispLay  the  error.) 

*/ 

{ERR_UNABLE_TO_LOAD_LIBRARY, 
/*  {ERR_NO_FUNCS_AVAI LABLE, 

/*  {ERR_LIBRARY_NOT_LOADED, 

/*  < ERR_BAD_PARAM, 

/*  {ERR_FUNCTION_NOT_IN_LIB, 
{ERR_USER_NOT_FOUND, 
{ERR_USER_CANCEL, 
{ERR_KEYRING_FAILURE, 
{ERR_HALLOC_FAILURE, 
{ERR_DATA_WAIT_TIMEOUT, 
{ERR_SOCKET_ERROR, 
{ERR_H0ST_N0T_F0UND, 
{ERR_UNABLE_TO_OPEN_SOCKET, 
{ERR_HANY_NOT_FOUND, 
{ERR_NO_RESPONSE_FROM_SERVER, 
#end i f 
{0, 

>; 


IDS_ERR_UNABLE_TO_LOAD_LIBRARY>, 

I DS_ERR_NO_FUNCS_AVAI LABLE},  */ 
IDS_ERR_LIBRARY_NOT_LOADED>,  */ 

I DS_ERR_BAD_PARAM>,  */ 
IDS_ERR_FUNCTION_NOT_IN_LIB>,  */ 
IDS_ERR_USER_NOT_FOUND}, 

0>,  /*No  bonus  boxes!*/ 

IDS_ERR_KEYRING_FAILURE>, 

IDS_ERR_HALLOC_FAILURE>, 

IDS_ERR_DATA_WAIT_TIMEOUT>, 

IDS_ERR_SOCKET_ERROR>, 

IDS_ERR_HOST_NOT_FOUND>, 

IDS_ERR_UNABLE_TO_OPEN_SOCKET>, 

IDS_ERR_MANY_NOT_FOUND>, 

IDS_ERR_UNKNOWN_SERVER_RESPONSE>, 

0} 


static 

D 

static 

static 

static 

static 

static 

n 

a 

n 

Static 

static 

Q 

n 

D 


unsigned  Long  Re c e i veBu f f e r ( c h a r **buffer, 
a a n intsockfd); 

unsigned  Long  ProcessSendReturnCstruct  PgpTtyUI  *ui,  char  *buffer); 
void  D i sp  L ayKS  E r ro  r ( s t r u c t PgpTtyLJI  *ui,  unsigned  Long  ReturnCode); 
int  UrLEncodeCchar  **Dest,  char  *Source); 
void  Conve r t Key  I DToS t r i ng  (char  *sz); 

unsigned  Long  AddKey S e t W i t h C o n f i rm ( s t r u c t PgpTtyUI  *ui, 
n n n n PGPKeySet  *p S ou r c e Key S e t , 

n n n n PGPKeySet  *p De s t Ke y S e t , 

n n n n unsigned  Long  * N umKey s F ou nd ) ; 

int  Ma s sa g e U s e r I d ( c h a r **UserId,  char  *Start,  char  *End); 
int  PG Pkey s e rve r AddKey Bu f f e r C s t r u c t PgpTtyUI  *ui. 


□ 

n 

n 

char  *Buffer, 

n 

n 

□ 

PGPKeySet  *pKeyRings, 

n 

n 

D 

unsigned  Long  *NumKey s F ou n d ) ; 

int  PG P key s e rve r G e t And AddKey s ( s t r u c t PgpTtyUI  *ui. 


n 

n 

n 

char  *UserId, 

Q 

n 

n 

PGPKeySet  *p Add F romKeyRi ng , 

n 

n 

n 

PGPKeySet  *pKeyRings, 

a 

n 

Q 

unsigned  Long  *N umKey s F ou nd 

n 

n 

n 

char  *keyserver. 

D 

n 

n 

unsigned  short  port) 

{ 

char  *KeyBuffer  = NULL; 

int  ReturnCode  = PGPERR_0K; 

char  *Start,  *End,  *IntUserId  = NULL; 

unsigned  Long  NumKeys  = 0,  NumNotFound  = 0; 


assert(UserId  ||  pKeyRings); 
assert(NuniKeysFound)  ; 


*NumKeys Found  = 0; 
ifCUserld)  { 

n Start  = strchr(UserId,  '\n'); 

n whiLe(Start  SS  *Start)  { 
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Q 

n 

n 

n 

n 

□ 

Q 

□ 

n 

Q 

n 

□ 

□ 

n 

□ 

n 

Q 

□ 

n 

u 

n 

a 

B 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

[ICCHK 

2082 


++NumKeys ; 

Start  = strchrCStart,  *\n'); 
if(Start) 

B ++Start; 

> 


i f C ! N umKey s ) 

N umKey s = 1 ; 


Start  = End  = Userid; 

whiLeCStart  &&  *Start  &S  (ReturnCode  ==  PGPERR_0K))  i 
whiLeCEnd  &&  *End  &&  *End  !=  *\n*)  { 
n + + E n d ; 

> 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 


i f ( Ma s sa g eU s e r I d ( & I n t U s e r I d.  Start,  End)  ==  PGPERR_0K)  i 
f p r i n t f ( u i -> f p , "Getting  key  for  %s.\n",  IntUserld); 
ReturnCode  = G e t Ke y I n f o H kp ( u i , 


fl 

fl 

B 

keyserver. 

B 

B 

B 

port. 

B 

B 

B 

SKeyBuf f er. 

B 

B 

B 

IntUserld); 

i 

fCReturnCode 

==  PGPERR_ 

OK)  { 

ReturnCode 

= PG P key s e r ve r Ad d Key Bu f f e r ( u i , 

fl 

B 

B 

B B 

KeyBuf f er. 

fl 

B 

B 

B B 

pKeyRings, 

B 

B 

B 

B fl 

NumKey s Found ) ; 

if(KeyBuffer) 

B 

pgpFreeCKeyBuffe 

r); 

> 

else 

{ 

ifCReturnCode  !=  ERR_USER_N0T_F0UND) 
n D i s p L a y KS E r r o r ( u i , ReturnCode); 

e L se 

n ++N umN o t F o u nd ; 

> 


if(IntUserld)  -C 
n pg  p F r e e ( I n t U s e r I d ) ; 

n IntUserld  = NULL; 

> 


WhiLeCEnd  &&  *End  &&  *End  ==  ’\n*) 
n ++End; 

Start  = End; 

> 


switchCNumNotFound)  -C 
case  0 : 

n break; 

B 

case  1 : 

n DispLayKSErrorCui,  E RR_U S E R_ N0T_ F 0 U N D ) ; 

n break; 
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n 

n 

n 

n 


n 

n 

n 

n 

n 

n 

n 

n 

n 


def au  L t ; 

n DispLayKSErrorCui,  ER R_ MAN Y_ NO T_ FOUND); 

n break; 

> 

> 

else 

i 

ifCpKeyRings  &&  p Add  F romKey  R i ng  ) -C 
PGPKeylter*  pKeylter  = NULL; 

PGPKey*  pKey  = NULL; 

PGPKeyList*  pKeyList  = NULL; 

PGPKeySet  *p R e c e i v e d S e t = NULL; 
char  KeyIdBufC64D; 

unsigned  int  KeyIdSize  = s i z eo f ( Key I dBu f ) ; 
char  *Mu L t i KeyBu f f e r = NULL; 
static  int  count  = 0; 


n 

n 

n 

a 

n 

n 

n 


pKeyList  = pg pO r d e r Key S e t ( pAdd F romKey Ri ng,  kPG PU s e r I DO r d e r i n g ) ; 
i f ( pKeyLi st ) i 

n pKeylter  = pg pN e wKey I t e r (pKeyList); 

n 

n ifCpKeylter)  -C 

n pKey  = pg pKe y I t e r N ex t ( pKey I t e r ) ; 


□ 

n 

n 

n 

n 

n 

n 

n 

n 

o 

o 

n 

o 

n 

n 

n 

n 

n 

□ 

n 

n 

o 

Q 

n 

□ 

n 

n 

n 

n 

□ 

n 

n 

Q 

n 


n 

n 

n 

n 

n 

n 

n 

D 


while  (pKey  &&  (ReturnCode  ==  PGPERR_0K))  { 
pgpGetKeyString(pKey, 
n n kPGPKeyPropKeyld, 

n n KeyIdBuf, 

n a (unsigned  Long  *)  SKeyldSize); 

ConvertKeyIDToStri ng(KeyldBuf) ; 

f p r i n t f ( u i ->f p,  "Getting  key  for  %s>\n",  KeyIdBuf); 
ReturnCode  = Ge t Key I n f oH kp ( u i , 
ana  key se  rve  r, 

a a a port, 

a a a &KeyBuffer, 

a a a KeyIdBuf); 

if(ReturnCode  ==  PGPERR.OK)  i 
if(KeyBuffer)  i 
a i f ( ! Mu L t i KeyBuf f e r ) i 

a Mu  1 1 i Key Bu f f e r = 

a a pg p A L L o c ( ( s t r L e n ( Key Bu f f e r ) + 1)  * 

a a sizeof(char)); 

a *Mu L t i KeyBuf f e r = *\0*; 

n > 

a e L s e { 

a pgpRea L I oc ( ( VO i d **)  &Hu L t i Key Bu f f e r , 

a a ( s t r I e n ( KeyBu f f e r ) + 

a a a s t r L e n ( M u 1 1 i Ke y B u f f e r ) + 

a a sizeof(char)); 

a > 

a if(HuLtiKeyBuffer) 

a strcat(MuLtiKeyBuffer,  KeyBuffer); 

a 

a pg p F r e e ( Ke yBu f f e r ) ; 

> 

> 

else  -C 

if (ReturnCode  ==  ERR  USER  NOT  FOUND) 


1 ) 
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n 

□ 

B 

H ++NumNot Found; 

n 

n 

B 

else 

D 

n 

B 

n DispLayKSErrorCui,  ReturnCode); 

Q 

Q 

B 

} 

n 

n 

B 

pKey  = pg pKey 1 1 e r Nex t ( pKey 1 1 e r ) ; 

n 

a 

} 

n 

B 

pgpFreeKeylter(pKeylter); 

n 

B 

> 

n 

B 

pgpFreeKeyList(pKeyList); 

n 

B 

□ 

B 

s H i t c h ( N umNo t F ou nd  ) { 

□ 

B 

case  0 : 

a 

B 

B 

break; 

vx 

B 

case  1 : 

a 

B 

B 

D i s p L a y KS E r r 0 r ( u i , E R R_U S E R_N0T_ 

FOUND  ) ; 

n 

B 

B 

break; 

a 

B 

default: 

n 

B 

B 

D i s p L a y KS E r r 0 r ( u i , ERR_MAN Y_N0T_ 

FOUND  ) ; 

a 

B 

B 

break; 

o 

B 

> 

□ 

B 

i f ( Mu 1 1 1 KeyBu f f e r ) { 

n 

B 

pReceivedSet  = 

n 

B 

B 

pg p I mpo r t Key Bu f f e r ( ( u n s i g n e d char  *)  M u L t i Key Bu f f e 

n 

B 

B 

a a s t r L en C Hu L t i KeyBuf f e r ) ) ; 

n 

B 

n 

B 

+ + c 0 un  t ; 

n 

B 

if(pReceivedSet)  { 

n 

B 

B 

ReturnCode  = AddKey Se t W i t h C on f i rm C u i , 

n 

B 

B 

B B B B 

pRecei vedSet, 

n 

B 

B 

B B B B 

pKeyRi ngs. 

n 

B 

B 

B fl  B fl 

NumKeysFound); 

n 

B 

B 

pgpFreeKeySet(pReceivedSet); 

n 

B 

> 

n 

B 

pgpFreeCHuLtiKeyBuffer); 

n 

B 

> 

D 

} 

n 

> 

u 

else 

n 

ReturnCode  = ERR_BAD_PARAM; 

> 

y 

return(ReturnCode) ; 

i n t 

G e t Key  I n f 0 H kp ( s t r u c t PgpTtyUI  *ui. 

a 

B 

char  *keyserver. 

n 

B 

unsigned  short  port. 

o 

B 

char  **KeyBuffer, 

s 

B 

char  *UserId) 

struct 

hostent 

*pHostEnt; 

struct 

sockaddr_in  server_info; 

struct 

i n_add  r 

ip; 

i n t s 0 c 

kf  d; 

char  bufferC8192D; 
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int  ReturnCode  = PGPERR_0K; 

fprintf(ui->fp,  "Looking  up  host  %s.\r",  keyserver); 


ifCCpHostEnt  = g e t hos t by n a me ( ke y s e r ve r ) ) ) { 
n f p r i n t f ( u i ->f p , "Establishing  connection  \r"); 

n memcpyCSip,  pHostEnt->h_addr,  sizeof(ip)); 

n s e r ve r_ i n f o . s i n_a dd r = ip; 

a server_info.sin_port  = htons(port); 

n s e r ve r_ i n f o . s i n_ f am i L y = p H o s t En t ->h_a dd r t y pe ; 

#i  f 0 


n 

a 

#endi f 
□ 

□ 

a 

n 

D 

n 

□ 

n 

□ 

n 

n 

Q 

n 

n 

a 


if((sockfd  = 

s o c ke t C pH o s t En t -> h_a dd r t y pe , SOCK_STREAH,  0))) 
ifCCsockfd  = 

s o c ke t ( s e r ve r_ i n f o . s i n_ f am i L y , SOCK_STREAH,  0))  >=  0)  { 
if(  !connect(sockfd, 

n n (struct  sockaddr  *)  & server_info, 

n n s i z eo f C s e r V e r_ i n f o ) ) ) { 

n f p r i n t f ( u i ->f p,  "Sending  request  \r"); 

n sprintfCbuffer, 

n n "GET  /pks/Lookup?op=get&exact=on&search=%s  HTTP/1. 0\n", 

n n Userid); 

n strcatCbuffer,  "User-Agent:  PGP/5.0  (Unix)\n\r\n\r"); 

n sendCsockfd,  buffer,  s t r L e n ( bu f f e r ) , 0); 

n fprintf(ui->fp,  "Receiving  data  \r"); 

n ReturnCode  = 

o R e ce i veBu f f e r ( Ke y Bu f f e r , sockfd); 

n fprintf(ui->fp,  "Cleaning  up  \r"); 


□ 

a 

□ 

n 

Q 

□ 

n 

D 

n 

n 

D 

□ 

n 

n 


Q 


n i f (ReturnCode  ==  PGPERR_0K)  { 

n if(strstr(*(KeyBuffer),  "BEGIN  PGP")) 

n n ReturnCode  = PGPERR_OK; 

n else 

n n ReturnCode  = E R R_U S E R_NOT_ F OUN D ; 

n f p r i n t f ( u i ->f p,  "Complete.  \n"); 

n > 

} 

else 

a ReturnCode  = ERR_UNABLE_TO_OPEN_SOCKET; 

close(sockfd); 

} 

else 

ReturnCode  = E R R_UN AB LE_T0_0 P E N_ S 0 C KET ; 

> 

else 

ReturnCode  = ERR_H0ST_N0T_ FOUND; 


return(ReturnCode); 

} 


int  PutKeyInf oHkp( St ruct  PgpTtyUI  *ui, 
n char  *keyserver, 

n unsigned  short  port, 

n char  *KeyBuffer) 

{ 

struct  hostent  *pHostEnt; 
struct  in_addr  ip; 
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struct  s o c ka dd r_ i n server_info; 
i nt  sockf d; 

char  *buffer,  *ErrBuffer  = NULL; 

char  *TempBuffer; 

int  ReturnCode  = PGPERR_0K; 


fprintf(ui->fp,  "Looking  up  host  %s...\r",  keyserver); 


□ 

□ 

n 

a 

a 

a 

a 

a 

o 

□ 

□ 

□ 

n 

a 

a 

□ 

n 

□ 


if((pHostEnt  = g e t h o s t by na me ( ke y s e r V e r ) ) ) t 

fprintf(ui->fp,  "Establishing  connection.  \r"), 

memcpyC&ip,  p H o s t E n t -> h _a dd r , sizeofCip)); 

server_info.sin_addr  = ip; 

s e r ve r _ i n f o . s i n_po r t = htons(port); 

s e r V e r _ i n f o . s i n_ f a m i L y = p H o s t E n t -> h _a dd r t y pe ; 

ifCCsockfd  = socket ( server_i nfo . si n_f ami ly,  SOCK_STREAH,  0))  >=  0)  { 
if( !connect(sockfd. 


a (struct  sockaddr  *)  & server_info, 

n s i z eo  f ( s e r V e r _ i n f o ) ) ) { 

f p r i n t f ( u i -> f p , "Sending  Key  \r"); 

UrLEncodeC&TempBuffer,  KeyBuffer); 
if(TempBuffer)  { 
buffer  = 

a pgpAlLocCCstrLenCTempBuffer)  + 512)  * sizeof(char)); 

if(buffer)  { 
n s p r i n t f ( bu f f e r , 

n n "POST  /pks/add  HTT P / 1 . 0 \ n U s e r- Ag e n t : \ 


PGP/5.0  ( U n i X ) \ n C on t e n t - L e n g t h : % i \ n \ n key t e x t = 


n n s t r L e n ( T empBu f f e r ) + 8); 

n s t r ca t ( buf f e r , TempBuffer); 

n sendCsockfd,  buffer,  s t r L e n ( b u f f e r ) , 0); 

n fprintf(ui->fp,  "Receiving  ResponseVr"); 

n pg p F r e e ( bu f f e r ) ; 

n ReturnCode  = 

n R e c e i V eBu f f e r C 8 E r r Bu f f e r , sockfd); 

n f p r i n t f ( u i ->f p,  "Cleaning  Up\r"); 

} 

pgpFree(TempBuffer); 


> 

else 

ReturnCode 

close(sockfd); 


ERR_UNABLE_TO_OPEN_SOCKET; 


} 

else 


ReturnCode 


ERR_UNABLE_TO_OPEN_SOCKET; 


else  { 

ReturnCode  = E R R_ H 0 S T_N0T_ F 0 U N D ; 

> 


ifCErrBuffer)  { 

n ProcessSendReturnCui,  ErrBuffer); 

n pg p F r e e ( E r r Bu f f e r ) ; 

} 

else  { 

n if  (ReturnCode  ==  PGPERR_OK)  { 

n ReturnCode  = E R R_NO_ R E S PO N S E _ F R 0n_ SERVER; 


[[CHK:ee1a99331b8a9559c777e164dc83dd4e11c6ce6d6b6d585d844532c91b6ef7eeb]] 
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i f C ReturnCode  !=  PGPERR_0K) 

D i s p L a y KS E r r o r ( u i , ReturnCode); 

return(ReturnCode) ; 


int  Ge t Key  I nf oH 1 1 p ( s t ru c t PgpTtyUI  *ui, 
n n char  *keyserver, 

a n unsigned  short  port, 

n n char*fiLe, 

n n char  **KeyBuffer) 


struct  hostent  *pHostEnt; 

struct  sockaddr_in  server_info; 

struct  in_addr  ip; 

int  sockfd; 

char  bu f f e r C 8 1 92 D ; 

int  ReturnCode  = PGPERR_0K; 

fprintf(ui->fp,  "Looking  up  host  %s.\r",  keyserver); 


n 

□ 

a 

D 

Q 

#if  0 

a 

a 

#endi f 

n 

□ 

n 

D 

n 

D 

n 

□ 

□ 

□ 

a 

□ 

□ 

□ 

n 


if((pHostEnt  = ge t hos t by name ( key se r ve r ) ) ) { 
f p r i n t f ( u i -> f p , "Establishing  connection 
memcpy(&ip,  pHostEnt->h_addr,  sizeof(ip)); 
s e r ve r _ i n f o . s i n_a d d r = ip; 
s e r ve r_ i n f o . s i n_po r t = htons(port); 
se rve r_ i n f o . s i n_f ami L y = p H os t E n t ->h_a dd r t y p e ; 


\r"); 


ifCCsockfd  = 

so c ke t ( p Ho s t E n t ->h_a dd r t y pe , SOCK_STREAH,  0))) 
ifCCsockfd  = 

soc ke t C se r ve r_i n f o . s i n_f ami Ly , SOCK_STREAH,  0))  >=  0)  { 
ifC  ! connectCsockfd, 

n n Cstruct  sockaddr  *)  S server_info, 

n n s i z e o f C s e r ve r _ i n f o ) ) ) { 

n fprintfCui->fp,  "Sending  request  \r"); 

n s p r i n t f C b u f f e r , 

n n "GET  %s  HTTP/1 . 0\n", 

n a file); 

n strcatCbuffer,  "User-Agent:  PGP/5.0  CUnix)\n\r\n\r"); 

n sendCsockfd,  buffer,  s t r L en C bu f f e r ) , 0); 

n fprintfCui->fp,  "Receiving  data  \r"); 

n Ret  u rnCode  = 

n Re c e i ve Bu f f e r C Key Bu f f e r , sockfd); 

n fprintfCui->fp,  "Cleaning  up  \r"); 


i f CReturnCode  ==  PGPERR_0K)  { 

ifCstrstrC*CKeyBuffer),  "BEGIN  PGP")) 
n ReturnCode  = PGPERR_OK; 

else 

n ReturnCode  = E RR_U S E R_NOT_ F 0 U N D ; 

f p r i n t f C u i -> f p , "Complete. 

} 


\ n " ) ; 
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n else 

n a ReturnCode  = E R R_U N AB LE_T0_0P E N_ S 0 C KET ; 

n cLose(sockfd); 

n } 

n else 

n ReturnCode  = ERR_UNABLE_TO_OPEN_SOCKET; 

> 

else 

n ReturnCode  = E R R_ H 0 ST_N0T_ F 0 U N D ; 

return(ReturnCode) ; 

> 


int 

G e t Key  I n f 0 F i ng  e r C s t r u c t PgpTtylll  *ui 

n 

n 

char  *keyserver. 

a 

Q 

unsigned  short  port 

n 

u 

char  *user. 

□ 

f 

n 

char  **KeyBuffer) 

St  ruct 

hostent  *pHostEnt; 

struct 

sockaddr_in  server_info; 

St  ruct 

in_addr  ip; 

int  s 0 c 

k f d ; 

char  bufferC8192Il; 

int  ReturnCode  = PGPERR_OK; 

f p r i n t f ( u i -> f p , "Looking  up  host  %s.\r",  keyserver); 


n 

n 

n 

n 

n 

#if  0 

a 

□ 

#end  i 
□ 

□ 

n 

n 

n 


fCCpHostEnt  = ge t ho s t by name ( key s e r ve r ) ) ) { 
f p r i n t f ( u i ->f p,  "Establishing  connection 
memcpy(&ip,  pHostEnt->h_addr,  sizeofCip)); 
s e r ve r _ i n f o . s i n_a dd r = ip; 
server_i nf o . si n_port  = htons(port); 
server_i nf o . si n_f ami Ly  = p H o s t E n t ->h _a dd r t y pe ; 

ifCCsockfd  = 

so c ke t ( pHos t En t->h_add r t ype,  SOCK_STREAH,  0))) 
f 

ifCCsockfd  = 

s o c ke t C s e r ve r_ i n f o . s i n_f a mi L y , SOCK_STREAM,  0))  >=  0) 
ifC  IconnectCsockfd, 

n n Cstruct  sockaddr  *)  S server_info, 

n n s i z e o f C s e r ve r _ i n f o ) ) ) { 

n f p r i n t f C u i -> f p , "Sending  request 

n sprintfCbuffer, 

n n "%s\n", 

n n user); 

n sendCsockfd,  buffer,  s t r L e n C bu f f e r ) , 0); 

a f p r i n t f C u i -> f p , "Receiving  data 

n ReturnCode  = 

n ReceiveBufferCKeyBuffer,  sockfd); 

a fprintfCui->fp,  "Cleaning  up  \r"); 


\r"); 


\r"); 


\r"), 


Q 

□ 

a 


a 


n i f C Ret urnCode  ==  PGPERR_0K)  { 

n i f C s t r s t r C * C Key Bu f f e r ) , "BEGIN  PGP")) 

n n ReturnCode  = PGPERR_0K; 

n else 
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a 

D 

Q 

□ 

□ 

□ 

a 

D 

Q 

D 


n 


n n ReturnCode  = E R R_U S E R_ N0T_ F OU N D ; 

n f p r i n t f ( u i ->f p,  "Complete, 

n > 

} 

else 

n ReturnCode  = E R R_U N AB LE_T0_0 P E N_ S 0 C KET ; 

cLose(sockfd) ; 

> 

else 

ReturnCode  = E R R_U N AB LE_T0_0 P E N_S 0 C KET ; 

> 

else 

ReturnCode  = E R R_H 0 ST_N 0T_ FOUND; 


\ n " ) ; 


return(ReturnCode); 

> 


static  int  PG P ke y s e r ve r AddKey Bu f f e r ( s t r u c t PgpTtyUI  *ui, 
n n n n char  *Buffer, 

n n n n PGPKeySet  *pKeyRings, 

n n n n unsigned  long  *NumKeys Found ) 

{ 

unsigned  long  ReturnCode  = E R R_KE YR I NG_ F A I LU R E ; 

PGPKeySet  *lRingSet; 

PGPKeySet  *NewKeySet; 
assert(Buffer); 

assert(NumKeysFound) ; 

pgpLiblnitl); 

i f ( ! pKey R i ng  s ) C 

n IRingSet  = pg pOpe n De f a u I t Key R i ng s ( T R U E , NULL); 

} 

else  { 

n IRingSet  = pKeyRings; 

} 

ifClRingSet)  { 
n NewKeySet  = 

n pg p I mpo r t Key Bu f f e r ( ( un s i g n ed  char  *)  Buffer,  s t r I e n ( Bu f f e r ) ) ; 

n if(NewKeySet)  { 

a ReturnCode  = 

n n Add  Key S e t U i t h C on f i r m ( u i , NewKeySet,  IRingSet,  NumKey s F ou nd  ) ; 

n pg p F r e e Key S e t ( N e wKey S e t ) ; 

n } 

n if(!pKeyRings)  C 

n pgp F r eeKey Se t ( I R i ngS e t ) ; 

n } 

} 

pgpLibCleanupC); 

return(ReturnCode); 

> 

static  int  Ha s sa g e U s e r I d ( c h a r **UserId,  char  *Start,  char  *End)  { 
int  ReturnCode  = PGPERR_0K; 
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char  *LeftAngLe  = NULL,  *RightAngLe  = NULL,  *p; 

assertCUserld); 

assert(Start); 

assert(End); 

ifCUserld  S&  Start  SS  End)  { 

n /*ALright,  is  it  a "John  Doe  < j do  ea  pg  p . c oni> " kinda  address?*/ 

n *UserId  = pgpALLocCEnd  - Start  + 1); 

n strncpy(*UserId,  Start,  End  - Start); 

n *C*UserId  + (End  - Start))  = '\0'; 

n i f ( ( Le f t Ang L e = s t r c h r ( *U s e r I d , '<'))) 

n RightAngLe  = s t r c h r ( Le f t An g L e , '>'); 

n 

n ifCLeftAngLe  &&  RightAngLe)  { 

n *RightAngLe  = '\0'; 

n memmo V e ( * U s e r I d , LeftAngLe  + 1,  RightAngLe  - LeftAngLe); 

n } 

n p=*UserId; 

n whiLe(p&&*p)  { 

n i f (*p  ==  ' ■ ) 

n n * p = ' + ' ; 

n + + p; 

n } 

> 

e L se 

n ReturnCode  = E R R_B A D_ P A R AM ; 

o r e t u r n ( R e t u r n C ode ) ; 

> 


static  unsigned  Long  Re c e i ve Bu f f e r ( c h a r **buffer, 
n n n n i nt  sockf d) 

{ 

unsigned  Long  CharsReceived  = 0,  bufferSize  = 1,  ReturnCode  = PGPERR_0K; 
char  TempBu f f e r C 64 D ; 

assert(buffer) ; 


♦buffer  = NULL; 


Q 

Q 

D 

a 

a 

a 

n 

n 

a 

n 

□ 

□ 

n 


do  { 

CharsReceived  = 

recvCsockfd,  TempBuffer,  s i z e o f ( TempBu f f e r ) - 1,  0); 
i f ( C h a r s R e c e i ved  ) { 

♦(TempBuffer  + CharsReceived)  = '\0'; 
bufferSize  +=  CharsReceived; 
if(*buffer)  { 

a pg p R e a L L o c ( ( VO i d ♦♦)  buffer, 

n n bufferSize  ♦ s i z e o f ( c h a r ) ) ; 

> 

e L se  { 

n ♦buffer= 

n pg  p A L L o c C b u f f e r S i z e ♦ s i z e o f ( c h a r ) ) ; 

n ♦♦buffer  = '\0'; 


[LCHK:554577b3f855f7797edd1c666ba9a4461110c9664466d70cc002cc12c0b11f6d2D: 
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n > 

n strcat(*buffer,  TempBuffer); 

n } 

}whi LeCCharsReceived); 
return(ReturnCode)  ; 

} 

static  unsigned  Long  P r o c e s s S e n d R e t u r n ( s t ru c t PgpTtyUI  *ui, 
n n n n char  *buffer) 

{ 

char  *p ; 

i n t X ; 

const  char  *Message  = NULL; 
char  Ou t pu t H e s s a g e C 1 02 4 ] ; 
char  *TempBuffer; 

Boolean  IsError  = TRUE,  FoundError  = FALSE; 
unsigned  long  ReturnCode  = PGPERR_OK; 

assert(buffer); 

TempBuffer  = pg p A L L o c ( ( s t r L e n ( b u f f e r ) + 1)  * s i z eo f ( c h a r ) ) ; 
if(TempBuffer)  { 


n 

s t r cpy ( TempBuf f e r , buffer); 

n 

P 

= TempBuffer; 

n 

/*The 

first 

step  is  to  skip  over  the  HTTP  headers.*/ 

n 

P 

= strstrCbuffer,  "\r\n\r\n"); 

n 

i 

f (p) 

Q 

/*Next , 

skip  the  title*/ 

n 

P 

= strstrCp,  "<p>\r\n"); 

n 

i f ( p ) { 

n 

n 

+ + p; 

n 

n 

/*Next,  skip  the  header  (<h1>)*/ 

D 

n 

P = 

strstrlp,  "<p>\r\n"); 

a 

n 

if(p)  { 

n 

n 

/*Last,  jump  the  <p>\r\n  we  just  found*/ 

n 

n 

P +=  5; 

n 

n 

/*Sometimes,  it  has  a " <p r e> . . . < / p r e> " tag,  so  let's 

s 

n 

*cLean  those  up.  Ideally,  if  we  ever  have  to  show  thi: 

n 

n 

*to  the  user,  we  don't  want  the  raw  HTML  to  pop  out. 

n 

n 

*/ 

H 

a 

ifCstrncmpCp,  "<pre>",  5)  ==  0)  { 

Q 

n 

D 

char  *p2; 

n 

n 

n 

P +=  5; 

n 

n 

n 

p2  = strstrCp,  "</pre>"); 

n 

n 

n 

i f ( p2  ) 

n 

n 

u 

* p 2 = ' \ 0 ' ; 

n 

D 

> 

n 

n 

whi Le(isspace(*p)) 

n 

n 

a 

+ + p; 

a 

n 

/*God  willing  and  the  creek  don't  rise,  p now  points  to 

n 

n 

*the  actual  error  message.  See  if  we  can  Look  it  up.. 

n 

n 

forCx  = 0; 

n 

n 

n 

E r r 0 r T a b L e C X D . S e r V e r Me s s a g e C 0 D &&  IFoundError; 

n 

n 

n 

+ + x)  { 

n 

n 

n 

ifCstrncmpCErrorTableCxT.ServerMessage, 

CCCHK: 
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n 

B 

B 

n p. 

n 

B 

B 

n s t r L e n ( E r r 0 r Ta b L e C x 3 . S e r V e r Me s s a g e ) ) = 

n 

B 

B 

FoundError  = TRUE; 

El 

B 

fl 

Message  = E r r o r Ta b L e C x 3 . Ou t pu t M e s s a g e ; 

n 

B 

fl 

IsError  = E r r o r T a b L e C x 3 . I s E r r o r ; 

n 

B 

fl 

} 

a 

B 

} 

a 

B 

/*It's  a known  return;  Look  it  up*/ 

a 

B 

if(Message)  { 

n 

B 

fl 

if(*Message  ==  '%')  { 

a 

B 

B 

int  NumAdded  = 0; 

a 

B 

B 

uhiLeCp  S&  *p  SS  ! i sd i g i t ( *p ) ) 

n 

B 

fl 

n + + p; 

n 

B 

B 

□ 

B 

fl 

NumAdded  = atoi(p); 

n 

B 

B 

n 

B 

fl 

s p r i n t f ( Ou t p u t Me s s a g e , Message,  NumAdded); 

a 

B 

B 

} 

n 

B 

B 

e L s e 

□ 

B 

fl 

strcpyCOutputMessage,  Message); 

n 

B 

} 

n 

B 

e L s e { 

El 

B 

B 

i f C *p  ) 

n 

fl 

B 

strcpyCOutputMessage,  p); 

B 

B 

B 

e L s e { 

B 

B 

fl 

strcpyCOutputMessage, 

B 

B 

fl 

n "Unknown  server  response. \n"); 

B 

B 

B 

> 

B 

B 

} 

B 

B 

> 

B 

B 

f p r i 

ntf(ui->fp,  OutputMessage ) ; 

B 

B 

pgpFree(TempBuffer); 

B 

> 

B 

> 

B 

else 

B 

ReturnCode  = E R R_M A L LO C _ F A I LU R E ; 

> 


else 

n ReturnCode  = E R R_M A LLO C_ F A I LU R E ; 

return(ReturnCode) ; 

> 

static  void  D i s p L a y KS E r ro r ( s t r u c t PgpTtyUI  *ui, 
n n n unsigned  Long  ReturnCode) 

{ 

i n t X ; 

unsigned  Long  StringToLoad  = 0; 

(void)  ui; 

forCx  = 0;  E r rToS t r i ng Ta b L e C X D . Ra wC od e SS  ! S t r i ngTo Loa d ; + + x)  { 
n i f ( E r rT o S t r i ng Ta b L e C X 3 . Ra w C od e ==  ReturnCode) 

n StringToLoad  = ErrToStringTabLeCxD.StringID; 

} 

i:CCHK:13fce144060889bb4467e1e9c5facfedd0550774d338aa8ee500667a732d214cc:: 
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i f ( S t r i n gTo Loa d ) { 

/*XXX  This  needs  to  be  fixed*/ 

#if  0 

n LoadString(g_hinst,  StringToLoad,  OutputBuf,  sizeof(OutputBuf)); 

n Loads t r i ng ( g_h i ns t , I D S_G E N E R A L_ E R RO R , Title,  s i z e o f ( T i t L e ) ) ; 

n M e s s a g eBox ( h wnd , OutputBuf,  Title,  MB_OK  | HB_ I C 0 N E R RO R ) ; 

# e nd i f 
} 

} 

static  int  U r I E n c od e ( c h a r **Dest,  char  *Source) 

{ 

int  ReturnCode  = PGPERR_0K; 
char  *pSource,  *pDest; 

/*AbsoLute  worst  case  scenario  is  three  times  the  source  size.  Rather 
*than  getting  too  precise,  we'll  allocate  that  much  initially,  and  then 
*reaLloc  it  down  to  actuality  later. 

*/ 


assert(Source); 

assert(Dest); 


n 

n 

D 

n 

Q 

D 

n 

Q 

n 

□ 

□ 

D 

□ 

n 

□ 

n 

n 

D 

n 

a 

n 

□ 

n 

n 

□ 

n 

n 


iflSource  S&  Best)  { 

if((*Dest  = pg p A I I o c ( ( s i z eof ( c h a r ) ) * ( ( s t r I e n ( S ou r c e ) * 3)  + 1))))  { 
pSource  = Source; 
pDest  = *Dest ; 


□ 

n 

□ 

n 

n 

n 

n 

n 

□ 

n 

n 

D 

□ 

n 

a 

D 

Q 

n 

B 

B 

B 


wh i I e ( pSou r ce  88  *pSource)  { 

/*Zeroth  case:  it's  an  alphabetic  or  numeric  character*/ 

i f ( ! i s a I p h a ( * p S ou r c e ) 88 
! i sd i g i t ( *pSou r c e ) 88 
*pSource  !=  { 

/*First  case:  Turn  spaces  into  pluses.*/ 
if(*pSource  ==  ' ')  { 

n *pDest='+'; 

> 

else  { 

n /*This  is  overkill,  but  works  for  our  purposes*/ 

n *pDest  = ' % ' ; 

n ++pDest; 

n sprintfCpDest,  "%02X",  *pSource); 

a ++pDest; 

} 

> 

else 

*pDest  = *pSource; 

+ + pDes  t ; 

++pSource; 


n *pDest='\0'; 

B 

B > 

B else 

B ReturnCode  = E R R_M A L LO C_ FAILURE; 
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} 

else 

n ReturnCode  = E R R_B A D_P A R AM ; 

return(ReturnCode) ; 

> 

/*StoLen  from  PBJ*/ 

static  void  Con ve r t Key  I DTo S t r i ng ( c ha r *sz) 

{ 

i n t i ; 

unsigned  long  uLSecond; 

/*convert  second  half  of  keyid  to  Little  endian*/ 
uLSecond  = 0; 
for  (i=0;  i<4;  i++)  { 
n uLSecond  <<=  8; 

n uLSecond  |=  ((unsigned  Long)szCi+4D  & 0xFF); 

} 

/*  convert  to  string  */ 
sprintf(sz,  "0x%08LX",  uLSecond); 

} 

static  unsigned  Long  Ad d Ke y S e t W i t h C on f i r m ( s t r u c t PgpTtyUI  *ui, 
n n n n n PGPKeySet  *p S o u r c e Key S e t , 

n B n n n PGPKeySet  *p D e s t Key S e t , 

B B B B B unsigned  Long  *N umKey s F ou nd ) 

{ 

unsigned  Long  ReturnCode  = E R R_KE Y R I N G_ F A I LU R E ; 

Long  NumKeys; 

PGPError  error; 

assert(NumKeysFound); 

/*We  assume  NumKeysFound  is  set  to  zero  on  the  first  caLL*/ 

NumKeys  = pgpCountKeys(pSourceKeySet); 

*N umKey s F ound  +=  NumKeys; 

B B B 

i f ( NumKeys  ==  1 ) { 

B f p r i n t f ( u i -> f p , "One  key  received.  Adding  it  to  your  key r i n g . . . \ n " ) ; 

> 

else  { 

B f p r i n t f ( u i -> f p , 

B B "%Li  keys  received.  Adding  them  to  your  key r i ng . . . \ n " , 

B B NumKeys  ) ; 

B B 

} 

/*  XXX  Probably  aught  to  actually  ask  the  user,  here...*/ 

error  = pgpAddKeys(pDestKeySet,  pSourceKeySet); 
if(error  ==  PGPERR_OK)  { 

B error  = p g p C omm i t Key R i n g C h a ng e s ( p D e s t Key S e t ) ; 

B B B 

B if(error  ==  PGPERR_OK)  { 

B ReturnCode  = PGPERR_0K; 

B } 

> 
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return(ReturnCode)  ; 

> 


int  Ge t Keyl nf o ( s t ru c t PgpTtyUI  *ui. 


□ 

char 

*protocol. 

Q 

char 

★server. 

n 

char 

* f i 1 e , 

n 

int 

port. 

n 

char 

**KeyBuffer) 

{ 

int  GetKeyReturn  = PGPERR_OK; 

/*This  should  probably  be  table-based...*/ 


n 

□ 

n 

n 

n 

□ 

n 

a 

n 

n 

D 

D 

n 

a 


ifCstrcasecmpCprotocol,  "hkp")  ==  0)  { 

GetKeyReturn  = 

GetKeyInf oHkplui , server,  port,  KeyBuffer, 

> 

else  { 

ifCstrcasecmpCprotocol,  "http")  ==  0)  t 
GetKeyReturn  = 

n Ge t Key I n f oH t t p ( u i , server,  port,  file, 

> 

else  { 

ifCstrcasecmpCprotocol,  "finger")  ==  0)  { 
n GetKeyReturn  = 

n G e t Key  I n f o F i n g e r C u i , server,  port, 

> 

else  { 

n f p r i n t f C u i -> f p , "Unknown  protocol  %s.\n 

n GetKeyReturn  = -1; 

> 

> 

> 


> 


returnCGetKeyReturn) ; 


C:CHK:19aa39490b2755f462a8908cfd2859e17225e80d5b92:3 


file  + 1 ) ; 


KeyBuffer)  ; 


file  + 1,  KeyBuffer); 


, protocol); 
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/* 

* keyserver. h 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  keyserver . h,v  1.1. 2. 2 1 997/06/07  09:49:1  0 mhw  Exp  $ 

*/ 

#ifndef  _ PG PKE Y S E R V E R S U P PO RT_ H 
#define  PG PKE Y S E R V E R S U P PO RT  H 


#define  KS_ERR_BASE  4000 


#def i ne 

ERR_ 

,UNABLE_T0_L0AD_LIBRARYa 

Q 

KS_ 

ERR_ 

BASE 

+ 

0 

# d e f i n e 

ERR_ 

,NO_FUNCS_AVAILABLEa 

n 

Q 

KS_ 

ERR_ 

BASE 

+ 

1 

#def i ne 

ERR_ 

LIBRARY_N0T_L0ADEDb 

n 

n 

KS_ 

ERR_ 

BASE 

+ 

2 

#d  e f i n e 

ERR_ 

BAD_PARAMa  n 

a 

n 

KS_ 

ERR_ 

BASE 

+ 

3 

#def i ne 

ERR_ 

FUNCTI0N_N0T_IN_LIBaa 

n 

KS_ 

ERR_ 

BASE 

+ 

4 

#defi neaERR_ 

USER_N0T_F0UNDa 

n 

n 

KS_ 

ERR_ 

BASE 

+ 

5 

#def i ne 

ERR_ 

USER_CANCELaa 

Q 

n 

KS_ 

ERR_ 

BASE 

+ 

6 

#def i neaERR_ 

KEYRING_FAILUREa 

Q 

n 

KS_ 

ERR_ 

BASE 

+ 

7 

#defi neaERR_ 

MALLOC_FAILUREa 

n 

n 

KS_ 

ERR_ 

BASE 

+ 

8 

#def i ne 

ERR_ 

DATA_WAIT_TIMEOUTa 

Q 

n 

KS_ 

ERR_ 

BASE 

+ 

9 

//define 

ERR_ 

S0CKET_ERR0Ra 

n 

u 

KS_ 

ERR_ 

BASE 

+ 

10 

//  d e f i n e 

ERR_ 

N0_HEM 

KS_ 

ERR_ 

BASE 

+ 

1 1 

//d e f i n e 

ERR_ 

H0ST_N0T_F0UNDa 

n 

D 

KS_ 

ERR_ 

BASE 

+ 

12 

//d e f i n e 

ERR_ 

UNABLE_T0_0PEN_S0CKETa 

n 

KS_ 

ERR_ 

BASE 

+ 

1 3 

#d  e f i n e 

ERR_ 

HANY_N0T_F0UNDb 

o 

Q 

KS_ 

ERR_ 

BASE 

+ 

1 4 

//define 

ERR_ 

N0_RESP0NSE_FR0M_SERVERb 

a 

KS_ 

ERR_ 

BASE 

+ 

1 5 

i n t 
n 
n 
□ 

□ 

a 

n 


PG P key s e r V e r G e t An d Add  Key s ( s t r u c t PgpTtyUI  *ui. 


n 

n 

char  *UserId, 

n 

n 

PGPKeySet  *pAdd F romKeyR i ng. 

n 

□ 

PGPKeySet  *pKeyRings, 

n 

a 

unsigned  Long  *NumKeys Found 

a 

n 

char  *keyserver. 

n 

a 

unsigned  short  port); 

i nt 
□ 

□ 

a 

i n t 

D 

□ 

a 

□ 

i nt 

D 

n 

a 

n 

i nt 
□ 

□ 

n 

n 

i n t 


Pu t Key  I nf oH kp ( s t r u c t PgpTtyUI  *ui, 
n char  *keyserver, 

n unsigned  short  port, 

a char  *KeyBuffer); 

Ge t Key  I n f oH kp ( s t r u c t PgpTtyUI  *ui, 
n char  *keyserver, 

n unsigned  short  port, 

a char  **KeyBuffer, 

a char*UserId); 

G e t Key  I nf oH 1 1 p ( s t r u c t PgpTtyUI  *ui, 
n char  *keyserver, 

a unsigned  short  port, 

a char*fiLe, 

a char  **KeyBuffer); 

GetKeyInfoFinger(struct  PgpTtyUI  *ui, 
a char  *keyserver, 

a unsigned  short  port, 

a char*user, 

a char  **Ke y Bu f f e r ) ; 

G e t Key  I n f o ( s t r u c t PgpTtyUI  *ui. 


Ci:CHK:6abb71 552221 174eeee2265137ecbb9cc82c8873229fa1075f4b6d34811f1 69353: 


2096 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


keyserver.h 


□ 

□ 

n 


#endif  //#ifdef 


char  *protocoL, 
char  *server, 
char  *fiLe, 
i nt  port, 

char  **Key But f e r ) ; 

PGPKEYSERVERSUPPORT_H 
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/* 

* pass.h  — Information  about  PGP  passphrases 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* Brett  A.  Thomas  (quarkabaz.com,  batapgp.com) 

* 

* $Id:  pass.h,v  1.1. 2. 2 1 997/06/07  09:49:1  0 mhw  Exp  $ 

*/ 


^define  PASSLEN  256 
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/* 

* pgpk.c  — PGP  keyring  manipulation  program 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpk.c, V 1.13.2.11  1997/06/07  09:49:11  mhw  Exp  $ 

*/ 


#ifdef  HAVE  CONFIG  H 


#incLude 

#endi f 

"config.h" 

#incLude 

<stdi 0 . h> 

ftir\c  Lude 

<string.h> 

#incLude 

<t i me . h> 

#i nc  Lude 

<ctype.h> 

#ifdef  HAVE_SYS_PARAH_H 

ffincLude 

#e  nd i f 

<sys/param.h> 

#ifdef  HAVE_STDLIB_H 

^include 

# e nd i f 

<std  L i b . h> 

#ifdef  HAVE_UNISTD_H 

#incLude 

# e nd i f 

<uni std . h>nn  /* 

#ifdef  UNIX 

^include 

#endi f 

<sys/stat . h>n  n 

ttincLude 

"pgpDebug.h" 

#i nc  Lude 

"pgpEnv. h" 

^include 

"pgpHem. h" 

tti  nc  Lude 

"pgpKeyDB. h" 

ttincLude 

"pgpkUI.h" 

ttincLude 

"pgpkinit.h" 

# i n c L ude 

"pgpkExit.h" 

/tine  Lude 

"pgpUI . h" 

//include 

"pgpOpt.h" 

//include 

"pgpUserlO. h" 

//i  nc  Lude 

"pgpRndPooL . h" 

//include 

"pgpConf.h" 

//include 

" pa  s s . h " 

//include 

"pgpkKeyGen.h" 

//include 

"keyserver.h" 

//i  nc  Lude 

" u r L . h " 

//define 

KDBTYPE_KEY 

//define 

KDBTYPE_USERID 

//define 

KDBTYPE_CERT 

//define 

MAXARGS  2 

struct  Flags  f 

n char 

argsCMAXARGS]; 

n i n t 

a r g c ; 

n char 

const  *outfiLe; 

/*  for  sbrkC)  */ 


/*  for  umaskC)  */ 
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n char  const  *ringfiLe; 

n char  const  *signName; 

n PGPKey  *signKey; 
n char  opt; 

n byte  doarmor; 

char  quit; 

>; 

PGPKeySet  *defauLtset  = NULL;  /*  ALL  keys  in  defauLt  keyrings  */ 
BooLeannn  enabLeUI  = TRUE; 

#define  PASSLEN  256 


static  void 

setOptArgs  (char  const  *args,  struct  Pg pOp t C o n t e x t *opt,  struct  FLags  *fLags) 
{ 

a whiLe  ( *op t ->op t a r g &&  strchr  (args,  *o p t ->o p t a r g ) ) 
n n f L a g s ->a  r g s C f L a g s->a  r g C + + II  = * ( o p t ->o p t a r g + + ) ; 

} 


static  void 

setOpt  (int  opt,  struct  Pg pOp t C on t ex t *optp,  struct  FLags  *fLags) 
{ 


n i f ( ! f Lags->opt ) { 


n 

a 

fLags->opt  = opt; 

n 

n 

i f 

(optp-> state  == 

1 

&&  optp->optarg ) 

n 

□ 

n 

switch  (opt)  { 

n 

n 

n 

case  ' k ' : 

n 

n 

a 

n setOptArgs 

( " 

s",  optp,  fLags); 

□ 

n 

□ 

n break; 

n 

c 

a 

case  ' L ' : 

n 

a 

□ 

n setOptArgs 

( " 

L",  optp,  fLags); 

n 

n 

Q 

n break; 

n 

□ 

D 

case  ' r ' : 

n 

n 

D 

n setOptArgs 

( " 

su",  optp,  fLags); 

u 

a 

n 

n break; 

u 

n 

n 

case  ' X ' : 

n 

n 

a 

n setOptArgs 

( " 

a",  optp,  fLags); 

□ 

n 

n 

n break; 

n 

a 

n 

} 

n 

a 

return; 

n 

} 

n 

exitArgError  ("Cannot 

use 

-7.C  and  -%c  together\n". 

> 


fLags->opt,  opt); 


/* 

* A key  printer  for  s e L e c t 0 n e DBOb j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

key P r i n t ( PG PKey I t e r *iter,  FILE  *fiLe,  void  *arg) 
{ 

struct  PgpTtyUI  ui; 
n (void)arg; 
n ui.fp  = fiLe; 


i:CCHK:115070444cc2220896833cc35eeb130d0b951e7e7dda2e77854cd5291ba172cec3: 


2100 


Pretty  Good  Privacy  5.0^”  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpk.c 


n fputc('\n',  file); 

n kdbTtyShowKey((void  *)  8ui,  iter,  defauLtset,  0); 

> 

/* 

* A name  printer  for  s e L e c t One D BO b j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

nameP r i n t ( PGPKey I t e r *iter,nFILE  *file,  void  *arg) 

{ 

n char  name s t r i n g C 2 5 6 D ; 
n size_t  Len  = 256; 

a struct  PgpTtyUI  ui; 

n (void)arg; 

n ui.fp  = file; 
n fputc('\n',  file); 

n pg pG e t U s e r I D S t r i ng  ( pgpKey I t e r U s e r I D (iter),  kPG PU s e r I D P r o pNa me , 
n n n n n n namestring,  8Len); 

n kdbTtyPutString  (namestring,  Len,  (unsigned)  Len,  fiLe,  0,  0); 
n fputs("\n",  fiLe); 

n kdbT t y S houS i g s ((void  *)  8ui,  iter,  defauLtset,  2); 

} 

/* 

* A sig  printer  for  s e L e c t 0 n e DBOb j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

s i g P r i n t ( PG PKey I t e r *iter,  FILE  *fiLe,  void  *arg) 

n (void)arg;n 

n pgp As se r t ( de f a u L t s e t ) ; 

n fputc('\n',  fiLe); 

n kdbTtyShowSig  (iter,  defauLtset,  fiLe,  1); 

> 


/*  Print  the  deepest  current  object  */ 
static  void 

ob j P r i n t ( PG PKey I t e r *iter,  FILE  *fiLe,  void  *arg) 

{ 

PGPKeylter  *printiter  = pgpCopyKeylter  (iter); 

n if  (pgpKeylterCert  (printiter)) 
n n sigPrint  (printiter,  fiLe,  arg); 
a eLse  if  ( pg pKey I t e r U s e r I D (printiter)) 
n n namePrint  (printiter,  fiLe,  arg); 
n eLse 

a n keyPrint  (printiter,  fiLe,  arg); 
n pgpFreeKeylter  (printiter); 

> 

/* 
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* Searches  <fuLLset>  for  keys  matching  the  substrings  on  the 

* command  Line. 

* If  <argc>==0  and  <defALL>,  uses  the  entire  <fuLLset>. 

* In  either  case,  the  *subset  returned  is  a valid,  newLy  created, 

* keyset . 

* 

* Currently  only  uses  the  first  argument  due  to  Limited  filtering 

* capability. 

* 

* Returns  1 if  any  keys  were  selected,  else  0. 

*/ 

static  int 

selectKeyArgsCint  argc,  char  *argvCII,  PGPKeySet  *fuLLset, 
n n n PGPKeySet  **subset,  int  defALL) 

{ 

n if  (argc  <=  0 S&  defALL)  { 

n n *subset  = pg p C opy Key S e t (fuLLset); 

n > e I s e { 

n *subset  = pgpFilterKeySetAuto  (fuLLset,  argvC0]); 

n } 

n return  (*subset  &S  pgpCountKeys  (*subset)  > 0); 

> 

/* 

* Select  one  object  of  type  <seLecttype>  and  return  an  iterator  pointing 

* to  it.  The  iterator  passed  is  replaced  by  a new  one. 

* 

* <targettype>  defines  the  requirements  for  the  returned  object.  For  example, 

* if  <seLecttype>  ==  key  and  <targettype>  ==  sig,  the  selected  key  must 

* have  a signed  userid  attached  to  it. 

*/ 

static  int 

s e I e c t On e DBOb j ( PG P Key  1 1 e r **iter,  int  selecttype, 

° n n int  targettype,  FILE  *out,  char  const  ‘header) 

{ 


□ 

PGPKeyltern 

□ 

‘selectiter  = *iter,  ‘targetiter  = NULL; 

n 

PGPKeyltern 

□ 

*iterListC50]; 

□ 

PGPKeyn  n 

n 

*key  = NULL; 

n 

PGPUserlDn 

Q 

‘userid  = NULL; 

n 

PGPCertnn 

Q 

‘cert  = NULL; 

n 

int 

maxObjs  = sizeof(iterList)  / sizeof(iterListC0Il); 

n 

i n t 

numOb  j s = 0; 

n 

i nt 

notFirst  = 0; 

a 

i nt 

result  = 0; 

a 

Long 

choice; 

a 

char 

‘endNum,  bufC32D; 

tt 

i n t 

i ; 

n 

if  (lenableUI) 

a 

n out  = NULL 

r 

n 

for  (;;)  f 

□ 

n result 

= 0 

r 

□ 

n switch 

(selecttype)  { 

u 

n case  KDBTYPE_KEY: 

n 

H n key 

= 

pgpKeylterNext  ( s e L e c t i t e r ) ; 

n 

n n if 

( ! key) 

Q 

n n 

break; 

n 

n n / * 

Do 

we  need  a name  or  a sig  on  the  key?  ‘/ 
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n 

Q 

a 

i f 

(targettype  ==  K DBT  Y P E_LI  S E R I D | | targettype  ==  KDBTYPE 

n 

n 

n 

B 

targetiter  = pgpCopyKeylter  (seLectiter); 

n 

n 

n 

B 

for  (;;)  ( 

n 

Q 

a 

B 

n userid  = pgpKeylterNextUserlD  (targetiter); 

D 

n 

a 

B 

n if  (userid  &S  targettype  ==  KDBT Y P E_U S E R I D ) C 

n 

n 

a 

B 

n n resuLt=1; 

n 

n 

a 

B 

n n break; 

n 

a 

a 

fl 

n > 

n 

a 

a 

B 

n eLse  if  (!  userid) 

n 

n 

n 

B 

n n break; 

D 

Q 

n 

B 

n if  (targettype  ==  KDBT YP E_C E RT ) < 

n 

n 

n 

B 

n n cert  = pg p Key  1 1 e r N e x t U I D C e r t (targetiter); 

a 

a 

n 

B 

n n if  (cert)  { 

n 

a 

n 

B 

a a a resuLt=1; 

n 

a 

a 

B 

n n n break; 

n 

Q 

n 

B 

n Q > 

n 

n 

a 

B 

n } 

n 

□ 

n 

B 

> 

n 

n 

B 

B 

pgp F reeKey I t e r (targetiter); 

n 

n 

B 

> 

a 

a 

B 

e L 

s e 

n 

a 

B 

n 

resuLt  = 1; 

n 

a 

B 

break; 

n 

□ 

case  KDBTYPE_USERID: 

n 

n 

B 

userid  = pg pKey I t e r N e x t U s e r I D (seLectiter); 

n 

n 

B 

i f 

( luserid) 

n 

s 

B 

break; 

n 

n 

B 

i f 

(targettype  ==  KD BT YPE_C E RT ) { 

n 

n 

B 

B 

targetiter  = pgpCopyKeylter  (seLectiter); 

n 

n 

B 

B 

cert  = pg pKey I t e r N e X t U I D C e r t (targetiter); 

n 

n 

B 

B 

if  (cert) 

n 

n 

B 

B 

n resuLt  = 1; 

n 

n 

B 

B 

pgp F r eeKey I t e r (targetiter); 

n 

Q 

B 

> 

n 

n 

B 

e L 

s e 

Q 

n 

B 

fl 

resuLt  = 1; 

n 

n 

B 

break; 

n 

n 

case  KDBTYPE_CERT  : 

□ 

n 

B 

cert  = pg pKey I t e r N e X t U I D C e r t (seLectiter); 

n 

n 

B 

i f 

(cert) 

H 

n 

B 

fl 

resuLt  = 1; 

n 

n 

B 

break; 

n 

n 

} 

Q 

a 

if 

(IresuLt) 

Q 

a 

B 

break; 

n 

a 

i f 

(numObjs  >=  maxObjs)  { 

n 

a 

B 

f p r i n t f ( s t d e r r , "Too  many  matches;  a bo r t i ng ! \ n " ) ; 

D 

a 

B 

goto  d e s t r oyAnd E r r 0 r ; 

n 

a 

> 

CERT) 


{ 


D n 
Q Q 

n n 
n a 
□ □ 
□ □ 
n □ 


/*  Copy  and  store  the  iterator  that  points  to  the  current  object  */ 
iterListCnum0bjs++3  = pgpCopyKeylter  (seLectiter); 
if  (notFirst)  { 
n if  ( ! out ) 
n { 

n n fprintfCstderr,  "Ambiguous  match  in  batch  mode;  aborting!\n"); 
n n goto  d e s t r oy An d E r r o r ; 
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a n 
a □ 
n □ 
a □ 
n n 
n B 

n B 
B B 
B B 
B B 

n > 


n } 

n if  (numObjs  ==  2)  { 

n B fprintfCout,  "%s\n  1)  ",  header); 

B B objPrint  (iterListCOD,  out,  NULL); 

B } 

n fprintfCout,  "%2d)  ",  numObjs); 

n objPrint  (seLectiter,  out,  NULL); 

> 

else 

B not  First  = 1 ; 


n i f ( numOb j s < 1 ) 

B B return  0; 

n else  if  (numObjs  ==  1)  { 
n B if  ( out  ) 

n B B objPrint  (iterListC0!],  out,  NULL); 

B B *iter  = iterListC0]; 

a B pgp F reeKey I t e r (seLectiter); 

B B return  numObjs; 

n > 

B pgpAssert(out); 

n fprintf(out,  "Choose  one  of  the  above:  "); 

B pgpTtyGetString(buf,  sizeof(buf),  out); 

n choice  = strtol(buf,  SendNum,  10); 

B while  (isspace  (*endNum)) 
n B endNum++; 

B if  (*endNum  | | choice  <1  | | choice  > numObjs)  { 

n B fprintf  (stderr,  "Invalid  choice\n"); 

n B goto  d e s t r oy An d E r r o r ; 

B } 

n *iter  = pg p C opy Key  1 1 e r ( i t e r L i s t C c h o i c e - 13); 
a pgpFreeKeylter  (seLectiter); 

B result  = numObjs; 

B goto  destroyAndExit; 


destroyAndError: 

B result  = -1; 
destroyAndExi t : 

B /*  Free  all  the  key  iterators  we  copied  */ 
B for  (i  = 0;  i < numObjs;  i++) 

B B pgpFreeKeylter  ( i t e r L i s t C i 3 ) ; 

B return  result; 

> 


/* 

* Service  routine  for  s e L e c t D BOb j e c t , below.  This  one  selects  a user  ID 

* and  optionally  a signature  from  a RingSet  composed  of  a single  key 

* and  its  descendants. 

*B 

* <iter>  points  to  a key  object  previously  selected,  and  is  updated  to 

* point  to  the  child  object. 

*/ 

static  i nt 

s e L e c t C h i L d 0 b j e c t ( PG PKey  1 1 e r **iter,  int  selecttype,  char  const  *prep, 
i:CCHK:13f512f620ff720ddeb86319a842bbffb6cccbb0d9baaaaaea4dedbc2243662e833 
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n n n n FILE*Log) 

{ 

n i n t err; 
n char  headerC2563; 


n 

n 

□ 

n 

n 


pgpAssert  (seLecttype  ==  KDBT Y P E_U S E R I D | | 

if  (seLecttype  ==  KDBT Y P E_U S E R I D ) 
n sprintf  (header,  "Please  select  a user 
else 

n sprintf  (header,  "Please  select  a user 


seLecttype  ==  KD BT YP E_C E RT ) ; 

ID  %s:",  prep); 

ID  with  a signature  %s:",  prep); 


n err  = s e I e c t On e D BOb j ( i t e r , KDBT Y P E_U S E R I D , seLecttype,  Log,  header); 
a if(err<=0){ 
n n if  (log) 

n n n fprintf  (Log,  "No  user  ID's  selected  %s.\n",  prep); 
n n return  0; 

n } 

n if  (seLecttype  ==  KDBTYPE_C ERT ) { 

n a sprintf  (header,  "Please  select  a signature  %s:",  prep); 

a a err  = seLectOneDBObj(iter,  KDBTYPE_CERT,  0,  Log,  header); 

a a if(err<=0){ 

a a a if(Log) 

a a a a fprintf  (Log,  "No  signatures  selected  %s.\n",  prep); 

a a a return0; 

a a } 

a } 

a return  err;a/*  success  */ 

} 


/* 

* Selection  routine.  Selects  a key,  userid  or 

* signature  depending  on  the  seLecttype  parameter,  a RINGTYPE_  value. 

* Returns  pointer  to  a key  iterator  that  references  the  selected  object. 

* Prep  is  a prepositional  clause  Like  "to  be  removed".  Returns  0 if 

* no  keys  selected,  negative  on  error.  If  objects  are  selected  returns 

* the  number  of  objects  at  that  Level,  e.g.  if  a user  ID  is  selected  it 

* returns  the  number  of  user  ID's  on  that  key;  if  a signature  is  selected 

* it  returns  the  number  of  sigs  on  that  user  ID. 

* This  will  always  be  at  Least  1. 

*/ 

static  int 

s e I e c t DBOb j ec t ( i n t argc,  char  **argv, 

n n n n PGPKeySet  *fuLLset,  int  seLecttype,  char  const  *prep, 

n n n n FILE  *Log,  PGPKeylter  **iter) 

{ 

n PGPKeySet  *subset  = NULL; 

n PGPKeyList  *keyList  = NULL; 

a char  namebufC256D; 

n char  headerC256D; 

n size_t  namelen; 

n int  err  =0; 

n int  anykeys ; 

n / * 

n * Protect  headerC]  from  being  overfilled  by  the  sprintf's  to  it. 
LCCHK: 0c 9006634aee7a 35deef98fa491cA5554ba7c78d08e63c3072c6a444b0c1 69940:: 
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n * prep  is  only  set  within  the  program  to  small  strings,  so  this 
n * should  never  happen, 

n * / 

n pgpAssert  C s t r I e n ( p r e p ) < 100); 


n i f 

(arge  ==  0)  { 

u n 

pgpAssertl log); 

u a 

fprintf  (log. 

"A  user  ID  is  required  to  select  the  key  you  want  %s.\n\ 
Enter  the  key's  user  ID:  ",  prep); 


□ □ 

namelen  = p g pT t y G e t S t r i ng  (namebuf,  sizeof  (namebuf),  log); 

a n 

argv  = (char  **)  ma 1 1 o c ( s i z eof ( c ha r *)); 

n n 

argvC0D  = namebuf; 

n a 

a rg  c = 1 ; 

n } 

n / * 

Build  ordered  subset  of  keys  */ 

n anykeys  = selectKeyArgs  large,  argv,  fullset,  &subset,  0); 
n if  (anykeys)  { 


□ Q 

keylist  = pgpOrderKeySet  (subset,  kPGPUserlDOrdering); 

El  n 

if  (!keylist)  { 

□ □ 

n fprintf  (stderr,  "Unable  to  order  keysetXn"); 

tt  n 

n err=-1; 

n Q 

n goto  cleanup; 

n n 

} 

□ a 

*iter  = pgpNewKeylter  (keylist); 

n n 

if  (!*iter)  { 

□ n 

n fprintf  (stderr,  "Unable  to  create  key  iterator\n"); 

n Q 

a err=-1; 

Q n 

n goto  cleanup; 

n D 

} 

n □ 

if  (selecttype  ==  KD BT Y P E_U S E R I D ) 

n □ 

n sprintf  (header. 

Please  select  a key  with  a user  ID  %s:",  prep); 


□ n 

else  if  (selecttype  ==  KDBT Y P E_ C E RT ) 

B B 

n sprintf  (header. 

Please  select  a key  with  a signature  %s:",  prep); 


B B 

else 

B B 

n sprintf  (header. 

Please  select  a key  %s:",  prep); 


B B 

/*  Point  the  iterator  at  the  selected  key  */ 

B B 

err  = selectOneDBObj  (iter,  KDBTYPE_KEY,  selecttype,  log,  header); 

B } 

B if 

(err  <=  0)  { 

B B 

if  (log) 

n n n fprintf  (log, 

"No  keys  selected  %s.\n",  prep); 
n n err=0; 


B B 

goto  cleanup; 

B > 

B /* 

Handle  signature  and  user  ID  selection  */ 

B if 

(selecttype  !=  KDBTYPE_KEY)  { 

B B 

err  = s e 1 e c t C h i 1 d Ob j e c t ( i t e r , selecttype,  prep,  log); 

B B 

goto  cleanup; 

n > 

cleanup: 

[[CHK:9b7aa9e39451eb44a3b7d5f0d4de3620e3b4ec7f2a0d6698799fc9f225060a34f:D 
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n 

n 

□ 

a 

y 


if  (keylist) 

a pg p F r e e Ke y L i s t (keylist); 

if  (subset) 

n pgpFreeKeySet  (subset); 
return  err; 


/* 

* Selects  one  key  from  those  that  match  the  given  substring,  or 

* from  all  keys  if  <subStr>  is  NULL. 

*/ 


static  PGPError 

s e I e c t OneKey ( c ha r const  *subStr 


D 

/ 

a a char 

const  *header 

\ 

n 

PGPErrorn  n 

result; 

n 

PGPKeySet  *nn 

matches; 

n 

PGPKeyList  *n 

matchList; 

Q 

PGPKeylter  *n 

iter; 

PGPKeySet  *fullset,  PGPKey  **key 


n *key  = NULL; 


n if  (subStr  ==  NULL)  { 
n n pg p I n c Key S e t R e f C ou n t ( f u I I s e t ) ; 

n n matches  = fullset; 

n } e I s e { 

n n matches  = pg p F i 1 1 e r Key S e t A u t o ( f u I I s e t , subStr); 

n } 

o if  (matches  ==  NULL) 
n n return  -1; 

□ 

n matchList  = pg pO r de r Key S e t ( ma t c h e s , kPG PU s e r I DO r d e r i ng ) ; 
n pg p F r e e Key  S e t ( ma  t c h e s ) ; 

n if  (matchList  ==  NULL) 
n n return  PG P E R R_NOM E H ; 


n iter  = pg pN e wKey 1 1 e r ( ma t c h L i s t ) ; 
n pgpFreeKeyList(matchList); 
n if  (iter  ==  NULL) 
n a return  PGPERR_NOMEM; 

n result  = s e I e c t On e DBOb j ( & i t e r , KDBTYPE_KEY,  KDBTYPE_KEY,  stderr,  header); 
n if  (result  > 0) 
n { 

n n result  = PGPERR_OK; 

n n *key  = pg pKey 1 1 e r Key ( i t e r ) ; 
n } 


n pg  p F r e e Key  1 1 e r ( i t e r ) ; 

a return  result; 

} 


/*  #define  TESTBUF  to  test  pg p I mpo r t Key Bu f f e r */ 

#ifdef  TESTBUF 

/*  For  testing  pg p I mpo r t Key Bu f f e r */ 
static  byte  * 

CCCHK:6903b331bd9f6f50bf00ff824fa22 9935a 44f6522e7531aaf566677b64bcaf74e:: 
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fiLeread  (char  *fiLename,  size_t  *bufsize) 
{ 

n byte  *buf ; 
n struct  stat  statbuf; 
a FILE  * f ; 


n if  (stat  (filename,  Sstatbuf)  < 0)  { 
n a perror  ("stat"); 

a a exit  (2); 

a > 

a *bufsize  = statbuf. st_size; 
n buf  = (byte  *)malLoc  (statbuf. st_size); 
a if  (!(f  = fopen  (filename,  "rb")))  { 
a a perror  ("fopen"); 

B a exit  (2); 

a > 

B if  (fread  (buf,  1,  s t a t bu f . s t _ s i z e , f)  !=  s t a t bu f . s t _ s i z e ) { 
a a perror  ("fread"); 

B B exit  (2); 

a } 

a fclose  (f); 
a return  buf; 

> 

#end  i f 


static  int 

doKeyAdd  (int  argc,  char  *argv[!],  struct  PgpTtyUI  *ui_arg) 


n 

PGPKeySeta 

B *newset  = NULL; 

n 

PGPKeyLi stB 

B *li St  = NULL; 

u 

PGPFi leRef a 

a *fileRef; 

n 

int 

newkeys  = 0; 

n 

i n t 

err  = 0,  port  = 0; 

Q 

char  serverCI 0243,  fileC10243,  p r o t o c o 1 C 1 6 3 ; 

D 

i f 

(large)  ( 

n 

B 

f p r i n t f 

(stderr,  "No  keyfile  specifiedXn"); 

Q 

B 

err  = - 1 

f 

n 

B 

goto  cleanup; 

n 

□ 

> 

n 

wh  i 

1 e ( a rg  c- 

-)  { 

a 

B 

if(parse 

_u r 1 ( p ro t oco 1 , server,  file.  Sport,  argvCargc3)  == 

n 

B 

PGPERR_0K)  { 

B 

B 

B char 

♦buffer  = NULL; 

B 

B 

B i f ( Ge t Key I n f 0 ( u i _a r g , 

B 

B 

B B 

a a protocol. 

fl 

B 

B B 

a a server. 

B 

B 

B B 

B B file. 

B 

B 

B B 

a a port. 

B 

B 

B B 

a a Sbuffer) 

B 

B 

B = 

= PGPERR_0K)  { 

B 

B 

B B 

newset  = pg p I mpo r t Key Bu f f e r ( ( u n s i g n ed  char  *)  buff 

B 

B 

B B 

a a a a a a a s t r 1 e n ( b u f f e r ) ) ; 

B 

B 

B B 

pgpFree(buffer); 

B 

B 

n } 

B 

B 

B else 

{ 

CCCHK:e190bbc05f5a4e33ac004b844f59437c388405abb98d22443aca6fa4cd7f8ae6aDII 
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□ a 

n □ 

□ □ 

a n 

n □ 

□ □ 

n n 

D B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

a B 

B B 

B B 

B B 

a B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

B B 

n > 


n B neuset  = NULL; 

n a continue; 

n > 

> 

else  { 

a fiLeRef  = pgpNewFiLeRefFromFuLLPath  (argvCargcIl); 

B if  (fiLeRef  !=  NULL)  { 

n B newset  = pg p I npo r t Key F i L e (fiLeRef); 
a a pg p F r e e F i L e R e f ( f i L e Re f ) ; 

n > 

n e L se  { 

B B fprintf  (stderr,  "UnabLe  to  import  keyfiLe  \"%s\"\n",  argvCOD); 

B B argv++; 

n B continue; 

n > 

} 

B 

fprintf  (stderr,  "\nAdding  keys:\n\n"); 

/*  Order  keys  for  dispLay  */ 

List  = p g p 0 r d e r Key S e t (newset,  kPG P A ny 0 r d e r i ng ) ; 
if  (!List)  { 

B fprintf  (stderr,  "UnabLe  to  create  keyList\n"); 
a err=-1; 
n goto  cLeanup; 

> 

kdbTtyKeyView((void  *)  ui_arg.  List,  defauLtset,  argvCOD,  0); 
newkey S++ ; 

pgpAddKeys  (defauLtset,  newset); 
pg p F r e e Key L i s t (List);  List  = NULL; 
fprintf  (stderr,  "\n"); 
a rgv  + +; 

/* 

* Must  commit  changes  before  freeing  source  set,  a temporary 

* Library  restriction. 

*/ 

pgpCommi tKeyRingChanges  (defauLtset ) ; 
pgpFreeKeySet  (newset);  newset  = NULL; 


B i f ( ! newkey s ) { 

n B fprintf  (stderr,  "No  keys  to  add  \n"); 

B B goto  cLeanup; 
n > 


n fprintf  (stderr,  "Keys  added  s u c c e s s f u L L y . \ n " ) ; 

B e r r = 0 ; 

cLeanup: 

B if  (List) 

n B pgpFreeKeyList  (List); 

n i f ( newset  ) 

B B pgpFreeKeySet  (newset); 

B return  err; 

} 


static  int 

doKeyExtract  (struct  FLags  *fLags,  int  argc,  char  *argvCD, 
B struct  PgpTtyUI  *ui_arg) 


CCCHK:  1 7032474 5c9e10bbbf8b27921  7e8842e6d110bb0a433a2670dde8858888a7dd23:: 
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a PGPKeySetn  *keyset  = NULL; 

n PGPFiLeRefn  *fiLeRef; 

n int  err,  port  = 0; 

n char  serverC1024Il,  fiLeC1024],  protocoLC16!]; 

n (void)  ui_arg; 

n err  = s e L e c t Key A r g s (argc,  argv,  defaultset,  Skeyset,  0); 


n ifCerr>0){ 
n n i f ( f L a g s->ou t f 1 L e ) { 

a n n i f ( pa r s e_u r L ( p r o t o c o I , server,  file.  Sport,  f L a g s->ou t f i L e ) 

n n n ==  PGPERR_0K)  { 

o a a B /*No  file  specified,  dump  it  out  to  the  console:*/ 

n n n n char  *buffer  = NULL; 


n 

u 

□ 

B 

si z e_t 

length  = 1; 

□ 

n 

n 

□ 

a 

n 

B 

if((buffer  = pg p A 1 1 o c ( s i z eo f ( c h a r ) * length)))  { 

n 

n 

n 

B 

B 

pgpExportKeyBuffer(keyset, 

a 

a 

n 

B 

B 

B 

n n n (unsigned  char  *)  buffer. 

n 

u 

n 

B 

B 

B 

n n n Slength); 

n 

n 

n 

B 

B 

pgpFree(buffer); 

a 

Q 

D 

B 

B 

++length;  /*Hake  room  for  a null*/ 

u 

n 

n 

B 

B 

if((buffer  = pgp A 1 1 oc ( s i z eof ( c ha r ) * length)))  { 

n 

n 

B 

B 

B 

B 

err  = pg p E x po r t Ke y Bu f f e r ( key s e t , 

n 

n 

n 

B 

B 

B 

n n n n n n (unsigned  char  *)  buffer. 

n 

n 

B 

B 

B 

B 

n B B n B n Slength); 

n 

n 

B 

B 

B 

B 

if(err  ==  PGPERR_0K)  { 

n 

n 

B 

B 

B 

B 

n if(strcasecmp(protocol,  "hkp")  ==  0)  { 

n 

n 

B 

B 

B 

B 

n B Pu t Key  I n f 0 H kp ( u i _a r g , server,  port,  buffer); 

o 

□ 

B 

B 

B 

B 

n } 

n 

n 

B 

B 

B 

B 

B else  { 

a 

n 

B 

B 

B 

B 

B B if(strcasecmp(protocol,  "http")  ==  0) 

n 

n 

B 

B 

B 

B 

B B n f p r i n t f ( u i _a r g->f p,  "\ 

HTTP  cannot 

be 

used 

a s 

a sending  protocol  at  this  time.Xn"); 

o 

n 

B 

fl 

B 

B 

B B else 

n 

n 

B 

B 

B 

B 

B B n f p r i n t f ( u i _a r g->f p , "\ 

Unknown 

protocol  %s. 

\ n " 

, protocol); 

n 

D 

B 

B 

B 

B 

B } 

n 

n 

B 

B 

B 

B 

B pgp F r ee ( buf f e r ) ; 

D 

n 

B 

B 

B 

B 

> 

n 

□ 

B 

B 

B 

> 

n 

n 

B 

B 

B 

else 

n 

n 

B 

B 

B 

fl 

err  = PG P E R R_N0M EH ; 

n 

n 

B 

B 

> 

n 

n 

B 

> 

n 

n 

B 

e L 

s e { 

n 

n 

B 

B 

i f ( pg pT t y C h e c kO ve r w r i t e ((void  *)  ui_arg,  f 1 a g s ->o u t f i 1 e ) ) f 

n 

Q 

B 

B 

B 

err 

= PGPERR_N0_FILE; 

n 

n 

B 

B 

> 

n 

□ 

B 

B 

else 

n 

n 

B 

B 

B 

fileRef  = 

D 

n 

B 

B 

B 

fl 

pg pN e w F i 1 e Re f F r om F u 1 1 Pa t h ((char  *)  f 1 a g s ->ou t f i 1 e ) ; 

n 

n 

B 

B 

B 

i f 

(f i leRef  !=  NULL)  { 

n 

n 

B 

B 

B 

B 

err  = pg p Expo r t Key F i 1 e (keyset,  fileRef); 

n 

n 

B 

B 

B 

fl 

pgpFreeFi leRef  (fileRef); 

n 

n 

B 

B 

B 

> 

n 

n 

B 

B 

B 

else 

u 

□ 

B 

B 

B 

fl 

err  = PGPERR_N0MEH; 

:[:CHK:567dd4aaf37844fffe987773b7af5f3fdb0612124baeba1041f46353r62ae0b7a:: 
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n Q Q 

n □ D 

n n > 

n n e L 

ana 
a a a 

ana 
n n n 

n n n 

n c n 

n n n 

n n n 

n n n 

n n n 

n n n 

a n n 

n n n 

n n n 

n n n 

nan 
n n n 

n n n 

n n n 

n n n 

n n n 

n n n 

ana 
a a a 

a a a 

n n } 

n > 

n e I se  { 
n n if(err==0) 

n n n fprintf  (stderr,  "No  keys  were  selected  for  extraction. \n"); 
n > 

n i f ( keyset ) 

n n pgp F r eeKey S e t (keyset); 

n return  err; 

} 

static  int 

doKeyDisable  (int  argc,  char  *argvnD, 
n n n n struct  PgpTtylll  *ui_arg) 

{ 

n Boolean  disabled; 

n int  done_somet h i ng  = 0; 
n int  err; 

n PGPKeylter  *iter  = NULL; 

n PGPKey  *key; 

n (void)  ui_arg; 

n /*  Select  object  to  remove  */ 

n err  = s e I e c t DBOb j e c t ( a r g c , argv,  defaultset,  KDBTYPE_KEY, 
n n n n n n n "to  disable  or  enable",  stderr,  Siter); 

n if  (err<=0)  ( 

n return0; 

CCCHK: e943503378b7423606391990f 1 35adf db999d88f 55b1 304a86cbbf 1 61 350e8c1 2:: 


n } 

} 

s e { 

/*No  file  specified,  dump  it  out  to  the  console:*/ 
char  *buffer  = NULL; 
size_t  length  = 1; 

if((buffer  = pgpA I I oc ( s i zeof ( cha r ) * length)))  ( 
n pg p E X po r t Key Bu f f e r ( key s e t , 

n n n n n (unsigned  char  *)  buffer, 

n n n n n Slength); 

n pg p F r e e ( bu f f e r ) ; 

n ++length;  /*Make  room  for  a null*/ 

n if((buffer  = pg p A I I o c ( s i z e o f ( c h a r ) * length)))  ( 
n n err  = pg p Expo r t Key Bu f f e r ( key s e t , 

nnnnnnnn  (unsigned  char  *)  buffer, 

n n n n n n n n Slength); 

n n if(err  ==  PGPERR_0K)  ( 

n n n *(buffer  + length)  = '\0'; 

n n n fprintf(ui_arg->fp,  buffer); 

n n n pg p F r e e ( b u f f e r ) ; 

an} 

n } 

n else 

n a err  = PGPERR_NOMEH; 

> 

else 

n err  = PGPERR_NOHEM; 
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□ 

n 

n 

n 

n 

n 

n 

n 

a 

n 

a 

n 

u 

n 

n 

n 

u 

n 

Q 

n 

a 

n 

u 

n 

n 

n 

n 

n 

n 

D 

n 

n 

n 

n 

n 

y 


y 

key  = pg p Key I t e r Key  (iter); 
pg p F r e e Key I t e r (iter); 

pgpGetKeyBooLean  (key,  kPGPKeyPropIsDisabled,  &disabLed); 
if  (enabLeUI) 

n fprintf  (stderr,  "Xn"); 


i f 

( d i 

sabLed)  -C 

n 

i f 

(enabLeUI) 

a 

n 

fprintf  (stderr,  "Enable  this  key?  (y/N)  "); 

n 

i f 

(lenableUI  {|  pgpTtyGetBoo L 

(0, 

stderr))  { 

n 

if  ( pg p E n a b L eKey  (key)  = = 

PGPERR_0K)  { 

n 

Q 

done_something  = 1; 

n 

n 

a if  (enabLeUI) 

n 

Q 

n n fprintf  (stderr,  " 

\ n Key 

enabled. \n"); 

n 

n 

} 

n 

n 

else  if  (enabLeUI) 

□ 

n 

fprintf  (stderr,  "\nUnabLe 

to  enable  key.\n 

Q 

> 

> 

e L 

s e { 

n 

i f 

(enabLeUI) 

n 

□ 

fprintf  (stderr,  "Disable 

this 

key?  (y/N)  "); 

Q 

i f 

(lenabLeUI  ||  p g pT t y G e t Boo L 

C0, 

stderr))  { 

n 

if  ( pgp D i sa b L eKey  (key)  == 

PGPERR_0K)  { 

n 

□ 

don e_ some t h i ng  = 1; 

D 

n 

n if  (enabLeUI) 

n 

tt 

n n fprintf  (stderr,  " 

\nKey 

disabled. \n"); 

n 

u 

> 

n 

a 

else  if  (enabLeUI) 

n 

n 

fprintf  (stderr,  "\nUnabLe 

to  disable  key\n 

n 

> 

> 

if 

(done_something)n 

pgpCommitKeyRingChanges  (defauLtset); 
return  0; 


static  int 

doKeyCheck  (struct  Flags  *fLags,  int  argc,  char  *argvnD, 
n struct  PgpTtyUI  *ui_arg) 

n PGPKeySet  *subset  = NULL; 

n PGPKeyList  *keyList  = NULL; 

n (void)flags; 

n fprintf  (stderr,  "\n"); 
n if  (argc  > 0)  ( 

n n s e L e c t KeyA r g s (argc,  argv,  defauLtset,  &subset,  0); 
n n if  (subset  ==  NULL) 

n n n return-1; 

n n pg p C h e c kKey R i ng C e r t i f i c a t e s (subset); 

n n pgpCommitKeyRingChanges  (defauLtset); 

n n keyList  = pgpO rde r KeySet  (subset,  k PG PAny 0 r d e r i n g ) ; 

n n kdbTtyKeyVi ew  ((void  *)  ui_arg,  keyList,  defauLtset,  NULL,  4); 

n n pgpFreeKeyList  (keyList); 

n n pg p F r e eKey S e t (subset); 

n > 
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H else  { 

n n pg p C h e c kKe y R i ng  C e r t i f i c a t e s ( de f a u L t s e t ) ; 

n n pg p C omm i t Key R i ng C ha n g e s C d e f a u L t s e t ) ; 

n n keyList  = pg pO r d e rKey S e t (defauLtset,  k PG P Any 0 rd e r i ng  ) ; 
n n kdbTtyKeyVi ew  ((void  *)  ui_arg,  keyList,  defauLtset,  NULL,  4); 
a n pgpFreeKeyList  (keyList); 
n > 

n return  0; 

> 


static  int 

do KeyList  (struct  FLags  *fLags,  int  argc,  char  *argvCD, 
a a a struct  PgpTtyUI  *ui_arg) 

{ 

n PGPKeySet  *subset  = NULL; 

n PGPKeyList  *keyList  = NULL; 

n int  List_mode  = 0; 

n se LectKeyArgs  (argc,  argv,  defauLtset,  &subset,  1); 
n if  (subset  ==  NULL) 

n n return  -1; 

a if  (fLags->argc  > 0 &&  f L a g s->a r g s C 0 D ==  'L') 
n List_mode  = 2;  /*  verbose  */ 

n fprintf  (stderr,  "\n"); 

n keyList  = pgpOrderKeySet  (subset,  kPGPUserlDOrdering); 

n kdbTtyKeyVi  ew  ((void  *)  ui_arg,  keyList,  defauLtset,  NULL,  L i s t _iiiod  e ) ; 
n pgpFreeKeyList  (keyList); 

a pg p F r e eKey S e t (subset); 

n return  0; 

} 

/* 

* Give  the  user  an  opportunity  to  edit  the  trust  of  object  obj. 

* Return  1 if  he  changes  it,  0 if  he  does  not. 

* firsttime  means  that  we  have  not  previousLy  had  a trust  vaLue  for 

* this  key,  which  changes  the  wording  of  the  questions  somewhat. 

* If  PG PTRU STHO D E L is  0,  obj  shouLd  be  a key,  eLse  it  shouLd  be  a name. 

* The  key  and/or  name  shouLd  have  been  printed  just  before  this  routine 

* is  ca  L L ed . 

*/ 

static  int 

doKey E d i t T r u s t ( PG PKey I t e r *iter,  int  firsttime,  FILE  *Log) 


□ 

byte  keytrust; 

n 

Long  oLdtrust; 

n 

unsigned  Long 

confvaLue; 

n 

unsigned  Long 

trustcode; 

n 

int  L e n ; 

#if 

ONLY_TRUST_VALID_KEYS 

Q 

Long  vaLid; 

# end i f 

n PgpT rustHode L pgpt rustmode L ; 

n char  bufC8D;n  n /*  enough  for  7 digit  response  */ 

#if  ONLY_TRUST_VALI D_KEYS 

n pgpGetKeyNumber  (pgpKeylterKey  (iter),  kPGPKeyPropVaLidity,  &vaLid); 
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n if  (valid  !=  PG P_ V A LI D I T Y_ C OM P LET E ) { 
n fprintf  (log, 

"This  key  is  not  valid,  and  cannot  be  assigned  trustXn"); 
n n return  0; 

n } 

Send  i f 

n if  (firsttime)  { 
n n fprintf  (log, 

"Do  you  want  to  change  your  estimate  of  this  key  owner's  reliability\n"\ 

"as  an  introducer  of  other  keys  (y/N)?  "); 
n n if  ( ! pg pT t y G e t Boo  I ( 0 , log))  ( 

n n n fprintf  (log, 

"No  changes  made.Xn"); 
n n n return0; 

n n } 

a n fprintf  (log, 

"\n"\ 

"Make  a determination  in  your  own  mind  whether  this  key  actually\n"\ 
"belongs  to  the  person  whom  you  think  it  belongs  to,  based  on  a va  i I a b I e \ n " \ 
"evidence.  If  you  think  it  does,  then  based  on  your  estimate  of\n"\ 

"that  person's  integrity  and  competence  in  key  management,  answer\n"\ 

"the  following  question:\n"); 
n } 


n pgpt rustmode  I = PGPTRUST0; 
n if  ( pg p t r u s t mode  I ==  PGPTRUST0)  { 
n n fprintf  (log, 

"\nWould  you  trust  this  key  owner\n"\ 

"to  act  as  an  introducer  and  certify  other  people's  public  keys  to  you?\n"\ 
"(1=1  don't  know.  2=No.  3=Usually.  4=Yes,  always?  "); 
n n len  = pgpTtyGetString  (buf,  2,  log); 
n n if  (lien)  { 

n n n fprintf  (log, 

n "No  changes  made.Xn"); 
n n n return0; 

n n } 

n n trustcode  = atoi(buf); 

a n switch  (trustcode)  ( 

a a case  1 : 

n n n keytrust  = PGP_KE YTRUST.UNKNOWN; 

n n n break; 

n n c a s e 2 : 

n n n keytrust  = PG P_KE YT RU S T_N E V E R ; 
n n n break; 

n n ca  s e 3 : 

n n n keytrust  = PG P_KE YT RU S T_M A RG I N A L; 

n n n break; 

n n c a s e 4 : 

n n n keytrust  = PG P_KE YT RU ST_COM P L ET E ; 

a n a break; 

n n default: 

n n n fprintf  (log, 

n "Unrecognized  response. \n"); 
n n n fprintf  (log, 

n "No  changes  made.Nn"); 
a H n return0; 

□ a > □ 
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n 

n 

u 

□ 


Q 

D 

n 

n 

n 


n 

n 

n 

n 

Q 

n 

n 

n 

n 

n 

n 

n 

a 

n 

n 

n 

Q 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

a 

> 


n if  (pgpSetKeyTrust  ( pg pKey I t e r Key  (iter),  keytrust)) 
n fprintf  (stderr,  "Unable  to  set  trustXn"); 

> else  {a  a a a a /*  New  trust  model  */ 
n fprintf  (log, 

\nDescribe  the  confidence  you  have  in  this  person  as  an  i n t r od u c e r . \ n " \ 
What  are  the  odds  that  this  key  owner  is  going  to  be  wrong  about\n"\ 
a key  which  he  has  signed  as  an  i n t r od u c e r ? \ n " ) ; 


a 

if 

( ! f i 

rsttime)  { 

a 

a 

pg pG e t U s e r I DN umb e r ( p g p Key  1 1 e r U s e r I D (iter). 

a 

a 

a 

n D n n n kPGPUserlDPropConfidence,  &oldtrust); 

a 

a 

i f 

(oldtrust  ==  PGP_TRUST_INFINITE) 

a 

a 

a 

fprintf  (log. 

(Current ly 

he 

is  listed  as  having  essentially  zero  chance  "\ 

of  being 

wrong. )\n"); 

a 

a 

else  if  (oldtrust  ==  0) 

a 

a 

a 

fprintf  (log. 

(Currently 

h e 

is  listed  as  not  having  any  confidence  as  an  i n t r od u c e r . ) \ n 

a 

a 

else  { 

a 

a 

a 

int  d = oldt rust-PGP_TRUST_DECADE-PGP_TRUST_OCTAVE; 

a 

a 

a 

int  i ; 

a 

a 

a 

unsigned  long  1; 

a 

a 

a 

fprintf  (log. 

(Currently 

he 

is  listed  as  having  a one  in  "); 

a 

a 

a 

d -=  d % PGP_TRUST_DECADE; 

a 

a 

a 

i = d / PGP_TRUST_DECADE; 

a 

a 

a 

1 = r i n gT r u s t To  I n t ( 0 1 d t r u s t - d); 

a 

a 

a 

if  ( i ) 

a 

a 

a 

n fprintf(log,  "%lu%0*u",  1,  i,  0); 

a 

a 

a 

else 

a 

a 

a 

n fprintf(log,  "%lu",  1); 

a 

a 

a 

fprintf  (log. 

a 

a 

a 

n n " chance  of  being  wrong. )\n"); 

a 

a 

> 

a 

> 

a 

fprintf 

(log. 

Enter 

a number 

from  1 to  2 million"); 

a 

i f 

(Ifirsttime) 

a 

a 

fprintf  (log. 

, or 

hit  return  to  leave  unchanged."); 

a 

fprintf 

(log. 

\nHe 

wi  1 1 

be  wrong  one  time  in:  "); 

a 

1 en 

= pg pT t y G e t S t r i ng  (buf,  sizeof(buf),  log); 

a 

i f 

(lien)  { 

a 

n 

fprintf  (log. 

No  changes  made.Xn"); 
a a return  0; 
a > 

a trustcode  = strtouLCbuf,  NULL,  0); 
n confvalue  = r i ng I n t ToT r u s t ( t r u s t c od e ) ; 

n pgpS e t U s e r I D C on f ( pg p Key I t e r U s e r I D (iter),  confvalue); 

> 

pgpCommitKeyRingChanges  (defaultset); 
return  1 ;n  a /*  made  a change  */ 


/*  Helper  routine  for  doKeyEdit,  when  the  key  being  edited  is  someone  else*s  */ 
static  int 
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doKey Ed  1 1 0 1 h e r s ( s t ru c t Flags  *fLags,  PGPKeylter  *iter, 
n n n n struct  PgpTtyUI  *ui_arg) 

{ 

n i n t e r r ; 

a PgpTrustHodeL  pgptrustmodeL; 
n Boolean  secret; 

n PGPKey  *key  = pg p Key  1 1 e r Key  (iter); 


(void)  flags; 
pgptrustmodel 


PGPTRUST0; 


n 

pg pGe t KeyBoo 1 ea n (key,  kPG PKe y P r op  I s S e c r e t , Ssecret) 

a 

i f 

(secret)  { 

n 

fprintf  (stderr,  "\nDo  you  want  to  set  this  key 

□ 

n 

if  ( pgpT t y Ge t Boo  1 ( 0,  stderr)) 

{ 

□ 

n 

p g p S e t Key Ax i oma t i c (key. 

FALSE,  NULL); 

□ 

n 

n goto  commit; 

u 

a 

} 

u 

> 

n 

i f 

(pgptrustmodel  ==  PGPTRUST0)  <. 

u 

n 

err  = d o Key  Ed  i t T r u s t ( i t e r , 0, 

stderr); 

n 

> 

else  { 

n 

n 

/*  New  trust  model  works  on  a 

per  user  ID  basis. 

Q 

a 

err  = selectChild0bject(8iter 

, KDBTYPE_USERI D,  " 

n 

n 

if  (err  < 0) 

□ 

n 

n return  err; 

la 

n 

fprintf  (stderr,  "\n"); 

n 

n 

ui_arg->fp  = stderr; 

□ 

n 

kdbTt y S howKey ( u i _a r g , iter,  defaultset,  0); 

n 

□ 

err  = doKey E d i t T r u s t ( i t e r , 0, 

stderr); 

u 

> 

n 

i f 

(err  < 0 ) 

□ 

□ 

return  err; 

n 

i f 

(err  ==  0) 

n 

n 

return  0;n  /*  No  changes  made  */ 

commi t 

: 

n 

fprintf  (stderr. 

Must  select  one . */ 


'Public  keyring  updated . \n" ) ; 

5 pgpCommitKeyRingChanges  Cdefaultset); 
3 return  0; 


/* 

* Helper  routine  for  d oKey Ed i t S e I f , to  change  a pass  phrase. 

* If  parent  is  non-NULL,  it  is  a subkey  pass  phrase. 

* secobj  is  the  object  getting  its  pass  phrase  changed,  with  seckey 

* having  been  made  from  it. 

*/ 

static  int 

doKey C ha nge Pa s sph r a se ( s t r u c t PgpTtyUI  *ui_arg,  PGPKeylter  *iter) 

{ 

int  err  = PGPERR_OK; 

charn  n oldphraseCPASSLEN3,  newphraseCPASSLEN3,  neuphrase2CPASSLEN3; 
PGPSubKey  *subkey; 


fprintf  (stderr,  "Need  old  passphrase.  "); 
p g pT t y G e t Pa s s (ui_arg,  oldphrase,  PASSLEN); 
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n fprintf  (stderr,  "Need  new  passphrase.  "); 
n pgpTtyGetPass  (ui_arg,  newphrase,  PASSLEN); 
n fprintf  (stderr,  "Enter  it  a second  time. 
n pgpTtyGetPass  (ui_arg,  newphraseZ,  PASSLEN); 
n if  Cstrcmp  (newphrase,  newphrase2)  !=  0)  f 
n fprintf  (stderr,  "Passphrases  are  differentXn"); 

n n return  -1; 
n } 

n fprintf  (stderr,  "Changing  master  key  pa s s p h r a s e . . . \ n " ) ; 

n err  = pgpChangePassphrase  (pgpKeylterKey  (iter),  oLdphrase,  newphrase); 
n if  (err) 

n n fprintf  (stderr,  "Passphrase  change  failed  for  master  key  (%d)\n",  err) 


n 

else 

Q 

n 

wh  i 

le  ((subkey  = pg pKe y I t e r N e x t S ub Key  (iter))  !=  NULL) 

{ 

□ 

a 

Q 

f p r 

intf  (stderr,  "Changing  subkey  passphrase... \n") 

/ 

n 

Q 

n 

err 

= pg p C h a ng e S u bKey Pa s s p h r a s e (subkey,  oldphrase. 

newphrase); 

□ 

n 

□ 

i f 

(err)  { 

n 

□ 

n 

n 

fprintf  (stderr,  "Passphrase  change  failed  for 

subkey  (%d)\n". 

a 

n 

n 

n 

n a err); 

n 

n 

n 

Q 

break; 

n 

n 

n 

> 

n 

□ 

} 

n 

> 

n 

return 

err; 

> 


/*  Helper  routine  for  doKeyEdit,  when  the  key  being  edited  belongs  to  us  */ 
static  int 

doKey Ed i t Se I f ( s t r u c t Flags  *flags,  PGPKeylter  *iter,  struct  PgpTtyUI  *ui_arg) 

{ 

n int  err  =0; 

□ charn  pa s s p h r a s e C P A S S LE N D ; 

a PGPKey  *key  = pgpKeylterKey  (iter); 

n ( VO i d ) f I a g s ; n n /*  make  the  compiler  happy  */ 
n 

n fprintf  (stderr,  "\nDo  you  want  to  unset  this  key  as  axiomatic  (y/N)?  "); 
n if  ( pgpT t y G e t Boo  I (0,  stderr))  { 
n pgpUn se t KeyAx i oma t i c (key); 

n n goto  commit; 

n > 

n fprintf  (stderr,  "\nDo  you  want  to  add  a new  user  ID  (y/N)?  "); 
n if  ( pgpT t yGe t Boo  I (0,  stderr))  { 

□ a char  na me b u f C 2 5 6 3 ; 

n n int  namelen; 

n n fprintf  (stderr,  "Enter  the  new  user  ID:  "); 

n n namelen  = pg pT t y G e t S t r i ng  (namebuf,  sizeof  (namebuf),  stderr); 
n n if  (! namelen)  { 

n n n fprintf  (stderr,  "No  name  entered. \n"); 

n n n goto  cleanup; 

n n > 

n n pgpTtyGetPass  (ui_arg,  passphrase,  PASSLEN); 

n n err  = pgpAddUserlD  (pgpKeylterKey  (iter),  namebuf,  namelen,  passphrase); 
n n if  (err)  { 

n n n fprintf  (stderr,  "Unable  to  add  new  User  ID  (%d)\n",  err); 
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□ □ 
□ Q 

n n 
a n 
D n 
a □ 
n n 
n n 
D n 
n n 
n > 


n goto  cleanup; 

> 

/*  debugging  consistency  check  */ 

{ 

n extern  RingPool  PGPKDBExport  * pg p R i n g Poo L ; 
n int  nsets,  nfiles; 

n r i ng Poo L C 0 n s i s t e n t ( pg p R i n g Poo L , Snsets,  Snfiles); 

n pgpAssert  (nsets==5); 

n pgpAssert  (nfiLes==3); 

} 


n fprintf  (stderr,  "\nDo  you  want  to  change  your  pass  phrase  (y/N)? 
n if  ( pg pT t y Ge t Boo L ( 0,  stderr))  { 


ct 

n 

err 

= d oKey C ha ng e Pa s s p h r a s e ( u i _a r g , iter); 

□ 

n 

i f 

(err  < 0)  { 

u 

a 

n 

fprintf  (stderr,  "Change  passphrase  failed  (%d)\n". 

a 

n 

n 

goto  cleanup; 

a 

n 

> 

n 

n 

/* 

debugging  consistency  check  */ 

□ 

n 

i 

n 

a 

n 

extern  RingPool  PGPKDBExport  *pg p R i ng Poo  1 ; 

n 

n 

n 

int  nsets,  nfiles; 

n 

n 

n 

r i ng Poo  1 Con s i s t en t ( pg pR i ng Poo  1 , Snsets,  Snfiles); 

u 

n 

n 

pgpAssert  (nsets==3); 

n 

n 

n 

pgpAssert  (nfiles==3); 

n 

n 

> 

n > 

n fprintf  (stderr,  "\nDo  want  to  set  this  as  your  default  key  (y/N)?  "); 
n if  (pgpTtyGetBool  (0,  stderr)) 

n pg p S e t D e f a u I t P r i va t eKey  ( pg pKey I t e r Key  (iter)); 

commit: 

a fprintf  (stderr, 

"Keyrings  updated. \n"); 

n pgpCommi tKeyRi ngChanges  ( d e f a u I t s e t ) ; 
cleanup: 
n return  err; 

> 


static  int 

doKeyEdit  (struct  Flags  *flags,  int  argc,  char  *argvCD, 
n n n struct  PgpTtyUI  *ui_arg) 

{ 

n char  const  *prep  = "to  edit"; 
n PGPKeylter  *iter  = NULL; 
n int  err; 
n Boolean  axiomatic; 

n ( vo i d ) f I ag s ; n n /*  make  the  compiler  happy  */ 
n /*  Select  object  to  sign  */ 

n err  = s e I e c t DBO b j e c t (argc,  argv,  defaultset,  KDBTYPE_KEY, 

n n n n n n n n prep, stderr, Siter); 

n if  (err  <=  0) 
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n n return  err; 

n fprintf  (stderr,  "\n"); 
n kdbKeyPrint  (stderr,  iter,  1); 
n fprintf  (stderr,  "\n"); 

n pg pGe t KeyBoo L ean  ( pg pKey I t e r Key  (iter),  kPG PKey P r o p I s Ax i oma t i c , 

n n n n n Sax i oma t i c ) ; 

n if  (axiomatic) 

B B err  = doKeyEditSeLf(fLags,  iter,  ui_arg); 

B else 

B err  = doKeyEditOthers(fLags,  iter,  ui_arg); 

B pg p F r e e Key  1 1 e r (iter); 

B return  err; 

> 


/* 

* This  handles  key,  user  ID  (with  -ru),  or  signature  (with  -rs)  removal. 
*/ 

static  int 

doKeyRemove  (struct  Flags  *flags,  int  argc,  char  *argvCIl, 

B B B B struct  PgpTtyUI  *ui_arg) 

{ 

B int  err  =0; 

B PGPKeylterB  *iter  = NULL; 

B PGPKeySet  *newset  = NULL; 

B int  removelevel; 

B const  char  *prep  = "to  be  removed"; 

B const  char  *typename; 

B (void)ui_arg; 


B 

□ 

B 

B 

B 

D 

B 

B 

B 

B 

n 

B 

B 


/*  Distinguish  what  we  are  to  remove  */ 
if  (flags->argc  SS  s t r c h r ( f I a g s ->a r g s , 's'))  { 

B removelevel  = KDBTYPE_CERT;  /*  signature  */ 
B typename  = "signature"; 

> 


else  if  (flags->argc  S&  s t r c h r ( f I a g s->a r g s , 'u')) 

B removelevel  = KDBT YP E_U S E R I D ; /*  user  id  */ 

B typename  = "user  ID"; 

} 


else  { 

B removelevel  = KDBTYPE_KEY;  /*  key  */ 
B typename  = "key"; 

> 


{ 


B /*  Select  object  to  remove  */ 

B fprintf  (stderr,  "\n"); 

B err  = s e I e c t DBOb j e c t ( a r g c , argv,  defaultset,  removelevel, 

B B B B n n n prep,  stderr,  &iter); 

B if  (err<=0) 

B B goto  cleanup; 

B /*  err  holds  number  of  possible  objects  at  that  level  */ 

B if  (removelevel  ==  KDBT YP E_U S E R I D S&  err  ==  1)  C 
B B err=0; 

B B fprintf  (stderr, 

"Selected  key  has  only  one  user  ID,  can't  be  selected  %s\n",  prep); 
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n n goto  c Leanup; 
a } 

a /*  Confirm  removal  */ 
a fprintfCstderr, 

"\nThe  following  %s  has  been  selected  %s:\n",  typename,  prep); 
a objPrintCiter,  stderr,  NULL); 

a /*  Perform  removal,  but  don't  write  back  yet  */ 
a switch  ( remove  I eve  I ) f 
a case  KDBTYPE_KEY: 

a a newset  = pgpNewSingletonKeySet  (pgpKeylterKey  (iter)); 
a n err  = pgpRemoveKeys  (defaultset,  newset); 
a a pg p F r e e Key S e t (newset); 

a a break; 

a case  KD BT Y P E_U S E R I D : 

a a err  = pgpRemoveUserlD  (pgpKeylterUserlD  (iter)); 
a a break; 

a case  KDBTYPE_CERT : 

a a err  = pgpRemoveCert  (pgpKeylterCert  (iter)); 
a } 

a if  (err)  { 

a a fprintf  (stderr,  "Unable  to  remove  objectXn"); 

a a goto  c leanup; 

a > 

a /*  Write  out  results  */ 
a pg p C omm i t Ke y R i ng C h a ng e s ( d e f a u 1 1 s e t ) ; 

a /*  success  */ 
a e r r = 0 ; 

cleanup: 
a if  (iter) 

a pgpFreeKeylter  (iter); 

a return  err; 

} 


/* 

* Issue  a signature  on  a userlD. 

*/ 

static  int 

doKeySign  (struct  Flags  *flags,  int  argc,  char  *argvCD, 
a struct  PgpTtyUI  *ui_arg) 

{ 

a int  err; 

a const  char  *prep  = "to  be  signed"; 

a char  passphraseCPASSLEND; 

a PGPKeylter  *iter  = NULL; 

a PGPKey  *key; 

a (void)flags; 

a if  ( f I ag s->s i gnKey  !=  NULL)  { 

a a key  = f I a g s ->  s i g n Key  ; 
a > e I s e { 

a a key  = pgpGetOefaultPrivateKey  (defaultset); 

a a i f ( ! key)  { 
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n n a fprintf  (stderr,  "No  default  private  key\n"); 

n n n return-1, • 

n □ } 

n > 

n /*  Select  object  to  sign  */ 

a err  = s e I e c t DBOb j e c t ( a r g c , argv,  defaultset,  KDBT Y P E_U S E R I D , 
nnnnnnnn  prep,  stderr,  Siter); 
a if(err<=0) 
a a return  err; 

n /*  Confirm  signature  */ 

a ob j P r i n t ( i t e r , stderr,  NULL); 

a fprintfCstderr, 

" \ n \ n " \ 

"READ  CAREFULLY:  Based  on  your  own  direct  first-hand  knowledge,  are\n"\ 

"you  absolutely  certain  that  you  are  prepared  to  solemnly  certify  that\n"\ 

"the  above  public  key  actually  belongs  to  the  user  specified  by  the\n"\ 

"above  user  ID  (y/N)?  "); 

a if  ( ! pgpT t yGe t Boo  I ( 0,  stderr))  { 
a a fprintf  (stderr, 

"Key  sign  operation  cancelled. \n"); 
a n pgp F reeKey I t e r (iter); 

a a return  0; 

a > 

□ 

a fprintf  (stderr,  "Key  selected  for  signing  is:\n"); 
a objPrint  (iter,  stderr,  NULL); 
a pg pT t y G e t Pa s s (ui_arg,  passphrase,  PASSLEN); 

a err  = pg pC e r t i f y U s e r I D ( pg p Key  1 1 e r U s e r I D (iter),  key,  pa s s p h r a s e ) ; a 
a if  (err)  { 

a n fprintf  (stderr,  "Key  sign  operation  failedXn"); 

a a err=-1; 

a > 

a e I s e { 

a n fprintf  (stderr,  "Key  signature  certificate  added. \n"); 

a a err=0; 

a } 

a if  (iter) 

a pg p F r ee Key  1 1 e r (iter); 

a pgpCommi tKeyRi ngChanges  (defaultset); 
a return  err; 

> 


/* 

* Revoke  a key  or  a signature 
*/ 

static  int 

doKeyRevoke  (struct  Flags  *flags,  int  argc,  char  *argvCD, 
a n n struct  PgpTtyUI  *ui_arg) 

{ 

a int  err; 
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n Boolean  secret,  revoked; 
n PGPKeylter  *iter  = NULL; 
n const  char  *prep  = "to  be  revoked"; 
n int  revokelevel; 

n char  passphraseCPASSLEN]; 

a /*  Distinguish  what  we  are  to  revoke  */ 
n if  (fLags->argc  SS  s t r c h r ( f L a g s ->a r g s , 's')) 

n n revokelevel  = KDBTYPE_CERT;  /*  signature  on  a name  */ 
a else 

n n revokelevel  = KDBTYPE_KEY;  /*  key  */ 

D 

n /*  Select  object  to  sign  */ 

n err  = s e I e c t DBOb j e c t ( a r g c , argv,  defaultset,  revokelevel, 
n n n n n n n prep,stderr,&iter); 

o if  (err  <=  0) 

n n return  err; 

n /*  Display  it  for  him  */ 

n o b j P r i n t ( i t e r , stderr,  NULL); 


n if  (revokelevel  ==  KDBTYPE_KEY)  ( 
n n /*  Make  sure  it  is  our  key  */ 

n n pg pG e t Key Boo  I e a n ( pg p Key  1 1 e r Key  (iter),  kPG PKey P r o p I s S e c r e t , &secret); 

n n if  (Isecret)  { 

n n n fprintf  (stderr, 

"You  don't  have  the  private  key  corresponding  to  that  key\n"); 
n n n pg p F r e e Key  1 1 e r (iter); 

n n n returnO; 

n n > 

n n /*  Make  sure  it  hasn't  already  been  revoked.  */ 

n n pg pG e t Key Boo  I ea n ( pg p Key  1 1 e r Key  (iter),  kPG PKey P r op  I s R e vo ke d , Srevoked); 

n n if  (revoked)  { 

n n n fprintf  (stderr. 


'That  key  has  already  been  revokedXn"); 


pgp F reeKeyl t e r (iter); 
return  0; 


□ I 

□ I 

n > 

> 

else  { 

n /*  Make  sure  it  hasn't  already  been  revoked  */ 

n pgpGetCertBoolean  (pgpKeylterCert  (iter),  kPGPCertPropIsRevoked, 
n n n n n n Srevoked); 

n if  (revoked)  { 
n n fprintf  (stderr, 

"That  signature  has  already  been  revoked. \n"\ 

"Are  you  sure  you  want  to  add  another  revocation  certificate  (y/N)?  "); 
n n n if  ( ! pg pT t y Ge t Boo  I ( 0 , stderr))  { 
a n n a fprintf  (stderr,  "\ 

Signature  revocation  cancelled. \n"); 
n n n n pgp F reeKeyl t e r (iter); 

n n n n return0; 

n n n } 

n n } 

n > 


n /*  Confirm  signature  */ 

n if  (revokelevel  ==  KDBTYPE_KEY)  { 
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n n f p r i n t f ( s t de r r , 

"\n"\ 

"Do  you  want  to  permanently  revoke  your  public  key\n"\ 

"by  issuing  a secret  key  compromise  certificate  on  this  key  Cy/N)?  "); 
n > e I s e { 
n n f p r i n t f ( s t de r r , 

" \ n " \ 

"Do  you  want  to  revoke  this  signature  (y/N)? 

n > 

n if  ( ! pg pT t y G e t Boo  I ( 0 , stderr))  { 
n a fprintf  (stderr,  "Revoke  cancelled. \n"); 

n n pg p F r e e Key  1 1 e r (iter); 

n n return  0; 

n } 

n pg pT t y G e t Pa s s (ui_arg,  passphrase,  PASSLEN); 

n if  (revokelevel  ==  KDBT YP E_ C E RT ) 

n n err  = pg p Re vo k e C e r t ( pg pKey I t e r C e r t (iter),  defaultset,  passphrase); 
n else 

n n err  = pgpRevokeKey  (pgpKeylterKey  (iter),  passphrase); 
n if  (err) 

n n fprintf  (stderr,  "Unable  to  generate  revocation  signatureXn"); 

n else 

n n fprintf  (stderr,  "Key  revocation  certificate  added. \n"); 
n pg p F r eeKey I t e r (iter); 

n pg p C omm i t Key R i ng C h a ng e s (defaultset); 

n return  err; 

} 

static  void 

ma i nPa rseArgs  (int  *argcp,  char  *argvC],  struct  Flags  *flags, 
n n n n struct  PgpUICb  *ui,  struct  PgpTtyUI  *ui_arg) 

{ 

n extern  PgpEnv  *pgpEnv; 

n struct  PgpOptContext  opt; 

n int  c,  argc  = *argcp; 

n pgpOptStart  (Sopt,  argc,  argv); 

n argc  = 0; 

n while  ((c  = pgpOptNext  (&opt))  !=  EOF)  ( 


n 

n 

switch 

(c) 

{ 

n 

B 

case  0 : 

i f 

(opt 

.optarg[0]  !=  '+'  ||  o p t . op t a r g C 1 D ==  '\0') 

n 

B 

n □ 

argv[argc++D  = opt.optarg; 

n 

B 

n else  if 

( pg pC on f i g L i n e P r 0 c e s s (ui,  ui_arg,  pgpEnv, 

a 

B 

n n 

B 

n 

n n n opt.optarg  + 1,  PG P EN V_ PR  I _ C H D LI N E ) ) 

a 

B 

a n 

exitArgError  ("Unrecognized  option  /£s",  opt.optarg); 

n 

B 

n break; 

n 

B 

case  'a 

' : n 

/* 

Add  */ 

n 

B 

case  ' c 

' : a 

/* 

Check  * / 

a 

B 

case  ' d 

1 . 

/* 

Disable  */ 

a 

B 

case  ' e 

' : n 

/* 

Edit  */ 

a 

B 

case  ' g 

' : n 

/* 

Generate  */ 

a 

B 

case  ' k 

' : a 

/* 

Revo(k)e  */ 

a 

B 

case  ' 1 

' : a 

/* 

List  * / 
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n 

Q 

case 

'r':n  /*  Remove  */ 

n 

□ 

case 

's':n  /*  Sign  */ 

s 

n 

case 

'x':n  /*  extract  */ 

□ 

n 

Q 

setOpt  (c,  8opt,  flags); 

n 

n 

n 

break; 

□ 

a 

case 

‘h':n  /*  Help  */ 

□ 

n 

n 

exitUsage  ( PG P E X I T_0 K ) ; 

n 

n 

n 

/*N0TREACHED*/ 

□ 

n 

case 

'o':n  /*  Output  */ 

□ 

n 

n 

if  (flags ->outfiLe) 

□ 

n 

n 

n exitArgError  ( 

n 

n 

n 

n "Only  one  -o  option 

allowed"); 

□ 

a 

n 

if  (lopt.optarg) 

n 

n 

n 

n exitArgError  ( 

Q 

□ 

a 

n "-0  option  requires 

a userid  argument" 

n 

n 

u 

fLags->outfiLe  = opt.optarg; 

n 

c 

a 

opt.optarg  = 0; 

a 

□ 

n 

break; 

n 

Et 

case 

'u':n  /*  Username  (myname) 

*/ 

n 

n 

n 

if  ( f L a g s-> s i g n N a me ) 

□ 

n 

n 

n exitArgError  ( 

Q 

n 

n 

n "Only  one  -u  option 

allowed"); 

n 

n 

u 

if  (lopt.optarg) 

□ 

n 

□ 

n exitArgError  ( 

□ 

n 

n 

n "-U  option  requires 

a userid  argument" 

D 

n 

n 

f L a g s -> s i g nN a me  = opt.optarg; 

a 

n 

n 

opt.optarg  = 0; 

u 

s 

n 

break; 

n 

n 

case 

'K':n  /*  Keyring  file  */ 

u 

a 

u 

if  ( f L a g s-> r i n g f i 1 e ) 

n 

□ 

n 

n exitArgError  ( 

u 

n 

n 

n "Only  one  -K  option 

al  Lowed"); 

n 

Q 

n 

if  (lopt.optarg) 

a 

n 

a 

n exitArgError  ( 

D 

a 

a 

n "-K  option  requires 

a keyring  filename 

a 

n 

n 

f L a g s-> r i n g f i L e = opt.optarg; 

n 

n 

D 

opt .optarg  = 0; 

□ 

n 

n 

break; 

□ 

Q 

case 

'v':n  /*  Verbose  */ 

u 

n 

n 

break; 

n 

Q 

case 

'q':  /*  Quit  */ 

n 

n 

fLags->quit  = 1; 

n 

n 

Q 

break; 

a 

n 

default : 

□ 

n 

□ 

exitArgError  ("Unrecognized  option  -%c",  c); 

□ 

n 

> 

n 

> 

□ 

argcp  = 

argc; 

n return; 


); 


); 


argument 


} 


); 


static  int 

ma  i nProcess F Lags  (struct  Flags  *fLags,  int  argc, 
n n char  *argvC3,  PgpTtyUI  *ui_arg) 

{ 

n switch  (fLags->opt)  { 

a case  ' a ' : 

n n return  doKeyAdd  (argc,  argv,  ui_arg); 
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n 

n break; 

n 

case  ' c ' : 

n 

return 

doKeyCheck  (flags,  argc. 

argv,  u i _a  rg ) ; 

□ 

n break; 

□ 

case  ' d ' : 

□ 

return 

doKeyDisable  (argc,  argv 

, ui_arg); 

n 

n break; 

n 

case  ' g ' : 

n 

n return 

do  Key G e n e r a t e (defauLtset,  argc,  argv,  ui_ 

D 

a break; 

□ 

case  ' k ' : 

n 

n return 

doKeyRevoke  (flags,  argc 

, argv,  ui _a  rg ) ; 

n 

n break; 

n 

case  ' L ' : 

n 

n return 

doKeyList  (flags,  argc. 

argv,  ui_arg); 

n 

n break; 

n 

case  ' r ' : 

tt 

n return 

doKeyRemove  (flags,  argc 

, argv,  ui_arg); 

u 

n break; 

tt 

case  's': 

tt 

a return 

doKeySign  (flags,  argc. 

argv,  ui_arg); 

tt 

n break; 

tt 

case  ' X ' : 

tt 

n return 

doKeyExtract  (flags,  argc,  argv,  ui_arg); 

tt 

n break; 

tt 

case  ' e ' : 

tt 

B return 

doKeyEdit  (flags,  argc. 

argv,  ui_arg); 

tt 

n break; 

tt 

default : 

tt 

n return 

-1; 

tt 

} 

tt 

/*  NOTREACHED  */ 

tt 

> 

return  0; 

/* 

Clean  up  allocated  space  (Like  the  pipeline  and  the  rni 

static  void 

mainExit  (void) 

r 

tt 

if  (defauLtset)  { 

tt 

n pgpFreeKeySet  (defauLtset); 

tt 

n defauLtset  = NULL; 

tt 

} 

tt 

return; 

/*  #define  LOOP  1 to  cause  the  program  to  Loop  and  collect  commands  */ 
i n t 

appMain  (int  argc,  char  *argv[ID) 

{ 

n struct  PgpUICb  ui; 

a struct  PgpTtylll  ui_arg; 

n struct  Flags  flags; 

n int  retval  = 0; 

n int  nsets,  nfiles; 

n PGPError  pgpErr  = PGPERR_0K; 

n extern  RingPooL  *pgpRingPooL; 
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n extern  PgpEnv  *pgpEnv; 

#if  LOOP 

n static  char  bufC256]; 
n char  *p; 

n static  char  *xargvC32Il; 

n extern  char  *strtok(); 

#endi f 
n 

n a t ex i t ( ma i n E X i t ) ; 

n /*  Setup  the  exit  routines,  etc  */ 

n retvaL  = pgpInitApp  (&argc,  E X I T_ P R0G_PG PK ) ; 

n if  (retvaL)  { 

n n n fprintf  (stderr,  "pgpInitApp  failed:  %d\n",  retvaL); 

n n n gotoerror; 

n } 

n pgpLiblnitC); 

#if  LOOP 
n / * 

n * Only  open  the  keyrings  now  if  we're  in  LOOP  mode  (for  testing), 
n * because  otherwise  we  want  to  parse  the  argument  List  first, 

n * in  case  an  alternate  keyring  is  specified, 

n */ 

#if  0 

n fprintf  (stderr,  "Opening  default  keyrings.  ..\n"); 

#endi f 

n defauLtset  = pgpOpenDefauLtKeyRings  (TRUE,  SpgpErr); 
n if  (IdefauLtset)  { 

n n fprintf  (stderr,  "Unable  to  open  default  keyrings:  %s\n", 

n n n n n n pg pe r r S t r i n g ( pg p E r r ) ) ; 

n n goto  error; 

n > 

n /*  Consistency  check  */ 

n r i ng Poo L C on s i s t en t ( pg p R i n g Poo L , &nsets,  Rnfiles); 
n /*  2 sets  per  file,  plus  1 for  union;  files  includes  memring  */ 
n /*n  pgpAssert  (nsets  ==  5);  */ 
a pgpAssert  (nfiles  ==  3); 

#endi f 


#if  LOOP 


u 

for 

( ; ; ) t 

n 

tt 

f p u t s ( " C omma n d ->  ",  stdout); 

□ 

a 

pgpTtyGetString(buf,  sizeof(buf). 

stdout)  ; 

n 

n 

a rg  c = 1 ; 

n 

B 

p = b u f ; 

n 

B 

while  ( ( u n s i g n ed ) a r g c < s i z e o f ( xa r g v ) 

/ s i z e 0 f ( xa  r g V C 0 3 ) 

n 

B 

SS  (xargvCargcD  = strtok(p,  " ' 

' ) ) ) 

n 

B 

n p = 0; 

n 

B 

n a rg  C + + ; 

u 

B 

} 

n 

B 

a rgv  = xa  rg v; 

#end i f 

Q 

B 

/*  Setup  UI  */ 

n 

B 

pg p C L ea r H emo r y ( &u i , sizeof(ui)); 
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n n ui. message  = pg pT t y M e s s a g e ; 

n a /*  Setup  the  TTY  UI  argument  */ 

n n pgpClearMemory(&ui_arg,  sizeof(ui_arg)); 

n n u i _a rg . V e r bo s e = 1; 

n n ui_arg.fp  = stderr; 

n n u i _a  rg  . s h o wpa s s = 0; 

n n ui_arg.env  = pgpEnv; 

n n pg p C I ea r Memo r y (&fLags,  sizeof  (flags)); 

n n mainParseArgs  (&argc,  argv,  Sflags,  8ui,  &ui_arg); 

#if  LOOP 

n n if  (flags. quit) 

n n break; 

#endi  f 


#if  ILOOP 

n n enableUI  = ! pg  pe  n vG  e 1 1 n t ( pg  p E n v , PG  P E N\/_B  ATC  H HO  D E , NULL,  NULL); 


n n /*  Open  keyring  file(s)  */ 

n n defaultset  = NULL; 

n n if  ( f I ag s . r i ng f i 1 e ) 

n n { 

n n n PGPFileRef  *fileRef  = pg pN e w F i I e R e f F r om F u I I Pa t h ( f I a g s . r i n g f i I e ) ; 


n a 
n □ 
n a 
n D 
Q □ 

n n 
n Q 
Q n 
n Q 
Q n 
□ □ 
n D 
D D 
Q D 
n n 


n if  (f  i leRef  ==  NULL) 
n n pgpErr  = PG PE R R_N 0_ F I L E ; 
n else 
n ( 

n n defaultset  = pgpOpenKeyRing(TRUE,  0,  1,  fileRef,  SpgpErr); 
n n pg p F r e e F i I e Re f ( f i I e Re  f ) ; 
n } 

} 

else 

a defaultset  = pgpOpenDefaultKeyRings  (TRUE,  SpgpErr); 
if  (idefaultset)  ( 

a fprintf  (stderr,  "Unable  to  open  keyring:  %s\n", 

n n n n n pg p e r r S t r i ng  ( pg p E r r ) ) ; 

n goto  error; 

} 


n a /*  Consistency  check  */ 

n n r i ng Poo  I C on s i s t e n t ( pg pR i ng Poo  I , Snsets,  Snfiles); 
n n pgpAssert  (nfiles  <=  3); 

#endi f 


n 

n 

/* 

n 

n 

* 

Set 

variables  which 

may 

have  been  set 

on  the 

command  line. 

n 

□ 

* 

/ 

n 

n 

u i 

_a  rg  . 

.showpass  = 0; 

n 

o 

i f 

( f 1 a g s . s i gnNa me  S&  ! 

Iflags.signKey)  ( 

n 

n 

n 

i f 

(selectOneKey(f lags 

.signName,  defaultset. 

Sflags. sign Key, 

n 

n 

n 

Q 

n "Please  select 

a key  to  sign 

with:") 

! = PGPERR_0K  1 1 

n 

D 

Q 

n 

n f lags . si gnKey 

==  NULL) 

n 

n 

n 

exitArgError  ("Key 

not 

found:  \"%s\"' 

',  flags 

.signName); 

Q 

n 

> 

n 

Q 

r e t va  1 

= ma  i n P r o c e s s F 1 a g s 

(Sflags,  argc. 

argv,  &ui_arg); 
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n n if  (retvaL)  -C 

n n n fprintf  (stderr,  "Error:  %s\n",  pgperrString  (retvaL)); 

n n > 

n n ringPooLConsistent  (pgpRingPooL,  Snsets,  SrifiLes); 

n n /*  2 sets  per  file,  plus  1 for  union;  files  includes  nemring  */ 

n n pgpAssert  (nsets  <=  5); 

n n pgpAssert  (nfiles  <=  3); 

#if  LOOP 

n > 

#e  nd i f 
□ 

error: 

#if  0 

n fprintf  (stderr,  "Closing  keyrings. \n"); 

#endi f 

n if  (defauLtset)  ( 

n n pgpFreeKeySet  (defauLtset); 

n n defauLtset  = NULL; 

n > 

n return  retvaL; 

> 

/* 

* Local  Variables: 

* tab-ui dth  : 4 

* End  : 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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/* 

* pgpkExit.c  — This  code  is  for  a runtime  app.  It  is  *N0T*  threaded, 

* in  any  sense  of  the  word.  It  stores  state  in  static  variables 

* and  wipes  system  stack  and  heap  when  exiting  from  the  application. 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpkExit.c, V 1.2. 2. 3 1997/06/07  09:49:12  mhw  Exp  $ 

*/ 

#ifdef  HAVE_CONFIG_H 
^include  "config.h" 

# e n d i f 

^include  <signal.h> 

^include  <string.h>n  n 

#include  <stdio.h> 

#ifdef  HAVE_STDARG_H 
#include  <stdarg.h> 

#end i f 

#ifdef  HAVE_STDLIB_H 
#include  <stdlib.h>n  n 

# e n d i f 
#ifdef  UNIX 

^include  <sy s / t y pe s . h>n  n 
#elif  d e f i ned ( M S DO S ) 

^include  <malloc.h>n  n 

#if  HSC_VER  >=  800 
/* 

* See  flame  elsewhere  about  Microsoft's  stupid  ideas  about  the  name  spaces 

* that  are  reserved  by  ANSI  C if  you  do  something  undefined  by  ANSI  like 

* include  an  undefined  header  (like  <malloc.h>). 

*/ 

^define  alloca  _alloca 
/^define  stackavail  _stackavail 
#endif  /*  HSC_VER  >=  800  */ 

#endif  /*  HSDOS  */ 

^include  "pgpkExit.h" 

^include  "pgpLeaks.h" 

^include  "pgpKeyDB.h" 


/*  For  memsetC)  */ 

/*  for  getenvC)  */ 

/*  For  sbrkC)  */ 

/*  For  s t a c ka va i I ( ) , allocaC)  */ 


static  void  *stack0  = NULL,  *heap0  = NULL; 
static  int  program_name  = 0; 


void 

exitUsage  (int  code) 

{ 

n switch  ( p r og r am_name ) { 

n case  E X I T_ PROG.PGPM : 

n n fputs("\n\ 

Usage  summary:  (for  full  details,  see  the  User's  guide)\n\ 

\ n \ 

To  encrypt  a file  with  Bob's  public  key  Cor  others  as  well],  type:\n\ 
n pgp  -e  bob  C-e  other  userids...]  filename  (produces  f i I en a me . pg p ) \ n \ 
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To  sign  a plaintext  file  with  your  secret  key  Cor  Alice's  secret  key]:\n\ 
n pgp  -s  filename  C-u  alice]  (produces  f i I e n a me . pg p ) \ n \ 

To  sign  a file  with  your  secret  key  and  then  encrypt  with  Bob's  public  key:\n\ 
n pgp  -s  -e  bob  C-e  other  userids. ..3  filename  C-u  alice3\n\ 

To  encrypt  with  conventional  encryption  (a  pa s s p h r a s e ) : \ n \ 
n pgp  -c  filename\n\ 

To  produce  ASCII  armor  output  for  email  ( f i I ename . a s c ) , add  the  -a  option. \n\ 
\n\ 

To  decrypt  a ciphertext  (.pgp  or  .asc)  file  or  check  a s i g n a t u r e : \ n \ 
a pgp  f i I ename . pgpn  orn  pgp  f i I e n a me . a s c \ n \ 

\n\ 

To  generate  a s e c r e t / pu b I i c key  pair,  type  pgpk  -g\n\ 

For  brief  help  on  key  management  functions,  type  pgpk  -h\n",  stderr); 
n n break; 

n case  EXIT_PROG_PGPK : 

n n fputs("\n"\ 

"Usage  summary:  (for  full  details,  see  the  User's  guide)\n"\ 

"\n"\ 

"To  generate  your  own  unique  p u b I i c / p r i v a t e key  pair:\n"\ 

" pgpk  -g\n"\ 

"To  add  a key  file's  contents  to  your  public  or  private  key  ring:\n"\ 

" pgpk  -a  keyfile  Ckeyfile  ...3\n"\ 

"To  remove  a key  from  your  public  and  private  key  ring:\n"\ 

" pgpk  -r  userid  (or  pgpk  -rk  userid)\n"\ 

"To  remove  a user  ID  from  your  public  and  private  key  ring:\n"\ 

" pgpk  -ru  userid\n"\ 

"To  remove  a signature  from  your  public  key  ring:\n"\ 

" pgpk  -rs  userid\n"\ 

"To  edit  your  user  ID  or  pass  phrase:\n"\ 

" pgpk  -e  your_userid\n"\ 

"To  edit  the  confidence  you  have  in  a person  as  an  i n t r odu c e r : \ n " \ 

" pgpk  -e  her_userid\n"\ 

"To  extract  (copy)  a key  from  your  public  key  ring  in  ascii  form:\n"\ 

" pgpk  -X  userid  -o  keyfile\n"\ 

"To  list  the  contents  of  your  key  rings:\n"\ 

" pgpk  -ICID  Cuserid3\n"\ 

"To  check  signatures  on  your  public  key  ring:\n"\ 

" pgpk  -c  CuseridD\n"\ 

"To  sign  someone  else's  public  key  on  your  public  key  ring:\n"\ 

" pgpk  -s  her_userid  C-u  y ou r_u s e r i d D \ n " \ 

"To  disable  or  re-enable  some  else's  public  key  on  your  public  key  ring:\n"\ 

" pgpk  -d  her_userid\n"\ 

"To  permanently  revoke  your  own  key  on  your  public  and  private  key  rings:\n"\ 

" pgpk  -k  your_userid\n"\ 

"To  revoke  a signature  you  made  on  someone  else's  key  on  your  pub  key  ring:\n"\ 
" pgpk  -ks  your_userid\n"\ 

"To  use  an  alternate  keyring  file  (public  keys  only):\n"\ 

" pgpk  -K  keyfile  ...\n"\ 

" " , stderr); 
n n break; 

n default: 

n n fputs("\n\ 

Usage  summary  unavailable  for  this  program. \n\ 

\n",  stderr); 
n n break; 

n > 

n ex i t C I ea nu p ( c od e ) ; 
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Q 

exit  (code); 

} 

void 

exitArgError  (char  const  *fmt,  ...) 

n 

va_  1 i s t 

ap; 

n 

f puts  ( " 

Invalid  arguments: 

n 

va_start 

(ap,  fmt); 

n 

vfprintf 

(stderr,  fmt,  ap); 

n 

va_end  (ap); 

n 

f pu  t c ( ' 

\n',  stderr); 

n 

exitCleanup  ( PG P EX  I T_ A R G S ) ; 

> 

/*  attribute(x)  expands  to  nothing  unless  __GNUC is  defined.  */ 

static  void  exitWipelint  code)  attributeCCnoreturn)); 

static  void  e x i t W i p e 1 ( i n t code,  void  *base)  a 1 1 r i bu t e ( ( n o r e t u r n ) ) ; 

#ifdef  MSDOS 

//include  <dos.h>n  /*  FOR  MK_FP,  FP_SEG  and  FP_OFF  */ 

//include  <malloc.h>n  /*  for  allocaC),  s t a c ka  va  i I ( ) , _heapwalk()  */ 

/* 

* Now,  Microsoft  has  recently  developed  a habit  of  prepending  an  underscore 

* to  the  beginning  of  everything.  They  wave  their  arms  and  mutter  about  ANSI. 

* If  they  have  a really  broken  linker  then  I can  see  how  they  might  not  be 

* able  to  deal  with  user  code  declaring  functions  that  are  also  supplied  in 

* the  library,  so  they  need  to  put  the  functions  in  a name  space  that  user 

* code  can't  declare  in,  BUT  THIS  SURE  DOESN'T  APPLY  TO  MACROS.  For  any 

* header  *not*  defined  by  ANSI  (such  as,  say,  <dos.h>,  <conio.h>,  <io.h>, 

* <unistd.h>,  < s y s / t y pe s . h> , etc.),  any  structures,  unions,  macros,  enums, 

* and  so  on  - anything  not  visible  to  the  linker  - can  be  defined  any 

* way  you  like. 

* 

* So  I don't  understand  Microsoft.  Defining  prefix-prepended  aliases 

* for  library-internal  calls  is  fine  (so  my  extern  variable  "write" 

* won't  get  called  when  I call  printf()),  but  to  get  rid  of  more  convenient 

* names  if  I *do*  include  the  relevant  file?  Wierd. 

*/ 

//ifndef  MK_FP 
#ifdef  _MK_FP 
//define  MK_FP  _MK_FP 
//else 

#define  MK_ F P ( s eg , o f f ) ((void far  *)((seg)<<16  | (off))) 

//endi  f 

#endif  /*  !MK_FP  */ 

//ifndef  FP_SEG 
//ifdef  _FP_SEG 
//define  FP_SEG  _FP_SEG 
//else 

//define  FP_SEG(ptr)  ( ( uns  i gned  ) ( ( uns  i gned  long)(ptr)  >>  16)) 

//end  i f 

//endif  /*  !FP_SEG  */ 
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#ifndef  FP_OFF 
#ifdef  _FP_OFF 
#define  FP_OFF  _FP_OFF 
#e  L s e 

^define  FP_OFF(ptr)  ( ( un s i g n ed ) ( p t r ) ) 

#end  i f 

#endif  /*  !FP_OFF  */ 

#if  MSC.VER  >=  800 
#define  alloca  _aLLoca 
#define  stackavaiL  _stackavaiL 
#e n d i f 

static  void 

ex i t W i pe 1 ( i n t code,  void  *base) 

{ 

n int  status; 

n /*  Wipe  the  stack  */ 

n if  (stack0) 

n n memsetCbase,  0,  (char  * ) ( s t a c k0 ) - ( c h a r *)base); 

#ifdef  UNIX 

n /*  ACHTUNG!  This  code  might  be  dangerous  */ 

n { 


n 

n 

struct 

heapinfo  info; 

n 

n 

/ * Wipe 

the  heap  */ 

n 

n 

/ * First 

pass  - initial  wipe  with  0xff  */ 

s 

n 

_heapset(0xff); 

n 

a 

info._pentry  = 0; 

n 

B 

while  ( _ 

h e a p wa 1 k ( & i n f 0 ) ==  _HEAP0K)  { 

n 

B 

B 

if  ( i n f 0 . _u s e f L a g ==  _USEOENTRY)  { 

□ 

B 

B 

n mems e t ( i n f 0 . _p en t r y , 0xff,  i 

o 

B 

B 

n f r e e ( i n f 0 . _pe n t r y ) ; 

n 

B 

B 

n /*  freeC)  mucks  up  _heapwaLk 

n 

B 

B 

n info._pentry  = 0; 

Q 

B 

B 

> 

s 

B 

> 

Q 

B 

/*  Second  pass  - wipe  all  free  areas  */ 

n 

B 

_heapset(0); 

a 

> 

#endif  /*  UNIX  */ 
n exit(code); 


} 


#if  BORLANDC 

#if  BORLANDC  <=  0x0400 

unsigned  _stkLen  = 16384; 

#e  L s e 

unsigned  const  _stkLen  = 16384; 

#end  i f 
#endi f 

static  void 
exitWipeCint  code) 

{ 

n ex i t W i pe 1 ( c od e , a L L o c a C s t a c ka va i L C ) -5 00 ) ) ; 

} 
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#eLsen  /*  IHSDOS  */ 


static  void 

exi tWi pel ( i nt  code,  void  *base) 

{ 

n /*  Wipe  the  stack  */ 

n if  (stack0) 

n n memsetCbase,  0,  ((char  * ) ( s t a c k0 ) - ( c h a r *)base)); 


# i f 0n 

o 

n 

a 

n 

□ 

#endi f 


/*  Disabled  until  stdio  problems  can  be  resolved  */ 

/*  Wipe  the  heap  */ 
i f ( heap0)  ( 
n base  = sbrk(0); 

n memset(heap0,  0,  (char  *)base-(char  *)heap0); 

} 


#ifdef  VMS  /*  On  VMS,  the  bottom  3 bits  are  a severity  */ 
n code  = (1<<28)  | (code  <<  3)  | (1  + (code  !=  0)); 

# e nd i f 

n exit(code); 

> 


/* 

* This  recursively  calls  itself  until  it  has  eaten  enough  stack, 

* then  wipes  it. 

* ASSUMPTIONS:  it  assumes  that  the  stack  is  contiguous  and  grows  downwards. 

* (This  is  reasonably  portable  in  practice, 

* even  though  counterexamples  exist.) 

* If  these  are  violated,  who  knows  what  will  happen! 

*/ 

static  void 
exitWipe(int  code) 

{ 

a char  bufC10243; 


a if  (stack0  &&  (char  *)stack0  - buf  < 16384) 

n n exitWipe(code);n/*  Recursive  call  to  fill  stack  */ 

n e X i t W i pe 1 ( c od e , buf); 

} 


#endifn  /*  IMSDOS  */ 


void 

exi tC  leanup( i nt  code) 

{ 

n extern  PGPKeySet  *defaultset; 

n if  (defaultset)  ■( 

n n pgp F reeKeySet  (defaultset); 

n n defaultset  = NULL; 

n > 

D pg  p L i b C I e a n u p ( ) ; 

#if  DEBUG 

n printf  ("(Checking 

n pg p Lea ks E n d S e s s i on 

#end i f 

n fclose(stdin); 
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n f c Lose( stdout ) ; 

n fclose(stderr); 


□ 

} 


exitwipe(code) 


#ifdef  MSDOS 
/* 

* DOS  Error  codes  from  0x13  to  0x27  are  reported  as  critical  errors, 

* But  they  are  mapped  to  0..0x14  before  being  passed  in  di.  Some 

* fancy  extensions  (Like  networks)  can  create  more. 

* Actually,  0x 
*/ 


static  char  const  * const  doserrsC]  = { 
n "Write  protect  errorS", 

n "Unknown  unit$", 

n "Drive  not  ready$", 

n "Unknown  commands", 

n "Data  error  (bad  CRC)$", 

n "Bad  request  structure  Lengths", 

n "Write  protect  errorS", 

n "Seek  errorS", 

n "Unknown  media  typeS", 

n "Sector  not  founds ", 

n "Printer  out  of  paperS", 

a "Write  faults", 

n "Read  fauLtS", 

n "General  failure" 

n "Sharing  violations", 

n "Lock  violations", 

n "Invalid  disk  changes ", 

a "FCD  unavailableS", 

n "System  resource  exhaustedS", 

n "Code  page  mismatchS", 

n "Out  of  inputs", 

n "Insufficient  disk  spaceS", 

n "Unknown  errors "n  n /*  Catch-all*/ 

>; 


static  char  const  * const  readwriteCD  = { 
n "Reading",  "Writing" 

>; 


static  char  const  * const  areaCD  = { 
n "DOS  area",  "file  allocation  table", 

}; 


disk  directory",  "file  area 


#ifndef  BORLANDC 

/* 

* Microsoft  Visual  C somehow  distinguishes  between  "const  void  __far  * 


* (which 

works) 

and  "void  const  _ 

_f  a r * " 

and  "void 

far  const  *" 

* (which 

don't). 

I have  no  idea  why.  If 

you  move  the 

const  after 

the  void 

* trying 

t 0 

pass 

a "char  const  *" 

(or  a 

"const  char  * 

")  produces  a 

warning 

* Ugh! 

* / 

(It 

also 

blows  up  if  the 

" far" 

comes  before 

the  "void". 

Huh?) 

i nt 

bdosptr(int 

code. 

const  void  __far 

*pt  r. 

int  subcode) 
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{ 


n 

union  _REGS 

regs; 

n 

struct  _SREGS  segregs; 

tt 

regs.h.ah  = 

code; 

n 

regs . h . a 1 = 

subcode; 

a 

regs.x.dx  = 

_FP_0FF(ptr); 

n 

segregs . ds 

= _FP_SEG(ptr); 

n 

_intdosx(8regs,  &regs,  Ssegregs); 

n 

return  regs 

■x.cflag  ? -1  : regs.x 

> 

#endif  /*  ! BORLANDC  */ 


/* 

* The  registers  are  passed  in  the  following  order. 

* If  ax  bit  15  (ah  bit  7)  is  CLEAR,  it's  a disk  error. 

* ah  bit  0 is  1 if  a write  error;  0 if  a read  error. 

* ah  bits  1 and  2 identify  the  area  of  the  disk  with  the  error: 

* 0 (00)  for  DOS  area 

* 1 (01)  for  FAT 

* 2 (10)  for  disk  directory 

* 3 (11)  for  files  area 

* al  gives  the  drive  code  (0  = a:,  1 = b:,  etc.) 

* 

* If  ax  bit  15  (ah  bit  7)  is  SET,  it's  a non-disk  error. 

* Either  a character  device  error  or  a corrupted  in-memory  FAT. 

* In  this  case,  the  rest  of  ax  is  meaningless. 

* 

* In  either  case,  the  bottom  half  of  di  gives  the  driver  error  code. 

* bp:si  point  to  the  device  driver  header  responsible 

* 


If  a character  device,  examine  the  device  attribute  word  at  bp:si+4. 
If  bit  15  is  set  (character  device),  you  can  use  the  name  field. 
Device  driver  header: 

Offset  Len  Purpose 

0 4 Next  device  link  (-1  if  no  others) 

4 2 Deviceflags 

6 2 Strategy  function 

8 2 Interrupt  function 

10  8 Device  name  (space-padded) 


★ 

Flag 

bits: 

* 

0 

- 

standard  input  device 

★ 

1 

- 

standard  output  device 

* 

2 

- 

Null  devoce 

★ 

3 

- 

Clock  device 

* 

4 

- 

S ep c i a 1 

* 

5- 

-10 

Reserved,  HBZ 

* 

1 1 

- 

Device  supports  removal 

★ 

1 2 

- 

Reserved,  HBZ 

* 

13 

- 

Non-IBM  format 

★ 

14 

- 

lOCTL 

* 

1 5 

- 

Character  device 

* A DOS  CRITICAL  ERROR  HANDLER  HAY  ONLY  USE  DOS  FUNCTIONS  0-12! 

* Return  code  is:  0 = _H AR D E R R_ I G N 0 R E , 1 = _ H A R D E RR_R ET R Y , 

* 2 = _HARDERR_ABORT  (int  23),  3 = _H AR D E R R_ F A I L (DOS  3+). 

*/ 
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void far 

h a r d E r r H a n d L e r ( u n s i g n e d di,  unsigned  ax,  unsigned 
{ 

n char  bufC64Il; 

n inti; 


far  *devhdr) 


di  &=  0xff; 


n 

sprintfCbuf 

, "\r\nDos  error  %d:  $",  di); 

n 

bdosptr(9. 

buf,  0 ) ; 

n 

i 

f (di  >=  s i zeof ( do se r r s ) / s i z eo f ( *dose r r s ) ) 

n 

B 

d i 

= s i z eo f ( d 0 s e r r s ) / s i z eo f ( *do s e r r s ) - 1; 

□ 

bdosptr(9. 

doserrsCdi],  0); 

n 

bdosptr(9. 

" \ r \ n $ " , 0 ) ; 

n 

i 

f (ax  S 0x8000)  {n  /*  Disk  error  */ 

n 

B 

sprintf(buf,  "%s  %s  of  drive  %c:\r\n$". 

n 

B 

fl 

r ea d w r i t e C a x>>8  & ID,  areaCax>>9  8 

3D,  ' A ' + ax 

□ 

B 

bdosptr(9,  buf,  0); 

n 

> 

else  < 

n 

B 

i f 

( FP_SEG(devhdr)+1  &&  F P_0 F F ( d e vh d r ) +1 

n 

B 

&& 

(devhdrC2D  & 0x8000))  ( 

n 

B 

B 

/*  Character  device  */ 

o 

fl 

B 

i = 8; 

u 

B 

fl 

while  (((char  __far  * ) de v h d r ) C 1 0+-- 

i D S&  i ) 

□ 

B 

B 

° ; 

n 

fl 

fl 

sprintf(buf,  "Accessing  device  \"%. 

*s\"\r\n$". 

n 

B 

B 

i,  ((char  __far  * ) d e vh d r ) + 1 0 ) ; 

B 

fl 

fl 

bdosptr(9,  buf,  0); 

B 

fl 

> e 

1 s e { 

fl 

B 

B 

/*  Error  with  in-memory  FAT  */ 

B 

fl 

fl 

bdosptr(9,  "Accessing  in-memory "\ 

" file 

allocation  table. \r\n$",  0); 

B 

□ 

} 

B 

} 

B 

\ 

- 

hardresume(_HARDERR_FAIL); 

J 

Sendi f 

/* 

HSDOS  */ 

static  int  e x i t S i g p i pe C ou n t = 0; 


static  void 

exi tBreak  (int  si g ) 

{ 

n int  code  = PG P E X I T_S I G N A L ; 


#ifdef  SIGPIPE 


□ 

n 

□ 

□ 

# e nd i f 

#i f def 

n 

□ 

a 

□ 

Send i f 
Si f def 


C s i g 


i f 

D 

n 

> 


SIGINT 
if  ( s i g 
n 
□ 

> else 
SIGABRT 


==  SIGPIPE  &S  ++exi tSi gpi peCount  < 5)  < 
(void)signaL  (sig,  exitBreak); 
return; 


==  SIGINT)  { 

fputs  ("\nStopped  at  user  request. \n' 
code  = PGPEXIT_BREAK; 


stderr); 
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n 

n 

n 

n 

#endi f 

if  (sig  ==  SIGABRT)  { 

n fputs  ("\nInternaL  error. \n",  stderr); 

n code  = PG PE X I T_ I NT E RN A L; 

> else 

n 

n 

> 

n fprintf  (stderr,  "\nReceived  signal  %d.\n",  sig); 

exitCleanup  (code); 

/*  The 

signals  to  trap  */ 

static  int  const 
sigTabLeCD  = { 

#ifndef  EXPIRY_DATEn  /*  Do  NOT  trap  on  beta  versions  */ 


#i f def 

SIGABRT 

a 

#end i f 

#end i f 

SIGABRT, 

# i f d e f 

SIGALRM 

n 

# e n d i f 

SIGALRM, 

#i f def 

SIGBUS 

n 

#endi f 

SIGBUS, 

# i f d e f 

SIGEMT 

□ 

#e n d i f 

SIGEMT, 

#i f def 

SIGFPE 

Q 

#e  nd i f 

SIGFPE, 

#i f def 

SIGHUP 

D 

#end i f 

SIGHUP, 

#i f def 

SIGILL 

n 

#end i f 

SIGILL, 

# i f d e f 

SIGINT 

n 

SIGINT, 

# e n d i f 

#if  def ined(SIGIOT)  &S  SIGIOT  !=  SIGABRT 
n SIGIOT, 


#endi  f 

#i f def 

SIGPIPE 

n 

#end i f 

SIGPIPE, 

#i f def 

SIGQUIT 

a 

#endi f 

SIGQUIT, 

# i f d e f 

SIGSEGV 

n 

# end i f 

SIGSEGV, 

#i f def 

SIGSYS 

n 

# e n d i f 

SIGSYS, 

#i f de  f 

SIGTERH 

n 

#e  nd i f 

SIGTERH, 

#i f def 

SIGTRAP 

□ 

SIGTRAP, 
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#end  i f 

#ifdef  SIGXCPU 
a SIGXCPU, 

# e nd i f 

#ifdef  SIGXFSZ 


Q 

# e n d i f 
□ 

>; 


SIGXFSZ, 

-In  /*  Terminate  list  */ 


void 

exitSetup  (void  *stacktop,  void  *heaptop,  int  prog) 
{ 


□ 

int  i ; 

□ 

for  ( i 

= 0;  sigTableCiD  >=  0; 

+ 

+ 

□ 

n 

if  (signal  (sigTableCi 

:,  SIG_IGN) 

!=  SIG_IGN) 

Q 

n 

a (void)signal  ( 

sigTableCiD, 

exi tBreak) 

n 

} 

n 

program 

_name  = prog; 

u 

s t a c k0 

= stacktop; 

#if  def ined(UNIX)  ||  definedC BORLANDC ) 

n heap0  = heaptop; 

# e nd i f 

#ifdef  MSDOS 

n _ ha r d e r r ( h a r d E r r H a nd L e r ) ; 

# e n d i f 
} 


C[CHK:abad3bf26608177dd85566aa11111d351e0b2:: 
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/* 

* pgpkExit.h  — Header  file  for  Exit  routines 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpkExit.h, V 1.2. 2.1  1997/06/07  09:49:12  mhw  Exp  $ 

*/ 

#ifndef  attribute 
#if  __GNUC__ 

//define  attribute(x) a 1 1 r i bu  t e__  ( x ) 

#e  L se 

//define  attribute(x)  /*nothing*/ 

#end i f 
#end i f 

//ifdef  __cpLuspLus 
extern  "C"  f 
//endi  f 

void  exitCLeanup  Cint  code); 

void  exitSetup  (void  *stacktop,  void  *heaptop,  int  prog); 
void  exitArgError  (char  const  *fmt,  ...); 
void  exitUsage  (int  code); 

//ifdef  __cpLuspLus 

> 

//end  i f 

/*  These  are  defined  to  be  equivaLent  to  CoLin's  originaL  code  */ 


//define 

PGPEXIT_ 

OKn 

n 

0 

//define 

PGPEXIT_ 

argsq 

n 

7 

//define 

PGPEXIT_ 

VERSIONnn 

9 

#def i ne 

PGPEXIT, 

BREAKn 

n 

1 5 

#def i ne 

PGPEXIT_ 

SIGNALd 

n 

16 

//def  i ne 

PGPEXIT_ 

NOMEHn 

n 

1 7 

//def  i ne 

PGPEXIT_ 

INTERNALn 

1 8 

//def  i ne 

EXIT_PROG_PGPMn 

1 

#de  f i ne 

EXIT_PROG_PGPKn 

2 
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/* 

* pgpkinit.c  initialize  the  pgpk  application. 

★ 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

★ 

* $Id:  pgpkinit.c, V 1.1. 2. 2 1997/06/07  09:49:13  mhw  Exp  $ 

*/ 


#ifdef  HAVE_C0N FIG_H 
#include  "config.h" 
Send i f 

Sinclude  <stdio.h> 
Sinclude  <string.h> 

Sifdef  HAVE_STDLIB_H 
Sinclude  <stdlib.h> 

# e n d i f 

Sifdef  HAVE  UNISTD_H 


Sinclude 

<uni std . h>n 

Send  i f 

Sine  lude 

"pgpDebug  . h 

Sinclude 

"pgpLeaks . h 

Sinclude 

"pgpkExit.h 

Si nc lude 

"pgpkinit.h 

/*  for  sbrkC)  */ 


i nt 

pgpInitApp  (void  *stacktop,  int  exit_prog) 
{ 

n void  *heaptop; 


Sif  defined(UNIX) 

II  def i nedC_ 

_B0RLANDC 

□ 

/*  Find  the  top 

0 f 

the 

heap  * / 

n 

heaptop  = 

(void 

*) 

sbrk(0); 

#e  L s e 

n 

heaptop  = 

NULL; 

#endi f 

n /*  setup  the  exit  routines  */ 

n exitSetup  (stacktop,  heaptop,  exit_prog),- 

n return0; 

> 

Sifdef  MACINTOSH 
i nt 

ma i n ( ) 

{ 

□ 
n 
n 
a 
n 
a 
a 

n[CHK:61ddb699fc992cc224be99ae4bb246333bfdfc9921186655dd8b508dda0e0e359:: 


static  char  bufC256D; 
static  char  *argvC32!]; 
int  argc  = 0; 
int  result; 
char  *p; 

f pu t s ( " C omma n d ->  ",  stdout); 
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n pg pT t y G e t S t r i n g ( bu f , sizeof(buf),  NULL); 

n argc=0; 

n p = b u f ; 

n while  large  < sizeofCargv)  / s i z e o f ( a r g v C 0 D ) 

n S&  largvCargc!]  = strtoklp,  " ")))  { 

n n p = 0; 

n n a rgc  + + ; 

° > 

n result  = a p pHa i n ( a r g c , argv); 

n exitCleanuplresult); 

n return  result; 

} 

#e  I se 
i nt 

mainlint  arge,  char  *argvCD) 

{ 

n int  result; 

n 

#if  DEBUG 

n pgpLeaksBeginSession("main"); 

# end i f 

n result  = a ppMa i n ( a rg c , argv); 

n exitCleanuplresult); 

n return  result; 

} 

# e nd i f 


C[CHK:6ca10ae565588aac8abbe22342cccb84e362I]!] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2141 


pgpkinit.h 


/* 

* pgpkinit.h  --  InitaLize  the  PGPK  Application 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* $Id:  pgpkinit.h, V 1.1. 2.1  1 997/06/07  09:49:1  3 mhw  Exp  $ 

*/ 


#ifndef  PGPINITAPP_H 
#define  PGPINITAPP  H 


#ifdef  __cpLuspLus 
extern  "C"  { 

#e n d i f 


int 

pgpl 

nitApp  (void 

*stacktop,  int 

/* 

* 

This 

routine  must 

be  defined  for 

★ 

main. 

pgpini tApp. 

c contains  the 

* 

This 

is  because  on 

the  Macintosh 

* 

*/ 

so  we 

need  to  read 

the  arguments 

exit_prog); 

each  application.  It  works  just  like 
real  mainC),  which  calls  appMainC). 

main  gets  called  without  parameters, 
from  the  command  line  from  within  mainC) 


int  appHain  (int  argc,  char  *argvCD); 


#ifdef  __cplusplus 
} 

#end  i f 


#endif  /*  PGPINITAPP  H */ 


[CCHK:62696f11eff3955cccab034bb0944dc25ef28:] 
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/* 

* pgpkKeyGen.c  --  Routines  to  generate  a key 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* 970514  BAT  Created  new  fiLe  from  HHW's  routine  from  pgpk.c 

* Broken  up  into  smaLLer  functions 

* And  a PGP  fiLe  without  a singLe  goto,  now!  Who'd  have  thunk 

* it? 

* 

* $Id:  pg p kKey G e n . c , V 1.1. 2. 7 1997/06/07  09:49:13  mhw  Exp  $ 

*/ 


#ifdef  HAVE_CONFIG_H 
#incLude  "config.h” 
#e  n d i f 


#incLude 
#incLude 
#incLude 
#i nc  Lude 


<s  t d i o . h> 
<string.h> 
<t i me  . h> 
<ctype . h> 


#ifdef  HAVE_S YS_PARAM_H 
#incLude  <sys /pa  ram . h> 
Mend i f 

#ifdef  HAVE_STDLIB_H 
SincLude  <stdLib.h> 

#end i f 

#ifdef  HAVE_UNISTD_H 
#incLude  <unistd.h>n  n 
#end  i f 


#ifdef  UNIX 

#incLude  <sy s / s t a t . h>n  n 
Send  i f 


n c L ud e 

"pgpDebug  . h" 

nc  Lude 

"pgpEnv.h" 

n c L ud e 

"pgpHem. h" 

nc  Lude 

"pgpKeyDB. h" 

n c L ude 

"pgpkUI . h" 

n c L ude 

"pgpkinit.h" 

n c L ude 

"pgpkExit.h" 

nc  L ude 

"pgpOpt . h" 

n c L ude 

"pgpUserlO. h" 

n c L ude 

"pgpRndPooL  . h 

nc  Lude 

"pgpkKeyGen. h 

n c L ude 

" pa  s s . h " 

nc  L ude 

" u r L . h " 

nc  Lude 

"keyserver.h" 

Sdefine  MIN  KEY_SIZE  768 


/*  for  sbrkC)  */ 


/*  for  umaskC)  */ 


static  int 

key g e n P r og r e s s (void  *arg,  int  c); 
static  int 

KeyGenGetPassphraseCBooLean  GotArgs, 
n n char  *passphrase, 

C[CHK:698be4683bc8847ccd02cc6fb9ecd4b53dd47d20262888290221153570ca9f40a]: 
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n n size_t  pa s s p h r a s e L e n , 

n n void*ui_arg); 

static  int 

KeyGenGetVaLidityCBooLean  GotArgs,  int  *vaLidity); 
static  int 

Ke  y G e nG e t N a me ( Boo L ea n GotArgs,  char  *namebuf,  int  *nameLen); 
static  int 

KeyGenGetKeySizeCBooLean  GotArgs,  byte  pkaLg,  int  *keybits,  int  *subkeybits); 
static  int 

KeyGenGetKeyTypeCBoolean  GotArgs,  byte  *pkalg,  byte  *subkaLg); 
static  int 

Pa  rseKeyGenArgs ( i nt  argc. 


u 

n 

char  *argvC}, 

n 

a 

byte  *pka  Ig, 

□ 

n 

byte  *subka  Ig, 

n 

n 

int  *keybits. 

n 

n 

int  *subkeybits. 

Q 

n 

int  *namelen. 

□ 

Q 

char  *namebuf. 

n 

n 

i nt  *va 1 i di ty. 

n 

n 

char  *passphrase. 

n 

B 

int  pa s s p h r a s e 1 e n , 

n 

B 

char  ** key s e r V e r ) ; 

static 

int 

Key G e n S e nd Key ( Boo  1 ea n GotArgs 

n 

B 

n char  *keyserver 

a 

B 

n PGPKey  *key. 

n 

fl 

n struct  PgpTtyUI 

* u i ) ; 

static  int  Key S i z e Ta b L e C 5 D = {0,  768,  1024,  2048,  4096}; 


/*  Optional  Arguments:  (if  you  specify  one,  you've  got  to  specify 
*them  all,  except  passphrase) 

* 

*argvC1]  Key  type  (DSS  or  RSA) 

*argvC2}  Key  Size  (768-4096) 

*argvC3}  UserlD  (Brett  A.  Thomas  <q u a r ka ba z . c om> ) 

*argvC4}  Validity  period  in  days  (0  - 999) 

*argvC5}  Passphrase  (if  '?',  user  will  be  prompted). 

#argvC6}  Keyserver  to  send  key  to,  if  any 
*/ 

i nt 

do  Key  G e ne  r a t e (PGPKeySet  *defaultset,  int  argc,  char  *argvCII,  void  *ui_arg) 
{ 

int  error=0; 

byte  namebufC256}  = "\0", 

n pa s s p h r a s e C P AS S L E N } = "\0"; 

intn  namelen  = 0; 

int  keybits  = 0,  subkeybits  = 0; 

intn  validity  = 0; 

byte  pkalg,  subkalg; 

PGPKey  * key ; 

unsigned  ent ropy_needed; 

extern  PgpEnv  PGPKDBExport  *pgpEnv; 

Boolean  GotArgs  = FALSE; 

char  *keyserver  = NULL; 


if(argc  > 1)  { 

CCCHK:7e5aa3d90c02a42dc552f4a9ddddddd8b8de87b115908667fdc4879ee8f91d4da:: 
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□ 

Go  t A r g s 

= 

TRUE; 

n 

name  L en 

= 

si zeofCpassphrase); 

n 

error  = 

ParseKeyGenArgsCargc, 

n 

n 

n 

n 

a rgv. 

H 

n 

n 

n 

Spkalg, 

n 

n 

n 

n 

Ssubka Ig, 

n 

n 

o 

□ 

Skeybits, 

n 

n 

n 

□ 

Ssubkeybits, 

n 

n 

Q 

n 

Snamelen, 

n 

□ 

n 

D 

(char  *)  namebuf. 

n 

n 

n 

n 

Sva  1 i di ty. 

n 

n 

n 

□ 

(char  *)  passphrase 

n 

□ 

n 

n 

si zeofCpassphrase), 

n 

n 

n 

n 

Skeyserver) ; 

> 


/*This  is  inefficient  in  that  a bad  arg  up  above  will  cause  six  error== 

* e va L ua t i on s . However,  it  does  mean  that,  if  we  have  a memory  allocation 
*failure  someplace,  we  don't  then  call  all  the  other  routines,  and  it 
*also  means  that  we  do  this  without  a bunch  of  exits  or  gotos  all  over 
*the  place. 

*/ 

ifCerror  ==  PGPERR_OK)  { 

n error  = Key G e n G e t KeyTy pe ( G o t A r g s , Spkalg,  Ssubkalg); 

> 

ifCerror  ==  PGPERR_OK)  < 

a error  = Key G e nG e t Key S i z e ( Go t A r g s , pkalg,  fikeybits,  & s u b key b i t s ) ; 

> 


ifCerror  ==  PGPERR_OK)  { 
n namelen  = s i z eo f ( namebu f ) ; 

n error  = Key G e nG e t Name ( G o t A r g s , (char  *)  namebuf,  Snamelen); 

> 

ifCerror  ==  PGPERR_OK)  { 

n error  = Key G e nG e t Va  I i d i t y ( Go t A r g s , Svalidity); 

> 


n 


n 

a 

□ 


ifCerror  == 

PGPERR 

_0K)  { 

error  = 

KeyGenGetPassphraseCGotArgs, 

n 

n 

n 

(char  *)  passphrase 

n 

n 

n 

sizeof(passphrase). 

n 

> 

n 

n 

u i _a  rg  ) ; 

ifCerror  ==  PGPERR_OK)  t 
n /*  Assume  fast  DSA  keygen  */ 

n pgpenvSetIntCpgpEnv,  PGPENV_FASTKEYGEN,  1,  PGPENV_PRI_PRIVDE FAULT); 


n 

n 

D 

a 

a 

n 

n 


/*  Need  to  ask  for  randomness  */ 

entropy_needed  = pgpKeyEntropyNeeded  (pkalg,  keybits); 
if  (subkalg) 

ent ropy_needed  +=  pgpKeyEntropyNeeded  (subkalg,  subkeybits); 
if  ( e n t r opy _n eeded  > pg p Ra nd Poo  I E n t r opy ( ) ) ( 

fprintf  Cstderr,  "Collecting  randomness  for  key...\n"); 
pg pT t y Ra n d A c c urn  (ui_arg,  ent ropy_needed ) ; 
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pgpAssertCdefauLtset); 


□ 

error  = pg pG e n e r a t e Key 

CdefauLtset, 

£! 

n 

n 

n 

pkaLg, 

n 

n 

n 

n 

key b 1 t s , 

n 

n 

Q 

n 

vaLidity, 

□ 

n 

n 

n 

(char  *)  namebuf. 

n 

n 

n 

n 

name  L en. 

n 

n 

a 

c 

(char  *)  passphrase. 

n 

n 

Q 

n 

keygenProgress, 

n 

□ 

n 

o 

u i _a  r g , 

□ 

n 

n 

n 

& k e y ) ; 

n 

f p r i 

ntf  (stderr,  "\n"); 

n 

i f ( subka  Lg 

&&  error  == 

PGPERR_0K)  { 

□ 

error  = 

pgpGenerateSubKeyCkey, 

□ 

Q 

n 

□ 

subkeybi ts. 

□ 

Q 

□ 

□ 

vaLidity, 

n 

Q 

n 

Q 

(char  *)  passphrase 

n 

n 

n 

n 

(char  *)  passphrase 

n 

Q 

n 

n 

keygenProgress, 

n 

Q 

n 

n 

u i _ a r g ) ; 

□ 

fprintf 

(stderr,  "\ 

n " ) ; 

n 

> 

u 

if  ( 

! e r r 0 r ) 

i 

fprintf  (stderr,  "Keypair  created  s u c c e s s f u L L y . \ n " ) ; 
pgpCommitKeyRingChanges  CdefauLtset); 

KeyGenSendKeyCGotArgs,  keyserver,  key,  (struct  PgpTtyUI  *)  ui_arg); 


i f ( key se  rve  r ) 

n pg p F r e e ( key s e r ve r ) ; 

return(error); 

} 


static  int 

Pa 

r s e Key G e n A r g s ( i n t argc. 

Q 

o 

char  *argvC], 

Q 

n 

byte  *pkaLg, 

n 

n 

byte  *subkaLg, 

n 

n 

int  *keybits. 

Q 

n 

int  *subkeybits. 

□ 

Q 

int  *nameLen, 

□ 

n 

char  *namebuf. 

n 

n 

int  *vaLidity, 

Q 

n 

char  *passphrase. 

Q 

n 

int  pa s s ph r a s e L en 

u 

a 

char  **keyserver) 

int  error 

= PGPERR_0K; 

pg p A s s e r t ( a r g c ==  4 | | argc  ==  5); 

pgpAssertCargv  &&  pkaLg  &&  subkaLg  &S  keybits  &&  subkeybits  &S  nameLen); 
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pg p A s s e r t ( na me b u f &&  validity  &&  passphrase  &&  pa s s p h r a s e L e n ) ; 

/*Avoid  warning  on  subkeybits.  This  is  for  future  functionality,  in  case 
*we  ever  want  to  allow  others  to  specify  this. 

*/ 


(void)  subkeybits; 


n 

□ 

n 

D 

n 

n 

n 

n 

Q 

□ 

D 

n 

D 

n 

□ 

n 

a 

n 

D 

□ 

n 

□ 

a 

n 

n 

a 

□ 

a 

a 

a 

n 


if(argc  ==  5 | | argc  ==  6)  ( 

if(strcasecmp(argvC03,  "DSS")  ==  0)  ( 

*pkalg  = PGP_PKALG_DSA; 

*subkalg  = PGP_PKALG_ELGAHAL; 

> 

else  { 

i f ( s t r c a s e c mp  ( a r g V C 0 II  , "RSA")  ==  0)  t 
n *pkalg  = PG P_ PKA LG_ R S A; 

n *subkalg=0; 

> 

else  { 

n fprintfCstderr,  "Unknown  algorithm  %s.\n",  argvC0I)); 

n error  = PGPERR_BADPARAH; 

> 

> 

if(error  ==  PGPERR_0K)  { 

*keybits  = a t o I ( a rg  v C 1 II ) ; 

> 

if(error  ==  PGPERR_0K)  { 

strncpyCnamebuf,  argvCZH,  *namelen); 

*namelen  = s t r I en ( a r g v C 2 D ) ; 

} 

ifCerror  ==  PGPERR_0K)  { 

*validity  = a t oi ( a r g vC3D ) ; 

> 

ifCerror  ==  PGPERR_OK)  { 

s t rn c py ( pa s sph ra se , argvC4],  pa s s p h r a s e I en  ) ; 

> 


n 

n 

□ 

n 

n 

n 

n 

n 


ifCerror  ==  PGPERR_0K  SS  argc  ==  6)  { 

/‘They  specified  a keyserver*/ 

i f ( ( * key s e r ve r = pgpA I I o c ( s i zeof ( c ha r ) * ( s t r I en ( a r g v C 5 3 ) + 1))))  { 
n s t r c py ( * key s e r ve r , argvCSD); 

} 

else 

n error  = PGPERR_NOMEM; 

} 

> 

else  { 


n fprintfCstderr,  "\ 

Error!  If  any  command-line  key  generation  options  are  specified,  all\n\ 
options  must  be  specified  (with  the  exception  of  the  server  to  send  to).\n"); 
n error  = PGPERR_BADPARAM; 


} 


returnCerror); 
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> 

static  int 

Key G e n G e t Key Ty p e ( Boo L e a n GotArgs,  byte  *pkaLg,  byte  *subkaLg) 
{ 

int  error  = PGPERR_OK,  keytype,  Len; 
char  bufC256:; 

pgpAssertCpkalg  SS  subkaLg); 
ifCIGotArgs)  { 
n dot 

n fprintf  (stderr. 


n 

a 

"\ 

Choose 

the 

type  of  your  public  key:\n\ 

1 ) 

DSS/D 

i f f i e-He L L ma n - New  algorithm  for  5.0  (defauLt)\ 

2) 

RSA\n\ 

Choose 

1 or 

2:  "); 

n 

Len  = pg pT t y G e t S t r i n g (buf,  sizeof(buf),  stderr 

□ 

if  (Len)  { 

n 

Q 

keytype  = atoiCbuf); 

Q 

> 

n 

else  { 

n 

Q 

keytype  = 1; 

n 

} 

n 

switch  (keytype)  ( 

a 

n 

case  1 : 

u 

n 

*pkaLg  = PGP_PKALG_DS A; 

n 

n 

*subkaLg  = PGP_PKALG_ELGAMAL; 

n 

□ 

break; 

n 

□ 

case  2 : 

Q 

n 

*pkalg  = PGP_PKALG_RSA; 

n 

n 

*subka  Lg  = 0; 

D 

□ 

break; 

o 

n 

default  : 

a 

n 

*pkaLg  = *subkaLg  = 0; 

n 

n 

break; 

n 

> 

□ 

>whi Le( !*pkaLg); 

> 


returnCerror); 

> 

static  int 

KeyGenGe t Key S i z e C Boo L ea n GotArgs,  byte  pkaLg,  int  *keybits,  int  *subkeybits) 
{ 

int  Len  = 0,  maxLen  = 0,  error  = PGPERR_OK; 
char  bufC256]; 

pgpAssert(pkaLg  &&  keybits  &S  subkeybits); 
do  { 

n i f ( ! Got Args)  { 

n switch(pkaLg)  { 

n n case  PG P_ PKA LG_ D S A : 

n n fputsC 

"\nPick  your  pubLic/private  keypair  key  size:\n\ 
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(Sizes  are  Diffie-HeLLman/DSS;  Read  the  user's  guide  for  more  information)\n\ 

1)  768/768  bits-  Commercial  grade,  probably  not  currently  breakable\n\ 

2)  1024/1024  bits-  High  commercial  grade,  secure  for  many  years\n\ 

3)  2048/1024  bits-  \"Military\"  grade,  secure  for  forseeable  futureX 
(default)\n\ 

4)  3072/1024  bits-  Archival  grade,  slow,  highest  security\n\ 

Choose  1,  2,  3 or  4,  or  enter  desired  number  of  Diffie-Hellman  bits\n\ 

(768  - 4096):  ",  stderr); 

n n fflush  (stderr); 

n n break; 


n n case  PG P_PKA LG_ R S A : 

n n f puts  ( 

"\nPick  your  pu b I i c / p r i va t e keypair  key  size:\n\ 

1)  768  bits-  Commercial  grade,  probably  not  currently  breakable\n\ 

2)  1024  bits-  High  commercial  grade,  secure  for  many  years\n\ 

3)  2048  bits-  \"Military\"  grade,  secure  for  the  forseeable  future\n\ 
Choose  1,  2 or  3,  or  enter  desired  number  of  bits\n\ 

(768  - 2048):  ",  stderr); 


fflush  (stderr); 
break; 


n 

n 

n 

n 

n 

Q 

□ 

□ 

□ 

n 

n 


len  = pgpTtyGetString  (buf,  sizeof(buf),  stderr); 
if(len)  { 

n *keybits  = atoi(buf); 

n if(*keybits  > 0 &&  *keybits  < 4)  { 

n *keybits  = KeySizeTableC*keybits]; 

n > 

> 

else  { 

n *keybi ts  = 2048; 

} 

> 


switch(pkalg)  C 

case  PGP_PKALG_DSA : 
n max  len  = 4096; 

n break; 


case  PGP_PKALG_RSA : 
a max  len  = 2048; 

n break; 

> 


if(*keybits  < M I N_KE Y_ S 1 Z E ) { 
error  = PG PE R R_B A D P AR AM ; 
fprintf(stderr, 

n "Minimum  key  size  is  %u.\n", 

n MIN_KEY_SIZE  ) ; 

> 

else  { 

if(*keybits  > maxlen)  { 
n error  = PG P E RR_B A D P AR AM ; 

n f p r i n t f ( s t d e r r , 

n n "Maximum  key  size  is  %u.\n", 

n n maxlen); 

> 
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n 


else  { 


□ 

□ 
n 
□ 
n 

Q 

n n 

n n 

(Producing 


a % i 


□ 

D 

n 

n 


a 

Q 

□ 


*subkeybits  = *keybits; 
if(*keybits  >=  1024)  { 

*keybits  = 1024; 

} 

if(!GotArgs)  { 

if(keybits  !=  subkeybits)  { 
a fprintfCstderr, 

n n " \ 

bit  DSS  and  a %i  bit  0 i f f i e-H e L L ma n key)\n", 
n n *keybits, 

n n *subkeybits); 

> 

else 

n fprintfCstderr,  "\n"); 

> 

error  = PGPERR_0K; 


n > 


} w h i L e ( ! Go t A r g s SS  error  !=  PGPERR_0K); 


> 


return(error); 


static  int 

Key G e nG e t N a me ( Boo L e a n GotArgs,  char  *namebuf,  int  *nameLen) 

{ 

int  error  = PGPERR_0K; 

pgpAssert(namebuf); 

pgpAssert(nameLen); 

pgpAssert(*nameLen); 

/*If  we  got  a name  on  the  command  Line,  we've  got  to  assume  it's  OK  and 
*the  user  knows  what  she's  doing. 

*/ 


do  { 

n ifC!GotArgs)  { 

n f pu  t s ( 

"\nYou  need  a user  ID  for  your  public  key.  The  desired  form  for  this\n" 
"user  ID  is  your  FULL  name,  followed  by  your  E-mail  address  enclosed  in\n 
"<angLe  brackets>,  if  you  have  an  E-mail  address.  For  example:\n" 

" Joe  Smith  <u s e r adoma i n . c om> \ n " 

"If  you  violate  this  standard,  you  will  Lose  much  of  the  benefits  of\n" 
"PGP  5.0's  keyserver  and  email  integration. \n\n" 

"Enter  a user  ID  for  your  public  key:  ",  stderr); 
n fflush  (stderr); 

n *nameLen  = pgpTtyGetString  (namebuf,  *nameLen,  stderr); 


n 

a 

n 

n 

n 

□ 


if  ( ! name  L en ) { 
n *namebuf  = ' \0 ' ; 

} 

> 

else 

*nameLen  = s t r L e n ( na me b u f ) ; 


n if(!*namebuf)  { 
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n error  = PG P E R R_B A D P A R AM ; 

n f pu t s ( 

"\nYou  must  enter  something  for  your  ID;  otherwise,  PGP  will  be  unable  to 
"manipulate  your  key.\n",  stderr); 
n > 

> w h i I e ( ! Go t A r g s &&  error  !=  PGPERR_0K); 
return(error) ; 

> 


static  int 

Key G enG e t Va I i d i t y ( Boo  I e a n GotArgs,  int  *validity) 
{ 

int  len,  error  = PGPERR_OK; 
char  bufCZSb:; 

pgpAssertlva I idi ty); 


do  { 

n if(!GotArgs)  { 

n fputsC'Nn" 

"Enter  the  validity  period  of  your  key  in  days  from  0 - 999\n 
"0  is  forever  (and  the  default):  ", 
n n stderr); 

n fflush  (stderr); 


□ 

n 

n 

n 

a 

□ 

D 

n 

Q 


len  = pg pT t y G e t S t r i ng  (buf,  sizeof(buf),  stderr); 
if  (len)  { 

n ‘validity  = atoi  (buf); 

} 

else  { 

n ‘validity  =0; 

} 

} 


n if(‘validity  < 0 ||  ‘validity  > 999)  { 

n error  = PG PE R R_B A D P AR AH ; 

a fprintf(stderr,  "Validity  must  be  between  0 and  999!\n"); 

n > 

>while(!GotArgs  SS  error  !=  PGPERR_OK); 


> 


return(error) ; 


static  int 

KeyGenGetPassphrase(Boolean  GotArgs, 
n n char  ‘passphrase, 

n n size_t  pa s s ph r a s e I e n , 

n D void‘ui_arg) 

{ 

int  error  = PGPERR_0K; 
char  pa ss2 C P AS S LEN D ; 

pgpAs se r t ( pa s s ph ra se  &S  pa s s p h r a s e I en  ) ; 
if(!GotArgs  || 

n (GotArgs  &&  ‘passphrase  ==  '?'  fi&  ‘(passphrase  + 1)  ==  '\0'))  { 
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n do  { 

a fprintfCstderr,  "\n\ 

You  need  a pass  phrase  to  protect  your  private  key(s).\n\ 

Your  pass  phrase  can  be  any  sentence  or  phrase  and  may  have  many\n\ 
words,  spaces,  punctuation,  or  any  other  printable  characters. \n"); 


n 

Q 

□ 

n 

□ 

Q 

□ 

n 

D 

n 

D 


} 


pgpTtyGetPass  (ui_arg,  passphrase,  passphraselen); 
fprintf  Cstderr,  "Enter  again,  for  c on f i r ma t i on : \ n " ) ; 
pgpTtyGetPass  (ui_arg,  pass2,  sizeof(pass2)); 
if  (strcmp  (passphrase,  pass2)  1=  0)  { 
n fprintf  Cstderr, 

n n "Passphrases  are  different;  please  re-enter:\n"); 

n error  = PG P E R R_B A D P A R AM ; 

> 

else 

n error  = PGPERR_0K; 

TuhileCerror  !=  PGPERR_OK); 

> 

return  error; 


static  i nt 

key g e n P r og r e s s (void  *arg. 


{ 

a 

n 

Q 

n 

} 


(void)arg;n  n 

putc  (c,  stderr); 
fflush  (stderr); 
return  0; 


i n t 


c ) 

/*  make  the  compiler  happy  */ 


static  int  Key G e n S e nd Key ( Boo  I e a n GotArgs, 


o 

n 

n 

char  * 

keyserver. 

n 

n 

n 

PGPKey 

*key. 

Q 

f 

n 

n 

struct 

PgpTtyUI  *ui ) 

\ 

int  error 

= PGPERR 

_0K,  len; 

char  bufni024D; 
int  port  = 0; 

char  serverC10243,  fileni024D,  protocolC16],  urlC1024]  = "\0"; 


pgpAssertCkey); 


ifClGotArgs)  i 
B fputs  ("\n\ 

If  you  wish  to  send  this  new  key  to  a server,  enter  the  URL  of  the  server, \n\ 
below.  If  not,  enter  nothing. \n",  stderr); 

B fflush  (stderr); 


if((len  = pg pT t y G e t S t r i n g (buf, 
strcpyCurl,  buf); 

} 

} 

else  { 


if(keyserver)  { 
strcpyCurl, 


key se  r ve  r ) ; 


} 


sizeof(buf). 


stderr)))  { 


} 
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ifCurLCO:)  { 

n char  *buffer  = NULL; 

n size_t  Length  = 1; 

n PGPKeySet  *keyset; 


1 f ( pa r s e_ u r L ( p r o t o c o L , server,  file.  Sport,  but)  ==  PGPERR_OK)  { 
ifCCkeyset  = pg p N e w S i ng L e t on  Key S e t ( key ) ) ) { 

ifCCbuffer  = pg p A L L o c ( s i z e o f ( c h a r ) * Length)))  { 
pgpExportKeyBufferCkeyset, 
n n (unsigned  char  *)  buffer, 

n n SLength); 

pgpFree(buffer)  ; 

++Length;  /*Make  room  for  a nuLL*/ 
ifCCbuffer  = pg p A L L o c ( s i z eo f ( c h a r ) * Length)))  { 
a error  = pg p E x po r t Ke y Bu f f e r ( key s e t , 

n n n n (unsigned  char  *)  buffer, 

□ a □ n SLength); 

n if(error  ==  PGPERR_0K)  ( 

n PutKeyInfoHkp(ui,  server,  port,  buffer); 

n pg p F r e e ( bu f f e r ) ; 

n } 


> 

e L s e 


PGPERR_NOMEM; 


n pgp F r eeKey S e t ( key s e t ) ; 

> 

e L s e { 

n error  = PG P E R R_N OH E M ; 

} 

} 

e L se  { 

f p r i n t f ( u i -> f p , "\ 

Use  pgpk  -xa  -o  <URL>  to  submit  your  key  ma n ua L L y . \ n " ) ; 


BadLy  formed  URL. 
n > 

} 


return(error)  ; 
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/* 

* pgpkKeyGen.h 

★ 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpkKeyGen . h, V 1.1. 2. 2 1997/06/07  09:49:14  mhw  Exp  $ 

*/ 

/*  OptionaL  Arguments:  name  type  keybits  vaLidity*/ 
i nt 

doKeyGenerate  (PGPKeySet  *defauLtset,  int  argc,  char  *argvC3,  void  *ui_arg); 
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/* 

* pgpkUl.c  - Various  u s e r- i n t e r f a c e helpers  for  working  with  key 

* databases  on  a simple  stdio  tty  interface. 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  All  rights  reserved. 

* 

* Modified  from  pgpRingUI.c 

* 

* $Id:  pgpkUl.c, V 1.1. 2. 5 1 997/06/07  09:49:1  4 mhw  Exp  $ 

*/ 


ftii  HAVE 

_CONFIG_H 

#i nc  lude 

"config.h" 

#e n d i f 

^include 

<ctype.h> 

/^include 

<s  t d i 0 . h> 

#i nc  lude 

<std 1 i b . h> 

/* 

for 

strtol()  */ 

Sinclude 

<string.h>n/* 

for 

strchr() 

*/ 

^include 

<t i me  . h> 

/* 

for 

time 

()  */ 

^include 

"pgpDebug.h" 

#i  nc  lude 

"pgpKeyDB.h" 

^include 

"pgpkUI . h" 

#i nc  lude 

"pgpErr.h" 

//include 

"pgpTimeDate.h 

" n 

/* 

for 

pgpDa  t eSt 

#include 

"pgpUserlO. h" 

# i n c 1 u d e 

"pgpRngPub. h" 

#include 

"pgpTrust.h" 

//i  nc  lude 

"pgpTrstPkt.h" 

//include 

"pgpTimeDate.h 

" 

//include 

"pgpEnv.h" 

/* 

* The  old  PGP  format.. 

. 

Type 

Date  keyID/bits 

User  ID 

PUB 
f 00 
s i g ! 
PUB 


1996-03-30  58B96505/2048  F0  4A  30  95  20  17  29  E0 
1996-03-30  58B96505  foo 

1996-03-30  E9D1 E021 /4096  1A  E2  EF  AA  FC  CB  59  AC 


bar 

sig!  1996-03-30  E9D1E021  bar 

2 key ( s ) exami ned 
*/ 


DC  A3  3F  FB  C6  5B  79  3F 


D4  2A  1A  90  E3  DD  4F  45 


static  char  const  hexcharC16D  = f 
n ■0','1','2','3','4','5','6','7', 
n ■8','9','A','B','C','D','E','F' 
>; 


/* 

* Pretty-print  a 128-bit  key  fingerprint  into  the  supplied  buffer, 

* in  varius  forms,  depending  on  the  "len"  argument: 

* 1111111111 222222222233333333334444444444555 

* 01234567890123456789012345678901 234567890123456789012 

* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF/1024  (53  chars) 

* 01  23  45  67  89  AB  CD  EF  01  23  45  67  89  AB  CD  EF/1024  (52  chars) 
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* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF/1024 

* 0123  4567  89AB  CDEF  0123  4567  89AB  CDEF/1024 

* 01234567  89ABCDEF  01234567  8 9 AB C D E F / 1 0 2 4 

* 01234567  89ABCDEF  01234567  89 ABC D E F / 1 02 4 

* 01 23456789ABCDEF  0 1 2 34 5 6789 AB C D E F / 1 0 2 4 

* 0123456789ABCDEF0123456789ABCDEF/1024 

* 0123456789ABCDEF0123456789ABCDE/1024 

* 0123456789ABCDEF0123456789ABCD/1024 

* 01  23456789ABCDEF01  23456789ABC/1  024  (etc.,  truncating 


(45  chars) 
(44  chars) 
(41  chars) 
(40  chars) 
(38  chars) 
(37  chars) 


as  needed) 


* /1024 

* /102 
* /10 

* /I 

* / 


* Returns  the  number  of  characters  actually  used,  guaranteed  to 

* be  <=  the  given  len. 

* Does  NOT  n u I I - 1 e r m i na t e the  array. 

*/ 

si z e_  t 

kdbT t y Fo rma t F i nge r p r i n t 1 6 ( c ha r *hash,  char  *buf,  size_t  len) 

{ 

n static  signed  char  const  limitsC16Il  = { 
n n -1,  46,  38,  46,  34,  46,  38,  46, 

n n 32,  46,  38,  46,  34,  46,  38,  46  }; 

n char  *p  = buf; 
a i n t i ; 

n for  (i  = 0;  i < 16  &&  ( s i z e_ t ) ( p-bu f ) !=  len;  i++)  { 

n n /*  Print  each  space  iff  it's  okay  to  */ 

n n if  (len  > ( un s i g n e d ) ( i n t ) I i m i t s C i ] ) 
n n n *p++  = ' 

n n /*  Double  space  in  the  middle  if  appropriate  */ 
n n if  (i  ==  8 &&  len  >=  36  &&  len  !=  39  S&  len  !=  47) 

n n n *p++  = ' ' ; 

n n *p++  = h e X c h a r C h a s h C i 3 >>  4 & 153; 

n n if  ( ( si ze_t  ) (p-buf  ) ==  len) 

n n n break; 

n n *p++  = hexcharChashCi3  & 153; 
n } 

n return  p-buf ; 

} 


/* 


* Pretty-print  a 160-bit  key  fingerprint  into  the  supplied  buffer, 

* in  varius  forms,  depending  on  the  "len"  argument: 

* Version  a: 


* 111111111 12222222222333333333344444444 

* 01 2345678901234567890123456789012345678901234567 

* 01234  56789  ABCDE  F0123  45678  9ABCD  EF012  34567 

* 01234  56789  ABCDE  F0123  45678  9ABCD  EF012  34567 

* 0123456789  ABCDEF0123  456789ABCD  EF01234567 

* 0123456789  ABCDEF0123  456789ABCD  EF01234567 

* 01 23456789ABCDEF01 23  4 5 6789 ABC D E F 0 1 2 34 5 67 

* 01 23456789ABCDEF0123456789ABCDEF01 234567 

* 01 23456789 ABCDE F01 23456789 ABCDE F01 23456 

* 01 23456789ABCDEF01 23456 78 9ABCDEF01 2345 


(48  chars) 
(47  chars) 
(44  chars) 
(43  chars) 
(41  chars) 
(40  chars) 
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* 01  23456789ABCDE F01  23456789ABCDE F01  234  (etc.,  truncating  as  needed) 

★ 

* Version  b : 

* 1 1 1 1 1 1 1 1 1 1 222222222233333333334444444444 

* 01  2345678901  2345678901  2345678901  234  5678901  23456789 

* 0123  4567  89ab  cdef  0123  4567  89ab  cdef  0123  4567 

* 0123  4567  89ab  cdef  0123  4567  89ab  cdef  0123  4567 

* 01234567  89abcdef  01234567  89abcdef  01234567 

* 01 23456789abcdef 01 23  4 56789a b c d e f 0 1 2 34 5 67 

* 01 23456789ABCDEF0123456789ABCDEF01 234567 

* 01 23456789ABCDEF0123456789ABCDEF01 23456 

* 01 23456789ABCDEF01 23456789ABCDEF01 2345 

* 0123456789ABCDEF0123456789ABCDEF01234  (etc.,  truncating  as  needed) 
*/ 

s i ze_t 

kd bT t y F o r ma t F i n g e r p r i n 1 2 0 ( c ha r *hash,  char  *buf,  size_t  ten) 

{ 

n static  signed  char  const  LimitsaC40D  = 
n n {-1,  46,  42,  46,  40,  46,  42,  46>; 
n static  signed  char  const  LimitsbC103  = 
n n {-1,  48,  43,  48,  43,  48,  43,  48,  43,  48>; 
n signed  char  const  *Liniits  = Limitsb;  /*  Choose  B */ 
n int  period  = 4;nn  /*  Use  5 for  A,  4 for  B */ 
n char  *p  = buf; 
n int  i ; 


(50  chars) 
(49  chars) 
(44  chars) 
(41  chars) 
(40  chars) 


n 

Q 

n 

n 

□ 

n 

n 

a 

o 

n 

n 

□ 

□ 

□ 

□ 

□ 

> 


/*  Unlike  the  16  byte  version,  this  Loops  per  character  */ 
for  (i  = 0;  i < 40  &&  ( s i z e_ t ) ( p-bu f ) !=  Len;  i++)  < 
n /*  Print  each  space  iff  it's  okay  to  */ 
a if  (i%period  ==  0) 

n n if  (Len  > ( u n s i g n ed ) ( i n t ) L i mi t s C i / p e r i od 3 ) 
n n n *p  + + = ' ' ; 

n /*  Double  space  in  the  middle  if  appropriate  */ 
n if  (i  ==  20  S&  Len  >=  ( uns  i gned ) ( L i mi t s = = L i mi t sa  ? 44  : 50)  S& 
n L en  ! = 47 ) 

n n *p  + + = ' ' ; 

n i f ( i & 1 ) 

n n *p++  = hexcharChashCi/23  & 153; 
n else 

n n *p++  = h e X c h a r C ha s h C i / 2 3 >>  4 & 153; 

> 

return  p-buf; 


int 

kd bT t y Pu t F i nge r p r i n t 1 6 ( F I LE  *f,  char  *hash,  unsigned  wid) 
t 

a char  bufC543;n  n /*  Incestuous  knowledge  */ 


n if  (wid  > sizeof(buf)) 
n n wid  = sizeof(buf); 

a wid  = (unsigned)  kdbT t y F o r ma t F i ng e r p r i n t 1 6 ( ha s h , buf,  (size_t)  wid); 
n return  fwrite  (buf,  1,  wid,  f); 

> 


int 

kd bT t y Pu t F i ng e r p r i n t 2 0 ( F I L E *f,  char  *hash,  unsigned  wid) 

< 
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n char  bufC50Il;n  a / * Incestuous  knowledge  */ 

n if  (wid  > sizeofCbuf)) 
n n wid  = sizeof(buf); 

n wid  = (unsigned)  kd bT t y F o rma t F i ng e r p r i n 1 2 0 ( h a s h , buf,  (size_t)  wid); 
n return  fwrite  (buf,  1,  wid,  f); 

> 

i n t 

kd bT t y Pu t Key  I D ( F I LE  *f,  char  *buf) 

{ 

n inti; 

n for  (i  = 4;  i < 8;  i++)  { 
n n putc(hexcharCbufCi3  >>  4 8 15],  f); 

n n pu t c ( h e X c h a r C b u f C i ] & 15],  f); 

n > 

n return  8; 

> 

i n t 

kdbTtyPutSi gl D ( FILE  *f,  PGPCert  *cert) 

{ 

n byte  bufC8]; 
a inti; 

n i = sizeof  (buf); 
n pg pGe t C e r t S t r i n g (cert, 

n n n n n k PG PC e r t P r opKey I D , 

a o n n n (char*)buf, 

n n n n n (unsigned  Long  *)&i); 

B for  (i  = 4;  i < 8;  i++)  { 
n n pu t c ( h e X c h a r C b u f C i ] >>  4 & 15],  f); 

B a pu t c ( h ex c ha r C buf C i ] & 15],  f); 

n } 

n return  8; 

} 


/* 

* Write  out  the  given  string  with  all  funny  characters  \-escaped  in 

* the  manner  of  C strings,  up  to  "maxLen"  characters.  Returns  the 

* actual  number  of  characters  printed,  which  will  always  be  <=  maxLen. 

* If  f is  NULL,  prints  nothing.  (May  be  useful  for  justification 

* computations.)  The  string  is  surrounded  by  quotes  q1  and  q2 

* (if  not  '\0').  q2  is  also  \-escaped  if  it  appears  in  the  string. 

*/ 

unsigned 

kdbT t y Pu t S t r i ng ( c ha r const  *str,  size_t  Len,  unsigned  maxlen,  FILE  *f, 
char  q1,  char  q2) 

{ 

n intc=0; 
n size_t  t; 
n char  const  *p; 
n unsigned  remaining  = maxlen; 

n static  char  const  escapesC]  = "\a\b\f\n\r\t\v"; 

n static  char  const  LettersC]  = { ' a ' , ' b ' , ' f ' , ' n ' , ' r ' , ' t ' , ' v ' } ; 

[i:CHK:bb8188aaf149923d4bee8302111da077412e11111f7ff5895bed6ad4ba91dc930]] 


2158 


Pretty  Good  Privacy  5.0^*^  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


pgpkUl.c 


n 

/* 

Opening  quote  */ 

n 

i f 

(q1 

&&  remaining)  { 

n 

B 

i f 

(f  ) 

n 

B 

n 

putcCql,  f); 

n 

B 

rema i n i ng--; 

□ 

> 

n 

for 

) { 

a 

B 

/* 

Printing  can  only  expand  the 

string,  so  truncate 

a 

B 

i f 

(Len  > remaining) 

B 

B 

Q 

Len  = remaining; 

B 

B 

/* 

Find  a directly  printable  substring  */ 

B 

B 

P = 

str;n  /*  Remember  start  of 

substring  */ 

B 

B 

wh  i 

le  (len)  { 

B 

B 

□ 

c = (unsigned  char)*str; 

B 

B 

□ 

if  (!isprint(c)  | | c ==  '\\' 

1 1 c ==  q2) 

B 

B 

n 

n break; 

B 

B 

n 

St  r + +; 

B 

B 

□ 

1 en  — ; 

B 

B 

> 

/*  Print  from  p up  to  str  */ 


B 

B 

t = 

(size_t)(str  - p); 

B 

B 

i f 

(t)  { 

B 

B 

n 

if  (f ) 

B 

B 

n 

n fwrite(p,  1,  t,  f); 

B 

B 

a 

rema i n i ng  -=  t ; 

B 

B 

} 

B 

B 

/* 

Done  with  the  string?  */ 

fl 

B 

i f 

( ! 1 e n ) 

B 

B 

n 

break; 

B 

B 

/* 

Note  that  remaining  >=  len  > 0,  so  remaining  > 

B 

B 

/* 

B 

B 

* 

c is  a character  to  print  that  needs  escaping. 

B 

B 

* 

Now  we're  going  to  print  it,  so  remove  it  from 

B 

B 

*/ 

B 

B 

len 

B 

B 

St  r + + ; 

B 

B 

/* 

Start  with  the  obligatory  backslash  */ 

B 

B 

i f 

(f  ) 

B 

B 

B 

putcCW,  f); 

B 

B 

1 f 

( !-- remaining) 

B 

B 

B 

break; 

B 

B 

/* 

Simple  case  1:  escaping  printable  characters  * 

B 

B 

if 

(isprint(c))  { 

B 

B 

B 

if  (f ) 

B 

B 

B 

n p u t c ( ( c ha r ) c , f); 

B 

B 

B 

--remai ni ng; 

B 

B 

B 

conti nue; 

B 

B 

> 

n n /*  Simple  case  2:  standard  C escape  */ 
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n 

B 

P 

= St rch r (escapes,  c); 

n 

B 

i f 

(p  &&  c)  ( 

n 

B 

B 

if  (f  ) 

n 

B 

B 

H p u t c ( L e 1 1 e r s C p-e s c a pe s ] , f) 

n 

B 

B 

--remaining; 

n 

B 

B 

conti nue; 

n 

B 

> 

n 

B 

/* 

General  octal  escapes  */ 

□ 

B 

/* 

If  next  char  makes  it  ambiguous. 

n 

B 

•i  f 

(Len  &&  i s d i g i t ( * s t r ) ) /*  Force 

n 

B 

B 

c +=  256; 

Q 

B 

i f 

(c  > 077)  { 

□ 

B 

B 

if  (f ) 

□ 

B 

B 

n putc('0'  + (c>>6  & 3),  f); 

n 

B 

B 

if  (!--remaining) 

n 

B 

B 

n break; 

Q 

B 

> 

□ 

B 

i f 

(c  > 07)  { 

n 

B 

B 

if  (f ) 

n 

B 

B 

n putc('0'  + (c>>3  & 7),  f); 

n 

B 

B 

if  (!--remaining) 

n 

B 

B 

n break; 

n 

B 

> 

n 

B 

i f 

(f  ) 

□ 

B 

B 

putc('0'  + (c  & 7),  f); 

Q 

n 

B 

> 

remaining; 

n 

/* 

Closing  quote  (if  string  ended)  */ 

B 

i f 

(q2 

£&  rema i n i ng  ) { 

B 

B 

i f 

(f  ) 

B 

B 

B 

putc(q2,  f); 

B 

B 

B 

> 

rema ini ng--; 

B 

return 

maxLen  - remaining; 

/* 

* Print  into  about  a key,  in  the  format 

* 

* 1024  bits.  Key  ID  FBBB8AB1,  created  1984-12-25 

★ 

* The  ",  created"  part  is  omitted  if  the  creation  timestamp  is  0. 

*/ 

void 

kd bT t y Pu t Key I n f o C F I LE  *f,  PGPKey  *key) 

{ 

n char  bu f : PG P D AT E ST R I NG L E N+1 ] ; 
n PGPTime  tstamp; 
n Long  keybits; 

a char  keyidC8D; 

n size_t  keyidLen  = sizeof  (keyid); 

n pg pG e t Key N umb e r (key,  kPG PKey P r opB i t s , &keybits); 

n fprintfCf,  "%6u  bits.  Key  ID  ",  (unsigned)  keybits); 
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n pgpGetKeyString  (key,  kPGPKeyPropKeyld,  keyid,  Skeyidlen); 
a kdbTtyPutKeyID(f,  keyid); 

n pg pG e t Key T i me  (key,  kPG PKe y P ro p C r ea t i o n , &tstamp); 

a if  (tstamp)  { 

n n fputsC,  created  ”,  f); 

n n pg p Da t e S t r i n g ( ( wo r d32 ) tstamp,  buf); 

n n fputs(buf,  f); 

n } 

n putc('\n',  f); 

#i  f 0 

n if  (trust  & PGP_KEYTRUSTF_REVOKED ) 

n n fprintf(f,  "%sThis  key  has  been  revoked  by  its  ownerXn", 
n n prefix); 

#end  i f 

> 

void 

kdbKey I Dp r i n t ( F I LE  *f,  char  const  *prompt,  byte  const  keyIDCSD) 

{ 


n 

char  bufC18]; 

n 

char  *p  = 

: b u f ; 

n 

int  i ; 

n 

o 

II 

0;  i < 4;  i++)  { 

n 

B *p  + + 

= h e X c ha r C key  I D [ i 3 

>> 

43; 

n 

B * P + + 

= h exc ha r C key  1 D C i 3 

& 

153; 

n 

> 

u 

*P++  = ' 

f 

n 

for  ( i = 

4;  i < 8;  i++)  { 

n 

B *p  + + 

= h e X c h a r C key  I D C i 3 

>> 

43; 

n 

B *p  + + 

= h ex c ha r C key  I D C i 3 

& 

153; 

n 

> 

□ 

*p  = ' \ n ' 

/ 

n 

fputs(prompt,  f); 

Q 

fwrite(buf,  1,  18,  f); 

> 


void 

kdbKeyPri nt ( FILE  *f,  PGPKeylter  *keyiter,  int  Level) 

< 

n char  nameC256!]; 

n PGPKey  *key  = pgpKeylterKey  (keyiter); 

n PGPKeylter  *iter  = NULL; 

n PGPUserlD  *userid  = NULL; 

n size_t  Len; 

n kdbTtyPutKeyInfo(f,  key); 

n iter  = pgpCopyKeylter  (keyiter); 
n pgpKeylterSet  (iter,  key); 

n while  ((userid  = pgpKey I t e r N e x t U s e r I D (iter)))  { 
n n Len  = sizeof  (name); 

n n pgpGe t Use r I DS t r i ng  (userid,  kPG PU s e r I D P r opN a me , name,  &Len); 

n n fprintf(f,  "%*s",  LeveL+2,  ""); 

a a (void)  kd bT t y Pu t S t r i ng ( na me , Len,  -1u,  f,  '"'); 

n n putc('\n',  f); 

n B B /*B  break;  */ 

C[CHK:1cb94e63384804244dac75ff171b30e45779811623445dff86d1cb8996d346d1e]] 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2161 


pgpkUl.c 


a > 

n pgp F reeKey I t e r (iter); 

} 

/*  Functions  for  displaying  keys  */ 

static  const  int  name_indent  = 30; 
static  const  int  sig_indent  = 32; 

/*  List  of  algorithms  indexed  by  the  pkalg  byte.  Each  entry  contains 
the  name  of  the  algorithm  and  what  it  can  be  used  for.  */ 

static  const  char  *p ka I g_ I i s t C D = 

{NULL,  "RSA",  "RSA",  "RSA",  NULL,  NULL,  NULL,  NULL,  NULL,  NULL, 
n NULL,  NULL,  NULL,  NULL,  NULL,  NULL,  " D i f f i e-H e I I ma n " , "DSS"}; 

static  const  char  * 
getKeyAlg  (PGPKey  *key) 

{ 

n long  pkalg; 

n pgpGetKeyNumber  (key,  kPG PKey P r o p A I g I d , &pkalg); 
n return  p ka I g _ I i s t H p ka I g 3 ; 

> 


static  const  char  * 
getSubKeyAlg  (PGPSubKey  *subkey) 

{ 

n (void)subkey; 
n return  p ka  I g_ I i s t C 1 6 ] ; 

} 

static  const  char  * key u s e_  I i s t CD  = 

{"",  "Sign  only",  "Encrypt  only",  "Sign  and  Encrypt"); 

static  const  char  * 
getKeyUse  (PGPKey  *key) 

{ 

Boolean  cansign,  canencrypt; 

n pg pG e t Key Boo L e a n (key,  kPG PKey P r op C a n S i g n , Kcansign); 
n pgpGetKeyBoolean  (key,  k PG PKey P r o p C a n E n c r y p t , 8 c a n e n c r y p t ) ; 


n 

i f 

(cansign  88  canencrypt) 

Q 

return  key u s e_ 1 i s t C 3 D ; 

n 

else  if  (cansign) 

□ 

return  keyuse_listC1D; 

n 

e L 

se  if  (canencrypt) 

Q 

return  key u s e_  1 i s t C 2 D ; 

Q 

> 

return  key u s e_  1 i s t C 0 D ; 

static 

const  char  * 

getSubKeyUse  (PGPSubKey  *subkey) 
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{ 

n (void)subkey; 
n return  key u s e_ L i s t C 0 ] ; 
} 


/*  List  of  algorithms  indexed  by  the  pkalg  byte.  Each  entry  contains 
the  name  of  the  algorithm  and  what  it  can  be  used  for.  */ 

static  char  s t a t erne n t C 1 1 D ; 
static  char  * 

getTrustStatement  (word16  trust) 

{ 

n int  d = trust  - PG P_TRU S T_ D E C A D E - PG P_T RU ST_0CT A V E ; 
n inti; 

n unsigned  long  1; 
a intwid=9; 
n char  numbe r C 1 0 D ; 

n if  (trust  ==  PGP_TRUST_INFINITE) 
n n strcpy  (statement,  " maximum  "); 

n else  if  (trust  ==  0) 

n n strcpy  (statement,  " none  "); 


n 

else 

{ 

Q 

n 

/* 

n 

n 

★ 

Note 

: The  following  was 

taken  from  Colin's 

Q 

n 

•k 

prettyprint  routine. 

n 

n 

*/ 

n 

□ 

d - 

= d 

% PGP_TRUST_DECADE; 

n 

n 

i = 

d / 

PGP_TRUST_DECADE; 

n 

n 

1 = 

r i n 

g T r u s t To  I n t ( t r u s t - 

d); 

□ 

□ 

i f 

(i  ) 

n 

n 

n 

w i d 

-=  s p r i n t f ( n umb e r , 

■■%lu%0*u  ",  1,  i,  0); 

D 

D 

else 

□ 

n 

n 

w i d 

-=  sp r i n t f ( numbe r , 

"%lu  ",  1); 

□ 

Q 

s p r i n t f 

(statement,  "%*s%s' 

',  wid,  number); 

a 

> 

n 

return 

statement; 

} 


/*  This  function  displays  a single  signature.  */ 
i nt 

kdbTtyShowSig(PGPKeyIter  *sigiter,  PGPKeySet  *allkeys,  FILE  *fp,  int  check) 
{ 


PGPKeyn  n 

Q 

*sigkey  = NULL; 

PG  P C e r t 

*sig  = pg p Key  1 1 e r C e r t (sigiter); 

PGPT i menn 

a 

creation; 

cha  rn  n 

n 

datestringCIIH; 

c h a rn  n 

n 

namestri ngC2563; 

size_tn  a 

a 

1 e n ; 

Boo  lean 

revoked,  valid,  checked,  tried,  mycert; 

pgpGetCertifier 

(sig,  allkeys,  Ssigkey); 

if  (sigkey) 

a pgpIncKeyRef Count  (sigkey); 
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pg pG e t C e r t Boo L e a n (sig,  kPGPCertPropIsRevoked,  Srevoked); 
if  ( revoked ) 

fputs  ("ret",  fp); 
else  { 

n a pgpGetCertBooLean  (sig,  kPGPCertPropIsMyCert,  Smycert); 

n n if  (my  cert) 

n n n fputs  ("SIG",  fp); 

n n else 

n n n fputs  ("sig",  fp); 

n } 


pgpGetCertBooLean  (sig,  kPG P C e r t P r op  I sVa L i d , SvaLid); 
if  ( ! va  L i d ) 

putc  ('%',  fp); 
else  if  (!sigkey) 

putc  ('?',  fp); 
else  C 


pgpGetCertBooLean  (sig. 


Q 

a 

i f 

(check  && 

checked) 

n 

a 

□ 

putc  ( ' ! ' 

r f p) ; 

n 

D 

e L 

s e { 

Q 

□ 

n 

pgpGetCertBooLean  ( 

n 

n 

□ 

if  (check 

SS  tried) 

n 

n 

n 

Q putc 

( ■*',  fp); 

a 

n 

n 

else 

n 

n 

n 

n putc 

(■  ',  fp); 

a 

Q 

> 

kPG P C e r t P r op  I s C h e c ke d , Schecked) 


sig,  k PG P C e r t P r op  I s T r i e d , Stried) 


) 


fputs  ("  ",  fp); 

kd bT t y Pu t S i g I D (fp,  sig); 
putc  ('  ',  fp); 


/*  Signature  date  */ 


pgpGe t Ce r t T i me  (sig,  kPG P C e r t P r o p C r ea t i on  , Screation); 
if  (creation  > 0)  { 

pg p Da t e S t r i n g ((word32  )creation,  datestring); 
n fputs  (datestring,  fp); 

} 

else 

fputs  (" ",  fp); 

if  (sigkey)  { 

nLen  = sizeof  ( name s t r i n g ) ; 

n n p g pG e t P r i ma r y U s e r I D Na me  (sigkey,  namestring,  &Len); 

a n fputs  ("  ",  fp); 

n n kdbTt y Pu t S t r i ng  (namestring,  Len,  (unsigned)  Len,  fp,  0,  0); 

n n putc  ('\n',  fp); 

n n pgpFreeKey  (sigkey); 

} 

else 

fputs  ("  (Unknown  signator,  can't  be  checked)\n",  fp); 


return  0; 

} 


/*  This  function  displays  a set  of  signatures  attached  to  a name.  */ 
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1 n t 

kd bT t y S howS i g s (void  *arg,  PGPKeylter  *iter,  PGPKeySet  *aLLkeys,  int  mode) 
{ 

n struct  PgpTtyUI  *ui  = (struct  PgpTtyUI  *)  arg; 

n PGPCert  *sig  = NULL; 

n FILEn  n *fp  = ui->fp; 

n i ntnn  check; 

n pgpAssert  (iter  !=  NULL); 
n pgpAssert  (arg  !=  NULL); 

n pgpAssert  (alLkeys  !=  NULL); 

n check  = (mode  ==  3 | | mode  ==  4); 

n /*  Display  sigs  attached  to  the  Name  */ 

n while  ((sig  = pg pKey I t e r Ne x t U I D C e r t (iter)))  { 
n n kdbTtyShowSig(iter,  allkeys,  fp,  check); 
n } 

n return  0; 

} 


int 

kdbTtyCheckSi gs  (void  *arg,  PGPKeylter  *iter,  PGPKeySet 


struct  PgpTtyUI 


►ui  = (struct  PgpTtyUI  *)  arg; 


PGPKeyn  n 
PGPCertnn 
s i z e_t  n n 
FILEn  n 
char  const 
c ha  rn  n 
longn  n 
I ongn 
Boo  I eannn 
PgpT  rustHode I 


*sigkey  = NULL; 

*sig  = NULL; 

I en; 

*fp  = ui->fp; 

*output; 

namestri  ng[!256J  ; 
sigtrust,  validity; 

confidence; 

revoked; 

pgptrustmodel; 


*a I I keys. 


int  mode  ) 


pgpAssert  (iter  !=  NULL); 
pgpAssert  (arg  !=  NULL); 
pgpAssert  (mode  ==  4 | | mode  ==  5); 


pgptrustmodel  = pg pGe t T r u s t Mod e I (); 


/*  Display  sigs  attached  to  the  Name  */ 

while  ((sig  = pg pKey I t e r N e x t U I D C e r t (iter)))  ( 
pgpGetCert i f i er  (sig,  allkeys,  Ssigkey); 
n if  (sigkey) 

n pg p I n c Key R e f Co un t (sigkey); 

n fprintf  (fp,  "%*s",  11,  ""); 
n if  (pgptrustmodel  ==  PGPTRUST0)  { 
n if  (Isigkey  ||  sigkey  == 

n n pg pKey I t e r Key  (iter)) 

n sigtrust  = PG P_S I GT R U ST_N OKE Y ; 

n e I se  { 

n pg pG e t C e r t Boo  I e a n (sig,  k PG PC e r t P r op  I s Re vo ke d , Srevoked); 

C[CHK:a171cd811477733ff51c599997024d43dcdbd55642200ee2b62b8ad8bb17945b4:D 
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□ 

n 

B 

B 

B 

B 

B 

B 

B 

B 

B 

a 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

a 

B 

B 

B 

B 

B 

B 


n if  (revoked) 

a sigtrust  = PG P_ S I GT R U S T_R ET I R E D ; 

n else  { 

n pgpGetKeyBooLean  (sigkey,  kPGPKeyPropIsRevoked,  Srevoked); 

n if  (revoked) 

a sigtrust  = PG P_S I GT R U S T_R E VO KE D ; 

B e L s e { 

B pg pG e t Key N umb e r (sigkey,  k PG PKey P r op Va L i d i t y , 

n n B B Svalidity); 

n n if  (validity  !=  PG P_ V A L I D I T Y_ C OM P L E T E ) 
n a sigtrust  = PG P_KE YT RU ST_N E V E R ; 

n B else 

n n pgpGetKeyNumber  (sigkey,  k PG P Key P r o pT r u s t , 

B B B B Ssigtrust); 

n } 

n > 

} 

output  = k ey T r u s t Ta b L e C s i g t r u s t D ; 
fprintf  (fp,  "%-10s%*s",  output,  12,  ""); 

} 

else  (b  B B B /*  new  trust  model  */ 
if  (Isigkey  ||  sigkey  == 
n pgpKeylterKey  (iter)) 
output  = " 
else  { 

pgpGetCertBoolean  (sig,  kPGPCertPropIsRevoked,  firevoked); 
n if  (revoked) 
n output  = "retired 

n e I s e { 

a pgpGetKeyBoolean  (sigkey,  kPGPKeyPropIsRevoked,  Srevoked); 

n if  (revoked) 

n output  = "revoked 

n e I s e { 

n pgpGetKeyNumber  (sigkey,  k PG PKey P rop Va  I i d i t y , 

B B B B &con f i den c e ) ; 

B B output  = g e t T r u s t S t a t erne n t ((word16)  confidence); 

n } 

n } 

} 

fprintf  (fp,  "%10s%*s",  output,  12,  ""); 

> 

if  (sigkey)  { 

len  = sizeof  ( na me s t r i ng  ) ; 

B pg pG e t P r i ma r y U s e r I D Na me  (sigkey,  namestring,  Slen); 
n kdbT t y Pu t S t r i ng  (namestring,  len, 
n n B (unsigned)  len,  fp,  0,  0); 

putc  ('\n',  fp); 
a pgpFreeKey  (sigkey); 

} 

else  { 

fputs  ("  (KeylD:",  fp); 

kdbT t y Pu t S i g I D (fp,  sig); 
fputs  (")\n",  fp); 

> 

} 

return  0; 


[lCCHK:5db39954b6016f4f27be7bac8262eaface5a5207bbcc24a996cc3e14462a31d0b]D 
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> 


/*  This  function  displays  a key  in  -kv,  -kvv,  -kvc,  or  the  first  section 
of  a -kc  format.  */ 

i n t 

kdbTty ShowKey  (void  *arg,  PGPKeylter  *iter,  PGPKeySet  *aLLkeys,  int  mode) 
{ 


St  ruct  PgpT tylll 

n 

*ui  = (struct  PgpTtyUI  *)  arg; 

PGPKeyn  n 

n 

n 

*key; 

PGPSubKey 

*subkey; 

PGPUserlDn 

□ 

n 

*name ; 

size_tn  n 

Q 

n 

L en; 

FILEn  n 

n 

□ 

*fp  = ui->fp; 

PG  PTi mean 

n 

n 

creation,  expiration; 

c h a r n a 

n 

Q 

datestringCIIT; 

char  n n 

o 

n 

namestringC256]; 

Booleannn 

n 

n 

secret,  axiomatic,  disabled,  revoked; 

Long 

keybits; 

char 

keyidC8D; 

s i z e_  t 

keyidLen; 

pgpAssert 

(iter 

! = 

NULL) ; 

pgpAssert 

( a rg  ! 

! = 

N U L L ) ; 

pgpAssert 

(mode 

< = 

5); 

key  = pgpKeylterKey  (iter); 

pgpGetKeyBooLean  (key,  kPGPKeyPropIsSecret,  Ssecret); 
if  (secret) 

fputs  ("pri",  fp); 

else 

fputs  ("pub",  fp); 

pgpGetKeyBooLean  (key,  kPG PKey P r o p I s Ax i oma t i c , Saxiomatic); 
pgpGetKeyBooLean  (key,  k PG PKey P r o p I s D i sa b L ed , SdisabLed); 
n if  ( a X i oma  tic) 
a fputs  ("+  ",  fp); 

else  if  (disabled) 

fputs  ("a  ",  fp); 

else 

fputs  ("  ",  fp); 

pgpGetKeyNumber  (key,  kPG PKey P r opB i t s , Skeybits); 
fprintf  (fp,  "%4u  ",  (unsigned)  keybits); 
n keyidLen  = 8; 

n pgpGetKeyString  (key,  kPGPKeyPropKeyld,  keyid,  SkeyidLen); 
kdbTtyPutKeylD  (fp,  keyid); 
putc  ('  ',  fp); 

pgpGetKeyTime  (key,  kPGPKeyPropCreation,  Screation); 
if  ( c reat ion  > 0 ) f 

pg p Da t e S t r i n g ((word32)  creation,  datestring); 
n fputs  (datestring,  fp); 
n putc  ('  ',  fp); 

} 

else 

fputs  (" ",  fp); 

C:CHK:222533f0ffb268ef3bd9deaad1 771 9639 551 3ef1d355a73125f53b465e19eae0b:] 
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pg pG e t KeyBoo L e a n (key,  k PG PKey P r o p I s R e vo ke d , Srevoked); 
if  (revoked) 

fputs  ("*REV0KED*  ",  fp); 
else  { 

pgpGetKeyTime  (key,  kPGPKeyPropExpiration,  Sexpiration); 
n if  (expiration  > 0)  { 

n pgpDateSt ri ng  ((word32)  expiration,  datestring); 

n fputs  (datestring,  fp); 

n putc('  ',  fp); 

n } 
n else 

n fputs  (" ",  fp); 

> 


fprintf  (fp,  "%-14s  %-15s\n",  getKeyALg  (key),  getKeyUse  (key)); 


i f ( mode  ==  2 ) { 

char  f i n g e r p r i n t C 2 0 D ; 

size_tn  fLen  = sizeof  (fingerprint); 

p g pG e t Key S t r i n g (key,  kPG PKey P r o p F i ng e r p r i n t , fingerprint,  SfLen); 
if  (fLen  ==  20)  { 

fprintf  (fp,  " Fingerprint20  = "); 

kdbTtyPutFingerprint20  (fp,  fingerprint,  50); 
putc  ('\n',  fp); 


n 
□ 

□ 

> 

else  { 

n fprintf  (fp,  " Fingerprint16  = "); 

n kd bT t y Pu t F i n g e r p r i n t 1 6 (fp,  fingerprint,  48); 

n putc  ('\n',  fp); 

} 


while  ((subkey  = pg pKey I t e r N e x t S u b Key  (iter))  !=  NULL)  { 


/*  Print  out  its  status  */ 
fprintf  (fp,  " sub  "); 

pg pGe t S u b Key N umb e r (subkey,  kPG PKey P r opB i t s , Skeybits); 
fprintf  (fp,  "%4u  ",  (unsigned)  keybits); 
keyidlen  = 8; 

pg pG e t S u b Key S t r i n g (subkey,  kPG PKey P r opKey I d , keyid,  SkeyidLen); 
kd bT t y Pu t Key  I D (fp,  keyid); 
putc  ('  ',  fp); 

pgpGet SubKeyT i me  (subkey,  kPG PKey P r op C r e a t i on , Screation); 
if  (creation  > 0)  { 

pgpDateSt ri ng  (creation,  datestring); 
fputs  (datestring,  fp); 
putc  ('  ',  fp); 


n 
n 
n 
} 

else 

n fputs  ( 


fp); 


□ 

a 

/* 

If  superkey  revoked. 

don't 

print 

expiration  */ 

n 

B 

i f 

(revoked) 

n 

B 

□ 

fputs  ( " 

",  fp); 

n 

B 

e t 

s e { 

n 

B 

a 

pg pG e t S u b Key T i me  (s 

ubkey. 

kPGPKeyPropExpi ration. 

a 

B 

B 

if  (expiration  > 0) 

< 

B 

B 

B 

a pgpDateString  ( 

expi ration. 

datestring); 

[i:CHK:e89b75e321 8635511 072af48e575128aaca44b8e2e25d0ae8ee4fdf0428b5fcd3:: 
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n 

□ 

n 

n 

n 

n 

n 

□ 

n 

n 

n 

n 

n 

B 

B 

B 

B 

B 


B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

B 

fl 

B 

> 


n n fputs  (datestring,  fp); 

n B putc  (*  *,  fp); 

n > 

n else 

B B fputs  (" ",  fp); 

> 

fprintf  (fp,  "%-8s  %-15s\n",  getSubKeyALg  (subkey), 

B B getSubKeyUse  (subkey)); 

i f (mode  ==  2 ) i 
n char  fingerprintC20]; 

B size_t  fLen  = sizeof  (fingerprint); 

n pg pG e t S u b Key S t r i ng  (subkey,  kPG PKey P r op F i ng e r p r i n t , fingerprint, 

B B B B B B &fLen); 

n fprintf  (fp,  " Fingerprint20  = "); 

n kdbT t y Pu t F i nge r p r i n t 20  (fp,  fingerprint,  50); 

n putc  (*\n*,  fp); 

> 


fprintf  (fp,  "%*s",  name_indent,  ""); 


pgpkUl.c 


name  = pg p Ke y I t e r N e x t U s e r I D (iter); 
if  ( ! name ) 

fputs  ("***  This  key  is  unnamed  ***\n",  fp); 

while  (name  !=  NULL)  { 

#if  0 

n pg pG e t U s e r I D S t r i ng  (name,  k PG PU s e r I D P r o p N a me , NULL,  8Len); 

n n fprintf  (stderr,  "Length  of  name  = %Ld\n",  Len); 

# e n d i f 

Len  = sizeof  (namestring); 

n n pg pGe t U s e r I D S t r i ng  (name,  kPG PU s e r I D P r opN ame , namestring,  &Len); 

n n kdbTtyPutString  (namestring,  Len,  (unsigned)  Len,  fp,  0,  0); 
a a putc  ( ' \n  ' , f p); 
a a 

a n if  (mode  > 0) 

a a kdbTtyShowSi gs  (arg,  iter,  aLLkeys,  mode); 

n n 

a a name  = pg p Key  1 1 e r N e x t U s e r I D (iter); 
a a i f ( name ) 

a n fprintf  (fp,  "%*s",  name_indent,  ""); 

> /*  end  while  */ 
return  0; 

> 


i n t 

kd bT t y C h e c kKey  (void  *arg,  PGPKeylter  *iter,  PGPKeySet  *aLLkeys,  int  mode) 


struct  PgpTtyUI 

*ui  = (struct  PgpTtyUI 

PGPKeya  n 

B B 

*key  = NULL; 

PGPUserlD 

*name  = NULL; 

FILE 

*fp  = ui->fp; 

char 

namestringC256D; 

s i ze_ta  a 

B B 

nameLen; 

[:CCHK:9711fa40666aef992aa00003f441c2dbec533922e55240008f9918710117a2ff8:: 
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Longn  n 

□ 

n confidence; 

Longn  n 

n 

n validity; 

i n t 

name_Leader  = 0; 

Longn  n 

n 

n trust; 

PgpTrustModel 

pgptrustmodel; 

Boo  L ea  nnn 

n 

n revoked,  axiomatic; 

n 

char 

keyidC8D; 

□ 

s i ze_t 

keyidLen  = s i z e o f ( ke y i d ) ; 

pgpAssert 

(iter 

! = N U L L ) ; 

pgpAssert 

( a rg  ! 

= NULL); 

pgpAssert 

(mode 

==  4 II  mode  ==  5); 

pgpAssert 

(pgpKeylterKey  (iter)); 

pgptrustmodel  = 

PGPTRUST0; 

key  = pgpKeylterKey  (iter); 

pgpGetKeyBooLean 

if  (revoked) 

(key,  kPGPKeyPropIsRevoked,  Srevoked); 

fputs 

("#  ", 

■fp); 

else  { 

pgpGetKeyBooLean  (key,  kPG PKey P r o p I s Ax  i oma t i c , Saxiomatic); 

n 

if  (axiomatic) 

Q 

fputs 

("*  ", 

f p ) ; 

n 

else 

Q 

fputs 

> 

( " ", 

f p); 

n 

keyidLen  = 

8; 

n 

pgpGetKeyString 

(key,  kPGPKeyPropKeyld,  keyid,  Skeyidlen); 

kdbTtyPutKeylD  (fp,  keyid); 


if  ( pgpt rustmode L ==  PGPTRUST0)  { 

pg pGe t Key Numbe r (key,  k PG PKey P r opT ru s t , Strust); 
n fprintf  (fp,  " %-10s",  keyTrustTabLeCtrustll); 

} 


name  = pgpKey I t e r Nex t U se r I D (iter); 
if  (!name) 

fputs  ("  ***  This  key  is  unnamed  ***\n",  fp); 


while  (name  !=  NULL)  ( 


n 

□ 

n 

a 

Q 

n 

□ 

n 

n 

Q 

n 

□ 

n 

□ 


if  ( pg p t r u s t mod e L = = PG PT RU S T0  ) ( 
if  (name_Leader) 

fprintf  (fp,  "%*s",  name_indent  - 9,  ""); 
name_  Leader  = 1 ; 

pgpGetUserlDNumber  (name,  kPGPUserlDPropValidity,  Strust); 
fprintf  (fp,  "%-10s", 
n uidValidityTableCtrustll); 

> else  { 

if  (name_Leader) 

fprintf  (fp,  "%*s",  name_indent  - 20,  ""); 
name_  Leader  = 1 ; 

pgpGetUserlDNumber  (name,  kPGPUserlDPropConfidence,  Sconfidence); 
pgpGetUserlDNumber  (name,  kPGPUserlDPropValidity,  &vaLidity); 
fprintf  (fp,  " %10s",  getTrustStatement  ((word16)  confidence)); 
fprintf  (fp,  "%10s”,  getTrustStatement  ((word16)  validity)); 


i::CHK:4adf918ee5da445fffd15247447783bbfc2ddf9eeeeb2bf98e747ea1480d6c81a:] 
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a 

□ 

□ 

a 

n 

□ 

□ 

a 

□ 

n 


> 


} 

namelen  = sizeof  (namestring); 

pg pG e t U s e r I D S t r i ng  (name,  kPG PU s e r I D P r op N a me , namestring,  SnameLen); 
kdbTtyPutSt ri  ng  (namestring,  namelen,  (unsigned)  namelen,  fp,  0,  0); 
putc  ('\n',  fp); 

kdbTtyCheckSigs  (arg,  iter,  allkeys,  mode); 

name  = pgpKeylterNextUserlD  (iter); 

> 

return  0; 


/*  Note:  No  mode  5 for  the  moment  */ 
i nt 

kdbT t y Key C hec k (void  *arg,  PGPKeyList  *viewkeys, 
n n n n n PGPKeySet  *allkeys,  int  mode) 

{ 

PGPKeylter  *iter  = NULL; 

char  header0C]  = "\n\n  KeylD  Trust  Validity  User  ID\n"; 

char  headerIC]  = "\n\n  KeylD  Confidence  Validity  User  ID\n"; 
struct  PgpTtyUI  n *ui  = (struct  PgpTtyUI  *)  arg; 

FILE  n n *fp  = ui->fp; 

PgpTrustModel  pgptrustmodel; 

intnn  n list_create  = 0;; 

pgpAssert  (allkeys  !=  NULL); 
pgptrustmodel  = pg pG e t T r u s t Hod e I (); 

if  (viewkeys  ==  NULL)  ( 

viewkeys  = pg pO r d e r Key S e t (allkeys,  kPG P Any 0 r d e r i ng  ) ; 
n list_create  = 1; 

} 

if  (pgptrustmodel  ==  PGPTRUST0)  { 
fputs  (header0,  fp); 

} else  { 

fputs  (headerl,  fp); 

} 

iter  = pg p N e wKey I t e r (viewkeys); 
while  (pgpKeylterNext  (iter)  !=  NULL) 

kdbTt y Che c kKey  (arg,  iter,  allkeys,  mode); 

pg p F r e e Key  1 1 e r (iter); 
if  (list_create) 

pgpFreeKeyList  (viewkeys); 
return  0; 

} 


/*  Modes : 

0 list  keys,  but  no  fingerprints  or  signatures  (-kv) 

1 list  keys  with  signatures,  but  no  fingerprints  (-kvv) 

CCCHK:883a811007e8bbbaacf9cc23c1ad88cccb680011ef93811a6630000066b021ac9]: 
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2 List  keys  with  fingerprints  and  signatures  (-kvc) 

3 List  keys  with  signature  status  info  (-ka) 

4 List  keys  with  signature  status  info,  pLus  trust  info 

5 same  as  4,  but  do  not  output  numeric  trust  info 

(not  impLemented  yet) 

*/ 


(-kc) 


i nt 

kd bT t y Key V i e w (void  *arg,  PGPKeyList  *viewkeys,  PGPKeySet  *aLLkeys, 
n n n n char  const  *keyring,  int  mode) 

{ 


PGPKeylter  *iter; 

charn  n n headerC]  = 

"Type  Bits  KeylD  Created 
intnn  n n count  = 0; 

struct  PgpTtyUI  *ui  = (struct 

FILE  n n n *fp  = ui->fp; 

int  Listcreate= 


Expires  ALgorithm 
PgpTtyUI  *)  arg; 

0; 


pgpAssert  (mode  <=  5); 
pgpAssert  (aLLkeys  !=  NULL); 


U s e \ n " ; 


if  (viewkeys  ==  NULL)  { 

viewkeys  = pgpOrderKeySet  (aLLkeys,  kPGPAnyOrdering); 
a List_create  = 1; 

} 


if  (keyring) 

fprintf  (fp,  "Key  ring:  \'%s\'\n",  keyring); 

fputs  (header,  fp); 

iter  = pgpNewKeylter  (viewkeys); 
whiLe  ( pg pKey  1 1 e r N e X t (iter)  !=  NULL)  { 


count++; 


□ 

n 

kdbT t y S h o wKey  (arg,  iter,  aLLkeys,  mode); 

#i  f 

1 

n 

Q 

/* 

Temporary  test  of  message  recovery  keys  */ 

n 

Q 

i 

n 

n 

n 

PGPKey 

*curkey  = pg p Key  1 1 e r Key  (iter); 

n 

n 

n 

PGPKey 

*m  r key ; 

□ 

Q 

□ 

byte  kcLass  = 0; 

n 

a 

u 

int  nkey  = 0; 

n 

a 

a 

PGPError  mrerr; 

u 

n 

n 

for  ( 

; ; ) { 

u 

u 

n 

n mrerr  = pg pG e t Me s s a g e Re c o ve r y Key  (curkey,  aLLkeys,  nkey++ 

n 

n 

n 

n n 

&mrkey,  &kcLass,  NULL); 

n 

Q 

Q 

n if 

(mrkey)  { 

n 

n 

□ 

n n 

fprintf  (fp,  " message  recovery  key,  cLass  0x%02x:\n 

n 

n 

n 

Q n 

n n kcLass); 

n 

n 

Q 

n n 

pg p Key  1 1 e r S e t (iter,  mrkey); 

a 

u 

n 

Q □ 

kdbTtyShowKey  (arg,  iter,  aLLkeys,  mode); 

n 

n 

n 

n n 

pgpKeylterSet  (iter,  curkey); 

n 

n 

n 

n > 

eLse  if  (mrerr)  { 

n 

n 

n 

n n 

fprintf  (fp. 
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□ □ □ n □ a a 

n n a n >eLse{ 

a n n n n break; 

n n n n > 

D a n > 

n n > 

//  e n d i f 


n 


D 


Q 


n 


□ 


***  missing  message  recovery  key,  class  0x%02x  ***\n", 
n kc  Lass); 


} 

pg p F r e e Key  1 1 e r (iter); 


n 


if  (mode  < 4)  { 

if  (count  ==  1) 

fputs  ("1  matching  key  foundXn",  fp); 


n 


n 


else 

fprintf  (fp,  "%d  matching  keys  foundXn",  count); 


} 


else 

kdbT t y Key C he c k (arg,  viewkeys,  allkeys,  mode); 


if  (List  create) 


pg p F r e e Key L i s t (viewkeys); 
return  0; 


> 


/* 

* Local  Variables: 

* tab-wi dth  : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 


C[:CHK:9e931  578c2235739efeec4d99b8d1aa4bb5feb3:: 
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/* 

* pgpkUI.h 

* 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

* 

* $Id:  pgpkUI.h, V 1.1. 2.1  1 997/06/07  09:49:1  5 mhw  Exp  $ 

*/ 

#ifndef  PGPRINGUI_H 
#define  PGPRINGUI_H 

#incLude  <stdio.h> 

#incLude  "pgpUsuaLs.h" 

#ifdef  __cpLuspLus 
extern  "C"  { 

#end  i f 

struct  RingFiLe; 

#ifndef  T YP E_ R I NG F I L E 

#define  T Y P E_ R I NG F I L E 1 

typedef  struct  RingFiLe  RingFiLe; 

# e n d i f 

union  RingObject; 

#ifndef  T Y P E_ R I NGOB J E CT 

#define  T YPE_ R I NGOB J E C T 1 

typedef  union  RingObject  RingObject; 

# e nd i f 

struct  RingSet; 

#ifndef  TYPE_RINGSET 

#define  TYPE_RINGSET  1 

typedef  struct  RingSet  RingSet; 

#endi f 

s i ze_t 

kdbTtyFormatFingerprint16(char  *hash,  char  *buf,  size_t  Len); 
s i z e_t 

kd bT t y F o r ma t F i ng e r p r i n t 20 ( c h a r *hash,  char  *buf,  size_t  Len); 
i nt 

kdbT t y Pu t F i ng e r p r i n 1 1 6 C F I LE  *f,  char  *hash, 
n unsigned  wid); 

i n t 

kd bT t y Pu t F i n g e r p r i n t 2 0 ( F I L E *f,  char  *hash, 
n unsigned  wid); 

i n t 

kdbTtyPutKeyIDCFILE  *f,  char  *keyid); 
i n t 

kdbTtyPutSigIDCFILE  *f,  PGPCert  *sig); 
unsigned 

C[CHK:613497663ff6600c06640ef11cd58cc36c211c33d117511f8777ffbeefb860e50:: 
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kdbT t y Pu t S t r i ng ( c ha r const  *str,  size_t  Len, 
n unsigned  maxLen,  FILE  *f,  char  q1,  char  q2); 

void 

kdbTtyPutKeyInfoCFILE  *f,  PGPKey  *key); 
void 

kd b Key  I Dp r i n t ( F I LE  *i , char  const  *prompt, 
n byte  const  keyIDCS]); 

void 

kdbKeyPrint(FILE  *f,  PGPKeylter  *keyiter,  int  Level); 


i n t 


kdbT  tyKeyV i ew 

(void  *arg. 

PGPKeyList  *viewkeys. 

n 

PGPKeySet 

♦allkeys. 

n 

char  const 

♦keyring,  int  mode); 

/ *n 

Display  second  segment  of  -kc  output  (trust  info)  only. 

n 

n 

Q n 

int 

kdbTtyKeyCheck 

(void  *arg 

, PGPKeyList  *viewkeys. 

n 

n 

PGPKeySet 

♦allkeys,  int  mode); 

a 

Q 

u 

n 

n 

n 

/*n 

Show  a 

single  key 

in  appropriate  key  view  format. 

n 

Associ ated  names 

are  also  displayed.  */ 

n 

n 

n n 

int 

kdbT  tyShowKey 

(void  *arg. 

PGPKeylter  *iter,  PGPKeySet  *alLkeys, 

n 

D 

n D 

int  mode); 

n 

D 

□ n 

/*n  Show  second  segment  of  -kc  output  for  designated  key.  */ 

i nt 

kdbT t y C h e c kKey  (void  *arg,  PGPKeylter  *iter,  PGPKeySet  *aLLkeys, 
n n n n int  mode ) ; 


/*n  Show  signatures  in  appropriate  key  view  format.  Similar  concept  to 

n pgpTtyShowKey . The  object  for  the  name  with  which  the  signatures  are 

□ associated  should  be  passed.  */ 


a n 

□ n 

int 

kdbTtyShowSigs 

n Q 

(void  *arg, 

D n 

PGPKeylter  *iter,  PGPKeySet  *aLLkeys 
int  mode); 

n D 

n 

/*B  Service  routine  for  kd bT t y S ho w S i g s , to  show  a single  sig.  Check 

n means  to  indicate  signature  check  status.  */ 

int 

kd bT t y S h o w S i g ( PG PKey I t e r *sigiter,  PGPKeySet  *aLLkeys, 
n FILE*fp,intcheck); 


CCCHK:d44299e044fbbba4599ccecddddfaa485566d2cccc62eefc99e33a2555e81cdadD3 
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/*n  Show  second  segment  of  -kc  output  (trust  info)  for  signatures 

H attached  to  designated  name.  */nn  n 

D □ n n 

i n t 

kdbTtyCheckSigs  (void  *arg,  PGPKeylter  *iter,  PGPKeySet  *aLLkeys,  int  mode); 


#ifdef  __cpLuspLus 

> 

# e n d i f 

#endif  /*  PGPRINGUI  H */ 


i:[CHK:35591  1 1 1 ee33e4054f32:: 
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/* 

★ 

★ 

★ 

* 

"k 

* 

★ 

★ 

* 

* 

★ 

#1 

#1 

#i 

#i 

#1 


u r L . c - 

Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved 

OriginaL  version  copyright  1996  Brett  A.  Thomas  (quarkabaz.com). 
NonexcLusive  but  otherwise  un r e s i s t r i c t ed  License  granted  to  PGP, 


Hodifications 

are  copyright  1997 

PGP,  Inc. 

$Id  : 

u r L . c , V 

1 .1  .2.3  1 997/06/07 

09:49:15  mhw 

/ 

n c L ude 

<s  t d i 0 . 

h> 

nc  L ude 

<ctype . 

h> 

n c L ud e 

< s t r i n g 

. h> 

nc  Lude 

<std  L i b 

. h> 

nc  Lude 

" conf i g 

.h" 

nc  L ude 

" pgpE  r r 

, h" 

nc  Lude 

" u r L . h " 

Inc. 


struct  protocol 
{ 

char  prefixC16I; 

char  p r o t o c o L _n a me C 1 6 D ; 

int  port; 

}; 


struct  protocol  known_p r o t o c o L s C 3 - 
{ 

{"keys",  "hkp",  11371), 

{"WWW",  "http",  80), 

{"ftp",  "ftp",  21), 

{"finger",  "finger",  79), 

{"\0",  "\0"} 

>; 

static  int  f i nd_po r t ( c on s t char  *urL,  int  *port); 
static  int  find_protocoL(const  char  *urL,  char  *protocoL); 
static  int  find_server(const  char  *urL,  char  *server); 
static  int  f i nd_f i L e ( c on s t char  *urL,  char  *fiLe); 

/*  XXX  Fix  He!  This  shouLd  reaLLy  take  char  **s  and  do  its  own  aLLocatii 

int  pa r s e_u r L ( c h a r *protocoL, 
n char*server, 

char  *fiLe, 
int  *port, 
const  char  *urL) 


int  rc  = PGPERR_BADPARAH; 
char  t mp_u r L C 1 02 4 ] ; 
int  X = 0; 


ifCprotocoL  &&  server  &&  fiLe  &&  port  &&  urL  &&  *urL)  { 
n *port=0; 

CCCHK:6e7f859d60cdd9aa666dd55d29551140bbbaebb1c300aada4081753346d786119]] 
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n 

□ 

Q 

n 

n 

□ 

Q 

U 

n 

□ 

n 

□ 

n 

n 

□ 

n 


*protocol  = *server  = *fiL< 


' \0' 


strncpy(tmp_ur L,  urL,  s i z e o f ( t mp_ u r L ) - 1); 

find_port(urL,  port); 
if(find_protocoL(urL,  protocol)) 
if(find_server(urL,  server)) 


n 

□ 

n 

n 

n 

□ 

n 

n 

Q 

n 

B 

B 


1 f ( f i nd_f  i L e C u r L , file))  <. 
for(x  = 0; 

known_protocoLsCx3.protocoL_nameC0D  &&  !*port; 

+ + x)  { 

if(strcasecmp(protocoL, 

n known_protocoLsCx].protocoL_name) 

= = 0)  { 

*port  = known^p r o t oco L s C xD . po r t ; 
rc  = PGPERR^OK; 


return(rc); 

> 

B 

Static  int  find.portCconst  char  *urL,  int  *port) 

int  rc  = 0; 

char  *p,  *p2; 

char  digit_string[I255D; 

/*We  can  have  as  many  as  two  colons  in  a URL,  and  as  few  as  zero.  The 
*permutations  are: 

* 

*http://server/fi  le 
*http://server:port/fi Le 
*www.server:port/fi le 
★ 

*In  aLL  cases  where  we  have  a port,  it 

*is  only  digits.  So,  if  we  have  : and  the  first  thing  after  it  isn't 
*a  digit,  it's  not  the  port. 

*/ 

p = (char  *)  urL; 

whiLeCCp  = strchrCp,  ':'))  &&  *p  88  !isdigitC*(p  + 1))) 

n + + p; 


n 

Q 

a 

Q 

Q 

a 

Q 

n 

n 

□ 

n 


if(p  88  *p  88  isdigit(*(p  + 1)))  { 

+ + P ; 

p2  = digit_string; 
wh i L e ( *p  88 

(p  - urL)  < (unsigned  short)  s i z eof ( d i g i t _ s t r i ng ) - 1 88 
isdigit(*p))  { 

*p2  = *p; 

+ + p2  ; 

+ +p; 

> 

*p2  = '\0'; 

*port  = a t o i ( d i g i t _ s t r i n g ) ; 
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n r c = 1 ; 

> 

return(rc); 

> 

static  int  f i nd_p r o t o c o L ( con s t char  *urL,  char  *protocoL) 

{ 

int  rc  = 0,  x; 
char  t mp_u r L C 1 02 4 D , *p; 

/*The  protocol  is  s emi -op t i o na L . The  possible  permutations  are: 

* 

*protocol : //server/ 

*www. server  (protocol  ==  http) 

*ftp. server  (protocol  ==  ftp) 

*keys. server  (protocol  ==  hkp) 

★ 

*First,  we  look  for  the  colon  case.  If  we  don't  succeed  there,  we 
*assume  it's  one  of  the  second  two. 

*/ 

s t r n c py ( t mp_u r I , url,  s i z eo f ( t mp_u r I ) ) ; 

if((p  = strstr(tmp_url,  "://")))  { 

n *p  = ' \0  ' ; 

n s t r c py ( p r o t o c o I , tmp_url); 

n r c = 1 ; 

> 

else 
( 
a 
n 
n 

n 
a 
n 
□ 

□ 
n 
n 
n 

> 

return(rc); 

> 

static  int  f i nd_s e r v e r ( c on s t char  *url,  char  *server) 

int  r c = 1 ; 
char  *p; 

♦server  = '\0'; 

/♦The  server  is  the  only  non-optional  part  of  the  URL.  Basic 
♦permutations  are: 

* 

[:CCHK:533d5590b770d8938f3e4499ded19f55655582effbefff3374366aaf5dcb18d6b3] 


/♦Ok,  it's  not  p r o t oco I : / / se r ve r . Either  it's  malformed,  or  it's 
♦www . somet h i ng  or  f t p . some t h i ng  or  key s . s ome t h i n g 
♦/ 

if((p  = St rchr(tmp_url,  '.')))  { 

♦p  = '\0',- 

for(x  = 0;  known_protocolsCxD.prefixC03;  ++x) 
n i f ( s t r ca se cmp ( t mp_u r I , kno wn_p r o t o c o I s C x D . p r e f i x ) ==  0)  { 

n strcpy(protocol,  known_protocolsCxD.protocol_name); 

n r c = 1 ; 

a } 

} 
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*http://www. server. comC/fi LeD 

*www . se rve r . comC/f  i L e]  (Note  the  / is  PART  of  file) 

* 

*The  first  case  we  Look  for  is  the  initial.  If  we  don't  find  that, 
*we  go  with  the  second. 

★ 

*Note  that  this  actually  can't  fail  as  Long  as  there  is  anything  in 
*in  the  url  at  all. 

*/ 

if(*urL)  { 

n ifCCp  = strstrCurl,  "://")))  { 

n /*It's  the  first  case.*/ 

a p +=  3; 

o s t r c py ( s e r V e r , p); 

n } 

n else 

n s t r c py ( s e r V e r , url); 

n if((p  = s t r c h r ( se r ve r , '/'))) 

n *p  = ' \0 ' ; 

n ifCCp  = s t r c h r ( s e r V e r , ':'))) 

n *p  = ' \0  ' ; 

> 

else 

n r c = 0 ; 

returnCrc); 

} 

static  int  f i n d_f i L e ( c on s t char  *urL,  char  *fiLe) 

{ 

int  r c = 1 ; 
char  *p ; 

/*The  most  bare  minimum  file  that  we  can  return  is  but  that 

♦actually  can  indicate  no  file  was  specified,  since  it's  optional. 
♦What  we're  Looking  for  here  is  the  first  slash  _after_ 

♦the  protocol://,  which  is  optional,  anyway.  So,  the  first 
♦thing  we  do  is  get  past  that  (if  it's  there)  and  then  find  the  next 
♦slash  (if  _it_  is  there).  Lastly,  we  need  to  strip  off  the 
♦trailing  port  (if  IT  is  there).  Basically,  this  one  can't  fail. 

♦/ 

if((p  = strstr(urL,  "://")))  { 

P +=  3; 

> 

else 

p = (char  ♦)  url; 

if((p  = strchr(p,  '/')))  { 

/♦Must  be  the  beginning  of  the  file*/ 
strcpy(fiLe,  p); 

/♦Now,  Let's  see  if  there's  an  end  to  the  file.*/ 
if((p  = strchr(fiLe,  ':'))) 

♦p  = '\0'; 

} 

[:[CHK:4a4cc44cccac6e28322d999af 22284431  677a 5e713dcca9ed119e61abd71  36753): 


a 

Q 

n 

□ 

n 


a 


n 
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else  { 

n /*Hmnim.  No  slashes  implies  no  file...*/ 

n strcpyCfile, 

> 

returnCrc); 

> 
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/* 

* u r L . h 

★ 

* Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 

* $Id:  url.h, V 1.1. 2. 2 1997/06/07  09:49:16  mhw  Exp  $ 

*/ 

int  pa r s e_ u r L C c h a r *protocoL, 
n char*server, 

n char*fiLe, 

n int*port, 

n constchar*urL); 


i:i:CHK:6fc250dda3d3c5deb4d0:: 
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U 

U a pps / pgp k . o L d /Ma kef i L e . i n 
U 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

# 

U $Id:  Makef i Le. i n,v  1.1. 2.1  1997/06/07  09:49:17  mhw  Exp  $ 

U 

PROG  = pgpk.oLd 
U INSTALLPROGS  = $(PR0G) 

COHMON=. . / common 

LOCALINCLUDES  = -I$(C0MM0N)  - 1 $ ( s r c d i r ) / $ ( C 0 MMO N ) 

LOCALOBJS=  $( COMMON ) /pgpApp Fi  L e . o $( COMMON ) /pgpEx i t . o $ ( C OMMON ) / pg p Key R i n g s . o \ 
n $( COMMON) /pgpini tApp . o $ ( C OMMO N ) / pg pO p t . o 

OBJS  = $(L0CAL0BJS)  pgpk.o 

aL  L : : $(PR0G) 


[[CHK:3c6d4566edd8d85555f2e1e7bb:: 
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It 

If  a p p s / pg p k . o L d / ma  ke f i L e . ms  c 

n 

# Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved 
U 


n $Id: 

It 

makefile.msc, V 1.1. 2.1  1997/06/07  09:49:17  mhw  Exp  $ 

OBJ  S = n 

pgpk.obj 

LIBS=n  . . \comL  i b . L i b . . \ \ L i b \ pg p 1 1 y . L i b . . \ \ L i b \ pg p L i b . L i b \ 


n 

. .\. .\Lib\bnLib. Lib 

a L L : n 

pgpk . exe 

pgpk.exe:n  SCOBJS)  SCLIBS) 


n 

$(CC)  -0  pgpk  $(0BJS)  $(LIBS)  /Link  /debug  / d e bu g t y pe : bo t h 

. c . ob  j 

n 

a 

$(CC)  SCCFLAGS)  SCDEBUG)  -Z7  - 1 . . \ \ i n c L u d e \ 

n - 1 . . \ \ i n c L u d e \ p g p -I..\common  - D H A V E_ C ON F I G_H  — c $< 

clean: 

n 

de  L * . ob  j 

nCCHK:36f10fcc3433bbaaa628876fa7aaeb!]!] 
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/* 

* pgpk.c  --  PGP  Key  Management  Main  Routine! 

* 

* Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

★ 


* Written  by:n  Derek  Atkins  < wa  r L o r dSM  I T . E D Ll> 


★ 

Mark  H . 

Weaver  <mh uS n e t r i s . o r g> 

* 

★ 

Chris  Harman  < c h a r ma nSpg p . c om> 

* $Id: 

pgpk.c, V 1.1.2. 

5 1997/06/07  09:49:18  mhw  Exp  $ 

*/ 

#ifdef  HAVE_C0NFIG_H 

#incLude 

"config.h" 

#end  i f 

#incLude 

<s  t d i 0 . h> 

#incLude 

<string.h> 

#incLude 

<t i me . h> 

#i nc  Lude 

<ctype . h> 

#ifdef  HAVE_SYS_PARAM_H 

#incLude 

<sys/param. h> 

#endi f 

#ifdef  HAVE_STDLIB_H 

#incLude 

<stdLib.h> 

# e n d i f 

#ifdef  HAVE_UNISTD_H 

# i n c L ud e 

<uni std . h>nn 

/*  for  sbrk()  */ 

# end i f 

#ifdef  UNIX 

#incLude 

<sys/stat . h>n 

n /*  for  umaskC)  */ 

#endi f 

#incLude 

"pgpDebug.h" 

#incLude 

"pgpArmor  . h" 

#incLude 

"pgpFi LeMod.h" 

#incLude 

"pgpFIFO.h" 

#incLude 

"pgpKeySpec . h" 

# include 

"pgpMem. h" 

#incLude 

"pgpPassCach.h' 

# i n c L ude 

"pgpConf . h" 

#incLude 

"pgpEnv. h" 

#incLude 

"pgpErr.h" 

#incLude 

"pgpFi Le.h" 

#incLude 

"pgpUI . h" 

#incLude 

" pgpPi pe  L i ne . h ' 

tti  nc  Lude 

"pgpPubKey. h" 

#incLude 

"pgpRndom. h" 

^incLude 

"pgpRndPooL .h" 

#incLude 

"pgpRngPub.h" 

tfincLude 

"pgpRngRead.h" 

#i nc  Lude 

"pgpUserlO.h" 

#incLude 

" pgpUsua  L s . h " 

#incLude 

"pgpRingUI.h" 

#incLude 

"pgpRngMnt  . h" 

#incLude 

"pgpSigSpec.h" 

#incLude 

"pgpTrust.h" 
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//include  "pgpTrstPkt.h" 

//include  "pgpExit.h" 

#include  "pgpAppFile.h" 

#include  "pgpKeyRings.h" 

#include  "pgpInitApp.h" 

//include  "pgpOpt.h" 

//define  MAXARGS  2 

struct  Flags  { 
n char  a r g s C H A X AR G S D ; 
n int  argc; 

n char  const  *outfile; 

n char  opt; 

n byte  doarmor; 

>; 

static  struct  PgpPassCache  *passcache  = NULL; 
static  struct  RingPool  *ringpool  = NULL; 
static  struct  RingSet  *allkeys  = NULL; 
static  struct  Pg p Ra nd omC on t e x t *rng  = NULL; 

//define  PASSLEN  256 

static  void 

setOptArgs  (char  const  *args,  struct  Pg pO p t C o n t ex t *opt,  struct  Flags  *flags) 
{ 

n while  ( *op t ->o p t a r g &&  strchr  (args,  *opt->opta rg ) ) 
n n f I a g s->a r g s C f I a g s->a r g c ++ D = * ( op t ->op t a r g + + ) ; 

} 

static  void 

setOpt  (int  opt,  struct  Pg pOp t C on t e x t *optp,  struct  Flags  *flags) 

{ 

n if  ( ! f lags->opt ) ( 


n 

a 

flags->opt  = opt; 

n 

a 

if 

(optp->state  == 

1 

&&  optp->opta rg ) 

n 

a 

a 

switch  ( opt ) { 

n 

a 

a 

case  ' k ' : 

n 

a 

a 

n setOptArgs 

( ■ 

■s",  optp. 

flags); 

a 

a 

a 

n break; 

a 

a 

a 

case  ' 1 ' : 

a 

a 

a 

n setOptArgs 

(' 

■1",  optp. 

flags); 

a 

a 

a 

n break; 

a 

a 

a 

case  ' r ' : 

a 

a 

a 

n setOptArgs 

( ' 

■su",  optp. 

flags) 

a 

a 

a 

n break; 

a 

a 

a 

case  ' X ' : 

a 

a 

a 

a setOptArgs 

(' 

’a",  optp. 

flags); 

a 

a 

a 

n break; 

a 

a 

a 

> 

n n return; 
n } 

n exitArgError  ("Cannot  use  -%c  and  -%c  togetherVn",  flags->opt,  opt); 
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} 


static  void 

ma i nPa rseArgs  (struct  PgpUICb  *ui,  void  *ui_arg,  struct  PgpEnv  *env, 
n int  *argcp,  char  *argvC],  struct  Flags  *fLags) 

< 

n struct  Pg pOp t C o n t e X t opt; 
n int  c,  argc  = *argcp; 

a pgpOptStart  (&opt,  argc,  argv); 

n argc=0; 


n while  ((c  = pgpOptNext  (&opt))  !=  EOF)  { 


n 

B 

switch  (c)  { 

□ 

fl 

case 

1 0: 

if  ( op t . op t a rg [0 ] !=  '+'  ||  opt.optargCID 

n 

fl 

B 

n argvCargc++]  = opt.optarg; 

B 

B 

fl 

else  if  ( pgpCon f i g Li ne Pr oce s s (ui,  ui_arg 

, env. 

B 

fl 

fl 

□ fl  B 

opt  . opta  rg  + 1 , 

B 

B 

fl 

B fl  fl 

PGPENV_PRI_CHDLINE) ) 

B 

B 

□ 

n exitArgError  ("Unrecognized  option  %s 

/ 

B 

fl 

B 

fl  fl 

opt.optarg); 

B 

fl 

□ 

break; 

B 

B 

case 

1 _ 1 ; 

B 

fl 

fl 

/*  This  accepts  --foo  */ 

B 

fl 

B 

/*  --  is  special-cased,  so  foo"  won't 

do.  */ 

B 

fl 

fl 

if  (pgpConfigLineProcess(ui,  ui_arg,  env. 

opt.optarg. 

fl 

B 

□ 

fl  fl  fl 

PGPENV_PRI_CHDLINE) ) 

B 

fl 

fl 

n exitArgError  ( 

B 

B 

fl 

□ 

"Unrecognized  option  -%s". 

B 

B 

fl 

n 

opt.optarg  - 1); 

B 

B 

fl 

opt.optarg 

= NULL; 

B 

B 

fl 

break; 

B 

fl 

case 

'a  ' :n  /* 

Add  */ 

B 

B 

case 

' c ' : n /* 

Check  */ 

B 

fl 

case 

■d'  : 

/*  Disable  */ 

B 

B 

case 

'e'  :n  /* 

Edit  */ 

B 

fl 

case 

'g':n  /* 

Generate  */ 

B 

fl 

case 

'k' :n  /* 

Revo( k)e  */ 

B 

B 

case 

' 1 ' :n  /* 

List  */ 

B 

fl 

case 

' r ' : n /* 

Remove  */ 

B 

fl 

case 

' s ' : n /* 

Sign  */ 

B 

B 

case 

'x' :n  /* 

extract  */ 

B 

fl 

fl 

setOpt  (c. 

&opt,  flags); 

B 

fl 

fl 

break; 

B 

fl 

case 

' h ' : n /* 

Help  */ 

B 

fl 

fl 

exitUsage 

( PGPEXIT_0K) ; 

B 

fl 

fl 

/*N0TREACHED*/ 

B 

fl 

case 

'o' :n  /* 

Output  */ 

B 

B 

fl 

/*  XXX  check  for  duplicate  args  */ 

B 

fl 

B 

if  (lopt.optarg) 

B 

fl 

fl 

n exitArgError  ( 

B 

fl 

B 

fl  ' 

'-0  option  requires  a userid  argument"); 

B 

B 

□ 

f 1 a g s ->ou t f i 1 e = opt.optarg; 

B 

fl 

fl 

opt.optarg 

= 0; 

B 

fl 

fl 

break; 

B 

fl 

case 

' u ' : n /* 

Username  (myname)  */ 

B 

fl 

□ 

/*  XXX  Check  for  duplicate  args  */ 

' \0  ' ) 
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□ 

Q 

n 

□ 

□ 

n 

□ 

□ 

n 

a 

n 

□ 

a 

n 

n 

n 

n 

n 

> 


n n if  (lopt.optarg) 

n n n exitArgError  ( 

H n n "-U  option  requires  a userid  argument"); 

n n pg pe n V S e t S t r i ng  (env,  PG PE N V_M Y N AM E , opt.optarg, 
n n B n PG P E N V_ PR  I _ C M D LI N E ) ; 

B B opt.optarg  = 0; 

B B brea  k; 

B case  'v':n  /*  Verbose  */ 

B B pgp e n V S e 1 1 n t ( e n V , PG P E N V_ V E RBO S E , 1 + 

B B pg pen vG e t I n t ( e n V , PG P EN V_ V E RBO S E , 

B B B B NULL,  NULL),  PG P E N V_ P R I _ C M D L I N E ) ; 

B B break; 

n default: 

B B exitArgError  ("Unrecognized  option  -%c",  c); 

B } 

> 

*argcp  = argc; 
return; 


/*  Two  functions  to  write  out  extracted  key  files  */ 
static  int 

mainWriteSet  (FILE  *fp,  int  flags,  struct  RingSet  const  *set) 

{ 

n struct  PgpFile  *pfp  = pg p F i I e W r i t eOpen  (fp,  NULL); 

B int  rslt  = ringSetWrite  (set,  pfp,  NULL,  PG P V E R S I 0N_3 , 

B B B B flags); 
n pgpFileClose(pfp); 
n return  rslt; 

> 

/*  Like  mainWriteSet,  but  for  armored  files  */ 
static  int 

ma i nWri teArmoredSet  (FILE  *fp,  int  flags,  struct  RingSet  const  *set, 
struct  PgpEnv  *env) 


B Struct  PgpFile  *pfp; 

n struct  PgpPipeline  *ppl  = NULL; 

B int  rslt; 

B 

B pfp  = pg p F i I e W r i t eOpen ( f p , NULL); 

B if  (!pfp)  { 
n B fclose(fp); 

B B return  PGPERR_NOHEM; 

n > 

B if  ( ! pg p F i I e W r i t e C r e a t e (&ppl,  pfp,  1))  ( 

n B pgpFi leC lose(pf p); 

B B return  PGPERR_NOMEM; 

n > 

B if  (!rng) 

B B rng  = pg p Ra ndomC r ea t e (); 

B if  ( ! pg p A r mo r W r i t e C r e a t e ( &p p I , env,  &pg pBy t e F i f o D e s c , 

B B B B rng,  PG PV E R S I 0 N_2 _6 , PG P_ A RHOR_N ORM A L ) ) C 

B B pp I -> t e a r do wn ( pp  I ) ; 

B B return  PGPERR_NOHEH; 

B } 

B pfp  = pgp F i I e P i pe I i n eOpe n ( pp  I ) ; 

B if  (!pfp)  { 
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n n pp L ->t ea rdown ( pp L ) ; 
n n return  PG P E R R_ N OH E M ; 
n } 

a rsLt  = ringSetWrite  (set,  pfp,  NULL,  PGPVERSION_2_6,  flags); 
n pgpFiLeCLose(pfp); 
n return  rsLt; 

> 


#if  0 

/*  Unused  at  present.  fp  must  be  a seekabLe  stream.  */ 

static  struct  RingSet  const  * 

man nOpenKeyri ng  (FILE  *fp,  int  trusted) 

{ 

n struct  RingFiLe  *ring; 

n struct  PgpFiLe  *pfp; 

n int  error  = 0; 

n pfp  = pgpFileReadOpen  (fp,  NULL,  NULL); 
n ring  = ringFileOpen  (ringpooL,  pfp,  trusted,  Serror); 
n if  (error) 

n n fprintf  (stderr,  "ringFileOpen  returned  %d:  %s\n", 
° ° error,  pgperrString  (error)); 

n if  (ring) 

n a return  ringFileSet  (ring); 
n return  NULL; 

> 

# e nd i f 


static  int 

setPassword  (struct  PgpEnv  *env,  struct  PgpSecKey  *seckey,  void  *ui_arg) 


char  passCPASSLEND; 
char  pass2CPASSLEND; 
int  error; 


pgpAssert  (!  pgpSecKeylslocked  (seckey)); 
do  { 

n memset  (pass,  0,  sizeof  (pass)); 
n memset  (pass2,  0,  sizeof  (pass2)); 


pgpTtyGetPass  (ui_arg,  pass,  sizeof(pass)); 
fputs  ("Enter  same  pass  phrase  againXn",  stderr); 
pgpTtyGetPass  (ui_arg,  pass2,  sizeof(pass2)); 


if  (Jstrcmp  (pass,  pass2)) 
n break; 
fprintf  (stderr, 

n "Error:  Pass  phrases  were  different.  Try  again. \n"); 


> while  (1  ); 


n if  (Istrlen  (pass)) 

n n return  0; 


memset  (pass2,  0,  sizeof  (pass2)); 

error  = pgpSecKeyChangeLock  (seckey,  env,  rng,  pass,  strlen  (pass)); 
memset  (pass,  0,  sizeof  (pass)); 
return  error; 
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/*  Perform  the  maintenance  pass  and  get  trust  info  for  interesting 
keys . */ 

static  const  char  checkingC]  = "Checking  %d  signatures. ..\n"; 
static  i nt 

doKeyEdi tT rust ( uni  on  RingObject  *obj,  struct  RingSet  *set,  int  firsttime, 
n FILE*Log);  /‘forward  ref*/ 

/* 

* Callback  function  for  displaying  sig  progress.  We  just  show  a count  on 

* every  10th  sig  check 
*/ 

static  void 

mai nShowSigCheckProgressCvoid  *arg,  struct  Ringiterator  *iter,  int  checkok) 
{ 

n int  s i g c h e c k c ou n t = *(int  *)arg; 
n (void)iter; 
n (void)checkok; 
n ++S i g c hec kcoun t ; 
n *{int  *)arg  = s i g c h e c k c o u n t ; 
n if  ( s i g c h e c kc o u n t % 10  ==  0) 

n n fprintf  (stderr,  "%6d  \r",  sigcheckcount); 

> 

static  int 

mainDoMaint  (void  *ui_arg,  struct  RingSet  ‘keys,  int  sigcheck, 
n struct  RingSet  ‘sigs) 

{ 

FILE  ‘fp  = ((struct  PgpTtyUI  ‘)  ui_arg)->fp; 

int  numsigs; 

struct  RingSet  ‘dest; 

unsigned  count  = 0; 

int  err; 

int  sigcheckcount; 

#if  0 

union  RingObject  ‘key,  ‘name; 
size_t  len; 

struct  Ringiterator  ‘iter; 
int  r c ; 

char  const  ‘namestring; 

# e n d i f 

int  trust_changed  = 0; 

/‘  Check  sigs  as  required  ‘/ 


switch  (sigcheck)  { 
case  1 : 

/‘  Only  check  signatures  in  sigs  that  are  not 
marked  as  having  been  checked.  ‘/ 
numsigs  = r i n g Poo  I C h e c kC ou n t (sigs,  keys,  0); 
if  (numsigs  > 0) 

fprintf  (fp,  checking,  numsigs); 
sigcheckcount  = 0; 

if  ((err  = r i ng Poo  I C h e c k (sigs,  keys,  0,  ma i n S h o w S i g C h e c k P r og r e s s , 
n n n (void  ‘)  &s i g c h e c k c o un t ) ) !=  0) 
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fprintf  (stderr,  "Error  %d  checking  signaturesNn",  err); 
if  ( s i g c he c kcou n t > 0) 
o fprintf  (stderr,  "\n"); 

break; 
case  2 : 

/*  Check  aLL  signatures  as  part  of  a full  maintenance 
pass  * / 

numsigs  = ringPooLCheckCount  (keys,  keys,  1); 
if  (numsigs  > 0) 

fprintf  (fp,  checking,  numsigs); 
s i g c h e c k c ou n t = 0; 

if  ((err  = ringPooLCheck  (keys,  keys,  1,  mainShowSigCheckProgress, 
n o (void  *)  &s i g c h e c k c o u n t ) ) 1=  0) 

fprintf  (stderr,  "Error  %d  checking  signatures\n",  err); 
if  ( si gcheckcount  > 0) 
n fprintf  (stderr,  "\n"); 

break; 
default : 

fprintf  (fp,  "No  signatures  to  check.  ..\n"); 

/*  Don't  check  any  sigs  */ 

> 

/*  Loop  around  performing  maintenance  passes  until  no  more 
interesting  keys  are  returned.  */ 


do  { 

dest  = ringSetCreate  (ringpool); 
if  (!dest) 

n return  ringPoolError(ringpool)-> error; 

fprintf  (fp,  "Computing  validity  of  name/key  bindings... \n"); 
ringHnt  (keys,  dest,  time  ((time_t  *)  NULL)); 

#if  0 

ringSetFreeze  (dest); 

if  (pgpenvGetlnt  (((struct  PgpTtyUI  *)  u i _a r g ) ->e n v , PG P E N V_B AT C HMO D E , 
n n NULL,  NULL)) 

count  = 0;  /*  ignore  interesting  keys  in  batchmode  */ 

else 

ringSetCount  (dest,  Scount,  1); 
if  (count  > 0)  { 

iter  = ringIterCreate  (dest); 
if  (liter)  { 

n r i ng S e t D e s t r oy  (dest); 

n return  r i n g Poo  I E r r o r ( r i n g poo  I ) ->e r r o r ; 

> 


/* 

Ask 

the  user  to 

d e f i 

ne 

the 

trust  for  each  key 

returned  in  dest 

n 

For 

the 

new  trust  model. 

w e 

must  locate  the  names 

with  undefined 

n 

trust. 

n 

□)  3 3 

May 

want  indication 

0 f 

why 

key  is  interesting 

in  future. 

n 

and 

s w i 

tch  based  on 

the 

reason. 

*/ 

while  (ringIterNextObject  (iter,  1)  > 0)  { 
n n PgpTrustMode I pg p t r u s t mod e I = pg pT r u s t Mod e I ( r i ng poo  I ) ; 

n n key  = ringlterCurrentObject  (iter,  1); 

n n pgpAssert  (key  S&  ringObjectType  (key)  ==  RINGTYPE_KEY); 

n n if  ( pgpt rustmode  I ==  PGPTRUST0)  { 

“ ° f fprintf  (fp,  "Trust  in  the  following  key  is  undefined:\n"); 

“ ° n ri ngTtyShowKey  (ui_arg,  key,  keys,  0); 
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n 

n 

n 

i f 

(doKeyEdi tTrust  (key,  keys,  1,  fp)) 

n 

s 

n 

D 

t rust_ 

changed  = 1; 

c 

n 

n 

else 

n 

n 

n 

Q 

/* 

So 

we  don't  ask  again  */ 

n 

n 

n 

n 

ringKeySetTrust  (keys,  key,  PGP_KEYTRLIST_UNKNOWN); 

n 

u 

> 

else 

{ / 

* new  trust  model  */ 

Q 

n 

n 

r i 

ngTtyShowKey  (ui_arg,  key,  keys,  0); 

n 

n 

n 

while 

( ( r c 

= r i ng I t e r N ex t Ob j e c t (iter,  2))  > 0)  ( 

s 

Q 

n 

tt 

name  = 

r i ng I t e r C u r r e n t Ob j e c t (iter,  2); 

n 

n 

n 

u 

i f 

(name  88  r i n g 0 b j e c t Ty pe  (name)  ==  R I N GT Y P E_N AM E ) ( 

n 

n 

n 

n 

n 

i f 

( r i ng N a me C on f i den c e U nd e f i ne d (keys,  name))  { 

n 

n 

□ 

Q 

n 

n 

fprintf  (fp. 

"\nConfidence 

in  the  following  name  is  undefined:\n"); 

n 

n 

n 

□ 

n 

n 

namestring  = ringNameName  (keys,  name,  8len); 

n 

n 

n 

□ 

Q 

n 

r i ngT t y Pu t S t r i ng  (namestring,  len,  len+2,  fp, 

n 

n 

n 

Q 

n 

u 

""  ) ; 

n 

n 

n 

n 

□ 

n 

putc  ('\n',  fp); 

Q 

n 

n 

n 

n 

Q 

if  (doKeyEdi tTrust  (name,  keys,  1,  fp))  ( 

n 

n 

□ 

n 

n 

n 

B trust_changed  = 1; 

n 

n 

D 

n 

n 

n 

} else  { 

□ 

Q 

D 

n 

n 

□ 

B / * 

n 

n 

& 

Q 

n 

n 

B * This  is  required  to  force  'undefined  trust' 

□ 

n 

Q 

n 

n 

Q 

B * 'no  trust',  so  we  don't  ask  again. 

n 

□ 

n 

n 

a 

n 

B * / 

n 

Q 

n 

n 

a 

□ 

B r i n g N ame S e t Con f i d e n c e (keys,  name,  0); 

n 

n 

n 

n 

a 

n 

} 

n 

Q 

n 

n 

a 

> 

n 

n 

D 

n 

> 

n 

n 

n 

> 

n 

□ 

> 

n n ringIterDestroy  (iter); 

} 

#end i f 

ringSetDestroy  (dest); 

> while  (count  > 0 8&  t r u s t _ c h a ng e d ) ; 
return  0; 

> 


/* 

* Hakes  sure  that  the  global  <allkeys>  is  loaded, 

* and  returns  an  error  code  or  0 if  successful. 

* If  <canFail>  is  0,  then  an  error  will  cause  it  to  exit. 
*/ 


static  i nt 

loadA I Keys ( s t rue t PgpEnv  *env,  int  canFail,  int  t r u s t e d_o n I y ) 

{ 

n if  (iallkeys)  ( 

n B int  error  = ma i nOpenKey r i ng s ( en v , ringpool,  t r u s t e d_on I y , 

B B B B B Sallkeys); 


B B 
B B 
B B 
B B 
B B 
B B 
B B 
B B 


if  (error)  ( 

B fprintf(stderr, 

B B "mainOpenKeyrings  failed  (%d):  %s\n", 

B B error,  pgperrString  (error)); 

B if  (canFail) 

B B return  error; 

B else 

B B e X i t U s a g e ( e r r o r ) ; 
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n n } 

n > 

n return  0; 

> 

/* 

* Interface  to  LoadALLKeys  which  makes  sure  <aLLkeys>  will  be  reloaded. 

* Sometimes  we  want  to  Load  only  untrusted  keyrings  but  <aLLkeys>  may 

* hold  trusted  ones. 

*/ 

static  int 

reloadALLKeysCstruct  PgpEnv  *env,  int  canFail,  int  trusted_onLy) 

{ 


n if  (alLkeys)  { 
n n r i ng S e t De s t roy ( a L L key s ) ; 

° n alLkeys  =0; 
n > 

n return  L oadA L I Key s ( env,  canFail,  t r u s t e d_o n L y ) ; 

} 


/* 

* Open  key  rings  and  return  sets  for  pubring  and  secring. 
*/ 


static  void 

ma i nO p e n Pu b S e c C s t r u c t PgpEnv  *env,  char  const  **pub, 
n struct  RingSet  **pubring,  char  const  **sec, 

n struct  RingSet  **secring,  FILE  *Log) 

{ 


n if  (pub  SS  pubring)  { 

n n *pub  = pgpen vGe t S t r i ng  (env,  PG P E N V_ PU B R I NG  , NULL,  NULL); 
n n if  (!*pub)  { 

n n n i f ( Log ) 

naan  fprintf  (Log, 

"Unknown  pubring  file,  assuming  \" pubring. pkr\"\n"); 
n n n *pub  = " pubring. pkr"; 

n n > 

n n *pubring  = mainOpenRingfile  (env,  ringpool,  *pub,  " public  ",1); 
n > 


n if  (sec  &&  secring)  { 

n n *sec  = pg p e n vG e t S t r i ng  (env,  PG PE N V_ S E C R I NG , NULL,  NULL); 
n a if  (!*sec)  < 
n n n if(Log) 

“ o n n fprintf  (Log, 

"Unknown  secring  file,  assuming  \" secring. skr\"\n"); 

n n n *sec  = "secring. skr"; 

an} 

n n *secring  = mainOpenRingfile  (env,  ringpooL,  *sec,  " private ",0); 
n } 

} 


/* 

* Searches  <ring>  for  keys  matching  the  substrings  on  the 

* command  Line.  <ring>  must  be  immutable. 

* If  <argc>==0  and  <defALl>,  uses  the  entire  <ring>. 

* In  either  case,  the  *set  returned  is  a valid,  newly  created,  immutable 
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* set  . 

★ 

* Returns  1 if  any  keys  were  selected,  else  0. 

*/ 

static  int 

s e L e c t K e y A r 9 s ( s t r u c t PgpEnv  *env,  int  argc,  char  *argvCD, 
n n char  const  *ringName,  struct  RingSet  const  *ring, 
n n struct  RingSet  **set,  int  defALL) 

{ 

n int  anykeys  = 0,  i,  result; 


D 

n 

□ 

n 

a 

n 

□ 

n 

n 

a 

n 

n 

> 


(void)env;n  /*  Avoid  warning  */ 
if  large  <=  0 88  defAll)  { 

*set  = ringSetCopy(ring); 
n if  (!*set) 

n n e X i t U s a g e ( r i ng Poo  I E r r o r ( r i ng poo  I ) ->e r r o r ) ; 

n anykeys  = 1;n  /*  XXX:  Not  necessarily,  ring  might  be  empty  */ 

} else  { 

n *set  = ringSetCreatelringpool); 
n if  (!*set) 

n n e X i t U sa g e ( r i ng Poo  I E r r o r ( r i ng poo  I ) ->e r r o r ) ; 

for  (i  = 0;  i < arge;  i++)  f 
n result  = ringSetFilterSpeclring,  *set,  argvCill,  0); 
n if  (result  < 0) 
n e X i t U s a g e ( r e s u 1 1 ) ; 

n else  if  (result  > 0) 
n n anykeys  = 1; 

n else 

n n fprintflstderr, 

n n "No  key  named  \"%s\' 

n n n argvCi3,  ringName); 


in  keyring  \"%s\"\n". 


return  anykeys; 


/* 

* This  selects  one  RingObject  from  the  given  immutable  <set>  for  which 

* (*filt)(env,  obj,  arg)  returns  non-zero.  ( *p r i n t ) ( en v,  file,  obj,  arg) 

* should  print  a label  for  the  appropriate  object  to  file  (with  newline), 

* suitable  for  a menu.  If  there  is  more  than  one  candidate,  and  <print> 

* is  non-null,  the  user  is  presented  with  a menu  to  choose  from.  If 

* there's  more  than  one  candidate  and  <print>  is  null,  or  if  there  are  no 

* candidates,  1 is  returned.  The  object  is  returned  in  <obj>,  or  NULL  if 

* there  was  an  error.  Returns  < 0 for  a library  error,  1 for  other  error, 

* or  0 on  success. 

* 

* The  <print>  function  may  assume  that  the  global  <allkeys>  will  be 

* set  correctly  by  the  time  it  is  called.  This  routine  makes  sure  of 

* that,  the  caller  doesn't  have  to. 

*/ 

static  int 

se  lectOneRi ngOb j ( St ruct  PgpEnv  *env,  struct  RingSet  *set,  int  level, 
n n union  RingObject  **obj1,  FILE  *out,  char  const  *header, 
n n void  *arg, 

n n int  ( *f i 1 1 ) ( s t ru c t PgpEnv  *env,  union  RingObject  const  *obj, 
n n n n void*arg), 

n n void  ( * p r i n t ) ( s t r u c t PgpEnv  *env,  union  RingObject  *obj. 
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H n n n FILE  *fiLe,  void  *arg)) 

{ 

n struct  Ringlterator  *iter; 

n union  RingObject  *obj,  *o b j L i s t C 5 0 3 ; 

n int  maxObjs  = sizeof(objList)  / sizeof(objListC0!]); 
n int  numObjs  = 0; 

n int  notFirst  = 0; 

n int  result; 

n Long  choice; 

n char  *endNuni,  bufC32]; 

n int  i ; 

n *obj1  = NULL; 

n iter  = r i ng I t e r C r e a t e ( s e t ) ; 

n if  (liter) 

n n return  ringSetError(set)->error; 


□ 

/* 

Advance  iter  state  */ 

Q 

for 

C i = 

1;  i<level;  ++i) 

n 

B 

i f 

((result  = ringIterNextObject(iter,  i))  < 

n 

B 

a 

return  result; 

a 

for 

C;; 

) { 

n 

B 

result  = r i ng I t e r Nex t Ob j e c t ( i t e r , 

level); 

u 

B 

i f 

(result  < 0) 

n 

B 

B 

goto  destroyAndExit; 

n 

B 

else  if  (result  ==  0) 

o 

B 

B 

break; 

n 

B 

i f 

(numObjs  >=  maxObjs)  { 

n 

B 

B 

f p r i n t f ( s t d e r r , "Too  many  matches;  abort 

n 

B 

fl 

goto  d e s t r oy And E r r 0 r ; 

□ 

B 

> 

n 

B 

ob  j 

= r i ng 1 1 e r C u r r en t Ob j e c t ( i t e r , 

level); 

n 

B 

pgpAssert(obj ); 

n 

B 

i f 

(filt(env,  obj,  arg))  { 

tt 

B 

B 

0 b j L i s t C n umO b j S++ D = obj; 

n 

B 

B 

if  (notFirst)  { 

n 

B 

B 

n if  (Iprint  {|  lout) 

□ 

B 

B 

n n goto  d e s t r oy An d E r r o r ; 

Q 

B 

B 

n 1 oa d A 1 1 Ke y s ( e n V , 0,  0); 

n 

B 

B 

n i f ( numOb j s ==  2 ) { 

Q 

B 

B 

B a fprintf(out,  "%s\n  1) 

",  header), 

n 

B 

B 

n n print(env,  objListC0D, 

out,  arg), 

n 

B 

B 

n } 

n 

B 

fl 

n fprintf(out,  "%2d)  ",  numObjs); 

n 

B 

fl 

n print(env,  obj,  out,  arg); 

n 

B 

fl 

> 

n 

B 

B 

else 

n 

B 

fl 

a notFirst  = 1; 

B 

B 

> 

n ringlterDestroy(iter); 

n if  CnumObjs  < 1) 
n n return  1; 

n else  if  (numObjs  ==  1)  { 
n n *obj1  = objListC0D; 

n n return  0; 
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n > 

a pgpAssert(out); 

n fprintfCout,  "Choose  one  of  the  above:  "); 
n pg pT t y Ge t S t r i n g ( bu f , sizeofCbuf),  out); 

n choice  = strtoLCbuf,  SendNum,  10); 
n while  ( i s s pa c e ( *e nd N urn ) ) 
n n endNum++; 

n if  (*endNum  ||  choice  <1  ||  choice  > numObjs)  { 

n a f p r i n t f ( s t d e r r , "Invalid  choiceXn"); 
n n return  1; 

n } 

n *obj1  = objListCchoice  - ID; 
n return  0; 

destroyAndError  : 
n result  = 1; 
dest  royAndExi t : 
n r i ng 1 1 e r D e s t r oy C i t e r ) ; 

n return  result; 

} 

/*  A filter  for  s e I e c t 0 n e R i n g 0 b j (above),  which  selects  all  keys  */ 
static 

int  keyFi ItCstruct  PgpEnv  *env,  union  RingObject  const  *obj,  void  *arg) 

{ 

n (void)env;n  /*  Avoid  warnings  */ 
n (void)arg;n 

n return  ringObjectType(obj)  ==  RINGTYPE_KEY; 

} 

/*  A filter  to  select  the  specified  type  */ 
static 

int  t y pe F i 1 1 ( s t r u c t PgpEnv  *env,  union  RingObject  const  *obj,  void  *arg) 

{ 

n byte  mtype  = *(byte  *)arg; 

n (void)env;n  /*  Avoid  warnings  */ 
n return  r i ng 0 b j e c t Ty pe ( ob j ) ==  mtype; 

} 

/* 

* A filter  for  signatures  that  won't  show  revocations.  We  don't  print 

* those  out  explicitly  so  it  is  better  not  to  try  to  choose  them. 

*/ 

static 

int  sigFi lt(struct  PgpEnv  *env,  union  RingObject  const  *obj,  void  *arg) 

{ 

a (void)env; 
n (void)arg; 

n if  ( r i ngOb j e c t Ty p e ( ob j ) ==  R I N GT YPE_S I G ) t 

n n int  type  = r i ng S i g Ty pe C a I I key s , (union  RingObject  *)  obj); 

n n if  (type  !=  PG P_S I GT Y P E_KE Y_C OHPROM I S E S& 

n n type  !=  PG P_ S I GT Y P E_K E Y_U I D_ R E VOKE ) 

n n n return  1;  /*  accept  */ 
n } 

n return  0;n  n /*  reject  */ 

} 
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/* 

* A key  printer  for  s e L e c t On e R i ng Ob j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

keyPrintCstruct  PgpEnv  *env,  union  RingObject  *obj, 
n n FILE  *fiLe,  void  *arg) 

{ 

struct  PgpTtyUI  ui; 
n (void)env;n  /*  Avoid  warnings  */ 
n (void)arg; 
n ui.fp  = file; 
n fputc('\n',  file); 
n pgpAssert(aLLkeys); 

n ringTtyShowKeyCCvoid  *)  &ui,  obj,  aLlkeys,  0); 

} 

/* 

* A name  printer  for  s e L e c t On e R i ng Ob j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

na me P r i n t ( s t r u c t PgpEnv  *env,  union  RingObject  *obj, 
n n FILE  *fiLe,  void  *arg) 

{ 

n char  const  *namestring; 
a size_t  Len; 

n struct  PgpTtyUI  ui; 

n (void)env;n  /*  Avoid  warnings  */ 
n (void)arg; 

n ui.fp  = file; 
n fputc('\n',  file); 

B pgpAssert(aLLkeys); 

B namestring  = ringNameName  (alLkeys,  obj,  &Len); 

B ringTtyPutString  (namestring,  len,  (unsigned)  Len,  file,  0,  0); 

B fputs("\n",  file); 

B r i ngT t y S howS i g s ((void  *)  &ui,  obj,  alLkeys,  2); 

} 

I* 

* A sig  printer  for  s e I e c t On e R i n g Ob j (above), 

* which  prints  keys  for  a menu. 

*/ 

static  void 

s i g Pr i n t ( s t r u c t PgpEnv  *env,  union  RingObject  *obj, 

B B FILE  *file,  void  *arg) 

{ 

B (void)env;B  /*  Avoid  warnings  */ 

B (void)arg;B 

B pg p A s s e r t ( a L L key s ) ; 

B fputc('\n',  file); 

B ringTtyShowSig(obj,  alLkeys,  file,  1); 

} 
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static  void 

ob j P r i n t ( s t rue t PgpEnv  *env,  union  RingObject  *obj, 
n n FILE  *fiLe,  void  *arg) 

{ 

n switch  ( r i ngOb j e c t Ty pe ( ob j ) ) { 

n case  R I NGT Y P E_KE Y : 

n n keyPrintCenv,  obj,  file,  arg); 

n n break; 

n case  R I NGT Y P E_N AM E : 

n n na me P r i n t ( e n V , obj,  file,  arg); 

n n break; 

n case  RINGTYPE_SIG : 

n n sigPrintCenv,  obj,  file,  arg); 

n n break; 

n } 

> 

/* 

* Add  an  object  with  all  its  children  to  the  dest  key  set. 

* The  sre  key  set,  which  controls  which  children  are  taken,  must  be 

* immutable.  dest  must  be  mutable. 

* Return  number  of  objects  added,  or  negative  on  error. 

*/ 

static  i n t 

r i ngSe t AddH i e ra r chy ( s t ruct  RingSet  *dest,  struct  RingSet  const  *src, 
n n union  RingObject  *obj) 

{ 

n struct  Ringiterator  *iter; 
n int  level,  initlevel; 

n int  nobjs; 


Q 

int 

err 

/ 

n 

/* 

First  add  the  object  */ 

Q 

if 

( ( e r r = r i ng S e t AddOb j e c t ( de s t , obj))  < 0) 

n 

□ 

return  err; 

n 

iter  = 

ringlterCreate(src); 

n 

i f 

( liter) 

n 

n 

return  r i ng S e t E r ro r ( s r c ) ->e r r o r ; 

u 

nobjs  = 

1; 

n 

ini 

tlevel=ringIterSeekTo(iter,  obj); 

□ 

if 

(ini 

tlevel  < 0) 

n 

B 

return  initlevel; 

□ 

level  = 

initlevel  + 1; 

o 

w h i 

le  (level  > initlevel)  { 

Et 

n 

union  RingObject  *child; 

D 

B 

err 

= r i ng I t e rNext Ob j e c t ( i t e r , level); 

n 

B 

if 

(err  < 0)  < 

D 

B 

B 

ringlterDestroy(iter); 

n 

B 

B 

return  err; 

n 

B 

> 

n 

B 

if 

(err  > 0)  { 

n 

B 

B 

child  = r i ng 1 1 e r C u r r e n t Ob j e c t ( i t e r , level); 

n 

B 

B 

if  (Ichild) 

n 

B 

B 

n return  r i ng S e t E r r o r ( s r c ) ->e r r o r ; 

Q 

B 

B 

if  ( ( e r r = r i ng S e t Ad d Ob j e c t ( d e s t , child))  < 0) 
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n 

n 

n 

n return  err 

Q 

n 

n 

+ + n 0 b j s ; 

n 

n 

n 

+ + 1 e ve 1 ; 

n 

□ 

> 

else  { 

n 

a 

n 

— level; 

n 

u 

> 

Q 

y 

n 

r i 

nglterDestroy(iter); 

□ 

return 

n 0 b j s ; 

> 

/* 

* Service  routine  for  s e L e c t R i n g Ob j e c t , below.  This  one  selects  a user 

* and  optionally  a signature  from  a RingSet  composed  of  a single  key 

* and  its  descendants.  See  the  comments  for  s e I e c t R i ng 0 b j e c t for  more 

* info  on  the  parameters. 

*/ 

static  i n t 

se  I e c t C h i I dob j e c t ( s t r u c t PgpEnv  *env,  struct  RingSet  *to_select, 

“ ° int  selecttype,  char  const  *prep,  FILE  *log, 

n n union  RingObject  **pobj) 

{ 

n struct  RingSet  *to_select2; 
n int  err; 

n byte  type; 

n char  headerC256II; 

n unsigned  c o u n t s C R I NGT YP E_M A X D ; 

a pgpAssert  ( s e I e c t t y pe ==R I N GT Y P E_N AM E ||  s e I e c t t y pe==R I N GT Y P E_ S I G ) ; 

n ringSetCountTypes(to_select,  counts,  RINGTYPE_MAX); 
n if  (selecttype  ==  R I NGT Y P E_N AM E ) 
n n sprintf  (header, 

"Please  select  a user  ID  %s:",  prep); 
n else 

n n sprintf  (header, 

"Please  select  a user  ID  with  a signature  %s:",  prep); 
n type  = RINGTYPE_NAME; 

n err  = s e I e c t On e R i ng Ob j ( e n v , to_select,  2,  pobj,  log, 

“ n n header,  Stype,  typeFilt,  namePrint); 

n if  (err)  { 

n n if  (log) 

o o n fprintf  (log, 

"No  user  ID's  selected  %s.\n",  prep); 
n n r i ng S e t D e s t r oy ( t o_ s e I e c t ) ; 

n n return  0; 

n } 

n /*  Keep  name  and  all  its  children  */ 
n if  (!(to_select2  = ringSetCreate(ringpool)))  { 
a n r i ng Se t De s t roy ( t o_s e I ec t ) ; 

n n return  r i n g Poo  I E r r o r ( r i ng poo  I ) ->e r r o r ; 

n > 

n ringSetAddHierarchy(to_select2,  to_select,  *pobj); 
n ringSetFreeze(to_select2); 

n if  (selecttype  ==  R I N GT Y P E_ S I G ) { 

n n ringSetCountTypes(to_select2,  counts,  RINGTYPE_MAX); 

n a pgpAsse rt ( count s[RINGTYPE_KEY-1 : ==  1); 
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n 

n 

n 

n 

n 

n 

□ 

u 

n 

n 

Q 

n 

□ 

n 


n pgpAssert ( countsCRINGTYPE.NAHE-l : ==  1); 

n sprintf  (header. 

Please  select  a signature  %s:",  prep); 

n err  = s e I e c t On e R i ngOb j ( e n v , to_select2,  3, 
nun  header,  &type,  sigFilt,  sigPrint); 
n if  (err)  { 
a n if  (log) 

n n n fprintf  (log. 

No  signatures  selected  %s.\n",  prep); 
n a r i ng S e t D e s t r oy ( t o_ s e I e c t 2 ) ; 

n n return  0; 

n > 

> 

ringSetDestroy(to_select2); 

pg p A s s e r t ( c o u n t s C s e I e c t t y p e-1 3 >=  1); 

return  c oun t s C s e I e c t t y p e- 1 3 ; n /*  success  */ 


} 


pob  j , 


log. 


/* 

* Selection  routine. 

* Selects  a key,  userid  or 

* signature  depending  on  the  selecttype  parameter,  a RINGTYPE_  value. 

* Returns  pointer  to  the  object  in  *pobj.  Prep  is  a prepositional 

* clause  like  "to  be  removed".  Returns  0 if  no  keys  selected,  negative 

* on  error.  If  objects  are  selected  returns  the  number  of  objects  at 

* that  level,  e.g.  if  a user  ID  is  selected  it  returns  the  number  of 

* user  id's  on  that  key;  if  a signature  is  selected  it  returns  the 

* number  of  sigs  on  that  user  ID.  This  will  always  be  at  least  1. 

*/ 

static  int 

se lectRi ngOb j ect ( st ruct  PgpEnv  *env,  int  argc,  char  **argv,  char  const  *pub, 
n n struct  RingSet  const  *pubring,  int  selecttype, 

n n char  const  *prep,  FILE  *log,  union  RingObject  **pobj) 

{ 

n struct  RingSet  *to_seLect  = NULL,  *to_select2  = NULL; 
n char  nameb u f C 2 5 6 3 ; 

n char  headerC2563; 

n si 2e_t  name  len; 
n intanykeys=0; 
n int  err; 

n unsigned  c oun t s C R I NGT Y P E_M AX  3 ; 
n /* 

n * Protect  headerC3  from  being  overfilled  by  the  sprintf's  to  it. 

n * prep  is  only  set  within  the  program  to  small  strings,  so  this 

n * should  never  happen, 

n * / 

n pgpAssert  ( s t r I e n ( p r ep  ) < 100); 

n if(argc==0)( 
n n pgpAssert(log); 

n n fprintf  (log, 

"A  user  ID  is  required  to  select  the  key  you  want  %s.\n\ 

Enter  the  key's  user  ID:  ",  prep); 

n a namelen  = pg pT t y G e t S t r i ng  (namebuf,  sizeof  (namebuf),  log); 
n n argv  = (char  ** ) pg pHem A I I o c ( s i z e o f ( c h a r *)); 

n n argvC03  = namebuf; 
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n n argc=1; 
n > 


n /*  Set  up  for  return  */ 

n ringSetCountTypesCpubring,  counts,  RINGTYPE_MAX); 


n anykeys  = s e L e c t Key A r g s (env,  argc,  argv,  pub,  pubring,  &to_seLect,  0); 
n i f (anykeys ) { 
n n ringSetFreeze(to_seLect); 

n n if  (seLecttype  ==  R I N GT Y P E_N AH E ) 
n n n sprintf  (header, 

"Please  select  a key  with  a user  ID  %s:",  prep); 
n n else  if  (selecttype  ==  R I NGT YP E_S I G ) 

n n n sprintf  (header, 

"Please  select  a key  with  a signature  %s:",  prep); 
a a else 

a a n sprintf  (header, 

"Please  select  a key  %s:",  prep); 

n anykeys  = ! s e I e c 1 0 n e R i n g 0 b j (env,  to_select,  1,  pobj,  log. 


Q □ n t 

> 

if  (lanykeys)  { 
n if  (log) 
n n fprintf  (log, 

'No  keys  selected  %s.\n",  prep); 
n r i ng S e t De s t r oy ( t o_se  I e c t ) ; 

n return  0; 


header,  NULL,  keyFilt,  keyPrint); 


n /*  Add  key  and  all  its  children  to  a new  ringset  called  to_select  */ 

n to_select2  = r i ng S e t C r ea t e ( r i n g poo  I ) ; 

n if  (!to_select2)  { 

n n r i ng Se t D es t roy ( t o_se I e c t ) ; 

n n return  ringPoolError(ringpool)->error; 

n > 

n ringSetAddHierarchy(to_select2,  to_select,  *pobj); 
n r i ng  S e t D e s t r oy  ( t o_ s e I e c t ) ; 
n to_select  = to_select2; 
n r i n g S e t F r e e z e ( t o_s e I e c t ) ; 

n /*  Handle  signature  and  user  ID  selection  */ 
a if  (selecttype  !=  R I N GT Y P E_KE Y ) { 

n n err  = s e I e c t C h i I d Ob j e c t ( e n v , to_select,  selecttype, 

n n n n n prep,  log,  pobj); 

n n r i ng S e t D e s t r oy ( t o_s e I e c t ) ; 
n n return  err; 

n > 

n n a n n 

n r i n g S e t D e s t r oy  ( t o_  s e I e c t ) ; 

a pgpAssert(countsCselecttype-1!]  >=  1); 
n return  countsCselecttype-1D;n  /*  success  */ 

} 


static  int 

doKeyAdd  (struct  PgpEnv  *env,  int  argc,  char  *argvC],  struct  PgpTtyUI  *ui_arg) 
{ 

n struct  RingSet  *pubring  = NULL,  *secring  = NULL; 
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n struct  RingSet  *newpub  = NULL,  *neusec  = NULL; 
n struct  RingSet  *tmpring,  *keyfiLe  = NULL; 

a struct  Ringiterator  *iter; 

n char  const  *pub,  *sec; 


n 

1 n t 

needwri tesec=0; 

n 

i nt 

newkeys  = 0; 

n 

i n t 

err  = 0; 

n 

ma  i 

nOpen Pu b S e c ( e n V , &pub,  fipubring,  Ssec,  Ssecring, 

stderr); 

n 

if 

(large)  ( 

#if 

0 

n 

Q 

fprintf  (stderr,  "No  input  files  — reading  from 

stdinXn"); 

n 

n 

/*  BUG.  This  won't  work,  requires  fseek/ftell 

*/ 

n 

n 

keyfile  = ma i nOpe nKey r i ng  (stdin,  0); 

#eL 

s e 

D 

s 

fprintf  (stderr,  "No  key  file  specified  for  addition\n"); 

n 

n 

goto  cleanup; 

#end  i f 

n 

} else  while  (argc--)  L 

n 

n 

struct  RingSet  *temp; 

u 

n 

FILE  *fp; 

a 

» 

struct  PgpFile  *pfp; 

n 

n 

struct  RingFile  *ring; 

a 

o 

fprintf  (stderr,  "Opening  ringfile  \"%s\"...\n" 

r 

argvC0D); 

a 

n 

fp  = fopen  (argvC03,  "rb"); 

n 

n 

pfp  = pgp F i 1 eReadOpen  (fp,  NULL,  NULL);  /*  chain 

errors  */ 

Q 

n 

/*  We  will  never  close  this  ringfile  */ 

n 

n 

ring  = ringFileOpen  (ringpool,  pfp,  0,  8err); 

/* 

chain  * / 

□ 

n 

temp  = r i ng S e t C opy ( r i ng F i 1 e S e t ( r i n g ) ) ; /*  chain 

*/ 

Q 

a 

if  (It  emp ) { 

n 

o 

n fprintf  (stderr,  "Unable  to  open  file  \"%s\ 

"\n". 

n 

n 

n n argvC0D); 

u 

n 

> else  { 

n 

n 

n fprintf  (stderr. 

"\nAdding  keys:\n\n"); 

n 

o 

n r i ng T t y Key V i e w ( ( vo i d *)ui_arg,  NULL,  temp. 

argvC0D,  0); 

n 

n 

n newkeys++; 

n 

Q 

n i f ( key f i 1 e ) ( 

□ 

n 

n n struct  RingSet  *tring; 

n 

□ 

n n tring  = r i ng S e t Un i on ( key f i 1 e , temp); 

n 

n 

n n ringSetDestroy(keyfile); 

n 

n 

n n r i ng S e t De s t r oy ( t emp  ) ; 

n 

n 

n n keyfile  = tring; 

Q 

n 

n } e 1 s e 

D 

n 

n n keyf i le  = temp; 

Q 

n 

> 

n 

Q 

fprintf  (stderr,  "\n"); 

n 

D 

a rg V + +; 

Q 

> 

n 

if 

(Inewkeys)  ( 

n 

Q 

fprintf  (stderr,  "No  keys  to  add\n"); 

D 

Q 

goto  cleanup; 

n 

> 

o 

/* 

Add  keys  in  keyfile  to  copy  of  pu b r i n g / s e c r i ng  as 

appropriate 

*/ 
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n newpub  = ringSetCreateCringpooL); 
n newsec  = r i ng S e t C r e a t e ( r i n g poo  I ) ; 
o if  (.'newpub  {|  !newsec)  { 
n n err  = PG P E R R_NOM EM ; 
n n goto  cleanup; 
n > 

n ringSetAddSetCnewpub,  pubring); 
n r i ng Set  Adds et ( news e c , secring); 
n r i ng S e t D e s t r oy ( pu b r i n g ) ; 
n r i n g S e t De s t r oy ( s e c r i n g ) ; 
a pubring  = secring  = NULL; 


n 

D 

n 

□ 

a 

Q 

□ 

□ 

c 

n 

□ 

n 

Q 

n 

n 

n 

o 


ringSetFreezeCkeyfi Le); 

iter  = r i ng I t e r C r ea t e ( key f i L e ) ; 

if  (liter)  { 

a err  = r i n g Poo L E r r o r ( r i n g poo L ) ->e r r o r ; 
n goto  cleanup; 

} 

while  ( r i ng I t e r N e X t Ob j e c t ( i t e r , 1)  > 0)  { 

a union  RingObject  *obj  = r i n g I t e r C u r r e n t Ob j e c t ( i t e r , 1); 
n pg p A s s e r t ( o b j ) ; 

n pgpAssert  ( r i ng 0 b j e c t Ty pe  (obj)  ==  R I NGT Y P E_KE Y ) ; 
n /*  Treat  secret  keys  differently  from  public  */ 
n if  ( r i ngKey I s Se c ( key f i I e , obj))  { 
n n struct  RingSet  *tring; 

n n struct  RingSet  *tring2; 

n n union  RingObject  *secobj; 

n n struct  Ringiterator  *itersec; 

n n int  level; 


□ □ 

a n 

□ a 

n n 

□ a 

n □ 

n □ 

n n 

□ n 

n n 

□ D 


n /*  Create  tring  holding  just  this  key  and  children  */ 
n tring  = ringSetCreate(ringpool); 
n tring2  = r i ng S e t C r e a t e ( r i n g poo  I ) ; 

H if  (Itring  ||  !tring2)  { 

n n err  = r i ng Poo  I E r r o r ( r i n g poo  I ) ->e r r o r ; 
n n r i n g S e t D e s t r oy ( t r i ng  ) ; 
n n ringSetDestroy(tring2); 

n n goto  cleanup; 

n > 

n r i ng S e t Ad d H i e r a r c hy ( t r i ng , keyfile,  obj); 
n r i n g S e t F r e e z e ( t r i ng  ) ; 


n n n 

□ an 

non 
n a D 

non 

□ □ □ 

□ □ □ 

Don 
n n n 


/*  Hake  tring2  which  holds  tring  minus  signatures  */ 
ringSetAddSet(tring2,  tring); 
itersec  = r i n g 1 1 e r C r e a t e ( t r i n g ) ; 

while  ((level=ringIterNextObjectAnywhere(itersec))>0)  { 
B union  RingObject  *iterobj; 

B iterobj  = ringIterCurrentObject(itersec, level); 

B if  ( r i ngOb j e c t Type ( i t e rob j ) ==  R I N GT Y P E_S I G ) 

B B r i n g S e t R emOb j e c t ( t r i n g 2 , iterobj); 

} 


B B B /*  Add  set  minus  sigs  to  secret  keyring  */ 

B B n r i n g S e t Add S e t ( n e w s e c , tring2); 


BOB 
B n □ 

BBS 


/*  Make  another  copy  of  tring,  this  one  minus  secret  */ 
r i ng Se t Add S e t ( t r i ng2 , tring); 
ringIterRewind(itersec,  1); 
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D □ D 

nan 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 
n n n 


r i n g I t e r N ex t 0 b j e c t ( i t e r s e c , 1); 

secobj  = NULL; 

while  ( r i ng 1 1 e rNex t Ob j e c t ( i t e r s e c , 2)  > 0)  { 
n secobj  = ringIterCurrentObject(itersec,  2); 
n if  C r i ng Ob j e c t Ty pe ( s e c o b j ) ==  R I NGT Y PE_S E C ) 
n n break; 

> 

pgpAssert  (secobj); 
ringlterDestroy(itersec); 
ringSetRem0bject(tring2,  secobj  ); 
ringObjectReLease(secobj ); 


n n n 
n n n 
n n n 
n n n 


/*  Add  set  without  secret  to  pubring  */ 
ringSetAddSetCnewpub,  tring2); 
ringSetDestroy(tring2); 
ringSetDestroy(tring); 


n n n needwritesec  = 1; 

n n }eLse{ 

n n n /*  Add  to  public  keyring  */ 

n n n r i ng S e t Add H i e r a r c hy ( n e w pu b , keyfile,  obj); 

n n } 

n > 

n r i n g 1 1 e r D e s t r oy ( i t e r ) ; 

n r i ng S e t De s t r oy ( key f i I e ) ; 

n keyfile  = NULL; 
n r i ng S e t F r ee z e ( n e wpu b ) ; 

n r i ng S e t F r ee z e ( ne w s e c ) ; 

n 

n if  ( ! pg pe n vG e 1 1 n t (env,  PG PE NV_ F OR C E , NULL,  NULL))  { 
n if  ( pg pe n vGe t I n t (env,  PG P E N V_B AT C H HO D E , NULL,  NULL))  ( 

n fprintf  (stderr, 

n n "Use  +force  to  add  keys  in  batchmode\n\ 

Key  addition  ca n c e I I ed . \ n " ) ; 
n goto  cleanup; 

n > 

n if  (needwritesec) 

n fprintf  (stderr, 

"Do  you  want  to  add  these  keys  to  keyrings  \"%s\"  and\n"\ 

"\"%s\"  (y/N)?  ",  pub,  sec); 
n else 

n fprintf  (stderr, 

"Do  you  want  to  add  these  keys  to  keyring  \"%s\"  (y/N)?  ",  pub); 
n if  ( ! pg pT t y G e t Boo  I ( 0 , stderr))  { 

n fprintf  (stderr,  "Key  addition  cancelled. \n"); 

n e r r = 0 ; 

n goto  cleanup; 

n > 

n } 


n /*  Do  maintenance  pass  on  new  rings.  */ 

n re loadA I IKeys  (env,  0,  1);  /*  no  untrusted  keyrings  */ 

n tmpring  = r i n g S e t Un i on ( a I I key s , newpub); 
n r i ng Se t De s t r oy ( a I I key s ) ; 

n allkeys  = ringSetUnion(tmpring,  newsec); 
n ringSetDestroy(tmpring); 

n err  = mainDoMaint  ((void  *)  ui_arg,  allkeys,  1,  newpub); 
n if  (err<0) 
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n n goto  cleanup; 

n mainRingNewSet  (pub,  PGP_WRITETRUST_PUB,  newpub); 
n newpub  = 0;n/*  Don't  destroy  it  */ 
a if  ( n e ed w r i t e s e c ) { 

a a mainRingNewSet  (sec,  PG P_ W R I T ET R U S T_ S E C , newsec); 

n n newsec  = 0;ol*  Don't  destroy  it  */ 

n > 


n fprintf  (stderr, 

"Keys  added  successfully. \n"); 

n e r r = 0 ; 

cleanup: 

n if  (pubring) 

n H r i n g S e t D e s t r oy ( p u b r i n g ) ; 

n if  (secring) 

n n ringSetDestroy(secring); 

n i f ( newpub ) 

n n r i ng S e t D e s t r oy ( n e w p u b ) ; 

n if  (newsec) 

n n ringSetDestroy(newsec); 

n i f ( key f i I e ) 

n n r i n g S e t D e s t r oy ( key f i I e ) ; 

n return  err; 

} 


static  int 

doKeyExtract  (struct  PgpEnv  *env,  struct  Flags  *flags,  int  argc,  char  *argvC], 
n struct  PgpTtylll  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL; 

n struct  RingSet  *keyfile  = NULL; 

n char  const  *pub; 

n byte  doarmor  = flags->doarmor; 

n int  err; 

n (void)  ui_arg; 

n /*  Check  the  command-line  args  for  armor  */ 

n if  (!doarmor  &S  flags->argc  SS  strchr  ( f I a g s ->a r g s , 'a')) 

n n doa  rmo  r + + ; 

n mainOpenPubSec(env,  &pub,  &pubring,  NULL,  NULL,  stderr); 
n if  (!pubring)  { 

n n fprintf  (stderr,  "No  keys  in  pubringXn"); 
n a return  0; 

n > 

n err  = s e I e c t Key A rg s (env,  argc,  argv,  pub,  pubring,  Skeyfile,  0); 
n if(err<0) 
n n return  err; 

n if  (err  ==  0)  { 

n n fprintf  (stderr,  "No  keys  were  selected  for  extraction. \n"); 
n n return  0; 

n > 

n ringSetFreeze  (keyfile); 
n r i ng S e t De s t r oy ( pub r i ng  ) ; 
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n if  ( f L a g s ->o u t f i L e &S 

n p g p T t y C h e c k 0 V e r w r i t e ((void  *)  ui_arg,  f L a g s->ou t f i L e ) ) 

n return  PG P E RR_NO_ F I LE ; 

n if  (doarmor)  { 

n n FILE  *fp  = f L a g s->ou t f i L e ? f op e n ( f L a g s->ou t f i I e , "w")  : 

D Q □ □ a □ D n a stdout; 

n a if(!fp) 

a n n return  PGPERR_NO_FILE; 

n n err  = ma i n W r i t e A r mo r ed S e t Cfp,  0,  keyfile,  env); 
n > else  if  ( f L a g s ->ou t f i L e ) { 

n n FILE  *fp  = f op e n C f L a g s ->o u t f i L e , "wb"); 
n n i f ( ! f p ) 

a n n return  PG P E R R_N0_ F I L E ; 

a a err  = mainWriteSet  (fp,  0,  keyfile); 
a > e L se  -C 

a a err  = mainWriteSet  (stdout,  0,  keyfile); 

a } 

a ringSetDestroy(keyfile); 
a return  err; 

> 


static  int 

key g e n P r og r e s s (void  *arg,  int  c) 

{ 

a (void)arg;n  a /*  make  the  compiler  happy  */ 
a putc  (c,  stderr); 
a fflush  (stderr); 

a return  0; 

} 


/*  Optional  Arguments:  name  keybits  */ 
static  int 

d 0 Key G e n e r a t e (struct  PgpEnv  *env,  int  argc. 


char  *argvCD,  void  *ui_arg) 


{ 

a struct  RingSet  *pubring  = NULL,  *secring  = NULL; 

a struct  RingSet  *newpub  = NULL,  *newsec  = NULL; 

a struct  PgpKeySpec  *keyspec  = NULL; 

a struct  PgpSecKey  *seckey  = NULL,  *subseckey  = NULL; 
a struct  PgpPkAlg  const  *pkalg,  *subkalg; 

a char  const  *pub  = NULL,  *sec  = NULL;  /*  make  the  compiler  happy  */ 
a char  *name  = NULL,  namebu f C 2 5 6 D ; 
a size_t  namelen  = 0; 

a unsigned  keybits  = 0; 

a int  keytype; 

a unsigned  entropy; 
a int  error  = 0; 

a unsigned  Len; 

a char  buf  C20D ; 


a 

a 

a 

a 

a 

a 

a 

a 

a 


fprintf  (stderr, 

a "Choose  the  type  of  your  public  key:\n" 
a " 1)  DSS/Diffie-Hellman  - New  for  PGP  5! 

n n a a a a a a "Separate  signing  and  encryption  keys\n" 
a " 2)RSA  -Compatible  with  old  versions  of  PGP\n" 

a " 3)  RSA  pair  - Separate  signing  and  encryption  using  RSA\n 

a "Choose  1,  2,  or  3:  "); 

len  = pgpTtyGetString  (buf,  sizeof(buf),  stderr); 
if  ( ! len)  { 
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n n fprintf  (stderr,  "No  key  type  was  chosen\n"); 

n n error=-1; 

n n goto  cleanup; 

n > 


n 

keytype  = atoi(buf); 

□ 

switch  (keytype)  { 

n 

case  1 : 

□ 

B 

pkalg  = pgpPkalgByNumber(PGP_PKALG_DSA); 

Q 

B 

subkalg  = pg p P ka 1 g By N umbe r ( PG P_PKA LG_ E LG  AM A L ) ; 

□ 

B 

break; 

Q 

case  2 : 

n 

B 

pkalg  = pgpPka lgByNumber(PGP_PKALG_RSA); 

□ 

B 

subkalg  = 0; 

a 

B 

break; 

n 

case  3 : 

n 

B 

pkalg  = pgpPka lgByNumber(PGP_PKALG_RSA); 

n 

B 

subkalg  = pgpPkalgByNumber(PGP_PKALG_RSA); 

n 

B 

break; 

n 

default: 

n 

B 

/*  Allow  unforeseen  key  types  */ 

n 

B 

pkalg  = pgpPkalgByNumber(keytype); 

n 

B 

subkalg  = 0; 

n 

B 

break; 

u 

> 

n 

1 f 

( ! p ka 1 g ) { 

n 

B 

fprintf  (stderr,  "No  legal  key  type  was  chosenXn" 

),- 

n 

B 

error  = -1; 

n 

B 

goto  cleanup; 

D 

> 

a 

/* 

Need  to  get  userid,  keysizes,  etc.  */ 

n 

1 f 

( a r g c ) ( 

n 

B 

name  = argvC03; 

a 

B 

namelen  = strlen  (name); 

n 

B 

a rgv  + + ; 

a 

B 

argc  — ; 

a 

> 

n 

i f 

( a r g c ) { 

n 

B 

keybits  = atoi  (argvC0Il); 

Q 

B 

a rg V + + ; 

Et 

B 

argc  — ; 

Q 

> 

B 

i f 

(!  keybits)  ( 

B 

B 

f pu  t s ( 

"\nF 

’ i c k 

your  pu b 1 i c / p r i va t e keypair  key  size:\n\ 

\ p * ★ * ★ * 

TEMPORARY  LABELS,  TO  BE  DETERMINED  LATER! 

! *****\n\n\ 

1 ) 

768  bits-  Commercial  grade,  probably  not 

currently  breakable\n\ 

2 ) 

1024  bits-  High  commercial  grade,  secure 

for  many 

yea  r s \ n \ 

3) 

2048  bits-  \"Military\"  grade,  secure  for 

the  forseeable  future\n\ 

4) 

3072  bits-  Archival  grade,  slow,  highest 

securi ty\n\ 

Choose 

1,  2,  3,  or  4,  or  enter  desired  number  of 

bits:  ", 

stderr); 

B 

B 

fflush  (stderr); 

B 

B 

len  = pgpTtyGetSt ri ng  (buf,  sizeof(buf). 

stderr); 

B 

B 

if  (lien)  { 

B 

B 

n fprintf  (stderr,  "Keygen  error\n"); 

B 

B 

n error  =-1; 

B 

B 

n goto  cleanup; 
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n 

n 

} 

n 

a 

keyb i t s 

= atoi  (buf); 

□ 

n 

switch 

(keybits)  ( 

a 

n 

a case  1 : 

keybits  = 768;  break; 

n 

n 

n case  2 : 

keybits  = 1024;  break; 

n 

a 

a case  3 : 

keybits  = 2048;  break; 

n 

n 

n case  4 : 

keybits  = 3072;  break; 

□ 

n 

H default 

n 

n 

n n 

1 f 

(keybits  < 512)  ( 

Q 

n 

n n 

n 

fprintf  (stderr. 

" 

Minimum  key  si 

z e i 

s 512  bitsXn"); 

n 

n 

n n 

n 

error  = -1; 

□ 

n 

n □ 

□ 

goto  cleanup; 

n 

Q 

□ D 

> 

□ 

Q 

n n 

i f 

( key b i ts  > 4096)  { 

n 

□ 

n n 

n 

fprintf  (stderr. 

■■ 

Maximum  key  size  i 

s 4096  bitsXn"); 

n 

□ 

n n 

n 

error  = -1; 

n 

n 

□ s 

n 

goto  cleanup; 

n 

n 

n n 

> 

□ 

Q 

□ D 

break; 

□ 

a 

> 

n 

> 

n 

i f 

( ! name ) 

{ 

□ 

n 

name  = 

namebuf; 

n 

Q 

f puts  C 

" 

\nYou 

need  a user 

ID  for  your  public  key. 

The  desired  form  for  this\n\ 
user  ID  is  your  name,  followed  by  your  E-mail  address  enclosed  in\n\ 
<angle  brackets>,  if  you  have  an  E-mail  address. \n\ 

For  example:  John  9.  Smith  <1 2 34 5 . 6789a c omp u s e r v e . c om>\ n \ 

Enter  a user  ID  for  your  public  key:  ",  stderr); 
n n fflush  (stderr); 

n n namelen  = pgpTtyGetString  Cnamebuf,  sizeof  (namebuf),  stderr); 
n } 


n if  (Inamelen)  f 

n n fprintf  (stderr,  "Keygen  errorXn"); 

n n error=-1; 

n n goto  cleanup; 

n } 

n /*  Open  the  existing  keyrings  */ 

n ma i nOpen Pub S e c ( e n V , Spub,  Spubring,  &sec,  Ssecring,  stderr); 

n /*  Copy  pubring  and  secring  */ 
n newpub  = ringSetCreate  (ringpool); 
n r i ng S e t Add S e t (newpub,  pubring); 

n ringSetDestroy(pubring); 
o newsec  = ringSetCreate  (ringpool); 
n r i ng S e t Add S e t (newsec,  secring); 
n r i ngSe t De s t roy ( se c r i ng ) ; 

n if  (Inewpub  ||  Inewsec)  f 
n n error  = PG PE R R_N0H EM ; 
n n goto  cleanup; 
n } 
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n /*  Generate  Randomness  */ 
n if  (!rng) 

n n rng  = pgpRandomCreateC); 

n /*  Need  to  ask  for  randomness  */ 

n entropy  = pg p S e c Key E n t r opy  (pkaLg,  keybits,  FALSE); 
n if  (subkalg) 

n n entropy  +=  pgpSecKeyEntropy  (subkalg,  keybits,  FALSE); 
n pgpTtyRandAccum  (ui_arg,  entropy); 

D 

n /*  Generate  the  SecKey  */ 

a seckey  = pg p S e c Key G e n e r a t e (pkalg,  keybits,  FALSE,  rng,  key g e n P r og r e s s , 
a n n n NULL,  Serror); 

a pgpRandomStir  (rng); 
a if  (Iseckey  SS  !error) 

a a error  = PG P E R R_N0M EM ; 

a if  (error) 

a a goto  cleanup; 


a /*  Need  to  lock  the  SecKey  */ 

a fprintf(stderr,  "\n\ 

You  need  a pass  phrase  to  protect  your  %s  private  key.\n\ 

Your  pass  phrase  can  be  any  sentence  or  phrase  and  may  have  many\n\ 
words,  spaces,  punctuation,  or  any  other  printable  c h a ra c t e r s . \ n " , 
a a (subkalg  ? "signature"  : "RSA")); 

a error  = setPassword  (env,  seckey,  ui_arg); 
a if  (error) 

a a goto  cleanup; 


n 


/*  Generate  the  keyring  objects 


*/ 


a keyspec  = pg pKey S pe c C r ea t e (env); 
a if  (Ikeyspec)  { 
a a error  = PG P E R R_NOH E M ; 
a a goto  cleanup ; 
a } 


a error  = r i ng C r e a t e Key pa i r (env,  seckey,  keyspec,  name,  namelen,  rng, 
a a n n newpub,  newsec); 

a if  (error) 
a a goto  cleanup; 

a /*  Make  subkey  if  requested  */ 

a if  (subkalg)  { 

an/*  Generate  the  subseckey  */ 

a a subseckey  = pg p S e c Key G e n e ra t e (subkalg,  keybits,  FALSE,  rng, 

° ° “ a keygenProgress,  NULL,  Serror); 

a a pgpRandomStir  (rng); 

a a if  (Isubseckey  8S  lerror) 

a a a error  = PG P E R R_N0M EM ; 

a a if  (error) 

a a a goto  cleanup; 


a a /*  Need  to  lock  the  encryption  SubSecKey  */ 
a a fprintf(stderr,  "\n\ 

You  also  need  a pass  phrase  to  protect  your  encryption 
Your  pass  phrase  can  be  any  sentence  or  phrase  and  may 


private  key.\n\ 
have  many\n\ 
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words,  spaces,  punctuation,  or  any  other  printable  c h a r a c t e r s . \ n ); 
error  = setPassword  (env,  subseckey,  ui_arg); 
if  (error) 
n goto  cleanup; 

error  = r i ng C r ea t e S u b key p a i r (env,  seckey,  subseckey,  keyspec, 
n n n rng,  newpub,  newsec); 

if  (error) 
n goto  cleanup; 

n /*  Freeze  the  sets  */ 
n r i ng S e t F r e e z e (newpub); 

n r i ng S e t F r e e z e (newsec); 

n /*  Write  out  newpub  and  newsec  */ 

n ma i n R i ng N e wS e t (sec,  PG P_ W R I T ET RU ST_S E C , newsec); 
n ma i n R i n g Ne wS e t (pub,  PG P_W R I T ET RU ST_PUB , newpub); 
n newsec  = newpub  = 0;n  /*  Don't  destroy  these  */ 


cleanup: 

if  (newpub) 

n ringSetDestroy  (newpub); 
if  (newsec) 

a ringSetDestroy  (newsec); 
if  (sec  key ) 

n pg pS e c Key D e s t r oy  (seckey); 
if  (subseckey) 

n pgpSecKeyDestroy  (subseckey); 
if  ( keyspec ) 

n pgpKeySpecDestroy  (keyspec); 
putc  ('\n',  stderr); 
if  (lerror) 
n fprintf  (stderr, 

"Keypair  created  successfully. \n\ 

Public  Key  written  to  %s\n\ 

Private  Key  written  to  %s\n",  pub,  sec), 


n return  error; 
} 


static  i nt 

doKeyDisable  (struct  PgpEnv  *env,  int  argc,  char  *argvCD, 
n struct  PgpTtyUI  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL; 
n struct  RingSet  *keys  = NULL; 

n char  const  *pub; 

n union  RingObject  *obj; 

#if  0 

n struct  Ringiterator  *iter; 

#e nd i f 

n int  disabled; 

n int  d one_ s ome t h i ng  = 0; 
n int  err; 

n (void)  ui_arg; 

n ma i n 0 p e n P u b S e c ( e n V , &pub,  &pubring,  NULL,  NULL,  stderr); 
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n if  (Ipubring)  { 

n n fprintf  (stderr,  "No  keys  in  pubringNn"); 
n n return  0; 
n > 

#if  0 

n se LectKeyArgs  (env,  argc,  argv,  pub,  pubring,  Skeys,  0); 
n ringSetFreeze  (keys); 

# e L s e 

n /*  Select  object  to  remove  */ 

a err  = s e L e c t R i ng Ob j e c t ( e n v , argc,  argv,  pub,  pubring,  R I N G T Y PE_ KE Y , 
° n “ "to  disable  or  enable",  stderr,  &obj); 

n keys  = pubring; 
n if(err<=0){ 
a n return  0; 

Q > 

a pgpAsse r t ( r i ngOb j ec t Type ( ob j ) ==  R I NGT Y P E_KE Y ) ; 

#endi f 


D 

n 

□ 

□ 

D 

□ 

□ 

□ 

n 

n 

n 

n 

n 

n 

□ 

n 

Q 

□ 

n 

n 

□ 

n 

D 

D 

a 

n 

n 

> 


disabled  = ringKeyDisabled  (keys,  obj); 
fprintf  (stderr,  "\n"); 
ringKeyPrint  (stderr,  keys,  obj,  1); 
fprintf  (stderr,  "\n"); 
if  (disabled)  ( 

fprintf  (stderr,  "Re-enable  this  key?  (y/N)  "); 
n if  ( pgpTtyGetBoo  I (0,  stderr))  { 
n ringKeyEnable  (pubring,  obj); 

n n d o n e_s ome t h i ng  = 1; 

n n fprintf  (stderr,  "\nKey  re-enabled. \n"); 

n } 

> 

else  { 

fprintf  (stderr,  "Disable  this  key?  (y/N)  "); 
n if  (pgpTtyGetBool  (0,  stderr))  ( 
n ringKeyDisable  (pubring,  obj); 

n a done_somet h i ng  = 1; 

n n fprintf  (stderr, "\nKey  disabled. \n"); 
n > 

} 

ringSetDestroy  (keys); 

/*  Uncomment  if  disabled  keys  cannot  participate  in  trust  computation 
if  ( done_ s ome t h i n g ) ( 

n re  I oadA I I Keys  (env,  0,  1);  C*  no  untrusted  keyrings  *D 

return  mainDoMaint  ((void  *)  ui_arg,  allkeys,  2,  allkeys); 

> 

*/ 

return  0; 


static  int 

doKeyCheck  (struct  PgpEnv  *env,  struct  Flags  *flags,  int  argc,  char  *argvC3, 
n struct  PgpTtyUI  *ui_arg) 

( 

n struct  RingSet  *pubring  = NULL; 

n struct  RingSet  *keys; 

n char  const  *pub; 

a (void)flags; 
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n tnainOpenPubSec(env,  &pub,  &pubring,  NULL,  NULL,  stderr); 
n if  (Ipubring)  { 

n n fprintf  (stderr,  "No  keys  in  pub r i n g \ n " ) ; 
n H return  0; 

n } 

n 

n re LoadAL LKeys  (env,  0,  1);  /*  no  untrusted  keyrings  */ 

n fprintf  (stderr,  "\n"); 
a if(argc>0){ 

n a s e L e c t Key A r gs  (env,  argc,  argv,  pub, 

a a a a pubring,  &keys,  0); 

a a ringSetFreeze  (keys); 

a a ringTtyKeyView  ((void  *)  ui_arg,  keys,  aLLkeys,  NULL,  3); 
a a ringSetDestroy  (keys); 

a } e L s e { 

a a int  err  = ma i n DoHa i n t ((void  *)  ui_arg,  aLLkeys,  2,  NULL); 
a a if(err<0){ 

a a a r i n g S e t D e s t r oy ( p u b r i n g ) ; 
a a a returnerr; 

a a } 

a a ringTtyKeyView  ((void  *)  ui_arg,  aLLkeys,  aLLkeys,  NULL,  4); 
a } 

a ringSetDestroy(pubring); 
a return  0; 

} 


static  int 

doKeyList  (struct  PgpEnv  *env,  struct  FLags  *fLags,  int  argc,  char  *argvCD, 
a struct  PgpTtyUI  *ui_arg) 

{ 

/*  struct  RingSet  *pubring  = NULL;  */ 
a struct  RingSet  *keys; 
a char  const  *pub  = NULL; 
a int  Li st_mode  = 0; 

a /*B  ma i nOpe n Pu b S e c ( en V , &pub,  &pubring,  NULL,  NULL,  stderr);  */ 
a LoadALLKeys  (env,  0,  0); 

a s e L e c t Key A r g s (env,  argc,  argv,  pub,  aLLkeys,  &keys,  1); 

a /*a  ringSetDestroy(pubring);  */ 
a ringSetFreeze  (keys); 

a if  (fLags->argc  > 0 &&  f L a g s->a r g s C 0 D ==  'L') 
a List_mode  = 2;  /*  verbose  */ 

a fprintf  (stderr,  "\n"); 

a ringTtyKeyView  ((void  *)  ui_arg,  keys,  aLLkeys,  NULL,  List_mode); 

a ringSetDestroy  (keys); 
a return  0; 

> 

/* 

* Give  the  user  an  opportunity  to  edit  the  trust  of  object  obj. 

* Return  1 if  he  changes  it,  0 if  he  does  not. 

* firsttime  means  that  we  have  not  previousLy  had  a trust  vaLue  for 

* this  key,  which  changes  the  wording  of  the  questions  somewhat. 

* If  PGPTRUSTMODEL  is  0,  obj  shouLd  be  a key,  eLse  it  shouLd  be  a name. 
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* The  key  and/or  name  should  have  been  printed  just  before  this  routine 

* is  called. 

*/ 

static  int 

doKeyEdi tTrust (uni  on  RingObject  *obj,  struct  RingSet  *set,  int  firsttime, 
n FILE  *log) 

{ 

n byte  keytrust; 
n word16  oldtrust; 
n unsigned  long  confvalue; 

n unsigned  long  trustcode; 

n int  len; 

n PgpTrustModel  pgptrustmodel; 

n char  bufC8];n  a /*  enough  for  7 digit  response  */ 

n if  (firsttime)  { 
n n fprintf  (log, 

"Do  you  want  to  change  your  estimate  of  this  key  owner's  r e I i a b i I i t y \ n " \ 

"as  an  introducer  of  other  keys  (y/N)?  "); 

° n if  ( ! pgpTtyGetBoo I ( 0,  log))  { 
n n n fprintf  (log, 

"No  changes  made.Xn"); 
a a a returnO; 

a a } 

n a fprintf  (log, 

"\n"\ 

"Make  a determination  in  your  own  mind  whether  this  key  actually\n"\ 
"belongs  to  the  person  whom  you  think  it  belongs  to,  based  on  available\n"\ 
"evidence.  If  you  think  it  does,  then  based  on  your  estimate  of\n"\ 

"that  person's  integrity  and  competence  in  key  management,  answer\n"\ 

"the  following  question:\n"); 
a } 

n pgptrustmodel  = pgpTrustHodel(ringpool); 
a if  (pgptrustmodel  ==  PGPTRUST0)  { 
n a fprintf  (log, 

"\nWould  you  trust  this  key  owner\n"\ 

"to  act  as  an  introducer  and  certify  other  people's  public  keys  to  you?\n"\ 
"(1=1  don't  know.  2=No.  3=Usually.  4=Yes,  always.)  ? "); 


□ 

a 

len  = pgpTt y Ge t S t r i ng  (buf. 

2,  log); 

n 

B 

if  (lien)  { 

n 

B 

n fprintf  (log. 

Q 

"No 

changes  made.Xn"); 

□ 

n 

n return  0; 

n 

B 

I 

n 

B 

trustcode  = atoi(buf); 

n 

B 

switch  (trustcode)  ( 

Q 

B 

case  1 : 

n 

n 

a keytrust  = PG P_KE YT R U S T_ 

UNKNOWN; 

n 

n 

n break; 

n 

n 

case  2 : 

Q 

n 

n keytrust  = PG P_KE YT RU S T_ 

NEVER; 

□ 

Q 

a break; 

n 

s 

case  3 : 

n 

B 

a keytrust  = PGP_KE YTRUST_ 

MARGINAL; 

a 

B 

a break; 

n 

B 

case  4 : 

B 

B 

a keytrust  = PG P_KE YT R U S T_ 

COMPLETE; 
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n a a break; 

n n default: 
n n n fprintf  (Log, 

n "Unrecognized  response. \n"); 
n n n fprintf  (Log, 

n "No  changes  made.Nn"); 
n n n return0; 

n n } n 

n n r i ng Key S e t T r u s t ( s e t , obj,  keytrust); 


n > 

else  {n 

Q □ 

B B / * N e w 

trust  model 

*/ 

n n 

fprintf 

(Log, 

"XnDescribe  the 

confidence  you  have  in 

this  person 

a s 

"What 

are  the  odds  that 

this  key  owne  r 

is  going  to 

be 

introducer. \n"\ 
ong  about\n"\ 

"a  key  which  he  has  signed  as  an  introducer?\n"); 
n n if  (Ifirsttime)  { 

B n n oLdtrust  = r i ng Na me C on f i d e n c e (set,  obj); 

B B n if  (oLdtrust==PGP_TRUST_INFINITE) 

B B B B fprintf  (log, 

"(Currently  he  is  Listed  as  having  essentially  zero  chance"  \ 

" of  being  wrong. )\n"); 

B B B else  if  ( o L d t r u s t ==0 ) 

B B B B fprintf  (Log, 

"(Currently  he  is  Listed  as  not  having  any  confidence  as  an  introducer. )\n"); 


oLdtrust-PGP  TRUST_DECADE-PGP_TRUST_OCTAVE; 


D 

B 

B 

else  ( 

n 

B 

B 

n int  d = oLdtrust 

B 

B 

B 

n int  i ; 

B 

B 

B 

n unsigned  Long  L; 

B 

B 

B 

n fprintf  (Log, 

B 

B 

B 

if  (d  < 0) 

B 

B 

B 

n d = 0 ; 

B 

B 

B 

d -=  d % PGP_TRUST 

_DECADE; 

B 

B 

B 

i = d / PGP_TRUST_ 

DECADE; 

B 

B 

B 

L = r i ngT r u s t To  I n t ( o L d t r u s t - d); 

B 

B 

B 

if  (i  ) 

B 

B 

B 

n fprintf(Log,  " 

%Lu%0*u",  L,  i,  0); 

B 

B 

B 

else 

B 

fl 

B 

n fprintf(Log,  " 

%Lu",  L); 

B 

B 

B 

fprintf  (Log, 

B 

B 

B 

n n "chance 

of  being  wrong. )\n"); 

B 

B 

> 

B 

> 

B 

fprintf 

(Log, 

"(Currently  he  is  Listed  as  having  a one  in 

B 
B 
B 
B 
B 


"Enter  a number  from  1 to  2 million"); 

B B if  (Ifirsttime) 

B B B fprintf  (Log, 

",  or  hit  return  to  Leave  unchanged."); 
n B fprintf  (Log, 

"\nHe  will  be  wrong  one  time  in:  "); 

n B Len  = pg pT t y G e t S t r i n g (buf,  sizeof(buf).  Log); 
B B if  (!Len)  { 

B B B fprintf  (Log, 

"No  changes  made.Xn"); 

B B B return0; 

B B } 

n B trustcode  = strtouL(buf,  NULL,  0); 

B B confvaLue  = r i ng I n t T oT r u s t ( t r u s t c od e ) ; 

B B r i n g Na me S e t C on f i d e n c e ( s e t , obj,  confvaLue); 


CCCHK:4e6b8796f7Ac9afb3aaaed2632c9259f9d8690797a2a155db06390bc4ff2127b2]] 


Pretty  Good  Privacy  5.0^"  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2215 


pgpkc 


n > 

n return  1;h  n /*  made  a change  */ 

> 


/*  Helper  routine  for  doKeyEdit,  when  the  key  being  edited  is  someone  else's  */ 
static  i nt 

doKey Ed i t 0 t he r s ( s t r u c t PgpEnv  *env,  struct  Flags  *flags,  union  RingObject  *obj, 
n n const  char  *pub,  struct  RingSet  *pubring,  const  char  *sec, 

n a struct  RingSet  *secring,  struct  PgpTtylll  *ui_arg) 

{ 

n struct  RingSet  *tring; 
n union  RingObject  *name; 

° int  err; 

a PgpTrustMode I pg p t r u s t mod e I ; 

a (void)  flags; 

o (void)  pub; 

n (void)  sec; 

a (void)  secring; 


a pgptrustmodel  = pgpTrustHodel(ringpool); 
a if  (pgptrustmodel  ==  PGPTRUST0)  C 

a a err  = d oKe y E d i t T r u s t ( o b j , pubring,  0,  stderr); 
a > e I s e { 

a a /*  New  trust  model  works  on  a per  user  ID  basis.  Must  select  one.  */ 

a a tring  = r i n g S e t C r e a t e ( r i n g poo  I ) ; 

a a if  (Itring)  { 

nan  return  r i n g Poo  I E r r o r ( r i n g poo  I ) ->e r r o r ; 
n n } 

a a ringSetAddHierarchy(tring,  pubring,  obj); 
a a ringSetFreeze(tring); 

a a err  = selectChildObject(env,  tring,  RINGTYPE_NAME,  "to  edit",  stderr, 
a a n n n Sname); 

a a r i ng S e t D e s t r oy ( t r i n g ) ; 

a a if(err<0) 

a a n returnerr; 


a a fprintf  (stderr,  "\n"); 

a a ui_arg->fp  = stderr; 

a a ringTtyShowKey(ui_arg,  obj,  pubring,  0); 

a a ringObjectRelease(obj); 


a a err  = do  Key Ed i t T r u s t ( n a me , pubring,  0,  stderr); 
a } 

a if  (err<0) 
a a return  err; 
a if(err==0) 

a a return  0;a  /*  No  changes  made  */ 

a fprintf  (stderr, 

"Public  keyring  updated. \n"); 


a reloadAllKeys  (env,  0,  1); 

a err  = mainDoHaint  ((void  *)  ui_arg,  allkeys,  0,  NULL); 
a r i ng S e t D e s t r oy ( pu b r i n g ) ; 
a ringSetDestroy(secring); 
a return  err; 
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> 

/* 

* Helper  routine  for  doKey E d i t S e L f , to  change  a pass  phrase. 

* If  parent  is  non-NULL,  it  is  a subkey  pass  phrase. 

* secobj  is  the  object  getting  its  pass  phrase  changed,  with  seckey 

* having  been  made  from  it. 

*/ 

static  int 

doKeyChangePassphraseCstruct  PgpEnv  *env,  struct  PgpTtyUI  *ui_arg, 
a struct  RingSet  *set,  struct  PgpSecKey  *seckey, 
n union  RingObject  *secobj,  union  RingObject  *parent) 
f 

n word32  validity; 
n union  RingObject  *newsecobj; 
n struct  PgpKeySpec  *keyspec  = NULL; 
n PgpVersion  version; 
n int  err; 

n fprintf  (stderr,  "\n"); 
n if  (!rng) 

n n rng  = pg p Ra nd omC r ea t e (); 
n err  = setPassword  (env,  seckey,  ui_arg); 
n if  (err<0) 
n a return  err; 

n keyspec  = pg pKey S pe c C r e a t e (env); 
n if  (Ikeyspec) 
n n return  PG P E R R_NOH EH ; 

n /*  We  need  to  make  this  keyspec  just  like  the  existing  one  */ 
n /*  XXX  This  could  be  put  into  the  ABI  */ 
n pg pKey S pe c S e t C r e a t i on ( key s pe c , 

n n n r i n g Key C r e a t i on ( a I I key s , secobj)); 

n /*  Fix  "version  bug",  don't  change  version  from  earlier  one.  */ 
n version  = r i ng S e cVe r s i on ( a I I k ey s , secobj); 
n pgpKeySpecSetVersionCkeyspec,  version); 
n validity  = ringKeyExpirationCallkeys,  secobj); 
n if  (validity  !=  0)  { 

n n validity  -=  r i ng Key C r ea t i on ( a I I key s , secobj); 

n n validity  /=  3600*24; 

n > 

n pgpKeySpecSetValidity(keyspec,  validity); 

n newsecobj  = r i ng C r e a t e S e c (set,  parent,  seckey,  keyspec, 
n n n n s e c key->p k A I g ) ; 

n pgpKeySpecDestroy(keyspec); 
n if  (!newsecobj) 

n n return  r i n g S e t E r r o r ( s e t ) ->e r r o r ; 
n return  0; 

} 


/*  Helper  routine  for  doKeyEdit,  when  the  key  being  edited  belongs  to  us  */ 
static  int 

doKey Edi t Se  I f ( s t rue t PgpEnv  *env,  struct  Flags  *flags,  union  RingObject  *obj, 
n const  char  *pub,  struct  RingSet  *pubring,  const  char  *sec, 

n struct  RingSet  *secring,  struct  PgpTtyUI  *ui_arg) 

{ 

n union  RingObject  *subobj; 
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struct  RingSet  *p ub s e t =N U L L,  * s e c s e t =N U LL; 
struct  PgpSigSpec  *sigspec  = NULL; 
struct  PgpSecKey  *seckey  = NULL,  *subkey  = NULL; 
int  n eed w r i t e s e c =0 , n e ed w r i t e p u b=0 ; 
int  err  = 0; 


o 

n 

a 

n 

n 

Q 

□ 

n 

n 


( VO i d ) f L a g s ; n n /*  make  the  compiler  happy  */ 

L oa d A L L Key s ( en V,  1,  0); 

pub  = pgpenvGetString  (env,  PG P E N V_ PU B R I N G , NULL,  NULL); 
if  ( ! pub ) { 
n fprintf  (stderr, 

B B "Unknown  pubring  file,  assuming  \" pubring. pkr\"\n"); 
n pub  = " pubring. pkr"; 

> 

pubring  = mainOpenRingfile  (env,  ringpool,  pub,  "public",  1); 


/*  Create  copies  of  pub  and  secret  sets  */ 
secset  = ringSetCreate  (ringpool); 
pubset  = ringSetCreate  (ringpool); 
if  (Isecset  ||  Ipubset)  { 

n err  = ringPoolError(ringpool)->error; 
a goto  cleanup; 

> 

r i ng S e t Add S e t ( s e c s e t , secring); 
r i ng S e t Ad d S e t ( pub s e t , pubring); 


a seckey  = r i n g S e c S e c Key ( a I I key s , obj,  0); 
n ui_arg->ringset  = allkeys; 

n err  = pgpTtyUn I oc kSec key  (ui_arg,  obj,  seckey, 

"\nYou  need  a pass  phrase  to  unlock  your  private  key.\n"); 
n if  (err<0) 

D n goto  cleanup; 

o if  ( ! r i ngKeyAx i oma t i c ( a I I key s , obj))  { 
n n fprintf  (stderr, 

"\nUse  this  key  as  an  ultimately-trusted  introducer  (y/N)?  "); 
n n if  ( pgpT t yGe t Boo  I (0,  stderr))  { 

B n n ringKeySetAxiomatic  (allkeys,  obj); 

B n n fprintf  (stderr, 

"\nKey  has  been  marked  as  having  ultimate  confidence. \n"); 

B n n needwritepub  = 1; 

n n > 

n } 

n fprintf  (stderr, 

"\nDo  you  want  to  add  a new  user  ID  (y/N)?  "); 
n if  ( pgpTtyGetBoo I (0,  stderr))  { 
n n union  RingObject  *nameobj; 

n n char  na me bu f C 2 5 6 D ; 

n n int  namelen; 

n n fprintf  (stderr, 

"Enter  the  new  user  ID:  "); 

n n namelen  = pgpTtyGetString  (namebuf,  sizeof  (namebuf),  stderr); 
n n if  (! namelen)  { 

B n n fprintf  (stderr, 

"No  name  entered. \n"); 
n n n goto  cleanup; 
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n n 

} 

n n 

nameobj  = r i n g C r ea t e Na me  (secset,  obj,  namebuf,  namelen); 

a Q 

if  (Inameobj)  ( 

n n 

n err  = r i n g S e t E r r o r ( s e c s e t ) ->e r r o r ; 

n a 

n goto  cleanup; 

a Q 

} 

n a 

ringSetAddObject(pubset,  nameobj); 

n n 

/*  Setting  key  axiomatic  sets  name  trust  as  well  */ 

□ n 

ringKeySetAxiomatic(pubset,  obj); 

B n 

fprintf  (stderr. 

Make  this  user  ID  the  primary  user  ID  for  this  key  (y/N)?  "); 


B B 

if  ( pg pT t y G e t Boo L ( 0 , stderr))  { 

B B 

n r i ng Ra i s e Na me ( s e c s e t , nameobj); 

B B 

n r i ng R a i s eName ( pu b s e t , nameobj); 

B B 

> 

B B 

sigspec  = pg pS i gSpe c C r ea t e (env,  seckey. 

B B 

n n n PG P_S I GT Y P E_KE Y_G E N E R I C ) ; 

B B 

if  ( ! rng  ) 

B B 

n rng  = pg p Ra ndomC r e a t e ( ) ; 

B B 

if  (Isigspec  ||  !rng)  { 

B B 

n err  = PGPERR_NOMEM; 

B B 

n goto  cleanup; 

B B 

> 

B B 

err  = r i ng S i g nOb j e c t (pubset,  nameobj,  sigspec,  rng); 

B B 

pgpSigSpecDestroy(sigspec); 

B B 

sigspec  = NULL; 

B B 

if  (err  < 0) 

B B 

n goto  cleanup; 

B B 

B > 

needwritesec  = needwritepub  = 1; 

n subobj  = r i ng Key S u b key ( a L L key s , obj); 
n if  (subobj) 

n n fprintf  (stderr, 

"NnDo  you  want  to  change  your  signature  key  pass  phrase  (y/N)? 
n else 

n n fprintf  (stderr, 

"\nDo  you  want  to  change  your  pass  phrase  (y/N)?  "); 
n if  ( pgpTtyGetBoo L ( 0,  stderr))  ( 


B B 

err  = doKey C ha ng e Pa s s p h r a s e ( en v , ui_arg,  secset. 

B B 

n n n seckey,  obj,  NULL); 

B B 

if  (err  < 0) 

B B 

n goto  cleanup; 

B B 

B } 

needwritesec  = 1; 

B 

B 1 f 

(subobj  SS  r i ngKey I s Sec ( s e c s e t , subobj))  { 

B B 

fprintf  (stderr. 

"\nDo  you  want  to  change  your  encryption  key  pass  phrase  (y/N)?  "); 
n n if  ( pg pT t y Ge t Boo L ( 0 , stderr))  { 


B B 

n subkey  = r i ng S e c S e c Key ( a 1 1 key s , subobj,  0); 

B B 

n pgp As s e r t ( subkey ) ; 

B B 

n err  = pg pT t y Un 1 o c k S e c key  (ui_arg,  obj,  subkey. 

" \ n You 

need  a pass  phrase  to  unlock  your  private  encryption  key.Xn"); 

B B 

n if  (err<0) 

B B 

n n goto  cleanup; 
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□ n 

n D 

□ □ 

Q □ 

□ n 

□ □ 

n > 


n err  = do  Key C h a n g e Pa s s p h r a s e ( e n v , ui_arg,  secset, 
n a n a subkey,  subobj,  obj); 

n if(err<0) 
n n goto  cleanup; 

n needwritesec  = 1; 

> 


n /*  Write  out  new  results  */ 

n if  (needwritesec)  { 

n n r i ng S e t F r e e z e (secset); 

n a mainRingNewSet  (sec,  PGP_WRITETRUST_SEC,  secset); 

° n secset  = 0;n/*  Don't  destroy  this  */ 

n H fprintf  (stderr, 

"Private  keyring  updated. \n"); 
n > 


□ 

i f 

(needwritepub)  { 

a 

n 

ringSetFreeze  (pubset); 

n 

n 

mainRingNewSet  (pub,  PG P_ W R I T ET RU S T_ PUB, 

a 

n 

pubset  = 0;n/*  Don't  destroy  this  */ 

n 

n 

fprintf  (stderr. 

Public 

keyring  updated. \n"); 

□ 

> 

cleanup 

: 

n 

i f 

(seckey) 

□ 

n 

pgpSecKeyDestroy(seckey); 

□ 

i f 

(subkey) 

a 

Q 

pgpSecKeyDestroy( subkey); 

a 

i f 

(pubset ) 

o 

n 

ringSetDestroy(pubset); 

a 

i f 

(secset) 

□ 

n 

ringSetDestroy(secset); 

u 

i f 

(pubring) 

n 

n 

ringSetDestroy(pubring); 

a 

i f 

(secring) 

n 

n 

ringSetDestroy(secring)  ; 

n return  err; 
> 


pubset); 


static  int 

doKeyEdit  (struct  PgpEnv  *env,  struct  Flags  *flags,  int  argc,  char  *argvCIl, 
n struct  PgpTtylll  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL,  *secring  = NULL; 
n union  RingObject  *obj; 

o char  const  *pub,  *sec; 

n char  const  *prep  = "to  edit"; 

n int  err; 

n ( VO i d ) f I a g s ; n n /*  make  the  compiler  happy  */ 
n mainOpenPubSeclenv,  &pub,  Spubring,  &sec,  Ssecring,  stderr); 
n if  (Ipubring  |{  !secring)  { 

n n fprintf  (stderr,  "No  keys  in  pubring  or  secring\n"); 
a a return  0; 
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n } 

n LoadALLKeys(env,  1,  0); 

Q 

n /*  Select  object  to  sign  */ 

n err  = s e L e c t R i n g 0 b j e c t ( e n v , argc,  argv,  pub,  pubring,  R I N GT Y PE_KE Y , 
n n n prep,stderr,&obj); 

n if  (err  <=  0) 

n n return  err; 

a fprintf  (stderr,  "\n"); 

n ringKeyPrint  (stderr,  pubring,  obj,  1); 
n fprintf  (stderr,  "\n"); 

n if  ( r i ng Key  I s S e c ( a L L key s , obj)) 

n n return  d oKey Ed i t S e L f ( e n v , flags,  obj,  pub,  pubring, 
n n n n sec,  secring,  ui_arg); 

n else 

n n return  doKe y E d i t 0 t h e r s ( e n v , flags,  obj,  pub,  pubring, 
n n n n sec,  secring,  ui_arg); 

> 


/* 

* This  handles  key,  user  ID  (with  -ru),  or  signature  (with  -rs)  removal. 

*/ 

static  int 

doKeyRemove  (struct  PgpEnv  *env,  struct  Flags  *flags,  int  argc,  char  *argvC], 
n struct  PgpTtyUI  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL; 

n struct  RingSet  *secring  = NULL; 

n struct  RingSet  *keyfile  = NULL,  *seckeyfile  = NULL; 

a union  RingObject  *obj; 

n char  const  *pub,  *sec; 

n int  numseckeys  = 0; 

n int  err=0; 

n int  removelevel; 

n const  char  *prep  = "to  be  removed"; 

n const  char  *typename; 
n int  removed  = 0; 

n /*  Distinguish  what  we  are  to  remove  */ 
n if  (flags->argc  8&  s t r c h r ( f I a g s->a r g s , 's'))  ( 

n n removelevel  = R I NGT Y P E_S I G ; /*  signature  */ 

n n typename  = "signature"; 

n } else  if  (flags->argc  &&  s t r c h r ( f I a g s ->a r g s , 'u'))  f 
a n removelevel  = R I NGT YP E_N AM E ; /*  user  id  */ 

n n typename  = "user  ID"; 

n > e I se  { 

n n removelevel  = R I NGT Y P E_KE Y ; /*  key  */ 
n n typename  = "key"; 

n } 

n /*  Open  pub  and  sec  key  rings  */ 

n ma i nOpen PubSe c ( en V,  Spub,  Spubring,  &sec,  Ssecring,  stderr); 
n if  (Ipubring)  { 

a Q fprintf  (stderr, 
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"No  keys  in  pubring\n"); 
n n goto  cleanup; 

n } 

n LoadALLKeysCenv,  1,  0); 

n /*  Select  object  to  remove  */ 
n fprintf  (stderr,  "\n"); 

n err  = s e I e c t R i ng Ob j e c t ( e n v,  argc,  argv,  pub,  pubring,  removelevel, 

° ° prep,  stderr,  &obj); 

a if(err<=0) 
n n goto  cleanup; 

n /*  err  holds  number  of  possible  objects  at  that  level  */ 

n if  (removelevel  ==  R I N GT Y P E_N AM E &&  err  ==  1)  { 

n n err=0; 

a a fprintf  (stderr, 

"Selected  key  has  only  one  user  ID,  can't  be  selected  %s\n",  prep); 
n n goto  cleanup; 

n } 

n /*  Confirm  removal  */ 
n fprintf(stderr, 

"\nThe  following  %s  has  been  selected  %s:\n",  typename,  prep); 
n objPrint(env,  obj,  stderr,  NULL); 

n /*  See  if  key  is  on  private  ring  too  */ 

n numseckeys  = secring  ? r i ng S e 1 1 s M emb e r ( s e c r i ng  , obj)  : 0; 

n if  (numseckeys)  { 
n n f p r i n t f ( s t d e r r , 

"\nThis  %s  is  also  present  in  the  private  keyring. \n",  typename); 
n n f p r i n t f ( s t d e r r , 

"Removing  it  will  remove  it  from  both  the  public  and  private  keyrings. \n"\ 
"Do  you  want  to  remove  it  from  both  keyrings  (y/N)?  "); 
n } e I s e { 

n n fprintf  (stderr, 

"\nAre  you  sure  you  want  this  %s  %s  (y/N)?  ",  typename,  prep); 
n } 

n if  ( ! pgpT t yGe t Boo  I ( 0,  stderr))  { 
n n fprintf  (stderr, 

"Removal  cancelled. \n"); 
n n err=0; 

n n goto  cleanup; 

n } 

o fprintf  (stderr,  "\n"); 

n /*  Perform  removal,  but  don't  write  back  yet  */ 
n keyfile  = r i ng S e t C r ea t e (ringpool); 
n i f ( ! key f i I e ) { 

n a err  = r i ng Poo  I E r r o r ( r i ng poo  I ) ->e r r o r ; 

n n goto  cleanup; 

n > 

n err  = r i n g S e t Add S e t ( key f i I e , pubring); 
n if(err<0) 
n n goto  c leanup; 

n err  = r i n g S e t RemOb j e c t ( key f i I e , obj); 
n if  (err<0) 
n n goto  cleanup; 

n ringSetFreeze  (keyfile); 
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removed  = 1; 


if  (numseckeys)  { 

a /*  Remove  from  private  key  ring,  don't  write  back  yet  */ 
n seckeyfiLe  = r i ngSe t C r ea t e (ringpooL); 
n if  (!seckeyfiLe)  { 

n n err  = r i ng Poo L E r r o r ( r i n g poo L ) ->e r r o r ; 
n D goto  cleanup; 

n > 

n err  = ringSetAddSetCseckeyfile,  secring); 
n if(err<0) 

B B goto  cleanup; 

B err  = ringSetRemObjectCseckeyfile,  obj); 

B if(err<0) 

B B goto  cleanup; 

B ringSetFreeze  (seckeyfile); 

> 

ri ngObjectRe leaselobj ); 


/*  Write  out  results  */ 

ma i n R i ng N eu S e t (pub,  PGP_WRITETRUST_PUB,  keyfile); 
keyfile  = NULL;bb  /*  Don't  destroy  this  */ 
if  (err<0)  ( 

B fprintf  (stderr, 

"Error  - unable  to  update  key  file!\n"); 

B B goto  cleanup; 

B } 

B if  (numseckeys)  { 

B B ma i n R i ng N e w S e t (sec,  PG P_ W R IT ET RU ST_S E C , seckeyfile); 
B B seckeyfile  = NULL;b  /*  Don't  destroy  this  */ 

B B if(err<0){ 

B B B fprintf  (stderr, 

"Error  - unable  to  update  private  key  file!\n"); 


n 

a 

B goto  cleanup; 

n 

o 

} 

n 

> 

n 

/* 

success  */ 

n 

err 

= 0; 

cleanup 

: 

n 

if 

(sec  key f i 1 e ) 

Q 

D 

ringSetDestroy(seckeyfi le); 

n 

i f 

(keyfi le) 

n 

n 

ringSetDestroy(keyfi le); 

n 

i f 

(pubring) 

n 

n 

ringSetDestroy(pubring); 

n 

if 

(secring) 

a 

n 

ringSetDestroy(secring); 

a 

/* 

If  no  error  and  something  was  removed,  do  a maintenance 

pass  . 

a 

This  causes  the  (new)  public  keyring  to  be  reopened  and 

re-read. 

a 

but  gives  us  the  correct  community  of  keys  to  be  validated.  */ 

a 

if 

(err  ==  0 &&  removed)  ( 

□ 

o 

/*  Close  and  write  out  current  keyrings  before  reopening 

*/ 

n 

n 

ringSetDestroy(allkeys); 

a 

o 

allkeys  = 0; 

a 

Q 

ma i n C 1 0 s e Key r i ng s ( 1 /*update*/,  1 / *n e w ve r s * / ) ; 
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□ □ 

n n reloadAlLKeys  (env,  0,  1); 

n n err  = mainDoHaint  ((void  *)  ui_arg,  alLkeys,  0,  NULL); 

° a fprintf  (stderr, 

"This  %s  has  now  been  removed  from  the  public  key  ring.Xn",  typename); 
n n if  (numseckeys)  { 

° H n fprintf  (stderr, 

"This  %s  has  also  been  removed  from  the  private  key  ring.Xn",  typename); 
n n } 

n > 

o return  err; 

} 


/* 

* Issue  a signature  on  a userlD. 

*/ 

static  int 

doKeySign  (struct  PgpEnv  *env,  struct  Flags  *flags,  int  argc,  char  *argv[!!l, 
n struct  PgpTtyUI  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL; 
n struct  RingSet  *newpub  = NULL; 

n struct  RingSet  *tmpring; 

n struct  Ringiterator  *iter; 

n struct  PgpSigSpec  *sigspec  = NULL; 

n struct  PgpSecKey  *secretKey  = NULL; 

B union  RingObject  *obj=NULL,  *ringobj  = NULL; 

B char  const  *pub; 

B int  level; 

B int  err; 

B const  char  *prep  = "to  be  signed"; 

B byte  key i dC8T; 

B byte  pkalg; 

B int  sigtype  = PGP_SIGTYPE_KEY_GENERIC; 

B char  const  *myname  = pg pe n vG e t S t r i ng  (env,  PGPENV_M YNAME, 

B B n n n n NULL, NULL); 

B (void)flags; 

B /*  Open  pub  key  ring  */ 

B ma i nOpen Pubs e c ( en V,  Spub,  Spubring,  NULL,  NULL,  stderr); 

B if  (!pubring)  { 

B B fprintf  (stderr, 

"No  keys  in  pubringXn"); 

B B return  0; 

B } 

B loadAllKeys(env,  1,  0); 

B /*  Find  secret  key,  make  sure  it  signs  */ 

B ringobj  = r i ng La t e s t S e c r e t (allkeys,  myname,  time(NULL), 

B B n n PGP_PKUSE_SIGN) ; 

B if  (Iringobj)  { 

B B fprintf  (stderr, 

"Cannot  find  private  key  suitable  for  signing:  %s\n",  myname); 

B B r i n g S e t De s t r oy ( pu b r i ng  ) ; 

B B return0; 

B } 

B secretKey  = ringSecSecKey  (allkeys,  ringobj,  PGP_PKUSE_SIGN); 
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Q 

□ 

n 

□ 

D 

n 

Q 

n 

□ 

a 

Q 

D 

□ 


if  ClsecretKey)  { 

n fprintf  (stderr,  "Cannot  convert  to  private  key\n"); 
n r i ngSe t De s t r oy ( pub r i ng  ) ; 

n return  0; 

> 

if  ( ! secretKey->si gn)  { 

n fprintf  Cstderr,  "Private  Key  is  not  a signature  key\n"); 
n ringSetDestroy(pubring); 
a return  0; 

> 

/*  Data  to  check  for  duplicate  sigs  below  */ 
memc py ( key i d , s e c r e t Key-> key  I D , s i z e o f ( key i d ) ) ; 
pkalg  = secretKey->pkAlg; 


n /*  Select  object  to  sign  */ 

n err  = s e I e c t R i ng Ob j e c t ( e n v , argc,  argv,  pub,  pubring,  R I N GT Y PE_N AM E , 
n n D prep,  stderr,  Sobj); 

n if  (err  <=  0) 

n n return  err; 


n 

□ 

n 

n 

n 

n 

D 

□ 

D 

□ 

□ 

□ 

Q 

n 

D 

n 

n 

□ 

□ 

D 

n 


/*  Make  sure  it  doesn't  already  have  a sig  on  it  from  this  key  */ 

iter  = ringlterCreate(pubring); 

level  = ri ngIterSeekToC i ter,  obj); 

if  (level  < 0)  { 

n r i ng S e t D e s t r oy ( pub r i ng  ) ; 

n return  level; 

> 

++  I e ve  I ; 

while  ( r i n g I t e r N e X t Ob j e c t ( i t e r , level)  > 0)  { 
n 
□ 
n 
□ 
n 
□ 
o 

Q 
□ 
n 
n 
n 


'sig 


ringIterCurrentObject(iter,  level); 
!=  RINGTYPE_SIG) 

&sigpkalg,  sigid); 


byte  sigidCSD; 
byte  sigpkalg; 
union  RingObject  * 
pgpAssert(sig); 
if  ( r i ngOb j e c t Type ( s i g ) 
n continue; 
r i ngS i g I D8 ( pub r i ng , sig 
if  ( s i gp ka I g = = p ka  I g 88 

memcmp ( s i g i d,  keyid,  s i z e o f ( s i g i d ) ) ==0  88 
r i ngS i gType ( pubr i ng,  sig)  ==  sigtype)  { 

D /*  Duplicate  */ 
n fprintf  (stderr, 

"User  ID  is  already  signed  by  your  private  key\n"); 
n n n r i n g 1 1 e r D e s t r oy ( i t e r ) ; 

1 r i ng S e t De s t roy ( pub r i ng  ) ; 

I return  0; 


a n n 

n n n 

n n > 

n } 

n r i ng 1 1 e r D e s t r oy ( i t e r ) ; 


n /*  Confirm  signature  */ 
n ob j P r i n t ( e n V , obj,  stderr,  NULL); 
n fprintf(stderr, 

" \ n \ n " \ 

"READ  CAREFULLY:  Based  on  your  own  direct  first-hand  knowledge,  are\n"\ 
"you  absolutely  certain  that  you  are  prepared  to  solemnly  certify  that\n"\ 
"the  above  public  key  actually  belongs  to  the  user  specified  by  the\n"\ 
"above  user  ID  (y/N)?  "); 
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a if  ( ! pg pT t y Ge t Boo L ( 0,  stderr))  { 
n a fprintf  (stderr, 

"Key  sign  operation  cancelled. \n"); 
n n ringSetDestroy(pubring); 

n n return  0; 

n > 

n ui_arg->ringset  = allkeys; 

n err  = pgpTtyUnlockSeckey  (ui_arg,  ringobj,  secretKey, 

"\nYou  need  a pass  phrase  to  unlock  your  private  key.\n"); 
n ringObjectRelease  (ringobj); 
a if  (err)  { 

n n fprintf  (stderr,  "Cannot  unlock  private  key\n"); 

n n r i n g S e t D e s t r oy ( p u b r i n g ) ; 

n n return  0; 

n > 

n 

Q 

n /*  Actually  do  the  signature  */ 

a sigspec  = pgpSigSpecCreate  (env,  secretKey,  sigtype); 
n if  (Isigspec)  { 
n n ringSetDestroy(pubring); 

n n return  PGPERR_NOMEn; 

n } 

n newpub  = ringSetCreate  (ringpool); 
n i f ( ! newpub  ) ( 

n n pgpS  i g Spe c De s t r oy ( s i g s pe c ) ; 
n n r i ng S e t De s t r oy ( pub r i ng  ) ; 

n n return  PGPERR_NOHEM; 

n } 

n ringSetAddSet  (newpub,  pubring); 

B ringSetDestroy(pubring); 

n pubring  = NULL; 

B if  (!rng) 

n n rng  = pgpRandomCreate  (); 

n err  = r i ng S i g n Ob j e c t (newpub,  obj,  sigspec,  rng); 

B pgpS i gSpe c Des t r oy ( s i g spe c ) ; 
n r i ng Set F ree ze ( newpub ) ; 

n if  (err<0) 

n n return  err; 

n /*  Do  maintenance  pass  */ 

n fprintf  (stderr,  "\n"); 

n re  I oadA I I Keys  (env,  0,  1); 
n tmpring  = ringSetUnion(allkeys,  newpub)  ; 
n ringSetDestroy(allkeys); 

n allkeys  = tmpring; 

n err  = mainDoMaint  ((void  *)  ui_arg,  allkeys,  1,  allkeys); 
n if(err<0) 

n B return  err; 

n /*  Write  out  results  */ 

n ma i nRi ngNewSet  (pub,  PG P_ W R I T ET R U ST_ PUB , newpub); 
n newpub  = NULL;n  n /*  Don't  destroy  this  */ 
n fprintf  (stderr, 
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"Key  signature  certificate  a d d e d . \ n " ) ; 

n return  0; 

> 

/* 

* Return  true  if  a key  has  been  revoked. 

*/ 

static  int 

ma i nKeyRevoked  (struct  RingSet  const  *set,  union  RingObject  *obj) 

{ 

n struct  Ringiterator  *iter; 
n byte  keyidCS],  keypkaLg; 
n int  Level; 

n pgpAssert  C r i n g Ob j e c t Ty pe ( ob j ) ==  R I N GT Y PE_KE Y ) ; 
n ringKeyID8(set,  obj,  SkeypkaLg,  keyid); 

n iter  = r i n g 1 1 e r C r e a t e ( s e t ) ; 
n Level  = r i n g I t e r S e e kTo ( i t e r , obj); 
a if  (Level  < 0)  f 
n n r i n g I t e r De s t r oy ( i t e r ) ; 

a n return  Level; 

n > 

n ++ Level; 

n while  ( r i ng I t e r N e x t 0 b j e c t ( i t e r , level)  > 0)  { 
n n byte  si  gi dC83; 

n n byte  s i gpka  Lg; 

n n int  sigtype; 

n n union  RingObject  *sig  = ringIterCurrentObject(iter,  Level); 

n n pgpAssert(sig); 

n n if  ( r i ngO b j e c t Ty p e ( s i g ) !=  R I NGT Y P E_ S I G ) 

n n n continue; 

n n ringSigID8(set,  sig,  Ssigpkalg,  sigid); 

n n if  ( mem cmp ( key i d , s i g i d , s i z eof ( key i d ) ) ! =0  || 

n n sigpkalg  !=  keypkaLg) 

n n n continue; 

n n sigtype  = r i ng S i gTy pe ( s e t , sig); 

n n if  (sigtype  ==  PG P_S I GT YP E_KE Y_C OM P ROM  I S E ) { 

n n n r i ng 1 1 e r D e s t r oy ( i t e r ) ; 

n n n return  1;  /*  yes,  it  is  revoked  */ 

n □ > 

n } 

n ringlterDestroy(iter); 

n return  0;n  b /*  no,  it  is  not  revoked  */ 

> 


/* 

* Given  a userlD  signature,  return  true  if  it  has  been  revoked. 

* aaa  Better  to  worry  more  about  validity  here? 

*/ 

static  int 

mai nSi gRevoked  (struct  RingSet  const  *set,  union  RingObject  *obj) 

{ 

n struct  Ringiterator  *iter; 

B byte  keyidC8!l,  pkalg; 

B int  Level; 
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n pgpAssert  ( r i ng 0 b j e c t Ty pe ( ob j ) ==  R I N GT Y P E_ S I G ) ; 
n r i ng S i g I D8 ( s e t , obj,  SpkaLg,  keyid); 

Q 

n /*  Prepare  to  iterate  */ 
n iter  = ringlterCreate(set); 
n if  (liter) 

n a return  PG P E R R_N OH  EH ; 

n Level  = r i ng I t e r S e e kTo ( i t e r , obj); 
n if  (level  <0)  { 
n n ringlterDestroy(iter); 

n n return  Level; 

n > 


□ 

n 

a 

n 

n 

□ 

n 

a 

□ 

Q 

□ 

a 

n 

n 

n 

Q 

a 

□ 

Q 

n 

n 

> 


/*  Loop  over  all  sigs  on  the  name  */ 
r i ng 1 1 e r R e w i nd ( i t e r , level); 

while  ((Level  = r i n g I t e r N ex t 0 b j e c t (iter.  Level))  > 0)  { 
n union  RingObject  *sig  = r i n g 1 1 e r C u r r e n 1 0 b j e c t ( i t e r , Level); 
n byte  sigpkalg,  sigidCS]; 
n pgpAssert(sig); 

n if  ( r i ngOb j ec t Type ( s i g ) !=  R I NGT Y P E_ S I G ) 

n n continue; 

n ringSigID8(set,  sig,  Ssigpkalg,  sigid); 
n if  ( s i gp ka L g==pka I g 88 

n memcmp(sigid,  keyid,  sizeof(sigid))==0)  { 

n n int  type  = r i ng S i g Ty p e ( s e t , sig); 

n n if  (type  ==  PG P_S I GT Y P E_KE Y_U I D_ R E VO KE ) { 

n n n r i n g 1 1 e r D e s t r oy ( i t e r ) ; 

n n a ringObjectReLease(sig); 

o ° n return  1;  /*  revocation  found  */ 

n n > 

n > 

} 

ringlterDestroy(iter); 

return  0;n  n /*  no  revocation  found  */ 


/* 

* Revoke  a key  or  a signature 
*/ 

static  int 

doKeyRevoke  (struct  PgpEnv  *env,  struct  Flags  *fLags,  int  argc,  char  *argvC3, 
n struct  PgpTtylll  *ui_arg) 

{ 

n struct  RingSet  *pubring  = NULL; 
n struct  RingSet  *neupub  = NULL; 
n struct  RingSet  *tmpring  = NULL; 
n struct  Ringiterator  *iter; 

n struct  PgpSigSpec  *sigspec  = NULL; 

n struct  PgpSecKey  *secretKey  = NULL; 
n union  RingObject  *obj=NULL,  *seckeyobj  = NULL; 
a char  const  *pub; 

n int  Level; 

n int  err; 

n const  char  *prep  = "to  be  revoked"; 

a int  revokelevel; 

n int  sigtype; 
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n /*  Distinguish  what  we  are  to  revoke  */ 
n if  (fLags->argc  SS  s t r c h r ( f L a g s ->a r g s , 's'))  { 

n H revokeleveL  = R I NGT Y P E_ S I G ; /*  signature  on  a name  */ 

n n sigtype  = PG P_ S I GT Y P E_KE Y_U I D_R E VOKE ; 
n } e L se  { 

n n revokeleveL  = R I N GT Y P E_KE Y ; /*  key  */ 

n n sigtype  = PG P_S I GT Y P E_KE Y_ C OH  PROM  I S E ; 

n } 

n /*  Open  pub  key  ring  */ 

n ma i nO pe n Pu b S e c C e n V , &pub,  Spubring,  NULL,  NULL,  stderr); 
n if  (!  pubring)  t 
n n fprintf  (stderr, 

"No  keys  in  pubringXn"); 
n n return  0; 

n > 

n L oa d A L L Key s ( e n V , 1,  0); 
n /*  Select  object  to  sign  */ 

a err  = s e I e c t R i n g Ob j e c t ( e n v , argc,  argv,  pub,  pubring,  revokeleveL, 
n n n prep,  stderr,  Sobj); 

n if(err<=0)t 
n n ringSetDestroy(pubring); 

n n return  err; 

n } 

n /*  Display  it  for  him  */ 


□ 

ob j P r i n t ( en V , obj,  stderr,  NULL); 

n 

i f 

(revokeleveL  ==  R I N GT Y P E_KE Y ) { 

n 

B 

/* 

Hake  sure  it  is  our  key  */ 

n 

B 

seckeyobj  = obj; 

n 

B 

sec 

retKey  = r i ng S e c S e c Key  (allkeys. 

ob  j , 

0); 

B 

B 

i f 

(secretKey  ==  NULL)  { 

B 

B 

B 

fprintf  (stderr. 

"You 

don't 

have  the  private  key  corresponding  to 

that  key\n"); 

B 

B 

B 

ringSetDestroy(pubring); 

B 

B 

B 

return  0; 

B 

B 

> 

B 

B 

/* 

Hake  sure  it  hasn't  already  been 

revoked.  */ 

B 

B 

if 

(mai nKeyRevoked(pubri ng,  obj))  { 

B 

B 

B 

fprintf  (stderr. 

"That  key  has  already  been  revokedXn"); 
n n n r i ng S e t D e s t r oy ( pub r i n g ) ; 

n n n return0; 

n D > 

n } e L se  { 

n n /*  Make  sure  we  have  a secret  key  for  this  sig  */ 

n n byte  keyidCS],  pkalg; 

n n r i ng S i g I D8 ( pu b r i ng , obj,  &pkalg,  keyid); 

n a seckeyobj  = r i ng Key By I d8 ( a L L key s , pkalg,  keyid); 
n n if  (seckeyobj  ==  NULL)  { 
n n n fprintf  (stderr, 

"\nYou  don't  have  any  key  information  for  that  signature. \n"); 
n n n r i ng S e t D e s t r oy ( pub r i n g ) ; 

n n n return0; 

n n } 

n n secretKey  = r i ng S e c S e c Ke y (allkeys,  seckeyobj,  PG P_PKU S E_S I G N ) ; 
i:CCHK:a9bd6dc33f0e1ea5330de6b033d00db8b648780bfe74581428dbc10de51ed5194:: 


Pretty  Good  Privacy  5.0'^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2229 


pgpk.c 


n n if  (IsecretKey)  { 
n a a fprintf  ( s t d e r r , 

"\nYou  don't  have  the  private  key  which  made  that  signature. \n"); 


n n 

n ringSetDestroy(pubring); 

□ n 

n return  0; 

Q n 

} 

D n 

/*  Make  sure  it  hasn't  already  been  revoked  */ 

n n 

if  ( ma i n S i g R e VO k e d ( p u b r i n g , obj))  { 

D □ 

n fprintf  (stderr. 

"That  signature  has  already  been  revoked. \n"\ 

"Are  you  sure  you  want  to  add  another  revocation  certificate  (y/N)?  "); 
n “ n if  ( ! pgpTtyGetBoo L (0,  stderr))  { 

° n n n fprintf  (stderr,  "\ 

Signature  revocation  cancelled. \n"); 


n Q 

n n ringSetDestroy(pubring); 

n n 

n n return  0; 

□ n 

n } 

n □ 

} 

n > 

n i f 

( ! se c r e t Key->s i g n ) { 

° n fprintf  (stderr, 

"Private  key  is  not  a signature  key\n"); 


n n 

ringSetDestroy(pubring); 

n n 

return  0; 

n > 

n /* 

Confirm  signature  */ 

n if 

(revokelevel  ==  R I NGT Y P E_KE Y ) { 

Q □ 

fprintf(stderr. 

" \ n " \ 

"Do  you  want  to  permanently  revoke  your  public  key\n"\ 

"by  issuing  a secret  key  compromise  certificate  on  this  key  (y/N)?  " ) ; 
n > e I s e { 


n □ 

fprintf(stderr. 

" \ n " \ 

"Do  you  want  to  revoke  this  signature  (y/N)?  "); 
n } 

n if  ( ! pgpTtyGetBoo  I (0,  stderr))  { 
n n fprintf  (stderr, 

"Revoke  cancelled. \n"); 


n n 

ringSetDestroy(pubring); 

Q a 

return  0; 

n > 

n if 

(revokelevel  ==  R I N GT Y P E_S I G ) { 

Q n 

/*  Get  parent  of  signature  object  to  receive  new  sig  */ 

n n 

iter  = ringlterCreate(pubring); 

n n 

if  (iter  ==  NULL)  { 

Q D 

n r i ngSe t De s t r oy ( pu b r i ng  ) ; 

tt  n 

n return  PGPERR_N0nEM; 

n n 

} 

n n 

level  = ringIterSeekTo(iter,  obj); 

n D 

pg p A s s e r t ( 1 e V e 1 > 0); 

□ □ 

obj  = ringIterCurrentObject(iter,  level-1); 

n n 

pgpAssert(obj  ); 

rt  a 

ri ngIterDestroy(i ter)  ; 
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n > 

n u i _a r g-> r i n g s e t = aLLkeys; 

n err  = pg pT t y U n L o c k S e c key  (ui_arg,  seckeyobj,  secretKey, 

"\nYou  need  a pass  phrase  to  unlock  your  private  key.Xn"); 
n r i n gOb j e c t R e L ea s e (seckeyobj); 

n if  (err)  ( 

a a fprintf  (stderr,  "Cannot  unlock  private  key\n"); 
a a r i n g S e t D e s t r oy ( p u b r i ng  ) ; 

a a return  0; 

a > 

a fprintf  (stderr,  "\n"); 
a 

a /*  Actually  do  the  signature  */ 

a sigspec  = p g p S i g S p e c C r e a t e (env,  secretKey,  sigtype); 
a if  (!sigspec)  { 
a a ringSetDestroy(pubring); 

a a return  PGPERR_NOMEM; 

a } 

a newpub  = r i ng S e t C r e a t e (ringpool); 
a i f ( ! newpub  ) { 

a a pgpSigSpecDestroy(sigspec); 

a a ringSetDestroy(pubring); 

a a return  PG P E R R_N OM EM ; 
a } 

a r i ng S e t Add S e t (newpub,  pubring); 

a ringSetDestroy(pubring); 
a pubring  = NULL; 

a if  ( ! rng  ) 

a a rng  = pg p Ra n d omC r e a t e (); 

a err  = ringSignObject  (newpub,  obj,  sigspec,  rng); 
a pg p S i g S pe c D e s t r oy ( s i g s pe c ) ; 

a ringSetFreeze(newpub); 
a if(err<0) 
a a return  err; 

a /*  Do  maintenance  pass  */ 
a r e I oad A I I Key s (env,  0,  1); 
a tmpring  = r i ng S e t Un i on ( a I I key s , newpub); 
a ringSetDestroy(allkeys); 
a allkeys  = tmpring; 

a err  = mainDoMaint  ((void  *)  ui_arg,  allkeys,  1,  allkeys); 
a if  (err<0) 
a a return  err; 

a /*  Write  out  results  */ 

a ma i n R i ng N e wS e t (pub,  PG P_WR I T ET RU ST_PUB,  newpub); 

a newpub  = 0;a/*  Don't  destroy  this  */ 
a fprintf  (stderr, 

"Key  revocation  certificate  added. \n"); 

a return  0; 

} 

static  i n t 
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ma i nProcess F Lags  (struct  Flags  *fLags,  struct  PgpEnv  *env,  int  argc, 
H n char  *argvC],  PgpTtyUI  *ui_arg) 

{ 

n switch  (fLags->opt)  { 


n 

case  ' a ' : 

n 

n return 

doKeyAdd  (env,  argc,  argv,  ui 

_a  rg  ) ; 

n 

n break; 

□ 

case  ' c ' : 

□ 

return  doKeyCheck  (env,  flags,  argc,  argv,  ui_ar 

n 

n break; 

n 

case  ' d ' : 

n 

return  doKeyDisable  (env,  argc. 

argv. 

u i _ a r g ) ; 

n 

n break; 

n 

case  ' g ' : 

□ 

n return 

do  Key G e n e r a t e (env,  argc,  argv,  ui_ 

arg); 

Q 

n break; 

n 

case  ' k ' : 

n 

n return 

doKeyRevoke  (env,  flags,  argc 

, argv 

, ui_arg); 

n 

n break; 

□ 

case  ' L ' : 

n 

n return 

doKeyList  (env,  flags,  argc. 

argv. 

u i _a  rg  ) ; 

n 

n break; 

n 

case  ' r ' : 

Q 

n return 

doKeyRemove  (env,  flags,  argc 

, argv 

, ui_arg); 

n 

n break; 

n 

case  's': 

Q 

n return 

doKeySign  (env,  flags,  argc. 

argv. 

u i _a  rg  ) ; 

n 

n break; 

Q 

case  ' X ' : 

n 

n return 

doKeyExtract  (env,  flags,  argc,  argv,  ui_arg), 

n 

n break; 

n 

case  ' e ' : 

n 

n return 

doKeyEdit  (env,  flags,  argc. 

argv. 

u i _ a r g ) ; 

D 

n break; 

Q 

default: 

n 

n exitUsage(0); 

B 

> 

B 

/*  NOTREACHED  */ 

B 

return  0; 

> 

/*  Clean  up  allocated  space  (Like  the  pipeline  and  the  rng)  on  exit  */ 
static  void 
mainExit  (void) 

{ 

n if  (passcache) 

n n pg p Pa s s C a c h e D e s t r oy  (passcache); 

n passcache  = NULL; 

n if  ( r i ngpoo  L ) 

n n ringPooLDestroy  (ringpool); 

n ringpool  = NULL; 

n if  (rng) 

n n pgpRandomDestroy  (rng); 

a rng  = NULL; 

n return; 
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> 

i nt 

appMain  (int  argc,  char  *argvCD) 

{ 

n struct  PgpUICb  ui; 

n struct  PgpTtyUI  ui_arg; 

n struct  Flags  flags; 

n struct  PgpEnv  *env; 

n int  retval; 
n 

a atexit(mainExit); 

n /*  Setup  the  UI  callback  functions  */ 
ui. message  = pgpTtyHessage; 
ui.doCommit  = pg pT t y Do C omm i t ; 
ui.newOutput  = pgpTtyNewOutput; 
ui.needinput  = pg pT t y N e ed I n pu t ; 
n ui.sigVerify  = pgpTtySigVerify; 
n ui  . eskDecrypt  = pg pT t y E s k D e c r y p t ; 
ui. annotate  = NULL; 

n /*  Setup  the  TTY  UI  argument  */ 
ui _a rg . ve rbose  = 1; 
ui_arg.fp  = stdout; 
n u i _a r g . r i ng s e t = NULL; 

n u i _a rg . s howpa s s = 0; 
n u i _a rg . commi t s = -1; 

n /*  Initialize  the  application  from  config  files,  etc.  */ 
n retval  = pgpInitApp  (&env,  Sargc,  &ui,  8ui_arg,  EX  I T_P ROG_ PG PK,  1); 
n if  (retval)  ( 

n n fprintf  (stderr,  "pgpInitApp  failed:  %d\n",  retval); 
n n goto  error; 
n > 

n /*  Now  initialize  the  values  that  need  initialization  */ 
a ui_arg.env  = env; 

n u i _a rg . pa s s ca c he  = passcache  = pg p Pa s s C a c h e C r ea t e (env); 

n /*  Check  the  exiration  date  on  the  application  */ 
a ex i t Exp i r y C h e c k (env); 

#if  d e f i n ed ( UN  I X ) ||  defined(VHS) 

n umask(077);  /*  Hake  files  default  to  private  */ 

#endi f 

n memset  (Sflags,  0,  sizeof  (flags)); 

n ma i n Pa r s e A r g s (&ui,  &ui_arg,  env,  &argc,  argv,  Sflags); 
n /* 

n * Set  variables  which  may  have  been  set  on  the  command  line, 
n * / 

n u i _a r g . s h owpa s s = pgpenvGetInt  (env,  PG P E N V_S HOW P A S S , NULL,  NULL); 
n f I a g s . doa r mo r = pgpenvGetInt  (env,  PGPENV_ARHOR,  NULL,  NULL); 

n /*  Open  the  keyrings  and  process  the  flags  */ 
n ringpool  = r i ng Poo  I C rea t e (env); 
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pgpk.c 


n if  ( ! r i ngpoo  L ) { 

n n fprintf  (stderr,  "Cannot  create  RingPooLXn"); 

n n retvaL  = PG P E R R_N0M EH ; 

a n goto  error; 

n > 

n retvaL  = mainProcessFLags  (SfLags,  env,  argc,  argv,  &ui_arg); 
n if  (retvaL)  { 

n n fprintf  (stderr,  "Error:  %s\n",  pgperrString  (retvaL)), - 

n } 

a if  (aLLkeys)  { 
n n ringSetDestroy(aLLkeys); 

n n a L L keys  = 0; 

n } 

Q 

error: 

n return  retvaL; 

} 

/* 

* LocaL  VariabLes: 

* tab-wi dth : 4 

* End: 

* vi:  ts=4  sw=4 

* vim:  si 
*/ 
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Makefile.in 


U 

U man/MakefiLe.in 
U 

U Copyright  (C)  1996,1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

n 

tf  $Id:  Ma  kef  i Le  . i n,  V 1.3. 2. 2 1 997/06/07  09:52:07  mhw  Exp  $ 

# 

MAN1=pgp.1  pgpe.1  pgpk.1  pgps.1  pgpv.1 
MAN5  = pgp . cf g . 5 


install:: 

n if  test  ’xSCMANI)'  !=  x ; then  \ 


n 

B 

if  test 

! -d  $ ( D E S T D I R ) $ ( ma nd i r ) / ma n 1 ; then  \ 

n 

B 

n 

mkdir  -p  $(DESTDIR)$(mandir)/man1;  \ 

n 

B 

■f  i ; 

\ 

n 

B 

for 

i i 

n $(MAN1  ) ' ' ; do  \ 

n 

B 

n 

$(INSTALL)  -m  644  $ C s r c d i r ) / $$ i \ 

n 

B 

a 

“ n $ ( D E S T D I R ) $ C ma  nd  i r ) / ma  n 1 ; 

Q 

B 

done 

\ 

n 

else  : ; 

\ 

n 

f i 

□ 

if  test 

'x$(MAN5)'  !=  x;  then  \ 

n 

B 

if  test 

! -d  $ ( D E S T D I R ) $ ( ma n d i r ) /ma n 5 ; then  \ 

B 

B 

a 

mkdir  -p  $ ( D E S T D I R ) $ ( ma nd i r ) / ma n 5 ; \ 

B 

B 

■f  i ; 

\ 

B 

B 

for 

i i 

n $(MAN5) ' do  \ 

B 

B 

D 

SCINSTALL)  -m  644  $ ( s r c d i r ) / $$ i \ 

B 

B 

□ 

“ “ $(DESTDIR)$(mandir)/man5; 

B 

B 

done 

\ 

B 

else  : ; 

\ 

B 

f i 
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pgp  . 1 


. \" 
. \ " 
. \ " 
. \ " 
. \" 
. \ " 
. \ " 
. \ " 
. \ " 
. \ " 
. TH 
. SH 
PGP 


Copyright  (C)  1997  Pretty  Good  Privacy,  Inc. 


ALL  rights  reserved. 


$Id:  pgp.1,v  1.1. 2. 2 1997/06/07  09:52:07  mhw  Exp  $ 


Process  this  fiLe  with 
groff  -man  -Tascii  pgp.1 

PGP  5.0  "MAY  1 997  (v5.0)"  PGP  "LJser  ManuaL" 

NAME 

\-  A suite  of  tooLs  for  encrypting,  decrypting  and  verifying 


messages  . 

.SH  DESCRIPTION 

There  are  two  fiLes  in  this  package,  but  severaL  additional  modes  of 
operation  via  symbolic  Links: 


. RS 

. BR  pgp  ( 1 ) 

is  the  main  cryptographic  engine.  However,  invoking  it  as  itseLf 
mereLy  prints  a usage  summary. 

. BR  pgpe  ( 1 ) 

is  executed  to  encrypt,  or  encrypt  and  sign,  fiLes.  It  is  a Link  to 
. BR  pgp  ( 1 ) . 

.BR  pgps  (1) 

is  executed  to  onLy  sign  fiLes.  It  is  a Link  to 
. BR  pgp  ( 1 ) . 

.BR  pgpv  (1) 

is  executed  to  onLy  verify  or  decrypt  signed  or  encrypted  fiLes.  It 
is  a Link  to 
. BR  pgp  ( 1 ) . 

.BR  pgpk  (1) 

is  the  key  management  appLication,  which  is  used  to  generate, 
retrieve  and  send  keys,  as  weLL  as  manage  trust. 


.RE 

PubLic  key  cryptography  is  something  that  is  worse  than  useLess  if  not 
understood  by  the  user.  You  are  therefor  strongLy  encouraged  to  read 
the  incLuded  documentation  before  proceeding  with  PGP.  That  said,  if 
you  feeL  famiLiar  with  the  concepts  of  pubLic  key  cryptography  in 
generaL  and  PGP  in  specific,  your  first  step  is  probabLy  going  to  be 
to  invoke 
.BR  pgpk  (1) 
to  generate  a key. 

.SH  FILES 

.1  ■/ . pgp/pgp  . cf g 

. RS 

U s e r - s p e c i f i c configuration  fiLe.  The  fiLe  formerLy  known  as 

config.txt.  See 

.BR  pgp.cfg  (5) 

for  further  detaiLs. 

. RE 
.bp 
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■SH  AUTHORS 

A cast  of  thousands.  This  is,  of  course, 
work  of  PhiL  R.  Zimmerman  <p r z Spg p . c om> . 
release  include: 

. n f 

Unix  Devel opmen t 
. RS 


derived  directly  from  the 
Major  contributors  to  this 


n Derek  Atkins  < wa r I o r dSM I T . E D U> \ p 

a Hal  Finney  <h a 1 3 pg p . c om> \ p 

n Mark  HcArdle  <ma r kma pg p . c om> \ p 

n Brett  A.  Thomas  <q ua r kaba z . c om> \ p 

n Mark  Weaver  <mh wa pg p . c om> \ p 

. RE 


Be  Deve I opment 
. RS 

n Hark  Elrod  <e I r od Bpg p . c om> \ p 

n Brett  A.  Thomas  <q u a r ka ba z . c om> \ p 

. RE 


Library  Development 
. RS 


n 

□ 

□ 

□ 

. RE 


Derek  Atkins  < wa r I o r daH I T . E D U> \ p 
Colin  Plumb  <colinapgp.com>\p 
Hal  Finney  <h a I apg p . c om> \ p 
Mark  Weaver  <mh wapg p . c om> \ p 


Unix  Beta  Testing 
. RS 

n Steve  Gilbert  <da r ke I f a r e d c I ou d . o r g> \ p 

n Ian  Rose  < i a n apop n e t . n e t > \ p 

n Pete  Sahm  <p s a hmad r ea ms c a pe . c om> \ p 

n Mike  Shappe  <m s h a ppe a j e e v e s . n e t > \ p 

. RE 


Han  Pages 
. RS 

n Brett  A.  Thomas  <q ua r ka ba z . c om> \ p 

.RE 

.fin 

.SH  BUGS 

More  than  you  can  shake  a stick  at. 

.SH  "SEE  ALSO" 

. BR  pgpe  ( 1 ) , 

.BR  pgpv  (1), 

. BR  pgps  ( 1 ) , 

. BR  pgpk  ( 1 ) , 

.BR  pgp.cfg  (5), 

.BR  pgp- i n t eg ra t i on  (7), 

http://www.pgp.com 

and 

http: //web.mit .edu/network/pgp. html 
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pgp.cfg.5 


.\"  pgp.cfg.5 
. \ " 

.\"  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
. \ " 

.\"  $Id:  pgp.cfg.5,v  1.1. 2. 2 1997/06/07  09:52:08  mhw  Exp  $ 

. \ " 

.\"  Process  this  fiLe  with 
.\"  groff  -man  -Tascii  pgp.1 
. \ " 

.TH  PGP  5.0  "MAY  1997  (v5.0)"  PGP  "User  ManuaL" 

.SH  NAME 

pgp.cfg  \-  Format  of  the  configuration  fiLe  used  by 
.BR  pgp  (1). 

.SH  DESCRIPTION 

The  default  Location  for  this  fiLe  is  ~/.pgp.  You  may  specify  another 
Location  by  setting  the  environment  variabLe 
.SH  BUGS 

More  than  you  can  shake  a stick  at. 

.SH  "SEE  ALSO" 

. BR  pgp  ( 1 ) , 

. BR  pgpe  ( 1 ) , 

. BR  pgpv  { 1 ) , 

.BR  pgps  (1), 

.BR  pgpk  (1), 

.BR  pgp- i n t eg ra t i on  (7), 

http://www.pgp.com 

and 

http://web.mit.edu/network/pgp.htmL 
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pgpe.l 


. \ " 

. \ " pgpe.l 
. \ " 

.\"  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
. \ " 

.\"  $Id:  pgpe.l, V 1.1. 2. 3 1 997/06/07  09:52:08  mhw  Exp  $ 

. \ " 

.\"  Process  this  fiLe  with 
.\"  groff  -man  -Tascii  pgpe.l 
. \ " 

.TH  PGP  5.0  "MAY  1997  (v5.0)"  PGP  "User  ManuaL" 

.SH  NAME 

pgpe  \-  Encrypts  and  signs  messages 
.SH  SYNOPSIS 

.B  pgpe  -r  <recipient>  C-s  C-u  <myid>D3  C-aftzD\p 

.BI  C-o  " <outfiLe>"  "]  C-kp"  " <pubring>"  " D C-ks"  " <secring>"  II 
.B  C - V C 1 I 2 I 3 I 4 3 3 C-p  <pa s s p h r a s e> D 
.1  fiLe 
. B ... 

. b r 

.B  pgpe  -c  C-aftz3 

.BI  C-o  " outfiLe"3 

.B  C - V C 1 I 2 I 3 I 4 II  C-p  <pa  s s p h r a s e> 3 

. I fiLe 

. B ... 

. b r 


.SH  DESCRIPTION 
.B  pgpe 

encrypts  and  signs  fiLes  using  public  key  cryptography,  or  encrypts 
fiLes  using  conventional  cryptography. 

.SH  OPTIONS 
. IP  -a 

Turn  on  "ASCII  Armoring."  This  outputs  a text-onLy  version  of  your 
encrypted  text.  This  makes  the  resuLt  safe  for  mailing,  but  about  30% 
Larger. 

.IP  -c 

Conventional  encrypting  mode.  This  uses  IDEA  to  encrypt  your 
message.  As  IDEA  is  a symetric  cipher,  no  pubLic-key  related 
a rgument  s ( 

.BR  -r  , 

. B -s 
and 

.BR  -u  ) 

are  accpeted  with  this  argument. 

. IP  -f 


Stream  mode.  Accepts  input  on 
.1  stdi n 

and  pLaces  output  on 
.IR  stdout. 

OptionaLLy,  you  may  specify  input  and  output  fiLes,  as  weLL;  whatever 
isn't  specified  is  taken  from  the  normaL  stream. 

.IP  "-kp  <pubring>" 

Uses 

. I <pubri ng> 

in  pLace  of  your  default  public  keyring,  and  aLso  ignores  your  default 
private  keyring. 
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.IP  "-ks  <secring>" 

Uses 

.1  <secring> 

in  place  of  your  default  secret  keyring,  and  also  ignores  your  default 
public  keyring. 

.IP  "-0  outfile" 

Specifies  that  output  should  go  to 
.IR  outfile  . 

If  not  specified,  output  goes  to  the  default  filename.  The  default 
filename  for  each  input  file  is  the  input  filename  with  ".pgp" 
appended,  unless  ASCII  Armoring  is  turned  on,  in  which  case  it's 
".asc".  It  is  an  error  to  specify  multiple  input  files  with  this 
option. 

.IP  "-p  passphrase" 

Sets  the  passphrase  for  signing.  It  is 
.B  strongly 

reccomended  that  you  use  another  method  to  get  your  passphrase  to 
PGP.  If  you're  not  running  in  batch  mode  (which  is  the  normal  mode  of 
operation),  PGP  will  prompt  you  if  neccessary.  See 
.BR  pg p- i n t eg r a t i o n (7) 

for  a discussion  of  secure  methods  for  getting  PGP  your  passphrase. 

.IP  -s 

Sign  the  document  as  well  as  encrypting  it.  If  you  just  wish  to  sign 
only,  use 
.BR  pgps  (1). 

This  will  use  your  default  signing  key,  or  the  ID  of  the  key  specified 
with  the 
. B -u 
option. 

.IP  -t 

Turns  on  text  mode.  This  causes  PGP  to  convert  your  input  message  to 
a platform-independent  form.  It  is  primarily  for  use  when  moving 
files  from  one  operating  system  to  another. 

.IP  -u 

Sets  the  ID  of  the  key  used  for  signing.  This  may  be  a user  ID  (like 
.BR  f ooSba r . ba z . com  ) 
or  a Key  ID  (like 
.BR  0x12345678  ). 

Obviously,  this  isn't  very  useful  if  you  don't  specify 
.BR  -s  . 

.IP  -v1 

Minimum  verbosity  mode.  No  messages  are  output  whatsoever.  Generally 
used  with 
.B  -z 

(bat  c hmod ) . 

.IP  -v2 

Display  errors  only. 

.IP  -v3 

Display  errors  and  warnings. 

.IP  -v4 

Display  errors,  warnings,  and  information  messages.  This  is  the  default. 
.IP  -z 

Batch  mode.  Not  yet  implemented  or  speced.  See  also 
.BR  pg p-i n t eg r a t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.SH  EXAMPLE 

.1  pgpe  -r  f ooBba r . ba z . com  -sat  document.txt 
. RS 
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pgpe.  1 


Signs  and  encrypts  the  file 
. I document . txt 

with  ASCII  Armoring  and  text  mode  on  to 
■BR  fooabar.baz.com  's 
key.  The  resultant  file  will  be 
.IR  do c ume n t . t X t . a s c . 

. RE 

.SH  FILES 

.1  ■/ . pgp/pgp . cf g 

. RS 

User-specific  configuration  file.  The  file  formerly  known  as 

conf i g . txt  . See 

.BR  pgp.cfg  (5) 

for  further  details. 

. RE 
.RE 

.SH  BUGS 
. RS 

Bunches  and  Bunches. 

. BE 

.SH  "SEE  ALSO" 

.BR  pgp  (1), 

.BR  pgpv  (1), 

■BR  pgps  (1), 

.BR  pgpk  (1), 

.BR  pgp.cfg  (5),\p 

.BR  pgp-i n t eg r a t i on  (7), 

http: //www.pgp.com 

and 

http://web.mit.edu/network/pgp.html 


[;CCHK:1  3707eaf9f21  21  865eee66e51  923b9c013104:: 
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pgpk. 1 

Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

$Id:  pgpk.1,v  1.1. 2. 3 1997/06/07  09:52:08  mhw  Exp  $ 

Process  this  fiLe  with 
groff  -man  -Tascii  pgpe.1 


. \' 

. \’ 

. \' 

. \' 

. \' 

. \' 

. \' 

. \' 

. \' 

. \ " 

.TH  PGP  5.0  "MAY  1997  (v5.0)"  PGP  "User  Manual" 

.SH  NAME 

pgpk  \-  Public  and  Private  key  management  for  PGP. 
.SH  SYNOPSIS 
.B  pgpk 

.BI  C-a  " keyfiLe  ..."  " | 

.B  -c  CuseridDD  | 

. B -d  <useri d>  | \p 
. B -e  <useri d>  | 

■ B -g  1 

.B  -LCLI  Cuserid]  | 

.B  -revokeCsD  <userid>  | 

.B  -rCu|s3  <userid>  | 

.B  -s  <userid>  C-u  <yourid>!]  | \p 

. B -X  <useri d>3 

.BI  C-o  " <outfiLe>"  3 

.BI  C-kp  " <pubring>"  2 \p 

.BI  C-ks  " <secring>"  3 

.B  [-vLI  |2|3|433 

.B  C-p  <passphrase>3 

.B  :-z3 

. b r 


.SH  DESCRIPTION 
.B  pgpk 

Manages  pubLic  and  private  keys  for  PGP.  UnLike  other  PGP 
applications,  pgpk  is  stream  based  and  not  fiLe  based;  if  no  fiLes  are 
speci f i ed, 

.1  s t d i n 
and 

.1  s t dou  t 
are  used. 

.SH  OPTIONS 
. IP  "-a  Ckeyf i Le3" 

Adds  the  contents  of 
.1  keyfiLe 

to  your  keyring.  If 
. I keyf i L e 

is  not  specified,  input  is  taken  from 
. IR  stdi n . 

.1  KeyfiLe 

may  aLso  be  an  URL;  the  supported  protocoLs  are 
. B h kp 

(Horowitz  Key  ProtocoL), 

. B http 
and 

. BR  finger  . 

To  add 
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■BR  fooabar.baz.com  's 

key  to  your  keyring  from  PGP,  Inc's  server,  for  example,  enter: 

.1  pgpk  -a  h kp : / / key s . pg p . c om/ f ooaba r . ba z . c om 
If 

.B  fooabar.baz.com 

has  his  key  in  his  finger  information,  you  could  add  that  with: 

.1  pgpk  -a  f i ng e r : / / ba r . ba z . com/ f oo 
.IP  "-C  Cuserid!]" 

Checks  the  signatures  of  all  keys  on  your  public  keyring.  If 
.B  [userid] 

is  specified,  only  the  signatures  on  that  key  are  checked. 

.IP  "-d  <userid>" 

Toggles  the  disablement  of 

. BR  <u  se  r i d>  ' s 

key  on  your  public  keyring. 

.IP  "-e  <userid>'' 

Edits 

. BR  <useri d>  ' s 

key.  If  this  is  your  key,  it  allows  you  to  edit  your  useridCs)  and 
passphrase.  If  it  is  someone  else's  key,  it  allows  you  to  edit  the 
trust  you  have  in  that  person  as  an  introducer. 

.IP  -g 

Generate  a pu b I i c / p r i va t e key  pair. 

.IP  "-kp  <pubring>" 

Uses 

.1  <pubring> 

in  place  of  your  default  public  keyring,  and  also  ignores  your  default 
private  keyring. 

.IP  "-ks  <secring>" 

Uses 

.1  <secring> 

in  place  of  your  default  secret  keyring,  and  also  ignores  your  default 
public  keyring. 

.IP  "-ICID  Cuserid]" 

Lists  information  about  a key. 

.B  -I  I 

lists  more  information  about  a key.  If 
.B  [userid] 

is  specified,  that  key  is  listed.  Otherwise,  all  keys  are  listed. 

.IP  "-0  outfile" 

Specifies  that  output  should  go  to 
.IR  outfile  . 

If  not  specified,  output  goes  to 
.IR  stdout  . 

.IP  "-p  passphrase" 

Sets  the  passphrase  for  signing.  It  is 
.B  strongly 

reccomended  that  you  use  another  method  to  get  your  passphrase  to 
PGP.  If  you're  not  running  in  batch  mode  (which  is  the  normal  mode  of 
operation),  PGP  will  prompt  you  if  neccessary.  See 
.BR  pgp-i n t eg r a t i on  (7) 

for  a discussion  of  secure  methods  for  getting  PGP  your  passphrase. 

.IP  "-revoke  <userid>" 

. B Permanate ly 

revokes  the  key  specified.  There  is  no  way  to  undo  this,  so  don't 

[[CHK:d6655770095f525103a6b8c0001bd6b0c65498f080aa0d703cdf6952fab2be5b0]] 
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play  with  it  if  you  don't  mean  it. 

.IP  "-revoks  <userid>" 

.B  PermanateLy 

revokes  your  signature  (if  any)  on  the  key  specified. 

.IP  "-r  <userid>" 

Removes 

.BR  <userid>  's 

key  from  your  public  keyring,  and  your  private  as  well,  if  it's  there. 

.IP  "-ru  <useri d>" 

Removes  the  given  userid  from  your  public  and  private  keyrings. 

.IP  "-rs  <userid>" 

Removes  the  given  signature  from  your  public  keyring. 

.IP  .s  <userid>  C-u  <yourid>!] 

Signs 

. BR  <use  ri d>  ' s 

key  with  your  default  signing  key.  If 
. B -u 

is  specified,  uses  that  key,  instead. 

. IP  -v1 

Minimum  verbosity  mode.  No  messages  are  output  whatsoever.  Generally 
used  with 
.B  -z 

(batch  mode). 

.IP  -v2 

Display  errors  only. 

.IP  -v3 

Display  errors  and  warnings. 

.IP  -v4 

Display  errors,  warnings,  and  information  messages.  This  is  the  default. 
.IP  -X  <userid> 

Extracts  the  specified  key  in  A S C 1 1 -a r mo r e d form. 

.B  -X  <userid>  | 

.IP  -z 

Batch  mode.  Not  yet  implemented  or  speced.  See  also 
.BR  pg p- i n t eg r a t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.SH  EXAMPLE 

XXX  - Not  yet  written 

.RE 

.SH  FILES 

.1  ■/ . pgp/pgp . cf g 

. RS 

U s e r- s p e c i f i c configuration  file.  The  file  formerly  known  as 

config.txt.  See 

.BR  pgp.cfg  (5) 

for  further  details. 

.RE 
. RE 

.SH  BUGS 
. RS 

Bunches  and  Bunches. 

.BE 

.SH  "SEE  ALSO" 

. BR  pgp  ( 1 ) , 

. BR  pgpv  ( 1 ) , 

.BR  pgpe  (1), 

.BR  pgps  (1), 

.BR  pgp.cfg  (5),\p 

:CCHK:a1a0620b7849df9927d4de98e6058f66d08e01f746a5c5694374299bf543a7602:] 
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.BR  pgp-i nt eg ra 1 1 on  C7), 

http:  / /WWW. pgp. com 

and 

http://web.mit.edu/network/pgp.htmL 
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pgps  . 1 


. \ 

. \ 

. \ 

.\"  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 

. \ " 

.\"  $Id:  pgps.1,v  1.1. 2. 4 1997/06/07  09:52:09  mhw  Exp  $ 

. \ " 

.\"  Process  this  fiLe  with 
.\"  groff  -man  -Tascii  pgpe.1 
. \ " 

.TH  PGP  5.0  "HAY  1997  (v5.0)"  PGP  "User  HanuaL" 

.SH  NAME 

pgps  \-  Signs  messages 
.SH  SYNOPSIS 

.B  pgps  C-u  <userid>]  E-abftvD  C-z|-zs!] 

.BI  C-o  " <outfiLe>"  ]\p 
.BI  C-kp  " <pubring>"  ] 

.BI  C-ks  " <secring>"  3 
.B  [-vCI 12131433 
.B  C-p  <pa s s p h r a s e> 3 
.1  fiLe 
. B ... 

. b r 

.SH  DESCRIPTION 
■B  pgps 

signs  files  using  public  key  cryptography. 

.SH  OPTIONS 
.IP  -a 

Turn  on  "ASCII  Armoring."  This  outputs  a text-onLy  version  of  your 
encrypted  text.  This  makes  the  result  safe  for  mailing,  but  about  30% 
Larger.  UnLike  previous  versions  of  PGP,  this  aLso  impLicitLy  turns 
on  cLearsigning  (wrapping  the  signature  around  your  message.  Leaving 
your  message  in  a readabLe  form). 

.IP  -b 

Detached  signature.  Creates  a detached  signature  fiLe  (by  defauLt, 

.IR  fiLe.sig  ) 

instead  of  combining  the  signature  with  the  message  in 
the  same  fiLe. 

. IP  -f 

Stream  mode.  Accepts  input  on 
.1  stdi n 

and  places  output  on 
. IR  stdout  . 

OptionaLLy,  you  may  specify  input  and  output  fiLes,  as  weLL;  whatever 
isn't  specified  is  taken  from  the  normaL  stream. 

.IP  "-kp  <pubring>" 

Uses 

.1  <pubring> 

in  pLace  of  your  defauLt  pubLic  keyring,  and  aLso  ignores  your  defauLt 
private  keyring. 

.IP  "-ks  <secring>" 

Uses 

.1  <secring> 

in  pLace  of  your  defauLt  secret  keyring,  and  aLso  ignores  your  defauLt 
pubLic  keyring. 

.IP  "-0  outfiLe" 

Specifies  that  output  should  go  to 

CCCHK:b3d9f0cb08ae41eeee0f554653588985aa46e5d082c6a107c38e7825ee34aa7bb33 
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pgps.l 


. I R ou  t f i L e . 

If  not  specified,  output  goes  to  the  default  filename.  The  default 
filename  for  each  input  file  is  the  input  filename  with  ".pgp" 
appended,  unless  ASCII  Armoring  is  turned  on,  in  which  case  it's 
" . a s c " . If 
-B  -b 

(detached  signature)  is  specified,  the  output  name  for  the 
signature  is  the  input  file  with  ".sig"  appended.  It  is  an  error  to 
specify  multiple  input  files  with  this  option. 

.IP  "-p  passphrase" 

Sets  the  passphrase  for  signing.  It  is 
.B  strongly 

reccomended  that  you  use  another  method  to  get  your  passphrase  to 
PGP.  If  you're  not  running  in  batch  mode  (which  is  the  normal  mode  of 
operation),  PGP  will  prompt  you  if  neccessary.  See 
.BR  pg p- i n t e g r a t i o n (7) 

for  a discussion  of  secure  methods  for  getting  PGP  your  passphrase. 

.IP  -t 

Turns  on  text  mode.  This  causes  PGP  to  convert  your  input  message  to 
a p L a t f o r m- i n d e pe n d e n t form.  It  is  primarily  for  use  when  moving 
files  from  one  operating  system  to  another. 

.IP  -u 

Sets  the  ID  of  the  key  used  for  signing.  This  may  be  a user  ID  (like 
.BR  fooabar.baz.com  ) 
or  a Key  ID  (like 
.BR  0x12345678  ). 

If  not  specified,  your  default  signing  key  is  used.  See  also  the 
. B MyName 
directive  in 
.BR  pgp.cfg  (5). 

. IP  -v1 

Minimum  verbosity  mode.  No  messages  are  output  whatsoever.  Generally 
used  with 
. B -z 

(batch  mode). 

.IP  -v2 

Display  errors  only. 

.IP  -v3 

Display  errors  and  warnings. 

.IP  -v4 

Display  errors,  warnings,  and  information  messages.  This  is  the  default. 
.IP  -z 

Batch  mode . See 

.BR  pgp-i n t eg ra t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.IP  -zs 

Simple  batch  mode.  Designed  for  quickly  throwing  together  ten  line 
.BR  perl  (1 ) 

programs  to  call  PGP.  See 
.BR  pgp-i n t eg ra t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.SH  EXAMPLE 

.1  pgps  -u  fooabar.baz.com  -bat  document.txt 
. RS 

Creates  a detached,  ASCII  Armored  signature  for  the  the  file 
Signs  and  encrypts  the  file 
. I document . txt 
with 

Ci:CHK:fd2b664036683c6ce49a4a1d032bf04e6c08a9412279ef1e4f27a2da64f7dc279]] 
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.BR  foo3bar.baz.com  's 

key.  The  resultant  file  will  be 

.IR  document . txt . si g . 

.RE 

.SH  FILES 

.1  "/ . pgp/pgp . cf g 

. RS 

U s e r- s p e c 1 f i c configuration  file.  The  file  formerly  known  as 
config.txt.  See 
. BR  pgp . cf g (5) 
for  further  details. 

. RE 
. RE 

.SH  BUGS 
. RS 

Bunches  and  Bunches. 

.BE 

.SH  "SEE  ALSO" 

.BR  pgp  (1), 

.BR  pgpv  (1), 

.BR  pgpe  (1), 

.BR  pgpk  (1), 

.BR  pgp.cfg  (5),\p 

.BR  pgp- i n t eg ra t i on  (7), 

http: / /WWW. pgp. com 

and 

http://web.mit.edu/network/pgp.html 
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. \ " 

. \"  pgpv.l 
. \ " 

.\"  Copyright  (C)  1997  Pretty  Good  Privacy,  Inc.  ALL  rights  reserved. 
. \ " 

.\"  $Id:  pgpv.l, V 1.1. 2. 4 1997/06/07  09:52:09  mhw  Exp  $ 

. \ " 

.\"  Process  this  fiLe  with 
.\"  groff  -man  -Tascii  pgpe.1 
. \ " 

■TH  PGP  5.0  "MAY  1997  (v5.0)"  PGP  "User  ManuaL" 

.SH  NAME 

pgpv  \-  Decrypts  and  Verifies  messages. 

.SH  SYNOPSIS 

.B  pgpv  C-dfiKmqv]  C-z|-zs3 
.BI  C-o  " <outfiLe>"  D 
.BI  C-kp  " <pubring>"  ] 

.BI  C-ks  " <secring>"  3 
. B [-vEI  I 2 I 3 I 433 
.B  C-p  <pa s sph r a s e> 3 
. I fiLe 
. B ... 

. b r 


.SH  DESCRIPTION 
. B pgpv 

Decrypts  and  verifies  fiLes  encrypted  and/or  signed  by  PGP. 

.SH  OPTIONS 
.IP  -d 

Leave  signature  intact;  just  verify  (don't  save  any  output). 

. IP  -f 

Stream  mode.  Accepts  input  on 
.1  s t d i n 

and  pLaces  output  on 
. IR  stdout . 

OptionaLLy,  you  may  specify  input  and  output  fiLes,  as  weLL;  whatever 
isn't  specified  is  taken  from  the  normaL  stream. 

. I -i 

Information  mode.  Outputs  information  about  the  current  message  (who 
it's  encrypted  to,  if  anyone,  signature  information,  etc.).  PrimariLy 
intended  for  integration  with  application  that  need  to  know  what 
passphrase  to  ask  the  user  for  before  caLLing  PGP. 

.IP  "-kp  <pubring>" 

Uses 

.1  <pubring> 

in  pLace  of  your  default  pubLic  keyring,  and  aLso  ignores  your  default 
private  keyri ng . 

•IP  "-ks  <secring>" 

Uses 

.1  <secring> 

in  pLace  of  your  default  secret  keyring,  and  aLso  ignores  your  defauLt 
pubLic  keyring. 

•IP  "-0  outfiLe" 

Specifies  that  output  shouLd  go  to 
.IR  outfiLe  . 

If  not  specified,  output  goes  to  the  defauLt  fiLename.  The  defauLt 
fiLename  for  each  input  fiLe  is  the  input  fiLename  with  the  ".pgp" 
".asc"  or  ".sig"  removed. 


i::CHK:b092e904d2cbf62f55794ab6698967fcd58e077545ac1e1222cdaa0f54f0841d233 
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It  is  an  error  to  specify  muLtipLe  input  files  with  this  option. 

• IP  -K 

Do  not  process  any  keys  found  in  the  message.  Normally,  PGP  will  add 
any  keys  found  in  the  message  to  your  keyring. 

.IP  -m 

More  mode.  Displays  message  output  with  PGP's  internal  pager,  or  the 
. B Pager 

specified  in  your 
.BR  pgp.cfg  (5) 
file. 

.IP  "-p  passphrase" 

Sets  the  passphrase  for  decrypting.  It  is 
.B  strongly 

reccomended  that  you  use  another  method  to  get  your  passphrase  to 
PGP.  If  you're  not  running  in  batch  mode  (which  is  the  normal  mode  of 
operation),  PGP  will  prompt  you  if  neccessary.  See 
.BR  pgp-i n t eg r a t i on  (7) 

for  a discussion  of  secure  methods  for  getting  PGP  your  passphrase. 

.IP  -v1 

Minimum  verbosity  mode.  No  messages  are  output  whatsoever.  Generally 
used  with 
. B -z 

(batch  mode). 

•IP  -v2 

Display  errors  only. 

•IP  -v3 

Display  errors  and  warnings. 

.IP  -v4 

Display  errors,  warnings,  and  information  messages.  This  is  the  default. 
.IP  -z 

Batch  mode.  See 

.BR  pg p-i n t eg ra t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.IP  -zs 

Simple  batch  mode.  Designed  for  quickly  throwing  together  ten  line 
.BR  perl  (1 ) 

programs  to  call  PGP.  See 
.BR  pg p- i n t eg r a t i on  (7) 

for  a discussion  of  integrating  pgp  support  into  your  application. 

.SH  EXAMPLE 

.1  pgpv  document . txt . asc 
. RS 

Decrypts  and/or  verifies  the  file 
.IR  document . txt . asc  . 

The  resultant  file  will  be 
. IR  document .txt  . 

. RE 

.SH  FILES 
.1  "/.pgp/pgp. cfg 
. RS 

User-specific  configuration  file.  The  file  formerly  known  as 

config.txt.  See 

.BR  pgp.cfg  (5) 

for  further  details. 

. RE 
. RE 

.SH  BUGS 
. RS 

CCCHK:273c3281f8471b489e06ed4127416c066f41e30e966405bbef774ff802b6891b9DD 
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Bunches  and  Bunches. 

.BE 

.SH  "SEE  ALSO" 

. BR  pgp  ( 1 ) , 

. BR  pgpv  ( 1 ) , 

. BR  pgpe  ( 1 ) , 

.BR  pgpk  (1), 

.BR  pgp.cfg  (5),\p 

.BR  pg p- i n t e g r a t i on  (7), 

http: / /WWW. pgp. com 

and 

http://web.mit.edu/network/pgp.htmL 


[:[:CHK:9773e34b91cb59d46e3:] 
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begin  644  binaries.zip 

M4$L#!  !0'  ' ' '('  !R;RR*1BJTKH0,'  ' ! ! ' ';&EB  + V)N  + V)N+FUD<%58 

M#'#<K:'S*%V?,*a#Z'/MW$M/$U$4!_#_4%I:$5'$DP/P_<'16D7$)TSQa2\" 

M*)K411_7,M'. M2T8OH,+X\*=B29''"S<N3=SJWK7?P>A,RY0 !AEL7TB'T_PNE 
MA7-F<J;W%,BYP,CX[1 X?8G$+: '#5G3]4UWYZ70!YZajZ,8PCV%OZ2K"-7P_J 
MC/U]X(O7A9'G&M'DY8\?1$1$1$1$1+3.7G:*B8_=*/#3:sSN=,QC70YYP(\' 
MFA!$""U;T(RH:/8Z(JJA$'908/:'W_PaM7A+*X"WRO(-X6ZE?!:PY#TU$:XH 
riRT]HYS56R?HJWMZ9-:\_YBF.O/?F03\:5N=98OCA?+85(2(B(B(B(J+-B0-' 

M: L5VC$' ;=J (=NC ' ;>CPNB8HHA*;2",[RC;DC4) J-E69LI;#UJX+60376"TS8 
MB\FI7OM!V'X0Li:<L$_RX/i:(?07*TZi:H0.S.0RWVY.Za-O9L="(VGTOG7H5C 
M]X:?W1Y:]'A4U2JS.,C_BCB(B(B(B/XSSO:H'_;C''CB$'ZC'YUH\KHajJ$0 
M=GRR'W/*1T1$1$1$1+09<?Y'1W$,QW$")W$*IW$89CTNB8JH//''S!F';$T;G 
HN<Y)W8B$.Z,B,9?V0ZDXI'W$$G-Z)A4KY).QC)Z()0SSK:"+>:$FUXSG\KI1 

ME,>SLN,S(AW/6/'#C0'I>'(VH5L) ! 3 T3 S--G K7 " ’ > S aH \ M F X ; Ea9> 3 T S ) ' ?K 
M_3V1_KZDI#S  = T(N1  L)5P8(V$<G2_>[:0<1  )MC8<9$1 L0  + aDNS,9;8:643,"O  + 
MQF<4!*8-YF>G1;*X*L=E2:VY:2''_/9%>  = <3R<"#8/CX*-8:'';INA3<3S:58\ 
M6Q39Q4\WJX[U-U_AVBT: (U;8C?67Q+. RX*WU  = XEO5  9WK:y  + 0LD5=: a"WN  + J L 
H'5PR'FJY'=8Z>*D!UJJOTa'N"28UTa'NT:!J-X!+T)<2.07MT*(B)XR4,)(+ 
MVJQ1-":$Y"M7GT0G)A9RHJ ! . *6 AU I E HG<V : 5 E E Z 6%4 S . 8B ] T : 4 J C ^43 ) S K" X 
H$-)2$L9,9BZ5%K*LD-USDIRF8K7+#HF=634G6ZV:<H=6N:C%-I5D^<TG2!90 
H7FI5V9678TJ2$2aUE:R08'MT9)(-aa9;UP9SOO?a!U(B(JHE:a!(1$1$1$3U 
nXQQ4G$</>A%8! !=P$7VXA'Y<aH#7I=8ZVU;Z#:! 'al0!8W6WD10!8W9IP(Ua 
M;alS(YCC=-P(9H-MDa;C1C'141UA7X3055S#==S'30QB" ! J B7 A=$- 1 3 " 7 U ! + 

M'P04'  ' ' ' ' FF\LB<Q/  + 0GD7'  ' 'la'$'#P'0'8Ql8BDP9W'O<8  = P+FUD<%58 

M#'#=K:'S!UZ?,*a#Z'/MG7N0',5:QW''#GH=.{,a+QD#60a<K;K5Z'4(($G.W 
M>R>=I !/'W?$2::'^1G>+DG8GNC/B#K\ ' 2 P8G P 5 8 ( ( 2 \ Y . 2< D* ' 9 P<$ ( 2 D C B ) 
M4H533D6I(E5*BC*H%'_D#RHE;(Aa^:AR%?GD9J9G3M$SW:LC4!E^737JN>W0 
M = 0_ZW?WI0M .>\5V;  E\ ! 2^">'"X#  = a\z:S‘'YCC  = XXWP:P.Z_N)4C'/\(Z6.N, 
M!!?a>/'a<R'3PJ/GVRYV'XY;"BN"6C>K9;.T;6NR5,S%ZC6SZKU.%HK>V\/% 
M<LVJ5$K.#_G*=*$TZ85D"T>REI#5ILR2B*=2,H.W;-T6T=>+!??30BXO!/B: 
MH[P?DLE,KIRIF0BEFHF0SH>;RI529;C2VU2KYVJS-=N<WHDFZ2H/UV*;"J52 
H;Z.aG*^:TV;9Sl9VEE%G%7(CUXVYD6RR)JTD?K'NHFDZFY\JELV=P:MV;(:H 
HJM3M9AZ8A:+BM(5I-H?a!''HBJR:,9KP/,_CA7G-VIZC  + )RNYAUI"''D0VV'C_ 
MKE)=$I::RE9' LI  8 D ! +* " 44 H " AH H E<W 3 VV J RZ ? F F 769 : $ # 9 : / 2 #X  = , :=E\90  + 
MHU3!DEC8D\KUE9!XCBF6L2C;aT;K.7G*! F9H<VAXZ ' Y I = ) - C 9K8a S 5a^H8B9 
MDI#A]8"_KZ*JTU4L29EAA^U:a9HH_TZE*0G\P$«1EM78NZW=8E:',V9!'HlZ 
M-GBD+$L*;>;JDC+/!\>WR:R:J)K21C)>G'PIj:30a+R)CZ1DA1Y22ZFB-565 
M?V/"G+8aU86YHV8:9AZ2921 M 'BIE;9G ! X C M E=; L C 6 YN 2 ?+ RG4 I 3U " R S P<= . 4 
M640aR/-aHUDM'IH=R\K;*+8a2<"N4B67+<DJ9+"T2DX61FJR''J84LE591/N* 
MHEG-RAHU?:=:E'T'J8HU*\_D0/V0/,'=S4a9KaC'P5*6*>ZR2ZaW5P_-8H.4 
ME3i:v=Z/6W2aO]5aC$PIID]3a*3BDN4K3.8!8AC0CBFIB5MJ'1H(WR?O<N87* 

M9H?46$H62_: P*2‘'65/_XA"RZH9( Y$Y+Y_G*Y8H=TH .)D2$*MUJ5CHZ?W6V3) 
MZ'JC"C*"a'$DI.SE6:0a'FV66E6SY;V+$I#G9+1:ZY?.RZ/96BVZ2X "09828 
H90OZF>U]TK$Y;/X9K(:TX1'I()*JE85C(!9AR(1,+65Ti:z'TJFE  + 7B1I\\C^ 
H>DD6\/SXS>UaVLJ!91T**  = ''Ila:+D/2'?<  = -C*!C\-Z21CPZ.#(''DHVS  = + ,a,R 
MH$P4I\VTU*aAXPJ8>Z8<-R;‘'I=<8'=N_:VRP/YU,'<a])6CT8##WC0_58<VZ 
H'B.6ZK0Y5?aL'.#H8HDV)W$\C=6*CYBaZ6)H. F OG I V+Z<Ba; G : S3*0 ) 67 / Z 6 
HCYC56KZ2CH7JZHY''9F'UZaNA^,A_8-S  = 3\6-Y_ZCU\B,CZ4R''X8',J.C1C-C 
M!*\;IY<8(38_$3>^B?K7WT\8KPS '#5JZ'U5aNL:54IZ2S8($_S.0,$X\8Z=< 
M;.G;#NEG,.(:F),$8G+O$VC$a:01>VLS)]I)*S,/#<.IHW/a61A3C:Ma(X#L8 
M!GP!0_CNDWZC#I*7\#FU_W-P8I.aAR)*[;<SDZL52(5.KYC.X9*8ZR1PV9VN- 
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M7Z+R1 . )+4+a)>8D*D\DN47DRS24J3R : XDFFH .+. 5$C\<8= T8R U ; 3 J = ; N L= 

H^YWHUK\+LE;1L7?8OW[YA1***_D?4?F3>*U0M%,H;XD$,SN+6SC(Q2W1M8NE 
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M+:):''PA;/aB%  + 9FCa)#!DHl90'1KX>O.W%K1H08L6M$B*$'NNHa4H6M"B!2U: 
MT"+ZJI57T(*6XCI:T*(%+5K0Ha4M6M""+6B)ZCR-?WI_C$QNBXH7N>)#R68< 
MZ2,HEI&5!JB42&DFH4QD%DA%0CC&R>4DI_C87E,CN>C6XIH;FN*:W1C/GV%V 
MT"<,I3K*5#;H2?K0C . K&_:3  = 1 G-S4TISDZTEU-S<;*.YN0$T-S  = :<U.1YF;" 
MF\AKD]CXH$L+;R2/ :%C51 \-:8Q0]IZ:4<>>NG=>PN/-),, F=W>^U2 '>VL5% . 

mN/-B+PN4.P*#*E>0: ' BTa$<+>+2 ' 1 Y*&U0 (>+> '1IT:Ua$<+>&3l2BWa$20> 

HM8!'F$+4'AXHX/FZ!3Rl992JT?&PV:w<W/SFa%(>2<7#JWF"Ai:X!13WB>M(% 
M:Q*UDZO6I'YKI8:6*FBEC*13LN'J6NFCE3Y:Z:.5/J+/7WD%K?0IKJ.5/EKI 
MHY4*6NFCE3Y:Z;-X]4J?UZC(J4YQ%%=A_WE+RC/03I;SM3>6E#GN<F7Y(\C( 
MAF$UK\Q6D#4Y4J)<VMU2_K7V-=;U/FL+9>QU8!%4,G>EM5!JM5#99N<K1\(_ 
M?&$**7’1WDJBY*.7EA.EQ%;0RV#DU%CCFX^3S\$LR":V6"/ZW.C;4<NU1(5: 
MKB7,QFNYEI9K:;F6M%C+M<19:RW7TG(n4;&6:\ESPEJNM=!R+78QEFN)3J>K 
M9E>Q1:##>E:6L)6H6,8*8D$>JLSV8I*:a8A+L-E8ID'+MC1P2PNW)!*5!5?1 
MPBTMW-+"+2W<$GT(RRMHX59Q'2W<TL(M+=S2PBTMW,(6;KUZ/<=>XR9A ! :_C 
M;!''Q%*8:RHNE:MQ#:;'8NaZW93N4C?CUMC"35'"5R*>'i:=A2B28D*YM>(6JG 
H7=FR;TRX71 AQO  = ( ! - V C ; W0# \ + 3 V , # ? B5 # F<8G S U D E H A I ; S>M-< J 7 : J V 1 +8 F L 

HM49:;C306B.M-5IHK9$D6:JU1OFTI]8:B1*86FNDM4;?Hn:H?UG«VNPWMC14 

M\-#PTE#B>C*54;)V0F.4/JP51EIAI!58DD_)ajHHA9%688F%D588B3Y_Y16T 

MPJBXCE88:861  5 A A I A9%688$KC * ( Z> F D H _T R 3 — 1 K?:yFF%KB9WT#8:,E'_CZ 
HL.LS)1-(>GTFK43"7'Z)E#W(K;ZDD[:K3aB9)J18TR7+46M"D!4T++6C2aJ:% 
HXC1)<K-:T)3/LFI!DRA?ja5-6M"D!4UFC9M;/"E,$I58/$E6$Y'UYl=/RA9H 
M:9.6-FEID*2CLN'J6MJDI4U:VJ2E3:(/87D%+6TJKJ.E35K:I*5-6HJDI4W8 
MTB: ]> ! (57  = $K?JR2<J ( D %T ' Z P$-> C C 0 1 V Z X J C K% J 2 * 3 a I ' 5 # * Z Qa 1 . I ! # KX \ 
M$5G!SG;/F)/LE%YC2*K3"2ZII3I:JJ.E.J+LJ9;J:*F..*.II3I:JB/+,FJI 

HCB!?J*4ZPLR?ENIHJ<:KENKTFYVVP7\>C S_0:i;N+=?SFV(''G'WT7_,_/ 

H'  K#?OQCA  . 80%+F<:/^:R5Ga._\IGYRQ006WP;756C8''  + LCXC\#_''C5^WCQTW 
M%/T$R5#>Y\HL1)?0".5+-\LB"<X,MK'K4:7X'IGEJ0JJ)'5??RW>7B]9$:23 
M;5;8*KUQWPZG;(<iriVC73K*XQ'M:70,S_?7C«=ZYXC<R+Z^8C=;I\?78_]R- 
HN:7CHV*: K<8-U_3/ !IWFJ<DKQD>IG.WFH_  + A2%; . 0 C 3 D I ; GIG*B_ E ' RW  + aO*K 
MY9l_=Z0K7(_9M:63aL3_2YP6:-' C\LV3AY_\aA+?) L' Q_W !R;W20FJUW_SVZ 
M7KXLKY,PHVOH?C00?M%\8KP3''.:='P\2KGB78.<YDC)5='9PFVU>*T*a<N\O 
M/6Q$W9EC)'K8D"RWX5BCY4C2?(A)NWX.+4Vi:S  = 8W3KN'‘3:JGW4WZ4HK:V8T5 
MTRXB*) !V\;$1=2=(N_C8D"Q'E79#\DD3;Z.S._8Z3U\++?0C:K0R-4;U.3ED 
H)VW'C8YJ)D>%!7(Y!71DG0KR.05T:-8CR''GH>I;0v:383YH:.$38E1)PI+:0 
M-[:6V<09%PP13  + S8TFKZ$21<;8H[  = R-*MUU',$8CMVR!<:1^9%  = 3GSW#_N5CZ 
HWBCCY(VaiIR0$5 ■!E(P/CJI'85K8!X=E.V+4/)\H/'NY3*D3T0S\98\,!WU* 
M%CU_:72;%H)(v:a7Y0D(98'aZ=+'1]BU(/72P(=H05H$_8'M'R*!7YIWS7,I 
MC9Z88Z-;'‘ZKKW%$.J'HBC'6-4C>;YZHY$'\32'_HT8CZ$B0D=8aX=J-)=7SZ 
H09KJ>G+1F'JJXX"JICIXUH74S3UEaBT\3"#5H4.CZ4N0ZM"AX=B-)M7Y?)/F 
HN0.0.=U9EF<3!S  = 3F9"ZH)n)A:)8>:X\\XD("F1 F ?8Q$ W0 E R , S XV ) , LI  8 V = C 
HNaC85''*)9FF. 'LE3GL4<?*#>:HPO$Q$V!5G>C0M244#PH**R! .aJB383JT_: 
MaD;*DY:(P$#"I88/L8M  ! XJ6  ! #:8"5  ' DXFBB<27V  . =N3 ? = + \ S 5 aa, >W'' % D ! V9 
M"98I14U.ZY9FJD?)L+2HN.8-+'1Y=0\*96PKP\.a'E;?C55?2a#W8M>/,KS=U 
M7)L"  . ?0/  = 8a*HR)  F3J''  ' ( VV  ^7  3 : F 1 a ( # ? 3 P$  ? 8H  2 ' C T \ : $8R_  ! RM  F I 7 A 

M9UGRN9B?*5)W!>P=+'5%a+NWY>C83IC\G5KA3-Y$E2>AD8'!_$T"'V'7P0a- 

M'A''B!  :GR-U\0,  : . 1 , *74 S 2 L74>  = * 3 ! 2 0 S 2a ? LS 6 5 za ; 0 , , 8Z  ! 6aH- ' T ) Za  : P 
MH>'8C2P!A:N:9DAC0La,:D(IU68SU_9IGUIS5:i:VE*\XaXL+YF'*\.CZ%>9B 
M"O#PC$>8DW-\W-OBaUZ)T$'=,X+>CR'0(A:H,IR(C(VH.\NP(3(V),M1Y<8' 
MD]),V)7W3+:N(DaL(R%M'5UE'41,5"'5$a!'U:,a81('AV4CJG08;:J3)L2S 
M;l5SJJIDH-0F05(OGG55<aHN+I#52,"CZU>0V4C'PC,?57:+Mal+TLIM;3F34 
M<HT<]"OJ2*;W;I.VK:9RWD48!A(O#7R$70H2+PU\B!8D2C:1=I09\I7+/(N' 

Ma;+K06_)W= ■ NEZ: ' X 2 3 C ? 3 D ( 5+0a Y V L*8* F 3 2 N 70 A ■ +=*3 C P . 8 " 0 P$ ? 8H7# ' 

H(($/T8*4'T8N6,BCZEHT$/.RN;)6BDa;;)/JN_B(J$K1-3(XJAXM1=3(X+!L 
H1Y:Bl?UY‘':8'AZ;9*L0*EG:.-\<KY<'R<5GYCa.8J8'.a'  = 'U:,P!''*#PC(  = 
M50CD/<LT!;:8.''L'3B,C?O5BZi:>8JJD(#a-(1.C0:/H2)"%T:#AVHTI'P<=F 
H=a_7^C>J80H'0CM)UE73("HL>8=5'NC(.A7>794'.C3K467%aH/E3:a%=H,H 
M''4  + X:C.$$;SJ"38Z$i:'%C?*E\7%aP5LR48!'UZ_PMDP4X.  ' 9 C R HMaB  F S- " _6 
H_R#"BT4IO5?7%XT?IKB-U?30S;W(P$#RI88/L8M!^J6!#38"5'FXYKKS57Z9 
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MZ%I?2L#Q&=4E#N-;%/NBUE=-5,C '0**Ba8^P:T&BHH$/T8*TB.K1 ?0$WL!QY 

MZ*4JNY2:?%P#VFCD,-W$"!SKUaWF\VF^8.C>#SSG25RP0LT?'  WG  + U> ! 0)20 

HSU::%S&X#:!0H_)!&TQ4\!+V*."H>A1>O!X?');MJ/)L0$!9IDVOT+8]$Z:) 

M;5*."JX%^47YTFW(P$HP%05\A%U;aj\HX$.T($U68MVIH6U-,JPUE'_#ai-U 

HP/WJW*>B4G"J3T$aL-''A?UB+Naa08WBW?+'!8U-YaZXP:$VW$N!MAYH4U[, 

MFC1/T''2+BC?K*:,w::F"GC;OFEN>X$J\0-0UWCJ3'C56>KW_"%DQ>0R5IUUP 

M<8%aE00\NGX%HRH )>  ' CV(OH3.7HE0''H9RA:OA((61MCY>L{  + 1PR]16<(X041 

M5YGPaa*/KE_+A!=\>'CVHQH>.*WEXLMa]P"SQS<9\-/;5')UP0iaj*23ZFD(- 

M?a3PG1ia!!M,9*7"#0&'E+U;*N00'CAI0CIAAW>S\V%'OGW8?A\V>Z?S%.U' 

M!a274L%CCP'‘8JH,!AP8W  = >7CD*%#*Q4.*"'Di;>!2'8$"0E0KDaT)/".3BPCR 

MC2<J#0AE4EWC?8LX,:N9UV:28^#1'SB[13IN$_'-5KY]"#*P,E8. ' #C"KBT3 

MX0Ca0[0aS>a6T6=N<Z4]\FQ:#.1aCL)4O8>3?R=PNaKE*29L985V;Z('D+)W 

MR*SC1'$aiaUIT>:B?<M(*.JNI\G7E"\a+9E;I>SCXS#T0'EXUAGN.LN5L"CS 

MG9.V6/6,S>:2W!9-Y:Li:XV$"61H  = 8DU?aLR,#aW';E39F%F$LTXFV2/9?_C6 

HE5'AK;0PG%D13>''Y64"E  + %_<18?V83!7WD<U'a  + /;G?R-4QF:GK,<;Q  = E6$LX 

MFZYH2=' FI$K3-<8-a":2Y?-848  '!J1H"Z,az%4C3$$"'9CVJ42EDJ7148EQ5 

ME*$Y=">_F:3+5$EK>B8l:30/:D12HBN=J*'L$$)Q'QU<J>9L5/;aa9U-'1]:I 

M(8=30(=F/;*<':8V,Ji:\16GU65YG4KI-KP3T+aNE/,M*BZ8<"G'H''M7F'(I 

HP,.S'U72C40DF=%,).TFE$=)JT<0IPV4I?6<1D?2\ZYT)#7$'(P3*5=JXN*" 

M1U$IP*/K5Wa$E0(\//M1)?a('I\F_(L6RB0QH'^N3E>Y16(\$68J9.WH3L6M 

M\Z*EFK5a<88L30(>7;^"K$T"'I[:]"+.VG\'-LK9D57?Y.*L>2"4YD%IO)/$Q 

H08^,\D7JD885B24$\!/;V;9EH0a'?Ha6IQI-XM#"CM^_O%>_MFQC*-"''V'<?< 

M:DBR?RE^L/!R7-%''$'J-'4/;HOZN?)-a980E-DLG'9"R=THLFDX"(*8-J9(L 

M9CC,aL$27>2BE%#::7;<Z77,)=8GK+R^R0XZAP9L<*H<P(B"'=[D81L:35_" 

MFSQC0\.a8:Ea$2CC,O8BN[V._MCV9I:CA?:OCPQ5JN>L-$H%R(87M*L\48'" 

MaF,5'71DG0I'+'+HT*Q'-6XU1?._FGK^UZL.2_()"-3#4K/,;)>F\N\G5%Aa 

M6**'Cja3P;!$'1V::6B%)<_B5!HRKF*aW"ITS8H'.%(0)(?C:%#HRF6A!:#E 

HF9KJERC#159B[:3(2'"E[M\3J920'8MJ0,#>:MIW?W$W6:P<CWQ1FSXH)-EN0 

M7OaR;a(EM.S?"6QSZA<I0$96Al8l'*3LW3*T3' $3 1 BT ) T C ) a84G VG  + L0+ ( E $ 

MK17S9XE5i:i:C5$/a3%5D9_J0'D  + )WR_'G!8"8-B3,GXR<<NQYN6.GriN*,,H7E 

M!Zal.X,'-HI+!%I'a%68U/'AT?5K84+'AX=G/\)DWGH2;"+2E$:41<C?XE8E 

H;QRP42B?'8J-K'Q=4a!(V;HE*),"0$P;TJ+-:<j9*HLS1'Na9)='KVJ/\;UD 

M$?'V?%3F_\?V3:UUD+-z:<0?W0E:8EKYAH_(P,HLHDX'’V'7EEEVG0'''1'O2 

MI?R ! LC#SE"_/8K<i::<LB70 :6H>7!%:%*50AL>\C=R]"">#GWD$H8UK\3V(B4 

MIY>QD97A6'H'*7NW#,H2'(AI0Z(\RTLXS>1FS'>KSDADV#FCK6<>8?4L8=\* 

MFH';59Z!0(=68n8:#82D'  5QB  W C L- A*  A6  ) , J 5 , Y , Y8Q  + Q''%a  \ ; 980  / 9 PK  . 7 

M142*F,6HaN,;#Y;7LQ9[:)2aJG?0'Ca  + ,<NHKG_B' AaF>]8<-C:80X?E*V-!P 

M[$  : 6U,>"1  $ . KWY  ' 0 : > + - Y H 7$0  I _^a  E ? P>0  , ) $#Ka8D  !P:<S  = I'')$-::i?!LH 

M0#7HI_YZ.BT*87LLLPLD?C#X  = VY;DT)'  = )V5C5E%X(8!  ' - : L I H Y ; E . < ? 7 + 2 * 

M#0P.)D"3,'/B\%P-:N%;C,%<3)U543D\s:-''7K$WL.aBRD<\QHG,8Z6aD'a9 

M1,(-:3T158'ENB,4\!%V;8F."05\B!8DVD5IVJ(N2K,E:z+L.a0R9+8QYA:M 

riHGP8OLX:HH*9:':9)L2,JWPN/2XP>#8:"7R$70O/J">!#:8"1/F5?>?<9<BU 

M(9?7'_KWY5X3ESJ'HU3_J;!2:?C-BUM10CGD'1$4R*[XV(BZ$V15?8a(EJ/% 

MiaL6-ZC'WLHBE4AL9/<\W6,:iGTR0;_.Y0H'  'B*-HV1  '■%SF*N4'0aL8LC>L 

M. )5XJG1 ;UN !8T. Z3RL?3<7' ! V E ) 2 a$ ?7K_ " VK ! 3aX= F /< F B ( F " F C -6M 58V+# 

H>0S#C'! 20  + 35, ■X/*CP1m:zA\XVMD8*4V0L7'1 :BUI;9"a<> ' :$'*-!L-WF;S 
M8a6*I3W'K<'QY/UX0. I . 0 + KE : a_8 S 4 \ /T5><T7 F " > RR L ? 2 % D = 3 " ! E<GL$, ! ' 
MV+5E,CP$\"%:D'2<B>1*F4#3D4_4VG/5a<HVYD;*:-0FD_.)5U6'2*O)*HT0 
MT:V'MZ"C?(X9-C(Xln''2-FC<)2a'1#3Aa3CQ!TCZBM*K(GS_/-/V850:J>% 
M1"F\a"8X*KH6L)!83?E",ZBXX85F*,"CZU=XB1D*\/#L1YB?0DE<9L!RN,*^ 

MIE5V9C$ ! S\R<V1 W4\55G6YB3ZX5Wa%3G56G*=UG0(?-YDY_FELZ3+5XRaOL2 
H' ?JHG3:8#4E)5H1 9$«NWVF-\\a*DKMBT>\C,WCS(?0$X!  '\,APV5C0)CPH(' 
MB0Fa(''H4>(B8'  (!^HTZa8.Q.8\K'0D/j:*.40R([1  ;SB  = CP.  H3/N8-BE0HN7)I 
M#RHLD  + 0IH"/K5) "T*:  ! SLOYATN : E*4$'Oa)(K:)/J.*/)';JH5'_! YHOOROS 
M1UZ04;_)S*Ta  + D0PX.5A>AC  + **%"*[:6,$a6$I!U<:ADE"aA1K4aX7O'T1F;' 
M6)YK.Z!',Y:8j71$E-T%8.I1GM+'PP2/aF)«H^E+>.038aj.W0C36\V;>:a8 
MAN)JU0XG?!53X2UZNY81=''L+'XCE(QS%K;RFG.  Ea<8%  L3  P ( >7  ; * " K$  \ " ' IC] 
M:+/_/)0'KaVK382a+:-6:4'aM,'9.$Y,+C^?63''PY/#N=B.X>\:S.93"9,T9 
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M(9SAP2H3S=#1D75JF5B8Ca)C->a0CV<+REK;G2V"\NQ>3,6$ZFGV6?\Ga+aD* 
MK?G)BHL7NRR.5\6K^Y299. 84+a:T ' $W3_BL(E0IF''192?6"*CE3\'GY6_J8% 

MBPL,323aT?4K8)Q(P,.S'^WP%"DT,_%)+A<ZP,<6:aC;ZWNKZ0A%+SCE%+QX 
MT2N"'KRFRO52R,#a'‘$4"'\/'7PA8,!#Y$"Y*.8  = %BRYFI<968L.(0U#(O  = aD0 
H''aMJVR"56VT;+49%2(#I7\I#%"XN>%HD ! 7AT_0I/BZ0'#\]^I*-3.%$O.S'2 
MW"<Z09(=DNa.NL%Y3'!WH_W7RZH\$"L;F<NU:NHC;7aC:':7B3#C$1%7F2F/ 

M''/#H''K7,I$  = \>'CV(QAIE\Y:R*;Y*3-FYPQQ*aRR\".:Y9JJ'"*8G9:z*N01 
MSa:^O<-/V'1R05W0/JH/3.8-BE:'WC!51R9D88!HHH8/L8O!X$0#'Z(%Z8:G 
MB)LRL_)K\l:'Q+W+:<G5A>Q>Z;3\\$C' ).2:\F\+98#PU'P2^'b:%IZ>3P(? 
MHa4),0C*?097a0TR\FS8,8D8_S)"65=Z(?W8C''\L9"4CRYG.52R8$KJaN.U] 
M8:GF9518("M30$?6J2'C4T"'9CW*;-RT[Z8\>Y/AXZ;F8X5\'#D!:'Y-Y8R, 
M"PSF9!+X"+L6YF42*!'M2)F;Z\XJUU8N0VIB3IC#,]39X>?71HR^AX"865?. 
nVHBH8,K8!T?5HS!9XX/#LAUAFHXE)FFF'GWU2\5N0=8984Z5G! S? JKaACl2+ 

Ml  Y8! a<Q, ■q:aUX  + \3' ,?Ha4)LW376=F>E5T*j:N1 D03KV(5-*(S5DVQTI'') F 
HU.VHYEA<7"#%DH!  ' U Z \ a P9*  ' AV<_P03  : <>_RN  H R . ? ) / G R E 6#9  ' K ) R7  . 
MK:V%>1DC5T_OX8V*6W%'''1;+J+!'<J>'CJQ306JGa'C->H2)O6D+B+W9:FHF 
M/V0R. C0RW4QW"+"X*;-FH3HDX. ("8P()>'3:"D8%$O#PC$<X+D0S6S. OUS* 
M)PJ5F.GZ"G,NN1  F Y7  E = 67<^  PaB  L?  W*  I ? " X- , C ! X ) Pa  2 * ' B C %HX3aa0 '' 1 ' L2 
Hl/#URIDN*:,':U9GYGH.J/;L%0Y;aA;*!R21!17,AO3O'\SW8BB?"HF("IX' 
MB0''.JD?A89#XX+!L1YFO_:GN:;K'':1)Q  + Y_BM6/HL7EZJ8!"IJ^2S'T8Q:WW 
HUTO57(X("J1R?8Q$W0D2.3XV),MlIO%HU>9L3OWSJY9V;T/$N96KT;aX0a(E 
M\#ZK3VRC'BN1V::'C[:!K2*2V*>!#M"!ECH:67\JFM^79D:^-HW,K4*%Q=(0$ 
MRM'ISW\a'RN10J:'CC!K2Z20*>!#M"  ! E C J ZO ! =*4* I 5 . B ) 3 F ^ ! 0 ? ' B E N 
MQ/4KU02/"aND=PKHR#H5I'8*Z-"L1YG60S589H:B^8(DWP:MCC*\::;'^*P? 
H'a'V,U6*ZaDJ+'B'7P+HR#H5WN87'#HTZ:%B_4?CQ2><H70/""VCC53_;'!1 
M4:Z%(\%FC,S#5\^UX8V'G6.XU95OJH2,#-Y6B09'RMZ%MU:B'1#3AK38-:WI 
M8WW8?"JEU''HA;OM'+UL28aF_UaP"*6ZIW'NJJ1P98,CD-/'1=BW(XS3P(5J0 
H%HL_V — ZL8,8+^I;L:s*VNU.HR6?AI*GX!a';FZ1X7/1O06%84K=%*0(?G,X 
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MH.Z:;TMBFPJ?*((J"SU18<LWI$\T:9BN"ISP6W._.=_"8NX_;2+EL#,G$C,F 

MWW77?M!a6]35[Z*MT'42C5"GCV:F8?LW94V)#5:IM85264:M23C!UGLH:840 

MQ"5C:!D*VC>69aN$4L/"(8H:%D3,'\Y_00UC!8Y!*>UHI7-YT9SZ.HD-V3F; 
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H,22L;8$82R-I%M*,,C/’'=H#SVT_=*C8:R7)"V%G07B2aGKY45W=75U=75U?? 
M_DHUSZ*XF0UOW;9U\:9Z,aVS3+T/1O"K^DFJLLLL#\?U7Ca)XUX8YY"61 L' 9 
H")*#N*>Z:1CDH?HY>!?V(XAL$)'P#E.(:jEaFB?C((''ZP6ATJ:99%'\HKI0$ 

M??4*3  + ,HB  = 5V8VM;8;G:9  ' *91  H- AKH ; VU 3 76aP ? ; 8'' K ! '?AC%_C>aC_WU>,T 
M#-5)TL_/aS14CY-IW'/P2;RA#N,N5HYP7aRC38$5T6'*N;)N8DUR!7%3+)U) 

HZ5V5#\.Y' ! ■ .('H/S9S8HVa<86LF83J.,L(Y3Z""R>68ZD59GD9G4''a$CC3a 
HTHOZERK*8:R?C\)'',!WEV<ZMFT8W,P9'D9:%>AS?F:30;9>HYC1+FZ,$NaD+ 
HC<67*NCU(L0#D4C8MC6-*-YAT(<99'A8T>_8I''H#$P6YNKL4B43'M#a+G$S 
M#(/W(;4^"Z!a#/_':884CX4VU'F4#:%D+\B8D-P=!0$'''a':#ET4IJ,HIH$^ 
MFT:C7NOI\=.#6S>C07<8=I'.6HTF8:RaN%LWPXNPJ9O+F8=)EDLP3CI,1RT, 
MaX""34C#CI3(!-*\\I,T8:3!N%,:F4WCLY%Y8L09T/2XaRUN91L7\-*MFaGa 
M8‘'<M#! '86=KH12D$\B'=A!H5(-:S),/TBTX4=T?371A)TD5G%)VET+DF! F84 
HaJBN?’#:_0DG6A7aSTG-.!Ea8719#DF"3$"Ca>0Pa8='P'C*,L.N+Z28.1:C 
H/+TL9[GIIU>3,=:-%%B6#*3#J,U ! "9*E4PH%)1;2DU'/S4C4;U.CN)_,%.TG 
MD#(.XD("9%3+IT'"%)9:.a?RS*:(<a;#:0/CH:TG)RWU\:x_#CB($'X.+J+a 
H=*SBZ?a,BB9:i82-9#Z9'L''(5:"'_D<C!9!#U4NZTS%02X,F\3BXZ8!TA\JT 

CCCHK:98899f38ff1fecde7b77858280aa33813d0298ac54aecaec15674ea11dcdc93deD3 


Pretty  Good  Privacy  5.0^“  — Platform  Independent  Source  Code  © 1 997  Pretty  Good  Privacy,  Inc. 


2263 


binaries. uue 


MMK81JX' ZYCU'  1_8)7SRC8,P23%8*T. :35,-L43  + -9,ZI . (2Q'2ZBa. ZHEaV8 

ME%DTB)F=*!5!N3#+53U6E16IIT)L+,9DI4)aW#:IU5XQU5<XaT4.0X!.\BB> 
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HYY.#I\Y7JV*ZIH$,G0aH4VEKTSFBZ:  0*  ( OZ  P%  + _8  C $<0#  W2  5 7i!^  3a2  " 2 1%  , 4 D 
MKP,64NPR77JGV*6+(>JU\LIN,"5F#40+5RYG+#P(2<86=NYI>/G2T_;6GJ?' 

M. )0=KLA;?CaKOKEU78,<G*FTS#C<VCIR'%R(RXV#6V+9<9C;1 )X#N'4H7VR6 
M: F7a6. I*H-;Ba8WJ%<M=P?3"G<);I?88A3Y8AI1>GFB8G«0CXY\8E+*W+;C 
HDZ2<=8))C96U/)ET:!'H1>EZ\ZJV.0"8D=4/U0(aV8>S958DI!87YE6DXO79 
M7\*8CG_WA:A0D2Z69T57D\!5+(G/CC1;NH(U_6GVY!SDN94NJ)*S+\$X.:-S 
M+\*9+US39G.6>URYaHM0UAla;(UEC'P:CUR_SIK_W<(U?ZE:RGG((A%SD>W6 
M'  *<5  0 : . #)W0C_US(*aH  + _U\Cza[:<_\^L''\RS3A*?*L*C<1%,ELXa5HNLWUB> 
MAAC+*;3C\Ga28RO7A5W>'_8DWC_,4$J5Z"\#MDGXaaCN%?;I:90TZ899EBaC 
M_0Ma''X%#D8NA,37B/6>TX:"78,<A''IC(Z!*,?H+:WF5TCX>1G>2S9a6KF.I) 
MC8/(\*a9R[_Fa:?*G$S+6HX_>_99=*#VH34TCC*C<C%>,D43>GC'')U'ET'I 
HS2$3I;6.V"GH'8(0YFR6D4W/LCS*ISD1IMR"U<''XTY:PHHW0*K'!'(V(AA#4 
HF  ! T;<  ! 35  '+0%"D,''YA%C8KYZL8%6__4#  '$5^79S>,<J  ' : 3 ( =#  " 7 " V ( 1 , a C 0 + 
MTPT8aDVA6P'Z<W?";LV7T?''‘N'HW*0VOB7X89%!UWAA''?''OFR66<!a?J'#6Y 
H,AE(:74IEK''328D2T;6:,:G)%(60.5K4!_<Vnl858)<I42':Z%#YaEJ:HMZ2 
MT0Z:  ';UlH6*JRJWL[:>a382CB$-M.V2X'L_C83  7''1  .K5(  + aJ3L8l''W7HU\K2 
MXWH_Z*\_OFA(_C3N?/$ELB9TX1 S=>8FD;Z)/1  ( ) LE G-KL08 S 58Z 5 6 ; a6Ra : N 
MBB#'HX9D=%N*=<".Y:JP)/)Y'#S1*/GT:W'=B*X:+UK_6$?FY%3FZ7NP/;0T 
MS0*ZEN7RHX-G!T\??9:EaULY86ZY!3*GM4RFSW(HIW1R%ZVG9RCET("K‘'L\5 
MNA2AZA<F3'/%7E;a?!.4W</M\K0U.XC%><E:OVWE3_>/-N*OZ/aMD8H7F9Z6 
H3''a,_4;4<ZZN\,R9<T5D!JHGI<_6N6/WB=>X!G*%-;G4+(3FMJZ0HW"W\<>3 
M1W6488C\.N.[COS6lW'PL>IV;GL8*';VX>,L(8<P!M(a27K%XG060L\RA$[, 

H) ' 0R8USK! aGL/-?)0#U+R . V97(L' B0SJ (8A85TRVKGC( !.R$SX61J9RER;LP 
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riEAN00-#2A)%YBC4CEU\GE]DOBFi:C"V8;BIY51-_8.HKR3>/C$TYR,F/*X?/# 

M5VHF/CI  = :1;C'aN$H)''  = 9VZJ/F091QD?'>#5‘'#B\B*'/XIRNI1$2>(F;($RC 

M9\6R.?D2%/H3['$7Pa!D.ia)4*#?QW5:-8K%Y58<GJ?'  83  + -T 'N  = /$Ui:  = LFL 
I*II);P%_9r;Q/^8^W$8I!SE=  + L46X(Y;VW>N5/8*L''%YE02TRID''/3DQ=I:1T7  6V 
M#4$^U!>G/:/6P68_RN._G#"'_RZ\YP<$U.TF4WQ0%C)-PF0"_7'.*.%3QB#9 
MD4<! E8V";"a/_4)QV$F ■ :+BaKS5 : CV-X(\YZGFU^; .#_S8:$WK6/=A) (6*+= 
M*$08$H%4Z;B0U7X::8:R\GB+-CDG*\?J^-$+=:>QJ8;!>R+5B*Z7R1ZR:UP7 

M-VJ !P0U/S47d:RSK'7-(\$H'N=<C2*_T: :zNA_>8?: ."JFH9=O7UU_X:0PM+ 
M+YN,L\$,Q'E+S'T9Q,-7IGU')SGT'MVY:Ga4'I:+'SQTVL7*BaNF*Yn;;H/I 
H#'F*CIT8(DB$3HE-3NE535URAWZ918\X*x:#_*W*38/(6<'-L3RI;?K"Q>:8 
MO<9IllVNJ80_%.LU?RG'":",-CQ  + ; + %*S7KHDBO$\l*IXN84Z9PC'63CJO2*.'G 
H9I,TWS!L,L/C<_;BQPL,KTED-2'>3a(-!:La8I2Z:?%#6R'M-,JH/ZPBa8CF 
MXWY>'''%''Y!L:'‘AU4N5!)TC!58<GSX-8W5)1I''06'?8VR  + $"GT<38E%FO8PU 
M2KK(>H;P0-GX$H-FGD9P0ZU>9J 'AKKI1M!S>11=RSI*%C\8+WZ(/I:x.T#DSW 
M$PD'A_1.>_PN<''YG  = :$A81?!JR6<9'Q#8V4)4_X,<''_(a:jD4BK$H<\6B?I4 
M)4''B,Z4?II;W8\XIBA%M.U<?J_MVC54\8JJ1!#-NM"A#("<DCXGN!28688;[I2 
H',*2R3G9$")  + 2(BIP$9OC?U  + 0E\,UGF"ABP2A48O<<4D  = JE\‘'5OLlla8C%_7O 
MKW^.N*M;F]\53Y),Z6HMG9C0/3TZ_  / ' S;  YT8;0G6B  = -: ) M , R C A = *- E = J ^ = W 5 
MPM5]B3O\<U8QC.ZYVQC=2J8>*C<NY1L.#SD?M'$25ZAPIV*W)::K9TL7M,0S 
M'''9S)UUER47?!09K9,8RR_8(6-#:*%;U;!UC<Y)D82ZW/$]A8O*J,$0'P";S 
M^CPI5U:Y)GaX3:\MHWG8VO)N7Y0!N=;4.7K:.?DL$\??5/:"/" '<8+%77a*( 
M-8Z?8->PM'C'HT5$H54Aa.7Z),HPBBWA<(F50I:*>W6VF(9'J%S%U39!2Q/0 
M8ZNP$ET1U4YW$H6N<.#%Z4'‘5Z?FH:FV()6I87:S*FH8Z%$'=W9S59<U"NA95 
M03aX>  = $Y^a0HZM;-XHa!EHF3_'?T5NBG3'C(D?71MElI*3;EAK8lDKXA_'EU'' 

M>+WRPW(Z]C) : !<T77EC87 .>x: )BKQV '8NI-U324Y:-8A=D5%XB1C%26YA?<= 
MY.<8Q'LH.0E3V/0C"T(ZVGHZ<JCVUl'D$W17ai:-+,O%>8Z41DWI*$aWF.C8 
M + RLLDZ)0Z))1_4-a'Ba$#;_?H#"()1A8(  ' _ Y C C E \ T A1  Y V ! \ E ’ 1 X6P ! 0B  = 3 M = 
MB:83Hl=VH4Z0,,?AN$9P='Zia'';HIV8X<=,OX$7:(?DHQESC'/WL44O)_0'* 
H3.+1''/N6VHK'';I%>HZ1?EIJD3a\4)*4R0,O.42C4a8;_)<Y42L'''8-VZCB8? 

H89A"  )%  . " ' RF#C$9J  J0a  + #XVVHKi:;_N*G1  F5G.3/CZKL5*1\X79K%:($KDX*3 
M"J=4T4^%5J7>;5PH/>Ha?8;L#%0F,,:PLCE/'_22G-!T:2aWWVAKZ\8#:U.J 
HH3::88<I8"ZU5  = ;%51  ■-!  ! \T'-;=8;KaC8'  ■7a;_5)?S.G8  = CC\\V5?;C<W8 
HMH(3<C;CF7'*T8II?WOKVCi;.(/]'aB/7?HMM)03KHXI[lO,(TNZG  = A".ZA70ai 
M^>NT#K#_?%F8IC8L! 5HE5  '_B+/(\Cal  \ R,ZXLMZY)E_?OK.<\Pa: :'HEH39- 
HAR='aC\>/X_KKJNU:E!5#UL*PE'Ua!_XJ0Y>7;?979R_?/9,LCH%_TH5DZKJ 
M8:68'W4%a-;5#D)PBKXZ?KX8%-J'DFHKC57aU5I_?5U:_*C60lC8C%BW=^\4 
H7KZC>X#1+JV]:a%TVN:NBH1#n7WO/a2''^6:=B0_a0S(J!  = 'W8C2''H  = N8'U1  + 
HGDPG$TY$9SW2%DY83VYKVWCSCWRZK6VNTZiaY16_K>Vi:?:  tU  !+6<WV7A*U*( 
MPWKY9FW8<N$SK2+N6SU+S*UT5O)=?);I0-)"S/)S\6K;O),7C_8C/aWL/3IX 
H?N*8YHF  = H"-  + GX>L\W08:\;  YB,5<?J J A( /*RC . L*0PH?UGT?3<AY:L.X)a:v 

H2#,D\)08IC0DRC>G,0C:/0BT;3V\'?)\,TJZ5';#:);G!,\D#8):,,;')M)) 

MT(38YDYa?!  (6'T)  ' ; 1 3M3_  J A \ 2 C / B%  7 F 7 5 ! > J $ C $3  DM  ( a 3 0 ? % 2 3 D F % J 0 ) aSO 
M"/)?3BK>_NC'‘-;FG-.TO%6NW'VS3+<1:3T9O88A*+a9_40EW$7+SKaM??:U8 
H8%4UL#3VK1 A(A*\5V_<\D#^863C_VG"C65*=?W.XT*FL7N_R,%:K>:%: 2FNF 

H' R-8J#<5-H7,T>%: : C E J " 0 Z 3 ' 8<B_# 0N Y L? 5>B5 KU8 ' = ? D- ' C J R W89 . 3 H W 

HKBH88W/1H53aiVVZP8LV40576GDZ9>.HL:KED3UK.BC8NG/'C*C%CKB,%4F2 
H84?7V"DCVF4I:y2''9)Z:ZY^X4KA1AS,.-<T48S'%3$>;%X<\'G5\/7_S4.?GG 
H20>_2a697_a.CU8/8<_$<HN"a,HL  = Y1H4<CG$PU‘'\6F4D.+0/N8’a''H8HZ3A 
H2/DSH0*\98'I;,JF3.947+3+)a3\R#!E;89D-CF+-') : 8T GU+<4 J C A5 0 . ? D a 
HEN4$2+GHa/'+<8'CRSE2*<YB<HWR<I3#CE.-HPD3#9#28\T9:83%<PFR"_2= 
MCC71BPFTY73:32CWBHY1%[L$3FHaHAI;<\"1(a0N63,_760BE%"K31C0TX-3 
H,FPCa<0"C(05D23330'_N=A0ECN?=C$)WRA27aZN\?<P36!4/FQN;'CBZn#\ 
HYM61VE=;C4U4AFSZ==$*?)A;a<a(FGR93-$Ba8_F\>2?a;^J*?8LRH0JIHCT 

MHaW\GXX)8+J7B574KX<70 . H90;-X/D3C !XA#5;I^'"'=aL'$aCV2EGC0#H8IH 
ME51A  = 54%''E(Ca8BO!CAK'L'8>E'?P)9Y<YT;‘'3.SEZ_4M3!8KTO#  + 8P0W8*'' 
MX0%!$8L(OE;#IR<F!NY:R1BN*TS_H)'83H_5G<;V''CHSADP)SOFN"0N0#/?? 
Ma"Y7'#'W::/0Y('H_  = a0_LTWH%V_  = ?. 3KCa9A_00KK4 J H<<PD / . '>#2Z%*V* 
MYFG$:!A!'S\BH3/72"+;3S;4UK>?8-6$3<D'#SR=aaZ*.-U\34G??',a+BI0 
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MC\D''$)/RJW2:0:7KQ'9QE!'7X"QY+T.aE)YU3IW1)$^I,aRHB30>ZYXX-2*F 

M9'S=!VA$#OPKCQK=Ra:_*KC  = 0,\.6_<V[:D<WH'*‘''IM9-U  = 3P)4''3S''J93a'<Z 

MHS[;XHSH;$2C*Y,L$X7*0W9  = a(/)Z9W7N():. 6MGN^J  L_OV_H  ! WW /Q? ' KUX 

M?0BJ?F  = ;_7( ■ F , C : ] >K " N W A = H 2 5 . 2 J 8 5 ' 9$0 H X = H R R = VMK; 3 ()  I ■ U X ( 0 + 

M([K>/R"+2-$Y<HBD0F_'R75$$"Y5(G2<&(\N;"W5CW?(G:\GK:C1E=66\*8C 

H68<(_'a=F>,39L'#%TD8!'\9B>#NG:*K!"ZZK"2'J'>HR)<3!Ni:>W?R36X*^ 

HI''Y:YN'.a')DX2V%/Z"RI3:2KK$ZF_4'KQ<H\.?30NUY?3HM5>(*-7_9A+8E 

HY\P9F*':TX9+(55?/76RZ/>PaY=/Q3$H2$>7CaF3-TFF,3KHH9=*YTX3AK74 

H/)EUR<UEKS51N,P7G"G?+N>_:6\Z4CBC/M-486#7FBH2Y(3 . % DT A \ V>+T / ) U 

MIXL4TQ0''5UE/i:'P*I)I?CLaP19?0HA>9  + #M#ON1AYCW-/T  = 6?X(D/)>"4Q2; 

M09AKDL?574UZR)?[/^T:+*a22HAAN;C;_G.+UV?KNVR8I/F7Z+R3GXZ?0_A< 

M07?G;T)Y((Y_B;XC?/K9>N:>WX3N<)7_$EUW=/STR=5:9TXaT8\CW;'*\V%* 

M*L?N*.F''Z\"W_X58  = A*9:’O!)9TD0D2$,2FNYQ  + J4:GGl.S0YG/‘!X\(30\la 

H85'OWHQ!G2F3K#""F3NZU)<31''XM:4>'Ra6QU80;0?*T2F/;Z63Y3$S;B''#. 

M?9A,\,FAT:7JA''?62W8VP0H'>\<3JQA%W9S-'DGCFIKHa;1WVZ>$H.1?U2*DW 

HA_\?.6EVVCU'9XJ>/^F1._351'91/'"BF4"JTYY/,''EC$+NC\40N73*RV!6C 

M<WQL8??*U/$ ' 3x:/_GE"-XEa>Eaa:C-E7E7%*ST:AD'N=H9TP3-'\UL\XT(X 

HG8[N'Y">TC$,'3_A0Z<*aU$4988P^X)\3ZTa_1C:)C.68F+')F-_)>_0*a\% 

M6J)UK^''TD'MM7<R3!::^0<_6WGS_G_)KC2.Q*)CYJH-FaE75P/C8,3.A43AG 

MIE7aH\I359U_REQ5U?F'S-<C8*;Z_Ma),\#Z5;;$R!X3GIA!'Y7RZ+:WDB<- 

M0MSa.Y?GD5S\-)<-\0CT;?(<')UE?)627UO8FZ'324$ai"I'',V%1/<6O18>L 

M6Q=7DVHM:H2-#78Y2;>-D%LFVO83O*8EM0(0K';'.#.G-''-78%2%-S/CB\ZB 

Pia3H+XL%72CU+D3ZTRRU)ICG>'6<C?<5.JR+37G6#5BPZaT,P$HE')M-,7_XG 

M;Y3:812E#Y5Q2Q602a+0S/!X#V%HKU78*CP-)JI : 5 5 M J 8 Y8 V 5 P S C BZ Q8+88T 

H"8I$/;p*<*n=\'$a%,F':v7249US'*'.2CaUA8F3DHRR)0<L,6<*'C'(M,a/^ 

MCIX+P0P\#8,?!E?)RZ9)((]9?!:;CF/D/^3^HAX=<;GMJ?61$+(!=8FHL\9R( 

M+X/B"XaCD._"<+)!\6ASP!=W4;\9:G"=H)>U$=Z/H+'$'83#08FN=#>:[C"B 

M2L  = >$L;.I'L0Y*D!*12A$F[F_(JN9,!*'#EZN/k:$W' A = 3 K1 * C # 0M P " a7B ? ( 

M=83<>GaX="!O%VJ_$NCaK4\OO*4.#KnR0$PGN_06I6T$(7+.2S1=:W?>43=# 

M03,0C3CT=><H)!=S/*8TF+;9-')/HO=D'>OB:*7G7D0UWS,J083/XH2U3T\: 

M#!HS4P(8'%;>":[609:sW7LED3:V8'L91Y5Z,:)3'814KP/ZI'2PW9:82*Y> 

MC<+I>$CW$W3a3aLZD'a0/+C"Z%\8=3\/"A.<C$D! '^.$C*T0'>+IT'JIW,7"L 

M!/6'=*0  = I/  C*L!X<5!9.\,UY/)T/Z/5Y>N83WX''Z$324''NCDV1'21HCBUL:H 

M:*:95:5Z*B5GR3F0KA/1,Y+DBB3+06CEA^2!YJITMa3SDa89IB<'Y!52LM'1 

H3'0CHB! PNUP_5N_T0%A'HT0YC)R/R''' '9HC,8L!8EP<7>0T"LGVCAJ98DZ'; 

MMF#9VE4FSUMaa%$SZ6WCHN*V>a0YJG8JD8L_8,E4L$8"#7H3<?V'EC01.6"= 

HLCDWV#4\E(PRU88_C'8PW=Z09O=,FJ2LRYU?>D8BMBZ.ZK!+R)K59A6A5*O- 

M0:683J;=7CMU-I8UE!2\B'9i:O0698AAHHHM;K?;*!_P!F-O53\V)W!)F1P[:% 

HWI#8FEY'CI280T\/CE#W%/#L''.7a%7<-WW9T>\I0$C\/.\N1)9P!51!4RW6H'G 

M8+L-.%9='-'5A!8TB%)(<.J.)RaGKE!,AVC'9"BUEC?FC>=NH5E7WH-)CCDH 

M4Z635WI. RX><_KV;a3 ' H> ' F F U 4 ; #G , 8 X ? 0 ) V E ( 87HH ' 6XE1 F JS7XJ )AH98_ 

M, )02 ' 8>-FJHUZ(M$R5$8a%1 #IA\CIS=*;NA%77PH5" Y6T%43. ai0J8NGaT\/ 
M4"#GJ!8"DD6LPU$XJ_%*/3D/"B\Fa8TNPJXD-Ra4)38#C<2C=P8.L5,'?N>4 
H60!H''F#6_$(>;VA#F='!/-6<)\S3$=aT-TL=NU>0ZX\R=;L)B#Ha"HaD^9$% 
HFU=5'"9T:A#VH'R'<H%(,Ua2N!7*<038!/F"$#8'EW0'\7.6=NF>/C2WX=TU 
M?3\!YM8J-H*<JANO:30H"K5.W*R\KJTT>U63/7'87*WL'S33?/BD<_)BC\5+ 
HZR2H9D?4CB9(C2>M''B,2'‘Z7833RI0X  + aj_WR51K-"CMZ96%-'F01GH5P2?66 
M3FC>#CX'[N+1,OC+Y_ED3J*-S.(CKaFC8,MR9:81>COa%5''RR88D8Ha/09!< 
HIWDR1H,aVDT#<_+7_>=3D28)-3!2S2ZO>,F9IBSF2)E'?)8((8L=L\#6T'(F 

MGV2\I//*#%2!C*3!$H0 %;B1YCE8*C'WNT,L>W=*NWHCLB%*YnBC"#0.''C) 

MC'XWH*6)2/\3WA#T0'9N:#'6DW*LT$-9CEK?S4"-T,D2"9$D._)3(XA%UIEF 
MP2!L5  5i:BSTYa,$Z-3/,:P*)FC<)'/9/7%:-E9.8{E8':)55:a21HKU18F/KH 
M"%8V;(,FI'/RRS_K+J\%68S>06Y;.OUIX.BH+O3SJ;S+:983<:-2K\=)76B$ 
MPE#7E)HIG!3YS#5A*a<FI5>-#EC5.3R>U:39LaR:D'_++/UYG%'9P8"8.D!#. 
M'414N\H3VXVM;=-*((Y-C1a.+a%W'_++/UZE — ":EBJC/K#:''J)<6\YZ;U4' 

MD ! '%\+C##+4EC-5)L8Z0M 'NCF=52+KL8?\SH5M7C.C03;W3! KB-aT ' 24J$aG 
M\V+GA8E9$30U0FN_DC)!-BPn$4V8#BR3'VVXDG%9"7$6/U-B$DW"TOP8#C+K 
MJ'0K2L.8N05A39Y3C-\/F%<N#R_R.0795W59R3E8XBM1 I ; 8 3 LR *4 / + ''<!  G Y> 
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HWBK9N8'R<:!!.8I‘q:5)7,CE$H:)>3  = ;&6,;R:AG4[;3J15^U'F%''Y_2->EUK 
naiC.UEUI D4W,KNJW42F4HXTC/;9%IGS(ZQ*62E)2KV>HN"=M.E9!NQ3:W7D+ 
MN4+043V4SU=_: /CP0Q-V3,T?5G5H=;#2_8$'0?AUl9DU3W$O\O7JZR;:-a>C 

I»I4]P  + _("E  = SD$I20$!58'3<''9+.*'  :J)D6LM7H'  '$P1"D85$P6_V!  'Y[!_876% 

M'ZL#CA6GK!aO09WRZI5)D:"DH/0#L?aC,4>/=%8)Z?C#'RD2?B38D4aAP?F2 
l*l  = )-4B"4M<a>:$V>P"  (XCN/Y3KK($*768HP13R,4  !B<U,  = . :dB.  IQD/R05 
MW?%PDH0TM,N,Ma<,T'SH5%*C(58$DL.+T#4G(8'YF;QOBYW!S,;JRS>48C\D 

M%2:  'E\'C-A#ZB2Y.  (8E'A](4S0%-$_M(#?ORD>O>\Z?PC3\2(''\[:0*2$;#R'' 
MW\/a8  + + Q_(P#IW#82S, )EEZ95  ■TnHM-  = HD8,28S!HaTD%V(*^=!:G9,)/S46 
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